Phishing sites impersonating Dropbox

PhishDestroy has recorded 36 phishing domains impersonating Dropbox since 2025-08-07, 2 of them in the last 30 days. The most used registrars are GoDaddy.com and MarkMonitor; the most common TLDs are .com and .app. The official Dropbox domain is dropbox.com: any other site asking for your login or wallet is not Dropbox.

36
Domains, all time
2
Last 30 days
19
Online at last check
2
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 12026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 02026-08-10: 02026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 12026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 22026-08-29: 02026-08-30: 02026-08-31: 02026-09-01: 02026-09-02: 02026-09-03: 12026-09-04: 12026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 12026-09-09: 12026-09-10: 12026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 12026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 12026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 12026-10-22: 0
Dropbox phishing domains detected per day: 12 from 2026-07-25 to 2026-10-22; peak 2.

How to tell a fake Dropbox site

Official domain: dropbox.com.

Words most often added to the brand in reported domains: trezor, dropboxx, airdrop, box, airdropboxbet, whastsnapp, portal, pkim, gallezone, xref.

  • Type the address yourself or use a bookmark; phishing links for Dropbox arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Dropbox will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Dropbox phishing domains

The 36 most recently detected domains impersonating Dropbox
DomainFirst detectedStatus at last checkRegistrar
taskerx.800876.xyz2026-10-21OfflineName.com
scottjdecker.com2026-09-27OnlineBluehost
secure-dropbox.ist2026-09-16OnlineGoDaddy.com
dropbox-online.net2026-09-10OnlineGoDaddy.com
dropbox.rev.it2026-09-09OnlineAruba s.p.a
dropboxbiz.com2026-09-08OnlineGoDaddy.com
dropbox-online.at2026-09-04OnlineGoDaddy.com, ( https://nic.at/registrar/
cn-drawio.com.cn2026-09-03OnlineWeb Commerce Communications
38d8cygy7yl5kgvr.dropboxx.us2026-08-28OnlinePublicDomainRegistry.com
1qx7r7mj78molew3.dropboxx.us2026-08-28OnlinePublicDomainRegistry.com
help-treoz-io-web-start.typedream.app2026-08-23OnlineTypedream
qwqaqwqasqsaq.edgeone.dev2026-07-31OnlineTencent Cloud
dropgox.lol2026-07-23OfflineGlobal Domain
mvo.org.rw2026-07-09OnlineTHE CLICK
flodxvlw.com.ng2026-07-06OfflineHostAfrica
zwtld0uxi.com.ng2026-07-06OfflineHostAfrica
sw1zzd0kument-anzeig3n0971523.weebly.com2026-07-03OfflineMarkMonitor
authv2-dropbox-safelinks-protection-docx.pro2026-06-28OfflineNICENIC
dropbox-file-transfer.online2026-06-15OfflineNameSilo
user-dropbox.com2026-06-13OnlineInternet Domain Service BS
helpnets.info2026-05-08OnlineCloudflare
onstreamz.com.in2026-04-30OnlineNational Informatics Centre
view-doc-g5mz.sandyroby1985.workers.dev2026-04-26Taken downCloudflare
swqv.pages.dev2026-03-29OnlineCloudflare
dropboxdash.com2026-03-24OnlineMarkMonitor
dropboxenterprise.com2026-03-24OnlineGoDaddy.com
dropbox-home-page-cloneable.webflow.io2026-03-06OfflineMarkMonitor
device-trezor.io2026-02-26Offline—
6981dab3f81073450d7ecd75--reliable-pothos-cdc876.netlify.app2026-02-10OfflineName.com, (Netlify)
trezor.login-main.com2026-02-07Taken downMetaregistrar
sigfuisson.ca2026-01-20OfflineNameSilo
xref-404.co2025-12-30OfflineGoDaddy.com
portal.pkim.gallezone.lk2025-12-07Offline—
web.whastsnapp.com2025-11-07OfflineGKG.NET
airdropboxbet.live2025-09-08OfflineWeb Commerce Communications dba WebNic.c
airdrop-box.web.app2025-08-07OnlineGoogle

All 36 Dropbox reports

Where they are registered and hosted

Registrars

  1. GoDaddy.com5
  2. MarkMonitor3
  3. NameSilo2
  4. Cloudflare2
  5. HostAfrica2
  6. PublicDomainRegistry.com2
  7. Google1
  8. Web Commerce Communications dba WebNic.c1

Top-level domains

  1. .com8
  2. .app3
  3. .dev3
  4. .io2
  5. .ng2
  6. .us2
  7. .live1
  8. .lk1

Hosting networks

  1. CLOUDFLARENET - Cloudflare, Inc., US6
  2. Cloudflare, Inc.5
  3. Host Africa (Pty) Ltd - Host Africa (Pty) Ltd, Z2
  4. HIVELOCITY, Inc.2
  5. DEDIK SERVICES LIMITED2
  6. One Ring Networks, Inc.2
  7. FASTLY, US1
  8. CLOUDFLARENET, US1

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Dropbox; share of all PhishDestroy reports: 0.02%.