Yes, looks like the .com turned off Whois privacy, and Dropbox does own it now (most Whois services still point to Domains by Proxy, including when I checked). But since Dropbox didn't have a comment for TechCrunch on why the domain pointed to the real site while it was still privacy-protected, the headline of the article didn't make sense.