PhishingFirst seen March 10, 2026
Fake Dropbox page
https://bucket-permissions-that-allow-public-access.s3.us-east-2.amazonaws.com/bucket-permissions-that-allow-public-access-bucket-permissions-that-allow-public-access/index.html
Why we flagged it
- The page uses Dropbox branding but is hosted on an AWS S3 bucket (amazonaws.com) rather than a legitimate Dropbox domain.
- The URL path is highly suspicious and the page is clearly designed to harvest business email credentials under the guise of accessing a document.
If you entered a password or card details on this page, change that password now and contact your bank or card issuer.
See what the page looked like
A free account unlocks the screenshot we captured and lets you dispute a verdict.
Sign in