Mundogalp.es

Location: https://mundogalp.galp.com/KM_Web_FE/HomepageEntryNew.aspx
Server: BigIP
Connection: Keep-Alive
Content-Length: 0

HTTP/2 200 
content-type: text/html; charset=utf-8
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
x-ua-compatible: IE=edge,chrome=1
strict-transport-security: max-age=31536000;includeSubDomains
content-security-policy: base-uri 'self'; child-src 'self' gap: https://galp.demdex.net/ *.google.com; frame-src 'self' gap: https://galp.demdex.net/ *.google.com; connect-src 'self' wss://*.firebaseio.com https://www.gstatic.com https://www.googletagmanager.com https://firebaseinstallations.googleapis.com https://privacyportal-eu.onetrust.com/ https://maps.googleapis.com/ https://galp.tt.omtrdc.net https://dpm.demdex.net/ https://cdn.cookielaw.org; default-src 'self' gap: galp.com *.galp.com 'unsafe-inline' 'unsafe-eval'; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome https://galp.com/pt/fonts/canaro/canaro-book-webfont.woff2; img-src 'self' data: *.googleapis.com maps.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://galpcommerce.sc.omtrdc.net/ https://dpm.demdex.net/ https://fonts.gstatic.com https://cdn.cookielaw.org blob:; media-src 'self'; object-src 'self'; script-src 'self' *.googleapis.com maps.gstatic.com *.firebaseio.com https://cdnjs.cloudflare.com https://connect.facebook.net https://*.oppwa.com https://www.gstatic.com https://www.googletagmanager.com https://assets.adobedtm.com https://cdn.cookielaw.org *.google.com *.gstatic.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://fonts.googleapis.com https://www.gstatic.com/ data: 'unsafe-inline'; frame-ancestors 'self' https://s-usc1c-nss-218.firebaseio.com gap: https://*.firebaseio.com https://*.galp.com https://galp.demdex.net/; report-uri /SecurityUtils/rest/Report/ReportViolations?Params=jAqo9hqJSlcACTRq3YAW7nU4li4vDslBsfN%2FPJy9kBsOOPmCKRzoXZVYDULHxF934LY07mjHf9gdFnT253dvZA%3D%3D;
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-headers: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
date: Fri, 19 Sep 2025 13:12:03 GMT
set-cookie: ASP.NET_SessionId=zkbsztb1icmfvmnpim43dh44; path=/; secure; HttpOnly; SameSite=None
set-cookie: osVisitor=ec97543d-e96f-489a-9739-7a3731dea4ba; expires=Wed, 19-Sep-2125 13:12:03 GMT; path=/; secure; HttpOnly; SameSite=None
set-cookie: osVisit=6801fe7e-6cbf-4316-9736-6479a77bf4e7; expires=Fri, 19-Sep-2025 13:42:03 GMT; path=/; secure; HttpOnly; SameSite=None
set-cookie: ASP.NET_SessionId=zkbsztb1icmfvmnpim43dh44; path=/; secure; HttpOnly; SameSite=None
set-cookie: osVisitor=ec97543d-e96f-489a-9739-7a3731dea4ba; expires=Wed, 19-Sep-2125 13:12:03 GMT; path=/; secure; HttpOnly; SameSite=None
set-cookie: osVisit=6801fe7e-6cbf-4316-9736-6479a77bf4e7; expires=Fri, 19-Sep-2025 13:42:03 GMT; path=/; secure; HttpOnly; SameSite=None
set-cookie: pageLoadedFromBrowserCache=false; path=/; secure; SameSite=None
alt-svc: h3=":443"; ma=93600