HTTP/2 200 access-control-allow-origin: * age: 195526 cache-control: public, max-age=0, must-revalidate content-disposition: inline content-encoding: gzip content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.instagram.com api.mapbox.com cdn.mxpnl.com www.googleadservices.com bat.bing.net cdn.sanity.io cdn.segment.com *.googletagmanager.com *.google-analytics.com www.google-analytics.com region1.google-analytics.com stats.g.doubleclick.net googleads.g.doubleclick.net *.clarity.ms static.tapfiliate.com snap.licdn.com bat.bing.com *.ads-twitter.com static.ads-twitter.com connect.facebook.net widget.intercom.io js.intercomcdn.com script.tapfiliate.com public.profitwell.com www.googletagmanager.com connect.facebook.net static.ads-twitter.com bat.bing.com www.youtube.com vercel.live https://cdn.segment.com/v1/projects/K50AlxZosVyjAMAaP4553S8jxS2VYXLR/settings https://cdn.segment.com/analytics-next/bundles/* https://cdn.segment.com/next-integrations/integrations/* js.stripe.com maps.googleapis.com; style-src 'self' 'unsafe-inline' api.mapbox.com fonts.googleapis.com; img-src 'self' data: *; connect-src 'self' cdn.predictwind.com hooks.slack.com frstre.com air-quality-api.open-meteo.com archive-api.open-meteo.com o79082.ingest.us.sentry.io api.open-meteo.com www2.profitwell.com analytics.google.com dmpap9iuyd-dsn.algolia.net bat.bing.com www.facebook.com bat.bing.net google.com www.google.com it8ry1k3.api.sanity.io *.api.sanity.io *.apicdn.sanity.io apicdn.sanity.io api.sanity.io signup.predictwind.com forecast.predictwind.com api.intercom.io api-iam.intercom.io ip-api.com api.segment.io *.google-analytics.com www.google-analytics.com region1.google-analytics.com stats.g.doubleclick.net *.analytics.google.com *.clarity.ms api.crowdin.com api.profitwell.com tapfiliate.com api.mapbox.com cdn.segment.com events.mapbox.com px.ads.linkedin.com wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io *.intercom-messenger.com wss://*.intercom-messenger.com cdn.sanity.io noembed.com api.stripe.com maps.googleapis.com *.pusher.com wss://*.pusher.com; font-src 'self' fonts.intercomcdn.com fonts.googleapis.com fonts.gstatic.com; object-src 'none'; frame-src 'self' * js.stripe.com; media-src 'self' youtu.be www.youtube.com js.intercomcdn.com cdn.sanity.io s3.amazonaws.com; child-src 'self' blob:; worker-src 'self' blob:; content-type: text/html; charset=utf-8 date: Sun, 25 Jan 2026 18:03:38 GMT etag: W/"fc780ebd82b0a48c9070eac970541a75" permissions-policy: geolocation=(self "https://americascup.com" "https://*.predictwind.com"), microphone=() referrer-policy: strict-origin-when-cross-origin server: Vercel strict-transport-security: max-age=63072000; includeSubDomains; preload vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url x-content-type-options: nosniff x-matched-path: /en x-vercel-cache: HIT x-vercel-id: bom1::l4v4b-1769364218582-8e6dfbdeb2ee