HTTP/2 200 strict-transport-security: max-age=63072000; includeSubDomains x-frame-options: SAMEORIGIN content-security-policy: default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https:; media-src 'self'; object-src 'self'; worker-src 'self' blob:; frame-ancestors 'self'; form-action 'self' x-content-type-options: nosniff referrer-policy: strict-origin permissions-policy: geolocation=(),midi=(),sync-xhr=(self),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=() expect-ct: enforce, max-age=300, report-uri='https://uac.pt/' last-modified: Mon, 19 Jan 2026 08:37:35 GMT vary: Accept-Encoding content-encoding: gzip x-xss-protection: 1; mode=block x-permitted-cross-domain-policies: none content-length: 16606 content-type: text/html; charset=UTF-8 date: Mon, 19 Jan 2026 14:39:58 GMT server: Apache