HTTP/1.1 200 OK
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Methods: HEAD, POST, GET, OPTIONS
Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' https://*.epresspack.ovh https://cdnjs.cloudflare.com https://code.jquery.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://www.google-analytics.com https://ajax.googleapis.com https://cdn.datatables.net https://cdn.jsdelivr.net https://fastly.ink.sapo.pt https://buttons.github.io https://platform.twitter.com https://ws.sharethis.com https://cdn.syndication.twimg.com https://t.sharethis.com https://twitter.com https://www.googletagmanager.com https://ssl.google-analytics.com https://fonts.google.com https://static.hotjar.com https://dcinfos.abtasty.com https://script.hotjar.com https://f.vimeocdn.com https://www.youtube.com https://unpkg.com https://player.vimeo.com https://cdn.tiny.cloud https://cdn.tagcommander.com https://cdn.trustcommander.net https://tag.aticdn.net https://cdn.trustcommander.net https://ipinfo.io https://stackpath.bootstrapcdn.com https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com https://api.dmcdn.net https://js.hcaptcha.com https://cdn.tailwindcss.com https://static.epresspack.eu https://cdn.curator.io https://s.go-mpulse.net/  'self';   object-src 'self';
Access-Control-Allow-Headers: Content-Type, X-Requested-With, token, x-csrf-token
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: geolocation=(), midi=(), camera=(), usb=(), magnetometer=(), accelerometer=(), gyroscope=(), microphone=()
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=UTF-8
X-Akamai-Transformed: 9 23182 0 pmb=mRUM,2
Expires: Wed, 28 Jan 2026 10:40:52 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 28 Jan 2026 10:40:52 GMT
Transfer-Encoding:  chunked
Connection: close
Connection: Transfer-Encoding
Set-Cookie: PHPSESSID=c0voaefihcgil7p6vbjs51qda7; path=/;HttpOnly;Secure;SameSite=Lax
Server-Timing: cdn-cache; desc=MISS
Server-Timing: edge; dur=99
Server-Timing: origin; dur=1228
Strict-Transport-Security: max-age=31536000 ; includeSubDomains ; preload
Server-Timing: ak_p; desc="1769596851213_388276370_1359416580_132691_13279_0_3_-";dur=1