HTTP/2 200 server: nginx date: Sun, 25 Jan 2026 04:29:45 GMT content-type: text/html; charset=UTF-8 content-length: 51910 last-modified: Sun, 25 Jan 2026 03:26:54 GMT cache-control: max-age=0 expires: Sun, 25 Jan 2026 04:29:45 GMT vary: Accept-Encoding content-encoding: gzip access-control-allow-methods: GET,POST access-control-allow-headers: Content-Type, Authorization content-security-policy: upgrade-insecure-requests; cross-origin-embedder-policy: unsafe-none; report-to='default' cross-origin-embedder-policy-report-only: unsafe-none; report-to='default' cross-origin-opener-policy: unsafe-none cross-origin-opener-policy-report-only: unsafe-none; report-to='default' cross-origin-resource-policy: cross-origin permissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=() referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age= x-content-security-policy: default-src 'self'; img-src *; media-src * data:; x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none