Hsbc.com - Internationalservices.hsbc.com

content-type: text/html; charset=utf-8
content-length: 10923
date: Sat, 06 Sep 2025 23:39:42 GMT
server: Apache
strict-transport-security: max-age=31536000; includeSubdomains
content-security-policy: default-src 'self' *.hsbc.com.hk *.mastercard.com.au *.demdex.net *.lpsnmedia.net *.liveperson.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.tiqcdn.com *.tealiumiq.com *.liveperson.net *.googletagmanager.com *.hsbc.co.uk *.hsbc.com.hk *.doubleclick.net *.googleadservices.com *.lpsnmedia.net *.optimizely.com *.facebook.net *.google.com *.gstatic.com *.appdynamics.com *.googleapis.com *.awswaf.com *.analytics.yahoo.com vjs.zencdn.net players.brightcove.net *.ads-twitter.com *.hsbc.ae rum.hlx.page lo.v.liveperson.net googleads.g.doubleclick.net connect.facebook.net lptag.liveperson.net lpcdn.lpsnmedia.net tags.tiqcdn.com accdn.lpsnmedia.net cdn.appdynamics.com cdn.optimizely.com www.google-analytics.com www.googletagmanager.com www.googleadservices.com ssl.google-analytics.com cdn-assets-prod.s3.amazonaws.com; img-src data: * blob:; connect-src 'self' *.tiqcdn.com *.tealiumiq.com *.hsbc.com.hk *.eum-appdynamics.com *.optimizely.com wss://*.liveperson.net *.cloud.hsbc *.awswaf.com *.analytics.yahoo.com players.brightcove.net edge.api.brightcove.com *.googleapis.com *.hsbc.ae *.omtrdc.net *.demdex.net *.hsbc.co.om *.brightcovecdn.com manifest.prod.boltdns.net www.googletagmanager.com rbwm-api.hsbc.co.uk stats.g.doubleclick.net analytics.google.com www.google-analytics.com akamai.tiqcdn.com collect.tealiumiq.com *.sc.omtrdc.net *.tt.omtrdc.net *.lo.cobrowse.liveperson.net www.hsbc.co.uk www.google.co.uk logx.optimizely.com analytics.twitter.com t.co ad.doubleclick.net *.siteintercept.qualtrics.com www.google.com maps.googleapis.com www.facebook.com brightcove.hs.llnwd.net *.api.brightcove.com adservice.google.com bat.bing.com *.contentsquare.net google.com rbwm-api.us.hsbc.com rbwm-api.hsbc.com.hk translate.googleapis.com *.dbankcloud.com cdn-assets-prod.s3.amazonaws.com; frame-src 'self' blob: *.lpsnmedia.net *.optimizely.com *.liveperson.net *.google.com *.doubleclick.net *.analytics.yahoo.com players.brightcove.net www.googletagmanager.com www.facebook.com google.com sts-aad.auth.hsbc.com connect.facebook.net gateway.zscalertwo.net; frame-ancestors 'self' internationalservices.hsbc.com; font-src 'self' data: *.hsbc.com.hk *.gstatic.com fonts.gstatic.com cdn.jsdelivr.net at.alicdn.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' *.hsbc.com.hk *.googleapis.com players.brightcove.net; object-src 'self' blob: players.brightcove.net; child-src 'self'; media-src 'self' blob: *.boltdns.net *.media.brightcove.com *.llnw.net *.llnwd.net *.akafms.net *.akamaihd.net *.cf.brightcove.com *.brightcovecdn.com lpcdn.lpsnmedia.net manifest.prod.boltdns.net ssl.gstatic.com; manifest-src 'self' www.hsbc.co.uk; upgrade-insecure-requests ; report-uri /csp/report;
last-modified: Fri, 05 Sep 2025 01:47:00 GMT
accept-ranges: bytes
content-encoding: gzip
s: dispatcher2euwest1-b80
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cache-control: max-age=60, s-maxage=60, stale-if-error=3600
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 0a4e8f7c3d348e526848328c55dd452a.cloudfront.net (CloudFront)
x-amz-cf-pop: FRA56-C2
x-amz-cf-id: 5uvxXRuxcHon0OnLAykxdcyiwLY7ubChJvu1twk74ptOYjIUjbDvow==