Adobe.com - Eu2.documents.adobe.com

date: Fri, 20 Mar 2026 20:22:42 GMT
server: istio-envoy
x-robots-tag: none
set-cookie: JSESSIONID=9ED45FEEF1F106414C09F630632DBA82.webapp-prod-b-0; Path=/; Domain=.documents.adobe.com; HttpOnly; SameSite=None; Secure; Partitioned
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, max-age=0, private
location: https://documentcloud.adobe.com
content-length: 0
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
strict-transport-security: max-age=31536000; includeSubDomains;
content-type: httpd/unix-directory
x-envoy-upstream-service-time: 217

HTTP/2 301 
content-length: 0
location: https://acrobat.adobe.com/
cache-control: max-age=900
expires: Fri, 20 Mar 2026 20:37:42 GMT
date: Fri, 20 Mar 2026 20:22:42 GMT
report-to: {"group":"coopcoep","max_age":86400,"endpoints":[{"url":"https://dc-api.adobe.io/system/csp?source=dcwebapp_coopcoep"}]}
reporting-endpoints: coopcoep="https://dc-api.adobe.io/system/csp?source=dcwebapp_coopcoep"
document-isolation-policy: isolate-and-credentialless; report-to="coopcoep"
strict-transport-security: max-age=31536000; includeSubDomains
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
akamai-grn: 0.8aa02417.1774038162.4e90a6f
server-timing: ak_p; desc="1774038162942_388276362_82381423_22_2826_5_8_15";dur=1

HTTP/2 200 
content-type: text/html
cache-control: public, max-age=60, must-revalidate
content-security-policy: base-uri 'self'; block-all-mixed-content; child-src 'self'; connect-src 'self' *.adobe.io *.adobelogin.com *.adobesign.com *.adobesigncdn.com *.akstat.io *.amazonaws.com *.aws.adobess.com bifrost-prod-an1.adobess.com bifrost-prod-ew1.adobess.com bifrost-prod-ue1.adobess.com *.behance.net *.blob.core.windows.net *.demdex.net *.documents.adobe.com *.echocdn.com *.echosign.com *.files.1drv.com *.ftcdn.net *.go-mpulse.net *.googleapis.com *.googleusercontent.com *.orchestration.adobe.com *.sentry.io *.services.adobe.com *.sharepoint.com my.microsoftpersonalcontent.com *.storage.live.com *.svc.ms accounts.google.com/gsi/ adobe.tt.omtrdc.net ans.oobesaas.adobe.com api.onedrive.com api.rocketlawyer.com api2.branch.io apis.google.com axon.adobess.com blob: by2.uservoice.com cc-embed.adobe.com cdn-sharing.adobecc.com cdn.cookielaw.org cdn.prod.assistant.adobe.com client.messaging.adobe.com clio-assets.adobe.com cloud-asr.acrobat.com comments.acrobat.com commerce.adobe.com createpdf-asr.acrobat.com createpdf.acrobat.com/createpdf/api/ cvs.adobe.com/content/ dc-api-v2.adobecontent.io dc-api.adobecontent.io detect.adobedccdn.com:* docs.google.com/feeds/ documents.adobe.com design-assets.adobeprojectm.com express-embed.adobe.com express.adobe.com express-search.hz.adobe.com faster.typekit.net ffc-static-cdn.oobesaas.adobe.com files-asr.acrobat.com files-download2-asr.acrocomcontent.com files-download2.acrocomcontent.com files.acrobat.com fillsign-asr.acrobat.com fillsign.acrobat.com/api/ geo-dc.adobe.com geolocation.onetrust.com/cookieconsentpub/ graph.microsoft.com jobtracker-asr.acrobat.com new.express.adobe.com odin.adobe.com orchestration.adobe.com p.typekit.net pandora-cdn.adobe.com shared-components.adobe.com service.account.adobe.com performance.typekit.net plan.adobe.com primer.typekit.net privacyportal.onetrust.com prod-rel-ffc-ccm.oobesaas.adobe.com prod.adobeccstatic.com prod.wopi.acrobat.adobe.com sdk-1p.cc-embed.adobe.com send-asr.acrobat.com send.acrobat.com server.messaging.adobe.com sstats.adobe.com upload2-asr.files.acrobat.com use.typekit.net wss://performance.typekit.net wss://axon.adobess.com wss://bifrost-prod-an1.adobess.com wss://bifrost-prod-ew1.adobess.com wss://bifrost-prod-ue1.adobess.com www.google.com/recaptcha/ wwwimages2.adobe.com acroipm2.adobe.com auth-light.identity.adobe.com uds.adobe-identity.com; default-src 'self' *.adobelogin.com/favicon.ico design-assets.adobeprojectm.com express.adobe.com; font-src 'self' *.adobe.com *.adobeccstatic.com *.adobesign.com *.adobesigncdn.com *.behance.net *.echocdn.com *.echosign.com *.typekit.com *.typekit.net data: fonts.gstatic.com; form-action *.adobelogin.com *.officeapps.live.com login.live.com; frame-src 'self' *.adobe.io *.adobelogin.com *.adobesign.com *.adobesigncdn.com *.amazonaws.com *.blob.core.windows.net *.demdex.net *.documents.adobe.com *.echocdn.com *.echosign.com *.files.1drv.com *.officeapps.live.com *.services.adobe.com *.sharepoint.com my.microsoftpersonalcontent.com *.svc.ms accounts.google.com/gsi/ acrobat.adobe.com acrobat.uservoice.com acrs.adobe.com/requestAccess api.onedrive.com api.rocketlawyer.com auth-light.identity.adobe.com blob: cdn-sharing.adobecc.com cdn.prod.assistant.adobe.com commerce.adobe.com content.googleapis.com/static/ data: dc-api-v2.adobecontent.io dc-api.adobecontent.io design-assets.adobeprojectm.com documentcloud.adobe.com documents.adobe.com drive.google.com express-embed.adobe.com express.adobe.com login.live.com new.express.adobe.com orchestration.adobe.com plan.adobe.com quick-actions.express.adobe.com ui.messaging.adobe.com video.tv.adobe.com www.google.com/recaptcha/ zeonchatclient-va6.cloud.adobe.io; img-src 'self' *.acrobat.com *.acrocomcontent.com *.adobe.com *.adobe.io *.adobeccstatic.com *.adobecontent.io *.adobelogin.com *.adobesign.com *.adobesigncdn.com *.behance.net *.echocdn.com *.echosign.com *.googleusercontent.com ab.adobe-identity.com about: api.rocketlawyer.com blob: cdn-sharing.adobecc.com cdn.cookielaw.org cdn.prod.assistant.adobe.com cm.everesttech.net data: design-assets.adobeprojectm.com dpm.demdex.net p.typekit.net www.facebook.com/tr; media-src 'self' blob:; manifest-src 'self'; script-src 'self' 'unsafe-eval' *.adobelogin.com *.behance.net 'sha256-ADPa+0bRVrB6grsFFx00E3eox9VoV5hex2trHGMoc+k='  'sha256-+atWHOKDGh2kY1YQJKhQQXZNNfDL2ZBTGqZkM+MjpuQ='   accounts.google.com/gsi/client api.demandbase.com/api/v3/ip.json apis.google.com/js/ assets.adobedtm.com auth.services.adobe.com by2.uservoice.com c.go-mpulse.net cc-embed.adobe.com cdn.cookielaw.org/consent/ cdn.cookielaw.org/logos/ cdn.cookielaw.org/scripttemplates/ cdn.prod.assistant.adobe.com client.messaging.adobe.com commerce.adobe.com design-assets.adobeprojectm.com express-embed.adobe.com express.adobe.com ffc-static-cdn.oobesaas.adobe.com geo2.adobe.com/json/ geolocation.onetrust.com/cookieconsentpub/ new.express.adobe.com odin.adobe.com pandora-cdn.adobe.com plan.adobe.com prod.adobeccstatic.com s.go-mpulse.net sdk-1p.cc-embed.adobe.com shared-components.adobe.com static.adobesigncdn.com use.typekit.com use.typekit.net widget.uservoice.com www.adobe.com www.adobe.com/content/dam/cc/ www.adobe.com/content/dam/dx-dc/ www.adobe.com/etc.clientlibs/globalnav/clientlibs/base/privacy-standalone.js www.adobe.com/etc/beagle/public/globalnav/adobe-privacy/latest/privacy.min.js www.adobe.com/marketingtech/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ wwwimages2.adobe.com auth-light.identity.adobe.com; style-src 'self' 'unsafe-inline' *.adobe.com *.adobeccstatic.com *.adobesigncdn.com accounts.google.com/gsi/style cdn.prod.assistant.adobe.com pandora-cdn.adobe.com shared-components.adobe.com use.typekit.com use.typekit.net; worker-src 'self'; report-uri https://dc-api.adobe.io/system/csp;
x-robots-tag: noindex, nofollow
x-amz-cf-pop: FRA60-P4
x-amz-cf-id: 7smNCNLUKsDK_Z3r5mpjPkkEBbAwVvXfeP7IT27qRD9hCjVBuKWSeA==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: br
content-length: 94681
date: Fri, 20 Mar 2026 20:22:42 GMT
report-to: {"group":"coopcoep","max_age":86400,"endpoints":[{"url":"https://dc-api.adobe.io/system/csp?source=dcwebapp_coopcoep"}]}
reporting-endpoints: coopcoep="https://dc-api.adobe.io/system/csp?source=dcwebapp_coopcoep"
document-isolation-policy: isolate-and-credentialless; report-to="coopcoep"
strict-transport-security: max-age=31536000; includeSubDomains
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,HEAD,OPTIONS
access-control-allow-origin: *
akamai-grn: 0.8aa02417.1774038162.4e90ab6
server-timing: ak_p; desc="1774038162979_388276362_82381494_33_2327_5_9_15";dur=1