Kohls.com

server: AkamaiGHost
content-length: 0
location: https://www.kohls.com/
expires: Mon, 27 Nov 2023 12:56:23 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 27 Nov 2023 12:56:23 GMT
vary: User-Agent
strict-transport-security: max-age=31536000 ; preload
set-cookie: _abck=CA12FC0F5DFB5B1747361624909B9A20~-1~YAAQHWV0aCq0tN+LAQAA5C/aEApPDNY1Flh0lXGVm3S3NkKzi8sdOM6F1bPMJnkMyezUnkb9ZReq/ikm53zo/PgPYcI8231nxgPS8yEbZmQfj0aSL7qRqtf8aDg4D0MCw+hElrvNNZJGuYNvEqDnmR+Ryrwbwc/+OCytX9i1zzrx2n+vbjzQUwn04gSnUT5Pd3zXInm5B9D8GZncoQD60O6mbTHCxGHSkT5HbapOAwJKXFcnYmrqQFxlZNYpHysvcKhE1MKwv+3dky5KnTsYPMrvmvks2xfXnpO8OR/fWJvTvhpvhIh0T0hXpUxmcSpWEEopFDpNINd4TFVWkxz55+U+1EmrhTWBxOqHHVMJWQzgBf0XMtKcctD23+b3+ZXa6M6mjlZR5scgCvM2ctD4nQwOmKaVNXpRya0=~-1~-1~1701093357; Domain=.kohls.com; Path=/; Expires=Tue, 26 Nov 2024 12:56:23 GMT; Max-Age=31536000; Secure
set-cookie: bm_sz=65AC1A8196D259E74811D169F8C35E8E~YAAQHWV0aCu0tN+LAQAA5C/aEBU4/6iMJ57jWM62rOQSSg4x4UDCE3qhkzdynWyub39iTuevRSuKo4i/G+S8KNayYd3CTqu7zDWnGSpDMnR8CeHu1D8vssk14Tur1ke72ftG24SEd1Hs4FgSdcvom17kEZ8/dbuLdiAgLvxpP8TDGFwi0nRGW//6QK/E6OYH+AMQuyW51IL7XIzXikkEzcOKyz5dYGk87HciWRtI18r+A+yZ9DU7uI2ZUeXdyiKHNUc38HUUGo/yzYqnW6jSymaDOj0K82goVaV2QpKNQJINy79yHg+Ne80py4p2JisbzHviQA/fndV8nHKDHyJvHIb4GiFpAXxR11puIL8c2U/o8SyF2iYKZm+a2tqsKW4=~3420994~4605240; Domain=.kohls.com; Path=/; Expires=Mon, 27 Nov 2023 16:56:23 GMT; Max-Age=14400; Secure

HTTP/2 200 
content-type: text/html;charset=utf-8
set-cookie: store_location=60601; expires=Mon, 04-Dec-2023 12:56:23 GMT; path=/; domain=.kohls.com
set-cookie: akavpau_www=1701090083~id=734ffede3e8d94682c8b47914d66669f; Path=/; HttpOnly; Secure; SameSite=None
set-cookie: akaalb_aem_homepage=~op=aem_production:aem_production|~rv=71~m=aem_production:0|~os=554fb49c1bda6073578f281b62264a0e~id=a5e6a78b44f94ecf2b234ccf94efef16; path=/; HttpOnly; Secure; SameSite=None
set-cookie: AKA_HP2Redesign=True; expires=Tue, 26-Nov-2024 12:56:23 GMT; path=/; secure
set-cookie: AKA_PIQ=True; expires=Tue, 26-Nov-2024 12:56:23 GMT; path=/; secure
set-cookie: AKA_ACM=True; expires=Tue, 26-Nov-2024 12:56:23 GMT; path=/; secure
set-cookie: AKA_CDP2=True; expires=Tue, 26-Nov-2024 12:56:23 GMT; path=/; secure
set-cookie: AKA_STP=false; expires=Tue, 26-Nov-2024 12:56:23 GMT; path=/; secure
set-cookie: AKA_PDP2=True; expires=Tue, 26-Nov-2024 12:56:23 GMT; path=/; secure
set-cookie: AKA_HP2=True; expires=Tue, 26-Nov-2024 12:56:23 GMT; path=/; secure
set-cookie: AKA_CNC2=True; expires=Tue, 26-Nov-2024 12:56:23 GMT; path=/; secure
set-cookie: AKA_RV6=2; expires=Sat, 25-May-2024 12:56:23 GMT; path=/; secure
set-cookie: AKA_RV8=13; expires=Sat, 25-May-2024 12:56:23 GMT; path=/; secure
set-cookie: AKA_RV4=15; expires=Sat, 25-May-2024 12:56:23 GMT; path=/; secure
set-cookie: AKA_RV5=86; expires=Sat, 25-May-2024 12:56:23 GMT; path=/; secure
set-cookie: AKA_RV3=4; expires=Sat, 25-May-2024 12:56:23 GMT; path=/; secure
set-cookie: AKA_RV=38; expires=Sat, 25-May-2024 12:56:23 GMT; path=/; secure
set-cookie: AKA_RV2=37; expires=Sat, 25-May-2024 12:56:23 GMT; path=/; secure
etag: W/"4948f-60b1cda421f59-gzip"
strict-transport-security: max-age=15768000 ; preload
x-origin-ttl: Mon, 27 Nov 2023 21:59:59 GMT
x-origin-cc: 
x-frame-options: SAMEORIGIN
content-security-policy: block-all-mixed-content; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.kohls.com *.licdn.com *.pubmatic.com *.rubiconproject.com *.doubleclick.net *.iesnare.com www.youtube.com *.fontawesome.com kohlsblog.wpengine.com app.collectivevoice.com *.flippenterprise.net *.kohlslocal.com *.media.net *.syndigo.com *.syndigo.cloud *.rewardstyle.com *.adnxs-simple.com media.adcanvas.com *.loudcrowd.com *.2mdn.net c.tvpixel.com *.3lift.com *.flashtalking.com *.ampproject.org *.scorecardresearch.com *.evgnet.com survey.vovici.com *.casalemedia.com cdn.cookielaw.org app.contentsquare.com pixel.fohr.co cdnjs.cloudflare.com *.yahoo.com cdn.js7k.com *.doubleverify.com *.adnxs.com *.adsafeprotected.com kohls.sspinc.io *.webcollage.net cdns.brsrvr.com *.pinterest.com edge.curalate.com *.googleapis.com *.dynatrace.com *.snapchat.com *.go-mpulse.net *.adobedtm.com *.dynatrace.com *.coherentpath.com *.igodigital.com *.bing.com *.google.com *.paypalobjects.com *.braintreegateway.com *.dynamicyield.com *.gstatic.com *.paypal.com *.micpn.com *.clicktale.net *.yimg.com *.liadm.com *.ads-twitter.com *.pinimg.com *.facebook.net *.tiktok.com *.vibescm.com sc-static.net *.googletagmanager.com *.snapchat.com *.google-analytics.com *.cnnx.link *.taboola.com *.impactradius-event.com *.ada.support *.googletagservices.com *.indexww.com *.googlesyndication.com *.bazaarvoice.com *.stylitics.com *.tagdelivery.com *.bambuser.com *.googleadservices.com *.rokt.com *.fohr.co www.recaptcha.net; style-src 'self' 'unsafe-inline' *.kohls.com *.licdn.com kohlsblog.wpengine.com cdn.honey.io *.flippenterprise.net *.fontawesome.com *.kohlslocal.com *.loudcrowd.com *.quantcount.com fonts.googleapis.com *.bazaarvoice.com *.stylitics.com *.dynamicyield.com; img-src 'self' blob: data: *.kohls.com *.adsensecustomsearchads.com *.doubleclick.net *.licdn.com *.scorecardresearch.com *.adnxs.com *.clicktale.net cdn.honey.io media.kohlsimg.com *.casalemedia.com *.yahoo.com *.fontawesome.com *.loudcrowd.com lookaside.fbsbx.com kohlsblog.wpengine.com *.syndigo.com *.syndigo.cloud *.adcanvas.com *.googleadservices.com *.quantserve.com *.vibescm.com *.quantcount.com www.ojrq.net *.flippenterprise.net *.liadm.com *.rlcdn.com *.media.net us-u.openx.net *.rubiconproject.com *.demdex.net *.everesttech.net prodeastusmappscreative.azureedge.net *.pubmatic.com s.yimg.com *.kohlslocal.com *.gstatic.com *.doubleverify.com *.flashtalking.com *.advertising.com chart.googleapis.com cdn.cookielaw.org pixel.fohr.co *.webcollage.net *.adsafeprotected.com edge.curalate.com *.3lift.com *.dynamicyield.com content.stylitics.com dpm.demdex.net *.micpn.com cm.everesttech.net maps.googleapis.com www.googletagmanager.com services.postcodeanywhere.co.uk *.bing.com *.paypal.com *.doubleclick.net *.google.com t.co *.twitter.com *.clicktale.net *.pinterest.com *.facebook.com *.google-analytics.com *.taboola.com *.2mdn.net *.admedia.com *.admarketplace.net *.igodigital.com trkn.us *.4cinsights.com *.bazaarvoice.com *.tagdelivery.com *.bizrate.com *.googlesyndication.com *.adxcel-ec2.com *.kohlsimg.com *.fohr.co; connect-src 'self' *.kohls.com *.domdog.io *.evergage.com *.casalemedia.com *.iesnare.com *.syndigo.com *.syndigo.cloud *.adeptmind.ai endpoint.dlp-webservices.prod.dlp.adeptmind.net plausible.io *.loudcrowd.com *.fontawesome.com *.flippenterprise.net *.flipp.com *.flippback.com *.ampproject.org s.update.ib.adnxs.net *.kohlslocal.com *.google-analytics.com *.flashtalking.com *.onetrust.com cdn.cookielaw.org pixel.fohr.co p.tvpixel.com *.tagdelivery.com *.doubleverify.com *.adnxs.com edge.curalate.com *.googleapis.com hb.emxdgt.com *.pubmatic.com *.gstatic.com api.rlcdn.com *.google.com *.yahoo.com *.facebook.com *.akstat.io *.rubiconproject.com *.3lift.com *.snapchat.com *.tiktok.com *.bing.com *.paypal.com *.techlab-cdn.com *.omtrdc.net *.go-mpulse.net *.dynatrace.com *.dynamicyield.com *.yimg.com *.liadm.com *.clicktale.net *.pinterest.com *.taboola.com *.braintree-api.com *.braintreegateway.com *.paypal.com *.addressy.com dpm.demdex.net *.ada.support *.doubleclick.net *.googlesyndication.com *.bazaarvoice.com *.stylitics.com kohls.sjv.io *.coherentpath.com *.fohr.co *.contentsquare.net; frame-src 'self' survey.vovici.com *.indexww.com *.brealtime.com *.2mdn.net *.adnxs.com *.rewardstyle.com *.googletagservices.com app.collectivevoice.com secure.opinionlab.com *.casalemedia.com player.vimeo.com www.youtube.com *.syndigo.com *.syndigo.cloud *.bambuser.com *.bazaarvoice.com eus.rubiconproject.com *.3lift.com contextual.media.net *.pubmatic.com core-gp.firstinsight.com tsdtocl.com tr.snapchat.com apps.rokt.com *.google.com *.liadm.com *.pinterest.com *.doubleclick.net kohls.demdex.net *.paypal.com *.facebook.com kohls.ada.support *.rlcdn.com *.googlesyndication.com *.flashtalking.com www.recaptcha.net; worker-src 'self' blob:; font-src 'self' data: cdn.honey.io cdnjs.cloudflare.com *.syndigo.com *.bazaarvoice.com *.syndigo.cloud *.fontawesome.com *.kohlslocal.com *.gstatic.com *.stylitics.com *.paypalobjects.com *.rakuten.com; form-action 'self' *.kohls.com *.facebook.com *.bazaarvoice.com secure.opinionlab.com *.snapchat.com *.pinterest.com; base-uri 'self' *.kohls.com; frame-ancestors 'self'; manifest-src 'self' *.kohls.com *.bazaarvoice.com; media-src 'self' blob: *.kohlsimg.com *.iesnare.com *.bazaarvoice.com *.loudcrowd.com lookaside.fbsbx.com www.bing.com *.syndigo.com *.syndigo.cloud edge.curalate.com; object-src 'self' *.bazaarvoice.com; report-uri https://csp38.domdog.io/report-uri/a9a6fb14-365a-4648-b17b-2e47930f8b49/1/1-42/block;
esi_status: ENABLED
server-timing: edge; dur=1
server-timing: cdn-cache; desc=HIT
x-akamai-transformed: 9 - 0 pmb=mTOE,2mRUM,3
vary: Accept-Encoding
x-origin-ttl: Mon, 27 Nov 2023 21:59:59 GMT
x-origin-cc: 
x-origin-ttl: Mon, 27 Nov 2023 21:59:59 GMT
x-origin-cc: 
x-timer: S1701068409.914179,VS0,VS0,VE229
x-served-by: cache-chi-klot8100091-CHI
x-content-type-options: nosniff
cmshost: aem
x-vhost: publish
content-encoding: gzip
expires: Mon, 27 Nov 2023 12:56:23 GMT
cache-control: max-age=0, no-cache, no-store, private
pragma: no-cache
date: Mon, 27 Nov 2023 12:56:23 GMT
x-origin-cc: 
x-origin-ttl: Mon, 27 Nov 2023 21:59:59 GMT
server-timing: ak_p; desc="1701089783826_1752458558_1053698696_50_41995_13_13_15";dur=1