What official domains does Dropbox use?

Updated May 08, 2025

This article applies to all Dropbox users.

Dropbox uses several domains to run the service. Each domain serves a specific purpose, like running the Dropbox product, providing communications, or hosting marketing materials. Check the domains in this article if you’re unsure if it’s safe to go to a particular website or accept a communication from an email address that looks like it's from Dropbox.

How to share with your branding

www.dropbox.com

Most of the things you can do with Dropbox online happen on www.dropbox.com. www.dropbox.com is the only domain where Dropbox will ever ask for private information like the email address and password for your Dropbox account. Be wary of any other domains that look like Dropbox that ask you for your Dropbox email or password.

Official email from Dropbox

If you receive a communication that looks like it’s from Dropbox but doesn’t come from one of the domains listed, please be careful as it may contain malware or be a phishing attempt.

All email from employees, support staff, and some service-related email (such as email verification, password reset confirmations, and Dropbox research study invitations) are sent from docsend.com, dropbox.com, dropboxmail.com, em-s.dropbox.com, em.dropbox.com, or dropbox.zendesk.com
All Dropbox business related email originates from dropbox.com or dropboxpartners.com
All promotional and tip emails originate from docsend.com, dropboxmail.com, em-s.dropbox.com, em.dropbox.com, or dropboxteam.com

Verified Dropbox domains

All Dropbox content should originate from one of the following domains or a subdomain of the following domains:

addtodropbox.com
app.hellosign.com
dash.ai
db.tt
docsend.com
dropbox.com
dropboxapi.com
dropboxbusiness.com
dropboxcaptcha.com
dropboxexperiment.com
dropboxforums.com
dropboxforum.com
dropboxinsiders.com
dropboxlegal.com
dropboxmail.com
dropboxpartners.com
dropboxstatic.com
dropboxteam.com
dropbox.tech
dropbox.zendesk.com
getdropbox.com
hellofax.com
learn.dropbox.com
links.dropbox.com

Other verified domains

These are other verified domains Dropbox uses. You typically won’t see these domains in your browser address bar, but they are used for things like protecting account login pages and DNS requests.

c.evidon.com
cdn.arkoselabs.com
cfl.dropboxstatic.com
consent.dropbox.com
ungated.dropbox.com
dropbox-api.arkoselabs.com
dropbox-dns.com
l.evidon.com
www.google.com/recaptcha/
apis.google.com/js/
www.gstatic.com/recaptcha/
paper-attachments.s3.amazonaws.com

URLs used to host user data

These paths are used to host content for users when they create links to their folders and files (for example, using shared links). Dropbox doesn't use these paths to ask you for private or personal information.