HTTP/2 200 
cache-control: no-cache
content-encoding: gzip
content-language: en
content-security-policy-report-only: upgrade-insecure-requests; block-all-mixed-content; default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://*.skyscanner.net https://*.skyscnr.com https://*.gbot.me https://*.cloudfront.net https://*.akstat.io https://*.akamaihd.net https://*.perimeterx.net https://*.px-cloud.net https://*.mixpanel.com https://*.mxpnl.com https://*.zscloud.net https://*.branch.io https://*.usabilla.com https://app.link https://*.go-mpulse.net https://*.krxd.net https://cx.atdmt.com https://*.criteo.com https://*.criteo.net https://*.yandex.ru https://*.bing.com https://*.facebook.com https://*.facebook.net https://*.google-analytics.com https://*.googletagservices.com https://*.googletagmanager.com https://*.googleadservices.com https://*.g.doubleclick.net https://*.googlesyndication.com https://*.gstatic.com https://*.googleapis.com https://*.google.com; report-uri https://slipstream.skyscanner.net/grp/v1/custom/public/csp-reports/report/security.ContentSecurityReport
content-type: text/html; charset=utf-8
expires: -1
pragma: no-cache
server: openresty
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-microsite: blackbird
x-request-handler-origin-region: eu-west-1
x-xss-protection: 1; mode=block
content-length: 0
vary: Accept-Encoding
date: Sun, 15 Mar 2020 22:56:26 GMT
set-cookie: _pxhd=84abce2fa67898b297c64d7228ea6e3dae5d1cb28374a6ce10638f62ecdab4ac:32f9f0c0-6710-11ea-9aa1-c1af834f04f5; Expires=Mon, 15-Mar-21 22:56:26 GMT; Path=/
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload