cheapflights.co.nz Review

 N/A

HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 449
Server: Varnish
Retry-After: 0
Location: https://www.cheapflights.co.nz/
Content-Type: text/html; charset=utf-8
Accept-Ranges: bytes
Date: Sun, 04 Oct 2026 20:27:51 GMT
Via: 1.1 varnish
X-Served-By: cache-nrt-rjaa8190029-NRT
X-Cache: HIT
X-Cache-Hits: 0

HTTP/1.1 200 OK
Connection: keep-alive
server: KAYAK/1.0
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self'
x-render-time: 0.229
x-xss-protection: 1; mode=block
x-sn-waf-code: 
x-r9-mst-target: sparkle
set-cookie: p1.med.token=; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/
set-cookie: Apache=nQe4Hg-AAABoQiaAZk-6d-HGfCww; Max-Age=86400000; Expires=Sat, 30 Jun 2029 20:27:53 GMT; Path=/; Secure; HTTPOnly; SameSite=None
set-cookie: cluster=5; Max-Age=2700; Expires=Sun, 04 Oct 2026 21:12:53 GMT; Path=/; Secure; HTTPOnly; SameSite=None
set-cookie: p1.med.sid=R-5wxJq3089Vab9QJ7Qhb9j-JJ3zE89AI0VSjbAC0cIwtNRhLNu69dd0oMTxwxBYa; Path=/; Secure; HTTPOnly; SameSite=None
set-cookie: kayak=GT7SxkTPN20oNiB46eT9; Max-Age=94608000; Expires=Wed, 03 Oct 2029 20:27:53 GMT; Path=/; Secure; HTTPOnly; SameSite=None
set-cookie: kayak.mc=AbQwfKYZ6_JUZISKAO4EcTW-NpErouWS0FH8HA-t9ZyoGWPkB_74BOpN5-QdCOidII0p1WJ3ncdBg56cu3Tphked8tlawUHd91os-EvJl2hXhkrbkJYkM9Wk-59ZAeOWwBoDxqnhu-MuNWudvpxa0Ui6DcA_Hf9DAfkGRs0r3sZf5VDWXqNzoyvswDDYEvpsAUj1hr2pVxq9kJM9EsSpDVjhC62TPNURa-yr2gg07kKgDdndP9hLvHGrHlQVgx4N1xf96LTeHkczQsJxihiMzqM89XzdXtbRSk_DgWDX3oNa; Max-Age=94608000; Expires=Wed, 03 Oct 2029 20:27:53 GMT; Path=/; Secure; HTTPOnly; SameSite=None
set-cookie: mst_iBfK2w=0KgDVoUSXUotnEMV1gMyC0WVgM7GqBlU6fe0owIDLjw6dRnoGc9SbOhwCBO96ISvsvId6ApyM7r8OU3aZ-RPAA; Expires=Sun, 04 Oct 2026 20:42:53 GMT; Max-Age=900; Path=/; HttpOnly
set-cookie: mst_client=AUJev6Odr8w3ui_7kjUjvxCJ_DDQmYfj8_MW1A1W5myBp3owP9_u8TF0opomhlDJoZ8HTEt-o8oAi5v5YXmMyng; Path=/; HttpOnly
set-cookie: mst_ADIrlA=YBjJRWE7jh5wKD3e8k7-WUWVgM7GqBlU6fe0owIDLjyq41EMmfvrsBCxlVGs4lF6; Expires=Sun, 04 Oct 2026 20:42:53 GMT; Max-Age=900; Path=/; HttpOnly
content-security-policy-report-only: default-src https: blob:; connect-src https: https://signalling.trueengage.com https://fileupload.mypurecloud.com https://api.mypurecloud.com wss://webmessaging.mypurecloud.com https://api-downloads.mypurecloud.com https://asset.trueengage.com blob: wss://visitorjourneyapi.trueengage.com https://visitorjourneyapi.trueengage.com https://geoip.trueengage.com https://statistics.trueengage.com https://api.trueengage.com https://billingapi.trueengage.com https://headsupai.trueengage.com; font-src https: data:; frame-src https:; img-src https: data: blob:; media-src https: data: blob:; object-src https: data: blob:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' https: data:; worker-src 'self' blob:; report-uri /s/run/cspreport/reportHttp
feature-policy: camera 'none'; microphone 'none'; midi 'none'; usb 'none'; geolocation 'self'
content-encoding: br
x-r9-mst-req: qbEYVPmPaKlN9
content-language: en-NZ
referrer-policy: origin-when-cross-origin
content-type: text/html;charset=UTF-8
x-content-type-options: nosniff
Accept-Ranges: bytes
Date: Sun, 04 Oct 2026 20:27:53 GMT
Via: 1.1 varnish
X-Served-By: r9, cache-nrt-rjaa8190050-NRT, cache-nrt-rjaa8190050-NRT
X-Cache: MISS, MISS
X-Cache-Hits: 0, 0
X-Timer: S1791145673.505131,VS0,VE1038
Vary: Accept-Encoding
Set-Cookie: csid=44f52818-af69-47d0-8f23-2b1635de9086; path=/; Secure; SameSite=Strict;
Cache-Control: private, no-store
transfer-encoding: chunked