HTTP/2 200 server: nginxdate: Thu, 12 May 2022 20:36:20 GMTcontent-type: text/html; charset=utf-8content-length: 16017x-xss-protection: 1; mode=blockcache-control: max-age=0, private, no-cache, no-store, must-revalidateetag: "95aa8f42ef284b6503807ececc9080f3-gzip"expires: Thu, 12 May 2022 20:41:20 GMTcontent-encoding: gzipx-content-type-options: nosniffcontent-security-policy: default-src 'self'; frame-ancestors 'self'; font-src 'self' data: fonts.gstatic.com cloud.typography.com *.companies.gov.nu *.cwp.govt.nz *.companiesoffice.govt.nz; form-action 'self' *.facebook.com *.cwp.govt.nz *.companiesoffice.govt.nz *.companies.gov.nu; frame-src 'self' d3f5l8ze0o4j2m.cloudfront.net *.google.com *.youtube.com *.youtube-nocookie.com *.fls.doubleclick.net *.cwp.govt.nz *.companiesoffice.govt.nz *.companies.gov.nu vars.hotjar.com *.societies.govt.nz *.vimeo.com *.facebook.com; child-src 'self' d3f5l8ze0o4j2m.cloudfront.net *.google.com *.youtube.com *.youtube-nocookie.com *.fls.doubleclick.net *.cwp.govt.nz *.companiesoffice.govt.nz *.companies.gov.nu *.societies.govt.nz *.vimeo.com *.facebook.com; img-src 'self' data: *.ytimg.com *.google.com *.gstatic.com *.google.co.nz *.google-analytics.com *.googletagmanager.com stats.g.doubleclick.net *.fls.doubleclick.net *.cwp.govt.nz *.companiesoffice.govt.nz script.hotjar.com *.companies.gov.nu d3f5l8ze0o4j2m.cloudfront.net; media-src 'self' *.youtube.com *.youtube-nocookie.com *.cwp.govt.nz *.companiesoffice.govt.nz *.companies.gov.nu; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: d3f5l8ze0o4j2m.cloudfront.net *.gstatic.com *.google.com *.google.co.nz *.script.hotjar.com script.hotjar.com static.hotjar.com *.google-analytics.com *.googletagmanager.com *.youtube.com *.youtube-nocookie.com *.ytimg.com stats.g.doubleclick.net *.cwp.govt.nz *.companiesoffice.govt.nz *.companies.gov.nu; style-src 'self' 'unsafe-inline' *.googleapis.com *.typography.com *.google.com *.google.co.nz *.youtube.com *.youtube-nocookie.com *.cwp.govt.nz *.companiesoffice.govt.nz *.companies.gov.nu; base-uri 'self'; object-src 'none'; connect-src 'self' *.google-analytics.com *.in.hotjar.com *.hotjar.com wss://*.hotjar.com *.cwp.govt.nz *.companiesoffice.govt.nz *.companies.gov.nu *.ext.wd.govt.nz:8380; manifest-src 'self';referrer-policy: strict-origin-when-cross-originx-frame-options: SAMEORIGINaccess-control-allow-methods: GET,OPTIONSaccess-control-allow-credentials: trueaccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Acceptstrict-transport-security: max-age=15768000; includeSubDomains; preloadx-varnish: 307757720age: 0vary: Accept-Encodingset-cookie: visid_incap_1231483=VusVQqz7SbOiBZtUjQkZ0sFvfWIAAAAAQUIPAAAAAAAGA0lNX1IFjDlclCuGV1x+; expires=Fri, 12 May 2023 12:12:12 GMT; HttpOnly; path=/; Domain=.companiesoffice.govt.nzset-cookie: incap_ses_1359_1231483=EvwTGnDOm1mp0rskwSPcEsNvfWIAAAAAq9+i6UBdcd9QDWYgxnoGXQ==; path=/; Domain=.companiesoffice.govt.nzx-cdn: Impervax-iinfo: 10-6161358-6161368 NNNN CT(154 154 0) RT(1652387779347 44) q(0 0 4 5) r(6 6) U6