Hellomatcha.com.au summary

Content-Security-Policy: block-all-mixed-content; upgrade-insecure-requests; report-uri /csp-report?source%5Baction%5D=index&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=storefront_section%2Fshop&source%5Bsection%5D=storefront&source%5Buuid%5D=fe5cf1da-22b2-41ba-b1c4-7229001fcaf1 HTTP/1.1 200 OK Set-Cookie: secure_customer_sig=; path=/; expires=Fri, 13 Nov 2037 14:18:39 -0000; secure; HttpOnly X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Sorting-Hat-ShopId-Cached: 0 X-Sorting-Hat-Section: pod Server: nginx X-XSS-Protection: 1; mode=block; report=/xss-report?source%5Baction%5D=index&source%5Bapp%5D=Shopify&source%5Bcontroller%5D=storefront_section%2Fshop&source%5Bsection%5D=storefront&source%5Buuid%5D=fe5cf1da-22b2-41ba-b1c4-7229001fcaf1 Connection: keep-alive X-Alternate-Cache-Key: cacheable:a942f0090329dbcaad8dde18d5e29ef5 Date: Mon, 13 Nov 2017 14:18:39 GMT X-Permitted-Cross-Domain-Policies: none Strict-Transport-Security: max-age=7889238 ETag: cacheable:9eec26b538ce523dd993d853296373aa X-Download-Options: noopen X-Cache: hit, server X-Sorting-Hat-PodId: 12 X-Dc: ash Set-Cookie: _orig_referrer=; Expires=Mon, 27-Nov-17 14:18:39 GMT; Path=/; HttpOnly P3P: CP="NOI DSP COR NID ADMa OPTa OUR NOR" Set-Cookie: _landing_page=%2F; Expires=Mon, 27-Nov-17 14:18:39 GMT; Path=/; HttpOnly Set-Cookie: cart_sig=; path=/; expires=Mon, 27 Nov 2017 14:18:39 -0000; HttpOnly Content-Language: en X-Content-Type-Options: nosniff X-ShopId: 14312384 X-Request-Id: fe5cf1da-22b2-41ba-b1c4-7229001fcaf1 Transfer-Encoding: chunked X-ShardId: 12 Vary: Accept-Encoding X-Sorting-Hat-PodId-Cached: 0 Content-Type: text/html; charset=utf-8 X-Sorting-Hat-ShopId: 14312384