Oosha.co.uk

content-type: text/html; charset=UTF-8
location: https://www.theaccessgroup.com/en-gb/our-brands/oosha/?utm_source=website_migration&utm_medium=domain_redirect&utm_campaign=oosha_migration
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
strict-transport-security: max-age=31536000; includeSubDomains;
date: Fri, 12 Jul 2024 15:41:02 GMT
content-length: 270

HTTP/2 200 
date: Fri, 12 Jul 2024 15:41:02 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
content-security-policy-report-only: default-src 'self'; img-src 'self' *.ytimg.com t.co *.twitter.com *.onetrust.com *.calconic.com *.hotjar.com *.bing.com *.clarity.ms *.theaccessgroup.com accessgroup-website-v8-preview.azureedge.net accessgrouppreviewweb.azureedge.net accessgroupuatweb.azureedge.net accessgroupweb.azureedge.net cdn.jsdelivr.net id.rlcdn.com match.prod.bidr.io px.ads.linkedin.com px4.ads.linkedin.com segments.company-target.com *.blob.core.windows.net *.placeholder.com *.doubleclick.net www.google.co.uk www.google.com bat.bing.com www.google-analytics.com www.facebook.com www.google-analytics.com data: cdn.bizible.com *.visualwebsiteoptimizer.com chart.googleapis.com wingify-assets.s3.amazonaws.com app.vwo.com; script-src 'self' 'unsafe-inline' *.geoip-js.com geoip-js.com *.trustpilot.com *.onetrust.com *.calconic.com *.hotjar.com cdn-3.convertexperiments.com ucalc.pro *.clarity.ms *.ucalc.pro analytics.twitter.com npmcdn.com app-lon05.marketo.com pages.theaccessgroup.com tracker.gaconnector.com api.ipify.org bat.bing.com static.ads-twitter.com snap.licdn.com www.googleadservices.com connect.facebook.net tag.demandbase.com tags.srv.stackadapt.com snap.licdn.com www.google-analytics.com www.googleadservices.com www.youtube.com secure.perk0mean.com static.hotjar.com script.hotjar.com widget.surveymonkey.com googleads.g.doubleclick.net www.googletagmanager.com code.jquery.com cdnjs.cloudflare.com stackpath.bootstrapcdn.com cdn.jsdelivr.net munchkin.marketo.net cdn.bizible.com *.visualwebsiteoptimizer.com app.vwo.com; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' *.googletagmanager.com *.onetrust.com widget.trustpilot.com *.convertexperiments.com munchkin.marketo.net cdn.bizible.com *.visualwebsiteoptimizer.com app.vwo.com connect.facebook.net *.facebook.net *.ads-twitter.com *.ipify.org *.demandbase.com; style-src 'self' 'unsafe-inline' *.salesforce.com *.calconic.com *.ucalc.pro tags.srv.stackadapt.com app-lon05.marketo.com cdn.jsdelivr.net fonts.googleapis.com cdnjs.cloudflare.com pro.fontawesome.com use.typekit.net p.typekit.net *.visualwebsiteoptimizer.com app.vwo.com s3.amazonaws.com; font-src 'self' data: *.typekit.net *.hotjar.com cdn.jsdelivr.net fonts.gstatic.com cdnjs.cloudflare.com pro.fontawesome.com; worker-src 'self' blob:; connect-src *.geoip-js.com geoip-js.com *.demandbase.com *.onetrust.com *.calconic.com *.hotjar.com *.hotjar.io *.clarity.ms *.mktoresp.com in.hotjar.com api.company-target.com tags.srv.stackadapt.com bat.bing.com www.google-analytics.com stats.g.doubleclick.net connect.facebook.net; frame-src *.salesforce.com *.ucalc.pro vars.hotjar.com app-lon05.marketo.com www.youtube.com player.vimeo.com www.facebook.com *.doubleclick.net app.vwo.com *.visualwebsiteoptimizer.com *.trustpilot.com;
permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
x-frame-options: SAMEORIGIN
last-modified: Fri, 12 Jul 2024 12:57:45 GMT
cf-cache-status: HIT
age: 0
expires: Fri, 12 Jul 2024 19:41:02 GMT
server: cloudflare
cf-ray: 8a22229c89e010ea-ORD
content-encoding: br