Security Analysis Results

h3=":443"; ma=86400

max-age=0, private, must-revalidate

28df720c4a000070e9964c1400000001

gzip

connect-src 'self' blob: https://docsend.com https://*.docsend.com https://assets.docsend.com https://d2qvtfnm75xrxf.cloudfront.net https://*.previews.dropboxusercontent.com https://*.dropboxusercontent.com https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://*.intercomcdn.com https://uploads.intercomusercontent.com https://featuregates.org https://events.statsigapi.net https://browser-intake-datadoghq.com https://browser-intake-us3-datadoghq.com https://browser-intake-us5-datadoghq.com https://*.kissmetrics.com https://*.kissmetrics.io https://api.segment.io https://cdn.segment.com https://events.statsigapi.net/v1/rgstr https://statsigapi.net/v1/sdk_exception https://*.id.opendns.com https://www.google-analytics.com https://analytics.google.com https://*.g.doubleclick.net https://www.facebook.com https://api.autopilothq.com https://www.google.com/ccm/ https://*.filestackapi.com https://cdn.filestackcontent.com https://s3.amazonaws.com https://*.dropbox.com https://*.dropboxapi.com https://*.dropboxstatic.com https://browser.pipe.aria.microsoft.com https://checkout.stripe.com https://forms.hubspot.com https://*.pubnub.com https://docsend-prod.s3.amazonaws.com https://docsend-prod.s3.us-east-1.amazonaws.com; frame-src 'self' https://assets.docsend.com https://*.previews.dropboxusercontent.com https://marketing.docsend.com https://js.stripe.com https://checkout.stripe.com https://www.youtube.com https://player.vimeo.com https://td.doubleclick.net https://*.g.doubleclick.net https://tpc.googlesyndication.com https://www.facebook.com https://accounts.google.com/gsi/ https://telemetryservice.firstpartyapps.oaspapps.com https://dropboxcaptcha.com https://www.dropbox.com https://ifttt.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' https://assets.docsend.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://*.google-analytics.com https://cdn.segment.com https://scripts.kissmetrics.com https://*.id.opendns.com https://www.youtube.com https://*.ytimg.com https://vimeo.com https://www.vimeo.com https://www.googletagmanager.com https://www.googleadservices.com https://tagmanager.google.com https://connect.facebook.net https://*.quora.com https://*.bing.com https://api.autopilothq.com https://*.capterra.com https://*.g.doubleclick.net https://accounts.google.com/gsi/client https://js.hs-analytics.net https://js.hs-scripts.com https://js-na1.hs-scripts.com https://js.hscollectedforms.net https://js.hsleadflows.net https://js.stripe.com https://checkout.stripe.com https://ajax.aspnetcdn.com https://appsforoffice.microsoft.com https://maps.googleapis.com https://static.filestackapi.com https://zapier.com 'nonce-qOqrNeirw/EFd8NSS4FdwQ=='; report-uri https://www.dropbox.com/csp_log?policy_name=docsend_default; default-src 'self'; base-uri 'self'; child-src 'self' blob:; font-src 'self' https: data: chrome-extension:; form-action 'self' https://docsend.com https://*.docsend.com https://intercom.help https://api-iam.intercom.io https://accounts.google.com https://www.linkedin.com https://*.salesforce.com https://www.dropbox.com https://accounts.logme.in https://secure.join.me https://*.okta.com https://*.oktapreview.com https://*.jumpcloud.com https://*.onelogin.com https://zapier.com https://ifttt.com https://www.facebook.com; img-src 'self' https: data: blob: chrome-extension:; media-src 'self' blob: data: https://d2qvtfnm75xrxf.cloudfront.net https://js.intercomcdn.com https://*.dropboxusercontent.com; object-src 'none'; style-src 'self' 'unsafe-inline' https://assets.docsend.com https://fonts.googleapis.com https://tagmanager.google.com https://static.filestackapi.com https://use.fontawesome.com https://vjs.zencdn.net https://accounts.google.com/gsi/style; worker-src 'self' blob:

text/html; charset=utf-8

Thu, 24 Jul 2025 19:11:26 GMT

W/"36ca87a558aa818fbf0dc0ca6dfcd4cf"

<https://assets.docsend.com/static/application-WRI2AKYO.css>; rel=preload; as=style; crossorigin=anonymous; integrity=sha256-MnMqJ67ZZtROWAYuKYLSRTXL7JANdtx69u+KtQcZOX8=; nopush,<https://assets.docsend.com/static/application-UILNZYT6.css>; rel=preload; as=style; crossorigin=anonymous; integrity=sha256-mtMlWOnX17UzVZTesBGk3fpytpYDEvKZpC4KrTbQKNQ=; nopush,<https://assets.docsend.com/static/en-6VB7IMXT.js>; rel=modulepreload; as=script; crossorigin=anonymous; integrity=sha256-nNMh8T2wbZbB7YXRFloTVtPqoZJt1cvWv76jj/eC6x4=; nopush,<https://assets.docsend.com/static/application-GYFEEX2U.js>; rel=modulepreload; as=script; crossorigin=anonymous; nopush

{"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}

strict-origin-when-cross-origin

{"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=yqjycA6JGENy0w8TS8LnjUoEkEIIkonzAw%2BdpfprB4U%3D\u0026sid=af571f24-03ee-46d1-9f90-ab9030c2c74c\u0026ts=1753384286"}],"max_age":3600}

heroku-nel="https://nel.heroku.com/reports?s=yqjycA6JGENy0w8TS8LnjUoEkEIIkonzAw%2BdpfprB4U%3D&sid=af571f24-03ee-46d1-9f90-ab9030c2c74c&ts=1753384286"

Heroku

cfReqDur;dur=1650.261

max-age=31556952; includeSubDomains; preload

Accept-Encoding, Origin

1.1 heroku-router, 1.1 09e594de40cb3eb83a4bc581fa48d9e2.cloudfront.net (CloudFront)

TrVNNy1SZQwqPGb_C_RTg6zJbHblGH9nXdl9qZD4MOm70bd20dk51g==

MAD51-C2

Miss from cloudfront

nosniff

SAMEORIGIN

none

51290900-cf74-42b4-c6c6-7c20df08b7fd

0.034147

0