Hyatt.com - Place.hyatt.com

Content-Type: text/html
Content-Length: 162
Location: https://www.hyatt.com/brands/hyatt-place
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
Expires: Mon, 19 Jan 2026 14:26:42 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Mon, 19 Jan 2026 14:26:42 GMT
Connection: keep-alive
Set-Cookie: domain=place.hyatt.com; Path=/;Secure;HttpOnly
Set-Cookie: vrid=6dcd1110-16a2-4d18-875b-c54dc45ab889; path=/; Secure=true; HttpOnly=true; Domain=hyatt.com; Max-Age=94608000;
Set-Cookie: f5avraaaaaaaaaaaaaaaa_session_=AAMAIDIMDMMKAELCJEGONBOEALMGFJJOONEINAMAMAGMKGIJLEEIMIMOEBNLJIEIIPIDLMCOHOGANEFIKPIAFAFFNDKHPCJBBPKOPGOMHEIBLALALDPHLMFANDMHLBLF; HttpOnly; secure;
Set-Cookie: source-country=DE
Source-Country: DE
Strict-Transport-Security: max-age=15768000 ; includeSubDomains

HTTP/2 403 
mime-version: 1.0
content-length: 5103
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
content-type: text/html
content-encoding: gzip
expires: Mon, 19 Jan 2026 14:26:43 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 19 Jan 2026 14:26:43 GMT
vary: Accept-Encoding
set-cookie: source-country=DE; path=/
set-cookie: source-region=HH; path=/
server-timing: cdn-cache; desc=HIT
server-timing: edge; dur=477
cipher: TLS_CHACHA20_POLY1305_SHA256
source-country: DE
strict-transport-security: max-age=15768000 ; includeSubDomains
server-timing: ak_p; desc="1768832802633_34631356_266589289_47746_11130_5_8_15";dur=1