What Gridinsoft observed on sportsvot[.]com
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20261022021639-49a8fa50
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Suspicious Website
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The delivered code enables additional advertising tabs on ordinary link clicks independently of push-notification consent. This supports a cautionary classification for potentially unwanted advertising. Phishing, malware delivery and actual harmful advertising destinations were not established by this review.
Analyst findings
Review 4 documented observations View evidence
sportsvot[.]com and www.sportsvot[.]com returned sports-news pages with HTTP 200. The reviewed article and About page also returned news content. The privacy page describes Pushub advertising and targeted push notifications; advertising scripts are present in the homepage.
-
HTTP status
200 - Public artifact URL hxxps://www[.]sportsvot[.]com/
- Public artifact URL hxxps://sportsvot[.]com/2026-world-cup-fan-guide
- Public artifact URL hxxps://sportsvot[.]com/privacy-policy
The homepage loads an advertising SDK whose current configuration enables pop-ups on ordinary links. Its pop.js module listens for link clicks and uses window.open to open a separate advertising tab through t.dlserve.ai. Startup invokes this module before checking notification permission. This is a static-code finding; an actual pop-up and its final destination were not reproduced.
- Public artifact URL hxxps://cdn[.]dlserve[.]ai/sdk/f6f27d84-4a15-4ed6-976b-cd11cc20c288.js
- File SHA-256 af3fd4450fe1f9ab2bb47322ddfa3084838e7712f56721dce036df6633265fdd
- Public artifact URL hxxps://cdn[.]dlserve[.]ai/sdk/pop.js
- File SHA-256 788d7baa166ac715637291eef124431d97203d287b74df41b3d3acb19a1c5a8b
Public URL-scan records show newsvot.com and sportsvot[.]com articles as destinations of advertising redirect chains. Recent records also involve live.sportsvot[.]com, a separate host. A phishing-related submission tag on an unrelated starting URL does not establish phishing on the final news page. The reviewed records did not establish an exact malware sample or credential-theft page on sportsvot[.]com.
- Public artifact URL hxxps://urlscan[.]io/result/019d4471-7a6c-71fb-942d-50e2bac721ab/
- Public artifact URL hxxps://urlscan[.]io/result/019debd3-9225-74fa-bdbc-d7b3dadcde5d/
- Public artifact URL hxxps://urlscan[.]io/result/01a16057-f9a5-728c-bd5e-060e47e90888/
An archived newsvot.com homepage dated 28 July 2026 contains news sections and advertising integration. This establishes historical publishing activity on that related domain, not an earlier compromise or the safety of current campaigns. The reviewed archive evidence did not establish historical malicious content on sportsvot[.]com.
- Public artifact URL hxxps://web[.]archive[.]org/web/20260728161228/hxxps://newsvot[.]com/
Scope and limitations
- This was a live HTTP and static-script review, not an interactive browser execution or malware sandbox run. Actual pop-up activation and final advertising destinations were not reproduced.
- Notification permission was not granted. Future advertisements, all campaigns and content on separate subdomains were not assessed.
- The newsvot.com archive and separate live.newsvot.com or live.sportsvot[.]com services do not establish the current safety or harmfulness of each other. Current newsvot.com content was not independently assessed.
Help protect others by sharing this page on social media! The more people who know about sportsvot.com, the fewer chances they have to deceive someone else. Help others evaluate sportsvot.com by sharing this page on social media!