HTTP/2 200
content-type: text/html; charset=utf-8
vary: Accept-Encoding
vary: Cookie
cache-control: public, max-age=600
permissions-policy: browsing-topics=()
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: font-src 'self' data: https://fonts.gstatic.com ; frame-src https://ad.doubleclick.net/ https://adservice.google.com/ https://www.youtube.com/embed/ https://www.googletagmanager.com/ns.html ; script-src 'strict-dynamic' 'unsafe-inline' https: 'nonce-hG5xdXtKKqnsUNZVfa_B_9ckLgt-JjZa'; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://www.gstatic.com/glue/cookienotificationbar/cookienotificationbar.min.css https://www.gstatic.com/glue/v28_1/glue-material.min.css https://www.gstatic.com/glue/v28_2/glue-material.min.css https://www.googletagmanager.com/debug/badge.css https://tagmanager.google.com ; object-src 'none' ; default-src 'self' *.gstatic.com; base-uri 'self' ; img-src 'self' data: https://* ; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://www.gstatic.com/glue/cookienotificationbar/config/2b.json https://auditrecording-pa.googleapis.com ; manifest-src 'self' https://accounts.google.com/o/oauth2 ; report-uri https://csp.withgoogle.com/csp/s~gweb-cybersecurity/2-28-0-2026-06-03-15-37-40
strict-transport-security: max-age=31556926; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
content-encoding: gzip
x-cloud-trace-context: 379fa93729cc25719b4647df0b938ae1
date: Sun, 19 Jul 2026 07:00:53 GMT
server: Google Frontend
content-length: 179765
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000