Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 104.18.10.125 |
| Server Software | cloudflare |
| CDN | Cloudflare |
| Compression | gzip |
|
🔒 🟡 Mixed Content (1 HTTP resources) | The page is served over HTTPS but loads 1 resource(s) over HTTP. This may be blocked in modern browsers. |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 104.18.10.125
Server Software cloudflare
CDN Cloudflare
Compression gzip
🔒 🟡 Mixed Content (1 HTTP resources) The page is served over HTTPS but loads 1 resource(s) over HTTP. This may be blocked in modern browsers.
Performance
| DNS Lookup | 9 ms |
| TCP Connect | 10.7 ms |
| TLS Handshake | 12.6 ms |
| Time To First Byte (TTFB) | 145.5 ms |
| Content Download | 1 ms |
| Total Response Time | 146.6 ms |
DNS Lookup 9 ms
TCP Connect 10.7 ms
TLS Handshake 12.6 ms
Time To First Byte (TTFB) 145.5 ms
Content Download 1 ms
Total Response Time 146.6 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31622400 |
| CSP | ✔ Configured |
| X-Frame-Options | ✔ SAMEORIGIN |
| X-Content-Type-Options | ✔ nosniff |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31622400
CSP ✔ Configured
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
Detected Technologies
| Technology | Drupal Google Analytics Google Tag Manager Cloudflare PHP Hotjar |
Technology Drupal Google Analytics Google Tag Manager Cloudflare PHP Hotjar
HTTP Headers
| Date
| Tue, 28 Jul 2026 16:00:08 GMT |
| Content-type
| text/html; charset=UTF-8 |
| Cache-control
| max-age=21600, public |
| Content-language
| en |
| Content-security-policy
| default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' use.fontawesome.com e.issuu.com staticcdn.co.nz www.googletagmanager.com www.google-analytics.com static.hotjar.com js-agent.newrelic.com www.google.com www.gstatic.com docs.google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com docs.google.com; img-src 'self' data: shielded.co.nz www.google.com www.google.co.nz i.ytimg.com www.googletagmanager.com *.niwa.co.nz camerastorageoflalbwn.blob.core.windows.net; frame-src 'self' *.niwa.co.nz www.youtube.com www.google.com player.vimeo.com vimeo.com e.issuu.com staticcdn.co.nz if-cdn.com kachharaaayushi.shinyapps.io www.youtube-nocookie.com docs.google.com storymaps.arcgis.com; frame-ancestors 'self'; font-src 'self' data: fonts.gstatic.com; connect-src 'self' sentry.issuu.com www.google-analytics.com stats.g.doubleclick.net csmetrics.hotjar.com bam.nr-data.net webstatic.niwa.co.nz; report-uri /report-csp-violation |
| Cf-cache-status
| DYNAMIC |
| Expires
| Sun, 19 Nov 1978 05:00:00 GMT |
| Last-modified
| Tue, 28 Jul 2026 10:31:42 GMT |
| Server
| cloudflare |
| Strict-transport-security
| max-age=31622400 |
| X-content-type-options
| nosniff |
| X-drupal-cache
| MISS |
| X-drupal-dynamic-cache
| HIT |
| X-frame-options
| SAMEORIGIN |
| X-generator
| Drupal 10 (https://www.drupal.org) |
| X-pantheon-styx-hostname
| styx-au-a-8599697f84-54n6m |
| X-styx-req-id
| 869e0dbe-8a6f-11f1-a95c-ba684ff15be7 |
| X-served-by
| cache-syd10153-SYD, cache-mad2200094-MAD |
| X-cache
| HIT, HIT |
| X-cache-hits
| 39, 0 |
| X-timer
| S1785254409.914417,VS0,VE5 |
| Vary
| Accept-Encoding, Cookie, Cookie, Cookie |
| Age
| 19706 |
| Via
| 1.1 varnish, 1.1 varnish |
| Content-encoding
| gzip |
| Cf-ray
| a22518573a7f2f5a-CDG |
Meta Tags
| Description | NIWA |
| Generator | Drupal 10 (https://www.drupal.org) |
| MobileOptimized | width |
| HandheldFriendly | true |
| Viewport | width=device-width, initial-scale=1.0 |
Date Tue, 28 Jul 2026 16:00:08 GMT
Content-type text/html; charset=UTF-8
Cache-control max-age=21600, public
Content-language en
Content-security-policy default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' use.fontawesome.com e.issuu.com staticcdn.co.nz www.googletagmanager.com www.google-analytics.com static.hotjar.com js-agent.newrelic.com www.google.com www.gstatic.com docs.google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com docs.google.com; img-src 'self' data: shielded.co.nz www.google.com www.google.co.nz i.ytimg.com www.googletagmanager.com *.niwa.co.nz camerastorageoflalbwn.blob.core.windows.net; frame-src 'self' *.niwa.co.nz www.youtube.com www.google.com player.vimeo.com vimeo.com e.issuu.com staticcdn.co.nz if-cdn.com kachharaaayushi.shinyapps.io www.youtube-nocookie.com docs.google.com storymaps.arcgis.com; frame-ancestors 'self'; font-src 'self' data: fonts.gstatic.com; connect-src 'self' sentry.issuu.com www.google-analytics.com stats.g.doubleclick.net csmetrics.hotjar.com bam.nr-data.net webstatic.niwa.co.nz; report-uri /report-csp-violation
Cf-cache-status DYNAMIC
Expires Sun, 19 Nov 1978 05:00:00 GMT
Last-modified Tue, 28 Jul 2026 10:31:42 GMT
Server cloudflare
Strict-transport-security max-age=31622400
X-content-type-options nosniff
X-drupal-cache MISS
X-drupal-dynamic-cache HIT
X-frame-options SAMEORIGIN
X-generator Drupal 10 (https://www.drupal.org)
X-pantheon-styx-hostname styx-au-a-8599697f84-54n6m
X-styx-req-id 869e0dbe-8a6f-11f1-a95c-ba684ff15be7
X-served-by cache-syd10153-SYD, cache-mad2200094-MAD
X-cache HIT, HIT
X-cache-hits 39, 0
X-timer S1785254409.914417,VS0,VE5
Vary Accept-Encoding, Cookie, Cookie, Cookie
Age 19706
Via 1.1 varnish, 1.1 varnish
Content-encoding gzip
Cf-ray a22518573a7f2f5a-CDG
