mtr.com.hk Review

 N/A

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Location: https://www.mtr.com.hk/
Cache-Control: max-age=0
Date: Mon, 16 Mar 2026 13:34:24 GMT
Connection: keep-alive

HTTP/1.1 301 Moved Permanently
Content-Length: 169
Content-Type: text/html
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: POST,GET,OPTIONS,PUT,DELETE
Access-Control-Allow-Origin: *
Location: https://www.mtr.com.hk/index.php
Pragma: no-cache
Referrer-Policy: No-referrer-when-downgrade
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: media-src 'self' www.youtube.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' ssl.google-analytics.com https://ssl.google-analytics.com www.google.com www.google-analytics.com ajax.googleapis.com www.googletagmanager.com maps.gstatic.com maps.googleapis.com developers.google.com pagead2.googlesyndication.com www.googleadservices.com googleads.g.doubleclick.net partner.googleadservices.com adservice.google.com.hk adservice.google.com tpc.googlesyndication.com; connect-src 'self' 'unsafe-inline' www.google-analytics.com maps.googleapis.com fonts.gstatic.com pagead2.googlesyndication.com; object-src 'none' ; frame-ancestors 'self';
Cache-Control: no-cache
Date: Mon, 16 Mar 2026 13:34:24 GMT
Connection: keep-alive
Set-Cookie: ARRAffinity=ef83e514b16d8af75c05eee8e105250f2b02e931327dd1d53e797fbd7d5c2db5;Path=/;HttpOnly;Secure;Domain=www.mtr.com.hk
Strict-Transport-Security: max-age=15768000 ; includeSubDomains

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: POST,GET,OPTIONS,PUT,DELETE
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Last-Modified: Mon, 16 Mar 2026 13:34:24 GMT
Pragma: no-cache
Pragma: no-cache
Referrer-Policy: No-referrer-when-downgrade
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: media-src 'self' www.youtube.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' ssl.google-analytics.com https://ssl.google-analytics.com www.google.com www.google-analytics.com ajax.googleapis.com www.googletagmanager.com maps.gstatic.com maps.googleapis.com developers.google.com pagead2.googlesyndication.com www.googleadservices.com googleads.g.doubleclick.net partner.googleadservices.com adservice.google.com.hk adservice.google.com tpc.googlesyndication.com; connect-src 'self' 'unsafe-inline' www.google-analytics.com maps.googleapis.com fonts.gstatic.com pagead2.googlesyndication.com; object-src 'none' ; frame-ancestors 'self';
Content-Length: 553
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Date: Mon, 16 Mar 2026 13:34:24 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: gTour=L; expires=Tue, 16 Mar 2027 13:34:24 GMT; Max-Age=31536000; path=/; secure; HttpOnly
Set-Cookie: ARRAffinity=c629f1d9293430736a03c2daefc616214ba15c1712babb3e6f1b08ffe521eb51;Path=/;HttpOnly;Secure;Domain=www.mtr.com.hk
Strict-Transport-Security: max-age=15768000 ; includeSubDomains