dropbox.com Review

 N/A

HTTP/1.1 301 Moved Permanently
location: https://dropbox.com/
date: Tue, 21 Jul 2026 14:01:11 GMT
server: envoy
x-dropbox-request-id: 1305ee4403a74fccbab09e336a5f7ba7
content-length: 0

HTTP/1.1 301 Moved Permanently
Location: https://www.dropbox.com/
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Cache-Control: no-cache, no-store
Alt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Vary: Accept-Encoding
X-Dropbox-Response-Origin: local
Date: Tue, 21 Jul 2026 14:01:11 GMT
Server: envoy
X-Dropbox-Request-Id: f7bb7f360ee74aa885be14456a5f7ba7
Content-Length: 0

HTTP/1.1 200 OK
Content-Security-Policy: base-uri 'self'; child-src https://www.dropbox.com/static/serviceworker/ blob:; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/; default-src 'none'; font-src 'self' data: https://*; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker https://*.sharepoint.com/; frame-ancestors 'self'; frame-src https://* dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: blob:; img-src https://* data: blob:; media-src https://* blob:; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://edge-live.dropboxstatic.com/static/; report-to csp-metaserver-whitelist; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://edge-live.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://www.paypal.com/sdk/js https://applepay.cdn-apple.com https://snippet.meticulous.ai/record/ https://edge.cofra.me/cf-static-97646a4fe3e6.js https://edge.cofra.me/cf-static-4d85f2a0ba2d.js 'nonce-Z2xf6hdaaAIh91WqksTv1BeNfvY='; style-src https://* 'unsafe-inline' 'unsafe-eval'; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob:
Content-Security-Policy: report-to csp-metaserver-dynamic; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-Z2xf6hdaaAIh91WqksTv1BeNfvY=' 'nonce-tLp+p3gIAL1PJFRx8st4kVr9dxY='
Content-Type: text/html; charset=utf-8
Cross-Origin-Opener-Policy: same-origin-allow-popups
Pragma: no-cache
Referrer-Policy: strict-origin-when-cross-origin
Reporting-Endpoints: coop-dws2="https://www.dropbox.com/csp_log?policy_name=coop-dws2", max_age=10886400, csp-metaserver-whitelist="https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist", max_age=10886400, csp-metaserver-dynamic="https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic", max_age=10886400
Set-Cookie: gvc=MTQ4Njc1MDAyMzY3NDA3MDM3Mzc2NDI3ODcxODMwNzg4NDg5NDQ5; Path=/; Expires=Sun, 20 Jul 2031 14:01:11 GMT; HttpOnly; Secure
Set-Cookie: t=YnWE1ElsTnJvydeajPpjg12f; Path=/; Domain=dropbox.com; Expires=Wed, 21 Jul 2027 14:01:11 GMT; HttpOnly; Secure
Set-Cookie: __Host-js_csrf=YnWE1ElsTnJvydeajPpjg12f; Path=/; Expires=Wed, 21 Jul 2027 14:01:11 GMT; Secure
Set-Cookie: __Host-ss=qs67inSdm0; Path=/; Expires=Wed, 21 Jul 2027 14:01:11 GMT; HttpOnly; Secure; SameSite=Strict
Set-Cookie: locale=ja; Path=/; Domain=dropbox.com; Expires=Sun, 20 Jul 2031 14:01:11 GMT
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 1; mode=block
Date: Tue, 21 Jul 2026 14:01:12 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Server: envoy
Cache-Control: no-cache, no-store
Alt-Svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
Content-Encoding: gzip
Vary: Accept-Encoding
X-Dropbox-Response-Origin: far_remote
X-Dropbox-Request-Id: 0983d6b423f541d6a759d9f46a5f7ba7
Transfer-Encoding: chunked