HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Length: 221550 Connection: keep-alive Server: nginx Date: Fri, 20 Sep 2024 02:39:36 GMT Cache-Control: max-age=300 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Last-Modified: Fri, 20 Sep 2024 01:57:26 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; Referrer-Policy: strict-origin Origin-Trial: AgPr4RwMtCVzULfBBSDLfibdCWWkxomQDgWsovO6c40YHx724W6X35YsXRDRhkx+6EBq2PuTgYjyJ1j89UhAfwEAAABleyJvcmlnaW4iOiJodHRwczovL3d3dy5haXJuZXd6ZWFsYW5kLmNvbTo0NDMiLCJmZWF0dXJlIjoiRmVhdHVyZVBvbGljeVJlcG9ydGluZyIsImV4cGlyeSI6MTU2MTI2Nzg4Nn0= Report-To: {"group":"default", "max_age": 86400, "endpoints": [{"url": "/csp-report"}],"include_subdomains":true} Feature-Policy-Report-Only: fullscreen 'none'; autoplay 'none'; geolocation 'none'; camera 'none'; picture-in-picture 'none'; microphone 'none'; gyroscope 'none'; magnetometer 'none'; sync-xhr 'none'; accelerometer 'none'; midi 'none'; usb 'none'; NEL: {"report_to":"default","max_age":31536000,"include_subdomains":true} Content-Security-Policy: block-all-mixed-content; default-src 'self'; base-uri 'self'; form-action 'self' flightbookings.airnewzealand.co.kr flightbookings.airnewzealand.kr flightbookings.airnewzealand.ca flightbookings.airnewzealand.cn flightbookings.airnewzealand.co.nz flightbookings.airnewzealand.co.uk flightbookings.airnewzealand.com.au flightbookings.airnewzealand.com.hk flightbookings.airnewzealand.com.sg flightbookings.airnewzealand.com.tw flightbookings.airnewzealand.com flightbookings.airnewzealand.de flightbookings.airnewzealand.eu flightbookings.airnewzealand.fr flightbookings.airnewzealand.hk flightbookings.airnewzealand.jp flightbookings.airnewzealand.pf flightbookings.airnewzealand.tw flightbookings.airnewzealand.com.cn flightbookings.grabaseat.co.nz flightbookings.airnewzealand.co.jp au-connect.authsignal.com auth.identity.airnewzealand.com auth.identity.qual.airnewzealand.com; script-src 'self' p-airnz.com 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com *.google.com *.ggpht.com *.googleusercontent.com player.vimeo.com www.youtube.com s.ytimg.com s.wayin.com xd.wayin.com s.engagesciences.com display.engagesciences.com www.everestjs.net *.demdex.net www.google-analytics.com analytics.google.com tagmanager.google.com www.googletagmanager.com *.doubleclick.net www.googleadservices.com www.google.com cdn-assets-prod.s3.amazonaws.com *.optimizely.com optimizely-hrd.appspot.com optimizely.s3.amazonaws.com s.swiftypecdn.com upgrade.plusgrade.com md-scp.kampyle.com sbt-prod.kampyle.com nebula-cdn.kampyle.com udc-neb.kampyle.com analytics-fe.digital-cloud-syd1.medallia.com.au static.hotjar.com script.hotjar.com yourir.info t.a3cloud.net ib.adnxs.com https://widget.timatic.iata.org/scripts/iata-timatic-widget-live.js oc-cdn-public-oce.azureedge.net; style-src 'unsafe-inline' p-airnz.com fonts.googleapis.com tagmanager.google.com s.swiftypecdn.com upgrade-cdn-prd.plusgrade.com static.hotjar.com script.hotjar.com yourir.info 'self' oc-cdn-public-oce.azureedge.net; img-src https: data: static.hotjar.com script.hotjar.com; font-src p-airnz.com fonts.googleapis.com fonts.gstatic.com dhm5hy2vn8l0l.cloudfront.net script.hotjar.com 'self' data:; media-src 'self' p-airnz.com video.cdnvue.com; frame-src 'self' *.google.com auth.identity.airnewzealand.com identity.airnewzealand.com au-connect.authsignal.com nz.fltmaps.com player.youku.com v.qq.com player.vimeo.com www.youtube.com airnz.wufoo.com xd.wayin.com display.engagesciences.com www.everestjs.net pixel.everesttech.net *.demdex.net *.doubleclick.net www.googletagmanager.com *.cdn-pci.optimizely.com nebula-cdn.kampyle.com vars.hotjar.com sec.windcave.com uat.windcave.com forms.cd.airnewzealand.co.nz www.airnewzealand.co.nz/airpoints-account/payments/scripts/done.html www.airnewzealand.co.nz/payment/scripts/done.html oc-cdn-public-oce.azureedge.net blob: airnz-cargo.chooose.today airnz-corporate.chooose.today; connect-src 'self' api.airnz.io api.airnz.ai *.googleapis.com *.google.com *.gstatic.com auth.airnewzealand.co.nz auth.airnewzealand.com identity.airnewzealand.com *.demdex.net *.tt.omtrdc.net www.google-analytics.com region1.google-analytics.com region1.analytics.google.com analytics.google.com stats.g.doubleclick.net adservice.google.com *.optimizely.com s.swiftypecdn.com search-api.swiftype.com md-scp.kampyle.com sbt-prod.kampyle.com nebula-cdn.kampyle.com udc-neb.kampyle.com analytics-fe.digital-cloud-syd1.medallia.com.au https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.sentry.io yourir.info https://widget.timatic.iata.org/api/ sec.windcave.com uat.windcave.com unq0355446423e84eb397bc71189d78d-crm6.omnichannelengagementhub.com; object-src 'none'; frame-ancestors 'self'; report-uri /csp-report Permissions-Policy: geolocation=(self "https://p-airnz.com"), camera=(), fullscreen=(self "https://www.youtube.com"), accelerometer=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), screen-wake-lock=(), sync-xhr=(*), usb=(), web-share=(), clipboard-read=(), clipboard-write=() Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 0f4013a0af68dcba176ca4372e470df4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-C1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 9JkE3KSfCxEDQeMODKoO7EG2xoMm1JgQjgdchxeMDn7SVu93EyoWOw== http状态码说明： 200 ：服务器已成功处理了请求并提供了请求的网页。 204：服务器成功处理了请求，但没有返回任何内容。 301：请求的网页已永久移动到新位置。当URLs发生变化时，使用301代码。搜索引擎索引中保存新的URL。 302：请求的网页临时移动到新位置。搜索引擎索引中保存原来的URL。 304：如果网页自请求者上次请求后没有更新，则用304代码告诉搜索引擎。 400：服务器错误。 403：服务器拒绝请求。 404：服务器找不到请求的网页。服务器上不存在的网页经常会返回此代码。 410 ：请求的资源永久删除后，服务器返回此响应。该代码与 404（未找到）代码相似， 500 ：服务器遇到错误，无法完成请求。 503：服务器目前无法使用（由于超载或停机维护）。