Unclassified // For public releaseWordle · Official security dossier

Looking for more in-depth information on this company—or any company worldwide? Visit companyforensics.org.

Automatic security check · Public OSINT only

Company website

https://sign.dropbox.com/

63%

Caution advised

Mixed public signals. Review missing headers, domain age, and independent reputation before trusting it. Passive OSINT only · inventKeys=false.

High concern
Elevated risk
Caution advised
Trusted — verify
Strong protections

sign.dropbox.com security check

Name: sign.dropbox.com security check — Caution advised | Wordle
Item: sign.dropbox.com
Rating: 63
Author: Wordle

Public OSINT valuation for sign.dropbox.com: grade C (63/100). Title signal “Dropbox Sign eSignature Agreements — Work Smarter”. 2 security headers present, 6 commonly expected headers missing. This is a defensive surface review — not a penetration test.

/100

Grade C

Company website · Services · Social

Company website

https://sign.dropbox.com/

Services & products

Sign documents online https://sign.dropbox.com/features/free-document-signing
Create electronic signatures https://sign.dropbox.com/features/electronic-signatures
Choose or create templates https://sign.dropbox.com/features/templates
Fill and sign PDFs https://sign.dropbox.com/features/sign-and-fill-pdf-document
Complete online contracts https://sign.dropbox.com/features/online-contracts
Document management https://sign.dropbox.com/features/document-management
Explore features https://sign.dropbox.com/features
Sales and business development https://sign.dropbox.com/solutions/sales
Human resources https://sign.dropbox.com/solutions/hr-onboarding
Startups https://sign.dropbox.com/products/api/startups
Financial technology https://sign.dropbox.com/solutions/fintech
Real estate https://sign.dropbox.com/solutions/real-estate-tech
On-demand services https://sign.dropbox.com/solutions/on-demand-services
Sign Make it easy to send and sign https://sign.dropbox.com/products/dropbox-sign
Sign API Integrate eSign in your workflow https://sign.dropbox.com/products/dropbox-sign-api
Blog Workflow expertise & product news https://sign.dropbox.com/blog
Help center In-depth guidance for our products https://help.dropbox.com/en-us/sign
Dropbox Sign pricing Find the right plan for you https://sign.dropbox.com/products/dropbox-sign/pricing
Dropbox Sign API pricing Real-world stories with real results https://sign.dropbox.com/products/dropbox-sign-api/pricing
Start a 30-day free trial https://app.sign.dropbox.com/pricing/selectPlanForSignUp?plan_id=bded2be6&period=Y&source=hs-pricing

Social & LinkedIn

Facebook https://www.facebook.com/Dropbox/
X (Twitter) https://twitter.com/Dropbox
YouTube https://www.youtube.com/user/dropbox

Links are extracted from public crawl HTML only. We never invent profiles or product pages.

Research engines · Complete scan

This complete report delivers web-check-class passive modules to customers — DNS, TLS, headers, mail auth, archives, CT logs and more — researched in the spirit of Lissy93/web-check. Port scan, traceroute and Shodan stay off by policy. Run a live check on the security-check tool for the full interactive dashboard.

Connect this report to your website

Add a free badge that links visitors to this official Wordle security report. You get referral traffic and a backlink; customers can verify the dossier.

Open this public report

Badge HTML (copy into your footer or About page)

<!-- Wordle Official Security Report badge -->
<a href="https://wordle.review/sign.dropbox.com/#security-report" title="Wordle Official Security Report for sign.dropbox.com" rel="noopener"><img src="https://wordle.review/security-check/assets/official-security-report-seal-v20261102w.png" alt="Wordle Official Security Report · score 63/100" width="88" height="88" loading="lazy" /></a>

Trustpilot · Glassdoor

Trustpilot

—

Official Trustpilot signals only — never scraped. Shown when a public Business Unit profile exists (inventKeys=false).

Open Trustpilot for sign.dropbox.com ↗

Glassdoor

—

No Glassdoor scrape. Search the official employer directory when no linked profile is present.

Search Glassdoor ↗

Hosting · IP · map

IP99.84.152.22
ASNAS16509
HostingAmazon.com, Inc.
GeoFrankfurt am Main, Hessen, Germany

Query
sign.dropbox.comRequested hostname
IP
99.84.152.22Frankfurt am Main, Hessen, Germany
ASN
AS16509Amazon.com, Inc.
Trace
ICMP traceroute off by policyPassive IP path only · inventKeys=false

Sources: DNS · ipwho.is geolocation · OpenStreetMap embed. Soft-fail if geo blocked · inventKeys=false.

Domain registration · business age

RegistrarMarkMonitor Inc.

Registered1995-06-28

Domain age31 years 4 mo

Registry / location.com registry (RDAP)

Public RDAP / WHOIS only. Soft-fail when WHOIS is blocked — we never invent registrar or age.

How we scored sign.dropbox.com

Positive signals

TLS handshake OK (TLSv1.3).
Content-Security-Policy observed.
DNS resolves publicly (A/AAAA).
robots.txt is publicly available.
RDAP domain record available (dropbox.com).
Final HTTP status 200 at https://sign.dropbox.com/.

Risk signals

HSTS header missing on the final HTTPS response.
X-Content-Type-Options missing.

Findings

TLS handshake OK (TLSv1.3).
HSTS header missing on the final HTTPS response.
Content-Security-Policy observed.
X-Content-Type-Options missing.
DNS resolves publicly (A/AAAA).
robots.txt is publicly available.
RDAP domain record available (dropbox.com).
Final HTTP status 200 at https://sign.dropbox.com/.

Technical details

DNS

resolved

A: 99.84.152.22, 99.84.152.92, 99.84.152.61, 99.84.152.11
AAAA: —
PTR: server-99-84-152-22.fra56.r.cloudfront.net
error: —

TLS / certificate

version: TLSv1.3
cipher: TLS_AES_128_GCM_SHA256
issuer: Amazon
notAfter: May 12 23:59:59 2027 GMT
SAN sample: sign.dropbox.com
error: —

HTTP & security headers

2 present

finalUrl: https://sign.dropbox.com/
status: 200
server: cloudflare
x-powered-by: —
present: content-security-policy, x-frame-options
missing: strict-transport-security, x-content-type-options, referrer-policy, permissions-policy, cross-origin-opener-policy, cross-origin-resource-policy
cookie Secure: False
cookie HttpOnly: False

Tech fingerprint (public)

passive

title: Dropbox Sign eSignature Agreements — Work Smarter
generator: —
tech: —
script hosts: x, www.dropbox.com, d3e54v103j8qbb.cloudfront.net, cdn.prod.website-files.com, mar-cdn.hellosign.com
description: Dropbox Sign (formerly HelloSign) is the easiest way to send, receive and manage legally binding electronic signatures. Try it free!

Company presence (crawl links)

extracted

companyWebsite: https://sign.dropbox.com/
serviceLinks: Sign documents online: https://sign.dropbox.com/features/free-document-signing, Create electronic signatures: https://sign.dropbox.com/features/electronic-signatures, Choose or create templates: https://sign.dropbox.com/features/templates, Fill and sign PDFs: https://sign.dropbox.com/features/sign-and-fill-pdf-document, Complete online contracts: https://sign.dropbox.com/features/online-contracts, Document management: https://sign.dropbox.com/features/document-management, Explore features: https://sign.dropbox.com/features, Sales and business development: https://sign.dropbox.com/solutions/sales, Human resources: https://sign.dropbox.com/solutions/hr-onboarding, Startups: https://sign.dropbox.com/products/api/startups, Financial technology: https://sign.dropbox.com/solutions/fintech, Real estate: https://sign.dropbox.com/solutions/real-estate-tech
socialLinks: Facebook: https://www.facebook.com/Dropbox/, X (Twitter): https://twitter.com/Dropbox, YouTube: https://www.youtube.com/user/dropbox

RDAP / registration

rdap

domain: dropbox.com
registrar: MarkMonitor Inc.
created: 1995-06-28T04:00:00Z
expires: 2027-06-27T04:00:00Z
nameservers: ns-1162.awsdns-17.org, ns-1949.awsdns-51.co.uk, ns-315.awsdns-39.com, ns-564.awsdns-06.net
status: client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
error: —

Public well-known

passive

/.well-known/security.txt: HTTP 404
/robots.txt: HTTP 200 · found
/security.txt: HTTP 404

Analyzed 2026-11-02T16:04:34Z WORDLE passive OSINT (DNS/TLS/HTTP/RDAP/well-known) — no exploits More recent checks

looking for more information about this company or any company in the world? -Contact http://companyforensics.org

This service was brought to you by http://dotsynergygroup.com