Is dropbox-29k.pages.dev safe?

The scan of dropbox-29k.pages.dev on 23 Aug 2026 reached no verdict either way (score 14). Too little was captured to judge it, which is an unknown rather than a pass.

How was dropbox-29k.pages.dev checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

dropbox-29k.pages.dev - URL scan, 23 Aug 2026

MalwareAnalyzer by Cyble scanned dropbox-29k.pages.dev and returned a unknown verdict (score 14), categorised as credential-harvest. The page resolved to 172.66.47.204 on Cloudflare, Inc. in US. The domain was registered 2181 days ago through CloudFlare, Inc.. 3 domains and 2 IPs were contacted, over 58 HTTP requests. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 14) · Confidence 23%
Scanned URL: https://dropbox-29k.pages.dev/
Domain: dropbox-29k.pages.dev · IP: 172.66.47.204 · AS13335 · US
Server: cloudflare
Page title: 🚵🏽 BAOER の中转信箱 📬
HTTP status: 200 · text/html; charset=utf-8
Registrar: CloudFlare, Inc. · domain age 2181 days · created 2020-09-02
TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Nov 20 11: · subject CN=dropbox-29k.pages.dev
HTTP requests captured: 58
Scan tier: standard · observed 2026-08-23 02:59:41 UTC

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Credential-harvesting form
Valid TLS, no impersonation or off-origin credential post
Certificate issued < 48h ago

Detected technologies

Cloudflare

Contacted infrastructure

172.66.47.204 - AS13335 Cloudflare, Inc. (United States)

Observed indicators

dropbox-29k.pages.dev
jsd.1143520.xyz
tuchuang.jerrytest.us.kg
172.66.47.204
13.238.105.1
https://dropbox-29k.pages.dev/
https://dropbox-29k.pages.dev/logo.jpg
https://jsd.1143520.xyz/npm/prismjs@1.29.0/themes/prism.min.css
https://jsd.1143520.xyz/npm/prismjs@1.29.0/prism.min.js
https://jsd.1143520.xyz/npm/prismjs@1.29.0/components/prism-core.min.js
https://jsd.1143520.xyz/npm/prismjs@1.29.0/components/prism-clike.min.js
https://jsd.1143520.xyz/npm/prismjs@1.29.0/components/prism-markup-templating.min.js
https://jsd.1143520.xyz/npm/prismjs@1.29.0/components/prism-markup.min.js
https://jsd.1143520.xyz/npm/prismjs@1.29.0/components/prism-css.min.js
https://jsd.1143520.xyz/npm/prismjs@1.29.0/components/prism-javascript.min.js
https://jsd.1143520.xyz/npm/prismjs@1.29.0/components/prism-python.min.js
https://jsd.1143520.xyz/npm/prismjs@1.29.0/components/prism-java.min.js
https://jsd.1143520.xyz/npm/prismjs@1.29.0/components/prism-c.min.js
https://jsd.1143520.xyz/npm/prismjs@1.29.0/components/prism-cpp.min.js
https://jsd.1143520.xyz/npm/prismjs@1.29.0/components/prism-csharp.min.js

Questions about dropbox-29k.pages.dev

Is dropbox-29k.pages.dev safe?: The scan of dropbox-29k.pages.dev on 23 Aug 2026 reached no verdict either way (score 14). Too little was captured to judge it, which is an unknown rather than a pass.
How was dropbox-29k.pages.dev checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of dropbox-29k.pages.dev

Scanned on MalwareAnalyzer by Cyble · Open interactive scan