Gosweetspot.com - Nzc.gosweetspot.com

Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: /Account/Login?ReturnUrl=%2f
Set-Cookie: ASP.NET_SessionId=e3j0vgrvhrhvkwrc5edn3wa0; path=/; HttpOnly; SameSite=Lax
Request-Context: appId=cid-v1:eb53a16b-a852-427a-b4f9-b4d6c25fd7f3
Access-Control-Expose-Headers: Request-Context
X-Host: web1
X-AppName: web1/ship
Date: Fri, 29 Sep 2023 07:03:01 GMT
Content-Length: 145
Set-Cookie: hostid=web1; path=/

HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://identity-nzc.gosweetspot.com/connect/authorize?client_id=nzc.gosweetspot.com&response_type=code&scope=profile%20email%20openid%20offline_access&redirect_uri=https%3A%2F%2Fnzc.gosweetspot.com%2FAccount%2FOidcLoginReturn&state=Or%2B3BETgTJIz%2F8oCQXxqlqqeRSNP0iNV3T1EdgUjDhE%3D;%2F&nonce=Or%2B3BETgTJIz%2F8oCQXxqlqqeRSNP0iNV3T1EdgUjDhE%3D&response_mode=form_post
Content-Security-Policy-Report-Only: connect-src 'self' *.gosweetspot.com *.nr-data.net gosweetspotcdn.blob.core.windows.net www.google-analytics.com; font-src 'self' fonts.gstatic.com; form-action 'self' *.myshopify.com; frame-ancestors 'self' *.gosweetspot.com fgmailconnect.co.nz; img-src 'self' gosweetspotcdn.blob.core.windows.net *.hereapi.com cdnjs.cloudflare.com data: www.google-analytics.com *.nr-data.net cdn.shopify.com dummyimage.com assets.bigcartel.com cdn.rocketspark.com cplextras.co.nz i.ebayimg.com squarespace-cdn.com phlextras.co.nz static1.squarespace.com trademe.co.nz trademe.tmcdn.co.nz updates.nzcextras.co.nz www.trademe.co.nz www.googletagmanager.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: www.google-analytics.com www.gstatic.com www.google.com www.googletagmanager.com cdnjs.cloudflare.com *.nr-data.net js-agent.newrelic.com code.jquery.com cplextras.co.nz updates.nzcextras.co.nz; style-src 'unsafe-inline' 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com cplextras.co.nz updates.nzcextras.co.nz; report-uri https://gssship.report-uri.com/r/d/csp/reportOnly
Set-Cookie: ASP.NET_SessionId=khkt4hwkg1mjf5srw3eikjc0; path=/; HttpOnly; SameSite=Lax
Set-Cookie: wav3=; expires=Mon, 11-Oct-1999 11:00:00 GMT; path=/; HttpOnly; SameSite=Lax
Set-Cookie: AuthenticationState=6745d7d5-2ea7-46dd-8e97-9f05930e03ff; expires=Fri, 29-Sep-2023 08:03:02 GMT; path=/; HttpOnly
Request-Context: appId=cid-v1:eb53a16b-a852-427a-b4f9-b4d6c25fd7f3
Access-Control-Expose-Headers: Request-Context
X-Host: stg2
X-AppName: stg2/ship
Date: Fri, 29 Sep 2023 07:03:01 GMT
Content-Length: 509
Set-Cookie: hostid=stg2; path=/

HTTP/1.1 302 Found
Transfer-Encoding: chunked
Location: https://identity-nzc.gosweetspot.com/Identity/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dnzc.gosweetspot.com%26response_type%3Dcode%26scope%3Dprofile%2520email%2520openid%2520offline_access%26redirect_uri%3Dhttps%253A%252F%252Fnzc.gosweetspot.com%252FAccount%252FOidcLoginReturn%26state%3DOr%252B3BETgTJIz%252F8oCQXxqlqqeRSNP0iNV3T1EdgUjDhE%253D;%252F%26nonce%3DOr%252B3BETgTJIz%252F8oCQXxqlqqeRSNP0iNV3T1EdgUjDhE%253D%26response_mode%3Dform_post
Strict-Transport-Security: max-age=2592000
X-Host: web2n
X-AppName: web2n/identity
Date: Fri, 29 Sep 2023 07:03:02 GMT

HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Strict-Transport-Security: max-age=31536000
Set-Cookie: Identity.External=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; secure; samesite=lax; httponly
Set-Cookie: .AspNetCore.Antiforgery.zbjUl449ekk=CfDJ8Ee8jP0pTZtImlb05UabOQg404KzR-9eQUTPW8NRmikqMbeDFIQTueBDJhm_oi8ESE2jIeqqB5X7k6-ZtfZwGPIqk61inMiF7OrVyOn-iGCRO3ewQ_cO00-WDfnnUfhj38WuzIgh0h0WUwbYSlpzIxQ; path=/; secure; samesite=strict; httponly
Set-Cookie: .AspNetCore.Mvc.CookieTempDataProvider=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; secure; samesite=lax; httponly
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy: script-src 'self' 'nonce-3pEfOMI5lAjRell2jtOga4Fnb0JBw0ePGYKvI2nBzhk='; default-src 'self'; object-src 'none'; connect-src 'self' https://gosweetspotcdn.blob.core.windows.net https://gssidentityserver.report-uri.com; form-action 'self' https://login.microsoftonline.com https://accounts.google.com https://www.facebook.com https://*.gosweetspot.com https://*.fgmailconnect.co.nz https://*.timg.com https://m.facebook.com https://*.gotrackandtrace.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://cdnjs.cloudflare.com; style-src 'unsafe-inline' 'self' https://fonts.googleapis.com; img-src 'self' https://gosweetspotcdn.blob.core.windows.net https://*.imagekit.io/; frame-src 'self' https://www.google.com
X-Host: stg2
X-AppName: stg2/identity
Date: Fri, 29 Sep 2023 07:03:02 GMT