betboxwinar[.]com

This domain, betboxwinar.com, is flagged as a high-risk generic phishing threat that remains active as of July 12, 2026. Registered on May 15, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain resolves to IP address 104.21.37.13 and is hosted behind Cloudflare, utilizing Google Trust Services SSL certificate. The page title detected is 'Jeetbuzz123 Bangladesh - MSC Cruzeiros Brasil,' suggesting the site attempts to impersonate or reference multiple entities, though the exact brand or service being phished is not confirmed from the available data. Infrastructure analysis reveals the domain runs WordPress with MySQL, PHP, and Yoast SEO, along with jQuery and Cloudflare Browser Insights. Security intelligence shows 5 out of 95 vendors on VirusTotal flagged the domain as malicious, and it appears on 2 security blocklists (PhishDestroy and BLP-Malware). AlienVault OTX lists the domain in 16 threat intelligence pulses, and Gridinsoft gives it a trust score of 0 out of 100. What is uncertain is the specific phishing scheme—whether it targets betting platforms, cruise services, or general credential harvesting—as the page content was not fully examined. Defenders should block the domain at network and email gateways, monitor for related subdomains or IPs, and check for any user reports of phishing campaigns leveraging this domain. Given the low trust score, multiple vendor detections, and appearance in threat intelligence pulses, this domain poses a credible risk and warrants immediate attention.