portal[.]pkim[.]gallezone[.]lk

The domain portal.pkim.gallezone.lk presented a page titled "Share Point Online" but was identified as an impersonation of the Dropbox brand. This site posed a threat by attempting to deceive users into believing they were accessing a legitimate Dropbox service, likely to harvest credentials or personal information through a phishing attack.

Technical evidence from the provided data shows that VirusTotal detected 23 out of 95 vendors flagged this site as malicious. The site was hosted on IP address 192.185.171.109, located in the United States, under AS19871 Network Solutions, LLC. No SSL certificate was present, and the nameservers were reported as NS_NOT_FOUND. The domain risk score from DOM is 10, and GridinSoft trust rating is 0 out of 100.

The current status of the site is DOWN/OFFLINE. The risk level is high, as indicated by the 23/95 VirusTotal detections, a 0/100 trust score, and inclusion on two blocklists. The site was flagged by several security vendors including ADMINUSLabs, alphaMountain.ai, BitDefender, Certego, and CRDF.