HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Length: 72446
Connection: keep-alive
Server: nginx
Date: Mon, 13 May 2019 13:54:30 GMT
Cache-Control: max-age=300
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Last-Modified: Mon, 13 May 2019 02:50:13 GMT
Strict-Transport-Security: max-age=15768000
Referrer-Policy: strict-origin
Content-Security-Policy: default-src 'self'; base-uri 'self'; form-action 'self' https://flightbookings.airnewzealand-ar.com https://flightbookings.airnewzealand-br.com https://flightbookings.airnewzealand.ca https://flightbookings.airnewzealand.cn https://flightbookings.airnewzealand.co.nz https://flightbookings.airnewzealand.co.uk https://flightbookings.airnewzealand.com.au https://flightbookings.airnewzealand.com.hk https://flightbookings.airnewzealand.com.sg https://flightbookings.airnewzealand.com.tw https://flightbookings.airnewzealand.com https://flightbookings.airnewzealand.de https://flightbookings.airnewzealand.eu https://flightbookings.airnewzealand.fr https://flightbookings.airnewzealand.hk https://flightbookings.airnewzealand.jp https://flightbookings.airnewzealand.pf https://flightbookings.airnewzealand.tw https://flightbookings.cn.airnewzealand.com https://flightbookings.de.airnewzealand.com https://flightbookings.en.airnewzealand-ar.com https://flightbookings.en.airnewzealand-br.com https://flightbookings.en.airnewzealand.cn https://flightbookings.eu.airnewzealand.com https://flightbookings.grabaseat.co.nz https://flightbookings.jp.airnewzealand.com; script-src 'self' https://s-airnz.com https://p-airnz.com 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com https://typesquare.com https://d1mj578wat5n4o.cloudfront.net https://api-ap-southeast-2-production.boxever.com https://player.vimeo.com https://www.youtube.com https://s.ytimg.com https://www.wufoo.com https://wufoo.com https://secure.wufoo.com https://s.wayin.com https://xd.wayin.com https://s.engagesciences.com https://display.engagesciences.com https://*.demdex.net https://www.google-analytics.com https://tagmanager.google.com  https://www.googletagmanager.com https://*.doubleclick.net https://www.googleadservices.com https://cdn-assets-prod.s3.amazonaws.com https://*.optimizely.com https://*.hotjar.com https://s.swiftypecdn.com https://nebula-cdn.kampyle.com https://screencapture.kampyle.com https://screencaptue-cdn.kampyle.com; style-src 'unsafe-inline' https://s-airnz.com https://p-airnz.com https://fonts.googleapis.com https://tagmanager.google.com https://s.swiftypecdn.com; img-src https: data:; font-src https://s-airnz.com https://p-airnz.com https://fonts.googleapis.com https://fonts.gstatic.com https://d3pj3vgx4ijpjx.cloudfront.net https://fonts.gstatic.com https://dhm5hy2vn8l0l.cloudfront.net; media-src 'self' https://video.cdnvue.com ; frame-src 'self' https://www.google.com https://nz.fltmaps.com https://player.youku.com https://v.qq.com https://player.vimeo.com https://www.youtube.com https://airnz.wufoo.com https://xd.wayin.com https://display.engagesciences.com https://*.demdex.net https://*.doubleclick.net https://www.googletagmanager.com https://*.cdn.optimizely.com https://*.hotjar.com https://nebula-cdn.kampyle.com; connect-src 'self' https://api.airnewzealand.co.nz https://api.airnz.ai https://l.typesquare.com https://*.demdex.net *.tt.omtrdc.net https://www.google-analytics.com https://stats.g.doubleclick.net https://adservice.google.com https://logx.optimizely.com https://rum.optimizely.com https://errors.client.optimizely.com ws://*.hotjar.com wss://*.hotjar.com https://vc.hotjar.io https://in.hotjar.com https://s.swiftypecdn.com https://search-api.swiftype.com https://*.kampyle.com; object-src 'none'; frame-ancestors 'none'; report-uri /csp-report
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 cd53a52a61fcb7bda797ab2120f02410.cloudfront.net (CloudFront)
X-Amz-Cf-Id: j9DIJ3U8woOH0ZAiThUYXjhcOsriXt4j-bgyYQwYYtA45M7cSjCI-g==