| date: |
Thu, 10 Oct 2024 08:36:48 GMT |
| content-type: |
text/html; charset=UTF-8 |
| transfer-encoding: |
chunked |
| connection: |
close |
| cache-control: |
must-revalidate, no-cache, private |
| x-drupal-dynamic-cache: |
UNCACHEABLE |
| link: |
<https://www.aman.com/resorts/aman-rosa-alpina>; rel="alternate"; hreflang="en", <https://www.aman.com/zh-cn/resorts/aman-rosa-alpina>; rel="alternate"; hreflang="zh-hans", <https://www.aman.com/ja-jp/resorts/aman-rosa-alpina>; rel="alternate"; hreflang="ja", <https://www.aman.com/it/resorts/aman-rosa-alpina>; rel="alternate"; hreflang="it", <https://www.aman.com/es/resorts/aman-rosa-alpina>; rel="alternate"; hreflang="es", <https://www.aman.com/pt-pt/resorts/aman-rosa-alpina>; rel="alternate"; hreflang="pt-pt", <https://www.aman.com/pt-br/resorts/aman-rosa-alpina>; rel="alternate"; hreflang="pt-br", <https://www.aman.com/resorts/aman-rosa-alpina>; rel="alternate"; hreflang="en-gb", <https://www.aman.com/resorts/aman-rosa-alpina>; rel="alternate"; hreflang="en-gb", <https://www.aman.com/resorts/aman-rosa-alpina>; rel="alternate"; hreflang="en-gb", <https://www.aman.com/resorts/aman-rosa-alpina>; rel="alternate"; hreflang="en-gb", <https://www.aman.com/resorts/aman-rosa-alpina>; rel="alternate"; hreflang="en-gb", <https://www.aman.com/resorts/aman-rosa-alpina>; rel="alternate"; hreflang="en-gb", <https://www.aman.com/resorts/aman-rosa-alpina>; rel="alternate"; hreflang="en-gb" |
| content-language: |
en |
| x-content-type-options: |
nosniff |
| x-frame-options: |
SAMEORIGIN |
| expires: |
Sun, 19 Nov 1978 05:00:00 GMT |
| x-generator: |
Drupal 10 (https://www.drupal.org) |
| content-security-policy: |
default-src 'self' blob: *.aman-d8.my127.site *.brightcove.net *.brightcove.com *.boltdns.net *.akamaihd.net *.typekit.net *.nr-data.net *.buyatab.com *.aman.com *.quantummetric.com cloud.typography.com 'unsafe-inline' 'unsafe-eval'; worker-src blob: *.aman.com; child-src blob:; ; script-src 'self' 'unsafe-inline' blob: *.googleapis.com 'unsafe-eval' *.brightcove.net *.googletagmanager.com *.newrelic.com *.nr-data.net *.typekit.net *.buyatab.com *.aman.com *.ipstack.com *.quantummetric.com *.doubleclick.net *.googleadservices.com impactradius-event.com utt.impactcdn.com *.cinnox.com *.gstatic.com *.onetrust.com *.synxis.com *.recaptcha.net *.google.com logs-01.loggly.com ojrq.net *.zencdn.net *.thehotelsnetwork.com *.google-analytics.com cdn.rudderlabs.com https://d2wy8f7a9ursnm.cloudfront.net/v6/bugsnag.min.js *.api.rudderlabs.com *.analytics.google.com s.yimg.jp snap.licdn.com connect.facebook.net d.line-scdn.net p.relay-t.io js.sentry-cdn.com *.yahoo.co.jp *.clarity.ms static.sojern.com bat.bing.com cdn.linkedin.oribi.io https://cdn.jsdelivr.net/gh/jonthornton/[email protected]/jquery.timepicker.min.js https://cdn.jsdelivr.net/gh/jackocnr/[email protected]/build/js/intlTelInput-jquery.min.js https://cdn.jsdelivr.net/gh/jackocnr/[email protected]/build/js/intlTelInput.min.js https://cdn.jsdelivr.net/gh/jackocnr/[email protected]/build/js/utils.js fxgate.baidu.com secure-hotel-tracker.com newbooking.azds.com *.cinnox.cn https://*.googletagmanager.com aman-d8.my127.site browser.sentry-cdn.com *.visualwebsiteoptimizer.com app.vwo.com https://acsbapp.com https://accesswidget-log-receiver.acsbapp.com https://global.localizecdn.com https://js.appboycdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://js.adsrvr.org; style-src 'self' 'unsafe-inline' 'unsafe-eval' cloud.typography.com *.buyatab.com *.aman.com *.cinnox.com *.googleapis.com *.bootstrapcdn.com *.synxis.com *.thehotelsnetwork.com https://cdn.jsdelivr.net/gh/jonthornton/[email protected]/jquery.timepicker.min.css https://cdn.jsdelivr.net/gh/jackocnr/[email protected]/build/css/intlTelInput.min.css newbooking.azds.com cdnjs.cloudflare.com *.cinnox.cn *.aman-d8.my127.site *.visualwebsiteoptimizer.com app.vwo.com https://use.fontawesome.com; img-src 'self' data: about: *.brightcove.net *.brightcove.com *.googletagmanager.com *.buyatab.com *.aman.com *.cinnox.com *.boltdns.net *.google-analytics.com *.onetrust.com *.thehotelsnetwork.com https://www.google.com https://www.google.com.uk https://www.google.co.uk https://px.ads.linkedin.com https://cdn.jsdelivr.net/gh/jackocnr/[email protected]/build/img/flags.png bat.bing.com tr.line.me ad.doubleclick.net doubleclick.net www.facebook.com *.clarity.ms newbooking.azds.com dbmajt85xhr99.cloudfront.net controlcenter-p1.synxis.com newbooking.azds.com dbmajt85xhr99.cloudfront.net d1t1qzzb2zwrre.cloudfront.net *.bing.com *.linkedin.com *.cinnox.cn https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com *.aman-d8.my127.site *.visualwebsiteoptimizer.com chart.googleapis.com app.vwo.com appboy-images.com braze-images.com cdn.braze.eu https://ade.googlesyndication.com; media-src 'self' blob: *.buyatab.com *.aman.com *.akamaihd.net *.boltdns.net *.aman-d8.my127.site; frame-src *; frame-ancestors 'self'; font-src 'self' data: *.typekit.net *.aman.com *.gstatic.com *.cinnox.com *.thehotelsnetwork.com newbooking.azds.com dbmajt85xhr99.cloudfront.net d1t1qzzb2zwrre.cloudfront.net *.cinnox.cn *.aman-d8.my127.site https://use.fontawesome.com; connect-src 'self' *.aman.com *.boltdns.net *.thehotelsnetwork.com *.quantummetric.com *.akamaihd.net *.doubleclick.net *.google-analytics.com *.nr-data.net ws: 'unsafe-eval' *.googleapis.com *.onetrust.com *.synxis.com *.cinnox.com impactradius-event.com utt.impactcdn.com *.brightcove.com ojrq.net logs-01.loggly.com amanresorts.pxf.io api.rudderlabs.com *.rudderstack.com sessions.bugsnag.com p.relay-t.io cdn.linkedin.oribi.io pagead2.googlesyndication.com *.clarity.ms newbooking.azds.com *.analytics.google.com *.cinnox.cn https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com *.aman-d8.my127.site px.ads.linkedin.com am.yahoo.co.jp *.visualwebsiteoptimizer.com app.vwo.com https://cdn.acsbapp.com/config/stage.www.aman.com/config.json https://cdn.acsbapp.com/cache/app/wildcards.json https://sdk.iad-01.braze.com https://sdk.fra-02.braze.eu https://www.facebook.com; upgrade-insecure-requests |
| x-xss-protection: |
1; mode=block |
| strict-transport-security: |
max-age=31536000 |
| vary: |
Cookie,Accept-Encoding |
| x-request-id: |
v-c86b6304-86e2-11ef-887e-7b16e1a668b4 |
| x-ah-environment: |
prod |
| via: |
varnish |
| x-cache: |
MISS |
| last-modified: |
Thu, 10 Oct 2024 08:36:48 GMT |
| cf-cache-status: |
EXPIRED |
| server: |
cloudflare |
| cf-ray: |
8d0548d7cf980a5d-AMS |
|
