x-xss-protection: 1; mode=block
Content-Type: text/html;charset=UTF-8
content-security-policy-report-only: default-src https:; connect-src https:; font-src https: data:; frame-src https:; img-src https: data:; media-src https:; object-src https: data: blob:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:; report-uri /s/run/cspreport
Vary: Accept-Encoding
Fastly-Debug-Digest: 7cbce25f6c6618fa7d59cb096f8190d92118c477053c0dc175720170974bbba4
Set-Cookie: kayak=zcVUJYyeLcFXlKo_FK_y; Expires=Wed, 20-May-2020 14:27:27 GMT; Path=/; HttpOnly
Set-Cookie: cluster=5; Expires=Sun, 21-May-2017 15:12:27 GMT; Path=/; HttpOnly
Set-Cookie: p1.med.token=XUZlbQDJX6k6FRAJsq8m31; Expires=Fri, 17-Nov-2017 14:27:27 GMT; Path=/; Secure; HttpOnly
Date: Sun, 21 May 2017 14:27:27 GMT
Content-Language: de-CH
link: <https://www.google-analytics.com>; rel=preconnect; crossorigin
Transfer-Encoding: chunked
Via: 1.1 varnish
X-Served-By: cache-fra1251-FRA, cache-hhn1527-HHN
X-Cache: MISS, MISS
Set-Cookie: NSC_q5-tqbslmf=ffffffff09892a4345525d5f4f58455e445a4a422a59;expires=Sun, 21-May-2017 14:47:27 GMT;path=/;httponly
Accept-Ranges: bytes
content-security-policy: upgrade-insecure-requests
Set-Cookie: Apache=PkuJRw-AAABXCtn4lU-7a-dODMLw; Expires=Sat, 15-Feb-2020 14:27:27 GMT; Path=/; HttpOnly
Set-Cookie: kykprf=46; Path=/; HttpOnly
Age: 0
Server: KAYAK/1.0
link: <https://www.googletagmanager.com>; rel=preconnect; crossorigin
X-Cache-Hits: 0, 0
x-recruiting: Made with love in Berlin - come join us! https://www.kayak.com/careers
link: <https://apis.google.com>; rel=preconnect; crossorigin
link: <https://a1.r9cdn.net>; rel=preconnect; crossorigin
Via: 1.1 varnish
Connection: keep-alive
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
X-Timer: S1495376847.453629,VS0,VE112
cache-control: no-store
Set-Cookie: p1.med.sid=H-5jOWTR7jkweO4eCiFM3NO-rJKfd5J7HW8JWeiKhkwgQSog6tG5yonRj_r9GBv2p; Path=/; HttpOnly
HTTP/1.1 200 OK