box.net

Observed 2026-07-13T22:13:02.454Z (20h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Email byProofpoint

Registered withMarkMonitor Inc.

Also usesGoogle Search Console

IPv6 · 93 subdomains · tranco_5k

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat box.net actually stands on - every host below is a signed observation

box.net

A / AAAA

74.112.186.1562620:117:bff0:118::

Cloudflareserves the site

dns4.p09.nsone.netdns2.p09.nsone.netns03.box-ns.comdns3.p09.nsone.net+4 more

nsone.net + box-ns.comanswers its DNS

mxa-00172704.gslb.pphosted.commxb-00172704.gslb.pphosted.com

Proofpointreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.box.com/

HTTP status301

Servercloudflare

TLS protocolHTTP/3

TLS issuernot observed

Behind Cloudflareyes

Response time78 ms

DNS resolutionNOERROR

Redirect chain

https://www.box.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

74.112.186.156

AAAA 1

2620:117:bff0:118::

MX 2

10mxa-00172704.gslb.pphosted.com
10mxb-00172704.gslb.pphosted.com

TXT 6

_luxhbz17a9cz6j8udbhe1fd6vzsqn3i
google-site-verification=IbB5H5lwrpPZ3xyw7EV2B4LufGyOph_6-zj2jhE5pNY
v=spf1 ip4:74.112.184.0/22 ip4:107.152.16.0/20 include:_spf.google.com include:sendgrid.net ~all
v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com,mailto:box@rua.agari.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com,mailto:box@ruf.agari.com;
v=DKIM1; (detected)
v=DNSSEC1; (detected)

NS 8

dns4.p09.nsone.net
dns2.p09.nsone.net
ns03.box-ns.com
dns3.p09.nsone.net
ns02.box-ns.com
ns04.box-ns.com
dns1.p09.nsone.net
ns01.box-ns.com

SOA 1

dns1.p09.nsone.net hostmaster.nsone.net

TLS Certificates (0)

None.

Subdomains (93)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for box.net. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/box.net">
  <img src="https://domaindrift.io/badge/box.net.svg"
       width="300" height="64" alt="DomainDrift signed observations for box.net">
</a>

Ed25519 Receipt

Receipt ID: d55bf677-a203-425f-b07d-39ed9743420b
Output Hash: ce547fc16651ab6cc8cd230e08845c694f0d989fcff686cd04485dbce2d432ea
Signature: ed25519:524b86c98a891f69eabd4fe345cc89dc494816f051261075cfb1e21dc283889443e267add43fe89f5dbe58491a95a2971639ccba12dbc8ad5c167e98ec0f2a0b
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/box.net