SafeMode - Analysis: dropboxfiles.online

Visual Capture

Detection Info

http://dropboxfiles.online

Detected Brand

Dropbox

Country

Unknown

Confidence

95%

HTTP Status

200

Report ID

7ab72c8b-b82…

Analyzed

2026-07-27 06:11

Final URL (after redirects)

https://dropboxfiles.online/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1AD0110A0062D54B5E051B2ECE2D09B267D455206CF864B1022CCC7DDDAE1C11EF59590
CONTENT ssdeep	12:hRwx6A4XTSsJv3DlKsB3Y31ntcgZNMmKLfEcQ621TeJtybz840:hRg4D3JkdrnKjBkayf8V

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	cccc3333cccc6699
VISUAL aHash	0000183c18000000
VISUAL dHash	00083032320c2000
VISUAL wHash	0c0c3c3cfcecf0f0
VISUAL colorHash	380000001c0
VISUAL cropResistant	00083032320c2000

Code Analysis

Threat Level ALTO

⚠️ Phishing Confirmed

📊 Risk Score Breakdown

Total Risk Score

70/100

🔬 Comprehensive Threat Analysis

Threat Type

Dropbox Phishing Landing Page

Target

Dropbox users

Attack Method

Phishing webpage

Exfiltration Channel

Form submission (backend endpoint not detected - likely JavaScript-based)

Risk Assessment

LOW - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

🏢 Brand Impersonation Analysis

Impersonated Brand

Dropbox

Official Website

N/A

Fake Service

Credential harvesting service

⚔️ Attack Methodology

Primary Method: SEO Poisoning Landing Page

Fake Dropbox page designed to appear in search results and trick users into visiting. May redirect to credential harvesting pages, malware downloads, or serve as a trust-building step before requesting sensitive information.

Secondary Method: Standard Phishing Techniques

Uses typical phishing tactics including brand impersonation, urgency tactics, and social engineering to trick victims into providing sensitive information.