~/d/dropbox.com

> dossier for dropbox.com

an at-a-glance snapshot. each section streams in independently.

## dns[ok]

open standalone →

A: ttl=10 162.125.248.18
AAAA: ttl=43 2620:100:6040:18::a27d:f812
NS: ttl=170343 ns-1162.awsdns-17.org.
ttl=170343 ns-1949.awsdns-51.co.uk.
ttl=170343 ns-315.awsdns-39.com.
ttl=170343 ns-564.awsdns-06.net.
SOA: ttl=900 ns-564.awsdns-06.net. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400
CAA: ttl=300 \# 20 00 05 69 73 73 75 65 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d
ttl=300 \# 19 00 05 69 73 73 75 65 64 69 67 69 63 65 72 74 2e 63 6f 6d
ttl=300 \# 116 00 05 69 73 73 75 65 6c 65 74 73 65 6e 63 72 79 70 74 2e 6f 72 67 3b 76 61 6c 69 64 61 74 69 6f 6e 6d 65 74 68 6f 64 73 3d 64 6e 73 2d 30 31 3b 61 63 63 6f 75 6e 74 75 72 69 3d 68 74 74 70 73 3a 2f 2f 61 63 6d 65 2d 76 30 32 2e 61 70 69 2e 6c 65 74 73 65 6e 63 72 79 70 74 2e 6f 72 67 2f 61 63 6d 65 2f 61 63 63 74 2f 32 30 37 39 34 31 36 30 34 37
TXT: ttl=300 "1e6de3584eb44e3e9fde429fb262995bb3f6422cab16daeff7cba598948242b8"
ttl=300 "MS=ms91256510"
ttl=300 "adobe-idp-site-verification=4977108a-46c6-4763-a3cc-b23b3d87e5cc"
ttl=300 "apple-domain-verification=6wGFrdfZ2TC4HlEk"
ttl=300 "atlassian-domain-verification=yjrZDQ/hCS3k4pk87lelfsKb7+aOLpQPPgowWw/RHEwDCvNo8zH2iNCjFjZZtPvT"
ttl=300 "aws-domain-control-verification=295d3c77-d647-4042-a10b-17bc6cf2a81c"
ttl=300 "aws-domain-control-verification=fa66314d-b786-43ac-ba00-a2fc8c8da6c2"
ttl=300 "citrix-verification-code=b29deae6-12fa-4939-a5b1-9585f5fc82ba"
ttl=300 "cursor-domain-verification-me5gdt=FG4EqpnCbcfCNcVW9qV0OYu9R"
ttl=300 "docker-verification=215c893f-0bb3-4887-87a2-152ae8636422"
ttl=300 "docusign=a3cf77c9-f563-4c9b-8cbb-73c5322feb8e"
ttl=300 "docusign=c18a935e-b7a7-4ca5-a401-9f7cac288c0b"
ttl=300 "google-site-verification=2ZBxb1JI0xc_p5crqO_FHyV6OO3iYuvryuZj4nUNCEc"
ttl=300 "google-site-verification=2_3MpLNP3RT2WDZTWn2VErDq0zTl7-IOZMviotkEhEQ"
ttl=300 "google-site-verification=6Gs0C-CwJui707tVZirEFGKvKfGtwwZf2Snzz0-2nUQ"
"google-site-verification=8NWlYGBCOsGGZoWB62V0z-I1v92RPDYt5e2MIcIlKOk"

fetched 2026-04-24T07:57:51.001Z

## dns[not_applicable]

open standalone →

resolving…

## mx[ok]

open standalone →

pri=10 mxa-001ed902.gslb.pphosted.com.
pri=10 mxb-001ed902.gslb.pphosted.com.

fetched 2026-04-24T07:57:50.998Z

## mx[not_applicable]

open standalone →

resolving mx…

## spf[ok]

open standalone →

v=spf1 ip4:45.58.64.0/20 ip4:185.45.8.0/22 ip4:162.125.0.0/16 ip4:199.47.216.0/22 ip4:108.160.160.0/20 ip4:205.189.0.0/24 ip4:160.34.15.16/28 ip4:52.5.134.202/32 ip4:205.220.162.87/32 ip4:205.220.174.83/32 ip4:167.89.98.146/32 ip4:167.89.89.46/32 ip4:167.89.96.134/32 ip4:159.183.109.97/32 ip4:149.72.220.85/32 ip4:159.183.15.144/32 ip4:159.183.2.51/32 ip4:159.183.2.58/32 ip6:2620:c6:8000::/48 include:amazonses.com include:_spf.google.com include:mail.zendesk.com include:mktomail.com include:rp.oracleemaildelivery.com exists:%{i}._spf.mta.salesforce.com ~all

v=spf1
ip4:45.58.64.0/20
ip4:185.45.8.0/22
ip4:162.125.0.0/16
ip4:199.47.216.0/22
ip4:108.160.160.0/20
ip4:205.189.0.0/24
ip4:160.34.15.16/28
ip4:52.5.134.202/32
ip4:205.220.162.87/32
ip4:205.220.174.83/32
ip4:167.89.98.146/32
ip4:167.89.89.46/32
ip4:167.89.96.134/32
ip4:159.183.109.97/32
ip4:149.72.220.85/32
ip4:159.183.15.144/32
ip4:159.183.2.51/32
ip4:159.183.2.58/32
ip6:2620:c6:8000::/48
include:amazonses.com
include:_spf.google.com
include:mail.zendesk.com
include:mktomail.com
include:rp.oracleemaildelivery.com
exists:%{i}._spf.mta.salesforce.com
~all

fetched 2026-04-24T07:57:51.056Z

## spf[not_applicable]

open standalone →

resolving spf…

## dmarc[ok]

open standalone →

v=DMARC1;p=reject;pct=100;rua=mailto:c7xrs-8253@rua.dmarc.emailanalyst.com,mailto:dmarc@dropbox.com

v=: DMARC1
p=: reject
pct=: 100
rua=: mailto:c7xrs-8253@rua.dmarc.emailanalyst.com,mailto:dmarc@dropbox.com

fetched 2026-04-24T07:57:50.983Z

## dmarc[not_applicable]

open standalone →

resolving dmarc…

## dkim[not_applicable]

open standalone →

no DKIM record on probed selectors (default, google, k1, selector1, selector2, mxvault)

## dkim[not_applicable]

open standalone →

probing dkim selectors…

## tls[ok]

open standalone →

subject cn:: *.dropbox.com
issuer:: DigiCert Global G3 TLS ECC SHA384 2020 CA1 / DigiCert Inc
valid:: Mar 30 00:00:00 2026 GMT → Oct 14 23:59:59 2026 GMT
authorized:: yes
sha256:: 6B:8F:B3:4D:C2:11:32:C4:1D:CC:EA:80:42:6B:DC:DB:B3:ED:0F:5A:E4:F2:60:8E:8F:1B:80:D5:A2:AA:4A:DE
sans: *.dropbox.com
dropbox.com

fetched 2026-04-24T07:57:51.042Z

## tls[not_applicable]

open standalone →

fetching tls cert…

## redirects[ok]

open standalone →

final status: 200 · 2 hops

[301] https://dropbox.com/
[200] https://www.dropbox.com/

fetched 2026-04-24T07:57:51.348Z

## redirects[not_applicable]

open standalone →

tracing redirects…

## headers[ok]

open standalone →

final url: https://www.dropbox.com/

security headers

strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: base-uri 'self'; child-src https://www.dropbox.com/static/serviceworker/ blob:; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/; default-src 'none'; font-src 'self' data: https://*; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker https://*.sharepoint.com/; frame-ancestors 'self'; frame-src https://* dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: blob:; img-src https://* data: blob:; media-src https://* blob:; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://edge-live.dropboxstatic.com/static/; report-to csp-metaserver-whitelist; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://edge-live.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://www.paypal.com/sdk/js https://applepay.cdn-apple.com https://snippet.meticulous.ai/record/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline'; style-src https://* 'unsafe-inline' 'unsafe-eval'; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob:
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
permissions-policy: —

other headers

alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cache-control: no-cache, no-store
content-encoding: gzip
content-type: text/html; charset=utf-8
cross-origin-opener-policy: same-origin-allow-popups
date: Fri, 24 Apr 2026 07:57:51 GMT
pragma: no-cache
reporting-endpoints: coop-dws2="https://www.dropbox.com/csp_log?policy_name=coop-dws2", max_age=10886400, csp-metaserver-whitelist="https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist", max_age=10886400
server: envoy
set-cookie: locale=en; Path=/; Domain=dropbox.com; Expires=Wed, 23 Apr 2031 07:57:51 GMT
transfer-encoding: chunked
vary: Accept-Encoding
x-dropbox-request-id: 30f1e50521964606b134314569eb227f
x-dropbox-response-origin: far_remote
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block

fetched 2026-04-24T07:57:51.260Z

## headers[not_applicable]

open standalone →

fetching headers…

## cors[ok]

open standalone →

origin: https://drwho.me
method: GET
preflight status: 301

access-control-* headers

access-control-allow-origin: —
access-control-allow-methods: —
access-control-allow-headers: —
access-control-allow-credentials: —
access-control-max-age: —
access-control-expose-headers: —

no access-control-* headers returned — site does not advertise CORS to this origin

fetched 2026-04-24T07:57:51.082Z

## cors[not_applicable]

open standalone →

sending preflight…

## web-surface[ok]

open standalone →

robots.txt

present

User-agent: Twitterbot
Disallow:

User-agent: facebookexternalhit
Allow: /s/
Allow: /sh/
Allow: /scl/
Allow: /sc/

User-agent: *
Allow: /static/css/
Allow: /static/images/
Allow: /static/js/
Allow: /llms.txt
Disallow: /static/
Disallow: /password_expired
Disallow: /help/sl
Disallow: /help/vodafone
Disallow: /home*
Disallow: /package_files_uploaded_via_chrome
Disallow: /photos/app_store_link/
Disallow: /recover*
Disallow: /sharing/*
Disallow: /sharing/folders*
Disallow: /sharing/files*
Disallow: /requests*
Disallow: /account*
Disallow: /referrals*
Disallow: /downgrade*
Disallow: /developers-v1
Disallow: /developers/downloads/sdks/
Disallow: /developers/whats_new
Disallow: /reengageoptout/*
Disallow: /preview/
Disallow: /s/
Disallow: /sh/
Disallow: /scl/
Disallow: /sc/


Sitemap: https://www.dropbox.com/sitemapindex.xml

sitemap.xml

absent

head

title: Dropbox.com
description: Discover Dropbox – secure, easy cloud storage for file sharing and collaboration. With Dash, save time and organize all your company content in one place.

social

no OpenGraph or Twitter meta tags found

fetched 2026-04-24T07:57:51.953Z

## web-surface[not_applicable]

open standalone →

inspecting web surface…