• H1 3
• H2 0
• H3 0
• H4 0
• STRONG 0
• A 17
• IMG 2

HTTP/1.1 301 Moved Permanently
location: https://dropbox.com/
date: Sat, 31 Dec 2022 20:13:14 GMT
server: envoy
x-dropbox-request-id: 10e0bb6999b74be989f350870ae2fb7d
content-length: 0

HTTP/1.1 301 Moved Permanently
Location: https://www.dropbox.com/
Cache-Control: no-cache, no-store
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Vary: Accept-Encoding
X-Dropbox-Response-Origin: local
Date: Sat, 31 Dec 2022 20:13:14 GMT
Server: envoy
X-Dropbox-Request-Id: 07e8d1974ced4e048b21e5642de7ada7
Content-Length: 0

HTTP/1.1 200 OK
Cache-Control: no-cache,no-cache, no-store
Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:*/ws ; default-src 'none' ; font-src https://* data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob:
Referrer-Policy: strict-origin-when-cross-origin
Set-Cookie:  gvc=Mjg0MjA2NDExNzc3NzQ4NTMxNjA4OTQzMDQxMDIwODg2NTM1OTgy; expires=Thu, 30 Dec 2027 20:13:15 GMT; HttpOnly; Path=/; Secure
Set-Cookie:  t=oVFxMZoVaps2USdENoZZosi0; Domain=dropbox.com; expires=Tue, 30 Dec 2025 20:13:15 GMT; HttpOnly; Path=/; Secure
Set-Cookie:  __Host-js_csrf=oVFxMZoVaps2USdENoZZosi0; expires=Tue, 30 Dec 2025 20:13:15 GMT; Path=/; Secure
Set-Cookie:  locale=en; Domain=dropbox.com; expires=Thu, 30 Dec 2027 20:13:15 GMT; Path=/; Secure
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 1; mode=block
Content-Type: text/html; charset=utf-8
Accept-Encoding: identity,gzip
Date: Sat, 31 Dec 2022 20:13:15 GMT
Server: envoy
Strict-Transport-Security: max-age=31536000; includeSubDomains
Strict-Transport-Security: max-age=31536000; includeSubDomains
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Content-Encoding: gzip
Vary: Accept-Encoding
X-Dropbox-Response-Origin: far_remote
X-Dropbox-Request-Id: 713fe3435c684e36a2ff0c16e5fd0c9d
Transfer-Encoding: chunked