What Gridinsoft observed on Rezexproof.com
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260824204915-701deefb
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Suspicious Website
- Evidence basis
- First-party site analysis External vendor intelligence: Context only โ not used for this decision
The parent site is legitimate in the reviewed root flow, but a linked product subdomain remains actively contaminated with injected hidden gambling and backlink content. The current evidence supports Suspicious Website, not the broader Phishing classification, and does not support a domain-wide Safe verdict.
Analyst findings
Review 4 documented observations View evidence
The parent homepage returned the expected Turkish industrial-products site with a stable response across three user-agent profiles and no unrelated redirect.
-
HTTP status
200 -
Final URL
https://rezexproof.com/ - Page element Title: Rezex Proof โ Ex Proof Elektrik Malzemeleri
The product subdomain still returned extensive injected gambling and backlink content, including many links placed in off-screen absolute-positioned elements. A cache-busting request produced a fresh cache miss with the same class of injected content, so the observation was not limited to an old cached homepage.
-
HTTP status
200 -
Final URL
https://urunler.rezexproof.com/ - Page element Off-screen blocks used large negative left offsets and linked unrelated casino, betting, and compromised-site destinations.
- Analyst observation A fresh cache-miss response contained more than 200 absolute-positioned link blocks and repeated casino, 1xBet, and Mostbet text.
The reviewed homepage responses did not present a password-entry form, impersonated account-login flow, unrelated redirect, or automatic file download. Three previously indexed spam article paths now returned HTTP 404.
- Analyst observation No password input or credential-collection form was identified in the reviewed homepage HTML.
- Analyst observation No specific malware file, payload, URL, or hash was identified in the reviewed flow.
-
HTTP status
404
Public archive snapshots documented the established industrial-products site before the current injected homepage state. The reviewed March 2026 subdomain snapshot did not contain the current casino or betting terms.
- Public artifact URL https://web.archive.org/web/20260331082408/https://urunler.rezexproof.com/
- Analyst observation The reviewed archived homepage did not reproduce the current casino, 1xBet, or Mostbet text.
Scope and limitations
- The review covered the public parent homepage, the product-subdomain homepage, three indexed spam paths, redirect behavior, forms, DNS, and selected public archive snapshots; it did not inspect the server filesystem or database.
- The absence of a specific phishing form or malware payload in the reviewed responses does not prove that every URL or historical request path was safe.
Help protect others by sharing this page on social media! The more people who know about rezexproof.com, the fewer chances they have to deceive someone else. Help others evaluate rezexproof.com by sharing this page on social media!