kayak.no website report

HTTP/2 200
report-to: { "group": "csp-log", "max_age": 43200, "endpoints": [ { "url": "https://www.kayak.com/s/run/cspreport/reportHttp" } ] }
server: KAYAK/1.0
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
x-sn-waf-code: 
set-cookie: p1.med.token=; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/, Apache=UkJA_A-AAABoWL1t2w-c6-eq8Reg; Max-Age=86400000; Expires=Wed, 18 Jul 2029 09:33:52 GMT; Path=/; Secure; HTTPOnly; SameSite=None, cluster=5; Max-Age=2700; Expires=Thu, 22 Oct 2026 10:18:52 GMT; Path=/; Secure; HTTPOnly; SameSite=None, p1.med.sid=R-5HtZ1CCswd$$KzugAyTqG-3APit__L8jiEaqGZy4rZ94M94q1mF84mS3IOHzQoz; Path=/; Secure; HTTPOnly; SameSite=None, kayak.t=WS607vgThWFYHqmi1p_K; Path=/; Secure; HTTPOnly; SameSite=None, kayak.mc=AW8KZ12DJbYnK9OiusFsy9RiTswo8Kq8ra1ad31pIArGYQFi2i8NTKa7wGTennCljtqmSV1qgeB2N6CgjNjErOzGi1XoxpryicQU3xoWN6MHH4jKxFrjGh0CL086SHpwOHWvTr-O3_eCC2KNTYb7SvJ051DU7z4yp1h7TvPWGmJdA4UqWIzUichfK9gScz8_XvlMgkV8mFHxBCNwnangNPeM_eKUv3Gj3ld09TsV9HoIAnfcSJtyhomZe00vUxhPwiCiFIUSoFyEYtsLaBh4n9s; Path=/; Secure; HTTPOnly; SameSite=None, mst_iBfK2w=QATEFUiMG2AbUrRyfBOshGo4kUuXZ4sh2_PIY1cxzN8iMfqKTu-joi8wqw5O-HCDi9mf0LEMfONIYUKF5pqqMw; Expires=Thu, 22 Oct 2026 09:48:53 GMT; Max-Age=900; Path=/; HttpOnly, mst_client=AcecAog1NiqAA-mAobe4xJCS809T51seKaQmOTlzupXsVIUcHY3-C-aBHW3PZtHoQoWkpXGqibiKiPNKnx27cyU; Path=/; HttpOnly, mst_ADIrlA=AZk1Y4XOF8PAFPWFahUEmmLdIYwxtmOFEKnCKd-SOtTBFXXEUjs90tjJZF0GtorjiTLTkon02Jb--68ZH0eBoA; Expires=Thu, 22 Oct 2026 09:48:53 GMT; Max-Age=900; Path=/; HttpOnly, csid=be98f69f-cdc2-42e7-9c2d-d7e459f2dc9d; path=/; Secure; SameSite=Strict;
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self'; object-src 'none'; base-uri 'self' *.cloudfront.net
x-r9-mst-target: sparkle
x-r9-mst-req: aMqJjKqQ9Th3t
content-encoding: br
x-render-time: 0.193
content-language: no-NO
content-security-policy-report-only: upgrade-insecure-requests; object-src 'none'; script-src 'self' 'unsafe-inline' *.r9cdn.net https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google https://fundingchoicesmessages.google.com https://accounts.google.com https://*.fullstory.com https://appleid.cdn-apple.com https://connect.facebook.net *.affirm.com *.affirm.ca https://www.googletagmanager.com https://talkdeskchatsdk.talkdeskapp.com https://*.map.naver.com https://nrbe.pstatic.net https://widget.trustpilot.com https://static.criteo.net chrome-extension: https://www.google-analytics.com moz-extension: safari-extension: safari-web-extension: https://asset.trueengage.com https://evt2.klarna.app https://apis.google.com https://*.gstatic.com *.forter.com https://*.cloudfront.net https://*.usabilla.com https://*.googleapis.com https://www.googletagservices.com https://content.r9cdn.net; worker-src blob: chrome-extension: moz-extension: safari-extension: safari-web-extension:; form-action 'self'; base-uri 'self' *.cloudfront.net; report-uri /s/run/cspreport/omni
content-type: text/html;charset=UTF-8
strict-transport-security: max-age=10886400; preload
x-xss-protection: 1; mode=block
permissions-policy: camera=(), microphone=(self), midi=(), geolocation=(self), usb=()
accept-ranges: bytes
date: Thu, 22 Oct 2026 09:33:53 GMT
via: 1.1 varnish
x-served-by: r9, cache-par-lfpg1960030-PAR, cache-par-lfpg1960030-PAR
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1792661633.851407,VS0,VE252
vary: Accept-Encoding
cache-control: private, no-store