cronullagolf.com.au Review

 N/A

HTTP/1.1 302 Found
Date: Fri, 22 Aug 2025 23:40:05 GMT
Server: Apache/2.4.62 (Debian)
Location: https://www.cronullagolf.com.au/
Content-Length: 301
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

HTTP/1.1 301 Moved Permanently
Date: Fri, 22 Aug 2025 23:40:06 GMT
Server: Apache/2.4.62 (Debian)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
Access-Control-Allow-Headers: referrer, access-control-allow-origin, x-requested-with, Content-Type, origin, authorization, accept, client-security-token
Access-Control-Expose-Headers: Content-Security-Policy, Location
Access-Control-Max-Age: 600
Location: https://www.cronullagolf.com.au/welcome/index.mhtml
Content-Length: 349
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

HTTP/1.1 302 302
Date: Fri, 22 Aug 2025 23:40:06 GMT
Server: Apache/2.4.62 (Debian)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
Access-Control-Allow-Headers: referrer, access-control-allow-origin, x-requested-with, Content-Type, origin, authorization, accept, client-security-token
Access-Control-Expose-Headers: Content-Security-Policy, Location
Access-Control-Max-Age: 600
Set-Cookie: JSESSIONID=3CDDAF94BE2B1E1FD4314AA6A2BDBD1F; Path=/; Secure; HttpOnly
Location: /cms
Content-Length: 0
Content-Security-Policy: default-src 'self' blob: data: https: 'unsafe-eval' 'unsafe-inline'; frame-src 'self' blob: data: https: wchat-au.freshchat.com www.google.com widget.ezidebit.com.au player.vimeo.com js.stripe.com payments.auspost.net.au cdnres.willyweather.com.au data.theweather.com.au bookings.nowbookit.com; connect-src 'self' data: https: ws: wss: server2.enquirybot.com; upgrade-insecure-requests;
Cache-Control: no-store
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=15768000; includeSubDomains
Referrer-Policy: strict-origin-when-cross-origin
x-xss-protection: 1; mode=block
Vary: User-Agent
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently
Date: Fri, 22 Aug 2025 23:40:06 GMT
Server: Apache/2.4.62 (Debian)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
Access-Control-Allow-Headers: referrer, access-control-allow-origin, x-requested-with, Content-Type, origin, authorization, accept, client-security-token
Access-Control-Expose-Headers: Content-Security-Policy, Location
Access-Control-Max-Age: 600
Location: https://www.cronullagolf.com.au/cms/
Content-Length: 334
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

HTTP/1.1 200 OK
Date: Fri, 22 Aug 2025 23:40:06 GMT
Server: Apache/2.4.62 (Debian)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Link: ; rel="https://api.w.org/", ; rel="alternate"; title="JSON"; type="application/json", ; rel=shortlink
Set-Cookie: PHPSESSID=pteg96u5c21bhu0h4tlbvmq5l4dvek6s; expires=Sat, 23 Aug 2025 07:40:06 GMT; Max-Age=28800; path=/; secure; HttpOnly; SameSite=Strict
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
Access-Control-Allow-Headers: referrer, access-control-allow-origin, x-requested-with, Content-Type, origin, authorization, accept, client-security-token
Access-Control-Expose-Headers: Content-Security-Policy, Location
Access-Control-Max-Age: 600
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Security-Policy: default-src 'self' blob: data: https: 'unsafe-eval' 'unsafe-inline'; frame-src 'self' blob: data: https: wchat-au.freshchat.com www.google.com widget.ezidebit.com.au player.vimeo.com js.stripe.com payments.auspost.net.au cdnres.willyweather.com.au data.theweather.com.au bookings.nowbookit.com; connect-src 'self' data: https: ws: wss: server2.enquirybot.com; upgrade-insecure-requests;
Cache-Control: no-store
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=15768000; includeSubDomains
Referrer-Policy: strict-origin-when-cross-origin
x-xss-protection: 1; mode=block
Content-Length: 20600
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8