What Gridinsoft observed on pointsharvest.com
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20261101232609-bc206aa4
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Safe
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The bounded public-website review did not reproduce phishing or malware. This result does not certify the extension’s release packages, every source file or Microsoft-account safety.
Analyst findings
Review 3 documented observations View evidence
The root and www addresses serve an independent browser-extension website. The inspected gift-card article discusses reward redemption; it does not ask for card numbers or PINs. No phishing form or malicious payload was reproduced in these public pages.
-
HTTP status
200 - Public artifact URL https://pointsharvest.com/blog/redeem-microsoft-rewards-points/
The site links the public repository, which links back to the site. The inspected manifest requests browser-tab and debugger access. Selected source automates Bing interactions and checks a version file. The site disclaims Microsoft affiliation and warns of account or points consequences.
- Public artifact URL https://github.com/landkirk/PointsHarvest/tree/028286141105bbda84649b560500dc67f50aec1e
- Public artifact URL https://pointsharvest.com/terms.html
The privacy page’s permission list omits the debugger permission present in the inspected manifest. Its website-analytics denial also conflicts with the Cloudflare Insights beacon in the live HTML. These disclosures need clarification; neither discrepancy establishes malware.
- Public artifact URL https://pointsharvest.com/privacy.html
- Public artifact URL https://raw.githubusercontent.com/landkirk/PointsHarvest/028286141105bbda84649b560500dc67f50aec1e/manifest.json
Scope and limitations
- No extension package was downloaded, installed or executed, and its equivalence to the inspected source was not tested.
- Only selected published source components were reviewed; no Microsoft login, reward collection or redemption was performed.
- Reward amounts, policy compliance, privacy claims and historical cleanliness were not certified.
Help protect others by sharing this page on social media! The more people who know about pointsharvest.com, the fewer chances they have to deceive someone else. Help others evaluate pointsharvest.com by sharing this page on social media!