Rotatenow.co.nz

Server: nginx/1.26.0 (Ubuntu)
Date: Mon, 27 Oct 2025 00:01:10 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-DNS-Prefetch-Control: off
Expect-CT: max-age=0
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: no-referrer
X-XSS-Protection: 0
Content-Security-Policy-Report-Only: report-uri /csp-report;base-uri 'self';default-src 'self';child-src blob:;connect-src 'self' https://flex-api.sharetribe.com undefined *.st-api.com maps.googleapis.com *.tiles.mapbox.com api.mapbox.com events.mapbox.com www.googletagmanager.com *.google-analytics.com stats.g.doubleclick.net sentry.io *.stripe.com;font-src 'self' data: assets-sharetribecom.sharetribe.com fonts.gstatic.com;frame-src 'self' *.stripe.com;img-src 'self' data: blob: *.imgix.net sharetribe.imgix.net via.placeholder.com api.mapbox.com maps.googleapis.com *.gstatic.com *.googleapis.com *.ggpht.com www.googletagmanager.com www.google.com www.google-analytics.com stats.g.doubleclick.net *.stripe.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' data: maps.googleapis.com api.mapbox.com www.googletagmanager.com *.google-analytics.com js.stripe.com;style-src 'self' 'unsafe-inline' fonts.googleapis.com api.mapbox.com
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: X-Requested-With
Cache-control: no-cache, no-store, must-revalidate
ETag: W/"deff-vQP97lb2VBKiRRF0qDz2bAZJfoY"
Vary: Accept-Encoding
Content-Encoding: gzip