What Gridinsoft observed on usana.fit
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20261021150805-fb01880c
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Safe
- Evidence basis
- First-party site analysis External vendor intelligence: Contradictory context — not used for this decision
No phishing, malicious download or deceptive redirect was reproduced in the reviewed public interface and client code. This scoped website-security assessment does not validate medical advice or cloud confidentiality.
Analyst findings
Review 5 documented observations View evidence
The homepage and opened brand, health-archive and dealer panels presented a Chinese nutrition-product advisor. The footer explicitly identifies an unofficial USANA dealer service and states that supplements do not replace medical treatment. No unrelated redirect or automatic download occurred in these flows.
-
HTTP status
200 -
Final URL
https://usana.fit/ - Page element The footer discloses that this is not the official USANA Health Sciences website.
The dealer panel requests a service-specific code and PIN. Its client handler sends them to the same site. Health-report analysis uses same-site APIs, while saved-plan code includes Supabase cloud synchronization. The interface advertises health uploads and cloud archives, but no dedicated privacy notice was visible in the reviewed panels. Code inspection does not establish actual server handling or access controls.
- Public artifact URL https://usana.fit/assets/index-FCc4t0v3.js
- Analyst observation No credentials, health documents or personal details were submitted. No third-party account-password or payment-card collection was observed in the reviewed forms.
The submitted hostname is also the registrable parent, usana.fit. It resolved and served the reviewed application. The exact alias www.usana.fit returned NXDOMAIN and supplied no content. The inaccessible-alias result does not describe another service or prove harmful behavior.
- DNS fact usana.fit: DNS response status 0; www.usana.fit: DNS response status 3 (NXDOMAIN).
The available VirusTotal snapshot dated 2026-10-21 lists alphaMountain.ai, Forcepoint ThreatSeeker and SOCRadar as phishing, using blacklist methods (3/91). Four OTX pulses all come from PhishDestroy, so they are one publisher's repeated listings. The OTX malware section returned no samples. The available Avira and Norton ratings are also external assessments, not behavior reproduced in this review.
- Public artifact URL https://www.virustotal.com/gui/domain/usana.fit/detection
- Public artifact URL https://otx.alienvault.com/indicator/domain/usana.fit
- Analyst observation Avira: Scam; Norton Safe Web: malicious. Direct public VirusTotal and URLQuery lookups returned HTTP 429; the dated available snapshot is distinguished from those failed lookups.
Public-index searches covered usana.fit and www.usana.fit. The urlscan search returned zero results within its stated 30-day search window. A Cloudflare Radar scan from 2026-08-18 reports no classified risks or security violations. No usable Wayback or Arquivo snapshot was obtained; ThreatFox presented a browser challenge. None of these limited checks proves a clean history.
- Public artifact URL https://radar.cloudflare.com/scan/1f854953-ad5c-4c5d-bea4-92fd9ec21d1e/security
- Analyst observation No concrete malware file, malicious payload hash or URL with reproduced harmful behavior was obtained in this investigation. Domain-level warnings remain distinct from such evidence.
Scope and limitations
- No consultation, upload, payment or authenticated dealer workflow was completed. Cloud permissions, backend processing and generated AI recommendations were not audited.
- Brand affiliation, product efficacy, medical accuracy and the displayed registration claims were not independently certified.
- The result concerns the recorded public scope and time. It does not certify past versions, unavailable www content or future behavior; external warnings may persist.
Help protect others by sharing this page on social media! The more people who know about usana.fit, the fewer chances they have to deceive someone else. Help others evaluate usana.fit by sharing this page on social media!