Domain footprint

This domain — or one of its subdomains — appears in malicious-indicator feeds we mirror. Each entry is what the feed reported, not something we observed ourselves.

Open ports, software fingerprints and matched CVEs come from Shodan InternetDB, refreshed daily. Shodan did the scanning; we only read its index. A CVE listed here means a service banner matched a version known to be affected — not that exploitation was confirmed, and not that a backported fix is absent.

A subdomain appearing for the first time often marks a change in attack surface — a new service, a migration, or something that was not meant to be public.

• capture.dropbox.com2026-07-26
• community.dropbox.com2026-07-26
• www.capture.dropbox.com2026-07-26
• secure-ws.pp.dropbox.com2026-07-25
• apps.os.dropbox.com2026-07-24
• mcp.os.dropbox.com2026-07-24
• www.fax.dropbox.com2026-07-23
• sb.dev.corp.dropbox.com2026-07-20
• secure-ws-stg.pp.dropbox.com2026-07-15
• fax.dropbox.com2026-07-14
• staging-sign.dropbox.com2026-07-14

68,648,009 accounts exposed · 1 with passwords

These are publicly catalogued breach events for this domain — the incidents themselves, never individual accounts. Absence here means the incident is not in the catalogue, not that the organisation was never breached.