oroweat.ca Review

 N/A

HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Sat, 23 Aug 2025 05:13:14 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://oroweat.ca:443/

HTTP/1.1 301 Moved Permanently
Date: Sat, 23 Aug 2025 05:13:15 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 231
Connection: keep-alive
Server: Apache
Strict-Transport-Security: max-age=15552000
Location: https://www.oroweat.ca/

HTTP/1.1 200 OK
Date: Sat, 23 Aug 2025 05:13:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: Apache
Cache-Control: max-age=900, public
X-UA-Compatible: IE=edge
Content-language: en
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Vary: Cookie
X-Generator: Drupal 9 (https://www.drupal.org)
Content-Security-Policy: default-src 'self' ; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.consumercare.net *.crazyegg.com *.facebook.com *.facebook.net *.force.com *.formstack.com *.gstatic.com *.gtm.js *.mousestats.com *.pinimg.com *.pinterest.com *.salesforce.com *.salesforceliveagent.com *.tiktok.com assets.juicer.io bbusf.my.site.com cdn.cookielaw.org cdn.jsdelivr.net cdnjs.cloudflare.com facebook.net fonts.googleapis.com maps.googleapis.com maxcdn.bootstrapcdn.com old.csp.com sc-static.net unpkg.com www.google-analytics.com www.google.com www.googletagmanager.com; style-src 'self' 'unsafe-inline' *.bootstrapcdn.com *.force.com *.formstack.com *.googleapis.com *.gstatic.com *.jsdelivr.net *.salesforce.com assets.juicer.io bbusf.my.site.com cdnjs.cloudflare.com unpkg.com; img-src 'self' *.adnxs.com *.adsrvr.org *.cdninstagram.com *.cookielaw.org *.doubleclick.net *.facebook.com *.fbcdn.net *.formstack.com *.google.be *.google.bf *.google.bs *.google.ca *.google.ch *.google.cl *.google.co.il *.google.co.in *.google.co.ma *.google.co.nz *.google.co.th *.google.co.uk *.google.co.ve *.google.co.za *.google.co.zm *.google.com.ar *.google.com.au *.google.com.bd *.google.com.br *.google.com.cy *.google.com.do *.google.com.eg *.google.com.jm *.google.com.mx *.google.com.my *.google.com.ng *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.sg *.google.com.tr *.google.de *.google.dz *.google.es *.google.fr *.google.hr *.google.hu *.google.ie *.google.lt *.google.mk *.google.nl *.google.ro *.google.si *.google.tn *.google.tt *.googleapis.com *.googletagmanager.com *.gstatic.com *.jsdelivr.net *.juicer.io cscoreproweustor.blob.core.windows.net ct.pinterest.com data: translate.google.com trkn.us www.google-analytics.com www.google.com; frame-src 'self' *.doubleclick.net *.facebook.com *.force.com *.googletagmanager.com *.pinterest.com *.salesforce.com *.salesforceliveagent.com bbusf.my.site.com www.google.com www.youtube.com; frame-ancestors 'self' jira.millenniumweb.com; font-src 'self' *.alicdn.com *.cdnfonts.com *.formstack.com *.simplycodes.com *.slant.co *.tql.com *.typekit.net *.zip.co assets.merci-app.com data: fonts.gstatic.com maxcdn.bootstrapcdn.com sc-static.net static.juicer.io; connect-src 'self' *.bootstrapcdn.com *.clean.gg *.cookielaw.org *.doubleclick.net *.facebook.com *.fonts.net *.force.com *.google-analytics.com *.google.be *.google.bf *.google.ca *.google.ch *.google.co.il *.google.co.ma *.google.co.nz *.google.co.ve *.google.co.zm *.google.com *.google.com.au *.google.com.bd *.google.com.cy *.google.com.eg *.google.com.pr *.google.com.sg *.google.dz *.google.fr *.google.hr *.google.hu *.google.ie *.google.lt *.google.mk *.google.ro *.google.si *.google.tn *.googleapis.com *.googletagmanager.com *.juicer.io *.onetrust.com *.pricespider.com *.salesforce.com *.salesforceliveagent.com *.unpkg.com analytics.tiktok.com bbusf.my.site.com cdnjs.cloudflare.com cloud.typography.com ct.pinterest.com streaming.split.io unpkg.com; report-uri https://gbnareports.report-uri.com/r/t/csp/enforce; upgrade-insecure-requests
Set-Cookie: SSESS2c0e0c0ae6f6a3bfa0410891fd7e07e9=TpRXtgGR112T2Uov2iA2PkiAkMRlo14kx9AIqSRePNLn%2CrYJ; expires=Mon, 15-Sep-2025 08:46:36 GMT; Max-Age=2000000; path=/; domain=.www.oroweat.ca; secure; HttpOnly
Strict-Transport-Security: max-age=15552000
Last-Modified: Sat, 23 Aug 2025 05:13:15 GMT
ETag: "1755925995"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' 'self' data: 'self' blob: 'unsafe-inline' 'unsafe-eval' *; img-src 'self' blob: data: *
X-Content-Security-Policy: default-src 'self' 'self' data: 'self' blob: 'unsafe-inline' 'unsafe-eval' *; img-src 'self' blob: data: *
Cache-Control: no-store
Pragma: no-cache