HTTP/2 301 date: Sun, 28 Dec 2025 08:18:08 GMT content-type: text/html; charset=iso-8859-1 content-length: 239 server: nginx location: https://gpgtools.tenderapp.com/ x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN strict-transport-security: max-age=31536000 x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sun, 28 Dec 2025 08:18:09 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive P3P: CP="ALL DSP COR CUR ADM DEV OUR IND UNI" X-UA-Compatible: IE=Edge,chrome=1 ETag: W/"835f612aed0d07a89168ab43f3c00c2f" Cache-Control: max-age=0, private, must-revalidate Set-Cookie: anon_token=bc33b7821; path=/; expires=Mon, 28-Dec-2026 08:18:09 GMT; HttpOnly; SameSite=Lax Set-Cookie: _tender19_session=BAh7B0kiD3Nlc3Npb25faWQGOgZFVEkiJTYxNGZjOGM0NmM0ZGZlNWUwYjI3ODJkMjEwZmY5NGM1BjsAVEkiEF9jc3JmX3Rva2VuBjsARkkiRTdjZjNhMDBiZDdkZDNmYThiNTIxY2MxNjNmNTU2MzljMzM1MjA4N2IyNTYzMTdiNDc4OTZhYWQ2YTcxMGEwYjUGOwBG--344933f2dd0b17593eddb67271c49d006a3508c8; path=/; HttpOnly; SameSite=Lax X-Request-Id: 1f19fcf0c0a15568bb39e043ac62119a X-Runtime: 0.072235 X-Rack-Cache: miss Content-Security-Policy: default-src https: http: 'unsafe-inline' 'unsafe-eval'; connect-src 'self' wss://*.tawk.to *.tawk.to nrpc.olark.com hooks.slack.com; img-src 'self' http: https: data:; report-uri https://help.tenderapp.com/csp_report Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: allowall X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block Content-Encoding: gzip