English

Domain 'www.dropbox.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'www'. The core label 'dropbox' covers 7 characters split between two vowels and five consonants. Tokenizing the label suggests two words: drop, box. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

html/92/bf/92bfc9ad-5e91-49b6-9456-7a3a0953663d.html.gz

frame-ancestors 'self' ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://applepay.cdn-apple.com 'nonce-jgyx2rg2Vk0D/ZnxkqykiTkouhw=' ; form-action https://*.purple.officeapps.live-int.com https://officeapps-df.live.com https://*.officeapps-df.live.com https://officeapps.live.com https://*.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker https://dl.dropboxusercontent.com ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://*.dropboxusercontent.com/p/hls_master_playlist/ https://*.dropboxusercontent.com/p/hls_playlist/ ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; base-uri 'self' ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; img-src https://* data: blob: ; frame-src https://* dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: blob: ; font-src https://* data: ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; media-src https://* blob: ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; style-src https://* 'unsafe-inline' 'unsafe-eval'
script-src 'unsafe-eval' 'strict-dynamic' 'nonce-jgyx2rg2Vk0D/ZnxkqykiTkouhw=' 'nonce-RVUwX0NB6fEd6Z8uva54C2c0mdo=' ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic

application/x-www-form-urlencoded; charset=UTF-8

base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action https://*.purple.officeapps.live-int.com https://officeapps-df.live.com https://*.officeapps-df.live.com https://officeapps.live.com https://*.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-ancestors 'self' ; frame-src https://* dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: blob: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://applepay.cdn-apple.com 'nonce-jgyx2rg2Vk0D/Znxkqyk' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-jgyx2rg2Vk0D/Znxkqyk' 'nonce-dmjx3g57eJjhoI7pKQLS'

467e381205c71e216ea1751c601467069a8c6fb9a12e04c7e1ed6da8df23bc7b

ae5d4d8137603d3be2d3aa27e166ddb23f5b4a260d15ca06998eb075e6454442

49180f2dfc227d07d8ff265753b17c6eab73a61d7c0c40a0e7963be6aa328b0d

32503e1ef0fb18344bc6aea80a1c11b0bb228e0f16a2a28b14000e39124a3c2f

0424957365bf2516ff6acd0c4cdea540f7cab87159674fc0dff19435c839f0a0

1ad18c870c74d430157a9f34586453cc572a9fdf8e01004c40660171666d8fe0

be30f77fabcd097765f81b6348312195fd16d52899dda077649f85529e610946

417f10b2fd75872bf7f0c07c179faa87243e8d42a3da71ce4186bf4947822f92

3a97a5514c0cee58c10892759b26486a79368b63a0ca01312a01e953406e1d4b

d4b6885014c35b98ca86f39256c677fafd77749b9751872c920c792ee1721819

91327eb0be088faad2b5e515f1d2bcd574b9fa14fe7f1921fb22d42a275cdae5

6a237d24b904380b33dc04689fcee3e529aa20d9894e74632cf7497811559942

b2e4965a386727e3fc830bd7e338d256de98bf78dbaa55c3eceeb95c24211cda

7b82b8a18069f3194952f41adfa98447c91b03f2edd3987d80aabe55eb445e6e

eeeb433e6dd2bbafe608fb47b57f4429640ec538a37b1f36d8a1e4532298ab48

be7179238dda4bda3e3125ec29472a71df6dd62a9b0348659591580cd2e940d4

81f6bd22ba232914ee791bb1b765b2f68b8c358789371f228af0b30da38def63

f47a8270771e5a996f2b77562d51ab73334e7ca0d8dfd5f519a23b80e4160e1e

ff64cb1bbe07544d02070b14cd9b77f3f8351a12093a5f90e37a924881e07945

1920a20c76017efeaf627c59b87baf17270f12eead582252995d057306ffbe32

752d4997eef42fe0d04c8d28e8c6f0858ef09b93e5fcf759a98dc47caff2d79a

788a93f5f0628959574d7012d3d2b1fb0b3423a8e255e2474afa03d11f4a312e

026ddf86d3a06fbf0fed99d610e585ddcd1c980674e4f9c064f50939a3a43f24

c6e578660a56fe168a89aeb8389b7dfc5bb7bc8dafec9411cd57a1fbf26e1f03

cccfde81b8e4157cf44b299a5389963d7797dd5e0932cb940374b4bbd2c7f23a

23a67d83b8486b6373d4b3e5316d82253e87931001379094a97d069549b08bd6

7462411d062213c6539bbe181caa8836bbba20caf4403127c37cfbc49f26b2f0

864c5dea7b12830d56907e6fb5dffcdfd657e93b5bc2aa0a2ca5486bc109cb83

64aea1f0609e0f89a02b2461acddacc9011f3f8c979febbeb7c9e2cac17a7d6f

c7187e86c2f8df133b0fb9b8c8a5bc6ba77f2325121af3ea5c32eff85204134c

679208d06f22f263ec57b03a6dfb76fbfe466fb9f1e3f21c2dc0ed5831340a86

8559028fc0b3c4ad0bb26336920bdb94ab076fcec1bdbfae2073c9f551f2167a

589b4d7f81cf4152f1258ffa46ed0fe3f9abf0dc6b0aecd995e1934e76e53d03

7125cff7456c25e90f2cab7a4435b0507f655367d07b18efd5615b0b95f2fdf3

9ee2fb6cb931c2a0b842c3a3ac21f426c07e889229f98fa457b836988729db34

base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-ancestors 'self' ; frame-src https://* dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: blob: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://applepay.cdn-apple.com 'nonce-jgyx2rg2Vk0D/Znxkqyk' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-jgyx2rg2Vk0D/Znxkqyk' 'nonce-dmjx3g57eJjhoI7pKQLS'

8508d2551253e1f6b73fc9f2f7f5222807d231d693f5e2b9516ea930420849be

86540e725c1277063f1d6de873a85e44e62e42b84fadc1decdc6a26c54e41984

60b7a0a5bced4912971b08e9a0b438521ba88832240383a261657e134d017f18

be961cc23fa82094948cac36b8ecd763969feac537eef5acd7f36463594e5188

d1258e38c214acf1f720e245db341aa2920e52fb216969a3672903abe6872fbd

7bf3dd181b0b5230d1e0b28c553e092fab490aab47bf3d64d0309f32dea5bf2e

2d0a68e11ec851102a7db322483290b140f4e43875817bee9c7422967ebc4e18

d1ed2ea494c2946fb49fc6641ff44b74193dc028032f6e49a489873581f8349d

c4a4647be8bf94ec80f0eb1fbd8f36cc44071e7d93eb379d0f9561e998ec2660

2c9adbf2236b96231a3fac8b29fa79befcc4c297d42dbcb288681a2178e95c8f

d1c570cc0a1b6dccab7f53c812a310d99ae72b69d2d854f912a5443eca82f3ab

c3a0a489e81ef312f5230dafea8e754b1d75a5e926d5afd4ea88e466ef6414c5

5695cf1e63a853db1219b39d352366704a80f542610b21a22c2b17997c67996a

878a0cff66771007086c9db8f3ceb919c07ddc7077417bea23030f0b8d5d11cb

24f1c450207a7eef005c61af3092e4b6a6b999414c93323010c6a3e1b8e5e7dc

186283f7dcc36f5a7a6b0723955c4917ddbd706aadbe3b3e05b26181f0a181a6

a7628a578922f61d1fc3307756c2fbb8bf007a3d348598e9ad0817c142097fbb

d3c3818bc69e08ea14038257ec2d3fed566a099dcfeca5bb5d262e930edddcf3

ffee81e8d3113c1b050509cfbbfe8ff3f6f9cce73d8d08f122c40820f8ff5a03

8863cad97aaf501f6589c772046062a7b807189ab02c2c536d412d29cb4a795c

ec67f626505a760faaae8bbc2a608e140747e961ac18fffdd1b086b5073f029e

299798a625fbcd6a9746400fe7e9325ca8a568194f1ea1368ba9a93693c671d9

831359a94b533f75e732e7869c71b5868e0b6cbe22785c012068c788cd7e1ce3

1f56140e1d736697b2ac270b4f21ea6f427e7c9c3f5d5e5583607bdebc1b9f48

fbe6572d0d553367fc8d8e246b2bb14d0060a5ffd609054f38ef14fbd5d6e636

4bb6b6e2db7dcf55cf553f531d0f1ca07d7c08bada43fcdd3472fff8d7946e35

2d0472c458d95ac6281a4d651c770b5312d72052614dd05f1f4a5aa9db018e54

a17171cb145b06d37b4de3deb938af800752c9b5e04a0c96e5ae9e1bb8b9b052

d798911f7c5544aadecb2bdf6a2811703bfc708aef4eb6edca9817d3a64d17c9

cd0f30e08b00270bb6bcd4ee4370f4d618a74b81f87d0ce3d3b8e0209a5831fd

e81e0d378985ff9b05b16e008995bb66a6b72ea035dc179ae54ba15a7243ac4e

f3916348ada93dbc8f7ff52537aed1a19c31dda0cc099e51c6f9d5b43f0596de

afb42041be276708193118faf3e7161609cc5a001da67760d3d8780118b8fdef

a3865069981ab2b962a9206513dec096917fc2f4ce137ab39e7d96681a87167e

39c421d411a8929bc2ed373f71f4271915f75c41c902d1d112f91a15ab566d20

ea4ef5a4cdde77ae197f4a86f173a189d18e6afc766020e22b603644a7142b12

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

MarkMonitor Inc.

DROPBOX.COM

DROPB-ABUSE

DROPBOX-ADMIN

Dropbox NOC

Dropbox, Inc.

DROPB

PayPal

HTTP/3

HSTS

Envoy

Canny

Arkose Labs

Dropbox

d.dropbox.com

accounts.google.com

✅ Low Risk - https://www.dropbox.com/scl/fo/dctdb9rqnd1skiefl998w/AMkMUs0zY5fiPoYryOoCfjI?rlkey=v5uy44g6f812ipz3hbkxh0am0&st=uzob99ab&dl=0

Requests	IP Address	Location	AS Autonomous System
28	162.125.8.20	United States	AS19679DROPBOX
23	65.8.131.121	United States	AS16509AMAZON-02
23	162.125.21.5	United States	AS19679DROPBOX
23	104.16.99.29	United States	AS13335CLOUDFLARENET
23	162.125.66.18	Frankfurt am Main, Hesse, Germany	AS19679DROPBOX
23	108.177.15.84	United States	AS15169GOOGLE
23	104.16.100.29	United States	AS13335CLOUDFLARENET
166	7	-	-

Security Scan Report: www.dropbox.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies6

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History