HTTP Headers Analysis for https://www.about.hsbc.com.my

Detected Technologies from Headers

See all in URL Inspect 13

Adobe Target

Adobe Dynamic Tag Management

Adobe Experience Cloud

Akamai Active incidents

Brightcove

Contentsquare

Google Conversion Tracking

Google DoubleClick

Google Search

Google Tag Manager

Tealium

Twitter

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000 ; includeSubDomains ; preload

Content-Security-Policy

Basic

default-src; script-src; img-src; +7 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

max-age=137

Etag

Caching

"nH9QgBZIaYLxbjf8K5tzFA=="

Expires

Caching

Sat, 10 Oct 2026 03:09:47 GMT

Last-Modified

Caching

Fri, 20 Sep 2024 21:20:58 GMT

Pragma

Caching

no-cache

cache-control: max-age=137
etag: "nH9QgBZIaYLxbjf8K5tzFA=="
expires: Sat, 10 Oct 2026 03:09:47 GMT
last-modified: Fri, 20 Sep 2024 21:20:58 GMT
pragma: no-cache

Content Headers

Content-Length

Content

45207

Content-Type

Content

text/html; charset=utf-8

content-length: 45207
content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Accept-Ch

Other

Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness

Date

Other

Sat, 10 Oct 2026 03:07:30 GMT

X-Robots-Tag

Other

index, follow

accept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness
date: Sat, 10 Oct 2026 03:07:30 GMT
x-robots-tag: index, follow

Recommendations

Enable compression (gzip/brotli) to improve performance