HTTP/2 302 
location: https://www.qwant.com/
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
strict-transport-security: max-age=31536000 ; includeSubDomains
date: Wed, 05 Aug 2026 22:18:19 GMT
server: istio-envoy

HTTP/2 200 
server: istio-envoy
date: Wed, 05 Aug 2026 22:18:20 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding, Sec-CH-Prefers-Color-Scheme
cache-control: no-cache
permission-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(self), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(), geolocation=(self), gyroscope=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), oversized-images=(), payment=(), speaker=(self), sync-xhr=(self "https://api.qwant.com/v3"), usb=(), vibrate=(), vr=()
content-security-policy: default-src 'self' data: blob:;script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.qwant.com qwant.com *.qwant.com qwant.com;script-src-elem 'self' 'unsafe-inline' data: *.qwant.com qwant.com *.qwant.com sdk.privacy-center.org api.privacy-center.org qwant-prod.piwik.pro https://*.clarity.ms https://c.bing.com https://msadsscale.azureedge.net https://msadsscale.microsoft.com  ;style-src 'self' 'unsafe-inline' data: *.qwant.com qwant.com;object-src 'self';connect-src 'self' ws: *.apple.com *.qwant.com qwant.com *.qwant.com qwant.com https://*.clarity.ms https://c.bing.com https://msadsscale.azureedge.net https://*.microsoft.com sdk.privacy-center.org api.privacy-center.org qwant-prod.piwik.pro    ;img-src blob: 'self' www.qwant.com s1.qwant.com s2.qwant.com s.qwant.com f.qwant.com data: s.qwant.com s1.qwant.com s2.qwant.com www.qwant.com *.s3.gra.io.cloud.ovh.net sdk.privacy-center.org https://*.clarity.ms https://c.bing.com     prod-adserver.s3.gra.perf.cloud.ovh.net;frame-ancestors *.qwant.com *.qwant.com;form-action auth.qwant.com appleid.apple.com;font-src 'self';worker-src blob: 'self' www.youtube-nocookie.com www.youtube.com;frame-src player.twitch.tv player.vimeo.com www.dailymotion.com www.youtube-nocookie.com net.geo.opera.com *.captcha-delivery.com  *.qwant.com *.qwant.com;media-src blob: *.qwant.com *.qwant.com *.apple.com *.s3.gra.io.cloud.ovh.net;base-uri 'self'
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
x-dns-prefetch-control: off
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-xss-protection: 0
accept-ch: Sec-CH-Prefers-Color-Scheme
critical-ch: Sec-CH-Prefers-Color-Scheme
content-language: en
set-cookie: ab_test_group=1; Max-Age=15552000; Path=/; Expires=Mon, 01 Feb 2027 22:18:20 GMT; SameSite=Lax
etag: W/"21366-uX1zsKu2DwtaupIVR0Fj6sbWdbA"
content-encoding: gzip
age: 0
x-cache: MISS
accept-ranges: bytes
x-envoy-upstream-service-time: 13
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
strict-transport-security: max-age=31536000 ; includeSubDomains