Thetimbergroup.co.uk

Date: Sun, 07 Sep 2025 22:25:10 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Content-Security-Policy: default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ctnsnet.com consentag.eu unpkg.com embed.typeform.com *.data-crypt.com *.cookielaw.org *.usercentrics.eu *.onetrust.com *.clarity.ms *.bing.com *.prommt.com *.jsdelivr.net *.force24.co.uk *.cloudflare.com *.datatables.net googleads.g.doubleclick.net *.googleadservices.com *.googletagmanager.com connect.facebook.net static.ads-twitter.com analytics.twitter.com *.globalsign.com snap.licdn.com corgidirect.activehosted.com d3rxaij56vjege.cloudfront.net trackcmp.net static.addtoany.com *.data-crypt.com *.hotjar.com *.parliament-hill.co.uk *.parliament-hill.net https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com *.google-analytics.com blob:; img-src 'self' *.ctnsnet.com consentag.eu *.usercentrics.eu embed.typeform.com https://*.googleapis.com https://*.gstatic.com *.googletagmanager.com *.cookielaw.org *.onetrust.com *.ytimg.com *.clarity.ms *.bing.com *.huwsgray.co.uk t.co *.t.co *.data-crypt.com analytics.twitter.com *.google.com *.google.co.uk *.googleusercontent.com *.facebook.com *.linkedin.com data:; frame-src 'self' *;  connect-src 'self' *.ctnsnet.com consentag.eu *.usercentrics.eu *.googlesyndication.com *.data-crypt.com *.linkedin.com *.onetrust.com *.clarity.ms c.bing.com *.google-analytics.com *.oribi.io *.doubleclick.net *.hotjar.com *.hotjar.io *.facebook.com https://*.googleapis.com *.google.com https://*.gstatic.com *.linkedin.com data: blob:; font-src 'self' fonts.gstatic.com;  style-src 'self' 'unsafe-inline' embed.typeform.com *.clarity.ms c.bing.com *.prommt.com *.googletagmanager.com *.jsdelivr.net *.datatables.net *.jquery.com *.parliament-hill.co.uk https://fonts.googleapis.com;  worker-src blob:;
Location: https://www.thetimbergroup.co.uk/
X-Server-Host: www2
Content-Length: 0
Content-Type: text/html; charset=UTF-8

HTTP/1.1 200 OK
Date: Sun, 07 Sep 2025 22:25:10 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
P3P: CP="CURa ADMa DEVa CONa OUR DEL IND PHY ONL PUR NAV UNI COM NID DSP CAO COR"
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: sid=noie1krd98alvdg1vg31ubub95; path=/; domain=thetimbergroup.co.uk; secure; HttpOnly
Set-Cookie: PriceVat-Setting=INC; expires=Mon, 07 Sep 2026 22:25:10 GMT; Max-Age=31536000; path=/; secure
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Content-Security-Policy: default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ctnsnet.com consentag.eu unpkg.com embed.typeform.com *.data-crypt.com *.cookielaw.org *.usercentrics.eu *.onetrust.com *.clarity.ms *.bing.com *.prommt.com *.jsdelivr.net *.force24.co.uk *.cloudflare.com *.datatables.net googleads.g.doubleclick.net *.googleadservices.com *.googletagmanager.com connect.facebook.net static.ads-twitter.com analytics.twitter.com *.globalsign.com snap.licdn.com corgidirect.activehosted.com d3rxaij56vjege.cloudfront.net trackcmp.net static.addtoany.com *.data-crypt.com *.hotjar.com *.parliament-hill.co.uk *.parliament-hill.net https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com *.google-analytics.com blob:; img-src 'self' *.ctnsnet.com consentag.eu *.usercentrics.eu embed.typeform.com https://*.googleapis.com https://*.gstatic.com *.googletagmanager.com *.cookielaw.org *.onetrust.com *.ytimg.com *.clarity.ms *.bing.com *.huwsgray.co.uk t.co *.t.co *.data-crypt.com analytics.twitter.com *.google.com *.google.co.uk *.googleusercontent.com *.facebook.com *.linkedin.com data:; frame-src 'self' *;  connect-src 'self' *.ctnsnet.com consentag.eu *.usercentrics.eu *.googlesyndication.com *.data-crypt.com *.linkedin.com *.onetrust.com *.clarity.ms c.bing.com *.google-analytics.com *.oribi.io *.doubleclick.net *.hotjar.com *.hotjar.io *.facebook.com https://*.googleapis.com *.google.com https://*.gstatic.com *.linkedin.com data: blob:; font-src 'self' fonts.gstatic.com;  style-src 'self' 'unsafe-inline' embed.typeform.com *.clarity.ms c.bing.com *.prommt.com *.googletagmanager.com *.jsdelivr.net *.datatables.net *.jquery.com *.parliament-hill.co.uk https://fonts.googleapis.com;  worker-src blob:;
Vary: Accept-Encoding
Content-Encoding: gzip
X-Server-Host: www2
Content-Length: 33750
Content-Type: text/html; charset=UTF-8