What Gridinsoft observed on Whowinsai.com
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260903192821-598f92f0
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Safe
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The current public deployment supports removal of the unsupported Phishing detection. This decision follows from the inspected site, forms, code and public community content, not external vendor approval. It describes the reviewed state, not a guarantee for future user submissions.
Analyst findings
Review 3 documented observations View evidence
The apex and www host returned the same character-battle entertainment site. HTTP redirected to HTTPS on the apex. About, character, recent-match and battle-explanation pages were consistent with that purpose. Inspected battle requests used a same-origin endpoint; export code created image and video files, not an observed executable payload.
-
HTTP status
200 -
Final URL
https://whowinsai.com/ - Page element /battle.php
- Analyst observation Inspected export code uses PNG images and locally created video blobs. No specific malware file was identified.
The public battle page had no password form. Separate community login and registration pages did request a username and password, with password confirmation during registration. Both forms posted to their own current HTTPS page. No banking fields, unrelated credential receiver or impersonated third-party sign-in was found in the inspected pages.
- Public artifact URL https://whowinsai.com/login.php
- Public artifact URL https://whowinsai.com/register.php
- Analyst observation Both account forms use POST with no external action; account data was not submitted.
All 9 publicly listed forum sections and their 17 distinct listed threads were retrieved. They contained character discussions, suggestions and development updates, without external hyperlinks; inspected inline voting code used a same-origin endpoint. The public fusion gallery showed 0 entries. The available 2026-08-14 archive snapshot also showed the character-battle service.
- Public artifact URL https://whowinsai.com/forum.php
- Public artifact URL https://whowinsai.com/fusion_gallery.php
- Public artifact URL https://web.archive.org/web/20260814103919/https://whowinsai.com/
Scope and limitations
- No account was created, credentials submitted, private content accessed or server-side code audited. Client code was inspected, not exercised through every interactive battle and export flow.
- The public forum was enumerated as currently listed; hidden, deleted and future user submissions are outside this review. Traffic volume and user satisfaction were not independently verified.
- Public indexes and archives are incomplete. One archive snapshot was retrieved; the broader archive index was unavailable. Authentication and browser challenges prevented some external intelligence checks.
Help protect others by sharing this page on social media! The more people who know about whowinsai.com, the fewer chances they have to deceive someone else. Help others evaluate whowinsai.com by sharing this page on social media!