=== HTTP code : 200 ===

Response headers
================
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 29 Jul 2019 00:34:53 GMT
Content-Type: text/html; charset=utf-8
Connection: close
Vary: Accept-Encoding
Vary: Accept-Encoding
Cache-Control: no-cache
Content-Security-Policy: script-src 'unsafe-eval' https://www.dropbox.com/static/compiled/js/ https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/compiled/js/ https://www.dropboxstatic.com/static/compiled/js/ https://cfl.dropboxstatic.com/static/js/ https://www.dropboxstatic.com/static/js/ https://cfl.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://www.dropboxstatic.com/static/src/dws-ensemble-appshell/ https://cfl.dropboxstatic.com/static/previews/ https://www.dropboxstatic.com/static/previews/ https://cfl.dropboxstatic.com/static/api/ https://www.dropboxstatic.com/static/api/ https://cfl.dropboxstatic.com/static/cms/ https://www.dropboxstatic.com/static/cms/ 'nonce-KYBnuwIvV+0tmP459ljF' ; img-src https://* data: blob: ; frame-ancestors 'self' ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://*.dropboxusercontent.com/p/hls_master_playlist/ https://*.dropboxusercontent.com/p/hls_playlist/ ; frame-src https://* carousel://* dbapi-6://* dbapi-7://* dbapi-8://* itms-apps://* itms-appss://* ; worker-src https://www.dropbox.com/static/serviceworker/ blob: ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; connect-src https://* ws://127.0.0.1:*/ws ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://flash.dropboxstatic.com https://swf.dropboxstatic.com https://dbxlocal.dropboxstatic.com ; media-src https://* blob: ; font-src https://* data: ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://login.yahoo.com/ ; base-uri 'self' ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist
Content-Security-Policy: script-src 'unsafe-eval' 'strict-dynamic' 'nonce-KYBnuwIvV+0tmP459ljF' 'nonce-cebzSlAvJGct1ghsdDmc' ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic
Content-Security-Policy-Report-Only: script-src 'unsafe-eval' 'unsafe-inline' https://* ; frame-ancestors 'self' 'self' ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-experimental
Dropbox-Streaming: V=1
Pragma: no-cache
Referrer-Policy: origin-when-cross-origin
Set-Cookie: seen-sl-signup-modal=VHJ1ZQ%3D%3D; expires=Wed, 28 Aug 2019 00:34:53 GMT; Path=/; secure
Set-Cookie: __Host-ss=WHNXnInGvY; expires=Thu, 28 Jul 2022 00:34:53 GMT; httponly; Path=/; SameSite=strict; secure
Set-Cookie: locale=en; Domain=dropbox.com; expires=Sat, 27 Jul 2024 00:34:53 GMT; Path=/; secure
Set-Cookie: gvc=MzEzNDEyMTkzODU5OTUzMTQ0OTI3MjIyMzAzNzc1MzY4NTI2OTE2; expires=Sat, 27 Jul 2024 00:34:53 GMT; httponly; Path=/; secure
Set-Cookie: flash=; Domain=dropbox.com; expires=Mon, 29 Jul 2019 00:34:53 GMT; Path=/; secure
Set-Cookie: puc=; expires=Mon, 29 Jul 2019 00:34:53 GMT; httponly; Path=/; secure
Set-Cookie: bang=; Domain=dropbox.com; expires=Mon, 29 Jul 2019 00:34:53 GMT; Path=/; secure
Set-Cookie: t=EBimtjPDEzWCDYE8yzcEieCo; Domain=dropbox.com; expires=Thu, 28 Jul 2022 00:34:53 GMT; httponly; Path=/; secure
Set-Cookie: __Host-js_csrf=EBimtjPDEzWCDYE8yzcEieCo; expires=Thu, 28 Jul 2022 00:34:53 GMT; Path=/; secure
X-Content-Type-Options: nosniff
X-Dropbox-Request-Id: be68867ebeebc4632e0de781dea6ea96
X-Frame-Options: DENY
X-Robots-Tag: noindex, nofollow, noimageindex
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=15552000; includeSubDomains

Request headers
================
HEAD /s/rk0vbpcjz3pbehe/Cannabis%20and%20Cancer.pdf?dl=0 HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36
Host: www.dropbox.com
Accept: */*
Referer: https://ssdp.org
Connection: close


Link is valid.