Firstgroup.co.uk

date: Wed, 19 Mar 2025 04:00:03 GMT
content-type: text/html; charset=iso-8859-1
content-length: 235
location: https://www.firstbus.co.uk/
set-cookie: AWSALB=0gBy9/6hGE47nbl4S91vLcwhjB3TyhHEyLKRWM52IeiBxhfGyNHp4ZbA6Orj0bmDwxuc4beZBUov7qGKH3JvoIZgP835Zb+dk+OGYjoROieD+dIpwayCPa+Y7iv/; Expires=Wed, 26 Mar 2025 04:00:03 GMT; Path=/
set-cookie: AWSALBCORS=0gBy9/6hGE47nbl4S91vLcwhjB3TyhHEyLKRWM52IeiBxhfGyNHp4ZbA6Orj0bmDwxuc4beZBUov7qGKH3JvoIZgP835Zb+dk+OGYjoROieD+dIpwayCPa+Y7iv/; Expires=Wed, 26 Mar 2025 04:00:03 GMT; Path=/; SameSite=None; Secure
server: Apache
strict-transport-security: max-age=63072000; includeSubdomains; preload
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
cache-control: max-age=1209600
expires: Wed, 02 Apr 2025 04:00:03 GMT

HTTP/2 200 
date: Wed, 19 Mar 2025 04:00:04 GMT
content-type: text/html; charset=UTF-8
content-length: 12527
set-cookie: AWSALB=TP9VyHfybhgcfqr06opZeRUn254o4cWMnlb7BYcaO/gkZn88KZzj1FY5CpyXvoMDZ3Gt4dzb1m1FoOD+BnGFGdb+cc/9Wsli66qwrvkff2kN3dR6hZ4Ca4nX2Hpi; Expires=Wed, 26 Mar 2025 04:00:03 GMT; Path=/
set-cookie: AWSALBCORS=TP9VyHfybhgcfqr06opZeRUn254o4cWMnlb7BYcaO/gkZn88KZzj1FY5CpyXvoMDZ3Gt4dzb1m1FoOD+BnGFGdb+cc/9Wsli66qwrvkff2kN3dR6hZ4Ca4nX2Hpi; Expires=Wed, 26 Mar 2025 04:00:03 GMT; Path=/; SameSite=None; Secure
server: Apache
cache-control: must-revalidate, no-cache, private
x-drupal-dynamic-cache: UNCACHEABLE (poor cacheability)
content-language: en
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
expires: Sun, 19 Nov 1978 05:00:00 GMT
x-generator: Drupal 10 (https://www.drupal.org)
vary: Origin,X-Forwarded-Proto,Accept-Encoding
strict-transport-security: max-age=63072000; includeSubdomains; preload
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
content-encoding: gzip
content-security-policy: default-src 'self' 'unsafe-inline' *.googleusercontent.com https://unpkg.com https://www.firstbus.co.uk *.gstatic.com *.google.co.uk *.facebook.com *.googleapis.com *.hotjar.com *.unpkg.com *.tiktok.com *.googleadservices.com *.twitter.com *.youtube.com *.google-analytics.com *.google.com *.googletagmanager.com *.cookiepro.com *.doubleclick.net *.cloudflare.com *.t.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.veritonic.com *.cardinalcommerce.com *.paypalobjects.com *.paypal.com *.comcarde.com *.vimeo.com https://unpkg.com/@googlemaps/markerclustererplus/dist/index.min.js https://unpkg.com/@googlemaps/markerclustererplus@1.2.10/dist/index.min.js *.unpkg.com https://unkpkg.com https://www.google.co.uk *.gstatic.com *.googleapis.com *.hotjar.com *.ads-twitter.com *.unpkg.com *.tiktok.com *.googleadservices.com *.google-analytics.com *.google.com *.jsdelivr.net *.googletagmanager.com *.cookiepro.com cdn.cookielaw.org *.onetrust.com *.doubleclick.net *.cloudflare.com js.braintreegateway.com assets.braintreegateway.com www.paypalobjects.com c.paypal.com api.braintreegateway.com www.paypalobjects.com client-analytics.braintreegateway.com; style-src 'self' 'unsafe-inline' *.cloudflare.com *.jsdelivr.net *.unpkg.com *.jquery.com assets.braintreegateway.com *.hotjar.com; img-src 'self' 'unsafe-inline' data: *.paypalobjects.com https://adservice.google.com *.google.com https://www.google.com *.gstatic.com *.google.gg *.google.bs *.google.tn *.google.hn *.google.com.om *.google.com.ag *.google.com.ng *.googleusercontent.com *.google.com.gi *.google.es *.google.com.mx *.google.dk *.google.is *.google.me *.google.com.co *.google.com.ec *.firstbus.co.uk *.googletagmanager.com *.google.ad *.google.hu *.google.gy *.google.co.bw *.google.com.lb *.google.ca *.google.com.hk *.google.mg *.google.co.ma *.google.jo *.google.com.qa *.google.com.pr *.google.im *.google.fr *.facebook.com *.google.cz *.google.cl *.google.co.in *.google.com.sa *.google.com.bd *.google.pt *.google.nl *.google-analytics.com *.google.co.th *.google.lv *.google.com.ph *.cookiepro.com *.firstgroup.com *.google.no *.google.co.id *.google.be *.google.com.sg *.google.co.kr *.google.sk *.google.gr *.google.com.tr *.google.co.tz *.google.com.au *.google.lk *.google.com.my *.google.kg *.ytimg.com *.google.kz *.google.rs *.google.lu *.google.com.eg *.google.pl *.google.com.mt *.google.com.cy *.google.mv *.google.com.jm *.google.cv *.twitter.com *.google.bg *.google.fi *.google.com.ar *.google.ee *.google.com.gh *.google.co.jp *.doubleclick.net *.google.cn *.google.ae *.google.com.et *.google.ru *.google.com.bo *.google.je *.google.com.pe *.google.ch *.google.se *.google.ro *.google.co.nz *.plusbus.info *.google.co.uk *.google.hr *.google.com.tw *.google.it *.paypal.com *.google.com.np *.googleapis.com *.google.cm *.google.com.br *.google.co.za *.google.dm *.google.com.kw *.google.mk *.google.com.pk *.google.tt *.google.co.ke *.google.com.bh *.google.lt *.google.com.bn *.google.at *.google.ie *.google.de *.t.co *.google.si *.google.lv assets.braintreegateway.com checkout.paypal.com *.thisisdax.com *.hotjar.com; style-src-elem 'self' 'unsafe-inline' assets.braintreegateway.com cdn.jsdelivr.net *.googleapis.com https://unpkg.com https://cdnjs.cloudflare.com *.gstatic.com; frame-src * 'self' 'unsafe-inline'; font-src * 'self' 'unsafe-inline' https://*.hotjar.com; connect-src 'self' 'unsafe-inline' *.veritonicmetrics.com *.google-analytics.com https://pagead2.googlesyndication.com https://www.google.com wss://*.hotjar.com https://*.hotjar.io https://*.hotjar.com *.google-analytics.com https://region1.google-analytics.com *.google-analytics.com *.google.co.uk *.cardinalcommerce.com *.paypal.com *.braintree-api.com *.braintreegateway.com *.comcarde.com *.cookiepro.com cdn.cookielaw.org *.onetrust.com https://www.facebook.com *.analytics.google.com https://stats.g.doubleclick.net https://www.google-analytics.com https://maps.googleapis.com *.google.rs *.google.be *.google.ae *.google.gg *.google.com.om *.google.com.gi *.google.es *.google.com.mx *.google.dk *.google.com.co *.googletagmanager.com *.google.hu *.google.co.bw *.google.ca *.google.com.hk *.google.im *.google.fr *.linkedin.com api.braintreegateway.com client-analytics.braintreegateway.com *.braintree-api.com;
permissions-policy: geolocation=self, fullscreen=self, sync-xhr=self, microphone=self, camera=self, magnetometer=self, gyroscope=self, speaker=self, vibrate=self, payment=self, accelerometer=self; form-action *; child-src assets.braintreegateway.com c.paypal.com