HTTP/2 200 
server: nginx
date: Thu, 12 May 2022 20:36:20 GMT
content-type: text/html; charset=utf-8
content-length: 16017
x-xss-protection: 1; mode=block
cache-control: max-age=0, private, no-cache, no-store, must-revalidate
etag: "95aa8f42ef284b6503807ececc9080f3-gzip"
expires: Thu, 12 May 2022 20:41:20 GMT
content-encoding: gzip
x-content-type-options: nosniff
content-security-policy: default-src 'self'; frame-ancestors 'self'; font-src 'self' data: fonts.gstatic.com cloud.typography.com *.companies.gov.nu *.cwp.govt.nz *.companiesoffice.govt.nz; form-action 'self' *.facebook.com *.cwp.govt.nz *.companiesoffice.govt.nz *.companies.gov.nu; frame-src 'self' d3f5l8ze0o4j2m.cloudfront.net *.google.com *.youtube.com *.youtube-nocookie.com *.fls.doubleclick.net *.cwp.govt.nz *.companiesoffice.govt.nz *.companies.gov.nu vars.hotjar.com *.societies.govt.nz *.vimeo.com *.facebook.com; child-src 'self' d3f5l8ze0o4j2m.cloudfront.net *.google.com *.youtube.com *.youtube-nocookie.com *.fls.doubleclick.net *.cwp.govt.nz *.companiesoffice.govt.nz *.companies.gov.nu *.societies.govt.nz *.vimeo.com *.facebook.com; img-src 'self' data: *.ytimg.com *.google.com *.gstatic.com *.google.co.nz *.google-analytics.com *.googletagmanager.com stats.g.doubleclick.net *.fls.doubleclick.net *.cwp.govt.nz *.companiesoffice.govt.nz script.hotjar.com *.companies.gov.nu d3f5l8ze0o4j2m.cloudfront.net; media-src 'self' *.youtube.com *.youtube-nocookie.com *.cwp.govt.nz *.companiesoffice.govt.nz *.companies.gov.nu; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: d3f5l8ze0o4j2m.cloudfront.net *.gstatic.com *.google.com *.google.co.nz *.script.hotjar.com script.hotjar.com static.hotjar.com *.google-analytics.com *.googletagmanager.com *.youtube.com *.youtube-nocookie.com *.ytimg.com stats.g.doubleclick.net *.cwp.govt.nz *.companiesoffice.govt.nz *.companies.gov.nu; style-src 'self' 'unsafe-inline' *.googleapis.com *.typography.com *.google.com *.google.co.nz *.youtube.com *.youtube-nocookie.com *.cwp.govt.nz *.companiesoffice.govt.nz *.companies.gov.nu; base-uri 'self'; object-src 'none'; connect-src 'self' *.google-analytics.com *.in.hotjar.com *.hotjar.com wss://*.hotjar.com *.cwp.govt.nz *.companiesoffice.govt.nz *.companies.gov.nu *.ext.wd.govt.nz:8380; manifest-src 'self';
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
access-control-allow-methods: GET,OPTIONS
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=15768000; includeSubDomains; preload
x-varnish: 307757720
age: 0
vary: Accept-Encoding
set-cookie: visid_incap_1231483=VusVQqz7SbOiBZtUjQkZ0sFvfWIAAAAAQUIPAAAAAAAGA0lNX1IFjDlclCuGV1x+; expires=Fri, 12 May 2023 12:12:12 GMT; HttpOnly; path=/; Domain=.companiesoffice.govt.nz
set-cookie: incap_ses_1359_1231483=EvwTGnDOm1mp0rskwSPcEsNvfWIAAAAAq9+i6UBdcd9QDWYgxnoGXQ==; path=/; Domain=.companiesoffice.govt.nz
x-cdn: Imperva
x-iinfo: 10-6161358-6161368 NNNN CT(154 154 0) RT(1652387779347 44) q(0 0 4 5) r(6 6) U6