mtr.com.hk Review

 N/A

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Location: https://www.mtr.com.hk/
Cache-Control: max-age=0
Date: Tue, 16 Dec 2025 12:22:34 GMT
Connection: keep-alive

HTTP/1.1 301 Moved Permanently
Content-Length: 169
Content-Type: text/html
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: POST,GET,OPTIONS,PUT,DELETE
Access-Control-Allow-Origin: *
Location: https://www.mtr.com.hk/index.php
Pragma: no-cache
Referrer-Policy: No-referrer-when-downgrade
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: media-src 'self' www.youtube.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' ssl.google-analytics.com https://ssl.google-analytics.com www.google.com www.google-analytics.com ajax.googleapis.com www.googletagmanager.com maps.gstatic.com maps.googleapis.com developers.google.com pagead2.googlesyndication.com www.googleadservices.com googleads.g.doubleclick.net partner.googleadservices.com adservice.google.com.hk adservice.google.com tpc.googlesyndication.com; connect-src 'self' 'unsafe-inline' www.google-analytics.com maps.googleapis.com fonts.gstatic.com pagead2.googlesyndication.com; object-src 'none' ; frame-ancestors 'self';
Cache-Control: no-cache
Date: Tue, 16 Dec 2025 12:22:35 GMT
Connection: keep-alive
Set-Cookie: ARRAffinity=ecd7a60cbedb2518c80b137ae24661f7f946ad3732ddd22570da4e5170ac138f;Path=/;HttpOnly;Secure;Domain=www.mtr.com.hk
Strict-Transport-Security: max-age=15768000 ; includeSubDomains

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: POST,GET,OPTIONS,PUT,DELETE
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Last-Modified: Tue, 16 Dec 2025 12:22:35 GMT
Pragma: no-cache
Pragma: no-cache
Referrer-Policy: No-referrer-when-downgrade
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: media-src 'self' www.youtube.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' ssl.google-analytics.com https://ssl.google-analytics.com www.google.com www.google-analytics.com ajax.googleapis.com www.googletagmanager.com maps.gstatic.com maps.googleapis.com developers.google.com pagead2.googlesyndication.com www.googleadservices.com googleads.g.doubleclick.net partner.googleadservices.com adservice.google.com.hk adservice.google.com tpc.googlesyndication.com; connect-src 'self' 'unsafe-inline' www.google-analytics.com maps.googleapis.com fonts.gstatic.com pagead2.googlesyndication.com; object-src 'none' ; frame-ancestors 'self';
Content-Length: 553
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Date: Tue, 16 Dec 2025 12:22:35 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: gTour=L; expires=Wed, 16 Dec 2026 12:22:35 GMT; Max-Age=31536000; path=/; secure; HttpOnly
Set-Cookie: ARRAffinity=75cc4c43550853ea21560a43bea5df1d6bcede2e722a633304f09e1a3a3f3ac2;Path=/;HttpOnly;Secure;Domain=www.mtr.com.hk
Strict-Transport-Security: max-age=15768000 ; includeSubDomains