Bininn.co.nz

server: nginx
date: Sun, 22 Feb 2026 06:49:06 GMT
content-type: text/html; charset=iso-8859-1
content-length: 233
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
location: https://www.bininn.co.nz/
cache-control: max-age=2592000
expires: Tue, 24 Mar 2026 06:49:06 GMT

HTTP/2 200 
server: nginx
date: Sun, 22 Feb 2026 06:49:07 GMT
content-type: text/html; charset=UTF-8
content-length: 18737
x-powered-by: Craft CMS
link: <https://www.bininn.co.nz/>; rel="canonical"
expires: 0
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate
set-cookie: CraftSessionId=cbbbb93437437eb524e9e1be3530ee02; path=/; secure; HttpOnly
set-cookie: CRAFT_CSRF_TOKEN=2f63f59fc52d7a1e34c59229f3f611b5e5461c81fb72e3eec5df082373cd25e7a%3A2%3A%7Bi%3A0%3Bs%3A16%3A%22CRAFT_CSRF_TOKEN%22%3Bi%3A1%3Bs%3A40%3A%22j4Ac1znGe8hl9EgT7IlFTpkkw-l9ZaR0Unx-Eg-Q%22%3B%7D; path=/; secure; HttpOnly
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
vary: Accept-Encoding
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade
permissions-policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), fullscreen=(self), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), payment=(), picture-in-picture=(), usb=()
cross-origin-resource-policy: cross-origin
cache-control: max-age=600, private, must-revalidate
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
content-security-policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' data: *.cloudflare.com *.cloudflare.com *.typekit.net *.googleadservices.com *.googleservices.com *.licdn.com unpkg.com *.doubleclick.net *.issuu.com *.googleapis.com *.youtube.com *.typeform.com *.fontawesome.com *.google.com *.googletagmanager.com *.gstatic.com *.google-analytics.com yt3.ggpht.com *.facebook.com *.clarity.ms *.facebook.net *.linkedin.com; style-src 'self' 'unsafe-inline' *.cloudflare.com *.typekit.net *.googleapis.com; style-src-elem 'self' 'unsafe-inline' *.cloudflare.com *.googleapis.com; style-src-attr 'unsafe-inline'  *.typekit.net *.googleapis.com; img-src 'self' data: *.cloudflare.com *.doubleclick.net *.adsymptotic.com *.linkedin.com *.google.com *.google.co.nz *.google-analytics.com *.clarity.ms *.facebook.com  *.googleapis.com *.gstatic.com;