What Gridinsoft observed on sandcastlelessons.com
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20261014151809-58e7aaa2
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Inconclusive
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The stated public observations do not establish a specific current harmful object. The conclusion is limited to the assessed scope; unseen content and services are not certified.
Analyst findings
Review 2 documented observations View evidence
Both hosts served the South Padre Island sandcastle-lessons website. Contact and lesson pages returned HTTP 200 with same-site enquiry forms and a FareHarbor booking link. The public HTML and 31 referenced combined scripts were reviewed; base64 decoding served settings/cookies and dynamic function construction served templates, not a reproduced malicious loader. No current harmful object was reproduced in this scope. The claimed plugin/backdoor removal, password reset and Wordfence results were not independently authenticated. Private administration, server files, payments and actual lesson delivery were not audited.
- Public artifact URL https://sandcastlelessons.com/
- Public artifact URL https://www.sandcastlelessons.com/
- Public artifact URL https://sandcastlelessons.com/contact-us/
- Public artifact URL https://sandcastlelessons.com/sand-castle-lessons-south-padre-island/
Public indexes, URL-scanner records, threat-intelligence and archive searches were checked for the exact hosts and parent where relevant. Domain-level labels are context, not a reproduced harmful object; failed or empty searches do not establish safety.
- Analyst observation sandcastlelessons.com | scanner_index | 200
- Analyst observation sandcastlelessons.com | threat_intelligence | 200
- Analyst observation sandcastlelessons.com | archive_index | 200
- Analyst observation sandcastlelessons.com | scanner_index | 200
- Analyst observation sandcastlelessons.com | threat_intelligence | 200
- Analyst observation sandcastlelessons.com | archive_index | Unavailable
Scope and limitations
- Only the listed public objects were assessed. Interactive browser-only flows, private accounts, transactions, server files and complete executable binaries were not audited; business, product and cleanup claims and completion of third-party feed updates are not independently certified.
Help protect others by sharing this page on social media! The more people who know about sandcastlelessons.com, the fewer chances they have to deceive someone else. Help others evaluate sandcastlelessons.com by sharing this page on social media!