hsabank.com Review

 N/A

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://www.hsabank.com/
Server: Microsoft-IIS/10.0
Date: Wed, 17 Aug 2022 13:51:53 GMT
Content-Length: 147

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
Location: https://www.hsabank.com/hsabank
Server: Microsoft-IIS/10.0
Set-Cookie: ARRAffinity=4b807d9a748b80f4d6f5d7d60f140eb240a610cb121e4138d97300cb56c732ea;Path=/;HttpOnly;Secure;Domain=mc-73d46a35-1d12-4287-9334-462755-cd.azurewebsites.net
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://*.hsabank.com https://cdnjs.cloudflare.com https://*.jquery.com https://*.facebook.net https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.igodigital.com https://*.levelaccess.net https://*.cludo.com https://*.pardot.com https://*.hsabank.com; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://*.hsabank.com https://*.googleapis.com https://*.bootstrapcdn.com; base-uri 'self'; font-src 'self' https://*.gstatic.com https://*.bootstrapcdn.com; connect-src 'self' https://*.google-analytics.com https://*.levelaccess.net; img-src 'self' https://*.igodigital.com https://*.hsabank.com https://*.google-analytics.com; frame-src 'self' https://*.hsabank.com ;form-action 'self'
Permissions-Policy: microphone=(), payment=(), geolocation=(self), sync-xhr=*
Date: Wed, 17 Aug 2022 13:51:54 GMT
Content-Length: 154

HTTP/1.1 301 Moved Permanently
Location: /hsabank/homepage
Server: Microsoft-IIS/10.0
Set-Cookie: ARRAffinity=4b807d9a748b80f4d6f5d7d60f140eb240a610cb121e4138d97300cb56c732ea;Path=/;HttpOnly;Secure;Domain=mc-73d46a35-1d12-4287-9334-462755-cd.azurewebsites.net
Request-Context: appId=cid-v1:8fedb8c4-35ce-49f3-a619-b84f98aa48d7
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://*.hsabank.com https://cdnjs.cloudflare.com https://*.jquery.com https://*.facebook.net https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.igodigital.com https://*.levelaccess.net https://*.cludo.com https://*.pardot.com https://*.hsabank.com; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://*.hsabank.com https://*.googleapis.com https://*.bootstrapcdn.com; base-uri 'self'; font-src 'self' https://*.gstatic.com https://*.bootstrapcdn.com; connect-src 'self' https://*.google-analytics.com https://*.levelaccess.net; img-src 'self' https://*.igodigital.com https://*.hsabank.com https://*.google-analytics.com; frame-src 'self' https://*.hsabank.com ;form-action 'self'
Permissions-Policy: microphone=(), payment=(), geolocation=(self), sync-xhr=*
Date: Wed, 17 Aug 2022 13:51:54 GMT
Content-Length: 0

HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: -1
Vary: Accept-Encoding
Server: Microsoft-IIS/10.0
Set-Cookie: ASP.NET_SessionId=tcu1fetkahy0swdvl5elosqo; path=/; secure; HttpOnly; SameSite=Lax
Set-Cookie: ARRAffinity=8cf83099352b60be413860905d7d95eb4db2cb908d2a46b6a89ece556e9c4ed7;Path=/;HttpOnly;Secure;Domain=mc-73d46a35-1d12-4287-9334-462755-cd.azurewebsites.net
Request-Context: appId=cid-v1:8fedb8c4-35ce-49f3-a619-b84f98aa48d7
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://*.hsabank.com https://cdnjs.cloudflare.com https://*.jquery.com https://*.facebook.net https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.igodigital.com https://*.levelaccess.net https://*.cludo.com https://*.pardot.com https://*.hsabank.com; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://*.hsabank.com https://*.googleapis.com https://*.bootstrapcdn.com; base-uri 'self'; font-src 'self' https://*.gstatic.com https://*.bootstrapcdn.com; connect-src 'self' https://*.google-analytics.com https://*.levelaccess.net; img-src 'self' https://*.igodigital.com https://*.hsabank.com https://*.google-analytics.com; frame-src 'self' https://*.hsabank.com ;form-action 'self'
Permissions-Policy: microphone=(), payment=(), geolocation=(self), sync-xhr=*
Date: Wed, 17 Aug 2022 13:51:54 GMT
Content-Length: 16030