Burleighgolfclub.com.au

access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-allow-headers: referrer, access-control-allow-origin, x-requested-with, Content-Type, origin, authorization, accept, client-security-token
access-control-expose-headers: Content-Security-Policy, Location
access-control-max-age: 600
location: https://burleighgolfclub.com.au/welcome/index.mhtml
content-length: 389
content-type: text/html; charset=iso-8859-1
date: Mon, 09 Mar 2026 15:50:03 GMT
server: Apache/2.4.66 (Debian)

HTTP/2 302 
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-allow-headers: referrer, access-control-allow-origin, x-requested-with, Content-Type, origin, authorization, accept, client-security-token
access-control-expose-headers: Content-Security-Policy, Location
access-control-max-age: 600
set-cookie: JSESSIONID=23E9A0859AC92ED229C6013A9897FBFB; Path=/; Secure; HttpOnly
location: /cms/
content-length: 0
content-security-policy: default-src 'self' blob: data: https: 'unsafe-eval' 'unsafe-inline'; frame-src 'self' blob: data: https: wchat-au.freshchat.com www.google.com widget.ezidebit.com.au player.vimeo.com js.stripe.com payments.auspost.net.au cdnres.willyweather.com.au data.theweather.com.au bookings.nowbookit.com; connect-src 'self' data: https: ws: wss: server2.enquirybot.com; upgrade-insecure-requests;
cache-control: no-store
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15768000; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
x-xss-protection: 1; mode=block
vary: User-Agent
date: Mon, 09 Mar 2026 15:50:03 GMT
server: Apache/2.4.66 (Debian)

HTTP/2 301 
pragma: no-cache
x-dlm-no-waypoints: true
expires: Mon, 09 Mar 2026 16:50:04 GMT
cache-control: max-age=3600
x-redirect-by: WordPress
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-allow-headers: referrer, access-control-allow-origin, x-requested-with, Content-Type, origin, authorization, accept, client-security-token
access-control-expose-headers: Content-Security-Policy, Location
access-control-max-age: 600
set-cookie: PHPSESSID=7800272594acd35bb7b8e8bbac9a1445; expires=Mon, 09 Mar 2026 23:50:04 GMT; Max-Age=28800; path=/; secure; HttpOnly; SameSite=Strict; HttpOnly; Secure
location: https://www.burleighgolfclub.com.au/cms/
content-security-policy: default-src 'self' blob: data: https: 'unsafe-eval' 'unsafe-inline'; frame-src 'self' blob: data: https: wchat-au.freshchat.com www.google.com widget.ezidebit.com.au player.vimeo.com js.stripe.com payments.auspost.net.au cdnres.willyweather.com.au data.theweather.com.au bookings.nowbookit.com; connect-src 'self' data: https: ws: wss: server2.enquirybot.com; upgrade-insecure-requests;
cache-control: no-store
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15768000; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
x-xss-protection: 1; mode=block
vary: User-Agent
content-length: 0
content-type: text/html; charset=UTF-8
date: Mon, 09 Mar 2026 15:50:04 GMT
server: Apache/2.4.66 (Debian)

HTTP/2 200 
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-dlm-no-waypoints: true
link: <https://www.burleighgolfclub.com.au/cms/wp-json/>; rel="https://api.w.org/", <https://www.burleighgolfclub.com.au/cms/wp-json/wp/v2/pages/30>; rel="alternate"; title="JSON"; type="application/json", <https://www.burleighgolfclub.com.au/cms/>; rel=shortlink
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-allow-headers: referrer, access-control-allow-origin, x-requested-with, Content-Type, origin, authorization, accept, client-security-token
access-control-expose-headers: Content-Security-Policy, Location
access-control-max-age: 600
set-cookie: PHPSESSID=94380cead0792a7a8700c8da584792a2; expires=Mon, 09 Mar 2026 23:50:05 GMT; Max-Age=28800; path=/; secure; HttpOnly; SameSite=Strict; HttpOnly; Secure
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-security-policy: default-src 'self' blob: data: https: 'unsafe-eval' 'unsafe-inline'; frame-src 'self' blob: data: https: wchat-au.freshchat.com www.google.com widget.ezidebit.com.au player.vimeo.com js.stripe.com payments.auspost.net.au cdnres.willyweather.com.au data.theweather.com.au bookings.nowbookit.com; connect-src 'self' data: https: ws: wss: server2.enquirybot.com; upgrade-insecure-requests;
cache-control: no-store
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15768000; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
x-xss-protection: 1; mode=block
content-length: 15462
content-type: text/html; charset=UTF-8
date: Mon, 09 Mar 2026 15:50:05 GMT
server: Apache/2.4.66 (Debian)