Traffic Report and Web Analysis for Hsbc - hsbc.com.vn

0 :HTTP/1.1 301 Moved Permanently
Server :awselb/2.0
Date :Mon, 20 Apr 2026 11:26:11 GMT
Content-Type :application/octet-stream
Content-Length :0
Connection :close
Location :https://www.hsbc.com.vn/
1 :HTTP/1.1 200 OK
Strict-Transport-Security :max-age=31536000; includeSubdomains
Content-Security-Policy :default-src 'self' *.hsbc.com.hk *.mastercard.com.au *.demdex.net *.lpsnmedia.net *.liveperson.net; 
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.tiqcdn.com *.tealiumiq.com *.liveperson.net *.goog
letagmanager.com *.hsbc.co.uk *.hsbc.com.hk *.doubleclick.net *.googleadservices.com *.lpsnmedia.net
 *.optimizely.com *.facebook.net *.google.com *.gstatic.com *.appdynamics.com *.googleapis.com *.aws
waf.com *.analytics.yahoo.com vjs.zencdn.net players.brightcove.net *.ads-twitter.com *.hsbc.ae rum.
hlx.page *.recaptcha.net *.licdn.com connect.facebook.net lptag.liveperson.net tags.tiqcdn.com www.g
oogletagmanager.com www.google-analytics.com www.googleadservices.com ssl.google-analytics.com googl
eads.g.doubleclick.net cdn.optimizely.com cdn.appdynamics.com *.v.liveperson.net cdn-assets-prod.s3.
amazonaws.com analytics.tiktok.com *.hsbc.com.vn www.gstatic.cn *.google-analytics.com www.google.co
m c-hsbc.lytics.io; img-src data: * android-webview-video-poster: android-webview: *.liveperson.net 
*.lpsnmedia.net; connect-src 'self' *.tiqcdn.com *.tealiumiq.com *.hsbc.com.hk *.eum-appdynamics.com
 *.optimizely.com wss://*.liveperson.net *.cloud.hsbc *.awswaf.com *.analytics.yahoo.com players.bri
ghtcove.net edge.api.brightcove.com *.googleapis.com *.hsbc.ae *.omtrdc.net *.demdex.net *.hsbc.co.o
m *.brightcovecdn.com *.hsbc.co.uk adservice.google.com *.qualtrics.com *.boltdns.net *.brightcove.c
om ad.doubleclick.net www.facebook.com www.google.com www.googletagmanager.com analytics.google.com 
*.doubleclick.net www.google-analytics.com www.google.com.vn *.dbankcloud.com www.google.com.hk *.ba
idu.com rbwm-api.us.hsbc.com rbwm-api.hsbc.co.uk rbwm-api.hsbc.com.hk cdn.linkedin.oribi.io *.sitein
tercept.qualtrics.com cdn-assets-prod.s3.amazonaws.com analytics.tiktok.com *.facebook.com *.googlet
agmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net *.hsbc.com.vn *.goog
le.com.vn analytics-ipv6.tiktokw.us *.liveperson.net *.lpsnmedia.net; frame-src 'self' blob: *.lpsnm
edia.net *.optimizely.com *.liveperson.net *.google.com *.doubleclick.net *.analytics.yahoo.com play
ers.brightcove.net *.recaptcha.net sts-aad.auth.hsbc.com *.zscloud.net gateway.zscalerthree.net gate
way.zscaler.net 8783714.fls.doubleclick.net connect.facebook.net analytics.tiktok.com www.googletagm
anager.com cdntm.hsbc.com.vn; frame-ancestors 'self' www.hsbc.com.vn; font-src 'self' data: *.hsbc.c
om.hk *.gstatic.com fonts.gstatic.com *.jsdelivr.net fonts.googleapis.com at.alicdn.com *.hsbc.com.v
n static3.avast.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' *.hsbc.com.hk *.googl
eapis.com players.brightcove.net *.hsbc.com.vn c-hsbc.lytics.io *.lpsnmedia.net *.liveperson.net; ob
ject-src 'self' blob: players.brightcove.net; child-src 'self'; media-src 'self' blob: *.boltdns.net
 *.media.brightcove.com *.llnw.net *.llnwd.net *.akafms.net *.akamaihd.net *.cf.brightcove.com *.bri
ghtcovecdn.com *.prod.boltdns.net ssl.gstatic.com lpcdn.lpsnmedia.net *.lpsnmedia.net; manifest-src 
'self' *.hsbc.com.vn; upgrade-insecure-requests ; report-uri /csp/report;
Last-Modified :Mon, 20 Apr 2026 02:19:15 GMT
Accept-Ranges :bytes
S :dispatcher2apeast1-b80
X-Frame-Options :SAMEORIGIN
X-XSS-Protection :1; mode=block
X-Content-Type-Options :nosniff
Cache-Control :max-age=60, s-maxage=60, stale-if-error=3600
Vary :Accept-Encoding
X-Cache :Miss from cloudfront
Via :1.1 ffee1d974bd2e9d67d5610f7ffb32b32.cloudfront.net (CloudFront)
X-Amz-Cf-Pop :CDG54-P2
X-Amz-Cf-Id :ILUXLTptiC4p3H3yLC54lzKZ7HLsD8IQbjk501u0kG1FHraZ4BD5ZA==