HTTP/1.1 200 OK
Date: Sat, 12 Dec 2020 12:18:32 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Vary: Accept-Encoding
Vary: Accept-Encoding
Pragma: no-cache
Set-Cookie: ASP.NET_SessionId=eggvxcp2dxbtvdfzec0mzvdw; path=/; HttpOnly; SameSite=Lax
Set-Cookie: SC_ANALYTICS_GLOBAL_COOKIE=419ddd3b601844c2bc87e1f3d906eb5d|False; expires=Tue, 10-Dec-2030 12:18:31 GMT; path=/; HttpOnly
Content-Security-Policy: default-src 'none'; connect-src *.ap-southeast-2.amazonaws.com *.mynrma.com.au *.mynrma.com.au:* *.thrifty.com.au *.thrifty.com.au:* *.nr-data.net *.newrelic.com *.google.com *.gstatic.com *.everydaygiftcards.com.au *.feefo.com *.googleapis.com *.google-analytics.com *.crazyegg.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com; font-src https://fonts.gstatic.com https://fonts.googleapis.com *.stackla.com *.rokt.com 'self' data: http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io; img-src blob: data: https: *.google-analytics.com *.mynrma.com.au http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://optimize.google.com/ ; script-src *.mynrma.com.au *.thrifty.com.au *.newrelic.com *.googletagmanager.com  *.google.com *.google.com.au *.gstatic.com *.google-analytics.com *.googleapis.com *.nr-data.net *.facebook.net *.plavxml.com *.doubleclick.net *.stackla.com  *.rokt.com *.quantcount.com *.crazyegg.com *.zencdn.net https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtm.js https://js-agent.newrelic.com/nr-spa-1118.min.js https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/vJuUWXolyYJx1oqUVmpPuryQ/recaptcha__en.js https://www.googleadservices.com/pagead/conversion_async.js https://connect.facebook.net/en_US/fbevents.js https://bat.bing.com/bat.js https://vxml4.plavxml.com/sited/ref/ctrk/139 https://everydaygiftcards.com.au/media/javascript/member/members_v1.js https://polyfill.io/v3/polyfill.min.js https://giftcards.woolworths.com.au/medias/members-v1.js https://script.crazyegg.com/pages/scripts/0013/7505.js https://secure.quantserve.com/quant.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://optimize.google.com/ https://api.feefo.com https://register.feefo.com 'unsafe-inline' blob: data: 'self' http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io 'unsafe-eval' 'unsafe-inline';style-src https://tagmanager.google.com/ https://optimize.google.com/ https://fonts.googleapis.com/ 'unsafe-inline' 'self';frame-src https://open.spotify.com/ *.mynrma.com.au *.thrifty.com.au *.doubleclick.net  *.rokt.com https://www.google.com https://4315425.fls.doubleclick.net https://www.apollocamper.com/ https://www.facebook.com/ https://www.racq.com.au/ https://widget.stackla.com/ https://www.youtube.com/ https://www.google.com.au/ https://www.roadtripforgood.org.au/ https://old.apollocamper.com/ https://evexperience.evenergi.com/ https://www.mynrma.com.au https://www.thrifty.com.au http://www.mynrma.com.au http://www.thrifty.com.au https://www.nrmasaferdriving.com.au *.stackla.com *.nsw.gov.au *.virginaustralia.com *.my-voice.com.au  'self' https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://optimize.google.com/ ; frame-ancestors 'self';base-uri 'self'; form-action *.mynrma.com.au *.mynrma.com.au:* *.thrifty.com.au *.thrifty.com.au:* *.securepay.com.au  *.rokt.com https://giftcards.woolworths.com.au/memberRedirect https://www.facebook.com/ https://www.racq.com.au/ https://widget.stackla.com/ https://www.youtube.com/ https://www.google.com.au/ https://www.roadtripforgood.org.au/ https://old.apollocamper.com/ https://evexperience.evenergi.com/ https://www.mynrma.com.au https://www.thrifty.com.au http://www.mynrma.com.au http://www.thrifty.com.au https://www.nrmasaferdriving.com.au *.stackla.com *.paypal.com 'self';
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
referrer-policy: same-origin
section-io-origin-status: 200
section-io-origin-time-seconds: 0.737
section-origin-responded: true
X-Request-ID: 9d74155bc745219de824f427aae09f34
X-Page-Speed: 1.9.32.14-0
Cache-Control: max-age=0, no-cache, no-store
X-Varnish: 3444857
Age: 0
Via: 1.1 varnish (Varnish/5.2)
X-Test: Welcome to Thrifty
section-io-cache: Miss
Accept-Ranges: bytes
section-io-id: f2824861a62aa5ed22ea2acb54970a88