X-Cache: HIT, MISS
Content-Security-Policy: default-src 'self' ; connect-src 'self' https://api.westfield.io https://secure.westfield.io https://maps.westfield.io https://bam.nr-data.net http://*.hotjar.com:* https://*.hotjar.com:* ws://*.hotjar.com wss://*.hotjar.com https://datacloud.tealiumiq.com https://api.viglink.com https://www.google-analytics.com https://datacloud-us-east-1.tealiumiq.com https://affiliatelinkresolver.westfield.io https://xu4suut6ooyaepho.westfieldlabs.com https://7923618382.log.optimizely.com https://trackerapi.truste.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://log.pinterest.com https://widgets.pinterest.com https://api.twitter.com https://assets.pinterest.com https://platform.instagram.com https://www.instagram.com https://tag.baidu.com https://www.youtube.com https://s.ytimg.com https://bam.nr-data.net https://js-agent.newrelic.com https://analytics.twitter.com https://api.instagram.com https://d.adroll.com https://static.ads-twitter.com https://widget.as.criteo.com https://trust.baidu.com https://sslwidget.criteo.com https://visitor-service-us-east-1.tealiumiq.com http://*.hotjar.com https://*.hotjar.com http://cdn.jsdelivr.net https://cdn.jsdelivr.net https://adserver.adtechus.com https://stats.g.doubleclick.net https://static.criteo.net https://platform.twitter.com https://adserver.adtechus.com https://hm.baidu.com https://script.crazyegg.com https://static.hotjar.com https://api.viglink.com https://s.adroll.com https://www.googleadservices.com https://cdn.viglink.com https://cdn3.optimizely.com https://tags.tiqcdn.com https://optimizely.s3.amazonaws.com https://cdn.optimizely.com https://consent.truste.com https://core.spreedly.com https://f.vimeocdn.com https://api.lytics.io https://www.google-analytics.com https://connect.facebook.net https://universal.iperceptions.com; style-src 'unsafe-inline' 'self' res.cloudinary.com; img-src 'self' data: https://content.westfield.io https://*.pinimg.com https://bam.nr-data.net https://au-gmtdmp.mookie1.com https://t.co/ https://secure.adnxs.com https://t.brand-server.com https://ad.360yield.com https://dsum-sec.casalemedia.com https://ads.yahoo.com https://pixel.rubiconproject.com https://x.bidswitch.net https://analytics.twitter.com https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://cm.g.doubleclick.net https://pixel.rubiconproject.com https://x.bidswitch.net https://dsum-sec.casalemedia.com https://d.adroll.com https://secure.fastclick.net https://hm.baidu.com http://*.hotjar.com https://*.hotjar.com https://googleads.g.doubleclick.net https://www.google.com/ads https://cdn.viglink.com https://b.collective-media.net https://app.optimizely.com https://cdn.optimizely.com https://res-1.cloudinary.com https://res-2.cloudinary.com https://res-3.cloudinary.com https://res-4.cloudinary.com https://res-5.cloudinary.com https://res.cloudinary.com https://consent.truste.com https://www.google-analytics.com https://api.lytics.io https://stats.g.doubleclick.net https://www.facebook.com; font-src 'self' data: https://res.cloudinary.com https://consent.truste.com; upgrade-insecure-requests; report-uri https://31b16a3a1e1bc626c57b79080e0dcf4a.report-uri.io/r/default/csp/enforce; frame-src https://www.facebook.com https://staticxx.facebook.com https://westfieldnz.wufoo.com https://www.instagram.com https://www.youtube.com https://www.tintup.com https://dis.as.criteo.com https://*.hotjar.com https://bid.g.doubleclick.net https://api.lytics.io https://api.lytics.io https://1990265.fls.doubleclick.net https://app.optimizely.com https://www.google.com/maps/ https://core.spreedly.com https://promotions.spredfast.com https://player.vimeo.com https://consent-pref.truste.com; media-src 'self' http://www.totaleclips.com http://assets.flicks.co.nz http://progressive.totaleclips.com.edgesuite.net
Content-Type: text/html;charset=UTF-8
Content-Language: en-NZ
HTTP/1.1 200 OK
Cache-Control: public, max-age=600
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=60; includeSubDomains; preload
X-Request-ID: 2842bb5d-47da-49d5-8c25-1f29a50f0607
Connection: keep-alive
X-Cache-Control-Original: max-age=3600, public, stale-while-revalidate=86400, stale-if-error=259200
X-Backend: varnish--F_aem
Date: Wed, 07 Jun 2017 05:01:25 GMT
X-Timer: S1496811685.781874,VS0,VE673
X-Cache-Hits: 3, 0
X-Uncacheable: false
Content-Length: 113488
X-Served-By: cache-hhn1521-HHN
Via: 1.1 varnish
X-XSS-Protection: 1; mode=block
Accept-Ranges: bytes
Server: Apache