kayak.com.ec website report

HTTP/2 200 
x-content-type-options: nosniff
server: KAYAK/1.0
content-language: es-EC
permissions-policy: camera=(), microphone=(self), midi=(), geolocation=(self), usb=()
x-r9-mst-req: hBuzILaUOLub8
x-render-time: 0.209
set-cookie: p1.med.token=; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/, Apache=UkJA_A-AAABoKVJnjc-c8-HfxwOw; Max-Age=86400000; Expires=Mon, 11 Jun 2029 13:37:40 GMT; Path=/; Secure; HTTPOnly; SameSite=None, cluster=5; Max-Age=2700; Expires=Tue, 15 Sep 2026 14:22:40 GMT; Path=/; Secure; HTTPOnly; SameSite=None, p1.med.sid=R-5qTC5dk8D8j8zn3ACc9AR-32PdJ_T5Jh4jgPdRK7bSj3PA28WnLsVCAorEBwvhu; Path=/; Secure; HTTPOnly; SameSite=None, kayak.t=VP0pXSXKCPCjjREWz2kd; Path=/; Secure; HTTPOnly; SameSite=None, kayak.mc=AULYDTKafcFvFvFal4tKWp2U-vtLQpS_3VO0fF4ygUWXwCoIqrh4MtbeRL1zKswi4hfMijcb-mHkVPwDTLV44EVZUP_hCQgfXzUjo5-56xIlc3rH4hfaAVg9QfmPZGi6yBD-l-6wh4588RshruzXVbcgXQuA50-L9Dqu_s5rDh2un8WRVDdGRInDT4BXdouKNvnq_2Pp1juJWIhA8Y9dt7adPoAXZ3s5pRak-JfjJzgV1cgaye4Z2g0-mTKDZ1vvU4SzC5HqJFOR-Rn2S-kA51WypRb8h41luiBwElcel7VDQ12zevMLp1DsY4lAArXkMMJ1smgJzQYTzKNv6wuEakVVUDHFeiPYqzK-Qngj-V5c; Path=/; Secure; HTTPOnly; SameSite=None, mst_iBfK2w=p0wyq_3XlMlZ3RnSMyjsYWLdIYwxtmOFEKnCKd-SOtR6aylRetW39YjYnDw80qe5zNt8ZF1pKoWxXwn5sP20nw; Expires=Tue, 15 Sep 2026 13:52:40 GMT; Max-Age=900; Path=/; HttpOnly, mst_client=AZl33iDB6W1kToYgHFq88N8PNMkFbM2vDOYDsrLlQvSK5u-YSNEOYY8RU_GW-3k2kkGxg9ccflf5-1P_yCi_zS8; Path=/; HttpOnly, mst_ADIrlA=c-qvJCMSSG6KJ8F6fveA1mLdIYwxtmOFEKnCKd-SOtRT2MHAJnLpPa9IG16Zj3YDD-pBCkuta7xiHYIOf1cwmw; Expires=Tue, 15 Sep 2026 13:52:40 GMT; Max-Age=900; Path=/; HttpOnly
content-type: text/html;charset=UTF-8
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self'
x-sn-waf-code: 
content-security-policy-report-only: default-src https: blob:; connect-src https: https://signalling.trueengage.com https://fileupload.mypurecloud.com https://api.mypurecloud.com wss://webmessaging.mypurecloud.com https://api-downloads.mypurecloud.com https://asset.trueengage.com blob: wss://visitorjourneyapi.trueengage.com https://visitorjourneyapi.trueengage.com https://geoip.trueengage.com https://statistics.trueengage.com https://api.trueengage.com https://billingapi.trueengage.com https://headsupai.trueengage.com; font-src https: data:; frame-src https:; img-src https: data: blob:; media-src https: data: blob:; object-src https: data: blob:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https: data:; worker-src 'self' blob:; report-uri /s/run/cspreport/reportHttp; report-to csp-log
referrer-policy: origin-when-cross-origin
report-to: { "group": "csp-log", "max_age": 43200, "endpoints": [ { "url": "https://www.kayak.com/s/run/cspreport/reportHttp" } ] }
x-r9-mst-target: sparkle
x-xss-protection: 1; mode=block
cache-control: no-store
accept-ranges: bytes
date: Tue, 15 Sep 2026 13:37:40 GMT
via: 1.1 varnish
x-served-by: r9, cache-par-lfpb1150067-PAR, cache-par-lfpb1150067-PAR
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1789479460.326404,VS0,VE308
vary: Accept-Encoding