Phishing detection: dropbox-online.net
Dropbox Investigate
Domain
dropbox-online.net1 CT host on apex
IP
64.191.166.198
URL
https://dropbox-online.net
Cert
Let's Encrypt
Phishunt analysis Beta
30
low suspicionheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 urlscan.io
- +4.1 Brand in screenshot
- +3.7 Brand in domain label
- +3.5 ASN reputation
- +1.7 Shared IP cluster
- +1.1 No CSP header
- +1.1 No HSTS header
- +1.0 Site cluster
- +0.9 Young certificate
- +0.7 Brand in cert SAN
- +0.7 Bulletproof DNS
- +0.4 Long domain
- +0.3 Free CA
- +0.2 Suspicious TLD
- +0.1 Hyphens
18 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Site impersonates Dropbox using a deceptive domain on a network with known abuse history. The certificate names the Dropbox brand and content references it directly. Flagged by urlscan as malicious, likely harvesting cloud storage account credentials.
Brand in domain labelASN reputationurlscan.io
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 78%
Domain & Network
Whois
Registrar
GoDaddy.com, LLC
Network
Country
United States
Hosting
One Ring Networks, Inc.
ASN
AS35985
TLS Cert
Let's Encrypt
External detection
urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Campaign
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists
urlscan
VirusTotal
Whois
ipinfo
Greynoise