Myrexton.ca

date: Tue, 28 Oct 2025 07:45:01 GMT
content-type: text/html
content-length: 162
location: https://www.myrexton.ca
strict-transport-security: max-age=31536000; includeSubDomains

HTTP/2 302 
date: Tue, 28 Oct 2025 07:45:01 GMT
content-type: text/html; charset=UTF-8
content-length: 20
location: https://www.myrexton.ca/customer/account/login/referer/aHR0cHM6Ly93d3cubXlyZXh0b24uY2Ev/
set-cookie: PHPSESSID=ee1566145137e4bd0cbbc7d9e95e8eee; expires=Tue, 28 Oct 2025 08:45:01 GMT; Max-Age=3600; path=/; domain=www.myrexton.ca; secure; HttpOnly; SameSite=Lax
content-security-policy-report-only: font-src *.fontawesome.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com www.googletagmanager.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com geostag.cardinalcommerce.com geo.cardinalcommerce.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
content-encoding: gzip
vary: Accept-Encoding
x-magento-cache-debug: MISS
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
permissions-policy: accelerometer=(self), autoplay=(self), camera=(self), cross-origin-isolated=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), keyboard-map=(self), magnetometer=(self), microphone=(self), midi=(self), payment=(self), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=(self), usb=(self), web-share=(self), xr-spatial-tracking=(self), clipboard-read=*, clipboard-write=*, gamepad=*, hid=(self), idle-detection=(self), serial=(self), unload=(self)
content-security-policy: default-src 'self'; connect-src 'self' localhost:44382 *.doubleclick.net *.linkedin.com *.ic3.com *.cybersource.com *.salesforce-sites.com *.nr-data.net *.salesforce.com *.sst.memsi.com *.sst.mysignia.ca *.sst.mysigniausa.com *.sst.myrexton.ca *.sst.rexton.com *.demdex.net *.signiausa.com *.brandmovers.co *.aptrinsic.com *.google-analytics.com *.segment.com *.segment.io *.piwik.pro *.salesforce-sites.com *.salesforceliveagent.com *.rexton.com *.mysigniausa.com *.memsi.com *.myrexton.ca *.mysignia.ca *.sivantos.com *.google.com *.widex.com *.salesforce-scrt.com consent.trustarc.com; font-src 'self' *.gstatic.com *.trustarc.com *.force.com; frame-src 'self' *.livechatinc.com *.doubleclick.net *.force.com *.googletagmanager.com *.salesforce.com *.demdex.net *.google.com *.ic3.com *.cybersource.com *.trustarc.com *.vimeo.com *.microsoftstream.com *.youtube.com *.salesforce.com *.salesforce.com *.force.com *.salesforceliveagent.com *.salesforce-sites.com sst.memsi.com sst.myrexton.ca sst.mysignia.ca sst.mysigniausa.com *.rexton.com *.sivantos.com wsaud.my.site.com sst.mysigniausa.com consent-pref.trustarc.com; img-src 'self' *.sivantos.com *.linkedin.com *.googletagmanager.com *.google.fr *.google.com *.google.co.in *.everesttech.net *.omtrdc.net *.doubleclick.net *.google-analytics.com *.demdex.net *.widex.com *.trustarc.com *.signia-hearing.com *.widexpro.fr *.google.com *.google.dk data:; media-src 'self' *.livechatinc.com; object-src 'self' *.ic3.com *.cybersource.com; script-src 'self' *.gstatic.com *.force.com *.my.salesforce-sites.com *.google.com *.ic3.com *.licdn.com *.salesforceliveagent.com *.doubleclick.net *.mysigniausa.com *.cybersource.com *.googleapis.com *.livechatinc.com *.googletagmanager.com *.google-analytics.com *.adobedtm.com *.newrelic.com *.nr-data.net www3.mysigniausa.com *.salesforce.com *.aptrinsic.com *.trustarc.com *.segment.com *.piwik.pro *.force.com *.salesforce-sites.com *.salesforceliveagent.com *.memsi.com *.myrexton.ca *.mysignia.ca *.mysigniausa.com *.rexton.com *.sivantos.com wsaud.my.site.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.amasty.com *.googleapis.com *.aptrinsic.com *.my.salesforce-sites.com *.salesforce.com *.salesforce-sites.com *.force.com *.my.site.com 'unsafe-inline'; worker-src 'self' blob:;

HTTP/2 200 
date: Tue, 28 Oct 2025 07:45:01 GMT
content-type: text/html; charset=UTF-8
content-length: 33682
vary: Accept-Encoding
set-cookie: PHPSESSID=c6166930046752d4791181d5b470d701; expires=Tue, 28 Oct 2025 08:45:01 GMT; Max-Age=3600; path=/; domain=www.myrexton.ca; secure; HttpOnly; SameSite=Lax
set-cookie: show_shipto=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; SameSite=Lax
set-cookie: qrs=no-cached; path=/; domain=.www.myrexton.ca; secure; SameSite=Lax
login-required: true
content-security-policy-report-only: font-src *.fontawesome.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com www.googletagmanager.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com geostag.cardinalcommerce.com geo.cardinalcommerce.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
content-encoding: gzip
x-magento-cache-debug: MISS
pragma: no-cache
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: strict-origin-when-cross-origin
permissions-policy: accelerometer=(self), autoplay=(self), camera=(self), cross-origin-isolated=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), keyboard-map=(self), magnetometer=(self), microphone=(self), midi=(self), payment=(self), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(self), sync-xhr=(self), usb=(self), web-share=(self), xr-spatial-tracking=(self), clipboard-read=*, clipboard-write=*, gamepad=*, hid=(self), idle-detection=(self), serial=(self), unload=(self)
content-security-policy: default-src 'self'; connect-src 'self' localhost:44382 *.doubleclick.net *.linkedin.com *.ic3.com *.cybersource.com *.salesforce-sites.com *.nr-data.net *.salesforce.com *.sst.memsi.com *.sst.mysignia.ca *.sst.mysigniausa.com *.sst.myrexton.ca *.sst.rexton.com *.demdex.net *.signiausa.com *.brandmovers.co *.aptrinsic.com *.google-analytics.com *.segment.com *.segment.io *.piwik.pro *.salesforce-sites.com *.salesforceliveagent.com *.rexton.com *.mysigniausa.com *.memsi.com *.myrexton.ca *.mysignia.ca *.sivantos.com *.google.com *.widex.com *.salesforce-scrt.com consent.trustarc.com; font-src 'self' *.gstatic.com *.trustarc.com *.force.com; frame-src 'self' *.livechatinc.com *.doubleclick.net *.force.com *.googletagmanager.com *.salesforce.com *.demdex.net *.google.com *.ic3.com *.cybersource.com *.trustarc.com *.vimeo.com *.microsoftstream.com *.youtube.com *.salesforce.com *.salesforce.com *.force.com *.salesforceliveagent.com *.salesforce-sites.com sst.memsi.com sst.myrexton.ca sst.mysignia.ca sst.mysigniausa.com *.rexton.com *.sivantos.com wsaud.my.site.com sst.mysigniausa.com consent-pref.trustarc.com; img-src 'self' *.sivantos.com *.linkedin.com *.googletagmanager.com *.google.fr *.google.com *.google.co.in *.everesttech.net *.omtrdc.net *.doubleclick.net *.google-analytics.com *.demdex.net *.widex.com *.trustarc.com *.signia-hearing.com *.widexpro.fr *.google.com *.google.dk data:; media-src 'self' *.livechatinc.com; object-src 'self' *.ic3.com *.cybersource.com; script-src 'self' *.gstatic.com *.force.com *.my.salesforce-sites.com *.google.com *.ic3.com *.licdn.com *.salesforceliveagent.com *.doubleclick.net *.mysigniausa.com *.cybersource.com *.googleapis.com *.livechatinc.com *.googletagmanager.com *.google-analytics.com *.adobedtm.com *.newrelic.com *.nr-data.net www3.mysigniausa.com *.salesforce.com *.aptrinsic.com *.trustarc.com *.segment.com *.piwik.pro *.force.com *.salesforce-sites.com *.salesforceliveagent.com *.memsi.com *.myrexton.ca *.mysignia.ca *.mysigniausa.com *.rexton.com *.sivantos.com wsaud.my.site.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.amasty.com *.googleapis.com *.aptrinsic.com *.my.salesforce-sites.com *.salesforce.com *.salesforce-sites.com *.force.com *.my.site.com 'unsafe-inline'; worker-src 'self' blob:;