box-portal[.]digital
“Box Portal QA Academy | Software Testing”
The domain box-portal.digital is currently flagged as a high-risk phishing threat with a unique seed of 9a5483. This domain was created on March 4, 2026, and is still active. The page title displayed on the site is 'Box Portal QA Academy | Software Testing', which suggests a potential impersonation of legitimate educational content. Analysis shows that this domain resolves to the IP address 104.21.87.110, which is protected by Cloudflare and supports HTTP/3 technology. The SSL certificate is issued by Google Trust Services, indicating that the site has a valid certificate, which is often a tactic used by phishing sites to appear more credible. The domain has a very low trust score of 0 out of 100 according to Gridinsoft, reinforcing its classification as a malicious entity.
Intelligence collected from AlienVault OTX reveals that box-portal.digital has been identified in 23 threat intelligence pulses, indicating a repeated recognition of its malicious nature across security platforms. Furthermore, the domain is listed on four separate security blocklists and has been flagged by six out of 95 security vendors on VirusTotal, showcasing a consensus among security experts regarding its dangerous status. The domain has also been blocked by various security measures including SEAL, MetaMask, PhishDestroy, and BLP-Malware, reflecting its widespread recognition as a threat.
Given the evidence, defenders should be aware of the high risk posed by this domain and take proactive measures to block access to it within their networks. It is critical to educate users about the risks of engaging with domains like box-portal.digital and to implement security measures that will filter out such threats. Continuous monitoring and updating of threat intelligence sources are also recommended to stay ahead of evolving phishing tactics.
Network Security Intelligence
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | box-portal.digital |
malicious | Sinkholed |
| Hagezi Threat Feed | box-portal.digital |
malicious | Sinkholed |
| DNS4EU | box-portal.digital |
malicious | Sinkholed |
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 2 identified
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal Analysis
Archived Evidence
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of box-portal.digital · checked Jul 12, 2026
Evidence & External Reports
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive