Crownroyal.com

cache-control: public, max-age=0, must-revalidate
content-type: text/plain
date: Thu, 03 Oct 2024 05:30:52 GMT
location: https://www.crownroyal.com/
refresh: 0;url=https://www.crownroyal.com/
server: Vercel
strict-transport-security: max-age=63072000
x-vercel-id: cle1::f9fbl-1727933452697-2570aec80d73

HTTP/2 200 
access-control-allow-origin: ddp-crownroyal-7d4qkuzhm-diageo.vercel.app
age: 1537
cache-control: public, max-age=0, must-revalidate
content-encoding: br
content-security-policy: default-src 'self';    script-src 'self' 'unsafe-eval' 'unsafe-inline' cdn-ukwest.onetrust.com footer.diageohorizon.com code.jquery.com where-to-buy.co va.vercel-scripts.com https://vercel.live diageoagegate.diageoplatform.com web.diageoagegate.com www.diageoagegate.com www.google.com www.gstatic.com www.googletagmanager.com *.vimeocdn.com www.google-analytics.com https://www.youtube.com js.monitor.azure.com https://www.facebook.com https://connect.facebook.net cdn.debugbear.com cdnjs.cloudflare.com bat.bing.com js.adsrvr.org *.treasuredata.com widget.freshworks.com api.mapbox.com;    style-src 'self' 'unsafe-inline' https://vercel.live footer.diageohorizon.com player.vimeo.com *.freshworks.com;    img-src 'self' blob: data: images.ctfassets.net i.vimeocdn.com cdn-ukwest.onetrust.com vercel.com www.google-analytics.com ad.doubleclick.net www.googletagmanager.com https://www.facebook.com crownroyal.diageoplatform.com media.diageocms.com media.diageodam.com media-diageocms.diageoplatform.com www.drinkiq.com www.diageoagegate.com xpixel.quantserve.com insight.adsrvr.org/ *.cloudfunctions.net bat.bing.com *.freshworks.com;    media-src 'self' assets.ctfassets.net videos.ctfassets.net player.vimeo.com vod-progressive.akamaized.net download-video.akamaized.net player.vimeo.com;    connect-src 'self' https://cdn.contentful.com images.ctfassets.net footer.diageohorizon.com player.vimeo.com vimeo.com *.vimeocdn.com cdn-ukwest.onetrust.com geolocation.onetrust.com privacyportal-uk.onetrust.com privacyportal-uk.onet vercel.live *.google.com *.analytics.google.com *.google-analytics.com https://googleads.g.doubleclick.net wss://ws-us3.pusher.com/ https://sockjs-us3.pusher.com api.mapbox.com events.mapbox.com *.debugbear.com *.doubleclick.net *.freshworks.com *.freshdesk.com;    font-src 'self' data: fonts.gstatic.com;    worker-src blob: ;    object-src 'self' blob: ;    base-uri 'self';    form-action 'self' *.r2sndr.com;    frame-src vercel.live google.com www.google.com where-to-buy.co *.doubleclick.net player.vimeo.com insight.adsrvr.org;    frame-ancestors 'none';    block-all-mixed-content;    upgrade-insecure-requests;
content-type: text/html; charset=utf-8
date: Thu, 03 Oct 2024 05:05:15 GMT
etag: W/"165i81tbxmf6qcb"
permissions-policy: interest-cohort=()
referrer-policy: origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=63072000
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-matched-path: /[locale]/[[...slug]]
x-robots-tag: all
x-vercel-cache: HIT
x-vercel-id: cle1::iad1::6b86l-1727933452762-f9b87a27ecbf
x-xss-protection: 1; mode=block