Traffic Report and Web Analysis for Hsbc - hsbc.com.hk

0 :HTTP/1.1 301 Moved Permanently
Server :awselb/2.0
Date :Sat, 07 Feb 2026 05:35:25 GMT
Content-Type :application/octet-stream
Content-Length :0
Connection :close
Location :https://www.hsbc.com.hk/
1 :HTTP/1.1 200 OK
Strict-Transport-Security :max-age=31536000; includeSubdomains
Content-Security-Policy :default-src 'self' *.hsbc.com.hk *.mastercard.com.au *.demdex.net *.lpsnmedia.net *.liveperson.net; 
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.tiqcdn.com *.tealiumiq.com *.liveperson.net *.goog
letagmanager.com *.hsbc.co.uk *.hsbc.com.hk *.doubleclick.net *.googleadservices.com *.lpsnmedia.net
 *.optimizely.com *.facebook.net *.google.com *.gstatic.com *.appdynamics.com *.googleapis.com *.aws
waf.com *.analytics.yahoo.com vjs.zencdn.net players.brightcove.net *.ads-twitter.com *.hsbc.ae rum.
hlx.page *.hsbc.com.hk:* *.walkme.com bat.bing.com *.recaptcha.net *.gstatic.cn *.biocatch.com s.yim
g.com tpc.googlesyndication.com connect.facebook.net tags.tiqcdn.com www.google.com.hk www.googletag
manager.com cdn.appdynamics.com www.google-analytics.com cdn-assets-prod.s3.amazonaws.com *.callsign
.com *.brightcove.net *.g.doubleclick.net *.zencdn.net *.hsbc.com.cn *.sc.omtrdc.net *.google-analyt
ics.com ssl.google-analytics.com googleads.g.doubleclick.net www.google.com *.v.liveperson.net *.goo
glesyndication.com c-hsbc.lytics.io; img-src data: * blob: android-webview-video-poster: android-web
view: *.lpsnmedia.net *.liveperson.net; connect-src 'self' *.tiqcdn.com *.tealiumiq.com *.hsbc.com.h
k *.eum-appdynamics.com *.optimizely.com wss://*.liveperson.net *.cloud.hsbc *.awswaf.com *.analytic
s.yahoo.com players.brightcove.net edge.api.brightcove.com *.googleapis.com *.hsbc.ae *.omtrdc.net *
.demdex.net *.hsbc.co.om *.brightcovecdn.com *.hsbc.com.hk:* *.walkme.com bat.bing.com *.biocatch.co
m rbwm-api.us.hsbc.com rbwm-api.hsbc.co.uk rbwm-api.hsbc.com.hk ad.doubleclick.net www.facebook.com 
maps.googleapis.com *.siteintercept.qualtrics.com adservice.google.com manifest.prod.boltdns.net www
.google.com translate.googleapis.com www.google-analytics.com www.googletagmanager.com www.google.co
m.hk connect.facebook.net lptag.liveperson.net accdn.lpsnmedia.net *.v.liveperson.net s.yimg.com cdn
.appdynamics.com cdn-assets-prod.s3.amazonaws.com brightcove.hs.llnwd.net *.akamaihd.net *.callsign.
com *.googletagmanager.com *.facebook.com *.brightcove.com *.boltdns.net *.hs.llnwd.net *.hsbc.com.c
n t.co analytics.twitter.com *.api.brightcove.com analytics.google.com *.google-analytics.com *.goog
le.com.hk *.g.doubleclick.net *.analytics.google.com *.doubleclick.net *.liveperson.net *.lpsnmedia.
net; frame-src 'self' blob: *.lpsnmedia.net *.optimizely.com *.liveperson.net *.google.com *.doublec
lick.net *.analytics.yahoo.com players.brightcove.net *.walkme.com *.googletagmanager.com *.recaptch
a.net www.facebook.com tpc.googlesyndication.com connect.facebook.net gateway.zscalertwo.net gateway
.zscloud.net sts-aad.auth.hsbc.com lpcdn.lpsnmedia.net 8694241.fls.doubleclick.net *.online-metrix.n
et *.hsbc.com.hk *.demdex.net *.id.opendns.com *.tiqcdn.com *.facebook.com bid.g.doubleclick.net cdn
tm.hsbc.com.hk; frame-ancestors 'self' *.liveperson.net www.hsbc.com.hk *.hsbc.com.hk; font-src 'sel
f' data: *.hsbc.com.hk *.gstatic.com *.walkme.com fonts.gstatic.com cdn.jsdelivr.net at.alicdn.com *
.avast.com *.alicdn.com; worker-src 'self' blob: *.walkme.com; style-src 'self' 'unsafe-inline' *.hs
bc.com.hk *.googleapis.com players.brightcove.net *.walkme.com *.askus.hsbc.co.uk *.lpsnmedia.net *.
liveperson.net c-hsbc.lytics.io; object-src 'self' blob:; child-src 'self' blob:; media-src 'self' b
lob: *.boltdns.net *.media.brightcove.com *.llnw.net *.llnwd.net *.akafms.net *.akamaihd.net *.cf.br
ightcove.com *.brightcovecdn.com lpcdn.lpsnmedia.net manifest.prod.boltdns.net ssl.gstatic.com playe
rs.brightcove.net *.hsbc.com.hk *.lpsnmedia.net; manifest-src 'self'; upgrade-insecure-requests ; re
port-uri /csp/report;
Last-Modified :Fri, 06 Feb 2026 16:08:50 GMT
Accept-Ranges :bytes
S :dispatcher3apeast1-b80
X-Frame-Options :SAMEORIGIN
X-XSS-Protection :1; mode=block
X-Content-Type-Options :nosniff
Cache-Control :max-age=60, s-maxage=60, stale-if-error=3600
Vary :Accept-Encoding
X-Cache :Miss from cloudfront
Via :1.1 24e6529ea30fbe719bde2164c1fe9238.cloudfront.net (CloudFront)
X-Amz-Cf-Pop :CDG50-P2
X-Amz-Cf-Id :ANpeyPnog_2_9_ghpXSThArprGIQ6a-dpICcMzQYpvtcAnlW-c_tkw==