Firstdirect.co.uk

Location: http://www.firstdirect.com/
Connection: Keep-Alive
Content-Length: 0

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 09 Apr 2023 16:00:12 GMT
Content-Type: text/html
Content-Length: 167
Connection: close
Location: https://www.firstdirect.com/
X-Cache: Redirect from cloudfront
Via: 1.1 06388d8aa1fcdc8ac88535f3432f5dfe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ORD53-C1
X-Amz-Cf-Id: UjE3nxUjFbb_Enlv7DxbE6dR0EuZfzJT9ZxiKc5NdXaGFMnQEUWcAA==

HTTP/2 200 
content-type: text/html; charset=utf-8
content-length: 10053
date: Sun, 09 Apr 2023 16:00:12 GMT
server: Apache
strict-transport-security: max-age=31536000; includeSubdomains
content-security-policy: default-src 'self' *.hsbc.com.hk; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.tiqcdn.com *.tealiumiq.com *.liveperson.net *.googletagmanager.com *.hsbc.co.uk *.hsbc.com.hk *.doubleclick.net *.googleadservices.com *.lpsnmedia.net *.optimizely.com *.facebook.net *.google.com *.gstatic.com *.appdynamics.com *.googleapis.com *.awswaf.com aax-eu.amazon-adsystem.com bat.bing.com s.amazon-adsystem.com players.brightcove.net *.amazon-adsystem.com lo.v.liveperson.net googleads.g.doubleclick.net connect.facebook.net www.googleadservices.com lptag.liveperson.net accdn.lpsnmedia.net lpcdn.lpsnmedia.net tags.tiqcdn.com www.googletagmanager.com www.google-analytics.com *.mcmprod.hsbc.co.uk ssl.google-analytics.com www.firstdirect.com t.contentsquare.net app.contentsquare.com tt.omtrdc.net *.sc.omtrdc.net *.demdex.net *.twitter.com t.co *.walkme.com *.omguk.com *.adsrvr.org cliveperson.com *.contentsquare.com *.qualtrics.com *.quantserve.com *.outbrain.com *.taboola.com *.vjs.zencdn.net www.mcmprod.hsbc.co.uk vjs.zencdn.net cdn.optimizely.com; img-src data: * blob:; connect-src 'self' *.tiqcdn.com *.tealiumiq.com *.hsbc.com.hk *.eum-appdynamics.com *.optimizely.com wss://*.liveperson.net *.cloud.hsbc *.awswaf.com *.hsbc.co.uk *.appdynamics.com *.we-stats.com bat.bing.com *.siteintercept.qualtrics.com adservice.google.com www.facebook.com http://127.0.0.1:5000 http://127.0.0.1:5000/* *.brightcovecdn.com edge.api.brightcove.com www.google.com www.firstdirect.com www.googletagmanager.com ad.doubleclick.net cdnbc-wup.firstdirect.com *.analytics.google.com akamai.tiqcdn.com www.google-analytics.com collect.tealiumiq.com r.contentsquare.net c.contentsquare.net analytics.google.com *.mcmprod.hsbc.co.uk *.tt.omtrdc.net *.sc.omtrdc.net *.demdex.net *.liveperson.net *.google.com *.walkme.com pixel.everesttech.net *.contentsquare.com *.qualtrics.com rbwm-api.us.hsbc.com rbwm-api.hsbc.co.uk rbwm-api.hsbc.com.hk manifest.prod.boltdns.net translate.googleapis.com lpcdn.lpsnmedia.net stats.g.doubleclick.net www.google.co.uk; frame-src 'self' blob: *.lpsnmedia.net *.optimizely.com *.liveperson.net *.google.com *.doubleclick.net cdntm.firstdirect.com www.facebook.com www.youtube.com 8071237.fls.doubleclick.net *.demdex.net *.walkme.com liveperson.com *.qualtrics.com; frame-ancestors 'self' www.firstdirect.com; font-src 'self' data: *.hsbc.com.hk fonts.gstatic.com; worker-src 'self' blob: *.demdex.net *.lpsnmedia.net *.liveperson.net *.google.com; style-src 'self' 'unsafe-inline' *.hsbc.com.hk *.googleapis.com; object-src 'self' players.brightcove.net; media-src 'self' blob: lpcdn.lpsnmedia.net ssl.gstatic.com *.brightcovecdn.com manifest.prod.boltdns.net; manifest-src 'self'; upgrade-insecure-requests ; report-uri /csp/report;
last-modified: Thu, 06 Apr 2023 13:50:51 GMT
accept-ranges: bytes
content-encoding: gzip
s: dispatcher3euwest1
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cache-control: no-cache, no-store, must-revalidate
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 44783ce98e3ad337ee5c8af734935c2e.cloudfront.net (CloudFront)
x-amz-cf-pop: ORD53-C1
x-amz-cf-id: XL9XGqZiW1IBJSuD8zzkdwq89AToyEE2gJppMiY_TpUtHA5NQVnNhA==