Vendella.co.nz

server: nginx
date: Mon, 09 Jun 2025 00:32:03 GMT
content-type: text/html; charset=iso-8859-1
content-length: 235
x-frame-options: SAMEORIGIN
location: https://www.vendella.co.nz/
cache-control: max-age=0
expires: Mon, 09 Jun 2025 00:32:03 GMT

HTTP/2 200 
server: nginx
date: Mon, 09 Jun 2025 00:32:05 GMT
content-type: text/html; charset=UTF-8
content-length: 23156
x-pddm-cache-status: OFF
link: <https://www.vendella.co.nz/wp-json/>; rel="https://api.w.org/", <https://www.vendella.co.nz/wp-json/wp/v2/pages/2>; rel="alternate"; title="JSON"; type="application/json", <https://www.vendella.co.nz/>; rel=shortlink
x-frame-options: SAMEORIGIN
cache-control: no-cache, must-revalidate , private
expires: Mon, 09 Jun 2025 00:32:04 GMT
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=10886400;
content-security-policy: default-src 'self' 'unsafe-inline';        img-src 'self' http: https: *.gravatar.com js.hscta.net *.hsforms.net *.hsforms.com no-cache.hubspot.com cdn2.hubspot.net *.hubspot.com *.hubspot.net data:;        script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.tailwindcss.com *.livechatinc.com *.hscollectedforms.net *.hs-scripts.com *.hubspotfeedback.com feedback.hubapi.com *.hsforms.com *.hsleadflows.net *.hsforms.net *.hubspot.com static.hsappstatic.net *.hubspot.net *.usemessages.com *.hs-banner.com *.hsadspixel.net js.hscta.net *.hs-analytics.net https://www.gstatic.com https://www.googletagmanager.com https://www.google.com  https://*.facebook.net https://*.googleapis.com https://*.cloudflare.com https://*.sentry-cdn.com https://*.popt.in https://script.crazyegg.com https://www.google-analytics.com https://s3.amazonaws.com https://vendella.us7.list-manage.com https://googleads.g.doubleclick.net https://snap.licdn.com;        connect-src 'self' https://*.googleapis.com *.hubapi.com *.hscollectedforms.net js.hscta.net *.hubspot.com *.hs-banner.com https://*.google.com https://*.popt.in https://*.sentry.io https://*.algolianet.com https://*.algolia.net https://*.crazyegg.com https://*.google-analytics.com https://*.doubleclick.net https://*.livechatinc.com https://forms.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com;        frame-src 'self' *.livechatinc.com https://www.youtube-nocookie.com https://docs.google.com *.hubspot.com *.hsforms.net *.hsforms.com *.hs-sites.com *.hubspot.net play.hubspotvideo.com https://www.google.com https://www.facebook.com https://td.doubleclick.net https://www.googletagmanager.com;        font-src 'self' * data:;        worker-src 'self' blob:;        style-src 'self' 'unsafe-inline' https://*.googleapis.com https://cdn-images.mailchimp.com;
x-frame-options: SAMEORIGIN