HTTP/2 200 cache-control: no-cache content-encoding: gzip content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' pixel.adsafeprotected.com *.adsafeprotected.com www.googletagservices.com googletagservices.com *.googletagservices.com gwiq-v3.globalwebindex.net apis.google.com *.googleapis.com imasdk.googleapis.com securepubads.g.doubleclick.net pubads.g.doubleclick.net *.google.com *.googlesyndication.com s0.2mdn.net gcdn.2mdn.net pubads.g.doubleclick.net *.g.doubleclick.net *.boltdns.net www.googletagmanager.com www.googletagmanager.com/gtag/js cdn.permutive.app connect.facebook.net cdnjs.cloudflare.com www.google-analytics.com static.chartbeat.com edge.quantserve.com secure.quantserve.com gwiqcdn.globalwebindex.net securepubads.g.doubleclick.net script.crazyegg.com rules.quantcount.com cmp.inmobi.com players.brightcove.net vjs.zencdn.net apis.google.com ep2.adtrafficquality.google localhost:35729 imasdk.googleapis.com pagead2.googlesyndication.com res.wx.qq.com www.youtube.com www.google.com *.google.com *.google.co.uk ssl.google-analytics.com www.gstatic.com *.doubleclick.net *.g.doubleclick.net td.doubleclick.net ajax.googleapis.com storage.googleapis.com optimize.google.com tpc.googlesyndication.com s0.2mdn.net gcdn.2mdn.net *.facebook.com *.googleadservices.com www.googleadservices.com cdn.doubleverify.com tps.doubleverify.com static.hotjar.com script.hotjar.com track.adform.net s2.adform.net *.adform.net; style-src 'self' 'unsafe-inline' use.typekit.net p.typekit.net nowness-api-prod-us.herokuapp.com players.brightcove.net fonts.googleapis.com api.nowness.com cdnjs.cloudflare.com; img-src 'self' data: blob: dt.adsafeprotected.com *.adsafeprotected.com pixel.adsafeprotected.com tpc.googlesyndication.com *.googlesyndication.com gwiq-v3.globalwebindex.net img.nowness.com *.doubleclick.net securepubads.g.doubleclick.net *.googlevideo.com pubads.g.doubleclick.net *.g.doubleclick.net *.boltdns.net img.nowness.com www.google-analytics.com ping.chartbeat.net ep1.adtrafficquality.google www.googletagmanager.com cf-images.eu-west-1.prod.boltdns.net metrics.brightcove.com www.google.pl graph.facebook.com i.ytimg.com www.google.com *.doubleclick.net *.g.doubleclick.net www.gstatic.com *.google.com *.google.co.uk *.boltdns.net *.akamaihd.net *.2mdn.net optimize.google.com pagead2.googlesyndication.com *.facebook.com *.googleadservices.com www.googleadservices.com www.googletagservices.com googletagservices.com *.googletagservices.com pixel.quantserve.com pixel.quantcount.com *.filepicker.io track.adform.net *.adform.net; font-src 'self' data: cdnjs.cloudflare.com *.cloudflare.com use.typekit.net fonts.gstatic.com fonts.googleapis.com; connect-src 'self' *.adsafeprotected.com dt.adsafeprotected.com pixel.adsafeprotected.com *.googlevideo.com gwiq-v3.globalwebindex.net audit-tcfv2.cmp.quantcast.com edge.quantserve.com pubads.g.doubleclick.net *.g.doubleclick.net csi.gstatic.com *.gstatic.com *.boltdns.net nowness-api-prod-us.herokuapp.com external-pages-stats.rbl.ms script.crazyegg.com nowness.yund.co region1.analytics.google.com *.google-analytics.com securepubads.g.doubleclick.net cmp.inmobi.com ep1.adtrafficquality.google www.google-analytics.com www.google.pl sentry.io api.cmp.inmobi.com gwiq-v3.globalwebindex.net pagead2.googlesyndication.com ws://localhost:35729 edge.api.brightcove.com edge-elb.api.brightcove.com manifest.prod.boltdns.net house-fastly-signed-eu-west-1-prod.brightcovecdn.com nowness-a.akamaihd.net metrics.brightcove.com stats.g.doubleclick.net optimize.google.com cdn.linkedin.oribi.io api.nowness.com imasdk.googleapis.com *.2mdn.net *.facebook.com www.facebook.com *.doubleclick.net *.g.doubleclick.net *.google.com *.google.co.uk *.googleadservices.com www.googleadservices.com www.googletagservices.com googletagservices.com *.googletagservices.com ade.googlesyndication.com tps.doubleverify.com visit-server.inmobi-choice.io pixel.quantserve.com pixel.quantcount.com ws.hotjar.com wss://ws.hotjar.com content.hotjar.io in.hotjar.com metrics.hotjar.io test-drive-12-s6uit34pua-uc.a.run.app *.a.run.app *.conversionsapigateway.com players.brightcove.net cdnjs.cloudflare.com track.adform.net *.adform.net; frame-src 'self' *.adsafeprotected.com dt.adsafeprotected.com pixel.adsafeprotected.com gwiq-v3.globalwebindex.net *.googlevideo.com imasdk.googleapis.com *.googleapis.com *.doubleclick.net *.googlesyndication.com tpc.googlesyndication.com *.safeframe.googlesyndication.com pubads.g.doubleclick.net *.g.doubleclick.net gvt1.com *.gvt1.com imasdk.googleapis.com *.googleapis.com www.filepicker.io dialog.filepicker.io securepubads.g.doubleclick.net ep2.adtrafficquality.google www.google.com *.safeframe.googlesyndication.com platform.twitter.com www.youtube.com open.weixin.qq.com player.vimeo.com tpc.googlesyndication.com optimize.google.com bid.g.doubleclick.net *.2mdn.net *.facebook.com *.doubleclick.net *.google.com *.google.co.uk *.googleadservices.com www.googleadservices.com www.googletagservices.com googletagservices.com *.googletagservices.com; media-src blob: 'self' gwiq-v3.globalwebindex.net *.googlevideo.com *.sn-u2oxu-f5fey.googlevideo.com rr4---sn-u2oxu-f5fey.googlevideo.com *.doubleclick.net *.g.doubleclick.net googleads.g.doubleclick.net securepubads.g.doubleclick.net pubads.g.doubleclick.net pubads.g.doubleclick.net *.g.doubleclick.net redirector.gvt1.com *.gvt1.com *.boltdns.net *.brightcovecdn.com brightcove.hs.llnwd.net manifest.prod.boltdns.net *.media.brightcove.com *.llnw.net *.llnwd.net *.akafms.net *.akamaihd.net *.cf.brightcove.com imasdk.googleapis.com pagead2.googlesyndication.com *.2mdn.net dts.podtrac.com; object-src 'self' blob: data: *.doubleclick.net *.googlesyndication.com *.g.doubleclick.net *.googleapis.com; worker-src blob: 'self'; report-uri /api/csp-report; content-type: text/html etag: "64768-174370-1766063859000" last-modified: Thu, 18 Dec 2025 13:17:39 GMT nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1} report-to: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=bT%2B%2FZnd60SaHCETKC9AnYnIPTRLMrJ%2Ffl0FkQGL%2Fjqk%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767030543"}],"max_age":3600} reporting-endpoints: heroku-nel="https://nel.heroku.com/reports?s=bT%2B%2FZnd60SaHCETKC9AnYnIPTRLMrJ%2Ffl0FkQGL%2Fjqk%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767030543" server: Heroku x-powered-by: Express content-length: 3809 vary: Accept-Encoding date: Mon, 29 Dec 2025 17:49:04 GMT