Traffic Report and Web Analysis for Dropbox - dropbox.de

0 :HTTP/2 200
content-security-policy :base-uri 'self'; child-src https://www.dropbox.com/static/serviceworker/ blob:; connect-src https://
* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/; default-src 'none'; font-src 'self' data: 
https://*; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dr
opbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https:
//app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https
://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://
selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://s
ales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.ya
hoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox
-pal-live.adyenpayments.com/ https://onedrive.live.com/picker https://*.sharepoint.com/; frame-ances
tors 'self'; frame-src https://* dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: b
lob:; img-src https://* data: blob:; media-src https://* blob:; object-src 'self' https://cfl.dropbo
xstatic.com/static/ https://www.dropboxstatic.com/static/ https://edge-live.dropboxstatic.com/static
/; report-to csp-metaserver-whitelist; report-uri https://www.dropbox.com/csp_log?policy_name=metase
rver-whitelist; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/a
pi/ https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.
com/static/ https://edge-live.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https
://reveal.clearbit.com/v1/companies/reveal https://www.paypal.com/sdk/js https://applepay.cdn-apple.
com https://snippet.meticulous.ai/record/ https://edge.cofra.me/cf-static-97646a4fe3e6.js https://ed
ge.cofra.me/cf-static-4d85f2a0ba2d.js 'nonce-pvjaIttC3pjCIMaY8BI9KxgtCLQ='; style-src https://* 'uns
afe-inline' 'unsafe-eval'; worker-src https://www.dropbox.com/static/serviceworker/ https://www.drop
box.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob:
content-type :text/html; charset=utf-8
cross-origin-opener-policy :same-origin-allow-popups
pragma :no-cache
referrer-policy :strict-origin-when-cross-origin
reporting-endpoints :coop-dws2="https://www.dropbox.com/csp_log?policy_name=coop-dws2", max_age=10886400, csp-metaserver-
whitelist="https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist", max_age=10886400, csp-
metaserver-dynamic="https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic", max_age=1088640
0
set-cookie :gvc=NzI4MjMwNTM1NTQ4Nzg1MzMyMjc2MTY1NDY4MzA3NzI1NzIyOA==; Path=/; Expires=Tue, 19 Aug 2031 19:37:59 
GMT; HttpOnly; Secure; SameSite=None
x-content-type-options :nosniff
x-frame-options :SAMEORIGIN
x-permitted-cross-domain-policies :none
x-xss-protection :1; mode=block
date :Thu, 20 Aug 2026 19:37:59 GMT
strict-transport-security :max-age=31536000; includeSubDomains
server :envoy
cache-control :no-cache, no-store
alt-svc :h3=":443"; ma=86400, h3-29=":443"; ma=86400
vary :Accept-Encoding
x-dropbox-response-origin :far_remote
x-dropbox-request-id :ebc01ecbf42547c5aa894a9b6a875797