| content-type: |
text/html; charset=utf-8 |
| x-amzn-trace-id: |
Root=1-66fb435e-2bc24cbf4bfece5b5a55f090 |
| x-amzn-requestid: |
f2c6cdca-dae9-4178-a273-8b0ccb491dae |
| etag: |
W/"eded-oVaf4wQM10VsFrX63rB1OrJGmzM" |
| x-akamai-transformed: |
9 9983 0 pmb=mTOE,3mRUM,3 |
| cache-control: |
max-age=1293 |
| date: |
Tue, 01 Oct 2024 00:41:15 GMT |
| transfer-encoding: |
chunked |
| connection: |
close, Transfer-Encoding |
| set-cookie: |
AKA_A2=A; expires=Tue, 01-Oct-2024 01:41:15 GMT; path=/; domain=finnair.com; secure; HttpOnly,akaas_AB-Test=2147483647~rv=50~id=1253c16214de104d508cf2b2a35dab3c~rn=Segment%202; path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None,_abck=EDD2891C0A466C5F931B675B2F8D5DF6~-1~YAAQjlozuA5RWjKSAQAAPzKGRQzdPgiw+sW9KClasBS++JfvrRxaezqj8Sid8BH2NDtVRa+/xqlJUmGscelHqttRLvV1NRVoQOR/PWGmzR69N9mQ3Xef+vOOkbV7kfUukAbIoLSa3bzI5JXop1S9pM13jdRj34jU3TET8Qs/IDLOFnqo3YaVNRmBVW0SnKVZl5Gf4K63h2KjUtB4wG+IttEDFnMjOB1YCIUQQtCQY7Lchzs8j7jlcT0NDKGanIhxtJLzGYG2XYxwCJV05tyoCs3TFkG7o+0euH5EXcwxkAqWkdgPB+SZXp9whMlwGCUlHyoGqmGyMfDH3ugyZcYzw3kvpPCnZFP0g7RXotv/B6gfGasVRuNupHym16Lc8/cEdErE3FfNTNwvbqVntCuBwZYk82gv0FXau/wT1SVH~-1~-1~-1; Domain=.finnair.com; Path=/; Expires=Wed, 01 Oct 2025 00:41:15 GMT; Max-Age=31536000; Secure,bm_sz=7B98B48CAB1295CAB75DBBA096D3032D~YAAQjlozuA9RWjKSAQAAPzKGRRlM0nXB88jGSpuDlU/6Hwa1jJbKeVa7MwXK7+F8WGfplPsY/w9+Q5YZOP+iuMQF+mMNVJY2hqBJUHNbO7C/OMpAnboMZZ1zJxRFXDLN00fEobj9A+f7C61tkC50wONT/Nti42Hq5wQS3B9YzpO6cRXB85yCqDBHWECrKGVp1j6244PFeWXP2oMbigeo0o9KH7HIgYfW2bRzpLkkRf3+DG0PmZgNrlo/O8vXX7CRFFgpT5THW29R2XUUVKcXpESyFUJ/V5cKjAo7OwKF+qAHQrf47SbhnI/V2nFONWOFkxcztHBxGdRi71gWVnChmdr9qgVUsTs3SlKPhlfphUGy/YDmOVDBXF/ity4foR75Fg==~4470329~3421508; Domain=.finnair.com; Path=/; Expires=Tue, 01 Oct 2024 04:41:15 GMT; Max-Age=14400 |
| link: |
<https://cdn.finnair.com/fcom-ui-styles/prod/fonts/FinnairSans/FinnairSans-Bold.woff2>;rel="preload";as="font";type="font/woff2";crossorigin,<https://cdn.finnair.com/fcom-ui-styles/prod/fonts/FinnairSans/FinnairSans-Medium.woff2>;rel="preload";as="font";type="font/woff2";crossorigin,<https://cdn.finnair.com/fcom-ui-styles/prod/fonts/FinnairSans/FinnairSans-Italic.woff2>;rel="preload";as="font";type="font/woff2";crossorigin,<https://cdn.finnair.com/fcom-ui-styles/prod/fonts/FinnairSans/FinnairSans-Regular.woff2>;rel="preload";as="font";type="font/woff2";crossorigin, <https://cdn.finnair.com>;rel="preconnect" |
| content-security-policy: |
default-src 'self' https://cdn.finnair.com https://pay.finnair.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.finnair.com *.googletagmanager.com https://tagmanager.google.com *.google-analytics.com https://maps.googleapis.com https://googleads.g.doubleclick.net https://www.google.com https://www.googleadservices.com https://bat.bing.com https://*.akamaihd.net https://*.go-mpulse.net https://*.quantummetric.com https://*.salesforceliveagent.com https://*.force.com https://*.salesforce.com https://connect.facebook.net https://www.dwin1.com https://cdn.smartvel.com https://finnair.3dseatmapvr.com https://*.travelaudience.com https://*.reactandshare.com https://snap.licdn.com https://finnair.my.salesforce-sites.com https://*.hotjar.com https://*.ads-twitter.com https://product-router.cartrawler.com; style-src 'self' 'unsafe-inline' *.finnair.com https://*.force.com https://*.salesforce.com https://*.googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://cdn.smartvel.com https://finnair.3dseatmapvr.com https://*.reactandshare.com https://finnair.my.salesforce-sites.com; img-src 'self' data: *.finnair.com *.google-analytics.com https://*.ytimg.com https://*.akamaihd.net https://*.akstat.io https://www.googletagmanager.com https://maps.googleapis.com https://*.gstatic.com https://*.google.com https://www.google.fi https://www.google.se https://www.google.co.uk https://www.google.de https://www.google.es https://www.google.it *.doubleclick.net https://www.googleadservices.com https://*.analytics.google.com https://www.facebook.com https://www.awin1.com https://www.dwin1.com https://cdn.smartvel.com https://bat.bing.com https://finnair.3dseatmapvr.com https://*.travelaudience.com https://*.reactandshare.com https://px.ads.linkedin.com https://*.ads-twitter.com https://*.ads-api.twitter.com https://analytics.twitter.com https://t.co https://script.hotjar.com https://play-lh.googleusercontent.com https://ade.googlesyndication.com https://cms-scdn.airtime.geemedia.com; manifest-src 'self' https://cdn.finnair.com; font-src 'self' data: https://cdn.finnair.com https://maps.googleapis.com https://*.gstatic.com https://cdn.smartvel.com https://cdn-qa.smartvel.com https://*.reactandshare.com https://script.hotjar.com; connect-src 'self' *.finnair.com https://sentry.io https://*.akamaihd.net https://*.akstat.io https://c.go-mpulse.net https://*.force.com https://search-api.swiftype.com https://finnair-app.quantummetric.com *.google-analytics.com *.doubleclick.net https://*.analytics.google.com https://*.googletagmanager.com https://*.google.com https://www.google.fi https://www.google.se https://www.google.co.uk https://www.google.de https://www.google.es https://www.google.it https://www.facebook.com https://green.am.apps.avarko.com https://*.aurinkomatkat.fi https://api.smartvel.com https://cdn.smartvel.com https://finnair.3dseatmapvr.com https://finnair-app-search.ent.eu-central-1.aws.cloud.es.io https://*.reactandshare.com https://cdn.linkedin.oribi.io https://px.ads.linkedin.com https://*.ads-twitter.com https://*.ads-api.twitter.com https://*.analytics.twitter.com https://finnair.my.salesforce-sites.com https://*.hotjar.com:* https://*.hotjar.io wss://*.hotjar.com https://*.safetravel.amadeus.com https://wasm.oho.prd.icm.aero; child-src 'self' https://paygw.finnair.com https://auth.finnair.com https://www.youtube.com https://api.finnair.com https://www.facebook.com https://staticxx.facebook.com blob:; frame-src 'self' https://*.force.com https://*.salesforce.com https://paygw.finnair.com https://auth.finnair.com https://www.youtube.com https://api.finnair.com https://api-dev.finnair.com https://api-test.finnair.com https://api-preprod.finnair.com https://3530909.fls.doubleclick.net https://www.googletagmanager.com https://bid.g.doubleclick.net https://td.doubleclick.net https://finnair.eu.qualtrics.com https://www.facebook.com https://*.points.com https://13389050.fls.doubleclick.net https://vars.hotjar.com https://product-router.cartrawler.com; worker-src 'self' https://finnair.3dseatmapvr.com blob:; sandbox allow-popups allow-forms allow-scripts allow-same-origin allow-modals allow-popups-to-escape-sandbox allow-top-navigation allow-downloads; frame-ancestors 'self'; object-src 'none'; media-src https://finnair.3dseatmapvr.com; |
| x-xss-protection: |
1; mode=block |
| x-content-type-options: |
nosniff |
| x-frame-options: |
SAMEORIGIN |
| strict-transport-security: |
max-age=31536000 |
| server-timing: |
ak_p; desc="1727743275550_3090373262_144878546_776_16393_3_5_-";dur=1 |
