HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Content-Length: 343036
Connection: close
Server: nginx
Date: Mon, 13 May 2019 13:54:49 GMT
Cache-Control: max-age=300
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Last-Modified: Mon, 13 May 2019 12:00:10 GMT
Strict-Transport-Security: max-age=15768000
Referrer-Policy: strict-origin
Content-Security-Policy: default-src 'self'; base-uri 'self'; form-action 'self' https://flightbookings.airnewzealand-ar.com https://flightbookings.airnewzealand-br.com https://flightbookings.airnewzealand.ca https://flightbookings.airnewzealand.cn https://flightbookings.airnewzealand.co.nz https://flightbookings.airnewzealand.co.uk https://flightbookings.airnewzealand.com.au https://flightbookings.airnewzealand.com.hk https://flightbookings.airnewzealand.com.sg https://flightbookings.airnewzealand.com.tw https://flightbookings.airnewzealand.com https://flightbookings.airnewzealand.de https://flightbookings.airnewzealand.eu https://flightbookings.airnewzealand.fr https://flightbookings.airnewzealand.hk https://flightbookings.airnewzealand.jp https://flightbookings.airnewzealand.pf https://flightbookings.airnewzealand.tw https://flightbookings.cn.airnewzealand.com https://flightbookings.de.airnewzealand.com https://flightbookings.en.airnewzealand-ar.com https://flightbookings.en.airnewzealand-br.com https://flightbookings.en.airnewzealand.cn https://flightbookings.eu.airnewzealand.com https://flightbookings.grabaseat.co.nz https://flightbookings.jp.airnewzealand.com https://koruclub.airnewzealand.com https://auth.airnewzealand.co.nz; script-src 'self' https://s-airnz.com https://p-airnz.com 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com https://www.rnengage.com https://*.custhelp.com https://d1mj578wat5n4o.cloudfront.net https://api-ap-southeast-2-production.boxever.com https://www.youtube.com https://s.ytimg.com https://www.wufoo.com https://wufoo.com https://secure.wufoo.com https://s.wayin.com https://xd.wayin.com https://s.engagesciences.com https://display.engagesciences.com https://display.wayin.com https://chat-prod-ap-southeast-2.s3.amazonaws.com https://www.everestjs.net https://*.demdex.net https://www.google-analytics.com https://tagmanager.google.com  https://www.googletagmanager.com https://*.doubleclick.net https://www.googleadservices.com https://cdn-assets-prod.s3.amazonaws.com https://*.optimizely.com https://s.swiftypecdn.com https://upgrade.plusgrade.com https://nebula-cdn.kampyle.com https://screencapture.kampyle.com https://screencaptue-cdn.kampyle.com https://*.hotjar.com https://yourir.info https://*.airnewzealand.co.nz https://auth.airnewzealand.co.nz https://ssl.google-analytics.com 'self' https://cdnjs.cloudflare.com https://musculahq.appspot.com https://dnn506yrbagrg.cloudfront.net https://xsell.expedia.com; style-src 'unsafe-inline' https://s-airnz.com https://p-airnz.com https://fonts.googleapis.com https://*.custhelp.com https://tagmanager.google.com https://s.swiftypecdn.com https://upgrade-cdn.plusgrade.com https://yourir.info 'self'; img-src https: data:; font-src https://s-airnz.com https://p-airnz.com https://fonts.googleapis.com https://fonts.gstatic.com https://dhm5hy2vn8l0l.cloudfront.net 'self'; media-src 'self' ; frame-src 'self' https://www.google.com https://nz.fltmaps.com https://airpointscalculator.co.nz https://www.youtube.com https://airnz.wufoo.com https://xd.wayin.com https://display.engagesciences.com https://*.demdex.net https://*.doubleclick.net https://www.googletagmanager.com https://*.cdn.optimizely.com https://nebula-cdn.kampyle.com https://*.hotjar.com https://*.airnewzealand.co.nz https://auth.airnewzealand.co.nz https://hotels.airnewzealand.co.nz; connect-src 'self' https://api.airnewzealand.co.nz https://api.airnz.ai https://auth.airnewzealand.co.nz https://chat-prod-ap-southeast-2.s3.amazonaws.com https://*.demdex.net *.tt.omtrdc.net https://www.google-analytics.com https://stats.g.doubleclick.net https://adservice.google.com https://logx.optimizely.com https://rum.optimizely.com https://errors.client.optimizely.com https://s.swiftypecdn.com https://search-api.swiftype.com https://*.kampyle.com ws://*.hotjar.com wss://*.hotjar.com https://vc.hotjar.io https://in.hotjar.com https://yourir.info https://ssl.google-analytics.com https://muscula.herokuapp.com; object-src 'none'; frame-ancestors 'self' https: http:; report-uri /csp-report
Vary: Accept-Encoding
X-Cache: Miss from cloudfront
Via: 1.1 991cddfa34f7096aab42079b287a0629.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 0n_XqLeKpyak6gAKP3e6OcV_s-GCqOEQtzpkYYwyg2YsSIJ9R5KtzA==