What Gridinsoft observed on Ndsa.online
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260822211026-b1d47dc9
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Suspicious Website
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The independent review did not reproduce malware, phishing, an unrelated redirect, or an automatic download. The Suspicious Website classification is nevertheless supported by current first-party evidence: the paid health platform does not identify its legal operator or data controller, does not substantiate its named experts and certification claims, and markets high-stakes physiological analysis capabilities without public validation. This is a trust and potentially misleading-representation assessment, not a claim that a specific malware payload was found.
Analyst findings
Review 9 documented observations View evidence
The homepage and reviewed public pages returned expected same-site content over HTTPS. The HTTP root redirected to the HTTPS root; no unrelated redirect, automatic download, or specific malware payload was observed in the reviewed public flow.
-
HTTP status
200 -
Final URL
https://ndsa.online/ -
Redirect destination
https://ndsa.online/ - Analyst observation No unrelated redirect, automatic download, malicious file, payload, URL, or hash was identified in the reviewed public flow.
The legal notice leaves the operator identity, legal status, SIRET or RCS, registered address, telephone number, publication director, and VAT number as unfilled placeholders. The terms likewise identify the operating legal entity only as an unfilled placeholder.
-
HTTP status
200 - Page element The legal notice displays '[À COMPLÉTER]' placeholders for the operating entity, legal status, SIRET or RCS, address, telephone, publication director, and VAT number.
- Page element The terms define NDSA as a brand operated by an '[À COMPLÉTER — entité juridique]' placeholder.
The site states that it collects identity details, questionnaire answers, assessment results, health-related preferences, purchase history, and login data, but the privacy policy leaves the data-controller legal name and address unfilled. The registration form requests consent to store questionnaire answers for personalized health follow-up.
- Page element The data controller is shown as NDSA followed by '[À COMPLÉTER — Raison sociale et adresse]' and the postal contact is also unfilled.
- Page element The policy lists identity, questionnaire, assessment, health-preference, purchase, access, and navigation data.
- Page element The registration form requests permission to store name, email, and questionnaire answers for personalized follow-up.
The site offers prepaid credits through Stripe and markets paid AI health assessments, consultations, 12-week programs, follow-up, and health-document exports. Public prices range from 4.99 EUR for 10 credits to 69.99 EUR for 450 credits, while services cost up to 450 credits.
- Page element The credits page offers Stripe payment packs from 4.99 EUR to 69.99 EUR.
- Page element Paid services include AI assessments, guided consultations, 12-week programs, follow-up, and health-document exports, with a complete program priced at 450 credits.
The site names seven people as specialists, including a neuroscientist, nutritionist, preventive physician, and other health experts, and repeatedly describes its experts as certified. The reviewed public pages provide no biographies, professional registration identifiers, certificate issuers, institutional affiliations, or other verifiable credential details for those representations.
- Page element The experts page names seven individuals and assigns health or scientific titles to each.
- Page element The site footer states that follow-up is provided by certified experts.
- Analyst observation No professional registration number, certificate issuer, institutional affiliation, or credential-verification link was present on the reviewed public expert pages.
Public product pages market questionnaire and AI outputs as analysis of eight neurotransmitters, detection of neurochemical imbalance, sleep disorders, nutritional deficiencies, silent health imbalances, biological age, biomarkers, and senescence accelerators. Other site text states that the services are informational and are not medical diagnoses.
- Page element NeuronProfil markets analysis of eight neurotransmitters and detection of neurochemical imbalance from questionnaire and AI analysis.
- Page element Other expert pages market detection of sleep disorders, nutritional deficiencies, silent imbalances, biological age, biomarkers, and senescence accelerators.
- Page element The terms and product pages also state that outputs are informational and do not constitute medical diagnosis or advice.
The domain was registered on 13 July 2026. Current DNS resolves to a Netcup-hosted address in Germany, and mail is handled by Infomaniak. The infrastructure facts support site availability but do not verify the operator, experts, or health-service claims.
- DNS fact RDAP registration date: 2026-07-13; registrar: Infomaniak Network SA.
- DNS fact A record: 159.195.215.32; the RIPE allocation is NETCUP KVM in Germany.
- DNS fact MX: mta-gw.infomaniak.ch; nameservers: nsany1.infomaniak.com and nsany2.infomaniak.com.
The reviewed host used a valid Let's Encrypt certificate and TLS 1.3. Transport encryption confirms the connection to the host but does not establish the truth of the site's commercial or professional representations.
- Certificate fact Let's Encrypt YE2 certificate valid from 2026-07-22T13:33:02Z through 2026-10-20T13:33:01Z.
- Certificate fact Certificate names: ndsa.online, www.ndsa.online, and neuroprofil.ndsa.online; TLS 1.3 was negotiated.
Public index and archive checks found a very limited current footprint. URLScan and AlienVault OTX returned no exact-domain records, the Wayback CDX query returned no current HTML snapshot, and exact-brand searches did not establish an independently verifiable business identity or the claimed expert affiliations.
- Analyst observation URLScan exact-domain result count: 0; AlienVault OTX pulse count: 0.
- Analyst observation Wayback CDX returned no matching current HTML snapshot for the reviewed domain.
- Analyst observation Exact-brand and exact-domain public searches did not establish the current operator identity or affiliations for the named experts.
Scope and limitations
- The review covered publicly accessible pages and forms without creating an account, making a payment, or submitting health information.
- No conclusion is made about private account behavior, server-side code, or services available only after purchase.
- A lack of public credential evidence does not prove that a named person or qualification is fictitious; it means the site's claims could not be independently verified from the reviewed material.
- External blacklist and scanner results were recorded only as context and were not used to determine the verdict.
Help protect others by sharing this page on social media! The more people who know about ndsa.online, the fewer chances they have to deceive someone else. Help others evaluate ndsa.online by sharing this page on social media!