Sync and cloud storage
dropbox.com
dropbox.com, dropboxapi.com and dropboxstatic.com are on Dropbox's list of official domains. The desktop app uses them to sync and to sign in.
Short answer
Dropbox's official domains for its product, API and static content.
Block with care
Blocking them stops the Dropbox app and website. To save data, pause syncing in the Dropbox app instead.
- Matches
dropbox.com*.dropbox.comdropboxapi.com*.dropboxapi.comdropboxstatic.com*.dropboxstatic.com
A name with *. covers every name under it: *.push.apple.com matches 1-courier.push.apple.com.
What it serves
Dropbox's help lists these among its official domains. It says that www.dropbox.com is the only domain where Dropbox asks for your email address and password.
Dropbox's firewall article says that the desktop app needs ports 80 and 443. It recommends allowing Dropbox's domain names rather than IP addresses, because Dropbox also uses third-party providers.
On a Mac, the app is Dropbox.
Processes that use it
What breaks if you block it
Block with care
Blocking them stops the Dropbox app and website. To save data, pause syncing in the Dropbox app instead.
What breaks if you block it
- The Dropbox desktop app can't sign in or sync.
- dropbox.com doesn't load in the browser.
With Kilobat Pro and the network filter, you can block a host for every app or for one app: in Connections, select a connection and choose Block. Apple’s own services are never blocked by Kilobat’s Protection lists.
Sources
- Dropbox Help: What official domains does Dropbox use?
- Dropbox Help: How to allow firewall and security permissions for the Dropbox desktop app
Checked on 1 November 2026.