HTTP/2 200
content-type: text/html; charset=utf-8
vary: Accept-Encoding
vary: Cookie
cache-control: public, max-age=600
permissions-policy: browsing-topics=()
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: font-src 'self' data: https://fonts.gstatic.com ; frame-src https://ad.doubleclick.net/ https://adservice.google.com/ https://www.youtube.com/embed/ https://www.googletagmanager.com/ns.html ; script-src 'strict-dynamic' 'unsafe-inline' https: 'nonce-wL2J0OnRI9YqahKKdYtuRhLkbvvAFdx8'; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://www.gstatic.com/glue/cookienotificationbar/cookienotificationbar.min.css https://www.gstatic.com/glue/v28_1/glue-material.min.css https://www.gstatic.com/glue/v28_2/glue-material.min.css https://www.googletagmanager.com/debug/badge.css https://tagmanager.google.com ; object-src 'none' ; default-src 'self' *.gstatic.com; base-uri 'self' ; img-src 'self' data: https://* ; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://www.gstatic.com/glue/cookienotificationbar/config/2b.json https://auditrecording-pa.googleapis.com ; manifest-src 'self' https://accounts.google.com/o/oauth2 ; report-uri https://csp.withgoogle.com/csp/s~gweb-cybersecurity/2-28-0-2026-06-03-15-37-40
strict-transport-security: max-age=31556926; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
x-cloud-trace-context: 3f31ad1c1ea46e4f5cb37d82d9a0e1c7;o=1
content-length: 301076
date: Sun, 19 Jul 2026 07:00:49 GMT
server: Google Frontend
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000