HTTP/2 301 
content-length: 0
location: https://www.fifa.com/
expires: Sun, 04 Oct 2026 10:45:10 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 04 Oct 2026 10:45:10 GMT
x-fifa-current-age: 1791110710
x-fifa-internal-ttl: -1
akamai-grn: 0.dc174b17.1791110709.1e3630ae
set-cookie: _abck=848015F0D8363273605DBCE8E81A1229~-1~YAAQ3BdLFzeGUNWgAQAA+YKEBhA+zGutMbnyY/GLnZWq/POExAKqSjP0tJcij2Yw24w3OaBZQdiQP0A3gDg7XMJ0n2fmWHoYsI/IqjEGTwr6x5ojiqQtis07ilPs8Nhq99jmx8wSplH8DJAOrN5QS/7a7tVb0zbmBqtbkE/2ZAztyROuDT31WnzcEmrE/gi1yw6S4lbZxC8l1VMKMv9qlJIq6Gtc+hPxIuKX6adXrCD9SkvBfjjuian2e0lYMHILeRR2RGJCGAGO7DcHS2PiqEzwXumQVPnrmq7zr22cu8/1b7Vc59x5u8hJqkKOq3oiC0Uwu/LhwPHHTAYnStVuNOmihGV5CbCPSQfrZEUf+C9Ze0HVNoO6o+2lKu3Qn5bdRcYoKo9THe9S+LhVFltzdfyR/eU91ebTtJuzjpaQr6l6WvRjn+u/oQGg28Y7qYYc0Tab~-1~-1~-1~-1~-1; Domain=.fifa.com; Path=/; Expires=Mon, 04 Oct 2027 10:45:10 GMT; Max-Age=31536000; Secure
set-cookie: bm_sz=4B29B94A3850BC0A47EF1EBC7B05E051~YAAQ3BdLFziGUNWgAQAA+YKEBgE7Cakzln0gp2d8QSEBAgEieiuhSsybqHwnOvDkVXUC3Tfxe3amJGReFGq4seFcbVHjjN3ll7zC5Rlm4vMBPMMLL6vazIev1IFkFUWbqQ+ztNG0lBC7QRibD1a8I3njDVtEsobi8aP5bt4Qe/8T5KP18rNy2J+3bC634kBKCbTLCA/ojTQqaTg60v9Ky16ScfY3R/ZiUYwhohkr6kiCZREeWiiL6t0EuEgeK9URDZc3U1YaK4Fp8eYjXmDZZ0mR6xoOlOdewlmw/WaSBn28omoVsDJO+dXe3SrQQhHG3eY0eHjMH722BDQGIqOYwvUE/MYzSvQoWboNUZghXD+84iW6Mw==~3683379~3748153; Domain=.fifa.com; Path=/; Expires=Sun, 04 Oct 2026 14:45:10 GMT; Max-Age=14400

HTTP/2 200 
content-type: text/html; charset=utf-8
cache-control: public, max-age=60
etag: W/"1158-Kdf1nvcf7ESbs3cotmAZ0pLRSnU"
strict-transport-security: max-age=15552000; includeSubDomains
x-ms-middleware-request-id: 00000000-0000-0000-0000-000000000000
request-context: appId=cid-v1:52f92841-5ef5-499e-96e4-51c1255f1c07
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.2mdn.net *.theoplayer.com *.youtube.com cdnjs.cloudflare.com vjs.zencdn.net static.tagboard.com *.minute.ly blob: *.flourish.studio fifa.eu.qualtrics.com *.fifa.com *.adnxs.com *.crwdcntrl.net *.doubleclick.net *.doubleclick.com *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.googleanalytics.com *.googlevideo.com *.tpcsyndication.com *.nice264.com *.npaw.com *.tealiumiq.com *.tiqcdn.cn *.tiqcdn.com *.youbora.com *.youborafds01.com *.youboranqs01.com *.youboranqs02.com *.gstatic.com adservice.google.cn adservice.google.co.uk adservice.google.com adservice.google.es analytics.twitter.com assets.adobedtm.com cdn.cookielaw.org connect.facebook.net dc.services.visualstudio.com dpm.demdex.net fifa.hb-api.omtrdc.net platform.twitter.com sc-static.net static.ads-twitter.com tr.snapchat.com *.conviva.com *.instagram.com *.tiktok.com *.ttwstatic.com *.tiktokcdn.com *.tiktokcdn-us.com *.2mdn.net *.fifa.gg api.pingone.eu walls.io *.minute.ly *.pingone.com *.pingone.eu *.x.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.google.ly *.appsflyer.com *.appsflyersdk.com *.usestoryteller.com;worker-src 'self' blob:;script-src-attr 'unsafe-inline';default-src 'unsafe-inline' blob:;manifest-src 'self' 'unsafe-inline' blob:;style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com *.ttwstatic.com *.usestoryteller.com;img-src 'self' 'unsafe-inline' data: blob: *;media-src 'self' 'unsafe-inline' data: blob: *;connect-src 'self' localhost:* cxm-dev-gl-afd-001-apis-fifa-bcfmhrbneqb6e0ee.z01.azurefd.net fifa-rewards-webapp-dev-acp-hwbta4bza3a7gyau.westeurope-01.azurewebsites.net cxm-dev-gl-afd-001-apis-fifa.azurefd.net cxm-uat-gl-afd-001-apis-fifa.azurefd.net *.cloudfront.net *.fifa.gg *.smartmedialabs.io apice.smartmediatech.io *.embedded.smartmedialabs.io *.embedded.smtwallet.app *.fifa.org *.mycujoo.tv *.mcls.live *.p5cdn.com *.theoplayer.com *.youtube.com *.uplynk.com *.minute.ly *.onetrust.com mycujoo-static-fastly.images.mcls.live cpt-services-fastly.images.mcls.live mycujoo-assets-fastly.images.mcls.live m-tv-fastly.images.mcls.live mycujoo-thumbs-fastly.images.mcls.live wss://mls-rt.mycujoo.tv *.flourish.studio cxm-dev-we-fas-001-search-api.azurewebsites.net cxm-uat-we-fas-001-search-api.azurewebsites.net fifa.eu.qualtrics.com gameday-uat.fifa.mangodev.co.uk gameday-prod.fifa.mangodev.co.uk *.fifa.com *.adnxs.com *.crwdcntrl.net *.doubleclick.net *.doubleclick.com *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.googleanalytics.com *.googlevideo.com *.tpcsyndication.com *.nice264.com *.npaw.com *.tealiumiq.com *.tiqcdn.cn *.tiqcdn.com *.youbora.com *.youborafds01.com *.youboranqs01.com *.youboranqs02.com *.gstatic.com adservice.google.cn adservice.google.co.uk adservice.google.com adservice.google.es analytics.twitter.com assets.adobedtm.com cdn.cookielaw.org connect.facebook.net dc.services.visualstudio.com dpm.demdex.net fifa.hb-api.omtrdc.net platform.twitter.com sc-static.net static.ads-twitter.com tr.snapchat.com *.conviva.com *.instagram.com *.tiktok.com *.ttwstatic.com *.tiktokcdn.com *.tiktokcdn-us.com *.2mdn.net *.fifa.gg api.pingone.eu walls.io *.minute.ly *.pingone.com *.pingone.eu *.x.com *.appsflyer.com *.appsflyersdk.com *.usestoryteller.com;frame-ancestors 'self' https://apps.monterosa.cloud https://mtsa-blog.fifa.com;frame-src 'self' *.fifa.com *.doubleclick.net *.googlesyndication.com *.googleapis.com *.theoplayer.com *.walls.io *.flourish.studio *.spotify.com *.usestoryteller.com https://flo.uri.sh/ https://www.fifa.gg/ https://fifa.demdex.net/ https://tags.crwdcntrl.net/ https://tr.snapchat.com/ https://www.facebook.com/ https://m.facebook.com/ https://www.google.com/ https://www.youtube.com/ https://platform.twitter.com/ https://www.instagram.com/ https://scontent.cdninstagram.com/ https://www.tiktok.com/ https://fifa-interest-page-dev-app.azurewebsites.net https://fifa-interest-page-qa-app.azurewebsites.net/ https://fifa-interest-page-prd-app.azurewebsites.net/ https://fifa-registration-of-interest-qa-app.azurewebsites.net/ https://fifa-registration-of-interest-prd-app.azurewebsites.net/ https://apps.monterosa.cloud https://mtsa-blog.fifa.com https://embed.tagboard.com https://fifa.eu.qualtrics.com https://embed.podcasts.apple.com https://connect.us.app.pam.co *.airbnb.ae *.airbnb.am *.airbnb.at *.airbnb.az *.airbnb.ba *.airbnb.be *.airbnb.ca *.airbnb.cat *.airbnb.ch *.airbnb.cl *.airbnb.cn *.airbnb.co.cr *.airbnb.co.id *.airbnb.co.in *.airbnb.co.kr *.airbnb.co.nz *.airbnb.co.uk *.airbnb.co.ve *.airbnb.co.za *.airbnb.com *.airbnb.com.ar *.airbnb.com.au *.airbnb.com.bo *.airbnb.com.br *.airbnb.com.bz *.airbnb.com.co *.airbnb.com.ec *.airbnb.com.ee *.airbnb.com.gt *.airbnb.com.hk *.airbnb.com.hn *.airbnb.com.mt *.airbnb.com.my *.airbnb.com.ni *.airbnb.com.pa *.airbnb.com.pe *.airbnb.com.ph *.airbnb.com.py *.airbnb.com.ro *.airbnb.com.sg *.airbnb.com.sv *.airbnb.com.tr *.airbnb.com.tw *.airbnb.com.ua *.airbnb.com.vn *.airbnb.cz *.airbnb.de *.airbnb.dk *.airbnb.es *.airbnb.fi *.airbnb.fr *.airbnb.gr *.airbnb.gy *.airbnb.hu *.airbnb.ie *.airbnb.is *.airbnb.it *.airbnb.jp *.airbnb.lt *.airbnb.lu *.airbnb.lv *.airbnb.me *.airbnb.mx *.airbnb.nl *.airbnb.no *.airbnb.pl *.airbnb.pt *.airbnb.rs *.airbnb.ru *.airbnb.se *.airbnb.si https://embedded.smartmedialabs.io/ https://embedded.smtwallet.app/ *.x.com *.service-now.com;form-action 'self' https://tr.snapchat.com/ https://www.facebook.com/;base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;object-src 'none';upgrade-insecure-requests
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-xss-protection: 0
x-content-type-options: nosniff
cross-origin-resource-policy: same-origin
x-azure-ref: 20261004T104441Z-r1bd6b685ffrb5swhC1SG18kvs0000001hb000000000102y
x-akamai-transformed: 0 - 0 -
content-encoding: gzip
date: Sun, 04 Oct 2026 10:45:10 GMT
content-length: 1876
vary: Accept-Encoding
x-fifa-current-age: 29
x-fifa-internal-ttl: 60
akamai-grn: 0.e5fcd317.1791110710.33d3ce6a
set-cookie: _abck=83A4483E1F43B670CB68307B315C56AB~-1~YAAQ5fzTF5/M49SgAQAAvIOEBhDWJriWnzDJftrTUghsbQp31KMWirrDxO3CUUszzhBnsdJYexGYIPkuryRlOz+fhWW4ZEZBj4dO8YeNbG8mceJQtHWQuVUjWNgQR6fH5nf1sOxH0PKQR25leFaMLwfIuZ703xzXKU/O8HzZKzFN5jpSAre7E3Ox4/9fb2AtmJKKoxzyH4BG9tHxcneokNBy2HT3fYbjYlZrmXioxXNxvWNdmamW3Y/HmdVBRC2Ew3yg6VzeWyTjPDxYILG6UhZUGNUm7zeiXa5x4Z0tTxDr8O3onz8zzY+ZVFvB7qPUcqoe+9lWWyaZNBcNU6+HO2c3lP7/B2UM/2+xbxlw7Xoe+4v2rnzcqch/CJjFCeXrHgcZ8X4JfRu+PAvBdfdqMghX5PjerDuZoBTdkSHau18AxyUl7Cu3pVmhUo9hcYr7ZBD0~-1~-1~-1~-1~-1; Domain=.fifa.com; Path=/; Expires=Mon, 04 Oct 2027 10:45:10 GMT; Max-Age=31536000; Secure
set-cookie: bm_sz=D139577915A5B54E01E350CBD082CEDA~YAAQ5fzTF6DM49SgAQAAvIOEBgF1vQMlnLbYQKmX6b9Y5iRz+5Tvwe3KWnbzbrazLh7N4ArPP5mCv2rRMt/JC3xrLmCY/g+b6HlwDmbiJiVtBA6VZEtMjJX01jajii6A3/kAQN1tN9RZy6KPvaImsA8FK1mgYVbh07Qvae4wpaiRm6esG4CtuDBw+1BYKETBaEF518/8oxcpEsfdkbGrBo4fCExLpq0EVLRX3wTFUnUXyylmx5dqytOJIYMemtUiwZs//B9vWJVxKUPvgwVtuNHMp32vFK5z4vRNxfHHb48NxRe9d9BN9DCXbJmvbj5XyLMZ9XeAfdyTmJujA4Xq/CfqnTf2jSxIrrqcHMpyPwasBI4ZNA==~4473650~3749943; Domain=.fifa.com; Path=/; Expires=Sun, 04 Oct 2026 14:45:10 GMT; Max-Age=14400