What Gridinsoft observed on Ratingfacts.com
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260901232008-c77c1305
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Suspicious Website
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The current Suspicious Website category is retained. The decision is supported independently by active, repeated third-party fund-recovery promotions on unrelated financial-company review pages and by their conflict with the platform's stated reviewer-verification and anti-fraud controls. No specific malware file, phishing payload, automatic download, or harmful execution trace was identified in the reviewed scope; external domain blacklist labels are separate context and did not determine this verdict.
Analyst findings
Review 7 documented observations View evidence
The HTTP apex upgraded to the HTTPS apex, and the www hostname led to the same HTTPS root. The reviewed root flow served the expected RatingFacts platform without an unrelated redirect or automatic download.
-
HTTP status
200 -
Final URL
https://ratingfacts.com/ -
Redirect destination
https://ratingfacts.com/ - Analyst observation No unrelated redirect or automatic download was observed in the reviewed root flow.
Three current financial-company review pages displayed unsolicited third-party fund-recovery promotions. The Bank of America page contained three such reviews. The Bank of America and Navy Federal pages carried identical promotional copy from the same displayed author, timestamped 74 seconds apart; the Experian page carried a closely related promotion from that author later the same hour.
-
HTTP status
200 - Public artifact URL https://ratingfacts.com/reviews/bankofamerica.com
- Public artifact URL https://ratingfacts.com/reviews/navyfederal.org
- Public artifact URL https://ratingfacts.com/reviews/experian.com
- Page element The repeated review promoted an external investigation service for evaluating brokers and pursuing recovery, even though it appeared on unrelated bank and credit-reporting review pages.
- Analyst observation The repeated promotional review remained publicly visible on separate financial-company pages during the current review.
RatingFacts states that it verifies reviewer identities, uses algorithms to detect and remove fraudulent reviews, and combines automated checks with manual moderation. The live cross-listed recovery promotions were not reconciled with those stated controls.
-
HTTP status
200 - Public artifact URL https://ratingfacts.com/security
- Public artifact URL https://ratingfacts.com/about-us
- Page element The Security page presents reviewer verification and removal of fraudulent reviews as active platform controls.
- Page element The About page describes both automated detection and manual moderation of fake reviews.
The sitemap exposed 106,330 review-profile URLs, 106,330 corresponding alternatives URLs, 1,094 category URLs, 631 blog URLs, 79 list URLs, 12 author URLs, and 12 static URLs. A bounded 296-target sample produced 107 successful pages and 552 structured review records before the service rate-limited much of the remaining sample. No executable link or off-domain redirect was found in the successfully reviewed pages.
-
HTTP status
200 - Public artifact URL https://ratingfacts.com/sitemap.xml
- Analyst observation The successful sample covered root/static pages and review, category, blog, author, list, and alternatives namespaces.
- Analyst observation The content-integrity finding was reproduced again through independent requests after the bounded sample.
The public registration and login forms posted to same-origin RatingFacts endpoints and used ordinary name, email, password, agreement, and remember-me fields. No external credential receiver was observed in those reviewed forms.
-
HTTP status
200 - Public artifact URL https://ratingfacts.com/register
- Public artifact URL https://ratingfacts.com/login
- Analyst observation Both reviewed account forms submitted to the same ratingfacts.com origin.
The apex resolved through Cloudflare and presented a currently valid certificate covering ratingfacts.com and its wildcard namespace. These transport facts do not establish the integrity of user-submitted review content.
- DNS fact A records observed: 104.21.65.203 and 172.67.192.53
- Certificate fact Certificate subject ratingfacts.com; SAN ratingfacts.com and *.ratingfacts.com; observed validity July 14 through October 12, 2026.
- Analyst observation Valid HTTPS protects transport but is not evidence that published reviews are trustworthy.
Public archives contained 76 distinct successful root-page captures by content digest from April 2022 through February 2026. The earliest reviewed capture was a parked welcome page; reviewed 2025 and 2026 captures presented RatingFacts as a business-review platform.
- Public artifact URL https://web.archive.org/
- Analyst observation The archived public role changed from a parked page in 2022 to the current review-platform role by 2025.
- Analyst observation No archived malware payload or harmful execution trace was identified in the root snapshots reviewed.
Scope and limitations
- The site exposes more than one hundred thousand review profiles; this was a bounded current sample, not an assertion about every profile or future user submission.
- Rate limiting prevented completion of every target in the initial 296-page sample; the decisive pages were re-requested successfully and the content-integrity issue was reproduced.
- The review did not authenticate reviewer identities, access private moderation records, submit forms, inspect private server files or logs, or assess future content.
- External intelligence sources that required credentials, denied access, or were unavailable were treated as unknown rather than clean.
- The category does not assert that the third-party services named in user reviews committed a crime or that a specific malware payload exists.
Help protect others by sharing this page on social media! The more people who know about ratingfacts.com, the fewer chances they have to deceive someone else. Help others evaluate ratingfacts.com by sharing this page on social media!