Phishing detection: 38d8cygy7yl5kgvr.dropboxx.us

Dropbox
http://38d8cygy7yl5kgvr.dropboxx.us Access site
Screenshot
Screenshot of 38d8cygy7yl5kgvr.dropboxx.us
Investigate
Domain 38d8cygy7yl5kgvr.dropboxx.us0 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 85.239.149.16
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://38d8cygy7yl5kgvr.dropboxx.us
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
24 low suspicionheuristic risk score · not a probability
Keyword matchTweetFeedCountry mismatch
12 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Site impersonates Dropbox using a randomized subdomain on the typosquat domain dropboxx.us. Confirmed malicious by TweetFeed and hosted on low-reputation shared infrastructure in Germany, clustered with multiple similar Dropbox phishing pages on the same IP address.

TweetFeedSite clusterShared IP cluster
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-24 · confidence 70%
Domain & Network
Whois
Network
IP 85.239.149.16
Country GermanyGermany
Hosting DEDIK SERVICES LIMITED
ASN AS207043
TLS Cert -
External detection TweetFeed
CleanGoogle Safe Browsing · OpenPhish · PhishTank · urlscan.io
Related infrastructure Betasuspected links from shared infrastructure, not attribution
1qx7r7mj78molew3.dropboxx.us 44 same apex same IP same nameservers similar name
active 2026-07-23
cmduwmuk8iyjhmq0.dropboxx.us 44 same apex same IP same nameservers similar name
active 2026-07-23
igkyvvj3yq.dropboxx.us 44 same apex same IP same nameservers similar name
active 2026-07-23
k02jmug.dropboxx.us 44 same apex same IP same nameservers similar name
active 2026-07-23
mail.dropboxx.us 44 same apex same IP same nameservers similar name
active 2026-07-23
Top 5 of 7 related · rebuilt daily · corr-1.2.0 · related infrastructure API
Report this phishing
Brand owner Dropbox
abuse@dropbox.com
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-07-23 22:01 UTC  ·  Last refreshed 2026-08-18 01:30 UTC