HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Cache-Control: no-transform
Content-Security-Policy: default-src 'self'; media-src 'self' https://static.zdassets.com; connect-src 'self' https://*.mobi2go.com  https://*.braintreegateway.com https://*.braintree-api.com  https://*.bronto.com wss://widget-mediator.zopim.com https://ekr.zdassets.com https://krispykreme.zendesk.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googleadservices.com https://www.googletagmanager.com https://*.mobi2go.com https://www.gstatic.com  https://www.google.com  https://*.magentocommerce.com https://*.googleapis.com https://widget-mediator.zopim.com chrome-extension://*.content.js https://www.google-analytics.com https://embed.tawk.to https://js.braintreegateway.com https://api.sandbox.braintreegateway.com https://origin-analytics-sand.sandbox.braintree-api.com https://www.paypalobjects.com https://ssl.google-analytics.com/ga.js https://connect.facebook.net/en_US/fbevents.js https://www.googletagmanager.com/gtm.js https://www.googleadservices.com/pagead/conversion.js https://connect.facebook.net https://js.bronto.com https://cdn.bronto.com https://p.bm23.com/bta.js https://api.instagram.com https://googleads.g.doubleclick.net https://static.zdassets.com https://ajax.googleapis.com https://ekr.zdassets.com https://*.cloudfront.net https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src 'self' https://*.mobi2go.com  https://www.google.com https://www.xtento.com https://*.magentocommerce.com https://*.bronto.com  https://*.paypal.com https://*.googleapis.com https://*.gstatic.com https://www.google.com.au https://www.google-analytics.com https://checkout.paypal.com https://stats.g.doubleclick.net https://www.paypalobjects.com https://static-v.tawk.to https://cdn.jsdelivr.net https://secure.adnxs.com https://ssl.google-analytics.com https://www.krispykreme.com.au https://pixel.mediaiqdigital.com https://www.google.com https://www.facebook.com data:; frame-src 'self' https://ssl.kaptcha.com https://www.google.com  https://tst.kaptcha.com https://*.paypal.com  https://bid.g.doubleclick.net https://assets.braintreegateway.com https://va.tawk.to https://*.fls.doubleclick.net https://www.facebook.com https://a.pgtb.me; font-src 'self' https://*.mobi2go.com  https://*.gstatic.com https://fonts.googleapis.com https://static-v.tawk.to data:;
Content-Type: text/html; charset=UTF-8
Date: Fri, 26 Jun 2020 21:08:18 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Server: nginx
Set-Cookie: frontend=3iu0rb35007ee4jntoqto853u4; expires=Sat, 27-Jun-2020 21:08:18 GMT; Max-Age=86400; path=/; domain=www.krispykreme.com.au; HttpOnly
Strict-Transport-Security: max-age=63072000; includeSubdomains;
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Frame-Options: SAMEORIGIN
X-UA-Compatible: IE=Edge
X-XSS-Protection: 1; mode=block
transfer-encoding: chunked
Connection: keep-alive