Filmflux.app

age: 13
cache-control: public, max-age=0, must-revalidate
content-encoding: br
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com eu-assets.i.posthog.com *.youtube.com *.ytimg.com *.vercel-scripts.com *.vercel.live *.googlesyndication.com *.adtrafficquality.google fundingchoicesmessages.google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: blob: *.ytimg.com *.ggpht.com *.googletagmanager.com images.unsplash.com eu.i.posthog.com *.supabase.co lh3.googleusercontent.com *.googleusercontent.com *.googlesyndication.com *.googleadservices.com *.adtrafficquality.google *.doubleclick.net; connect-src 'self' *.supabase.co *.googleapis.com *.googletagmanager.com *.google-analytics.com *.railway.app eu.i.posthog.com eu-assets.i.posthog.com *.ytimg.com *.youtube.com *.ggpht.com *.stripe.com *.googlesyndication.com *.googleadservices.com *.adtrafficquality.google *.doubleclick.net fundingchoicesmessages.google.com; font-src 'self' data: fonts.gstatic.com; frame-src 'self' *.youtube.com *.youtube-nocookie.com *.googlesyndication.com *.doubleclick.net *.adtrafficquality.google fundingchoicesmessages.google.com www.google.com; media-src 'self' *.ytimg.com *.supabase.co; object-src 'none'; base-uri 'self'; form-action 'self';
content-type: text/html; charset=utf-8
date: Mon, 29 Jun 2026 20:40:27 GMT
etag: W/"157osnb1p5jawea"
permissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=63072000
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch
x-content-type-options: nosniff
x-frame-options: DENY
x-matched-path: /
x-nextjs-prerender: 1
x-nextjs-stale-time: 300
x-powered-by: Next.js
x-vercel-cache: HIT
x-vercel-id: fra1::arn1::7g48g-1782765640932-79740e9b4c90
x-vercel-skip-protection: 1