HTTP/2 200
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
cross-origin-opener-policy: same-origin-allow-popups
permissions-policy: camera=(), microphone=(), geolocation=(self), browsing-topics=(), payment=(self "https://js.stripe.com" "https://*.js.stripe.com"), publickey-credentials-get=(self), publickey-credentials-create=(self)
reporting-endpoints: csp-endpoint="https://report.andrii.net/csp-report", default="https://report.andrii.net/client-error"
content-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; frame-src 'self'; form-action 'self'; upgrade-insecure-requests; require-trusted-types-for 'script'; trusted-types default dompurify goog#html 'allow-duplicates'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.google-analytics.com https://*.g.doubleclick.net https://www.googleadservices.com https://maps.googleapis.com https://maps.gstatic.com https://unpkg.com; connect-src 'self' https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.g.doubleclick.net https://ad.doubleclick.net https://www.google.com https://www.google.ca https://www.google.com.ua https://www.googleadservices.com https://pagead2.googlesyndication.com https://andrii.net https://maps.googleapis.com https://report.andrii.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https://www.googletagmanager.com https://*.google-analytics.com https://*.g.doubleclick.net https://www.google.com https://www.google.ca https://www.google.com.ua https://www.googleadservices.com https://pagead2.googlesyndication.com https://staticmap.openstreetmap.de https://*.googleapis.com https://*.gstatic.com https://*.ggpht.com; worker-src 'self'; report-to csp-endpoint; report-uri https://report.andrii.net/csp-report
content-security-policy-report-only: default-src 'self'; base-uri 'self'; object-src 'none'; frame-src 'self' https://js.stripe.com https://*.js.stripe.com https://hooks.stripe.com; form-action 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.google-analytics.com https://*.g.doubleclick.net https://www.googleadservices.com https://maps.googleapis.com https://maps.gstatic.com https://unpkg.com https://js.stripe.com https://*.js.stripe.com; connect-src 'self' https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.g.doubleclick.net https://ad.doubleclick.net https://www.google.com https://www.google.ca https://www.google.com.ua https://www.googleadservices.com https://pagead2.googlesyndication.com https://andrii.net https://maps.googleapis.com https://api.stripe.com https://report.andrii.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https://www.googletagmanager.com https://*.google-analytics.com https://*.g.doubleclick.net https://www.google.com https://www.google.ca https://www.google.com.ua https://www.googleadservices.com https://pagead2.googlesyndication.com https://staticmap.openstreetmap.de https://*.googleapis.com https://*.gstatic.com https://*.ggpht.com; worker-src 'self'; report-to csp-endpoint; report-uri https://report.andrii.net/csp-report
speculation-rules: "/speculationrules.json"
link: <https://andrii.net>; rel="preconnect"; crossorigin, </portal/sign-in/>; rel="prefetch", <https://appleid.apple.com>; rel="dns-prefetch", <https://idmsa.apple.com>; rel="dns-prefetch", </llms.txt>; rel="llms-txt", </llms-full.txt>; rel="llms-full-txt", </llms.txt>; rel="service-doc"
link: </.well-known/compression-dictionary/6493cbd847efdbaf.dat>; rel="compression-dictionary"
content-type: text/html; charset=utf-8
vary: Accept-Encoding, Available-Dictionary, Accept, Accept-Language
accept-ranges: bytes
etag: "cdaa2c44d4b8cec3"
last-modified: Wed, 02 Sep 2026 04:44:00 GMT
content-length: 134824
alt-svc: h3=":443"; ma=86400
server: Hermes/1.0.1 (Andrii Co.)
date: Wed, 02 Sep 2026 13:48:24 GMTHTTP/2 200
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
cross-origin-opener-policy: same-origin-allow-popups
permissions-policy: camera=(), microphone=(), geolocation=(self), browsing-topics=(), payment=(self "https://js.stripe.com" "https://*.js.stripe.com"), publickey-credentials-get=(self), publickey-credentials-create=(self)
reporting-endpoints: csp-endpoint="https://report.andrii.net/csp-report", default="https://report.andrii.net/client-error"
content-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; frame-src 'self'; form-action 'self'; upgrade-insecure-requests; require-trusted-types-for 'script'; trusted-types default dompurify goog#html 'allow-duplicates'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.google-analytics.com https://*.g.doubleclick.net https://www.googleadservices.com https://maps.googleapis.com https://maps.gstatic.com https://unpkg.com; connect-src 'self' https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.g.doubleclick.net https://ad.doubleclick.net https://www.google.com https://www.google.ca https://www.google.com.ua https://www.googleadservices.com https://pagead2.googlesyndication.com https://andrii.net https://maps.googleapis.com https://report.andrii.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https://www.googletagmanager.com https://*.google-analytics.com https://*.g.doubleclick.net https://www.google.com https://www.google.ca https://www.google.com.ua https://www.googleadservices.com https://pagead2.googlesyndication.com https://staticmap.openstreetmap.de https://*.googleapis.com https://*.gstatic.com https://*.ggpht.com; worker-src 'self'; report-to csp-endpoint; report-uri https://report.andrii.net/csp-report
content-security-policy-report-only: default-src 'self'; base-uri 'self'; object-src 'none'; frame-src 'self' https://js.stripe.com https://*.js.stripe.com https://hooks.stripe.com; form-action 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.google-analytics.com https://*.g.doubleclick.net https://www.googleadservices.com https://maps.googleapis.com https://maps.gstatic.com https://unpkg.com https://js.stripe.com https://*.js.stripe.com; connect-src 'self' https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.g.doubleclick.net https://ad.doubleclick.net https://www.google.com https://www.google.ca https://www.google.com.ua https://www.googleadservices.com https://pagead2.googlesyndication.com https://andrii.net https://maps.googleapis.com https://api.stripe.com https://report.andrii.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https://www.googletagmanager.com https://*.google-analytics.com https://*.g.doubleclick.net https://www.google.com https://www.google.ca https://www.google.com.ua https://www.googleadservices.com https://pagead2.googlesyndication.com https://staticmap.openstreetmap.de https://*.googleapis.com https://*.gstatic.com https://*.ggpht.com; worker-src 'self'; report-to csp-endpoint; report-uri https://report.andrii.net/csp-report
speculation-rules: "/speculationrules.json"
link: <https://andrii.net>; rel="preconnect"; crossorigin, </portal/sign-in/>; rel="prefetch", <https://appleid.apple.com>; rel="dns-prefetch", <https://idmsa.apple.com>; rel="dns-prefetch", </llms.txt>; rel="llms-txt", </llms-full.txt>; rel="llms-full-txt", </llms.txt>; rel="service-doc"
link: </.well-known/compression-dictionary/6493cbd847efdbaf.dat>; rel="compression-dictionary"
content-type: text/html; charset=utf-8
vary: Accept-Encoding, Available-Dictionary, Accept, Accept-Language
accept-ranges: bytes
etag: "cdaa2c44d4b8cec3"
last-modified: Wed, 02 Sep 2026 04:44:00 GMT
content-length: 134824
alt-svc: h3=":443"; ma=86400
server: Hermes/1.0.1 (Andrii Co.)
date: Wed, 02 Sep 2026 13:48:24 GMT