HTTP/2 200 age: 0 bom-country: IN:0 cache-control: private, no-cache, no-store, max-age=0, must-revalidate content-encoding: gzip content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https: http:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https:; upgrade-insecure-requests content-type: text/html; charset=utf-8 date: Wed, 21 Jan 2026 04:40:33 GMT etag: W/"aylapgc06h1knj0" server: Vercel set-cookie: BOM-COUNTRY=IN%3A0; Path=/; Expires=Thu, 21 Jan 2027 10:29:45 GMT; Domain=.bombas.com strict-transport-security: max-age=31536000; includeSubDomains x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-matched-path: / x-powered-by: Next.js x-vercel-cache: MISS x-vercel-id: bom1::iad1::54mgj-1768970433435-dfbc02a9c63a