Hsbc.com.hk

server: awselb/2.0
date: Thu, 17 Aug 2023 11:18:32 GMT
content-type: application/octet-stream
content-length: 0
location: https://www.hsbc.com.hk/

HTTP/2 200 
content-type: text/html; charset=utf-8
content-length: 25868
date: Thu, 17 Aug 2023 11:18:07 GMT
server: Apache
strict-transport-security: max-age=31536000; includeSubdomains
content-security-policy: default-src 'self' *.hsbc.com.hk; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.tiqcdn.com *.tealiumiq.com *.liveperson.net *.googletagmanager.com *.hsbc.co.uk *.hsbc.com.hk *.doubleclick.net *.googleadservices.com *.lpsnmedia.net *.optimizely.com *.facebook.net *.google.com *.gstatic.com *.appdynamics.com *.googleapis.com *.awswaf.com *.analytics.yahoo.com vjs.zencdn.net players.brightcove.net *.hsbc.com.hk:* *.walkme.com bat.bing.com *.recaptcha.net *.gstatic.cn *.biocatch.com s.yimg.com tpc.googlesyndication.com connect.facebook.net tags.tiqcdn.com www.google.com.hk www.googletagmanager.com cdn.appdynamics.com www.google-analytics.com cdn-assets-prod.s3.amazonaws.com; img-src data: * blob: android-webview-video-poster: android-webview:; connect-src 'self' *.tiqcdn.com *.tealiumiq.com *.hsbc.com.hk *.eum-appdynamics.com *.optimizely.com wss://*.liveperson.net *.cloud.hsbc *.awswaf.com *.analytics.yahoo.com players.brightcove.net edge.api.brightcove.com *.hsbc.com.hk:* *.walkme.com bat.bing.com *.biocatch.com rbwm-api.us.hsbc.com rbwm-api.hsbc.co.uk rbwm-api.hsbc.com.hk ad.doubleclick.net www.facebook.com maps.googleapis.com *.siteintercept.qualtrics.com adservice.google.com manifest.prod.boltdns.net *.brightcovecdn.com www.google.com http://127.0.0.1:5000 http://127.0.0.1:5000/* translate.googleapis.com www.google-analytics.com www.googletagmanager.com www.google.com.hk connect.facebook.net lptag.liveperson.net accdn.lpsnmedia.net *.v.liveperson.net s.yimg.com cdn.appdynamics.com cdn-assets-prod.s3.amazonaws.com brightcove.hs.llnwd.net; frame-src 'self' blob: *.lpsnmedia.net *.optimizely.com *.liveperson.net *.google.com *.doubleclick.net *.analytics.yahoo.com players.brightcove.net *.walkme.com *.googletagmanager.com *.recaptcha.net www.facebook.com tpc.googlesyndication.com connect.facebook.net gateway.zscalertwo.net gateway.zscloud.net sts-aad.auth.hsbc.com lpcdn.lpsnmedia.net 8694241.fls.doubleclick.net; frame-ancestors 'self' *.liveperson.net www.hsbc.com.hk; font-src 'self' data: *.hsbc.com.hk *.walkme.com fonts.gstatic.com cdn.jsdelivr.net at.alicdn.com; worker-src 'self' blob: *.walkme.com; style-src 'self' 'unsafe-inline' *.hsbc.com.hk *.googleapis.com players.brightcove.net *.walkme.com; object-src 'self'; media-src 'self' blob: *.boltdns.net *.media.brightcove.com *.llnw.net *.llnwd.net *.akafms.net *.akamaihd.net *.cf.brightcove.com lpcdn.lpsnmedia.net *.brightcovecdn.com manifest.prod.boltdns.net ssl.gstatic.com players.brightcove.net; manifest-src 'self'; upgrade-insecure-requests ; report-uri /csp/report;
last-modified: Thu, 17 Aug 2023 11:01:03 GMT
accept-ranges: bytes
content-encoding: gzip
s: dispatcher3apeast1
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cache-control: max-age=60, s-maxage=60
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c601f966b37ebf3a1ddf28f033b35904.cloudfront.net (CloudFront)
x-amz-cf-pop: SFO53-C1
x-amz-cf-id: JVIuR6ByZsD_zTJ6lr0v0eqF4YTJzZ2qxUtkT6CZjce_xiTdELzdZQ==
age: 25
server-timing: cdn-cache-hit,cdn-pop;desc="SFO53-C1",cdn-rid;desc="JVIuR6ByZsD_zTJ6lr0v0eqF4YTJzZ2qxUtkT6CZjce_xiTdELzdZQ==",cdn-hit-layer;desc="REC",cdn-downstream-fbl;dur=9