English

The domain 'www.dropbox.com' uses the commercial generic top-level domain (.com) and includes subdomain 'www'. The core label 'dropbox' covers 7 characters with two vowels and 5 consonants. Word splitting yields two words: drop, box. Median word length comes out to 3.5 characters. 'drop' most often appears in English. You may catch it in Chinese (Pinyin) and Danish as well.

html/cb/f5/cbf5a2b1-1594-4aaa-ac52-ded6cd6d93b0.html.gz

report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; img-src https://* data: blob: ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; media-src https://* blob: ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://applepay.cdn-apple.com 'nonce-LKObmfceikM31yaMxVA4HbQFbdc=' ; base-uri 'self' ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; form-action https://*.purple.officeapps.live-int.com https://officeapps-df.live.com https://*.officeapps-df.live.com https://officeapps.live.com https://*.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://*.dropboxusercontent.com/p/hls_master_playlist/ https://*.dropboxusercontent.com/p/hls_playlist/ ; frame-src https://* dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: blob: ; frame-ancestors 'self' https://*.dropbox.com ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; font-src https://* data: ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob:
script-src 'unsafe-eval' 'strict-dynamic' 'nonce-LKObmfceikM31yaMxVA4HbQFbdc=' 'nonce-eyG3IcnBndGTidJS/SpRYJm80lY=' ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

MarkMonitor Inc.

DROPBOX.COM

PayPal

HTTP/3

HSTS

Envoy

Canny

ZURB Foundation

Arkose Labs

Dropbox

⚠️ High Risk - https://www.dropbox.com/scl/fi/n7qsrvb9lfucazgek97ng/Bill-68754.pdf?dl=0&oref=e&r=ACitDa2KXuFtuTyIKF7UBlkBZd5_w0XI7Pkv7fr9EnKnQDj-nvH5a2j6S2ICyqkdB2OQlC8C7HDLAYrmhVhC7C8O_6l-emiqC8bHhMHMSUJ8pzncrVeH5CFtDsUS4HoXpdMgkl5jH0HqzxhZQfnC6cOKzQ_MeixdK0vVu61aTY_A3mk9Q5KjMwPN02CKl9V6hpqqJyd4Q9WPP_9Ws_S2Z3NoqVegaui9WjoBhapGNjddmA&sm=1

Requests	IP Address	Location	AS Autonomous System
6	104.16.100.29	United States	AS13335CLOUDFLARENET
6	104.16.99.29	United States	AS13335CLOUDFLARENET
6	162.125.66.18	Frankfurt am Main, Hesse, Germany	AS19679DROPBOX
19	3	-	-

Security Scan Report: www.dropbox.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies7

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History