HTTP/2 200 date: Tue, 27 Jan 2026 22:43:14 GMT content-type: text/html; charset=UTF-8 server: cloudflare x-frame-options: sameorigin expires: -1 cache-control: max-age=7200, must-revalidate pragma: no-cache content-encoding: gzip vary: Accept-Encoding content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' * 'self' blob: *.visualwebsiteoptimizer.com app.vwo.com; img-src * data: *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io; referrer-policy: strict-origin permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(self), execution-while-out-of-viewport=(self), fullscreen=(), geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(self), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(self), xr-spatial-tracking=(), clipboard-read=(self), clipboard-write=(self), gamepad=(self), speaker-selection=(self), conversion-measurement=(self), focus-without-user-activation=(self), hid=(self), idle-detection=(), interest-cohort=(), serial=(), sync-script=(), trust-token-redemption=(), unload=(), window-placement=(), vertical-scroll=(self) x-content-type-options: nosniff x-xss-protection: 1; mode=block strict-transport-security: max-age=31536000; includeSubDomains x-permitted-cross-domain-policies: master-only last-modified: Mon, 26 Jan 2026 23:51:40 GMT age: 82294 cf-cache-status: HIT cf-ray: 9c4bc490cbf3b155-BLR