HTTP/2 200 content-type: text/html; charset=utf-8 x-content-type-options: nosniff server: nginx cache-control: no-store, no-cache, must-revalidate, proxy-revalidate via: 1.1 google, 1.1 varnish, 1.1 varnish x-robots-tag: noindex,nofollow x-frame-options: DENY expires: 0 content-security-policy: connect-src 'self' https://api.accounts.firefox.com https://oauth.accounts.firefox.com https://www.paypal.com https://profile.accounts.firefox.com https://*.sentry.io https://api.stripe.com;default-src 'self';font-src 'self';frame-src https://www.paypal.com https://www.paypal.com https://js.stripe.com https://hooks.stripe.com;img-src 'self' data: https://secure.gravatar.com https://profile.accounts.firefox.com https://firefoxusercontent.com https://cdn.accounts.firefox.com;media-src 'none';object-src 'none';report-uri https://accounts.firefox.com/_/csp-violation;script-src 'self' https://js.stripe.com https://www.paypal.com 'nonce-627bb8fb-7956-4b9b-a2c7-8ad3d000fec6';style-src 'self' 'unsafe-inline';base-uri 'self';form-action 'self';frame-ancestors 'self';script-src-attr 'none';upgrade-insecure-requests x-xss-protection: 0 content-encoding: gzip etag: W/"c9c-+pvVqJVGjmvqrKPO01ucaCFhI+8" accept-ranges: bytes date: Mon, 06 Oct 2025 04:35:08 GMT x-served-by: cache-bom-vanm7210057-BOM, cache-bom-vanm7210057-BOM x-cache: MISS, MISS x-cache-hits: 0, 0 x-timer: S1759725308.108097,VS0,VE503 vary: Accept-Encoding