crownmelbourne.com.au Review

 N/A

HTTP/1.1 301 Moved Permanently
Date: Thu, 21 Aug 2025 06:03:55 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
Location: https://www.crownmelbourne.com.au/
x-azure-ref: 20250821T060355Z-177cbd8cb84rgb4xhC1OSAhghc0000000u50000000001ser
X-Cache: CONFIG_NOCACHE

HTTP/1.1 200 OK
Date: Thu, 21 Aug 2025 06:03:57 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type, X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Length, Content-MD5, Date, X-Api-Version, X-File-Name, authtoken, apitoken
Access-Control-Allow-Methods: POST,GET,PUT,PATCH,DELETE,OPTIONS
Access-Control-Allow-Origin: https://melprdsite.crownwebtest.com.au
Access-Control-Expose-Headers: Request-Context
Cache-Control: private
Set-Cookie: browserVersion=Browser=CHROME&Browser Version=62.0.3202.94; domain=crownmelbourne.com.au; expires=Thu, 28-Aug-2025 06:03:56 GMT; path=/; secure; HttpOnly
Set-Cookie: ARRAffinity=e7cfa4aa5d37291c5a7ed9a94d13c13d3f6a5c282e7826ed326ceebb1e87e295;Path=/;HttpOnly;Secure;Domain=melprdwebsite.azurewebsites.net
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy-Report-Only: font-src * data:;img-src * data:;frame-src	'self'    *.sevenrooms.com    *.doubleclick.net     *.smartrecruiters.com     *.adyen.com     *.pinterest.com    *.googleadservices.com    *.google.com	*.googletagmanager.com	*.cardinalcommerce.com	sevenrooms.com	*.americanexpress.com	*.securesuite.co.uk	secure7.arcot.com	*.rsa3dsauth.co.uk	mycardsecure.com	www.mycardsecure.com	dupe.com	*.opentable.com.au;script-src    'self'	*.curator.io 	*.google-analytics.com 	*.googletagmanager.com	*.google.com	*.licdn.com 	*.clarity.ms	*.gstatic.com	*.facebook.net	*.pinimg.com	*.smartrecruiters.com	*.hotjar.com	cdn-cookieyes.com    'unsafe-eval'    'unsafe-inline'	data:;script-src-elem	'self'	'unsafe-inline' 	*.facebook.net	*.licdn.com	*.google.com	*.googletagmanager.com	https://www.googletagmanager.com	*.googleadservices.com	*.google-analytics.com	*.gstatic.com	*.smartrecruiters.com	*.curator.io	*.clarity.ms	*.pinimg.com	*.hotjar.com	cdn-cookieyes.com;style-src-elem    'self'	*.honey.io	*.google.com    *.curator.io	*.smartrecruiters.com	*.facebook.net	*.clarity.ms    'unsafe-inline';connect-src	'self'    *.facebook.com	*.google.com	*.google-analytics.com	*.googleapis.com	melprdwebsite.azurewebsites.net	crownkentico-prd-as-csearch.search.windows.net	*.pinterest.com	*.doubleclick.net    *.curator.io	*.clarity.ms	*.linkedin.com	*.datatoolscloud.net.au	*.hotjar.io 	*.adyen.com	*.cookieyes.com	cdn-cookieyes.com	ws://localhost:12387	wss://ws.hotjar.com	https://www.google.com/	data:;report-uri /api/logs/csp-report;report-to csp-endpoint;
Reporting-Endpoints: csp-endpoint="/api/logs/csp-report"
Request-Context: appId=cid-v1:9d8dbf0f-c847-4f15-88fa-ba0cb04d9212
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
x-azure-ref: 20250821T060356Z-r16849b4f488njs8hC1TYO58m4000000016g00000001m4c1
x-fd-int-roxy-purgeid: 0
X-Cache: PRIVATE_NOSTORE
Content-Encoding: br