cheapflights.co.nz Review

 N/A

HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 449
Server: Varnish
Retry-After: 0
Location: https://www.cheapflights.co.nz/
Content-Type: text/html; charset=utf-8
Accept-Ranges: bytes
Date: Sun, 18 Oct 2026 03:06:11 GMT
Via: 1.1 varnish
X-Served-By: cache-nrt-rjaa8190067-NRT
X-Cache: HIT
X-Cache-Hits: 0

HTTP/1.1 200 OK
Connection: keep-alive
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self'
x-r9-mst-target: sparkle
feature-policy: camera 'none'; microphone 'none'; midi 'none'; usb 'none'; geolocation 'self'
server: KAYAK/1.0
content-encoding: br
referrer-policy: origin-when-cross-origin
x-sn-waf-code: 
content-type: text/html;charset=UTF-8
x-r9-mst-req: uoPazitZFmU3z
x-render-time: 0.257
x-content-type-options: nosniff
set-cookie: p1.med.token=; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/
set-cookie: Apache=nQe4Hg-AAABoUz5WS4-6d-KXqsog; Max-Age=86400000; Expires=Sat, 14 Jul 2029 03:06:12 GMT; Path=/; Secure; HTTPOnly; SameSite=None
set-cookie: cluster=5; Max-Age=2700; Expires=Sun, 18 Oct 2026 03:51:12 GMT; Path=/; Secure; HTTPOnly; SameSite=None
set-cookie: p1.med.sid=R-50gi_X3RFYLFzafhQ3Zk8-hPCqQ5Ku4PUH5IQtnY_5jT3DEOCBM0nsPyMXU1gEZ; Path=/; Secure; HTTPOnly; SameSite=None
set-cookie: kayak=h6cS5eQv8$DVnhtriXAx; Max-Age=94608000; Expires=Wed, 17 Oct 2029 03:06:12 GMT; Path=/; Secure; HTTPOnly; SameSite=None
set-cookie: kayak.mc=AaUL7r2y_td3N0PdHzEUzDKRsn9vC2Rn07r3wAXUrOJ5fo5Hdt40xmcFCT8Q7UKsXE5l_razHR-KGBzoA1sMPPhWoNRJmcKpcjYAqy0PrJUf0W4lUzl8mx-Rk5un4G5ThN2rzJVxvax-3_TL-TyXJJppG3HvW1tRof1Ten5EeYSKbCQ4HwL5VLhCm6ppVI8AZVFxj9kWSEvlsPsCMoLXhmn-P6Juv0lWjWgeMsCkAqUHpDYlzZAS4AlWNDcKTRxOVPWg5eEpolbAjZ2X1TylJbXe7rrzdZk2YohmzYx1eaHa; Max-Age=94608000; Expires=Wed, 17 Oct 2029 03:06:12 GMT; Path=/; Secure; HTTPOnly; SameSite=None
set-cookie: mst_iBfK2w=CwYUKTX-MDNPVznyxYOpbtmYeoL5Y26SgPzE7TJhN07ujJTZEKuxtlxOkPfIscPV58DQ4_9EDUnJYWCqX_ErvA; Expires=Sun, 18 Oct 2026 03:21:12 GMT; Max-Age=900; Path=/; HttpOnly
set-cookie: mst_client=Aa9hUCa6mPhzYWbaDcBUUyjzQeuOubpdzP6xSWFCc_6s7MLjEMO8rHcwVCEVUzLEqQJ-YXYVgSRKY2QvIrtwPlg; Path=/; HttpOnly
set-cookie: mst_ADIrlA=rQi15dUVoF7u-n4tfKRKz_E6niOcQKEN-15rkqL1HfqeF0nVCPHv_yDEJ-PwQL8PW3tG2NYYjPgprGhsVxLpYQ; Expires=Sun, 18 Oct 2026 03:21:12 GMT; Max-Age=900; Path=/; HttpOnly
content-language: en-NZ
content-security-policy-report-only: upgrade-insecure-requests; default-src 'self' *.r9cdn.net; connect-src 'self' *.forter.com https: wss://*.twilio.com; font-src 'self' data: *.r9cdn.net https://fonts.gstatic.com https://talkdeskchatsdk.talkdeskapp.com *.affirm.com *.affirm.ca https://content.r9cdn.net; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google https://accounts.google.com; img-src 'self' data: blob: https: https://content.r9cdn.net; media-src 'self' *.r9cdn.net *.forter.com; object-src 'none'; script-src 'self' 'unsafe-inline' *.r9cdn.net https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google https://fundingchoicesmessages.google.com https://accounts.google.com https://*.fullstory.com https://appleid.cdn-apple.com https://connect.facebook.net *.affirm.com *.affirm.ca https://www.googletagmanager.com https://talkdeskchatsdk.talkdeskapp.com https://*.map.naver.com https://nrbe.pstatic.net https://www.google-analytics.com https://*.gstatic.com *.forter.com https://dkupaw9ae63a8.cloudfront.net https://w.usabilla.com https://*.googleapis.com https://www.googletagservices.com https://content.r9cdn.net; style-src 'self' 'unsafe-inline' *.r9cdn.net https://fonts.googleapis.com https://accounts.google.com https://*.gstatic.com *.affirm.com *.affirm.ca https://content.r9cdn.net; worker-src blob:; child-src 'self' blob:; form-action 'self'; base-uri 'self' *.cloudfront.net; report-uri /s/run/cspreport/omni
x-xss-protection: 1; mode=block
Accept-Ranges: bytes
Date: Sun, 18 Oct 2026 03:06:12 GMT
Via: 1.1 varnish
X-Served-By: r9, cache-nrt-rjaa8190066-NRT, cache-nrt-rjaa8190066-NRT
X-Cache: MISS, MISS
X-Cache-Hits: 0, 0
X-Timer: S1792292771.482934,VS0,VE1229
Vary: Accept-Encoding
Set-Cookie: csid=1b1c1b29-c431-4c89-9140-c995d271f010; path=/; Secure; SameSite=Strict;
Cache-Control: private, no-store
transfer-encoding: chunked