Scan report · 2 months agoPublic

dropbox.rev.it

161.97.81.162AS51167 · DE

Submittedhttp://dropbox.rev.it/

Landed onhttps://dropbox.rev.it/

Engine tags

Verdict

3 of 7 enginesMaliciousAutomated

Own this site?

What happened

Step by step, from what the scanner recorded.

Load 9.0 s · 4 requests

01 · Visitor opensdropbox.rev.it

02 · Redirected · 1 hopSame host, another address

03 · Page shown

Dropbox :: Loginstyled as Dropbox · high

04 · OutcomeCredential phishingA login page wearing a brand it does not own.

Dangerous — confirmed threat

Automated

It presents itself as Dropbox while being hosted somewhere Dropbox does not own. It asks you to enter a password. It is listed on external threat-intelligence feeds. We found strong evidence that this site is malicious — for example a phishing page, a scam, or hostile code. Treat anything it asked for (passwords, card details, codes) as exposed.

What to do

Do not enter any information or download anything. If you already did, change those passwords now and contact your bank if payment details were involved. Block or report the link to your team.

This reflects the evidence found at the time of the scan. If you believe it is a mistake, you can escalate it for analyst review.

Findings

Strongest first

SupportingBrand impersonation detected

Dropbox · high

The page presents itself as a known brand (brand keywords/branding detected).

Analyst noteHigh confidence: brand keywords AND a password field — classic credential phishing.

Infrastructure

IP: 161.97.81.162CONTABO - Contabo GmbH, DE · AS51167DE
Redirects: 0 hops · / → /

1 malicious5 suspicious

Hashes & fingerprints

Page Hash9cac0ade91e8c0c21969580246b4f5e9a692d18bfbd5e7d07a6b6561dd65b224 DOM Hash553c5869628f8155d5e71afe5b07ad3ce7421e4cc44cfff088cde5418ff4409e Screenshot pHashec33939c6c63c398

Page capture

Live

Title “Dropbox :: Login” · brand shown: Dropbox (high)

Visit Site

Engines

7 · time to verdict