HTTP/2 200 server: nginx date: Fri, 30 Jan 2026 03:31:24 GMT content-type: text/html last-modified: Fri, 05 Dec 2025 21:07:35 GMT etag: W/"69334997-43d" content-security-policy: default-src *.whistlelink.com *.wltoolbox.com 'self'; font-src *;img-src * data:;connect-src *.whistlelink.com *.wltoolbox.com 'self' https://eu-api.friendlycaptcha.eu/api/ blob:;media-src *.whistlelink.com *.wltoolbox.com blob:; script-src 'wasm-unsafe-eval' 'self' 'unsafe-inline'; worker-src blob:; child-src blob:; style-src 'self' 'unsafe-inline' fonts.googleapis.com;frame-ancestors 'none' x-xss-protection: 1; mode=block x-frame-options: DENY x-content-type-options: nosniff referrer-policy: strict-origin permissions-policy: geolocation=(),midi=(),microphone=(self),camera=(),magnetometer=(),gyroscope=() content-encoding: gzip strict-transport-security: max-age=31536000; includeSubDomains;