Grabaseat.co.nz

content-type: text/html
content-length: 162
location: https://www.grabaseat.co.nz/
server: nginx
date: Mon, 23 Oct 2023 00:22:32 GMT
strict-transport-security: max-age=31536000; includeSubDomains;
x-cache: Miss from cloudfront
via: 1.1 c5298a869be79e45d81d584d2ebd6280.cloudfront.net (CloudFront)
x-amz-cf-pop: ORD58-P5
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: g1vN6yoYNiWeFW-yKpIU_Y4iywF4UxhtWAwk_LiqLibwg8Dp0Hr_4w==

HTTP/2 200 
content-type: text/html; charset=UTF-8
server: nginx
date: Mon, 23 Oct 2023 00:22:32 GMT
cache-control: max-age=300
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
last-modified: Fri, 20 Oct 2023 10:59:15 GMT
strict-transport-security: max-age=31536000; includeSubDomains;
referrer-policy: strict-origin
content-security-policy: block-all-mixed-content; default-src 'self'; base-uri 'self'; form-action 'self' flightbookings.airnewzealand.co.kr flightbookings.airnewzealand.kr flightbookings.airnewzealand.ca flightbookings.airnewzealand.cn flightbookings.airnewzealand.co.nz flightbookings.airnewzealand.co.uk flightbookings.airnewzealand.com.au flightbookings.airnewzealand.com.hk flightbookings.airnewzealand.com.sg flightbookings.airnewzealand.com.tw flightbookings.airnewzealand.com flightbookings.airnewzealand.de flightbookings.airnewzealand.eu flightbookings.airnewzealand.fr flightbookings.airnewzealand.hk flightbookings.airnewzealand.jp flightbookings.airnewzealand.pf flightbookings.airnewzealand.tw  flightbookings.airnewzealand.com.cn flightbookings.grabaseat.co.nz  flightbookings.airnewzealand.co.jp; script-src 'self' p-airnz.com 'unsafe-inline' 'unsafe-eval' www.youtube.com s.ytimg.com www.everestjs.net *.demdex.net www.google-analytics.com analytics.google.com tagmanager.google.com www.googletagmanager.com *.doubleclick.net www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.googleadservices.com www.googletagservices.com tpc.googlesyndication.com www.google.com cdn-assets-prod.s3.amazonaws.com *.optimizely.com optimizely-hrd.appspot.com optimizely.s3.amazonaws.com nebula-cdn.kampyle.com screencapture.kampyle.com screencaptue-cdn.kampyle.com static.hotjar.com script.hotjar.com s.wayin.com xd.wayin.com s.engagesciences.com display.engagesciences.com display.wayin.com ddc.optimahub.com https://widget.timatic.iata.org/scripts/iata-timatic-widget-live.js; style-src 'unsafe-inline' p-airnz.com tagmanager.google.com static.hotjar.com script.hotjar.com; img-src https: data: static.hotjar.com script.hotjar.com; font-src p-airnz.com dhm5hy2vn8l0l.cloudfront.net script.hotjar.com data:; media-src 'self' ; frame-src 'self' www.youtube.com www.everestjs.net pixel.everesttech.net *.demdex.net *.doubleclick.net www.googletagmanager.com www.google.com/recaptcha/ recaptcha.google.com/recaptcha/ tpc.googlesyndication.com *.cdn-pci.optimizely.com nebula-cdn.kampyle.com vars.hotjar.com xd.wayin.com display.engagesciences.com; connect-src 'self' api.airnz.io api.airnz.ai auth.airnewzealand.co.nz auth.grabaseat.co.nz *.demdex.net *.tt.omtrdc.net www.google-analytics.com region1.google-analytics.com region1.analytics.google.com analytics.google.com stats.g.doubleclick.net adservice.google.com pagead2.googlesyndication.com *.optimizely.com *.kampyle.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://widget.timatic.iata.org/api/; object-src 'none'; frame-ancestors 'none'; report-uri /csp-report
permissions-policy: geolocation=(self "https://p-airnz.com"), camera=(), fullscreen=(self "https://www.youtube.com"), accelerometer=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), clipboard-read=(), clipboard-write=()
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 158f93b4ffb029e3ea2c91474012d180.cloudfront.net (CloudFront)
x-amz-cf-pop: ORD56-P3
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 97Rc8Id4X8mPweS2IVbipFI5M47H15cRud7RwQcJA5AcRQVZJbBNaQ==