Independent Gridinsoft analysis
What Gridinsoft observed on whacka.app
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
Current review
Review ID
GMA-20261021052336-098e2493
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Inconclusive
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The reviewed operator pages do not support the broad Suspicious Website detection. The evidence does not substantiate that detection for the apex and www. The overall user-controlled namespace remains inconclusive; this does not clear every hosted app.
Analyst findings
Review 1 documented observation View evidence
The apex and www returned the Whacka app-builder site over HTTPS. The public security, privacy and terms pages describe user-created apps, account authentication and Stripe payments. No phishing form or harmful redirect was reproduced in these public pages. Published security promises were not independently tested.
- Public artifact URL https://whacka.app/
- Public artifact URL https://www.whacka.app/
- Public artifact URL https://whacka.app/security
- Public artifact URL https://whacka.app/privacy
- Public artifact URL https://whacka.app/terms
Scope and limitations
- No authenticated functions, API behavior, generated apps, hosted user content, payments or backend security were tested. Individual user-controlled objects need their own review.
Help protect others by sharing this page on social media! The more people who know about whacka.app, the fewer chances they have to deceive someone else. Help others evaluate whacka.app by sharing this page on social media!