What Gridinsoft observed on suvobox[.]com
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20261106083227-df6db3f0
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Inconclusive
- Evidence basis
- First-party site analysis External vendor intelligence: Contradictory context — not used for this decision
The inspected public pages did not reproduce phishing or malicious automatic delivery. Shared files and dynamic advertising remain outside complete validation, so the bounded review is inconclusive rather than a certification of every visit or download.
Analyst findings
Review 2 documented observations View evidence
The apex and www pages displayed the same video/file index. The selected file page showed player and download controls; the account form used the site’s own branding. Public takedown instructions were present. No imitated third-party login, unrelated password recipient, forced unrelated redirect or malicious automatic download was reproduced. No account action, playback, download or form submission was performed.
- Public artifact URL hxxps://suvobox[.]com/
- Public artifact URL hxxps://www[.]suvobox[.]com/
- Public artifact URL hxxps://suvobox[.]com/auth
- Public artifact URL hxxps://suvobox[.]com/takedowns
- Public artifact URL hxxps://suvobox[.]com/f/4b5efefb2f9e8b53
Current HTML loads third-party display and popunder scripts. The first-party analytics client sends page and engagement data to same-origin endpoints. Selected client code and ordinary Firefox navigation were inspected, but rotating ad creatives and every shared file were not validated. Limited public-index and threat-intelligence lookups supplied no independently reproduced harmful object; this does not certify all content or historical cleanup.
- Public artifact URL hxxps://suvobox[.]com/static/analytics.js
- Public artifact URL hxxps://a[.]magsrv[.]com/ad-provider.js
- Public artifact URL hxxps://a[.]pemsrv[.]com/popunder1000.js
Scope and limitations
- No media, executable or archive was downloaded or run; no private system, account, payment, ad click or form submission was tested. The claimed advertising-network switch, removal of all historical creatives, publisher permissions and server-side handling were not authenticated.
Help protect others by sharing this page on social media! The more people who know about suvobox.com, the fewer chances they have to deceive someone else. Help others evaluate suvobox.com by sharing this page on social media!