Phishing detection: y8lf207nc5p9nnjz.dropboxx.us
Dropbox Screenshot
Investigate
Domain
y8lf207nc5p9nnjz.dropboxx.us0 CT hosts on apex
urlscan
VirusTotal
Whois
IP
85.239.149.16
ipinfo
Greynoise
URL
http://y8lf207nc5p9nnjz.dropboxx.us
Phishunt analysis Beta
24
low suspicionheuristic risk score · not a probability
Keyword matchTweetFeedCountry mismatch
12 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting
Site impersonates Dropbox through a randomly generated subdomain on the typosquat domain dropboxx.us. Part of a clustered campaign at DEDIK SERVICES LIMITED in Germany confirmed by TweetFeed, sharing an IP with multiple other Dropbox lookalike pages.
TweetFeedSite clusterShared IP cluster
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-24 · confidence 70%
Domain & Network
Whois
Network
Country
Germany
Germany
Hosting
DEDIK SERVICES LIMITED
ASN
AS207043
TLS Cert
-
External detection
TweetFeed
CleanGoogle Safe Browsing · OpenPhish · PhishTank · urlscan.io
Report this phishing
Brand owner
Dropbox
Submit to blocklists