HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 1994
Connection: keep-alive
Date: Wed, 26 Mar 2025 17:19:23 GMT
Last-Modified: Wed, 26 Mar 2025 16:14:04 GMT
ETag: "d4a3b9a661e331a321a2472a7d388b17"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zZ4mzdelIM9CrHa7shSvQa--uxoqFdI68mTU2ijddgxiT6bJjtip2A==
X-Robots-Tag: noindex

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 183852
cross-origin-resource-policy: cross-origin
date: Wed, 26 Mar 2025 16:44:17 GMT
last-modified: Wed, 26 Mar 2025 16:41:34 GMT
etag: "36a6dc7a38bf573baddd38c9c013333c"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, s-maxage=7200, public
content-encoding: gzip
x-amz-version-id: rIog2suX95wHKBmLM6QV_UW1kkzar6qY
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 fd454824c672a1a7cfcbbe959ab47058.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P3
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
age: 2114
x-amz-cf-id: _2XJtrkBxRwPv9PgqLS3TmuPNkubQc6sC7oe5h-IoeyXreOPF41CFw==

HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 26 Mar 2025 17:19:19 GMT
date: Wed, 26 Mar 2025 17:19:19 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 120884
Connection: keep-alive
Server: Cowboy
Date: Wed, 26 Mar 2025 04:27:21 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742963241&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=EhTN3gXRHzE%2FAc2Qr6AtR0P2hmAwfV3jxJSaGN5WmRU%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742963241&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=EhTN3gXRHzE%2FAc2Qr6AtR0P2hmAwfV3jxJSaGN5WmRU%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Via: 1.1 vegur, 1.1 8d70d51432f10e2eca684af448a5f99e.cloudfront.net (CloudFront), 1.1 dde62003552e800310ee1980113eedb4.cloudfront.net (CloudFront)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: 
Access-Control-Max-Age: 604800
Last-Modified: Wed, 26 Mar 2025 00:41:58 GMT
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Vary: Origin
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA56-P12, HEL50-C2
X-Amz-Cf-Id: wI94zal43WJb7MT3GZiSOqtsdvNUJHO_QFqS3qhIZkvhRzyhWzZwhQ==
Age: 46319
X-Robots-Tag: noindex

HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: blob: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js 'nonce-RNqB1UEJlemxoKX49mPE' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-RNqB1UEJlemxoKX49mPE' 'nonce-TNp3qBao1jKPHi0AYJiN'
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=b0YJGUVqw-cds5Sez92NQmqQ; Domain=dropbox.com; expires=Thu, 26 Mar 2026 17:19:23 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=b0YJGUVqw-cds5Sez92NQmqQ; expires=Thu, 26 Mar 2026 17:19:23 GMT; Path=/; SameSite=None; Secure
__Host-ss=d_llnGmx-g; expires=Thu, 26 Mar 2026 17:19:23 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-server-response-time: 16
x-xss-protection: 1; mode=block
date: Wed, 26 Mar 2025 17:19:22 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 4d40ef9a35f646bba4dcc2a648bcca3e
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: blob: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js 'nonce-RNqB1UEJlemxoKX49mPE' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-RNqB1UEJlemxoKX49mPE' 'nonce-TNp3qBao1jKPHi0AYJiN'
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=b0YJGUVqw-cds5Sez92NQmqQ; Domain=dropbox.com; expires=Thu, 26 Mar 2026 17:19:19 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=b0YJGUVqw-cds5Sez92NQmqQ; expires=Thu, 26 Mar 2026 17:19:19 GMT; Path=/; SameSite=None; Secure
__Host-ss=d_llnGmx-g; expires=Thu, 26 Mar 2026 17:19:19 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
__Host-logged-out-session=ChBGH48sh44OHHn30jg02NL5EJfukL8GGi5BTW9XUU51eXNoMElpX2U3MXpaN1JZM1VnT3NpNkdDRG5xV0NBQ3J0N29oaTNB; HttpOnly; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-server-response-time: 13
x-xss-protection: 1; mode=block
date: Wed, 26 Mar 2025 17:19:19 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 58f8f6763d40447697ebb26b1f145766
X-Firefox-Spdy: h2

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 70999
cross-origin-resource-policy: cross-origin
last-modified: Wed, 26 Mar 2025 13:34:33 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: HPX5uVhhRK3PqvQfnU5B6IWVc39dU.Ct
accept-ranges: bytes
server: AmazonS3
date: Wed, 26 Mar 2025 15:37:24 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "ffe3a93e4681fa6e88e5845a4fc9a69d"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 fd454824c672a1a7cfcbbe959ab47058.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P3
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
age: 6127
x-amz-cf-id: n8K0vDQ9YU0EX5jzLf6MqYQW9HTj1DQFpIt0z8ZivwbRfM8QZM8IQQ==

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: Cowboy
Date: Wed, 26 Mar 2025 17:19:22 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1743009562&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=eV0s%2BcDcMpnT8MWLiyz7ZwhWWhaNx0i8qRRansmNuXo%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1743009562&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=eV0s%2BcDcMpnT8MWLiyz7ZwhWWhaNx0i8qRRansmNuXo%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Via: 1.1 vegur, 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 0
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
Cache-Control: no-cache
Content-Security-Policy: connect-src 'self' blob:  https://assets.docsend.com https://d1ng9lshxk6v9w.cloudfront.net https://*.previews.dropboxusercontent.com/*/p.m3u8 https://*.dropboxusercontent.com https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://*.intercomcdn.com https://uploads.intercomusercontent.com https://featuregates.org https://events.statsigapi.net https://browser-intake-datadoghq.com https://browser-intake-us3-datadoghq.com https://browser-intake-us5-datadoghq.com https://*.kissmetrics.com https://*.kissmetrics.io https://api.segment.io https://cdn.segment.com https://events.statsigapi.net/v1/rgstr https://statsigapi.net/v1/sdk_exception https://*.id.opendns.com https://www.google-analytics.com https://analytics.google.com https://*.g.doubleclick.net https://www.facebook.com https://api.autopilothq.com https://*.filestackapi.com https://cdn.filestackcontent.com https://s3.amazonaws.com https://*.dropbox.com https://*.dropboxapi.com https://*.dropboxstatic.com https://browser.pipe.aria.microsoft.com https://checkout.stripe.com https://forms.hubspot.com https://*.pubnub.com https://docsend-prod.s3.amazonaws.com; frame-src 'self'  https://assets.docsend.com https://*.previews.dropboxusercontent.com/ https://marketing.docsend.com https://js.stripe.com https://checkout.stripe.com https://www.youtube.com https://player.vimeo.com https://td.doubleclick.net/ https://*.g.doubleclick.net https://tpc.googlesyndication.com https://www.facebook.com https://accounts.google.com/gsi/ https://telemetryservice.firstpartyapps.oaspapps.com https://www.dropbox.com https://ifttt.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic'  https://assets.docsend.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://*.google-analytics.com https://cdn.segment.com https://scripts.kissmetrics.com https://*.id.opendns.com https://www.youtube.com https://*.ytimg.com https://vimeo.com https://www.vimeo.com https://www.googletagmanager.com https://www.googleadservices.com https://tagmanager.google.com https://connect.facebook.net https://*.quora.com https://*.bing.com https://api.autopilothq.com https://*.capterra.com https://*.g.doubleclick.net https://accounts.google.com/gsi/client https://js.hs-analytics.net https://js.hs-scripts.com https://js-na1.hs-scripts.com https://js.hscollectedforms.net https://js.hsleadflows.net https://js.stripe.com https://checkout.stripe.com https://ajax.aspnetcdn.com https://appsforoffice.microsoft.com https://maps.googleapis.com https://static.filestackapi.com https://zapier.com  'nonce-cpKW2D1OYnQ73H2sgvitKQ=='; report-uri https://www.dropbox.com/csp_log?policy_name=docsend; default-src 'self'; base-uri 'self'; child-src 'self' blob:; font-src 'self' https: data: chrome-extension:; form-action 'self'  https://docsend.com https://*.docsend.com https://intercom.help https://api-iam.intercom.io https://accounts.google.com https://www.linkedin.com https://*.salesforce.com https://www.dropbox.com https://accounts.logme.in https://secure.join.me https://*.okta.com https://*.oktapreview.com https://*.jumpcloud.com https://*.onelogin.com https://zapier.com https://ifttt.com https://www.facebook.com; img-src 'self' https: data: blob: chrome-extension:; media-src 'self' blob: data: https://d1ng9lshxk6v9w.cloudfront.net https://js.intercomcdn.com https://*.dropboxusercontent.com; object-src 'none'; style-src 'self' 'unsafe-inline'  https://assets.docsend.com https://fonts.googleapis.com https://tagmanager.google.com https://static.filestackapi.com https://use.fontawesome.com https://vjs.zencdn.net https://accounts.google.com/gsi/style; worker-src 'self' blob:
Set-Cookie: _v_=q2Tvb8%2BQAvX6AZwB94k%2FnJM1JDFTv9AspenDljfGWbRZiNtjSdVb7tRlIQxPKzWJhX%2Bq58kadhStu942kU%2FAcoXtdW%2BS92xgCSA9eqEMnd5X8Kt2Og%3D%3D--ZRKpjyh8qerfZ%2BY8--5V2CfBkFCIVAIhLvhtFCvw%3D%3D; domain=.docsend.com; path=/; expires=Thu, 26 Mar 2026 17:19:22 GMT; SameSite=None; secure
X-Request-Id: 681402d3-0136-4261-bdfb-43ce690eae42
X-Runtime: 0.028270
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
X-Cache: Error from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: EMkIZq4TdUI4xRiLdY1xdsub1qfdzxC5u_0nxijn7x9G0A-VA7_oAg==

HTTP/1.1 200 OK
Content-Type: binary/octet-stream
Content-Length: 115832
Connection: keep-alive
Date: Wed, 26 Mar 2025 16:51:46 GMT
Last-Modified: Wed, 26 Mar 2025 16:19:54 GMT
ETag: "6293e880346365613050f42cc7747b55"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: NuLuVm2yWR16LPS24WgCK-TK0GgsOINTFgbbgxx3q_PU9AsmmXIK1w==
Age: 1656
X-Robots-Tag: noindex

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 2674
last-modified: Wed, 26 Mar 2025 16:44:12 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: 0wIQegL1zCaVAKiFalxa7G8nRcd579bK
accept-ranges: bytes
server: AmazonS3
date: Wed, 26 Mar 2025 17:13:01 GMT
cache-control: max-age=300, s-maxage=300, public
etag: "d715423e12651ce2bbc62ee29000ba55"
x-cache: Error from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 8j-Q5H9cq-cJfO4RvzKBgOcyDRVhP2_1N0BN5CDYl7fBdgSQ3igQUw==
age: 402
cross-origin-resource-policy: cross-origin
vary: accept-encoding, Origin
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 208732
last-modified: Mon, 24 Mar 2025 17:11:54 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: XMJfZlJjbQkeSAW1.Y1pf8qCtKeaPbxj
accept-ranges: bytes
server: AmazonS3
date: Wed, 26 Mar 2025 17:15:18 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "ded832c01c04d65ba1907e0d2a3b0d81"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 0c1168f7b86cbd4c1fa0a6e6e52ab0ce.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Ro88Iv4Q8BQ2KBIefFH6TQhHvSljGgO17_Et_YrqZ99kqiUwQYYTkQ==
age: 246
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: text/plain; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://docsend.com
access-control-expose-headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed
content-disposition: attachment
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: blob: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js 'nonce-RNqB1UEJlemxoKX49mPE' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-RNqB1UEJlemxoKX49mPE' 'nonce-TNp3qBao1jKPHi0AYJiN'
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=b0YJGUVqw-cds5Sez92NQmqQ; Domain=dropbox.com; expires=Thu, 26 Mar 2026 17:19:24 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=b0YJGUVqw-cds5Sez92NQmqQ; expires=Thu, 26 Mar 2026 17:19:24 GMT; Path=/; SameSite=None; Secure
__Host-ss=d_llnGmx-g; expires=Thu, 26 Mar 2026 17:19:24 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
vary: Origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-server-response-time: 20
x-xss-protection: 1; mode=block
date: Wed, 26 Mar 2025 17:19:23 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 0
cache-control: no-cache, no-store
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 5d105445513c4cd480327d0fc544c77b
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: Cowboy
Date: Wed, 26 Mar 2025 02:07:32 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742954852&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=kBmdYzvCXF8xmo6HyMmHeTVvggaK%2BxeT2X%2Bdj2h2VWo%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742954852&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=kBmdYzvCXF8xmo6HyMmHeTVvggaK%2BxeT2X%2Bdj2h2VWo%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Via: 1.1 vegur, 1.1 ea7cd71b17e29a29176686830f1a76c4.cloudfront.net (CloudFront), 1.1 3ba9c8c432edc6e444a1eb80907e1602.cloudfront.net (CloudFront)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: 
Access-Control-Max-Age: 604800
Last-Modified: Wed, 26 Mar 2025 00:41:02 GMT
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Content-Encoding: br
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA56-P12, HEL50-C2
X-Amz-Cf-Id: C0wGOtbxZGHRXQNdiSY9Es8_P1UcG_QS81JbOT576AOSJKh7eFs8pA==
Age: 54705
X-Robots-Tag: noindex

HTTP/1.1 200 OK
Content-Type: application/font-woff2
Content-Length: 46188
Connection: keep-alive
Server: Cowboy
Date: Wed, 26 Mar 2025 07:05:33 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742972733&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=P9e7pImJAlWJDK8BXM0FpK5b%2Fdz8yqOzwaan8wknNBs%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742972733&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=P9e7pImJAlWJDK8BXM0FpK5b%2Fdz8yqOzwaan8wknNBs%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Via: 1.1 vegur, 1.1 daf01c71790f42e645ae4024c607941e.cloudfront.net (CloudFront), 1.1 8250617d32eb5ab8f209b802320fccba.cloudfront.net (CloudFront)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: 
Access-Control-Max-Age: 604800
Last-Modified: Wed, 26 Mar 2025 00:41:58 GMT
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Vary: Origin
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA56-P12, HEL50-C2
X-Amz-Cf-Id: UfnaltvFXwRjoFt2sn_z2sf-tzcXpZeEElAiwshIAR6ihpflZYMITg==
Age: 36827
X-Robots-Tag: noindex

HTTP/2 200 OK
date: Wed, 26 Mar 2025 17:19:21 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Fri, 21 Mar 2025 00:41:36 GMT
x-dropbox-request-id: 0bc1ddaca6af350b60b1e6c6f5134aca
x-content-type-options: nosniff
x-cached: HIT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public, immutable
access-control-allow-origin: *
timing-allow-origin: https://www.dropbox.com
content-encoding: br
cf-cache-status: HIT
age: 435935
server: cloudflare
cf-ray: 926850013a0956bf-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: binary/octet-stream
Content-Length: 4651
Connection: keep-alive
Date: Wed, 26 Mar 2025 16:51:46 GMT
Last-Modified: Wed, 26 Mar 2025 16:18:43 GMT
ETag: "0caea02c0ccb961ca3938996f6976cb3"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: iZYVAb_5s9Z7PVtEctAnf5Wt8i2XKzLtHRKFKKRbEnsOyZyu59WA6A==
Age: 1657
X-Robots-Tag: noindex

HTTP/2 200 OK
content-type: font/woff
content-length: 28960
date: Mon, 24 Mar 2025 10:53:59 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Thu, 16 Jan 2025 14:31:43 GMT
etag: "a7942249ca925ef356c0f2b1dab17ef3"
x-amz-server-side-encryption: AES256
cache-control: max-age=2592000
x-amz-version-id: 9HoychAPZgICQG7dUD_xmKCSk2sW0biR
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Y2oYJOjopMhsnOfGOGEVIlGt_LhweV0YOuLCyzWFioQdaco7nq2hHA==
age: 195932
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 12624026
Connection: keep-alive
Server: Cowboy
Date: Wed, 26 Mar 2025 02:07:32 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742954853&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=q0zV9qtQnS%2FxfVyqgqlLi1IvgZm2Su4uqfxeNXkhcDc%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742954853&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=q0zV9qtQnS%2FxfVyqgqlLi1IvgZm2Su4uqfxeNXkhcDc%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Via: 1.1 vegur, 1.1 58afb490a7c8c45de5813dbf9e713c0c.cloudfront.net (CloudFront), 1.1 dde62003552e800310ee1980113eedb4.cloudfront.net (CloudFront)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: 
Access-Control-Max-Age: 604800
Last-Modified: Wed, 26 Mar 2025 00:41:54 GMT
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Vary: Origin
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA56-P12, HEL50-C2
X-Amz-Cf-Id: 5lEKn-yJL09jjYf04_ZU-r2lBzmbojr_toqBxbQyDSNjxjZhA9Q_qA==
Age: 54706
X-Robots-Tag: noindex

HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 4131
Connection: keep-alive
Server: Cowboy
Date: Wed, 26 Mar 2025 17:19:21 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1743009561&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=VmC8rEg9o8NvLx5Wghwpiqg%2F92dMTBHrGhg%2F7B%2FpXHo%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1743009561&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=VmC8rEg9o8NvLx5Wghwpiqg%2F92dMTBHrGhg%2F7B%2FpXHo%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Via: 1.1 vegur, 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
Last-Modified: Wed, 26 Mar 2025 00:37:16 GMT
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Vary: Origin
X-Cache: Miss from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fIuv1l2dY1F3l-Iw3JF3zDkxsLkVmmXFX0K7CRhqdNnILSHK7wolew==

HTTP/2 200 OK
date: Wed, 26 Mar 2025 17:19:21 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 05 Mar 2025 08:59:33 GMT
x-dropbox-request-id: fb08b32e0b2122431c68ff1bc89f045c
x-content-type-options: nosniff
x-cached: MISS
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public, immutable
access-control-allow-origin: *
timing-allow-origin: https://www.dropbox.com
content-encoding: br
cf-cache-status: HIT
age: 1814790
server: cloudflare
cf-ray: 9268500109be56bf-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

HTTP/2 307 Temporary Redirect
content-type: text/html; charset=utf-8
content-security-policy: sandbox
location: https://www.dropbox.com/pithos/host%3Amarketing.docsend.com/marketing_tracker_service
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=b0YJGUVqw-cds5Sez92NQmqQ; Domain=dropbox.com; expires=Thu, 26 Mar 2026 17:19:22 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=b0YJGUVqw-cds5Sez92NQmqQ; expires=Thu, 26 Mar 2026 17:19:22 GMT; Path=/; SameSite=None; Secure
__Host-ss=d_llnGmx-g; expires=Thu, 26 Mar 2026 17:19:22 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
date: Wed, 26 Mar 2025 17:19:22 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 72691d33433a4a8794bf0ea50979bd03
X-Firefox-Spdy: h2

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 110900
cross-origin-resource-policy: cross-origin
last-modified: Mon, 24 Mar 2025 13:16:48 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: 3osPeP8q09Yba86CAtZsFrLuJA5fwmwJ
accept-ranges: bytes
server: AmazonS3
date: Wed, 26 Mar 2025 15:19:59 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "4e771998932417dbd3f8bb87833e41c1"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 fd454824c672a1a7cfcbbe959ab47058.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P3
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
age: 7171
x-amz-cf-id: Mijtr6JdKG6og_zB6dJ2RZZbykDVP-RO57WfuPvyUD6U4XPPwdV8OA==

HTTP/2 307 Temporary Redirect
content-type: text/html; charset=utf-8
content-security-policy: sandbox
location: https://www.dropbox.com/pithos/host%3Adocsend.com/marketing_tracker_client
referrer-policy: strict-origin-when-cross-origin
set-cookie: gvc=NzMxMTAxNDA2OTM5ODk4NzAxMjYxNTM5MzM2NDMyNDE5OTc5OA%3D%3D; expires=Mon, 25 Mar 2030 17:19:19 GMT; HttpOnly; Path=/; SameSite=None; Secure
t=Qvv68KpMJQABwC6e6NM0fe2h; Domain=dropbox.com; expires=Thu, 26 Mar 2026 17:19:19 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=Qvv68KpMJQABwC6e6NM0fe2h; expires=Thu, 26 Mar 2026 17:19:19 GMT; Path=/; SameSite=None; Secure
__Host-ss=78NOwtTeBs; expires=Thu, 26 Mar 2026 17:19:19 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
locale=en; Domain=dropbox.com; expires=Mon, 25 Mar 2030 17:19:19 GMT; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
date: Wed, 26 Mar 2025 17:19:18 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: d2e4813b73964cc19755e1dc34b72ff4
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: text/plain; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://docsend.com
access-control-expose-headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed
content-disposition: attachment
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: blob: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js 'nonce-RNqB1UEJlemxoKX49mPE' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-RNqB1UEJlemxoKX49mPE' 'nonce-TNp3qBao1jKPHi0AYJiN'
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=b0YJGUVqw-cds5Sez92NQmqQ; Domain=dropbox.com; expires=Thu, 26 Mar 2026 17:19:22 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=b0YJGUVqw-cds5Sez92NQmqQ; expires=Thu, 26 Mar 2026 17:19:22 GMT; Path=/; SameSite=None; Secure
__Host-ss=d_llnGmx-g; expires=Thu, 26 Mar 2026 17:19:22 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
vary: Origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-server-response-time: 29
x-xss-protection: 1; mode=block
date: Wed, 26 Mar 2025 17:19:22 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 0
cache-control: no-cache, no-store
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 0e6a3c24722645be903c46d31a0d165b
X-Firefox-Spdy: h2

HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Wed, 26 Mar 2025 17:19:24 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ZunEBaGF27iXfwltoUwpvYlqmNM=
Sec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 175095
cross-origin-resource-policy: cross-origin
last-modified: Wed, 19 Mar 2025 14:59:56 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: iEenEcYvbBxgLCg6a3Eb4unAJu3lf5M5
accept-ranges: bytes
server: AmazonS3
date: Wed, 26 Mar 2025 15:36:16 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "66c1019fea54e40283cf0f62ee2e9f57"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 fd454824c672a1a7cfcbbe959ab47058.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P3
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
age: 6195
x-amz-cf-id: gaKyyRKsILfpjNHaf8NkaqPNn0kHzssXgCgezlNkCDPKruEfuHSh-A==

HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: blob: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js 'nonce-RNqB1UEJlemxoKX49mPE' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-RNqB1UEJlemxoKX49mPE' 'nonce-TNp3qBao1jKPHi0AYJiN'
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=b0YJGUVqw-cds5Sez92NQmqQ; Domain=dropbox.com; expires=Thu, 26 Mar 2026 17:19:20 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=b0YJGUVqw-cds5Sez92NQmqQ; expires=Thu, 26 Mar 2026 17:19:20 GMT; Path=/; SameSite=None; Secure
__Host-ss=d_llnGmx-g; expires=Thu, 26 Mar 2026 17:19:20 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-server-response-time: 25
x-xss-protection: 1; mode=block
date: Wed, 26 Mar 2025 17:19:20 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: d6ad09f7a3ae415a9b9e69dd5ad78549
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: blob: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js 'nonce-RNqB1UEJlemxoKX49mPE' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-RNqB1UEJlemxoKX49mPE' 'nonce-TNp3qBao1jKPHi0AYJiN'
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=b0YJGUVqw-cds5Sez92NQmqQ; Domain=dropbox.com; expires=Thu, 26 Mar 2026 17:19:19 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=b0YJGUVqw-cds5Sez92NQmqQ; expires=Thu, 26 Mar 2026 17:19:19 GMT; Path=/; SameSite=None; Secure
__Host-ss=d_llnGmx-g; expires=Thu, 26 Mar 2026 17:19:19 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
__Host-logged-out-session=ChBvzZN+ycvGIxl26LxmUvgZEJfukL8GGi5BTW90SjR6NVhHOXVSNVJsWkhqZDc4YzZVWW9LbEdKNV9JRXA5NUgzNE4zUGxB; HttpOnly; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-server-response-time: 12
x-xss-protection: 1; mode=block
date: Wed, 26 Mar 2025 17:19:18 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 4037b3f4ffce4892899f61903c058b00
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/font-woff2
Content-Length: 46188
Connection: keep-alive
Server: Cowboy
Date: Wed, 26 Mar 2025 07:05:33 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742972733&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=P9e7pImJAlWJDK8BXM0FpK5b%2Fdz8yqOzwaan8wknNBs%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742972733&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=P9e7pImJAlWJDK8BXM0FpK5b%2Fdz8yqOzwaan8wknNBs%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Via: 1.1 vegur, 1.1 daf01c71790f42e645ae4024c607941e.cloudfront.net (CloudFront), 1.1 dde62003552e800310ee1980113eedb4.cloudfront.net (CloudFront)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: 
Access-Control-Max-Age: 604800
Last-Modified: Wed, 26 Mar 2025 00:41:58 GMT
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Vary: Origin
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA56-P12, HEL50-C2
X-Amz-Cf-Id: cO9wZsm1dES_97kLqZ-1-NLtvbygRhQozYS3SVIO_pMbtMFUZ46w9Q==
Age: 36828
X-Robots-Tag: noindex

HTTP/2 200 OK
content-type: text/plain; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://docsend.com
access-control-expose-headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed
content-disposition: attachment
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: blob: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js 'nonce-RNqB1UEJlemxoKX49mPE' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-RNqB1UEJlemxoKX49mPE' 'nonce-TNp3qBao1jKPHi0AYJiN'
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=b0YJGUVqw-cds5Sez92NQmqQ; Domain=dropbox.com; expires=Thu, 26 Mar 2026 17:19:22 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=b0YJGUVqw-cds5Sez92NQmqQ; expires=Thu, 26 Mar 2026 17:19:22 GMT; Path=/; SameSite=None; Secure
__Host-ss=d_llnGmx-g; expires=Thu, 26 Mar 2026 17:19:22 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
vary: Origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-server-response-time: 26
x-xss-protection: 1; mode=block
date: Wed, 26 Mar 2025 17:19:22 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 0
cache-control: no-cache, no-store
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 342839f22d4f4abc9c899f947fdcdfb2
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: Cowboy
Date: Tue, 25 Mar 2025 20:09:51 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742933391&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=SCLSmkJP76e3DFc7jBdhw1i8gwR1kqdBSyHFm2bsgr0%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742933391&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=SCLSmkJP76e3DFc7jBdhw1i8gwR1kqdBSyHFm2bsgr0%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Via: 1.1 vegur, 1.1 a9a00cd74e5659e3b49c7fab5dc2863a.cloudfront.net (CloudFront), 1.1 06ede6e80e9cd4fa59b8d9b8a98391a8.cloudfront.net (CloudFront)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: 
Access-Control-Max-Age: 604800
Last-Modified: Tue, 25 Mar 2025 19:55:47 GMT
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Content-Encoding: br
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA56-P12, HEL50-C2
X-Amz-Cf-Id: EkfNEl0X8m9hcSnQF7S3VU9lJDhhxNCAR75rCzitZXiwRO5d56zDUA==
Age: 76168
X-Robots-Tag: noindex

HTTP/1.1 204 No Content
Content-Length: 0
Connection: keep-alive
Server: Cowboy
Date: Wed, 26 Mar 2025 17:19:21 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1743009561&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=VmC8rEg9o8NvLx5Wghwpiqg%2F92dMTBHrGhg%2F7B%2FpXHo%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1743009561&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=VmC8rEg9o8NvLx5Wghwpiqg%2F92dMTBHrGhg%2F7B%2FpXHo%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Via: 1.1 vegur, 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 0
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
Cache-Control: no-cache
Content-Security-Policy-Report-Only: connect-src 'self' blob:  https://browser-intake-datadoghq.com https://browser-intake-us3-datadoghq.com https://browser-intake-us5-datadoghq.com https://d.dropbox.com https://www.dropbox.com https://*.pubnub.com https://api.sprig.com wss://nexus-websocket-a.intercom.io https://api-iam.intercom.io https://www.googletagmanager.com https://analytics.google.com https://*.g.doubleclick.net https://www.google-analytics.com https://edge.fullstory.com https://rs.fullstory.com https://events.statsigapi.net https://featuregates.org; frame-src 'self' https://js.stripe.com https://checkout.stripe.com https://chat.dropbox.com https://marketing.docsend.com https://dropboxcaptcha.com https://accounts.google.com/gsi/; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https://assets.docsend.com https://checkout.stripe.com https://js.stripe.com https://edge.fullstory.com https://rs.fullstory.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsleadflows.net https://scripts.kissmetrics.com https://static.filestackapi.com https://cdn.zapier.com https://zapier.com/zapbook/embed/widget.jsa https://js.intercomcdn.com https://widget.intercom.io https://maps.googleapis.com https://www.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://bat.bing.com https://www.clarity.ms https://connect.facebook.net https://www.facebook.com https://ct.capterra.com https://cdn.madkudu.com https://dc.ads.linkedin.com https://api.mutinyhq.io  https://a.quora.com https://accounts.google.com/gsi/client https://www.youtube.com https://www.dropbox.com https://cfl.dropboxstatic.com https://*.previews.dropboxusercontent.com/*/p.m3u8 https://*.dropboxusercontent.com 'nonce-ZrUnPNG6uz3I72BVY+/Y3g=='; report-uri https://www.dropbox.com/csp_log?policy_name=docsend
X-Request-Id: 555859ac-23c2-416e-85c2-8b3a3b1fab93
X-Runtime: 0.008473
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Vary: Origin
X-Cache: Miss from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zJoZoW21xGgX5UQ-IsiSyJGjqRbOteo1ffyMCsydRsKbPo2xHaFvlw==

HTTP/2 200 OK
date: Wed, 26 Mar 2025 17:19:21 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Tue, 25 Mar 2025 05:35:42 GMT
x-dropbox-request-id: c250127885721678b07d72539b6dc5e0
x-content-type-options: nosniff
x-cached: MISS
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public, immutable
access-control-allow-origin: *
timing-allow-origin: https://www.dropbox.com
content-encoding: br
cf-cache-status: HIT
age: 90754
server: cloudflare
cf-ray: 926850017a7356bf-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/font-woff2
Content-Length: 45008
Connection: keep-alive
Server: Cowboy
Date: Wed, 26 Mar 2025 12:16:10 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742991370&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=GyM17zr24RZ%2FAgUrHM5mihF3nYP%2F7TgB9yw%2B%2F7ZfG6Y%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742991370&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=GyM17zr24RZ%2FAgUrHM5mihF3nYP%2F7TgB9yw%2B%2F7ZfG6Y%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Via: 1.1 vegur, 1.1 ba01631fe255b1896a9e6bfd4c86a06a.cloudfront.net (CloudFront), 1.1 dde62003552e800310ee1980113eedb4.cloudfront.net (CloudFront)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: 
Access-Control-Max-Age: 604800
Last-Modified: Wed, 26 Mar 2025 00:41:58 GMT
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Vary: Origin
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA56-P12, HEL50-C2
X-Amz-Cf-Id: HpuI8n9cY8z_96J88SO12-cnZuu6Xfm4NA0qFwUIXvsqqhnPQrxkFw==
Age: 18192
X-Robots-Tag: noindex

HTTP/1.1 200 OK
Content-Type: binary/octet-stream
Content-Length: 792158
Connection: keep-alive
Date: Wed, 26 Mar 2025 16:51:46 GMT
Last-Modified: Wed, 26 Mar 2025 16:13:28 GMT
ETag: "03f1a1a69f6149920514fe82dd1f359a"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: sKpUYnmySvjZ7MvLV8CHBRw-GTzxqqI0N9zI7hFNPDcghLH9SRgQ0g==
Age: 1656
X-Robots-Tag: noindex

HTTP/2 200 OK
content-type: text/plain; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://docsend.com
access-control-expose-headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed
content-disposition: attachment
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: blob: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js 'nonce-RNqB1UEJlemxoKX49mPE' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-RNqB1UEJlemxoKX49mPE' 'nonce-TNp3qBao1jKPHi0AYJiN'
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=b0YJGUVqw-cds5Sez92NQmqQ; Domain=dropbox.com; expires=Thu, 26 Mar 2026 17:19:36 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=b0YJGUVqw-cds5Sez92NQmqQ; expires=Thu, 26 Mar 2026 17:19:36 GMT; Path=/; SameSite=None; Secure
__Host-ss=d_llnGmx-g; expires=Thu, 26 Mar 2026 17:19:36 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
vary: Origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-server-response-time: 20
x-xss-protection: 1; mode=block
date: Wed, 26 Mar 2025 17:19:36 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 0
cache-control: no-cache, no-store
x-dropbox-response-origin: far_remote
x-dropbox-request-id: b2625171ab19445ca1fff2c14ac3e3c7
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: Cowboy
Date: Wed, 26 Mar 2025 17:19:18 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1743009558&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=fldfVUtZAoGn%2F81ou1dinLvbWlYn9JLd2Ln2eLrUoHM%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1743009558&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=fldfVUtZAoGn%2F81ou1dinLvbWlYn9JLd2Ln2eLrUoHM%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Via: 1.1 vegur, 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 0
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
Link: <https://assets.docsend.com/static/presentation-O3VNFOWI.css>; rel=preload; as=style; crossorigin=anonymous; integrity=sha256-hdwF1PZcY0RJ7Mz6OKMcgCmaqtzr0LQkskObqh9LbZ8=; nopush,<https://assets.docsend.com/static/presentation-2XYFMK74.css>; rel=preload; as=style; crossorigin=anonymous; integrity=sha256-8xDA2psdi5pP77/ACsr7qsU8ofSY4JMc+8zYGslNMy4=; nopush,<https://assets.docsend.com/static/en-ZB5PV5VQ.js>; rel=preload; as=script; crossorigin=anonymous; integrity=sha256-0bvegc/LNhR6PeACHjkPmwCHpBVenaxhHD8IP4aPaLw=; nopush,<https://assets.docsend.com/static/presentation-R767MUEC.js>; rel=preload; as=script; crossorigin=anonymous; nopush
Etag: W/"9e375cd43a0332e838e1609640b1fda4"
Cache-Control: max-age=0, private, must-revalidate
Content-Security-Policy: connect-src 'self' blob:  https://assets.docsend.com https://d1ng9lshxk6v9w.cloudfront.net https://*.previews.dropboxusercontent.com/*/p.m3u8 https://*.dropboxusercontent.com https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://*.intercomcdn.com https://uploads.intercomusercontent.com https://featuregates.org https://events.statsigapi.net https://browser-intake-datadoghq.com https://browser-intake-us3-datadoghq.com https://browser-intake-us5-datadoghq.com https://*.kissmetrics.com https://*.kissmetrics.io https://api.segment.io https://cdn.segment.com https://events.statsigapi.net/v1/rgstr https://statsigapi.net/v1/sdk_exception https://*.id.opendns.com https://www.google-analytics.com https://analytics.google.com https://*.g.doubleclick.net https://www.facebook.com https://api.autopilothq.com https://*.filestackapi.com https://cdn.filestackcontent.com https://s3.amazonaws.com https://*.dropbox.com https://*.dropboxapi.com https://*.dropboxstatic.com https://browser.pipe.aria.microsoft.com https://checkout.stripe.com https://forms.hubspot.com https://*.pubnub.com https://docsend-prod.s3.amazonaws.com; frame-src 'self'  https://assets.docsend.com https://*.previews.dropboxusercontent.com/ https://marketing.docsend.com https://js.stripe.com https://checkout.stripe.com https://www.youtube.com https://player.vimeo.com https://td.doubleclick.net/ https://*.g.doubleclick.net https://tpc.googlesyndication.com https://www.facebook.com https://accounts.google.com/gsi/ https://telemetryservice.firstpartyapps.oaspapps.com https://www.dropbox.com https://ifttt.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic'  https://assets.docsend.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://*.google-analytics.com https://cdn.segment.com https://scripts.kissmetrics.com https://*.id.opendns.com https://www.youtube.com https://*.ytimg.com https://vimeo.com https://www.vimeo.com https://www.googletagmanager.com https://www.googleadservices.com https://tagmanager.google.com https://connect.facebook.net https://*.quora.com https://*.bing.com https://api.autopilothq.com https://*.capterra.com https://*.g.doubleclick.net https://accounts.google.com/gsi/client https://js.hs-analytics.net https://js.hs-scripts.com https://js-na1.hs-scripts.com https://js.hscollectedforms.net https://js.hsleadflows.net https://js.stripe.com https://checkout.stripe.com https://ajax.aspnetcdn.com https://appsforoffice.microsoft.com https://maps.googleapis.com https://static.filestackapi.com https://zapier.com  'nonce-kmIMhHT2qcGmNftald+25g=='; report-uri https://www.dropbox.com/csp_log?policy_name=docsend; default-src 'self'; base-uri 'self'; child-src 'self' blob:; font-src 'self' https: data: chrome-extension:; form-action 'self'  https://docsend.com https://*.docsend.com https://intercom.help https://api-iam.intercom.io https://accounts.google.com https://www.linkedin.com https://*.salesforce.com https://www.dropbox.com https://accounts.logme.in https://secure.join.me https://*.okta.com https://*.oktapreview.com https://*.jumpcloud.com https://*.onelogin.com https://zapier.com https://ifttt.com https://www.facebook.com; img-src 'self' https: data: blob: chrome-extension:; media-src 'self' blob: data: https://d1ng9lshxk6v9w.cloudfront.net https://js.intercomcdn.com https://*.dropboxusercontent.com; object-src 'none'; style-src 'self' 'unsafe-inline'  https://assets.docsend.com https://fonts.googleapis.com https://tagmanager.google.com https://static.filestackapi.com https://use.fontawesome.com https://vjs.zencdn.net https://accounts.google.com/gsi/style; worker-src 'self' blob:
Set-Cookie: _v_=JtWtFlR0drWJ0bjKHn2U%2ByyiWo26XK0%2Fz%2FHG3niJifJ2a4GpxR3NO0dCeemFK8ejaHy0Ms4RIF%2FnLTwzw4kA4QdTEkUHB9Iva%2BIp8cLNAqZ0h0Z%2B3A%3D%3D--TDGS75hh69iqPPah--wNKuR4L7twQjdqZ1OmsVuQ%3D%3D; domain=.docsend.com; path=/; expires=Thu, 26 Mar 2026 17:19:18 GMT; SameSite=None; secure
X-Request-Id: da2f4ea2-a1a2-44f7-8dd4-a55840a87eac
X-Runtime: 0.108804
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
X-Cache: Miss from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: caX_RfhNFAPhjiAsw4kVnT8BGk_Pjsa0byvT4sZ5XwFpNHwMtYhTng==

HTTP/2 200 OK
date: Wed, 26 Mar 2025 17:19:24 GMT
content-type: application/json; charset=utf-8
status: 200 OK
cache-control: max-age=0, private, must-revalidate
access-control-allow-origin: https://docsend.com
vary: Accept,Accept-Encoding
strict-transport-security: max-age=31556952; includeSubDomains; preload
access-control-expose-headers: x-request-id, x-runtime
x-intercom-version: 7b7270f42de45365a564871a53ea83c1725e338a
content-encoding: gzip
access-control-max-age: 86400
x-xss-protection: 1; mode=block
x-request-queueing: 0
x-request-id: 0003vdie9h0s4cm8ggi0
access-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, OPTIONS
etag: W/"d75b59bd69189792eef7739fb7401ff9"
x-runtime: 0.043662
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
server: nginx
x-ami-version: ami-09c42863bf582b2c3
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/font-woff2
Content-Length: 55214
Connection: keep-alive
Server: Cowboy
Date: Wed, 26 Mar 2025 08:25:02 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742977503&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=Mk%2BkeXfVCpwD0pcBbAsNPXmq54QTaV813fzw81gppKA%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742977503&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=Mk%2BkeXfVCpwD0pcBbAsNPXmq54QTaV813fzw81gppKA%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Via: 1.1 vegur, 1.1 ba01631fe255b1896a9e6bfd4c86a06a.cloudfront.net (CloudFront), 1.1 8250617d32eb5ab8f209b802320fccba.cloudfront.net (CloudFront)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: 
Access-Control-Max-Age: 604800
Last-Modified: Wed, 26 Mar 2025 00:41:58 GMT
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Vary: Origin
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA56-P12, HEL50-C2
X-Amz-Cf-Id: EGvAz-u9qvGRWQB9emX8NB6_eRlNdxaCZ2LWRIudSNxpOTL-RDx2JQ==
Age: 32059
X-Robots-Tag: noindex

HTTP/1.1 200 OK
Content-Type: image/svg+xml
Content-Length: 544
Connection: keep-alive
Server: Cowboy
Date: Wed, 26 Mar 2025 06:19:27 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742969967&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=eU34a0HH1a%2F12g1CwQA83DF6J72sFCVEKvgQ1obPKrg%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742969967&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=eU34a0HH1a%2F12g1CwQA83DF6J72sFCVEKvgQ1obPKrg%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Via: 1.1 vegur, 1.1 5f2b92535eb1297cf75fcc5a4a4e50cc.cloudfront.net (CloudFront), 1.1 0e53369843ffff152c4f962eb3b91d2a.cloudfront.net (CloudFront)
Last-Modified: Wed, 26 Mar 2025 00:42:00 GMT
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Vary: Origin
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA56-P12, HEL50-C2
X-Amz-Cf-Id: xzux9LHR8SCqBr92Nug2vBifwvvecKjWURSjErwiqfYJsC1MiTtddQ==
Age: 39595
X-Robots-Tag: noindex

HTTP/2 200 OK
date: Wed, 26 Mar 2025 17:19:24 GMT
content-type: application/json; charset=utf-8
status: 200 OK
cache-control: max-age=0, private, must-revalidate
access-control-allow-origin: https://docsend.com
vary: Accept,Accept-Encoding
strict-transport-security: max-age=31556952; includeSubDomains; preload
access-control-expose-headers: x-request-id, x-runtime
x-intercom-version: 7b7270f42de45365a564871a53ea83c1725e338a
content-encoding: gzip
access-control-max-age: 86400
x-xss-protection: 1; mode=block
x-request-queueing: 0
x-request-id: 0007t6fb4d5umsa0pr5g
access-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, OPTIONS
etag: W/"ee05f0f9bea0fcf74739511e12b97514"
x-runtime: 0.258344
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
server: nginx
x-ami-version: ami-09c42863bf582b2c3
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: Cowboy
Date: Tue, 25 Mar 2025 17:27:28 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1742923648&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=iupCI7tdIhXL3FPTuVzAVbFhO1cmFMDShjTW%2BhBgEMw%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1742923648&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=iupCI7tdIhXL3FPTuVzAVbFhO1cmFMDShjTW%2BhBgEMw%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Via: 1.1 vegur, 1.1 1876576d09e30dc7b468e90ff448f1f8.cloudfront.net (CloudFront), 1.1 8250617d32eb5ab8f209b802320fccba.cloudfront.net (CloudFront)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: 
Access-Control-Max-Age: 604800
Last-Modified: Tue, 25 Mar 2025 16:20:06 GMT
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Content-Encoding: br
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA56-P12, HEL50-C2
X-Amz-Cf-Id: _NnsCT4k4ll6wb1LOCWXj4OvAXC2O0E4F9On3cWkxb9XRlLo4OPR6w==
Age: 85911
X-Robots-Tag: noindex

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after
content-length: 2
content-type: application/json
cross-origin-resource-policy: cross-origin
date: Wed, 26 Mar 2025 17:19:20 GMT
server: envoy
vary: origin,access-control-request-method,access-control-request-headers
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 285110ba92f947f88c8b380eecf4c184
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 393
Connection: keep-alive
Server: Cowboy
Date: Wed, 26 Mar 2025 17:19:21 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1743009561&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=VmC8rEg9o8NvLx5Wghwpiqg%2F92dMTBHrGhg%2F7B%2FpXHo%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1743009561&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=VmC8rEg9o8NvLx5Wghwpiqg%2F92dMTBHrGhg%2F7B%2FpXHo%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Via: 1.1 vegur, 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
Last-Modified: Wed, 26 Mar 2025 00:37:16 GMT
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Vary: Origin
X-Cache: Miss from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: QrelEnKmrXdyjuaXUfVFi2dnkEWzMA8jHb31oukUUPf4CN1Pik01Tw==

HTTP/2 200 OK
content-type: text/plain; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://docsend.com
access-control-expose-headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed
content-disposition: attachment
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: blob: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js 'nonce-RNqB1UEJlemxoKX49mPE' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-RNqB1UEJlemxoKX49mPE' 'nonce-TNp3qBao1jKPHi0AYJiN'
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=b0YJGUVqw-cds5Sez92NQmqQ; Domain=dropbox.com; expires=Thu, 26 Mar 2026 17:19:22 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=b0YJGUVqw-cds5Sez92NQmqQ; expires=Thu, 26 Mar 2026 17:19:22 GMT; Path=/; SameSite=None; Secure
__Host-ss=d_llnGmx-g; expires=Thu, 26 Mar 2026 17:19:22 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
vary: Origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-server-response-time: 27
x-xss-protection: 1; mode=block
date: Wed, 26 Mar 2025 17:19:22 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 0
cache-control: no-cache, no-store
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 992a12b4dfa942fc9755d4381f2d3f44
X-Firefox-Spdy: h2

HTTP/3 200 OK
date: Wed, 26 Mar 2025 17:19:23 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Wed, 05 Mar 2025 00:57:23 GMT
x-dropbox-request-id: 71e21463fed0f3652b235466402c4a4e
x-content-type-options: nosniff
x-cached: HIT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public, immutable
access-control-allow-origin: *
timing-allow-origin: https://www.dropbox.com
content-encoding: br
cf-cache-status: HIT
age: 1814986
priority: u=3,i=?0
server: cloudflare
cf-ray: 9268500aaeff56c7-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 200501
date: Wed, 26 Mar 2025 16:44:16 GMT
last-modified: Wed, 26 Mar 2025 16:41:34 GMT
etag: "68c88e02089429cb0bf8dd97f70d6d4a"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, s-maxage=7200, public
content-encoding: gzip
x-amz-version-id: CfEBs0GACuoDUV2B8edTB7h_XBezzqsJ
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 0c1168f7b86cbd4c1fa0a6e6e52ab0ce.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: QcFdNt0-mc45sNZsGnNccvCkAf7jH_SrYL9imjaeD0NWzRIZxx2kow==
age: 2108
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2

HTTP/2 307 Temporary Redirect
content-type: text/html; charset=utf-8
content-security-policy: sandbox
location: https://www.dropbox.com/pithos/host%3Adocsend.com/privacy_consent
referrer-policy: strict-origin-when-cross-origin
set-cookie: gvc=MTI1Mzg2NjMxNjY2ODgzNjk3NzU3MjA0MTQ2MTA0NzQzNzExMzk1; expires=Mon, 25 Mar 2030 17:19:19 GMT; HttpOnly; Path=/; SameSite=None; Secure
t=b0YJGUVqw-cds5Sez92NQmqQ; Domain=dropbox.com; expires=Thu, 26 Mar 2026 17:19:19 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=b0YJGUVqw-cds5Sez92NQmqQ; expires=Thu, 26 Mar 2026 17:19:19 GMT; Path=/; SameSite=None; Secure
__Host-ss=d_llnGmx-g; expires=Thu, 26 Mar 2026 17:19:19 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
locale=en; Domain=dropbox.com; expires=Mon, 25 Mar 2030 17:19:19 GMT; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
date: Wed, 26 Mar 2025 17:19:18 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 7aa203c7d1b14759a7f97368dde221d1
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: text/html
content-length: 627
last-modified: Wed, 31 May 2023 19:16:09 GMT
server: AmazonS3
date: Wed, 26 Mar 2025 06:48:29 GMT
etag: "85c876eb10030058f29245148995cc2d"
x-cache: Error from cloudfront
via: 1.1 0940ebc581f946bd99b903dc6120a26e.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P4
x-amz-cf-id: hjWQJ1mY41jvZGOYMMPwikpzTWCCd30ttcH_5xyUz7Dy8oGy9f58mg==
age: 38069
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: text/plain; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://docsend.com
access-control-expose-headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed
content-disposition: attachment
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: blob: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js 'nonce-RNqB1UEJlemxoKX49mPE' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-RNqB1UEJlemxoKX49mPE' 'nonce-TNp3qBao1jKPHi0AYJiN'
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=b0YJGUVqw-cds5Sez92NQmqQ; Domain=dropbox.com; expires=Thu, 26 Mar 2026 17:19:23 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=b0YJGUVqw-cds5Sez92NQmqQ; expires=Thu, 26 Mar 2026 17:19:23 GMT; Path=/; SameSite=None; Secure
__Host-ss=d_llnGmx-g; expires=Thu, 26 Mar 2026 17:19:23 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
vary: Origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-server-response-time: 20
x-xss-protection: 1; mode=block
date: Wed, 26 Mar 2025 17:19:23 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 0
cache-control: no-cache, no-store
x-dropbox-response-origin: far_remote
x-dropbox-request-id: fc9fcd4557454fcfa3816bdc56ae6a10
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: text/plain; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://docsend.com
access-control-expose-headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed
content-disposition: attachment
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: blob: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js 'nonce-RNqB1UEJlemxoKX49mPE' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-RNqB1UEJlemxoKX49mPE' 'nonce-TNp3qBao1jKPHi0AYJiN'
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=b0YJGUVqw-cds5Sez92NQmqQ; Domain=dropbox.com; expires=Thu, 26 Mar 2026 17:19:27 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=b0YJGUVqw-cds5Sez92NQmqQ; expires=Thu, 26 Mar 2026 17:19:27 GMT; Path=/; SameSite=None; Secure
__Host-ss=d_llnGmx-g; expires=Thu, 26 Mar 2026 17:19:27 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
vary: Origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-server-response-time: 17
x-xss-protection: 1; mode=block
date: Wed, 26 Mar 2025 17:19:27 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 0
cache-control: no-cache, no-store
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 1ccbc3d007884e0fa207084e124893b9
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: text/plain; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://docsend.com
access-control-expose-headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed
content-disposition: attachment
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: blob: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js 'nonce-RNqB1UEJlemxoKX49mPE' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-RNqB1UEJlemxoKX49mPE' 'nonce-TNp3qBao1jKPHi0AYJiN'
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=b0YJGUVqw-cds5Sez92NQmqQ; Domain=dropbox.com; expires=Thu, 26 Mar 2026 17:19:31 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=b0YJGUVqw-cds5Sez92NQmqQ; expires=Thu, 26 Mar 2026 17:19:31 GMT; Path=/; SameSite=None; Secure
__Host-ss=d_llnGmx-g; expires=Thu, 26 Mar 2026 17:19:31 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
vary: Origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-server-response-time: 22
x-xss-protection: 1; mode=block
date: Wed, 26 Mar 2025 17:19:31 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 0
cache-control: no-cache, no-store
x-dropbox-response-origin: far_remote
x-dropbox-request-id: cb99005f76364769a3eae29eee29395e
X-Firefox-Spdy: h2

HTTP/2 307 Temporary Redirect
content-type: text/html; charset=utf-8
content-security-policy: sandbox
location: https://www.dropbox.com/pithos/host%3Adocsend.com/ux_analytics
referrer-policy: strict-origin-when-cross-origin
set-cookie: gvc=Mjk4MTM0NDU5MjE0NTQzMzM3MjM5MDMwMzY3OTAxMjkyNTcyMTE0; expires=Mon, 25 Mar 2030 17:19:19 GMT; HttpOnly; Path=/; SameSite=None; Secure
t=ZBO1_9Iyk_ZNOikAQY_1LPtH; Domain=dropbox.com; expires=Thu, 26 Mar 2026 17:19:19 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=ZBO1_9Iyk_ZNOikAQY_1LPtH; expires=Thu, 26 Mar 2026 17:19:19 GMT; Path=/; SameSite=None; Secure
__Host-ss=6WB7DdBo3M; expires=Thu, 26 Mar 2026 17:19:19 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
locale=en; Domain=dropbox.com; expires=Mon, 25 Mar 2030 17:19:19 GMT; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
date: Wed, 26 Mar 2025 17:19:19 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 37a057598ec649f4a10d8f4ef312675e
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 26 Mar 2025 17:19:19 GMT
date: Wed, 26 Mar 2025 17:19:19 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: Cowboy
Date: Wed, 26 Mar 2025 17:19:17 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1743009558&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=fldfVUtZAoGn%2F81ou1dinLvbWlYn9JLd2Ln2eLrUoHM%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1743009558&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=fldfVUtZAoGn%2F81ou1dinLvbWlYn9JLd2Ln2eLrUoHM%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Via: 1.1 vegur, 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 0
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
Location: https://docsend.com/view/s/9msgp75n323y2pui
Cache-Control: no-cache
Content-Security-Policy-Report-Only: connect-src 'self' blob:  https://browser-intake-datadoghq.com https://browser-intake-us3-datadoghq.com https://browser-intake-us5-datadoghq.com https://d.dropbox.com https://www.dropbox.com https://*.pubnub.com https://api.sprig.com wss://nexus-websocket-a.intercom.io https://api-iam.intercom.io https://www.googletagmanager.com https://analytics.google.com https://*.g.doubleclick.net https://www.google-analytics.com https://edge.fullstory.com https://rs.fullstory.com https://events.statsigapi.net https://featuregates.org; frame-src 'self' https://js.stripe.com https://checkout.stripe.com https://chat.dropbox.com https://marketing.docsend.com https://dropboxcaptcha.com https://accounts.google.com/gsi/; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https://assets.docsend.com https://checkout.stripe.com https://js.stripe.com https://edge.fullstory.com https://rs.fullstory.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsleadflows.net https://scripts.kissmetrics.com https://static.filestackapi.com https://cdn.zapier.com https://zapier.com/zapbook/embed/widget.jsa https://js.intercomcdn.com https://widget.intercom.io https://maps.googleapis.com https://www.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://bat.bing.com https://www.clarity.ms https://connect.facebook.net https://www.facebook.com https://ct.capterra.com https://cdn.madkudu.com https://dc.ads.linkedin.com https://api.mutinyhq.io  https://a.quora.com https://accounts.google.com/gsi/client https://www.youtube.com https://www.dropbox.com https://cfl.dropboxstatic.com https://*.previews.dropboxusercontent.com/*/p.m3u8 https://*.dropboxusercontent.com 'nonce-78MrLToy0W+nhihViv3lzQ=='; report-uri https://www.dropbox.com/csp_log?policy_name=docsend
Set-Cookie: _dss_=3418cb2a717e6bf7a0f41d133f39f5b3; domain=.docsend.com; path=/; secure; HttpOnly; SameSite=None
X-Request-Id: e0475ef2-2c24-4930-8609-5a2e74172290
X-Runtime: 0.015799
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
X-Cache: Miss from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: kF_ltt9VgFY4wWvElOyRA_q2wGPEf_qlOeS7yy5468kMyIIVq9-4Xw==