HTTP/2 200 content-security-policy: default-src 'self' https://*.queue-it.net/ https://*.costco.ca/ https://*.costco.com/ https://*.costcobusinessdelivery.com/ https://*.costcobusinesscentre.ca/ https://*.costcobusinesscenter.ca/ https://*.costco-static.com/ https://display.ugc.bazaarvoice.com/ https://api.bazaarvoice.com/; script-src 'self' https://dev.virtualearth.net/ https://sdk.virtualearth.net/ https://*.queue-it.net/ https://*.costcobusinessdelivery.com https://*.costcobusinesscenter.ca/ https://cdn.intake-lr.com/ https://cdn.cookielaw.org/ https://*.criteo.com/ https://*.criteo.com/ https://assets.adobedtm.com/ https://s.go-mpulse.net/ https://transcend-cdn.com/ https://apps.bazaarvoice.com/ https://display.ugc.bazaarvoice.com/ https://mobilecontent.costco.com/ https://mobilecontent-qa.costco.com/ https://*.pxlecdn.com https://*.pixlee.com https://*.pixlee.co 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://dev.virtualearth.net/ https://sdk.virtualearth.net/ https://cdn.fonts.net/ 'unsafe-inline' https://transcend-cdn.com/ https://consent.costco.com/ https://consent.costco.ca/ https://consent.costco.com https://display.ugc.bazaarvoice.com/; img-src 'self' https://*.costcobusinessdelivery.com https://*.tiles.virtualearth.net/ https://dev.virtualearth.net/ https://sdk.virtualearth.net/ https://*.costco.ca/ https://*.costco.com/ https://*.costcotravel.com/ https://*.costcotravel.ca/ https://cdn.bfldr.com/ https://*.contentstack.com/ https://*.costco-static.com/ https://cdn.cookielaw.org/ https://cm.everesttech.net/ https://dpm.demdex.net/ https://display.ugc.bazaarvoice.com https://retailmedia-static.azureedge.net https://retailmedia-static.azureedge.net/ https://network-a.bazaarvoice.com https://network-stg-a.bazaarvoice.com https://retailmedia-static.criteo.com/ blob: data:; media-src 'self' https://*.costcobusinessdelivery.com https://*.costco.ca/ https://*.costco.com/ https://cdn.bfldr.com/ https://*.contentstack.com/ https://*.costco-static.com/ https://*.criteo.net/ https://retailmedia-static.criteo.com/ https://*.criteo.net; font-src 'self' https://cdn.bfldr.com/ https://*.costco-static.com/ https://fonts.gstatic.com data:; object-src 'none'; base-uri 'self' about:; form-action 'self' https://*.costcobusinessdelivery.com https://*.costco.ca/ https://*.costco.com/ https://r.intake-lr.com/ https://*.akstat.io https://*.opinionlab.com; frame-src https://*.costcobusinessdelivery.com https://*.costcobusinesscentre.ca/ https://*.ct-costco.com https://costco.demdex.net/ https://costco.centah.com/ https://consent-sync.costco.com/ https://consent-sync.costco.ca/ https://*.criteo.com/ https://*.criteo.com https://*.pixlee.com https://*.pixlee.co https://*.costco.com/ https://*.costco.ca/; connect-src 'self' https://cdn.bfldr.com/ https://gdx-api.costco.com https://gdx-npd.np.api.cc-costco.com https://api-tst.np.gdx.cc-costco.com https://dev.virtualearth.net/ https://sdk.virtualearth.net/ https://spatial.virtualearth.net/ https://*.queue-it.net/ https://*.costcobusinessdelivery.com/ https://*.costcobusinesscenter.ca/ https://*.costcobusinesscentre.ca/ https://*.costco.ca/ https://*.costco.com/ https://*.costco-static.com/ https://*.ct-costco.com https://cdn.cookielaw.org/ https://geolocation.onetrust.com/ https://costco.demdex.net/ https://dpm.demdex.net/ https://costco.tt.omtrdc.net/ https://*.criteo.com/ https://*.criteo.com/ https://*.criteo.net/ https://cm.everesttech.net/ https://r.intake-lr.com/ https://*.contentstack.com/ https://assets.adobedtm.com/ https://dcs.adobedc.net/ https://*.akstat.io https://*.go-mpulse.net/ https://*.akamaihd.net https://adobedc.demdex.net/ https://sync-transcend-cdn.com https://transcend-cdn.com/ https://telemetry.transcend.io/ https://telemetry.us.transcend.io/ https://privacyportal.onetrust.com/ https://api.bazaarvoice.com/ https://stg.api.bazaarvoice.com/; child-src 'self' blob: data:; upgrade-insecure-requests; x-build-reference: 1.18.18-1767848052 x-build-tag: prd-usbc-release-v1.18.18 x-next-i18n-router-locale: en-us x-middleware-rewrite: /en-us x-nextjs-cache: HIT etag: "x68nfq5czr25cbm" content-type: text/html; charset=utf-8 x-envoy-upstream-service-time: 247 server: istio-envoy x-costco-gdx-deployment: blue x-costco-gdx-backend: external-web-backend x-akamai-transformed: 9 - 0 pmb=mRUM,2 content-encoding: gzip expires: Tue, 20 Jan 2026 14:09:51 GMT cache-control: max-age=0, no-cache, no-store pragma: no-cache date: Tue, 20 Jan 2026 14:09:51 GMT vary: Accept-Encoding server-timing: cdn-cache; desc=HIT server-timing: edge; dur=1 set-cookie: akavpau_zezxapz5yf=1768918491~id=1a2f594b731d37459003655086e3480f; Domain=www.costco.com; Path=/; Secure; SameSite=None set-cookie: akaas_AS01=2147483647~rv=94~id=4f639723b04d44bcc33c900f9ee078e1; path=/; Secure; SameSite=None strict-transport-security: max-age=31536000;includeSubDomains set-cookie: bm_ss=ab8e18ef4e; Secure; SameSite=None; Domain=.costco.com; Path=/; HttpOnly; Max-Age=3600 set-cookie: _abck=C6E7ADF0141F11346F03832E1541423B~-1~YAAQjdcLF6QPVNebAQAAWo692w/amBQYoHQ0YRMaZLEQ/pOy5aD7lK/xEqCHQC71153t5aG+wltlab4O7Hve2zUwGUEq3tI1+RsiHqHFwTobIIsLrwF3x+SvNWA79LRvLeQD0WmhvSC1upaca0BEAjTDEFo8Rhj5C5ZXA4ydBziKYXPa+TfAD67cDwcWsoZMzKQwE2IBOiQz/z5i6P2sSEhfnTFXwDFYCB7w5DX5Dg8m1f1Zcv/czQqZUQpPAizIDuiyQrSLW00bnrrZ940D5qu26AkD1YBgNs+X7NAGok2OglMN0aEt8sZyTIosAUhyou+V5pwp7TVHo8NQIV6viyByXE9xXOy7OOQemcdmq3suqYfOM3E1fB1K9aFXe8JpFuVKGpypNhNyPzOTJ8SYubsVa9E/roUIe+YI4KvmtKQeWH1OPSCWm+PaxJ8epPpZnG36zgcMg0w=~-1~-1~-1~-1~-1; Domain=.costco.com; Path=/; Expires=Wed, 20 Jan 2027 14:09:51 GMT; Max-Age=31536000; Secure set-cookie: bm_s=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; Domain=.costco.com; Path=/; Expires=Fri, 20 Feb 2026 14:09:51 GMT; Max-Age=2678400; Secure; HttpOnly set-cookie: bm_so=0ABCE008BD1D20E54A4F7C7D411A144A44A06844CC503F6D0803201296D20A54~YAAQjdcLF6YPVNebAQAAWo692wZgaj62KO4HYw+ra+Y/0rdKvluoAbxaSrLaCxe9JP5rxNow1wGVjmShtBeWSwkFX65MLq1M63v9om7JRjMn4Av8lU4fB3VPYbbQcixN99W1AZfUNxvxpei8BjwzBRfNMgNsdzT6Fgm0UFQwiw/vA19rEagFcWH/pMjs6DCWQ4mWgpjvf6rJVOHQXPR473zLFTvCpvb+8wN0m8kcbKhQXPedCw55gg+irFDDepfZLrFb2QOrfu5QnffsXj8adSYERJP0gXlr95dIgq7izeoBVzXdQgt6mhpDImS+TEBT/c1rX141gqsC2eULNfZilUVlWjTr2WpGiSRkOzbic6F1gnTB+Y+OKagchMVMELao3SSwISd0Kivgyln8v9ckuUs2stKt1PTuhiIGkl4NmW0LewN6s45tXJ3lBRvAxiUKGGXp0l7y5d/tg0cgLCd/; Domain=.costco.com; Path=/; Expires=Wed, 21 Jan 2026 14:09:51 GMT; Max-Age=86400; Secure set-cookie: bm_sz=60DEF02FDD4F2E550E64A88FE684F10D~YAAQjdcLF6cPVNebAQAAWo692x6MJfNeuEjui2AQ++ALkgeSH41q4VaIrf2DWZVU+D9dYqB8RbBDjEPRpxGdSz/aSbL6PEACY7bXEIp7nDtpy7JE4H83IsXRK34njc2F+KLPBaI8WTvCfx1+pR2jR++unPLn57H3R76UrvomRduHkw5kjafqVGHj5CXFRMKcrXroBqrrj56o09eJQWgxYQIsZvtX+5976NpKx1EsotgbvYWFGYOHyhtnAWZonnFQ2Oua1WvnCVQ/kxwGAx6noKc0IMm6J+ibwQsXD/GjCUfKuHz9bZ7nvDDBqjmf3DtzTEJoyr63pAF1Qqlnj3ceGhCa5M6XoVMnwCpL31XqT9XSjnT/cIYy~4601156~4474181; Domain=.costco.com; Path=/; Expires=Tue, 20 Jan 2026 18:09:51 GMT; Max-Age=14400 server-timing: ak_p; desc="1768918191598_386652045_440831613_76_15007_8_7_15";dur=1