Traffic Report and Web Analysis for Bpi - bpi.com.ph

0 :HTTP/2 200
x-frame-options :SAMEORIGIN
x-xss-protection :1; mode=block
referrer-policy :strict-origin-when-cross-origin
expect-ct :max-age=2592000, enforce
permissions-policy :geolocation=(self), microphone=(self)
cross-origin-embedder-policy :require-corp; report-to csp-endpoint
cross-origin-resource-policy :same-origin
cross-origin-opener-policy :same-origin
content-security-policy :img-src * data: blob: 'unsafe-inline'; worker-src 'self' blob:; media-src * blob: data:; font-src * 
data: 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager
.com https://connect.facebook.net https://stats.g.doubleclick.net https://www.google-analytics.com h
ttps://analytics.google.com https://www.facebook.com https://www.linkedin.com https://cdn.linkedin.o
ribi.io http://ads.tiktok.com https://maps.googleapis.com https://*.googleapis.com *.google.com http
s://*.gstatic.com https://player.vimeo.com https://www.canva.com https://e.infogram.com https://www.
google.com/recaptcha/api.js https://www.google.com/recaptcha/api2/anchor https://www.google.com/reca
ptcha/api/fallback https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/api/siteverif
y https://www.google.com/recaptcha/api2/bframe https://www.youtube.com https://www.googleadservices.
com https://www.google.com/pagead/conversion_async.js https://www.googleadservices.com/pagead/conver
sion_async.js fonts.googleapis.com maps.gstatic.com fonts.gstatic.com https://track.omguk.com https:
//secure.quantserve.com *.omguk.com quantserve.com *.doubleclick.net doubleclick.net https://secure.
quantserve.com/quant.js https://static.ads-twitter.com/uwt.js *.ads-twitter.com *.quantcount.com cdn
.evgnet.com *.evgnet.com https://cdn.evgnet.com/beacon/bankphilippineislands/prod/scripts/evergage.m
in.js https://cdn.evgnet.com/beacon/bankphilippineislands/test/scripts/evergage.min.js https://bankp
hilippineislands.evergage.com https://bankphilippineislands.australia-3.evergage.com *.evergage.com 
https://tiktok.com *.tiktok.com https://service.force.com *.force.com *.salesforce.com *.salesforcel
iveagent.com https://unpkg.com/@googlemaps/markerclusterer/dist/index.min.js https://s7ap1.scene7.co
m *.scene7.com *.sandbox.my.site.com *.my.site.com *.salesforce-scrt.com https://helpuat.bpi.com.ph 
*.bpi.com.ph https://go.affec.tv https://open.spotify.com https://embed.mindstamp.com https://cdn.ev
gnet.com https://snap.licdn.com *.licdn.com https://js.adsrvr.org https://cdn.taboola.com/libtrc/uni
p/1502612/tfa.js *.adsrvr.org https://assets.adobedtm.com https://adobedc.demdex.net https://edge.ad
obedc.net https://www.instagram.com/embed.js https://www.instagram.com https://platform.twitter.com/
widgets.js https://platform.twitter.com https://cdn.jsdelivr.net/npm/intl-tel-input@18.1.1/build/js/
intlTelInput.min.js  https://cdn.jsdelivr.net/npm/intl-tel-input@18.1.1/build/js/utils.js https://cd
njs.cloudflare.com/ajax/libs/intl-tel-input/17.0.3/css/intlTelInput.min.css https://i.l-dsp.inmobicd
n.net/helix-cors/custom/js/idspPixel/v6/min.pixel.js https://acdn.adnxs.com/dmp/up/pixie.js https://
bat.bing.com/bat.js wss://sbc.apacaudiocodeslab.com:4443 wss://webrtcpdc.bpi.com.ph:443 wss://webrtc
sdc.bpi.com.ph:443;
cache-control :max-age=300,stale-while-revalidate=3600
last-modified :Tue, 14 Jul 2026 16:28:59 GMT
etag :"3213b-65694b443b2e8"
x-vhost :bpi
content-type :text/html;charset=utf-8
x-content-type-options :nosniff
accept-ranges :bytes
date :Tue, 14 Jul 2026 19:57:31 GMT
age :3
strict-transport-security :max-age=31557600
x-served-by :cache-par-lfpg1960078-PAR
x-cache :HIT
x-timer :S1784059052.650381,VS0,VS0,VE3
vary :Accept-Encoding
content-length :205115