Walmart.com - Photos3.walmart.com

server: nginx/1.27.1
date: Thu, 23 Oct 2025 14:11:21 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding,Accept
link: </stylesheets/default.css?version=v2025.10.16.0951-100.729>; rel=preload; as=style; nopush,</javascripts/libs/jquery-3.7.0.min.js>; rel=preload; as=script; nopush,</javascripts/libs/popper-1.12.9/umd/popper.min.js>; rel=preload; as=script; nopush,</javascripts/libs/bootstrap.min.js>; rel=modulepreload; as=script; nopush,</javascripts/libs/slick-carousel-1.8.1/slick.min.js>; rel=modulepreload; as=script; nopush,</vite/assets/application-DfNoTs1V.js>; rel=modulepreload; as=script; crossorigin=anonymous; nopush,</vite/assets/mega-menu-C881Ak16.js>; rel=modulepreload; as=script; crossorigin=anonymous; nopush,</vite/assets/mobile-side-menu-CQ9oVj8t.js>; rel=modulepreload; as=script; crossorigin=anonymous; nopush,</vite/assets/cart-merged-notification-C1IwCbvX.js>; rel=modulepreload; as=script; crossorigin=anonymous; nopush,</vite/assets/select-BONJLkys.css>; rel=preload; as=style; nopush,</vite/assets/location-sidebar-Dsx5-Hye.js>; rel=modulepreload; as=script; crossorigin=anonymous; nopush
etag: W/"db95eebf17cfee0482f3fad4dccefc05"
cache-control: max-age=0, private, must-revalidate
set-cookie: _web-kiosk_session=QnJWbDJtN1FkZURiM1ZYQWNLdll5RHdLN3FMMkFCMXJMUjhWcW1XL2VENk4reXI2WGt3cHM5UXdBb1h2T0U0MzFweUdidjVwTEMwMEllUFp5V05XMVJTWXZwL1g2dzk2NEVSdSt6bEFlVS9ON0xweU9QblB6cWk0RTZFVGNPWDhxcnRrWUhtR2puelpMOTlTbmRSd0NBPT0tLXppeFhRT2ovZngyU3V3Zkd5MHhpdHc9PQ%3D%3D--a179417996f2a0248d683a468bc53abd5ebf4e4b; path=/; secure; HttpOnly; SameSite=Lax
x-request-id: 849a942d-7ba3-4b19-be3a-e3065f33a296
x-runtime: 0.078214
x-cloud-trace-context: 01ad6fc08e0f6fd4653224e148f27c8e/14314542153528894548;o=0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: same-origin
content-security-policy: default-src 'self' https: data: blob:; connect-src 'self' https: wss: data: blob:; font-src 'self' https: data:; frame-src 'self' *.pinterest.com *.criteo.com *.facebook.com players.brightcove.net *.doubleclick.net *.livelinklabs.com *.quantummetric.com player.vimeo.com urldefense.com *.googletagmanager.com *.clarity.ms *.walmart.com; img-src 'self' https: data: blob: *.googleusercontent.com; object-src 'self'; script-src https: 'unsafe-inline' 'unsafe-eval' 'self' blob:; style-src 'self' https: 'unsafe-inline'; worker-src 'self' blob: cdn.jsdelivr.net
content-security-policy-report-only: default-src 'self'; base-uri 'self'; connect-src 'self' blob: data: wss://*.pusher.com *.pusher.com *.nr-data.net cognito-identity.us-east-1.amazonaws.com *.pinterest.com region1.analytics.google.com *.amazonaws.com stats.g.doubleclick.net *.googleapis.com *.clarity.ms *.google-analytics.com *.google.co.uk *.google.com *.google.ca *.walmart.com *.facebook.com prism-embellishments-service-qzsuxnaeka-ew.a.run.app *.googlesyndication.com *.criteo.com *.criteo.net *.rlcdn.com *.adnxs.com *.liadm.com *.rezync.com *.rfihub.com pippio.com *.doubleclick.net *.quantummetric.com *.adsrvr.org *.wmt.co; font-src 'self' data: *.cloudflare.com *.gstatic.com *.wal.co *.fontawesome.com *.walmart.com *.paypalobjects.com *.jsdelivr.net static.zip.co; frame-src 'self' *.pinterest.com *.criteo.com *.facebook.com players.brightcove.net *.doubleclick.net *.livelinklabs.com *.quantummetric.com player.vimeo.com urldefense.com *.googletagmanager.com *.clarity.ms *.walmart.com; img-src 'self' data: blob: *.cloudflare.com *.pinterest.com *.googleapis.com *.gstatic.com *.facebook.com *.google-analytics.com *.google.co.uk *.google.com *.google.ca *.walmart.com *.googletagmanager.com *.walmartimages.com *.bing.com *.clarity.ms *.criteo.com *.criteo.net *.rlcdn.com *.adnxs.com *.rezync.com *.rfihub.com pippio.com *.doubleclick.net prism-embellishments-service-qzsuxnaeka-ew.a.run.app *.googleusercontent.com *.livelink.io *.fillr.com localhost:3003 *.jsdelivr.net *.adsrvr.org *.wmt.co *.liadm.com; manifest-src 'self'; media-src 'self'; object-src 'none'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.cloudflare.com *.facebook.net *.newrelic.com *.nr-data.net *.bootstrapcdn.com *.pinimg.com *.amazonaws.com *.criteo.com *.criteo.net *.rlcdn.com *.adnxs.com *.rezync.com *.rfihub.com pippio.com *.doubleclick.net *.myvisualiq.net *.clarity.ms *.google-analytics.com *.googletagmanager.com *.wal.co *.walmart.com *.jsdelivr.net *.pinterest.com *.adsrvr.org *.google.com *.wmt.co; style-src 'report-sample' 'self' 'unsafe-inline' *.honey.io *.cloudflare.com *.quilljs.com *.jquery.com *.googleapis.com *.fontawesome.com *.walmart.com *.bootstrapcdn.com *.jsdelivr.net; worker-src 'self' blob: cdn.jsdelivr.net; report-uri https://api.honeybadger.io/v1/browser/csp?api_key=hbp_fAF1FGsUTIexR67s96m2j6WBG4c0X90U9BQz&env=walmart-prod-report-only
x-cluster: Main
content-encoding: gzip
via: 1.1 google
strict-transport-security: max-age=31557600,max-age=31536000; includeSubDomains; preload
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000