HTTP/2 301 server: CloudFront date: Wed, 21 Jan 2026 21:10:27 GMT content-length: 0 location: https://www.dropbox.com/share x-cache: FunctionGeneratedResponse from cloudfront via: 1.1 7d1975e97f05a3fc47c8f5eea10222bc.cloudfront.net (CloudFront) x-amz-cf-pop: BOM78-P5 x-amz-cf-id: 3g2odqXiaGjl8UNO-fkKGSraJzmYsjaymiVxiq1XByW-pPEaTQRcOQ== HTTP/2 302 content-type: text/html; charset=utf-8 location: /login?cont=%2Fshare pragma: no-cache referrer-policy: strict-origin-when-cross-origin set-cookie: gvc=MzIxODk2MTM1MzEwOTI5NzYwOTg3NTMyNjY3MjUyMDUzMjMwMTc5; Path=/; Expires=Mon, 20 Jan 2031 21:10:28 GMT; HttpOnly; Secure; SameSite=None set-cookie: t=FBwyJaMCZFxKy0_f-UdXb9us; Path=/; Domain=dropbox.com; Expires=Thu, 21 Jan 2027 21:10:28 GMT; HttpOnly; Secure; SameSite=None set-cookie: __Host-js_csrf=FBwyJaMCZFxKy0_f-UdXb9us; Path=/; Expires=Thu, 21 Jan 2027 21:10:28 GMT; Secure; SameSite=None set-cookie: __Host-ss=ZM-xhTws4g; Path=/; Expires=Thu, 21 Jan 2027 21:10:28 GMT; HttpOnly; Secure; SameSite=Strict set-cookie: bjar=; Path=/; Domain=dropbox.com; HttpOnly; Secure; SameSite=None set-cookie: blid=; Path=/; Domain=dropbox.com; HttpOnly; Secure; SameSite=None set-cookie: lid=; Path=/; Domain=www.dropbox.com; HttpOnly; Secure; SameSite=None set-cookie: jar=; Path=/; Domain=www.dropbox.com; HttpOnly; Secure; SameSite=None set-cookie: slid=; Path=/; Domain=www.dropbox.com; HttpOnly; Secure; SameSite=None set-cookie: sjar=; Path=/; Domain=www.dropbox.com; HttpOnly; Secure; SameSite=None set-cookie: sjar-exists=; Path=/; Domain=www.dropbox.com; Secure; SameSite=Strict set-cookie: sid=; Path=/; Domain=www.dropbox.com; HttpOnly; Secure; SameSite=Strict set-cookie: sidd=; Path=/; Domain=www.dropbox.com; HttpOnly; Secure; SameSite=None set-cookie: sidds=; Path=/; Domain=www.dropbox.com; HttpOnly; Secure; SameSite=Strict set-cookie: sid-exists=; Path=/; Domain=www.dropbox.com; Secure; SameSite=Strict set-cookie: refresh=; Path=/; Domain=www.dropbox.com; HttpOnly; Secure; SameSite=Strict set-cookie: oscar=; Path=/; Domain=www.dropbox.com; HttpOnly; Secure; SameSite=None set-cookie: grouch=; Path=/; Domain=www.dropbox.com; HttpOnly; Secure; SameSite=None set-cookie: baklawa=; Path=/; Domain=dropbox.com; HttpOnly; Secure; SameSite=None set-cookie: malabi=; Path=/; Domain=dropbox.com; HttpOnly; Secure; SameSite=None set-cookie: __Secure-reseller_session=; Path=/; Domain=dropbox.com; HttpOnly; Secure; SameSite=None set-cookie: sm_auth=; Path=/; Domain=dropbox.com; HttpOnly; Secure; SameSite=None set-cookie: rl_auth=; Path=/; Domain=dropbox.com; HttpOnly; Secure; SameSite=None set-cookie: toaster=; Path=/; Domain=www.dropbox.com; HttpOnly; Secure; SameSite=None set-cookie: giraffe=; Path=/; Domain=www.dropbox.com; HttpOnly; Secure; SameSite=None set-cookie: db-help-center-uid=; Path=/; Domain=dropbox.com; HttpOnly; Secure; SameSite=None set-cookie: __Host-logged-out-session=; Path=/; HttpOnly; Secure; SameSite=None set-cookie: __Secure-untrusted_session=; Path=/; Domain=dropbox.com; HttpOnly; Secure; SameSite=None set-cookie: preauth=; Path=/; Domain=www.dropbox.com; HttpOnly; Secure; SameSite=None set-cookie: toast=1:er%3APlease%20sign%20in%20or%20register%20to%20access%20this%20page.:7j9hMRw8Jtm2QHi6fj8SFwl9Q4pa2ifyfU7XnjIZ%2B80%3D; Path=/; Domain=dropbox.com; Secure; SameSite=None x-content-type-options: nosniff x-permitted-cross-domain-policies: none x-robots-tag: noindex, nofollow, noimageindex x-xss-protection: 1; mode=block content-length: 43 date: Wed, 21 Jan 2026 21:10:28 GMT strict-transport-security: max-age=31536000; includeSubDomains server: envoy cache-control: no-cache, no-store alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 x-dropbox-response-origin: far_remote x-dropbox-request-id: dc15bff0fe954a1c9cfa5de3697140c4 HTTP/2 200 content-security-policy: base-uri 'self' ; frame-ancestors 'self' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; media-src https://* blob: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; default-src 'none' ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; frame-src https://* dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: blob: ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; img-src https://* data: blob: ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://applepay.cdn-apple.com 'nonce-xYDsKES1XwlpPfxQXzTOHj3mPhY=' ; font-src https://* data: content-security-policy: script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xYDsKES1XwlpPfxQXzTOHj3mPhY=' 'nonce-0iZ6pHkmAOGNlas0SRmBpWSmpr4=' ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic content-type: text/html; charset=utf-8 pragma: no-cache referrer-policy: strict-origin-when-cross-origin set-cookie: __Host-logged-out-session=ChDBaAHRdT4eDSy2WhMJozs5EMSBxcsGGi5BUFVUOHJJVmdGWHd2bHBDQkR6THNEb0N0dlpKdnNkT3l1M0M1NkZFTzFyZUVn; Path=/; HttpOnly; Secure; SameSite=None set-cookie: locale=en; Path=/; Domain=dropbox.com; Expires=Mon, 20 Jan 2031 21:10:28 GMT x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block date: Wed, 21 Jan 2026 21:10:28 GMT strict-transport-security: max-age=31536000; includeSubDomains server: envoy cache-control: no-cache, no-store alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 content-encoding: gzip vary: Accept-Encoding x-dropbox-response-origin: far_remote x-dropbox-request-id: 23e6d8221ca8439b8bf20544697140c4