Concordgolfclub.com.au

access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-allow-headers: referrer, access-control-allow-origin, x-requested-with, Content-Type, origin, authorization, accept, client-security-token
access-control-expose-headers: Content-Security-Policy, Location
access-control-max-age: 600
location: https://concordgolfclub.com.au/welcome/index.mhtml
content-length: 387
content-type: text/html; charset=iso-8859-1
date: Fri, 13 Feb 2026 06:32:34 GMT
server: Apache/2.4.66 (Debian)

HTTP/2 302 
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-allow-headers: referrer, access-control-allow-origin, x-requested-with, Content-Type, origin, authorization, accept, client-security-token
access-control-expose-headers: Content-Security-Policy, Location
access-control-max-age: 600
set-cookie: JSESSIONID=D47B7B1264348BF1744E45596A37DE57; Path=/; Secure; HttpOnly
location: /cms
content-length: 0
content-security-policy: default-src 'self' blob: data: https: 'unsafe-eval' 'unsafe-inline'; frame-src 'self' blob: data: https: wchat-au.freshchat.com www.google.com widget.ezidebit.com.au player.vimeo.com js.stripe.com payments.auspost.net.au cdnres.willyweather.com.au data.theweather.com.au bookings.nowbookit.com; connect-src 'self' data: https: ws: wss: server2.enquirybot.com; upgrade-insecure-requests;
cache-control: no-store
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15768000; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
x-xss-protection: 1; mode=block
vary: User-Agent
date: Fri, 13 Feb 2026 06:32:35 GMT
server: Apache/2.4.66 (Debian)

HTTP/2 301 
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-allow-headers: referrer, access-control-allow-origin, x-requested-with, Content-Type, origin, authorization, accept, client-security-token
access-control-expose-headers: Content-Security-Policy, Location
access-control-max-age: 600
location: https://concordgolfclub.com.au/cms/
content-length: 372
content-type: text/html; charset=iso-8859-1
date: Fri, 13 Feb 2026 06:32:35 GMT
server: Apache/2.4.66 (Debian)

HTTP/2 301 
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-dlm-no-waypoints: true
x-redirect-by: WordPress
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-allow-headers: referrer, access-control-allow-origin, x-requested-with, Content-Type, origin, authorization, accept, client-security-token
access-control-expose-headers: Content-Security-Policy, Location
access-control-max-age: 600
set-cookie: PHPSESSID=d196bd9140ca37900311b86b5cba102a; expires=Fri, 13 Feb 2026 14:32:35 GMT; Max-Age=28800; path=/; secure; HttpOnly; SameSite=Strict; HttpOnly; Secure
location: https://www.concordgolfclub.com.au/cms/
content-security-policy: default-src 'self' blob: data: https: 'unsafe-eval' 'unsafe-inline'; frame-src 'self' blob: data: https: wchat-au.freshchat.com www.google.com widget.ezidebit.com.au player.vimeo.com js.stripe.com payments.auspost.net.au cdnres.willyweather.com.au data.theweather.com.au bookings.nowbookit.com; connect-src 'self' data: https: ws: wss: server2.enquirybot.com; upgrade-insecure-requests;
cache-control: no-store
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15768000; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
x-xss-protection: 1; mode=block
vary: User-Agent
content-length: 0
content-type: text/html; charset=UTF-8
date: Fri, 13 Feb 2026 06:32:35 GMT
server: Apache/2.4.66 (Debian)

HTTP/2 200 
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-dlm-no-waypoints: true
link: <https://www.concordgolfclub.com.au/cms/wp-json/>; rel="https://api.w.org/", <https://www.concordgolfclub.com.au/cms/wp-json/wp/v2/pages/27>; rel="alternate"; title="JSON"; type="application/json", <https://www.concordgolfclub.com.au/cms/>; rel=shortlink
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-allow-headers: referrer, access-control-allow-origin, x-requested-with, Content-Type, origin, authorization, accept, client-security-token
access-control-expose-headers: Content-Security-Policy, Location
access-control-max-age: 600
set-cookie: PHPSESSID=ef073edfbb97b3b531cd94d26aeac67f; expires=Fri, 13 Feb 2026 14:32:38 GMT; Max-Age=28800; path=/; secure; HttpOnly; SameSite=Strict; HttpOnly; Secure
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-security-policy: default-src 'self' blob: data: https: 'unsafe-eval' 'unsafe-inline'; frame-src 'self' blob: data: https: wchat-au.freshchat.com www.google.com widget.ezidebit.com.au player.vimeo.com js.stripe.com payments.auspost.net.au cdnres.willyweather.com.au data.theweather.com.au bookings.nowbookit.com; connect-src 'self' data: https: ws: wss: server2.enquirybot.com; upgrade-insecure-requests;
cache-control: no-store
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15768000; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
x-xss-protection: 1; mode=block
content-length: 11979
content-type: text/html; charset=UTF-8
date: Fri, 13 Feb 2026 06:32:38 GMT
server: Apache/2.4.66 (Debian)