HTTP/2 200 
server: nginx
date: Tue, 15 Jul 2025 14:28:30 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
vary: Accept-Encoding
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: laravel_session=eyJpdiI6IlhMSVZvaXVZVnl4ekZBeERPMFdsQkE9PSIsInZhbHVlIjoiRVNKQkpOZk5jaWVKbEtnd0VDR0d2SDZ3K0NDOXIzK295Uko5T0ppMXc3UCttZFh1QjVqRHV3a1ZwcDQ2Ukh1V2VpemUwM3RGejh1NXNCSzNtREN2bUJ5SkNqNmJSZzczZXR6OXZOVjB6VHZYbHhrM2NSa1R4eVBxY1d0MFR5SnEiLCJtYWMiOiI1ZjQ4NzZmMzJlNDFiNTNjYjcxNDkzNzYyNTU4MDBjOWQyZGRkZDBmZDc5NzkwMDA3NDQ5MmE0YTczMTE5ZjBlIiwidGFnIjoiIn0%3D; expires=Tue, 15 Jul 2025 16:28:30 GMT; Max-Age=7200; path=/; secure; httponly
x-server: http-1.prod
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains; preload;
content-security-policy: default-src https: blob: 'self' 'unsafe-eval' 'unsafe-inline'; script-src https: blob: 'self' 'unsafe-inline' 'unsafe-eval' www.google.com www.gstatic.com; frame-src https: blob: 'self' www.google.com www.gstatic.com; object-src blob:; font-src barebuddy.com buddy.net *.buddy.net fonts.gstatic.com data: blob:; connect-src barebuddy.com buddy.net *.buddy.net *.buddy.net:2052 *.buddy.net:2053 *.google-analytics.com *.heap-api.com heap-api.com *.nr-data.net *.newrelic.com onesignal.com *.onesignal.com *.openstreetmap.org *.zendesk.com *.zdassets.com blob: wss: ws:; img-src https: data: blob:;
x-xss-protection: 1; mode=block
content-encoding: gzip