What Gridinsoft observed on nayakenya.org
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260903174041-80d67bd9
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Safe
- Evidence basis
- First-party site analysis External vendor intelligence: Contradictory context — not used for this decision
The independent current review classifies the public nayakenya.org root deployment as Safe. The apex redirected only to its same-site www host, the reviewed pages consistently represented the established Network for Adolescent and Youth of Africa, and the current HTML and scripts did not reproduce phishing, credential theft, harmful redirection, malware delivery, or a specific malicious object. Public history documents unrelated content on the former hosting before the rebuild, while external warnings remain broad blacklist context and do not support a current phishing verdict for the reviewed deployment.
Analyst findings
Review 5 documented observations View evidence
A fresh Gridinsoft scan reached the root over an HTTP 307 same-site redirect to https://www.nayakenya.org/ and obtained the current NAYA landing page. The page identified the Network for Adolescent and Youth of Africa and described a security rebuild after earlier phishing attempts. The fresh scan exposed no positive current behavior signal for the reviewed root deployment.
-
HTTP status
307 -
Final URL
https://www.nayakenya.org/ -
Redirect destination
https://www.nayakenya.org/ - Page element Title: NAYA — Network for Adolescent and Youth of Africa
- Page element Description: Official NAYA landing page with verified communications and a secure rebuild experience.
- Analyst observation The fresh root scan contained no positive current behavior signal.
The homepage, data-protection policy, and two current programme-opportunity pages returned HTTP 200 with coherent NAYA youth-health advocacy content. Requests from two networks using desktop, mobile, crawler, and command-line profiles returned the same root document. The reviewed pages contained no sign-in form, password field, one-time-code request, payment collection, embedded frame, or unrelated content.
-
HTTP status
200 - Public artifact URL https://www.nayakenya.org/
- Public artifact URL https://www.nayakenya.org/privacy
- Public artifact URL https://www.nayakenya.org/news/consultancy-menstrual-health-microsite-design-development
- Public artifact URL https://www.nayakenya.org/news/consultancy-menstrual-products-fiscal-reform
- Analyst observation Desktop, mobile, crawler, and command-line profiles from two networks returned the same root document.
- Analyst observation No sign-in form, password field, one-time-code request, payment collection, embedded frame, or unrelated page content was observed.
The current root loaded nine same-site Next.js JavaScript chunks. Their application-specific destinations were limited to same-site news and privacy pages plus clearly labeled NAYA document, map, and social-media links. No automatic unrelated redirect, executable or archive delivery reference, credential-collection workflow, wallet request, operating-system command, or harmful payload behavior was identified in the reviewed public HTML and scripts.
- Page element Nine JavaScript chunks were loaded from the same www.nayakenya.org origin.
- Page element Application links led to same-site news and privacy pages and clearly labeled NAYA document, map, and social-media destinations.
- Analyst observation No automatic unrelated redirect, executable or archive delivery reference, credential-collection workflow, wallet request, operating-system command, or harmful payload behavior was identified.
The parent root resolved to the current Vercel deployment, and www.nayakenya.org resolved through Vercel DNS. Their current certificates covered the exact served names. The active menstrualhealth.nayakenya.org microsite resolved separately through Microsoft Azure Websites and returned its NAYA and UNFPA content over HTTP 200. The additional hostname www.menstrualhealth.nayakenya.org shown in one warning screenshot did not resolve through any of four public resolvers and was not treated as the same current object.
- DNS fact nayakenya.org A 216.198.79.1
- DNS fact www.nayakenya.org CNAME 923d369bae2f0b20.vercel-dns-017.com
- Certificate fact nayakenya.org certificate valid 2026-08-19 through 2026-11-17.
- Certificate fact www.nayakenya.org certificate valid 2026-08-17 through 2026-11-15.
- DNS fact menstrualhealth.nayakenya.org resolved through Microsoft Azure Websites to 20.119.0.19.
-
HTTP status
200 - DNS fact www.menstrualhealth.nayakenya.org did not resolve through the four reviewed public resolvers.
The public urlscan index returned ten parent-domain records. Two records from 2026-03-30 and 2026-04-01 showed unrelated Bets10 gambling content on the former 70.32.23.90 hosting address, while the 2026-07-01 record showed the current NAYA page on Vercel. A separate public archive preserved Naya Kenya root content in three 2020 snapshots. Public searches exposed no indexed exact-host sandbox report for menstrualhealth.nayakenya.org, and OpenPhish, OTX pulse data, and accessible OTX URL data did not identify a current exact phishing object on the reviewed root or microsite. The historical foreign content is evidence of an earlier parent-site compromise, not a current credential-theft or malware sample from the rebuilt deployment.
- Public artifact URL https://urlscan.io/result/019d3f03-8393-710f-b4b8-98ef0739dd6c/
- Public artifact URL https://urlscan.io/result/019d4859-ed96-75a9-9de2-6c6baa93f037/
- Public artifact URL https://urlscan.io/result/019f1ed8-a536-7319-930e-c78301500407/
- Public artifact URL https://arquivo.pt/wayback/20200125212453id_/https://nayakenya.org/
- Analyst observation The March and April urlscan records showed unrelated Bets10 content on former hosting; the July record showed NAYA content on Vercel.
- Analyst observation Public search, URL-scanner, sandbox, threat-intelligence, and archive results did not identify a current exact URL, credential receiver, malware file, payload, or harmful hash on the rebuilt root deployment.
Scope and limitations
- This is a point-in-time verdict for the public nayakenya.org root and its served www destination, with the named menstrual-health host checked for relevance; it does not certify every other subdomain, private route, or future deployment.
- No form was submitted because the reviewed root pages exposed no public submission form. Private hosting files, email, administrative systems, databases, logs, and authenticated state were not inspected.
- Clearly labeled third-party document, map, and social-media destinations were identified but were not treated as content controlled by the reviewed root and were not fully executed.
- Public search, URL-scanner, sandbox, threat-intelligence, certificate, and archive indexes are finite. Authentication-restricted or temporarily unavailable sources were treated as unknown rather than clean.
- External vendors may retain independently managed blacklist records after a hosting rebuild; those records are not evidence of a currently reproduced payload on the reviewed root.
Help protect others by sharing this page on social media! The more people who know about nayakenya.org, the fewer chances they have to deceive someone else. Help others evaluate nayakenya.org by sharing this page on social media!