HTTP/2 302 Found
date: Fri, 08 Dec 2023 20:12:35 GMT
content-type: text/html
content-length: 145
location: https://app.salesloft.com/t/108079/c/9226920a-10ae-4fb1-bc11-ad8ef55b43b8/NB2HI4DTHIXS6ZDPMNZWK3TEFZRW63JPOZUWK5ZPMMZGUZRXPJUGI43SGRYGSMRUHE======/docsend-com-view-c2jf7zhdsr4pi249
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: noindex
X-Firefox-Spdy: h2

HTTP/2 302 Found
date: Fri, 08 Dec 2023 20:12:36 GMT
content-type: text/html; charset=utf-8
location: https://docsend.com/view/c2jf7zhdsr4pi249
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cache-control: no-cache
content-security-policy-report-only: default-src 'self' https: blob: data:; img-src 'self' https: http:; frame-ancestors 'none'
x-request-id: f921e14ddf341641340d0907f6719004
x-runtime: 0.051780
vary: Origin
strict-transport-security: max-age=31536000; includeSubDomains
x-entry-cluster: k8s-euro-pop-2
x-entry-pop: eu-central-1
x-global-request-start: t=1702066356.093
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: Cowboy
Date: Fri, 08 Dec 2023 02:55:30 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1702004130&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=Xo3UoWBlOnffku1zZYBMt3NwfR9aM%2BlT7EA4o2YZ44I%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1702004130&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=Xo3UoWBlOnffku1zZYBMt3NwfR9aM%2BlT7EA4o2YZ44I%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Last-Modified: Thu, 07 Dec 2023 22:11:24 GMT
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Via: 1.1 vegur, 1.1 0c792defeeaa18965559ad74895ea56a.cloudfront.net (CloudFront), 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
Content-Encoding: br
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA60-P3, OSL50-C1
X-Amz-Cf-Id: Rzinjt6C8OUhRIGeCAUTCH-ChXccPP63deV9Xno4y8U8LNFqrDXKYQ==
Age: 62227
X-Robots-Tag: noindex

HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: Cowboy
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1701929098&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=t3q60X8C5TALnN03NEtZYM6gF1nvdGvo0iopWMT03iQ%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1701929098&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=t3q60X8C5TALnN03NEtZYM6gF1nvdGvo0iopWMT03iQ%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Last-Modified: Fri, 03 Nov 2023 21:58:06 GMT
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Via: 1.1 vegur, 1.1 fa8c9f29fb8ef5c537a2a53f4de05240.cloudfront.net (CloudFront), 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
Content-Encoding: br
Date: Fri, 08 Dec 2023 06:32:44 GMT
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA60-P3, OSL50-C1
X-Amz-Cf-Id: Jfr4mc6Pr5Wqru3cZGktX2a_BUl3KEGO4Q73PfKzdyJ3yHeUXR10sA==
Age: 50800
X-Robots-Tag: noindex

HTTP/1.1 200 OK
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: Cowboy
Date: Fri, 08 Dec 2023 03:04:30 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1702004670&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=L2PvhUwvPrdyRvNpaF9EKvvYBVF%2FbKw6iYyYcnH%2BYSw%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1702004670&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=L2PvhUwvPrdyRvNpaF9EKvvYBVF%2FbKw6iYyYcnH%2BYSw%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Last-Modified: Thu, 07 Dec 2023 22:11:25 GMT
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Via: 1.1 vegur, 1.1 fa8c9f29fb8ef5c537a2a53f4de05240.cloudfront.net (CloudFront), 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
Content-Encoding: br
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA60-P3, OSL50-C1
X-Amz-Cf-Id: zURgE2sR-9dF2oyn3nmL8Jt9rIPHQsudaVkY64qRfQz5n2uJhiDzBA==
Age: 61687
X-Robots-Tag: noindex

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 10084175
Connection: keep-alive
Server: Cowboy
Date: Fri, 08 Dec 2023 19:58:01 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1702065481&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=27Ul8dbZffy0g1nu5bijsHgOmT1YHBbmv5gGD5NPxe4%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1702065481&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=27Ul8dbZffy0g1nu5bijsHgOmT1YHBbmv5gGD5NPxe4%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: 
Access-Control-Max-Age: 604800
Last-Modified: Fri, 08 Dec 2023 19:18:45 GMT
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Via: 1.1 vegur, 1.1 5492e1c9a06f2320204e7fcc383cff5c.cloudfront.net (CloudFront), 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
Vary: Origin
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA60-P3, OSL50-C1
X-Amz-Cf-Id: 5I22ps0SSmfL8hnbbCg3UsSfKjxu3ASNaOzpWpGNNXgjTWKGfLY0zw==
Age: 875
X-Robots-Tag: noindex

HTTP/2 204 No Content
content-disposition: attachment
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-raBUfDjocBQAOrA5qlgg' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-raBUfDjocBQAOrA5qlgg' 'nonce-RMT+Ay4xglbPwJnQy9M8'
referrer-policy: strict-origin-when-cross-origin
set-cookie: gvc=MjA0ODM5MTAyMzkwOTY0NzI0NDE5NDAyMDcwMDg5ODg2MDY5NTY5; expires=Wed, 06 Dec 2028 20:12:37 GMT; HttpOnly; Path=/; SameSite=None; Secure
t=ljtWOO6SkvMcdPEFZaQB_RBb; Domain=dropbox.com; expires=Mon, 07 Dec 2026 20:12:37 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=ljtWOO6SkvMcdPEFZaQB_RBb; expires=Mon, 07 Dec 2026 20:12:37 GMT; Path=/; SameSite=None; Secure
__Host-ss=aOR0GkLQ7g; expires=Mon, 07 Dec 2026 20:12:37 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
locale=en; Domain=dropbox.com; expires=Wed, 06 Dec 2028 20:12:37 GMT; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
content-type: text/plain; charset=utf-8
date: Fri, 08 Dec 2023 20:12:37 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: f99e8a09e6ed480f85686b0848003232
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 08 Dec 2023 20:12:37 GMT
date: Fri, 08 Dec 2023 20:12:37 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/font-woff2
Content-Length: 43308
Connection: keep-alive
Server: Cowboy
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1701923261&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=zLHL0ZtDRIkVRiEWhFCTKH9SmFFshAOx8NCqORXSebA%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1701923261&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=zLHL0ZtDRIkVRiEWhFCTKH9SmFFshAOx8NCqORXSebA%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: 
Access-Control-Max-Age: 604800
Last-Modified: Wed, 29 Mar 2023 23:43:39 GMT
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Via: 1.1 vegur, 1.1 15d3b4db3728feaae1780610a1bac86e.cloudfront.net (CloudFront), 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
Date: Fri, 08 Dec 2023 04:46:51 GMT
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA53-C1, OSL50-P1
X-Amz-Cf-Id: QNPJYoQaMgryCtICtnCl-ydC0Cyi3SHEQPHfmros5D8k8jKWuw--PQ==
Age: 55546

HTTP/1.1 200 OK
Content-Type: application/font-woff2
Content-Length: 46188
Connection: keep-alive
Server: Cowboy
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1701751705&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=8q1Fxboagx09%2B3DMviwlNa0g6FJ%2FFUEZOiOT%2FN0inYY%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1701751705&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=8q1Fxboagx09%2B3DMviwlNa0g6FJ%2FFUEZOiOT%2FN0inYY%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: 
Access-Control-Max-Age: 604800
Last-Modified: Wed, 29 Mar 2023 23:43:39 GMT
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Via: 1.1 vegur, 1.1 1764af62d635a1a6ee51aabc37405452.cloudfront.net (CloudFront), 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
Date: Fri, 08 Dec 2023 05:14:23 GMT
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA53-C1, OSL50-P1
X-Amz-Cf-Id: 30Srhw2ueoUkIhfpsgIqaXYvuzYxv-9VmhUZu9gMNsBTzVkAbsBRvw==
Age: 53894

HTTP/2 200 OK
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-cfGin33TVMJqbt6cWA2W' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-cfGin33TVMJqbt6cWA2W' 'nonce-GaGqCioxv6y8aWiXXUKA'
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=ATYN9gfRISuB0yusda2Xm9x2; Domain=dropbox.com; expires=Mon, 07 Dec 2026 20:12:37 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=ATYN9gfRISuB0yusda2Xm9x2; expires=Mon, 07 Dec 2026 20:12:37 GMT; Path=/; SameSite=None; Secure
__Host-ss=QlcK5q8p3A; expires=Mon, 07 Dec 2026 20:12:37 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
__Host-logged-out-session=ChBMUgS5C0h5553LC31aSv0OELXxzasGGi5BSWFfR1NxWWxqc01HSFJwVkZtOEVMSHVQS0FvMzNqbnUyaFBsQlpvUDRHTUxn; HttpOnly; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-server-response-time: 14
x-xss-protection: 1; mode=block
content-type: text/javascript; charset=UTF-8
date: Fri, 08 Dec 2023 20:12:37 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 9cb3ed0ec7324860b6cb075ed8e3d8d0
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Sat, 09 Dec 2023 20:12:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.png"
x-content-type-options: nosniff
date: Fri, 08 Dec 2023 20:12:39 GMT
server: fife
content-length: 1387
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 4131
Connection: keep-alive
Server: Cowboy
Date: Fri, 08 Dec 2023 20:12:39 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1702066359&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=dn6B5yYeN3v3VUvFnPGANx6OF5lt9BdqgF7BaXXYJnQ%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1702066359&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=dn6B5yYeN3v3VUvFnPGANx6OF5lt9BdqgF7BaXXYJnQ%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Last-Modified: Fri, 08 Dec 2023 18:55:32 GMT
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Vary: Origin
Via: 1.1 vegur, 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Cache: Miss from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: LcHpDnjZI9LCil1INVtfnUtPWYureKU9WbI0kgcdDeVS6l2is7C1ng==

HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 393
Connection: keep-alive
Server: Cowboy
Date: Fri, 08 Dec 2023 20:12:39 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1702066359&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=dn6B5yYeN3v3VUvFnPGANx6OF5lt9BdqgF7BaXXYJnQ%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1702066359&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=dn6B5yYeN3v3VUvFnPGANx6OF5lt9BdqgF7BaXXYJnQ%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Last-Modified: Fri, 08 Dec 2023 18:55:32 GMT
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Vary: Origin
Via: 1.1 vegur, 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Cache: Miss from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ijuImmWvMCD7AJDmj3u12gqd_eyTbt7wQrqC3GsP408fXGoDZQreSw==

HTTP/2 204 No Content
content-disposition: attachment
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-MM3Vljz8Biqj5NhviebG' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-MM3Vljz8Biqj5NhviebG' 'nonce-seTEP1N66vRR3cLsqJos'
referrer-policy: strict-origin-when-cross-origin
set-cookie: gvc=MjgwNDc4ODcxMTA5NzQ2MjU1NDU4MDI4OTEzNTQyMTM0MDU0MjY4; expires=Wed, 06 Dec 2028 20:12:39 GMT; HttpOnly; Path=/; SameSite=None; Secure
t=hYWliDcugCri-533R9dPKyi_; Domain=dropbox.com; expires=Mon, 07 Dec 2026 20:12:39 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=hYWliDcugCri-533R9dPKyi_; expires=Mon, 07 Dec 2026 20:12:39 GMT; Path=/; SameSite=None; Secure
__Host-ss=CAdnLLWOS8; expires=Mon, 07 Dec 2026 20:12:39 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
locale=en; Domain=dropbox.com; expires=Wed, 06 Dec 2028 20:12:39 GMT; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
content-type: text/plain; charset=utf-8
date: Fri, 08 Dec 2023 20:12:39 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 7212c0323448443c977b3ca67bf754c6
X-Firefox-Spdy: h2

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://docsend.com
access-control-expose-headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed
content-disposition: attachment
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-cfGin33TVMJqbt6cWA2W' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-cfGin33TVMJqbt6cWA2W' 'nonce-GaGqCioxv6y8aWiXXUKA'
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=ATYN9gfRISuB0yusda2Xm9x2; Domain=dropbox.com; expires=Mon, 07 Dec 2026 20:12:39 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=ATYN9gfRISuB0yusda2Xm9x2; expires=Mon, 07 Dec 2026 20:12:39 GMT; Path=/; SameSite=None; Secure
__Host-ss=QlcK5q8p3A; expires=Mon, 07 Dec 2026 20:12:39 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
vary: Origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-server-response-time: 18
x-xss-protection: 1; mode=block
content-type: text/plain; charset=utf-8
date: Fri, 08 Dec 2023 20:12:39 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 0
cache-control: no-cache, no-store
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 575ea2fb93414971ace2a71a96ed79b1
X-Firefox-Spdy: h2

HTTP/2 307 Temporary Redirect
content-security-policy: sandbox
location: https://www.dropbox.com/pithos/host%3Adocsend.com/privacy_consent
referrer-policy: strict-origin-when-cross-origin
set-cookie: gvc=MjAzNDIwODg4MjEwMTI4NzE3NjM2MjY0ODM3MzI2NjQ5NzcwMjI0; expires=Wed, 06 Dec 2028 20:12:37 GMT; HttpOnly; Path=/; SameSite=None; Secure
t=ATYN9gfRISuB0yusda2Xm9x2; Domain=dropbox.com; expires=Mon, 07 Dec 2026 20:12:37 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=ATYN9gfRISuB0yusda2Xm9x2; expires=Mon, 07 Dec 2026 20:12:37 GMT; Path=/; SameSite=None; Secure
__Host-ss=QlcK5q8p3A; expires=Mon, 07 Dec 2026 20:12:37 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
locale=en; Domain=dropbox.com; expires=Wed, 06 Dec 2028 20:12:37 GMT; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
content-type: text/html; charset=utf-8
date: Fri, 08 Dec 2023 20:12:36 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 0642494fd55843248767ffe357fdec88
X-Firefox-Spdy: h2

HTTP/2 200 OK
access-control-allow-headers: Origin, Content-Type, Accept, Authorization, User-Agent, Referer, X-Forwarded-For, Bugsnag-Api-Key, Bugsnag-Payload-Version, Bugsnag-Sent-At
access-control-allow-methods: POST
access-control-allow-origin: *
content-length: 0
date: Fri, 08 Dec 2023 20:12:39 GMT
server: envoy
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 5a964b9bbf6e4e969085ef101ae54dc9
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 189045
last-modified: Fri, 08 Dec 2023 15:49:04 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: w3bGIIrd1bmX9Wer3pC0M4ULYni3vvl8
accept-ranges: bytes
server: AmazonS3
date: Fri, 08 Dec 2023 19:52:00 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "1ae9c82dfa1f4396b2b56b3863ad6056"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: m9qA07w8_IN799NcW1fl9AS40fDWBiNgaSKSWRRd_HlMnI1m8QssRw==
age: 1241
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 181453
last-modified: Thu, 07 Dec 2023 15:04:20 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: b9FQnE6rKWDuOwl9ac3OQxbt6NBii5FL
accept-ranges: bytes
server: AmazonS3
date: Fri, 08 Dec 2023 20:04:33 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "bc01597a46274ebf9a4c1a3dd6531fb5"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: hqEALaDUwdAUJlpBocpxCIOBxPsDgHO3-DfYqC3HRt7auQ0vJqkcdQ==
age: 488
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/font-woff2
Content-Length: 46188
Connection: keep-alive
Server: Cowboy
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1701751705&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=8q1Fxboagx09%2B3DMviwlNa0g6FJ%2FFUEZOiOT%2FN0inYY%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1701751705&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=8q1Fxboagx09%2B3DMviwlNa0g6FJ%2FFUEZOiOT%2FN0inYY%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: 
Access-Control-Max-Age: 604800
Last-Modified: Wed, 29 Mar 2023 23:43:39 GMT
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Via: 1.1 vegur, 1.1 1764af62d635a1a6ee51aabc37405452.cloudfront.net (CloudFront), 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
Date: Fri, 08 Dec 2023 05:14:23 GMT
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA53-C1, OSL50-P1
X-Amz-Cf-Id: hcgaGrODyrEiuRciolphh4CAPycByeANakd-ZIQAMe2JYQ2qxuQO-A==
Age: 53896

HTTP/1.1 200 OK
Content-Type: application/font-woff2
Content-Length: 45008
Connection: keep-alive
Server: Cowboy
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1701923262&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=d%2FyI4kIXL8UjTvXFPYwENjlZnOCXc7vbBx7yAaFhCFE%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1701923262&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=d%2FyI4kIXL8UjTvXFPYwENjlZnOCXc7vbBx7yAaFhCFE%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Expose-Headers: 
Access-Control-Max-Age: 604800
Last-Modified: Wed, 29 Mar 2023 23:43:39 GMT
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Via: 1.1 vegur, 1.1 cc77875ec7dfc885cffaa2ec6fa578f6.cloudfront.net (CloudFront), 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
Date: Fri, 08 Dec 2023 20:12:40 GMT
Vary: Accept-Encoding,Origin
X-Cache: Hit from cloudfront
X-Amz-Cf-Pop: FRA53-C1, OSL50-P1
X-Amz-Cf-Id: oFeRdzGUX6gnrb2tmW51WOjvBcq-4Eo2G4KzMCPaDYhNymPtIbt1gA==
Age: 56597

HTTP/2 202 Accepted
access-control-allow-origin: *
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
bugsnag-session-uuid: b1d4aeee-dcbb-40ee-ad63-5bac443362f5
content-security-policy: sandbox; default-src 'none'; frame-ancestors 'none'
content-type: application/json
date: Fri, 08 Dec 2023 20:12:40 GMT
referrer-policy: strict-origin-when-cross-origin
server: envoy
via: 1.1 google
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 21
x-dropbox-response-origin: far_remote
x-dropbox-request-id: cb88d38c8558478d889f167911dd1983
X-Firefox-Spdy: h2

HTTP/1.1 204 No Content
Content-Length: 0
Connection: keep-alive
Server: Cowboy
Date: Fri, 08 Dec 2023 20:12:39 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1702066360&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=K07YVPnIOydbeTPrLUfQjkEuiMZmJ1%2BMC3MsYkdA9T8%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1702066360&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=K07YVPnIOydbeTPrLUfQjkEuiMZmJ1%2BMC3MsYkdA9T8%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Cache-Control: no-cache
Content-Security-Policy-Report-Only: script-src 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https://assets.docsend.com https://checkout.stripe.com https://js.stripe.com https://edge.fullstory.com https://rs.fullstory.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsleadflows.net https://scripts.kissmetrics.com https://static.filestackapi.com https://cdn.zapier.com https://zapier.com/zapbook/embed/widget.jsa https://js.intercomcdn.com https://widget.intercom.io https://maps.googleapis.com https://www.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://bat.bing.com https://www.clarity.ms https://connect.facebook.net https://www.facebook.com https://ct.capterra.com https://cdn.madkudu.com https://dc.ads.linkedin.com https://api.mutinyhq.io  https://a.quora.com https://www.youtube.com https://www.dropbox.com https://cfl.dropboxstatic.com https://*.previews.dropboxusercontent.com/*/p.m3u8 https://*.dropboxusercontent.com 'nonce-01mGUQXZeqd2wR9Zp1/AuA=='; report-uri https://www.dropbox.com/csp_log?policy_name=docsend
X-Request-Id: c3fce21b-64ce-408e-bb2a-5bbe6cf58bcc
X-Runtime: 0.010828
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Vary: Origin
Via: 1.1 vegur, 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Cache: Miss from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: vN9UlJalrH3hNsgpAHFzavwAmyj_Rhr5sqLQCOQ-1Ez8XWnyQUMsgQ==

HTTP/1.1 204 No Content
Content-Length: 0
Connection: keep-alive
Server: Cowboy
Date: Fri, 08 Dec 2023 20:12:40 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1702066360&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=K07YVPnIOydbeTPrLUfQjkEuiMZmJ1%2BMC3MsYkdA9T8%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1702066360&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=K07YVPnIOydbeTPrLUfQjkEuiMZmJ1%2BMC3MsYkdA9T8%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Cache-Control: no-cache
Content-Security-Policy-Report-Only: script-src 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https://assets.docsend.com https://checkout.stripe.com https://js.stripe.com https://edge.fullstory.com https://rs.fullstory.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsleadflows.net https://scripts.kissmetrics.com https://static.filestackapi.com https://cdn.zapier.com https://zapier.com/zapbook/embed/widget.jsa https://js.intercomcdn.com https://widget.intercom.io https://maps.googleapis.com https://www.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://bat.bing.com https://www.clarity.ms https://connect.facebook.net https://www.facebook.com https://ct.capterra.com https://cdn.madkudu.com https://dc.ads.linkedin.com https://api.mutinyhq.io  https://a.quora.com https://www.youtube.com https://www.dropbox.com https://cfl.dropboxstatic.com https://*.previews.dropboxusercontent.com/*/p.m3u8 https://*.dropboxusercontent.com 'nonce-q0KeeJP8+8U2/+4q7GRspw=='; report-uri https://www.dropbox.com/csp_log?policy_name=docsend
X-Request-Id: f8d872b3-7465-4a45-80bd-690eed924108
X-Runtime: 0.018683
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Vary: Origin
Via: 1.1 vegur, 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Cache: Miss from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: blhTv8XOgBeZlxFzHYdSgq2oBn6wO7wKs4VVe3gs4uQIu1I7YVyTMQ==

HTTP/2 204 No Content
content-disposition: attachment
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-qHihnjoSvF3ixVyHiHE2' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-qHihnjoSvF3ixVyHiHE2' 'nonce-1uE8y9WDKN4hYUjp6KxE'
referrer-policy: strict-origin-when-cross-origin
set-cookie: gvc=MTMwMDg0MjcwMDUyNjgwNjU5Mzg4NDAxMTg2MDk0MTgxNDc4NTcw; expires=Wed, 06 Dec 2028 20:12:40 GMT; HttpOnly; Path=/; SameSite=None; Secure
t=7nCoHXebx4QvtLe0zNIq1UZW; Domain=dropbox.com; expires=Mon, 07 Dec 2026 20:12:40 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=7nCoHXebx4QvtLe0zNIq1UZW; expires=Mon, 07 Dec 2026 20:12:40 GMT; Path=/; SameSite=None; Secure
__Host-ss=bXqA-a2wqM; expires=Mon, 07 Dec 2026 20:12:40 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
locale=en; Domain=dropbox.com; expires=Wed, 06 Dec 2028 20:12:40 GMT; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
content-type: text/plain; charset=utf-8
date: Fri, 08 Dec 2023 20:12:39 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 7fc7ff58d7634216b921cb39b05bfcf2
X-Firefox-Spdy: h2

HTTP/2 204 No Content
content-disposition: attachment
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-I7nfxEveoItPI+k4ytdm' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-I7nfxEveoItPI+k4ytdm' 'nonce-uguttRn64dYvMKPsw+dz'
referrer-policy: strict-origin-when-cross-origin
set-cookie: gvc=MzgzOTg2MTg4NTg4NjUwNjA0NTk3MzcxMjYyNjE2NDQxMDQzMTE%3D; expires=Wed, 06 Dec 2028 20:12:40 GMT; HttpOnly; Path=/; SameSite=None; Secure
t=0H-_w7v3kLMd8UVWoFC4PD2e; Domain=dropbox.com; expires=Mon, 07 Dec 2026 20:12:40 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=0H-_w7v3kLMd8UVWoFC4PD2e; expires=Mon, 07 Dec 2026 20:12:40 GMT; Path=/; SameSite=None; Secure
__Host-ss=1-19hWtP8g; expires=Mon, 07 Dec 2026 20:12:40 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
locale=en; Domain=dropbox.com; expires=Wed, 06 Dec 2028 20:12:40 GMT; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
content-type: text/plain; charset=utf-8
date: Fri, 08 Dec 2023 20:12:39 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 55b390ab00a948b7a7c5d7b8a8c5664d
X-Firefox-Spdy: h2

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://docsend.com
access-control-expose-headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed
content-disposition: attachment
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-cfGin33TVMJqbt6cWA2W' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-cfGin33TVMJqbt6cWA2W' 'nonce-GaGqCioxv6y8aWiXXUKA'
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=ATYN9gfRISuB0yusda2Xm9x2; Domain=dropbox.com; expires=Mon, 07 Dec 2026 20:12:40 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=ATYN9gfRISuB0yusda2Xm9x2; expires=Mon, 07 Dec 2026 20:12:40 GMT; Path=/; SameSite=None; Secure
__Host-ss=QlcK5q8p3A; expires=Mon, 07 Dec 2026 20:12:40 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
vary: Origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-server-response-time: 52
x-xss-protection: 1; mode=block
content-type: text/plain; charset=utf-8
date: Fri, 08 Dec 2023 20:12:40 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 0
cache-control: no-cache, no-store
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 87df9427bad544e9bb2b92b3dfd5de11
X-Firefox-Spdy: h2

HTTP/2 204 No Content
content-disposition: attachment
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-7G/op7ie0X/oNPeDgD8A' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-7G/op7ie0X/oNPeDgD8A' 'nonce-vhaIL5I1vY/ocW65/B4V'
referrer-policy: strict-origin-when-cross-origin
set-cookie: gvc=Mjg5OTIwODUxMDAwMTY0NTI3MDQyMjU3NzI4MjMxOTg5ODc3OTI5; expires=Wed, 06 Dec 2028 20:12:40 GMT; HttpOnly; Path=/; SameSite=None; Secure
t=HwmOcfhU7EfcxVrMwK7Lr1n4; Domain=dropbox.com; expires=Mon, 07 Dec 2026 20:12:40 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=HwmOcfhU7EfcxVrMwK7Lr1n4; expires=Mon, 07 Dec 2026 20:12:40 GMT; Path=/; SameSite=None; Secure
__Host-ss=pSuFNky3nQ; expires=Mon, 07 Dec 2026 20:12:40 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
locale=en; Domain=dropbox.com; expires=Wed, 06 Dec 2028 20:12:40 GMT; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
content-type: text/plain; charset=utf-8
date: Fri, 08 Dec 2023 20:12:40 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 12cfabd466a641e9814109321b2153f4
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Fri, 08 Dec 2023 20:12:40 GMT
content-type: application/json; charset=utf-8
status: 200 OK
cache-control: max-age=0, private, must-revalidate
access-control-allow-origin: https://docsend.com
vary: Accept,Accept-Encoding
strict-transport-security: max-age=31556952; includeSubDomains; preload
x-intercom-version: c5bbc13a914eb88b0808fa181a2ef22979fe0409
content-encoding: gzip
x-xss-protection: 1; mode=block
x-request-queueing: 0
x-request-id: 00055siqv36p1pj5jmrg
access-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, OPTIONS
etag: W/"53740461835a504bf794d49563df7d2f"
x-runtime: 0.312950
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
server: nginx
x-ami-version: ami-0fb0b20986efabbf0
X-Firefox-Spdy: h2

HTTP/2 204 No Content
vary: Origin, Access-Control-Request-Headers
access-control-allow-origin: *
access-control-allow-methods: POST, GET, DELETE, PATCH, PUT
access-control-allow-headers: content-type,statsig-api-key,statsig-sdk-type,statsig-sdk-version
access-control-max-age: 7200
date: Fri, 08 Dec 2023 20:12:42 GMT
x-envoy-upstream-service-time: 1
server: istio-envoy
content-security-policy: frame-ancestors *.statsig.com *.atlassian.net
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff;
x-statsig-region: gke-europe-west1
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

HTTP/2 202 Accepted
vary: Origin, Accept-Encoding
access-control-allow-origin: *
content-type: application/json; charset=utf-8
content-length: 16
date: Fri, 08 Dec 2023 20:12:42 GMT
x-envoy-upstream-service-time: 8
server: istio-envoy
content-security-policy: frame-ancestors *.statsig.com *.atlassian.net
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff;
x-statsig-region: gke-europe-west1
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

HTTP/2 204 No Content
content-disposition: attachment
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-M/5fc/QX3TZY0MjO+4Pw' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-M/5fc/QX3TZY0MjO+4Pw' 'nonce-kuvmsyrW6+TZfgTB8YJ1'
referrer-policy: strict-origin-when-cross-origin
set-cookie: gvc=MTc5NjAzNzQ1MDcxNjA1NDA1Nzg4ODA4ODc1NDE2MDIzNzYyMzYx; expires=Wed, 06 Dec 2028 20:12:42 GMT; HttpOnly; Path=/; SameSite=None; Secure
t=xd4GGLMGETfj1zop_1Ph6Nr0; Domain=dropbox.com; expires=Mon, 07 Dec 2026 20:12:42 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=xd4GGLMGETfj1zop_1Ph6Nr0; expires=Mon, 07 Dec 2026 20:12:42 GMT; Path=/; SameSite=None; Secure
__Host-ss=Dbl6wmjecM; expires=Mon, 07 Dec 2026 20:12:42 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
locale=en; Domain=dropbox.com; expires=Wed, 06 Dec 2028 20:12:42 GMT; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
content-type: text/plain; charset=utf-8
date: Fri, 08 Dec 2023 20:12:42 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 16a28b811fcc444f83961a776b182599
X-Firefox-Spdy: h2

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://docsend.com
access-control-expose-headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed
content-disposition: attachment
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-cfGin33TVMJqbt6cWA2W' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-cfGin33TVMJqbt6cWA2W' 'nonce-GaGqCioxv6y8aWiXXUKA'
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=ATYN9gfRISuB0yusda2Xm9x2; Domain=dropbox.com; expires=Mon, 07 Dec 2026 20:12:43 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=ATYN9gfRISuB0yusda2Xm9x2; expires=Mon, 07 Dec 2026 20:12:43 GMT; Path=/; SameSite=None; Secure
__Host-ss=QlcK5q8p3A; expires=Mon, 07 Dec 2026 20:12:43 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
vary: Origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-server-response-time: 21
x-xss-protection: 1; mode=block
content-type: text/plain; charset=utf-8
date: Fri, 08 Dec 2023 20:12:43 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 0
cache-control: no-cache, no-store
x-dropbox-response-origin: far_remote
x-dropbox-request-id: e0bd7c86fd8846ed8616f60c01843a50
X-Firefox-Spdy: h2

HTTP/2 204 No Content
content-disposition: attachment
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-/SGSPRWcH3MoV4lRzQKR' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-/SGSPRWcH3MoV4lRzQKR' 'nonce-yj3OJGY5RTiBq3WAfEW1'
referrer-policy: strict-origin-when-cross-origin
set-cookie: gvc=MjkwNzgwNTM2MDg5NzU1NDE1NTk4MTE1MzA3OTcyNzQ2NDY2MDI5; expires=Wed, 06 Dec 2028 20:12:46 GMT; HttpOnly; Path=/; SameSite=None; Secure
t=Gjf9XluBAtCS_BbMKL1TjfzI; Domain=dropbox.com; expires=Mon, 07 Dec 2026 20:12:46 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=Gjf9XluBAtCS_BbMKL1TjfzI; expires=Mon, 07 Dec 2026 20:12:46 GMT; Path=/; SameSite=None; Secure
__Host-ss=sJ4V01RcbQ; expires=Mon, 07 Dec 2026 20:12:46 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
locale=en; Domain=dropbox.com; expires=Wed, 06 Dec 2028 20:12:46 GMT; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
content-type: text/plain; charset=utf-8
date: Fri, 08 Dec 2023 20:12:46 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: e2bdf407b0874b14a80624c7a6bd0c2d
X-Firefox-Spdy: h2

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://docsend.com
access-control-expose-headers: Accept-Ranges, Content-Disposition, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed
content-disposition: attachment
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-cfGin33TVMJqbt6cWA2W' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-cfGin33TVMJqbt6cWA2W' 'nonce-GaGqCioxv6y8aWiXXUKA'
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=ATYN9gfRISuB0yusda2Xm9x2; Domain=dropbox.com; expires=Mon, 07 Dec 2026 20:12:48 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=ATYN9gfRISuB0yusda2Xm9x2; expires=Mon, 07 Dec 2026 20:12:48 GMT; Path=/; SameSite=None; Secure
__Host-ss=QlcK5q8p3A; expires=Mon, 07 Dec 2026 20:12:48 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
vary: Origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-server-response-time: 23
x-xss-protection: 1; mode=block
content-type: text/plain; charset=utf-8
date: Fri, 08 Dec 2023 20:12:48 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 0
cache-control: no-cache, no-store
x-dropbox-response-origin: far_remote
x-dropbox-request-id: fd1109065b684d1d8190845a7df61346
X-Firefox-Spdy: h2

HTTP/2 200 OK
server: istio-envoy
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff, nosniff;
permissions-policy: interest-cohort=()
x-response-time: 0 ms
access-control-allow-origin: *
access-control-allow-methods: POST, GET, PATCH, DELETE, PUT, OPTIONS
access-control-allow-headers: *
access-control-max-age: 7200
access-control-allow-credentials: true
content-length: 0
date: Fri, 08 Dec 2023 20:12:49 GMT
x-envoy-upstream-service-time: 2
content-security-policy: frame-ancestors *.statsig.com
referrer-policy: strict-origin-when-cross-origin
x-statsig-region: gke-europe-west1
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

HTTP/2 202 Accepted
content-type: application/json
server: istio-envoy
permissions-policy: interest-cohort=()
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff, nosniff;
x-response-time: 0 ms
access-control-allow-origin: *
access-control-allow-methods: POST, GET, PATCH, DELETE, PUT, OPTIONS
access-control-allow-headers: *
access-control-max-age: 7200
access-control-allow-credentials: true
content-length: 16
date: Fri, 08 Dec 2023 20:12:48 GMT
x-envoy-upstream-service-time: 2
content-security-policy: frame-ancestors *.statsig.com
referrer-policy: strict-origin-when-cross-origin
x-statsig-region: gke-europe-west1
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Fri, 08 Dec 2023 20:12:38 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Fri, 01 Dec 2023 21:22:23 GMT
x-dropbox-request-id: f0543b421e0c3fab4bb44082c58faa0f
x-content-type-options: nosniff
x-cached: HIT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public, immutable
access-control-allow-origin: *
timing-allow-origin: https://www.dropbox.com
cf-cache-status: HIT
age: 355630
server: cloudflare
cf-ray: 8327aa130fc356c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: Cowboy
Date: Fri, 08 Dec 2023 20:12:36 GMT
Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1702066356&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=YRutW09vMmVKWrMeI6%2BBxPrNZ961NqnRHUSeWCfqqx8%3D"}]}
Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1702066356&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&s=YRutW09vMmVKWrMeI6%2BBxPrNZ961NqnRHUSeWCfqqx8%3D
Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Etag: W/"932107ddf66747a8a8baf564c6afb28e"
Cache-Control: max-age=0, private, must-revalidate
Content-Security-Policy: script-src 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic'  https://assets.docsend.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://*.google-analytics.com https://cdn.segment.com https://scripts.kissmetrics.com https://*.id.opendns.com https://www.youtube.com https://*.ytimg.com https://vimeo.com https://www.vimeo.com https://www.googletagmanager.com https://www.googleadservices.com https://tagmanager.google.com https://connect.facebook.net https://*.quora.com https://*.bing.com https://api.autopilothq.com https://*.capterra.com https://*.g.doubleclick.net https://js.hs-analytics.net https://js.hs-scripts.com https://js-na1.hs-scripts.com https://js.hscollectedforms.net https://js.hsleadflows.net https://js.stripe.com https://checkout.stripe.com https://ajax.aspnetcdn.com https://appsforoffice.microsoft.com https://maps.googleapis.com https://static.filestackapi.com https://zapier.com https://d2wy8f7a9ursnm.cloudfront.net https://polyfill.io/v3/polyfill.min.js 'nonce-pRzppwRfEZWxwJZpn6/V3Q=='; report-uri https://www.dropbox.com/csp_log?policy_name=docsend; default-src 'self'; base-uri 'self'; child-src 'self' blob:; connect-src 'self' blob:  https://assets.docsend.com https://d2qvtfnm75xrxf.cloudfront.net https://*.previews.dropboxusercontent.com/*/p.m3u8 https://*.dropboxusercontent.com https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://*.intercomcdn.com https://uploads.intercomusercontent.com https://sessions.bugsnag.com https://notify.bugsnag.com https://*.browser-intake-datadoghq.com https://*.kissmetrics.com https://*.kissmetrics.io https://api.segment.io https://cdn.segment.com https://events.statsigapi.net/v1/rgstr https://statsigapi.net/v1/sdk_exception https://*.id.opendns.com https://www.google-analytics.com https://*.g.doubleclick.net https://www.facebook.com https://api.autopilothq.com https://*.filestackapi.com https://cdn.filestackcontent.com https://s3.amazonaws.com https://*.dropbox.com https://*.dropboxapi.com https://*.dropboxstatic.com https://browser.pipe.aria.microsoft.com https://checkout.stripe.com https://forms.hubspot.com https://*.pubnub.com https://docsend-prod.s3.amazonaws.com; font-src 'self' https: data: chrome-extension:; form-action 'self'  https://docsend.com https://*.docsend.com https://intercom.help https://api-iam.intercom.io https://accounts.google.com https://www.linkedin.com https://*.salesforce.com https://www.dropbox.com https://accounts.logme.in https://secure.join.me https://*.okta.com https://*.oktapreview.com https://*.jumpcloud.com https://*.onelogin.com https://zapier.com https://ifttt.com https://www.facebook.com; frame-src 'self'  https://assets.docsend.com https://*.previews.dropboxusercontent.com/ https://js.stripe.com https://checkout.stripe.com https://www.youtube.com https://player.vimeo.com https://*.g.doubleclick.net https://tpc.googlesyndication.com https://www.facebook.com https://telemetryservice.firstpartyapps.oaspapps.com https://consent.dropbox.com https://ifttt.com; img-src 'self' https: data: blob: chrome-extension:; media-src 'self' blob: data: https://d2qvtfnm75xrxf.cloudfront.net https://js.intercomcdn.com https://*.dropboxusercontent.com; object-src 'none'; style-src 'self' 'unsafe-inline'  https://assets.docsend.com https://fonts.googleapis.com https://tagmanager.google.com https://static.filestackapi.com https://use.fontawesome.com https://vjs.zencdn.net; worker-src 'self' blob:
Set-Cookie: _v_=Ik7WNGCQZNhyDsi294EXlBUWZ3f%2B1OwoU9PmUIvzfC3u1Fq%2Be%2Bw0iRRc7hsp0X9matuIaPIMziaDm64Db7BZCOp8blPAau1e3GVWjbo%3D--Uu7W1isd%2FnzaYSpP--cdfQhL7WM32ccTy7aBYOng%3D%3D; domain=.docsend.com; path=/; expires=Sun, 08 Dec 2024 20:12:36 GMT; SameSite=None; secure
_us_=BAhJIg92aWV3ZWQgZG9jBjoGRVQ%3D--86064670cbcb81a84182616ff39e8415292b30d1; domain=.docsend.com; path=/; expires=Tue, 08 Dec 2043 20:12:36 GMT; SameSite=None; secure
_dss_=1301db4ffbf20b81e66e9b56451c1132; domain=.docsend.com; path=/; secure; HttpOnly; SameSite=None
X-Request-Id: 7461c970-0e17-4ddb-b7f3-152105166f62
X-Runtime: 0.108919
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Strict-Transport-Security: max-age=31556952; includeSubDomains; preload
Via: 1.1 vegur, 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Cache: Miss from cloudfront
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 8B44A9Bjq1_qEmgpNFqUdAGqjdXZinrJVLWO-1kzL-n3NBfXKCD5lg==

HTTP/2 307 Temporary Redirect
content-security-policy: sandbox
location: https://www.dropbox.com/pithos/host%3Adocsend.com/ux_analytics
referrer-policy: strict-origin-when-cross-origin
set-cookie: gvc=MTM3OTcyMDU2MzQ1Njc1NjAwNjEwNDk3NzU3MDYyMTQ0ODIyNTgx; expires=Wed, 06 Dec 2028 20:12:37 GMT; HttpOnly; Path=/; SameSite=None; Secure
t=AF5YrV8iQVpBmzb3LQpXp3kO; Domain=dropbox.com; expires=Mon, 07 Dec 2026 20:12:37 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=AF5YrV8iQVpBmzb3LQpXp3kO; expires=Mon, 07 Dec 2026 20:12:37 GMT; Path=/; SameSite=None; Secure
__Host-ss=0FZcTWNC6o; expires=Mon, 07 Dec 2026 20:12:37 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
locale=en; Domain=dropbox.com; expires=Wed, 06 Dec 2028 20:12:37 GMT; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
content-type: text/html; charset=utf-8
date: Fri, 08 Dec 2023 20:12:36 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 124a0c57943e41199eb3ef9b8c9f55e6
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Fri, 08 Dec 2023 20:12:38 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Fri, 01 Dec 2023 21:22:23 GMT
x-dropbox-request-id: bf27179b24351ea5c4f9b992fc24f856
x-content-type-options: nosniff
x-cached: HIT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public, immutable
access-control-allow-origin: *
timing-allow-origin: https://www.dropbox.com
cf-cache-status: HIT
age: 356419
server: cloudflare
cf-ray: 8327aa130fc056c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 2705
last-modified: Fri, 08 Dec 2023 15:51:55 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: MXAtM0hcSYKI1u5JfcZqRwiuMwLdl36J
accept-ranges: bytes
server: AmazonS3
date: Fri, 08 Dec 2023 20:07:46 GMT
cache-control: max-age=300, s-maxage=300, public
etag: "97c627ed9208032d4223332ddabc6f74"
x-cache: Error from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: VxerSk66psb0T-OQ2CJbZNZiWA7ZgiEVV5BmC1tW6HisGJhKbe5fqQ==
age: 294
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2

HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Fri, 08 Dec 2023 20:12:41 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: pyXHEIIKiEqqHHzAkV1Z2FaTna8=
Sec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover

HTTP/2 307 Temporary Redirect
content-security-policy: sandbox
location: https://www.dropbox.com/pithos/host%3Adocsend.com/marketing_tracker_client
referrer-policy: strict-origin-when-cross-origin
set-cookie: gvc=MjU1MzI5NDI1NzA2NDU3Mjg5NDA0MTAxOTkxNTYwOTMxNjQ5MDg1; expires=Wed, 06 Dec 2028 20:12:37 GMT; HttpOnly; Path=/; SameSite=None; Secure
t=UWaWbYqJDezZH80KFN1mYm2v; Domain=dropbox.com; expires=Mon, 07 Dec 2026 20:12:37 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=UWaWbYqJDezZH80KFN1mYm2v; expires=Mon, 07 Dec 2026 20:12:37 GMT; Path=/; SameSite=None; Secure
__Host-ss=eg-gFOypaU; expires=Mon, 07 Dec 2026 20:12:37 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
locale=en; Domain=dropbox.com; expires=Wed, 06 Dec 2028 20:12:37 GMT; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
content-type: text/html; charset=utf-8
date: Fri, 08 Dec 2023 20:12:36 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 92094c0469e7494abf4e721735dedd69
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-cfGin33TVMJqbt6cWA2W' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-cfGin33TVMJqbt6cWA2W' 'nonce-GaGqCioxv6y8aWiXXUKA'
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=ATYN9gfRISuB0yusda2Xm9x2; Domain=dropbox.com; expires=Mon, 07 Dec 2026 20:12:37 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=ATYN9gfRISuB0yusda2Xm9x2; expires=Mon, 07 Dec 2026 20:12:37 GMT; Path=/; SameSite=None; Secure
__Host-ss=QlcK5q8p3A; expires=Mon, 07 Dec 2026 20:12:37 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
__Host-logged-out-session=ChBGPurhv2RJdZDbxVznxg2cELXxzasGGi5BSVlIZGJodjkyaUdsWFV4amJZZ292UGtnVUE4anJPVDJnblBXMnUxQ0VDb2Rn; HttpOnly; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-server-response-time: 11
x-xss-protection: 1; mode=block
content-type: text/javascript; charset=UTF-8
date: Fri, 08 Dec 2023 20:12:37 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: ccb3b056d4694a87ae49c48f6ee30682
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-security-policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws wss://dsimports.dropbox.com/ ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-cfGin33TVMJqbt6cWA2W' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js blob:, report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-cfGin33TVMJqbt6cWA2W' 'nonce-GaGqCioxv6y8aWiXXUKA'
referrer-policy: strict-origin-when-cross-origin
set-cookie: t=ATYN9gfRISuB0yusda2Xm9x2; Domain=dropbox.com; expires=Mon, 07 Dec 2026 20:12:37 GMT; HttpOnly; Path=/; SameSite=None; Secure
__Host-js_csrf=ATYN9gfRISuB0yusda2Xm9x2; expires=Mon, 07 Dec 2026 20:12:37 GMT; Path=/; SameSite=None; Secure
__Host-ss=QlcK5q8p3A; expires=Mon, 07 Dec 2026 20:12:37 GMT; HttpOnly; Path=/; SameSite=Strict; Secure
__Host-logged-out-session=ChAQnMN+UUKxGs5qSllv6FnOELXxzasGGi5BSWFZWnh3aERmNDUwbDMwS1lHWVlUWmtnSnI0MGRYQkJVcnR2alFtZUhEcTNR; HttpOnly; Path=/; SameSite=None; Secure
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-server-response-time: 24
x-xss-protection: 1; mode=block
content-type: text/javascript; charset=UTF-8
date: Fri, 08 Dec 2023 20:12:37 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: far_remote
x-dropbox-request-id: 3d4491e32e784062beb4a5ca97af8f5c
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Fri, 08 Dec 2023 20:12:38 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Fri, 08 Dec 2023 08:29:03 GMT
x-dropbox-request-id: 177fd3d1ced3679105ec82cb184529cd
x-content-type-options: nosniff
x-cached: HIT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public, immutable
access-control-allow-origin: *
timing-allow-origin: https://www.dropbox.com
cf-cache-status: HIT
age: 10868
server: cloudflare
cf-ray: 8327aa130fc156c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2