Dropbox.com - Trust.dropbox.com

content-type: text/html; charset=utf-8
date: Wed, 03 Dec 2025 03:12:24 GMT
server: cloudflare
cf-ray: 9a7fe1c7ac855d99-FRA
content-encoding: gzip
content-security-policy: connect-src 'self' https://app.safebase.io *.google-analytics.com *.analytics.google.com analytics.google.com adservice.google.com www.google.com stats.g.doubleclick.net api-js.mixpanel.com *.ingest.sentry.io storage.googleapis.com api.segment.io cdn.segment.com *.safebase.io *.chameleon.io *.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io wss://*.intercom-messenger.com uploads.intercomcdn.com uploads.intercomusercontent.com *.vitally.io z9uyl8uax6-dsn.algolia.net z9uyl8uax6-1.algolianet.com z9uyl8uax6-2.algolianet.com z9uyl8uax6-3.algolianet.com api.cr-relay.com *.split.io *.explo.co api.statsig.com autocomplete.clearbit.com api.us.flatfile.io wss://api.us.flatfile.io platform.flatfile.com api.x.flatfile.com *.fullstory.com www.loom.com *.hubspot.com *.hsforms.com *.hsforms.net *.hscollectedforms.net *.hubapi.com js.hs-banner.com js.hs-scripts.com js.hsleadflows.net js.hubspotfeedback.com js.hsadspixel.net www.facebook.com/tr/ cdn.cookielaw.org *.onetrust.com cookies-data.onetrust.io www.paypal.com *.cookiebot.com *.stigg.io api.liveblocks.io wss://api.liveblocks.io;img-src 'self' blob: data: https://app.safebase.io *.safebase.io s.gravatar.com *.googleusercontent.com *.wp.com cdn.auth0.com storage.googleapis.com/public.safebase.co/ www.google.com *.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.ca www.google.ie stats.g.doubleclick.net analytics.google.com px.ads.linkedin.com px4.ads.linkedin.com p.adsymptotic.com *.intercomcdn.com static.intercomassets.com uploads.intercomusercontent.com messenger-apps.intercom.io *.intercom-attachments-1.com *.intercom-attachments-2.com *.intercom-attachments-3.com *.intercom-attachments-4.com *.intercom-attachments-5.com *.intercom-attachments-6.com *.intercom-attachments-7.com *.intercom-attachments-8.com *.intercom-attachments-9.com logo.clearbit.com *.chameleon.io cdn.brandfetch.io *.dratacdn.com platform.securityscorecard.io rs.fullstory.com app.livestorm.co *.hsforms.com *.hsforms.net hubspot.com *.hubspot.com www.facebook.com/tr/ www.facebook.com/privacy_sandbox/pixel/register/trigger/ cdn.cookielaw.org *.onetrust.com *.cookiebot.com;script-src 'self' 'report-sample' 'nonce-xcZjpOYEfnHnEsbkPbL2dA==' 'strict-dynamic' *.safebase.io cdn.mxpnl.com *.google-analytics.com www.gstatic.com www.google.com www.googletagmanager.com cdn.cr-relay.com *.dropbox.com *.dropboxstatic.com embed.explo.co *.chameleon.io *.intercom.io js.intercomcdn.com cdn.vitally.io *.fullstory.com js.hs-analytics.net js.hs-banner.com *.hs-scripts.com static.hsappstatic.net js.hscollectedforms.net *.usemessages.com forms.hsforms.com js.hs-scripts.com js.hsleadflows.net js.hubspotfeedback.com js.hsadspixel.net *.hscollectedforms.net app.svix.com connect.facebook.net cdn.cookielaw.org;manifest-src 'self';media-src *.safebase.io js.intercomcdn.com;default-src 'self';child-src 'self' blob: *.safebase.io intercom-sheets.com www.intercom-reporting.com  www.youtube.com player.vimeo.com fast.wistia.net;base-uri 'self';block-all-mixed-content;font-src 'self' https: data: *.safebase.io *.intercomcdn.com use.typekit.net fonts.googleapis.com fonts.gstatic.com;form-action 'self' intercom.help *.intercom.io *.statuspage.io calendly.com www.facebook.com/tr/;frame-ancestors 'none';frame-src *.safebase.io *.dropbox.com *.flatfile.io *.flatfile.com intercom-sheets.com www.intercom-reporting.com  www.youtube.com player.vimeo.com fast.wistia.net www.loom.com www.google.com *.chameleon.io embedded.tray.io *.hubspot.com app.svix.com www.facebook.com *.cookiebot.com www.googletagmanager.com js.stripe.com portal.productboard.com;object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline' use.typekit.net p.typekit.net;upgrade-insecure-requests;worker-src 'self' blob: *.safebase.io intercom-sheets.com www.intercom-reporting.com  www.youtube.com player.vimeo.com fast.wistia.net;report-uri https://o410058.ingest.sentry.io/api/5283673/security/?sentry_key=3fbff9fa2e9e4c6991906aa26710df82&sentry_release=9ec5066eb2fa93de68b594273bb0ed5ca289e8f2&sentry_environment=production
cross-origin-opener-policy: same-origin-allow-popups
origin-agent-cluster: ?1
referrer-policy: no-referrer,strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
via: 1.1 google, 1.1 0631824901b7974213ff58a0ef901c8e.cloudfront.net (CloudFront)
cf-cache-status: EXPIRED
set-cookie: __cf_bm=Q5R_38HMJDabB9D5iiHi2T1ceRv2UVpkP.zbknOWJcc-1764731544-1.0.1.1-hrFbeFww_4XC2s534pLnkXf3mG4FP36T5ljB3gSe1de3FrwA2Ajo_QqRherw3cYKHMYhEFs6PkoPglotSPPrn9fGYwKu51PIvzmpXEj.bSY; path=/; expires=Wed, 03-Dec-25 03:42:24 GMT; domain=.trust.dropbox.com; HttpOnly; Secure; SameSite=None
set-cookie: _cfuvid=c4suF4EdL5SQoft207ciwyqNRunPK5YWi_le79w20tg-1764731544177-0.0.1.1-604800000; path=/; domain=.trust.dropbox.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
x-cache: Miss from cloudfront
x-amz-cf-pop: FRA50-P1
x-amz-cf-id: 4BfPnNVBtC-l0Z5PTyycpixaMVEEKosItsZ_5sKdx2xs1vqivwOsFA==