kayak.in website report

HTTP/2 200
report-to: { "group": "csp-log", "max_age": 43200, "endpoints": [ { "url": "https://www.kayak.com/s/run/cspreport/reportHttp" } ] }
server: KAYAK/1.0
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
x-sn-waf-code: 
set-cookie: p1.med.token=; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/, Apache=UkJA_A-AAABoWlLx2c-c6-JtHI0g; Max-Age=86400000; Expires=Thu, 19 Jul 2029 15:05:36 GMT; Path=/; Secure; HTTPOnly; SameSite=None, cluster=5; Max-Age=2700; Expires=Fri, 23 Oct 2026 15:50:36 GMT; Path=/; Secure; HTTPOnly; SameSite=None, p1.med.sid=R-5zCcL54lSlBGycVXR8jVJ-18FSK6N2vXC70CrjZ0269IzeXAGbldfEhciIQEW7o; Path=/; Secure; HTTPOnly; SameSite=None, kayak.t=dAG2zdbNhLyvVp7Ufj9X; Path=/; Secure; HTTPOnly; SameSite=None, kayak.mc=AX8utGBXgt7gpw0DvTmp1ISCyfRYQpikq3MljDXyjxOe0p2joLzSTlVh31v53hQT48vnmefF1rEmM9KieGJhav5oZPFNjtdqbyrB-HFuD3mRAqHqGqAT6Zqf2cZ5UxeVjRfXcwdXXlRiq5is6JmQheSltDyPdwpzL-A1D41SUN8TOrA9NuThCrkfMWRg3Po9QClR61TE791rnRUVvcp5bVp1BWoTHP337GL02PAPLVxOy1rJCLKklTf-SZ--rkxBWQ; Path=/; Secure; HTTPOnly; SameSite=None, mst_iBfK2w=AffzklKhQXYNSg9y0RiqTDWwiCQASZQgQWCx2GmzohSH2w8rliC2QzC9V85y-bZOsYU5LeqQ7CQq_KK5Ub6pyw; Expires=Fri, 23 Oct 2026 15:20:36 GMT; Max-Age=900; Path=/; HttpOnly, mst_client=AcecAog1NiqAA-mAobe4xJCS809T51seKaQmOTlzupXspWvHt57xnAP-OP2DjGbhc-s4ADvllb8VLv7rivYfSBs; Path=/; HttpOnly, mst_ADIrlA=j3iqIlzH4YPQusi1BRmn1fuzLvC48RylVotIVkSgpp6EdDiplDFhhisqhbcG3XlSiTLTkon02Jb--68ZH0eBoA; Expires=Fri, 23 Oct 2026 15:20:36 GMT; Max-Age=900; Path=/; HttpOnly, csid=116b736d-3724-4b52-b5c9-a79800df39e8; path=/; Secure; SameSite=Strict;
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self'; object-src 'none'; base-uri 'self' *.cloudfront.net
x-r9-mst-target: sparkle
x-r9-mst-req: apwC68AOv2JEQ
content-encoding: br
x-render-time: 0.218
content-language: en-IN
content-security-policy-report-only: upgrade-insecure-requests; object-src 'none'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' *.r9cdn.net https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google https://fundingchoicesmessages.google.com https://accounts.google.com https://*.fullstory.com https://appleid.cdn-apple.com https://connect.facebook.net *.affirm.com *.affirm.ca https://www.googletagmanager.com https://talkdeskchatsdk.talkdeskapp.com https://*.map.naver.com https://nrbe.pstatic.net https://widget.trustpilot.com https://static.criteo.net chrome-extension: https://www.google-analytics.com moz-extension: safari-extension: safari-web-extension: https://asset.trueengage.com https://evt2.klarna.app https://apis.google.com https://*.gstatic.com *.forter.com https://*.cloudfront.net https://*.usabilla.com https://*.googleapis.com https://www.googletagservices.com https://content.r9cdn.net; worker-src blob: chrome-extension: moz-extension: safari-extension: safari-web-extension:; form-action 'self'; base-uri 'self' *.cloudfront.net; report-uri /s/run/cspreport/omni
content-type: text/html;charset=UTF-8
x-xss-protection: 1; mode=block
permissions-policy: camera=(), microphone=(self), midi=(), geolocation=(self), usb=()
accept-ranges: bytes
date: Fri, 23 Oct 2026 15:05:36 GMT
via: 1.1 varnish
x-served-by: r9, cache-par-lfpg1960039-PAR, cache-par-lfpg1960039-PAR
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1792767936.326046,VS0,VE306
vary: Accept-Encoding
cache-control: private, no-store