Phishing detection: dropbox-online.at
Dropbox Screenshot
Investigate
Domain
dropbox-online.at1 CT host on apex
urlscan
VirusTotal
Whois
IP
64.238.34.20
ipinfo
Greynoise
URL
https://dropbox-online.at
Phishunt analysis Beta
31
medium suspicion suspiciousheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 urlscan.io
- +4.1 Brand in screenshot
- +3.7 Brand in domain label
- +2.4 ASN reputation
- +2.2 Country mismatch
- +1.7 Shared IP cluster
- +1.1 No CSP header
- +1.1 No HSTS header
- +1.0 Site cluster
- +0.7 Brand in cert SAN
- +0.7 Unrecognised DNS provider
- +0.6 Suspicious TLD
- +0.4 Young domain
- +0.3 Free CA
- +0.3 Long domain
- +0.1 Hyphens
20 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Site impersonates Dropbox using a deceptive domain with an Austrian TLD, hosted in Germany on US provider infrastructure. The TLS certificate SAN contains the Dropbox brand name. Confirmed malicious by urlscan and displaying Dropbox branding, designed to steal cloud storage account credentials.
Brand in cert SANCountry mismatchurlscan.io
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 85%
Domain & Network
Whois
Network
IP
64.238.34.20
Country
Germany
Germany
Hosting
HIVELOCITY, Inc.
ASN
AS29802
TLS Cert
Let's Encrypt
External detection
urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Requests
Resources
Observables
Related websites
Report this phishing
Brand owner
Dropbox
Submit to blocklists