x-content-type-options: nosniff Via: 1.1 varnish link: <https://a1.r9cdn.net>; rel=preconnect; crossorigin HTTP/1.1 200 OK Content-Language: pl-PL link: <https://apis.google.com>; rel=preconnect; crossorigin X-Cache: MISS, MISS cache-control: no-store Set-Cookie: p1.med.sid=H-5cJQWgtRQsXHIE2PQW0gz-aJHuPtLtedW0wV4gW2Ee28n1zl3WkZdMbhLCXWEUu; Path=/; HttpOnly Set-Cookie: Apache=PkuJRw-AAABXBL_6$U-a4-f4kOmQ; Expires=Mon, 10-Feb-2020 20:41:55 GMT; Path=/; HttpOnly Set-Cookie: p1.med.token=OfFvkZK9xfhvtJjFSf$hrk; Expires=Sun, 12-Nov-2017 20:41:55 GMT; Path=/; Secure; HttpOnly Accept-Ranges: bytes Set-Cookie: kayak=56yxWoI5gvcip3GNqBPh; Expires=Fri, 15-May-2020 20:41:55 GMT; Path=/; HttpOnly Via: 1.1 varnish Set-Cookie: NSC_q5-tqbslmf=ffffffff09892a9a45525d5f4f58455e445a4a422a59;expires=Tue, 16-May-2017 21:01:55 GMT;path=/;httponly Fastly-Debug-Digest: 7cbce25f6c6618fa7d59cb096f8190d92118c477053c0dc175720170974bbba4 Set-Cookie: kykprf=354; Path=/; HttpOnly Vary: Accept-Encoding content-security-policy-report-only: default-src https:; connect-src https:; font-src https: data:; frame-src https:; img-src https: data:; media-src https:; object-src https: data: blob:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:; report-uri /s/run/cspreport Connection: keep-alive content-security-policy: upgrade-insecure-requests X-Served-By: cache-fra1251-FRA, cache-hhn1543-HHN link: <https://www.google-analytics.com>; rel=preconnect; crossorigin link: <https://www.googletagmanager.com>; rel=preconnect; crossorigin x-recruiting: Made with love in Berlin - come join us! https://www.kayak.com/careers Age: 0 Transfer-Encoding: chunked x-xss-protection: 1; mode=block Content-Type: text/html;charset=UTF-8 Date: Tue, 16 May 2017 20:41:55 GMT x-frame-options: SAMEORIGIN Server: KAYAK/1.0 Set-Cookie: cluster=5; Expires=Tue, 16-May-2017 21:26:55 GMT; Path=/; HttpOnly X-Cache-Hits: 0, 0 X-Timer: S1494967315.455934,VS0,VE75