Hsbc.ca

server: awselb/2.0
date: Thu, 17 Aug 2023 16:50:32 GMT
content-type: application/octet-stream
content-length: 0
location: https://www.hsbc.ca/

HTTP/2 200 
content-type: text/html; charset=utf-8
content-length: 25584
date: Thu, 17 Aug 2023 16:50:00 GMT
server: Apache
strict-transport-security: max-age=31536000; includeSubdomains
content-security-policy: default-src 'self' *.hsbc.com.hk; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.tiqcdn.com *.tealiumiq.com *.liveperson.net *.googletagmanager.com *.hsbc.co.uk *.hsbc.com.hk *.doubleclick.net *.googleadservices.com *.lpsnmedia.net *.optimizely.com *.facebook.net *.google.com *.gstatic.com *.appdynamics.com *.googleapis.com *.awswaf.com *.analytics.yahoo.com *.hsbc.com.hk:* bat.bing.com *.amazon-adsystem.com *.hsbc.ca players.brightcove.net tpc.googlesyndication.com *.v.liveperson.net googleads.g.doubleclick.net connect.facebook.net lptag.liveperson.net lpcdn.lpsnmedia.net www.googletagmanager.com accdn.lpsnmedia.net tags.tiqcdn.com www.google-analytics.com www.googleadservices.com ssl.google-analytics.com www.google.com googletagmanager.com mcm-prod.hsbc.ca vjs.zencdn.net www.google.ca cdn.appdynamics.com cdn-assets-prod.s3.amazonaws.com; img-src data: *; connect-src 'self' *.tiqcdn.com *.tealiumiq.com *.hsbc.com.hk *.eum-appdynamics.com *.optimizely.com wss://*.liveperson.net *.cloud.hsbc *.awswaf.com *.analytics.yahoo.com *.hsbc.com.hk:* http://127.0.0.1:5000 http://127.0.0.1:5000/* *.hsbc.ca bat.bing.com *.siteintercept.qualtrics.com adservice.google.com *.brightcovecdn.com *.api.brightcove.com ad.doubleclick.net brightcove.hs.llnwd.net maps.googleapis.com www.googletagmanager.com analytics.google.com www.google-analytics.com stats.g.doubleclick.net *.va.cobrowse.liveperson.net mcm-prod.hsbc.ca rbwm-api.us.hsbc.com rbwm-api.hsbc.co.uk rbwm-api.hsbc.com.hk manifest.prod.boltdns.net www.facebook.com www.google.com *.qualtrics.com cdn-assets-prod.s3.amazonaws.com; frame-src 'self' blob: *.lpsnmedia.net *.optimizely.com *.liveperson.net *.google.com *.doubleclick.net *.analytics.yahoo.com players.brightcove.net www.facebook.com tpc.googlesyndication.com www.youtube.com 8710119.fls.doubleclick.net; frame-ancestors 'self' www.hsbc.ca; font-src 'self' data: *.hsbc.com.hk fonts.gstatic.com cdn.jsdelivr.net at.alicdn.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' *.hsbc.com.hk *.googleapis.com players.brightcove.net *.va.cobrowse.liveperson.net; object-src 'self' players.brightcove.net; media-src 'self' blob: *.boltdns.net *.media.brightcove.com *.llnw.net *.llnwd.net *.akafms.net *.akamaihd.net *.cf.brightcove.com *.lpcdn.lpsnmedia.net brightcove.hs.llnwd.net *.brightcovecdn.com ssl.gstatic.com manifest.prod.boltdns.net; manifest-src 'self'; upgrade-insecure-requests ; report-uri /csp/report;
last-modified: Thu, 17 Aug 2023 16:27:04 GMT
accept-ranges: bytes
content-encoding: gzip
s: dispatcher2useast2
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cache-control: max-age=60, s-maxage=60
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d6e11dc2ec6f45889d724685e5a0e930.cloudfront.net (CloudFront)
x-amz-cf-pop: ORD51-C2
x-amz-cf-id: LzgujbAFHNdIhvDS0dQzFWUiJu31iXL9mgT7m11Vb5fOla-uIAgOeA==
age: 33