What Gridinsoft observed on Post2all.com
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260903192712-fd0426e3
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Safe
- Evidence basis
- First-party site analysis External vendor intelligence: Contradictory context — not used for this decision
The current reviewed public post2all.com and www.post2all.com deployment has no reproduced basis for the Scam classification. The public login initiation is consistent with the disclosed service.
Analyst findings
Review 4 documented observations View evidence
The apex redirects to www.post2all.com. All 90 unique sitemap URLs returned HTTP 200 and describe social publishing, documentation, tools or policies. About, Contact, Terms and Privacy are available. The reviewed responses and scripts did not identify a phishing receiver, deceptive payment flow, forced download or specific malware payload.
-
HTTP status
200 - Public artifact URL https://www.post2all.com/sitemap.xml
The public login belongs to post2all. Initiating Google sign-in returned accounts.google.com with email, profile and openid scopes and a callback to the same app. Public platform configuration declares provider OAuth endpoints and publishing scopes. Authenticated social-account connections were not completed.
-
Redirect destination
https://accounts.google.com/o/oauth2/v2/auth -
Final URL
https://app.post2all.com/api/auth/callback/google
A March 2023 archived homepage contains unrelated lighting-company content and adult keywords. The current homepage does not reproduce that content. The old product page, article and script paths tested now return HTTP 404; the old About path serves the current post2all page. This historical content is not a current scam or malware sample.
- Public artifact URL https://web.archive.org/web/20230328054103/http://www.post2all.com/
-
HTTP status
404
Repeated apex and www requests under desktop, mobile, Googlebot and Gridinsoft user agents reached the same HTTPS www homepage. Current first-party checks did not reproduce a concrete basis for Scam Website. Domain age, limited reputation and a domain-level vendor category do not identify a malicious resource.
-
Final URL
https://www.post2all.com/ -
HTTP status
200
Scope and limitations
- No account was created, credentials entered, payment made, social account connected or post published. Authenticated behavior and server-side controls were not audited.
- Provider URLs in public configuration establish declared destinations, not successful authorization, approval by those providers or complete implementation correctness.
- Public indexes are incomplete. Detailed urlscan results and URLhaus/ThreatFox required authentication; Common Crawl was unavailable and archive coverage was partial.
- The claimed earlier Kaspersky correction, origin-host restrictions, private security controls and real-world operator identity were not independently verified.
- This assessment covers the observed public deployment at the recorded time, not every private, unlinked, conditional or future object.
Help protect others by sharing this page on social media! The more people who know about post2all.com, the fewer chances they have to deceive someone else. Help others evaluate post2all.com by sharing this page on social media!