WWW.NZMUSCLE.CO.NZ Website Review

HTTP/1.1 200 OK
Date: Sat, 18 May 2024 11:20:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
vary: Accept-Encoding
vary: Accept-Encoding
x-powered-by: PHP/8.1.28
set-cookie: PHPSESSID=lgn3oe3ela9ujlcvh0etp8rjns; expires=Sat, 18-May-2024 12:20:58 GMT; Max-Age=3600; path=/; domain=nzmuscle.co.nz; secure; HttpOnly; SameSite=Lax
pragma: no-cache
Cache-Control: max-age=0, must-revalidate, no-cache, no-store
expires: Thu, 18 May 2023 11:19:14 GMT
content-security-policy-report-only: font-src *.fontawesome.com maxcdn.bootstrapcdn.com cdn1.stamped.io stamped.io https://client-builds.production.gorgias.chat https://fonts.googleapis.com *.cloudfront.net https://fonts.gstatic.com https://st.getsitecontrol.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com unpkg.com *.unpkg.com imagekit.io *.imagekit.io 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.paymentexpress.com *.windcave.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ bid.g.doubleclick.net unpkg.com *.unpkg.com cdnjs.cloudflare.com imagekit.io *.imagekit.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.postaffiliatepro.com *.paymentexpress.com *.windcave.com https://widget.transportnsw.info https://vars.hotjar.com/ https://snapwidget.com/ *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com validator.swagger.io unpkg.com *.unpkg.com imagekit.io *.imagekit.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com cdn1.stamped.io stamped.io https://www.google.co.nz https://maps.googleapis.com https://maps.gstatic.com *.cloudfront.net *.afterpay.com *.laybuy.com https://usage.trackjs.com *.getsitecontrol.com *.google.com *.google.com.ua https://cdn.stamped.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://api.addressfinder.io polyfill.io unpkg.com *.unpkg.com cdnjs.cloudflare.com imagekit.io *.imagekit.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ s7.addthis.com *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.postaffiliatepro.com cdn1.stamped.io stamped.io https://config.gorgias.chat https://client-builds.production.gorgias.chat https://storage.googleapis.com https://maps.googleapis.com https://polyfill.io https://js-agent.newrelic.com https://bam.nr-data.net https://static.zdassets.com https://cdn.trackjs.com https://widgets.getsitecontrol.com https://st.getsitecontrol.com https://static.hotjar.com https://script.hotjar.com https://sec.webeyez.com https://test.nzmuscle.co.nz https://widget-mediator.zopim.com *.afterpay.com https://snapwidget.com https://t.cfjump.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://api.addressfinder.io unpkg.com *.unpkg.com imagekit.io *.imagekit.io https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com cdn1.stamped.io stamped.io *.googleapis.com *.klaviyo.com unsafe-inline assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src cdn1.stamped.io stamped.io https://client-builds.production.gorgias.chat https://static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://api.addressfinder.io *.algolia.net *.algolia.com unpkg.com *.unpkg.com imagekit.io *.imagekit.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ekr.zdassets.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.postaffiliatepro.com cdn1.stamped.io stamped.io https://config.gorgias.chat https://bam.nr-data.net *.zopim.io wss://widget-mediator.zopim.com https://capture.trackjs.com https://nzmuscle.zendesk.com https://stats.g.doubleclick.net https://in.hotjar.com https://api.amplitude.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VevGa0zdWOMuuNpaFKWPF75NvoWi4eQyKaApRvlownJhF2nyWb5LbLnfJjfDUztY7mN2HkZcPMFhVPRuUR4d7GtmAm1W1vM4xcjvGuLZh3SLwmkbRFfUCKNB2xPgqupMQ0w1l87UkUtAMo3MXjLZJA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 885b75fff8b342b5-EWR
Content-Encoding: gzip