levi.pt website report

HTTP/1.1 200 OK
Date: Sat, 24 Oct 2026 01:37:06 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000, max-age=31536000
X-Content-Type-Options: nosniff, nosniff
Referrer-Policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin
X-Permitted-Cross-Domain-Policies: none
X-Frame-Options: SAMEORIGIN
X-Server: gng-web02-pt
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Permissions-Policy: accelerometer=(self "https://www.youtube.com"), autoplay=(self "https://www.youtube.com"), camera=(self), encrypted-media=(self "https://www.youtube.com"), fullscreen=(self "https://www.youtube.com"), geolocation=(self), gyroscope=(self "https://www.youtube.com"), magnetometer=(), microphone=(), midi=(), payment=(self), picture-in-picture=(self "https://www.youtube.com"), usb=()
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.cookiebot.com https://*.cookiebot.eu https://www.googletagmanager.com https://*.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://*.gstatic.com https://*.googleapis.com https://connect.facebook.net https://*.hotjar.com https://gng-global.my.site.com https://www.youtube.com https://*.tiktok.com https://js.adsrvr.org https://applepay.cdn-apple.com *.google.com *.adyen.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.adyen.com; style-src 'self' 'unsafe-inline' https://*.gstatic.com https://fonts.googleapis.com https://www.googletagmanager.com https://gng-global.my.site.com *.cash.app *.adyen.com; img-src * data: blob:; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://*.hotjar.com https://gng-global.my.site.com https://applepay.cdn-apple.com https://cash-f.squarecdn.com; connect-src *; frame-src https://*; media-src 'self' blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://*.cookiebot.com https://*.cookiebot.eu https://www.googletagmanager.com https://*.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://*.gstatic.com https://*.googleapis.com https://connect.facebook.net https://*.hotjar.com https://gng-global.my.site.com https://www.youtube.com https://*.tiktok.com https://js.adsrvr.org https://applepay.cdn-apple.com *.google.com *.adyen.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.adyen.com; report-uri /csp-report
Server-Timing: db;dur=75.1;desc="59x", api;dur=28.3;desc="1x", cache;dur=90.9;desc="27h/0m", app;dur=48.6, total;dur=242.9
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Type: text/html;charset=UTF-8
Set-Cookie: GNGLEVIS=ujos2fc60sq6pbsg8jdr1olqu8; path=/; domain=levi.pt; secure; HttpOnly, ROUTEID=.2; path=/; Secure; HttpOnly
Via: 1.1 levis.pt
Transfer-Encoding: chunked