HTTP Headers Analysis for https://about-sit.hsbc.com.hk

Detected Technologies from Headers

See all in URL Inspect 14

Adobe Target

ASP.NET

Adobe Dynamic Tag Management

Adobe Experience Cloud

Akamai

Brightcove

Contentsquare

Google Conversion Tracking

Google DoubleClick

Google Search

Google Tag Manager

Tealium

Twitter

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000 ; includeSubDomains ; preload

Content-Security-Policy

Basic

default-src; script-src; img-src; +7 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

max-age=320

Expires

Caching

Tue, 13 Oct 2026 13:42:57 GMT

Last-Modified

Caching

Mon, 09 Nov 2015 08:30:58 GMT

Pragma

Caching

no-cache

cache-control: max-age=320
expires: Tue, 13 Oct 2026 13:42:57 GMT
last-modified: Mon, 09 Nov 2015 08:30:58 GMT
pragma: no-cache

Content Headers

Content-Length

Content

2374

Content-Type

Content

text/html; charset=utf-8

content-length: 2374
content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: shell#lang=en; path=/; secure; SameSite=None
ASP.NET_SessionId=al5zhkpt5deepyy3zsyrtib1; path=/; secure; HttpOnly; SameSite=None

Other Headers

Accept-Ch

Other

Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness

Date

Other

Tue, 13 Oct 2026 13:37:37 GMT

accept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness
date: Tue, 13 Oct 2026 13:37:37 GMT

Recommendations

Enable compression (gzip/brotli) to improve performance