HTTP/2 200 
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self'
x-content-type-options: nosniff
strict-transport-security: max-age=10886400; preload
server: KAYAK/1.0
x-xss-protection: 1; mode=block
x-sn-waf-code: 
set-cookie: p1.med.token=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/
set-cookie: Apache=rdDI6g-AAABlJErqIw-29-Cl9MUA; Max-Age=86400000; Expires=Wed, 20 Oct 2027 03:19:05 GMT; Path=/; Secure; HTTPOnly; SameSite=None
set-cookie: cluster=4; Max-Age=2700; Expires=Thu, 23 Jan 2025 04:04:05 GMT; Path=/; Secure; HTTPOnly; SameSite=None
set-cookie: p1.med.sid=R-4lgcPqH7WFR$_5BBOqKx2-KPTw_zdnrbveIeVatMa0H_2_8PR9dXIdZg3G_0edQ; Path=/; Secure; HTTPOnly; SameSite=None
set-cookie: kayak.t=hogyCc2PdhXouS0UoQVe; Path=/; Secure; HTTPOnly; SameSite=None
set-cookie: kayak.mc=AUSoDTFn4w4rxth_IXcvpO8OUMD7nMH5eSJ5X2Y5cxN4hyka-_RTgayTnwvfLtaD51RQox7G_cq-kckDnecMUw1OJhr2uUoMgIzKnlVwEUrY2Zgs_Oph_AfjI9LLWQmXHZYKZWQhTKv_2KxmoCZMaahT1moiGphnen99SIMTMf3X57pxPOfYTaVovLuZ40BITOTTaXpAsHADuqPX9emLnXQ; Path=/; Secure; HTTPOnly; SameSite=None
set-cookie: mst_iBfK2g=Y-8LTIIb1NyojoJKnkskeCt1FZnDvGfMu_7O3TNJZyGmou1SiKADnMF6so7qU_MTZEf-h5RCHYMf2DUJ2Bg5Lg; Max-Age=900; Expires=Thu, 23 Jan 2025 03:34:05 GMT; Path=/; HttpOnly
set-cookie: mst_ADIrkw=mUFFbgHyrXv9yysKkNNskyt1FZnDvGfMu_7O3TNJZyHLxmOR8GpRDDOkF5Y2qx5ZOcVQN19bqOkeTcuQnkWOTQ; Max-Age=900; Expires=Thu, 23 Jan 2025 03:34:05 GMT; Path=/; HttpOnly
referrer-policy: origin-when-cross-origin
content-type: text/html;charset=UTF-8
content-security-policy-report-only: default-src https: blob:; connect-src https:; font-src https: data:; frame-src https:; img-src https: data: blob:; media-src https:; object-src https: data: blob:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https: data:; worker-src blob:; report-uri /s/run/cspreport/reportHttp
feature-policy: camera 'none'; microphone 'none'; midi 'none'; usb 'none'; geolocation 'self'
content-language: de-AT
content-encoding: br
accept-ranges: bytes
date: Thu, 23 Jan 2025 03:19:05 GMT
vary: Accept-Encoding
set-cookie: csid=e1b05fa8-f2a6-4aee-ad3f-63b1ee8e7445; path=/; Secure; SameSite=Strict;
cache-control: private, no-store