x-content-type-options: nosniff Via: 1.1 varnish link: <https://a1.r9cdn.net>; rel=preconnect; crossorigin HTTP/1.1 200 OK Content-Language: ru-RU link: <https://apis.google.com>; rel=preconnect; crossorigin X-Cache: MISS, MISS cache-control: no-store Set-Cookie: p1.med.sid=H-5Rt3IpxnMlDBmdk1dnwtt-lPJp5UzMhd3OavWlxPo9UG70SCTj9mare36QqDk_P; Path=/; HttpOnly Set-Cookie: Apache=PkuJRw-AAABW5z$Zc4-49-c984$w; Expires=Sat, 18-Jan-2020 22:47:15 GMT; Path=/; HttpOnly Set-Cookie: p1.med.token=dNdb8SCB_Y08ITviuCac2Q; Expires=Fri, 20-Oct-2017 22:47:15 GMT; Path=/; Secure; HttpOnly Accept-Ranges: bytes Set-Cookie: kayak=qE0QYku5YY5ciuZSsFws; Expires=Wed, 22-Apr-2020 22:47:15 GMT; Path=/; HttpOnly Via: 1.1 varnish Set-Cookie: NSC_q5-tqbslmf=ffffffff09892a7b45525d5f4f58455e445a4a422a59;expires=Sun, 23-Apr-2017 23:07:15 GMT;path=/;httponly Fastly-Debug-Digest: 7cbce25f6c6618fa7d59cb096f8190d92118c477053c0dc175720170974bbba4 Set-Cookie: kykprf=321; Path=/; HttpOnly Vary: Accept-Encoding content-security-policy-report-only: default-src https:; connect-src https:; font-src https: data:; frame-src https:; img-src https: data:; media-src https:; object-src https: data: blob:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https:; report-uri /s/run/cspreport Connection: keep-alive content-security-policy: upgrade-insecure-requests X-Served-By: cache-fra1220-FRA, cache-hhn1551-HHN link: <https://www.google-analytics.com>; rel=preconnect; crossorigin link: <https://www.googletagmanager.com>; rel=preconnect; crossorigin x-recruiting: Made with love in Berlin - come join us! https://www.kayak.com/careers Age: 0 Transfer-Encoding: chunked x-xss-protection: 1; mode=block Content-Type: text/html;charset=UTF-8 Date: Sun, 23 Apr 2017 22:47:15 GMT x-frame-options: SAMEORIGIN Server: KAYAK/1.0 Set-Cookie: cluster=5; Expires=Sun, 23-Apr-2017 23:32:15 GMT; Path=/; HttpOnly X-Cache-Hits: 0, 0 X-Timer: S1492987635.158982,VS0,VE71