Kroger.com - Giftcards.kroger.com

Access-Control-Allow-Origin: https://giftcards.kroger.com
Content-Type: text/html
Date: Wed, 24 Nov 2021 10:14:12 GMT
Location: https://giftcards.kroger.com/
Server: nginx
Content-Length: 178
Connection: keep-alive

HTTP/1.1 200 OK
Access-Control-Allow-Origin: https://giftcards.kroger.com
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Encoding: gzip
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' *.salecycle.com *.pinimg.com google-analytics.com *.googleoptimize.com optimize.google.com fonts.gstatic.com *.adsrvr.org *.facebook.net *.kroger.com emjcd.com *.emjcd.com *.cloudflare.com *.wistia.net *.google-analytics.com *.demdex.net unpkg.com *.iesnare.com *.steelhousemedia.com *.unpkg.com *.nimbledeals.com *.salecycle.com *.youtube.com *.vimeo.com *.hotjar.com *.adobedtm.com *.facebook.com *.twitter.com *.doubleclick.net *.cloudfront.net *.jquery.com *.newrelic.com dx.steelhousemedia.com *.linksynergy.com *.pinimg.com *.facebook.net *.adsrvr.org *.pingdom.net *.sfw-cdn.com *.mathtag.com *.rakuten.com *.nr-data.net *.riskified.com *.trustev.com *.truste.com *.googleapis.com *.google.com *.googletagmanager.com www.googletagservices.com *.googlesyndication.com www.google-analytics.com *.openstreetmap.org *.gstatic.com  *.ehosts.net; connect-src *; img-src data: *
Content-Security-Policy-Report-Only: block-all-mixed-content; report-uri https://us4.nimblecommerce.com/csp-violation.action
Content-Type: text/html;charset=utf-8
Date: Wed, 24 Nov 2021 10:14:12 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Server: nginx
Set-Cookie: wl2_route=617da1dfef69a5943d6238ab4f60367c; Path=/; Secure; HttpOnly
Set-Cookie: AWSALB=iDWFY+G/ekV2bW1wZmc9nB/7Ag0cIs/lRP3FVRLE9sQNcqLNoJ0gOif6aVDbMYWoUqjoXQIbW24KCllZb8S2+VWYUKu+JwuT5h0YTO7EHi/GAKaadp3UT/DBWjD8; Expires=Wed, 01 Dec 2021 10:14:12 GMT; Path=/
Set-Cookie: AWSALBCORS=iDWFY+G/ekV2bW1wZmc9nB/7Ag0cIs/lRP3FVRLE9sQNcqLNoJ0gOif6aVDbMYWoUqjoXQIbW24KCllZb8S2+VWYUKu+JwuT5h0YTO7EHi/GAKaadp3UT/DBWjD8; Expires=Wed, 01 Dec 2021 10:14:12 GMT; Path=/; SameSite=None
Set-Cookie: JSESSIONID_WLV2=node01084kz0k8sv731jhmatm1v2uf2258987.node0;Path=/
Set-Cookie: city=79;Path=/;Expires=Wed, 01-Dec-2021 10:14:12 GMT;Max-Age=604800
Set-Cookie: city=79;Path=/;
Strict-Transport-Security: max-age=15724800;includeSubdomains
Vary: Accept-Encoding
X-Application-Context: sites:prod:8000
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
transfer-encoding: chunked
Connection: keep-alive