HTTP/2 200 content-security-policy: base-uri 'none'; object-src 'none'; frame-src 'self' https://www.youtube.com https://youtube.com https://dl.google.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.gstatic.com https://*.doubleclick.net https://www.youtube.com https://s.ytimg.com https://tools.google.com; connect-src 'self' https://www.google-analytics.com https://*.g.doubleclick.net https://www.google.com https://www.youtube.com https://www.googletagmanager.com https://www.gstatic.com https://services.google.com https://auditrecording-pa.googleapis.com; img-src 'self' data: https://*.google-analytics.com https://*.g.doubleclick.net https://www.google.com https://www.google.co.uk https://i.ytimg.com https://www.googletagmanager.com; strict-transport-security: max-age=2592000; includeSubdomains x-content-type-options: nosniff x-frame-options: DENY x-xss-protection: 1; mode=block x-cloud-trace-context: fac42e3071483b6f783f6f5599ed19c6 content-encoding: gzip server: Google Frontend content-length: 13424 date: Sun, 19 Jul 2026 07:39:09 GMT expires: Sun, 19 Jul 2026 07:49:09 GMT cache-control: public, max-age=600 age: 2 etag: "H3aU2g" content-type: text/html alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000