Arduos.com

date: Fri, 29 May 2026 09:34:03 GMT
content-type: text/html
age: 0
cache-control: public, max-age=0, must-revalidate
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=MaNF%2F0TfnyQ6pRBYxODrTW4K42fKp06WPRPyJg7pS4ueKjKEVTnq7gTS5NgyDSWNRl0NBRa1d76qYgVI2XN%2BnlmLoH0bA%2BxdJwl7gJG5eX%2FmFexIjMXoTHbJ%2FxyrB7AxoPREIdczl%2FPd"}]}
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' js.stripe.com connect.stripe.com connect-js.stripe.com *.vercel-scripts.com *.vercel-insights.com pagead2.googlesyndication.com *.googletagservices.com fundingchoicesmessages.google.com tpc.googlesyndication.com googleads.g.doubleclick.net www.googletagmanager.com; style-src 'self' 'unsafe-inline' api.mapbox.com; img-src 'self' data: blob: xwfrxcvqqlhyxdgritjy.supabase.co xwfrxcvqqlhyxdgritjy.supabase.in api.mapbox.com *.mapbox.com pagead2.googlesyndication.com *.google.com *.doubleclick.net *.stripe.com; font-src 'self' data:; connect-src 'self' xwfrxcvqqlhyxdgritjy.supabase.co xwfrxcvqqlhyxdgritjy.supabase.in wss://xwfrxcvqqlhyxdgritjy.supabase.co wss://xwfrxcvqqlhyxdgritjy.supabase.in api.mapbox.com events.mapbox.com js.stripe.com api.stripe.com connect-js.stripe.com *.vercel-insights.com vitals.vercel-insights.com nominatim.openstreetmap.org pagead2.googlesyndication.com tpc.googlesyndication.com *.google-analytics.com fundingchoicesmessages.google.com; frame-src js.stripe.com connect.stripe.com connect-js.stripe.com googleads.g.doubleclick.net tpc.googlesyndication.com fundingchoicesmessages.google.com; media-src 'self' blob: xwfrxcvqqlhyxdgritjy.supabase.co xwfrxcvqqlhyxdgritjy.supabase.in; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests; report-uri /api/csp-report; report-to csp-endpoint; trusted-types default dompurify goog#html ContributorServingResponseClientJs#html 'allow-duplicates'
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: same-site
permissions-policy: camera=(), microphone=(), geolocation=(self), interest-cohort=(), browsing-topics=(), payment=(self "https://js.stripe.com"), usb=(), magnetometer=(), gyroscope=(), accelerometer=()
referrer-policy: strict-origin-when-cross-origin
reporting-endpoints: csp-endpoint="/api/csp-report"
server: cloudflare
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-astro-rewrite: yes
x-content-type-options: nosniff
x-dns-prefetch-control: on
x-frame-options: SAMEORIGIN
x-request-id: bb20f841-f1dc-43d2-9c1b-445bf9c09ed1
x-vercel-cache: MISS
x-vercel-id: fra1::iad1::lc22z-1780047242290-8be8e7e8b238
cf-cache-status: DYNAMIC
vary: accept-encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: a034804029d8d2a2-FRA
alt-svc: h3=":443"; ma=86400