thg.com Review

 N/A

HTTP/1.1 301 redirect
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://www.thg.com/
Accept-Ranges: bytes
Date: Sat, 14 Mar 2026 00:16:10 GMT
Via: 1.1 varnish
X-Served-By: cache-nrt-rjtf7700092-NRT
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1773447370.866906,VS0,VE301
X-Entrypoint-Redirected: true
X-Entrypoint-Rewritten: false
x-altitude-cache: 1=MISS
Strict-Transport-Security: max-age=31557600

HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 27442
content-type: text/html
x-content-type-options: nosniff
content-encoding: br
content-security-policy: base-uri 'self'; default-src 'self' https://fcdn.thg-corporate.com/; connect-src 'self' https://*.google-analytics.com https://*.google.com https://*.onetrust.com https://cdn.cookielaw.org https://cdnjs.cloudflare.com https://cookie-cdn.cookiepro.co https://css.zohocdn.com https://ddlnk.net https://salesiq.zoho.eu https://salesiq.zohopublic.eu https://stats.g.doubleclick.net https://vimeo.com https://vts.zohopublic.eu https://www.facebook.com wss://vts.zohopublic.eu; frame-ancestors 'none'; font-src 'self' data: https://cdn.jsdelivr.net https://css.zohocdn.com https://css.zohostatic.eu https://fcdn.thg-corporate.com https://fonts.googleapis.com https://fonts.gstatic.com; frame-src 'self' https://*.facebook.com https://*.google.com https://*.googletagmanager.com https://*.vimeocdn.com https://bugcrowd.com https://ddlnk.net https://ir.design-portfolio.co.uk https://js.stripe.com https://player.vimeo.com https://recaptcha.google.com/recaptcha/ https://www.google.com/recaptcha/; img-src 'self' data: https://*.google-analytics.com https://*.thcdn.com https://cdn.cookielaw.org https://fcdn.thg-corporate.com https://salesiq.zohopublic.eu https://www.facebook.com https://www.googletagmanager.com; child-src 'self'; script-src 'self' 'nonce-34c10c0394538ac9be70b4073cd2575e' 'unsafe-inline' 'strict-dynamic' https://*.google-analytics.com https://*.google.com https://cdn.cookielaw.org https://checkout.stripe.com https://connect.facebook.net https://cookie-cdn.cookiepro.co https://ddlnk.net https://js.stripe.com https://js.zohocdn.com https://salesiq.zoho.eu https://www.google.com/recaptcha/ https://www.googletagmanager.com https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' data: https://fonts.googleapis.com https://fcdn.thg-corporate.com/ https://css.zohocdn.com https://css.zohostatic.eu; style-src-attr 'self' 'unsafe-inline'; object-src 'none'; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://*.google-analytics.com https://*.google.com https://*.gstatic.com https://cdn.cookielaw.org https://connect.facebook.net https://cookie-cdn.cookiepro.co https://js.stripe.com https://js.zohocdn.com https://js.zohostatic.eu https://salesiq.zoho.eu https://www.googletagmanager.com https://www.gstatic.com; worker-src 'none'; media-src 'self' https://fcdn.thg-corporate.com https://blogscdn.thehut.net https://*.gstatic.com; report-uri https://csp.thehut.net/cspReport.txt; report-to csp-endpoint
x-frame-options: DENY
referrer-policy: strict-origin-when-cross-origin
cache-control: s-maxage=7200
reporting-endpoints: csp-endpoint="https://csp.thehut.net/cspReport.txt"
server: cloudflare
x-xss-protection: 1; mode=block
cf-ray: 9dbecc136a2ab33d-MAN
Via: 1.1 varnish, 1.1 varnish
Fastly-Restarts: 2
Accept-Ranges: bytes
Age: 3052
Date: Sat, 14 Mar 2026 00:16:11 GMT
X-Served-By: cache-man4161-MAN, cache-man4161-MAN, cache-nrt-rjtf7700045-NRT
X-Cache: MISS, HIT, MISS
X-Cache-Hits: 0, 32, 0
Vary: Accept-Encoding
X-Entrypoint-Redirected: false
X-Entrypoint-Rewritten: false
x-altitude-cache: 1=MISS,2=MISS
Strict-Transport-Security: max-age=31557600
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400