What Gridinsoft observed on satoshi.cx
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260825191823-c3d6f531
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Safe
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The current independent first-party review did not reproduce malware delivery, credential phishing, an unrelated redirect, or another concrete harmful object in the reviewed public scope. The remaining operator-disclosure and contact-page weaknesses do not provide a sufficient current basis for the prior Suspicious Website classification. Gridinsoft therefore removed its detection and the current report shows Safe.
Analyst findings
Review 5 documented observations View evidence
The homepage returned HTTP 200 and presented a cryptocurrency exchange interface with exchange directions, amount fields, site rules, an AML/KYC policy, and a support address. The reviewed public responses and navigation remained on the expected site and did not reproduce a brand-impersonating credential form, an unrelated redirect, or an automatic executable download.
-
HTTP status
200 -
Final URL
https://satoshi.cx/ - Page element Cryptocurrency exchange - Satoshi
- Page element SITE RULES
- Page element AML | KYC POLICY
- Analyst observation No specific malicious file, payload, payload URL, or hash was found in the reviewed public scope.
The plain-HTTP entry point redirected to the same-domain HTTPS homepage and returned the expected exchange-service content.
-
Redirect destination
https://satoshi.cx/ -
HTTP status
200 - Analyst observation The observed redirect remained on satoshi.cx and did not change to an unrelated destination.
The Site Rules and AML/KYC policy were reachable and described the exchange service, order handling, transaction review, and refund conditions. The Site Rules identify Satoshi.cx as a trademark and commercial name rather than naming a legal operating entity.
-
HTTP status
200 - Public artifact URL https://satoshi.cx/tos-2
- Public artifact URL https://satoshi.cx/aml-kyc-politika
- Page element Satoshi.cx — a trademark and commercial name of the system
A support email remained visible on the homepage. The generic /contact and /privacy routes returned HTTP 404, while the sitemap-listed /feedback page returned HTTP 200 but rendered the literal [contact_form] placeholder instead of a working form.
- Page element [email protected]
- Public artifact URL https://satoshi.cx/contact
-
HTTP status
404 - Public artifact URL https://satoshi.cx/privacy
-
HTTP status
404 - Public artifact URL https://satoshi.cx/feedback
-
HTTP status
200 - Page element [contact_form]
DNS, HTTPS, and mail routing were operational. The certificate covered satoshi.cx and its subdomains and was valid through November 7, 2026.
- DNS fact A records observed: 104.21.3.150 and 172.67.130.226.
- DNS fact MX record directed mail to smtp.google.com.
- Certificate fact Certificate subject CN=satoshi.cx; SAN includes satoshi.cx and *.satoshi.cx; valid through 2026-11-07.
Scope and limitations
- The result applies to the public exchange interface, policies, redirects, forms, DNS, TLS, and client-delivered content reviewed at the recorded time.
- The review did not submit an exchange order, transfer funds, complete AML/KYC, or independently establish the real-world identity or regulatory status of the operator.
- The Safe result describes the reviewed current Gridinsoft report and public scope; it is not a guarantee about every future page, transaction, or site state.
- External reputation results and third-party business listings were recorded only as separate context and did not determine this verdict.
Help protect others by sharing this page on social media! The more people who know about satoshi.cx, the fewer chances they have to deceive someone else. Help others evaluate satoshi.cx by sharing this page on social media!