mcb.mu website report

HTTP/2 200
date: Fri, 30 Oct 2026 01:00:24 GMT
content-type: text/html; charset=utf-8
cf-ray: a5267b9ecca89ed9-CDG
cf-cache-status: HIT
access-control-allow-origin: https://identity-backbase-mu-qa.mcbengineering.info
age: 17790
cache-control: public, max-age=0, s-maxage=43200
content-encoding: gzip
etag: "1ecab341-5a61-44b8-a1aa-29370c0476d8"
expires: Thu, 29 Oct 2026 20:03:54 GMT
last-modified: Thu, 29 Oct 2026 20:01:26 GMT
server: cloudflare
strict-transport-security: max-age=31536000; preload
vary: accept-encoding
access-control-expose-headers: Request-Context
content-security-policy: default-src 'self'; script-src *.googleapis.com *.gstatic.com www.google.com apis.google.com *.google-analytics.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js cdnjs.cloudflare.com analytics.google.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org web-chat.nativechat.com unpkg.com/@frontify/ *.cloudinary.com https://code.jquery.com/ *.googletagmanager.com https://cdn.cookielaw.org/ https://assets.mcb.mu/ https://assets.mcb.group/ *.azureedge.net *.fontawesome.com *.dynamics.com *.oraclecloud.com *.oracleinfinity.io maps.google.com *.trueengage.com webrtc.github.io unpkg.com cdn.jsdelivr.net *.licdn.com *.amcharts.com *.simplybook.me *.doubleclick.net www.ssa.gov *.oracle.com https://www.clarity.ms/ 'self' https://cdn.insight.sitefinity.com https://player.vimeo.com/api/player.js https://www.youtube.com/iframe_api 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.gstatic.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com web-chat.nativechat.com https://assets.mcb.mu/ https://unpkg.com/ https://assets.mcb.group/ *.oraclecloud.com *.oracle.com *.trueengage.com *.simplybook.me www.ssa.gov 'self' https://cdn.insight.sitefinity.com 'unsafe-inline'; img-src *.gstatic.com *.googleapis.com platform.tumblr.com web.facebook.com www.facebook.com www.redditstatic.com www.linkedin.com i.ytimg.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: https://*.googletagmanager.com *.google-analytics.com analytics.google.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.eloqua.com track.hubspot.com web-chat.nativechat.com *.frontify.com *.cloudinary.com https://assets.mcb.group/ cdn.cookielaw.org *.transparenttexture.com *.dynamics.com *.oraclecloud.com *.mcbgroup.com mcbgroup.com maps.google.com maps.googleapis.com *.trueengage.com *.google.mu *.google.com *.simplybook.me *.linkedin.com www.ssa.gov *.oracleinfinity.io 'self' https://cdn.insight.sitefinity.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: assets.mcb.group *.oraclecloud.com *.simplybook.me *.oracle.com; frame-src 'self' http://www.youtube.com https://www.google.com/ http://www.youtube-nocookie.com *.dynamics.com youtu.be *.oraclecloud.com *.mcbgroup.com *.trueengage.com *.simplybook.me *.doubleclick.net *.googletagmanager.com https://player.vimeo.com/; connect-src data: accounts.google.com *.google-analytics.com *.gstatic.com https://*.googletagmanager.com https://*.googleapis.com/ *.mktoresp.com analytics.google.com *.frontify.com *.cloudinary.com https://socialplugin.facebook.net/ https://cdn.cookielaw.org/ *.dynamics.com geolocation.onetrust.com *.oraclecloud.com maps.googleapis.com *.trueengage.com *.onetrust.com *.doubleclick.net *.google.com *.linkedin.com *.oracleinfinity.io https://www.googleadservices.com https://www.googletagmanager.com 'self' https://*.insight.sitefinity.com https://*.dec.sitefinity.com; media-src 'self' data: blob: *.frontify.com *.cloudinary.com *.oraclecloud.com *.trueengage.com; child-src 'self' https://www.google.com/ https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://www.youtube-nocookie.com https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com web-chat.nativechat.com *.frontify.com cloudinary.com *.cloudinary.com https://research.mcbgroup.com/ *.dynamics.com *.oraclecloud.com
referrer-policy: no-referrer-when-downgrade
request-context: appId=cid-v1:7d5b3e0d-4704-445c-bf14-2a1e9279684c
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
sf-cache-key: _MIRiDHUzm8ffFYzcWLT9VL_tOmGAHSakv1XWrOB99U1
sf-cache-status: HIT
alt-svc: h3=":443"; ma=86400