mtr.com.hk Review

 N/A

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Location: https://www.mtr.com.hk/
Cache-Control: max-age=0
Date: Sat, 12 Sep 2026 12:50:44 GMT
Connection: keep-alive

HTTP/1.1 301 Moved Permanently
Content-Length: 169
Content-Type: text/html
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: POST,GET,OPTIONS,PUT,DELETE
Access-Control-Allow-Origin: *
Location: https://www.mtr.com.hk/index.php
Pragma: no-cache
Referrer-Policy: No-referrer-when-downgrade
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: media-src 'self' www.youtube.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' ssl.google-analytics.com https://ssl.google-analytics.com www.google.com www.google-analytics.com ajax.googleapis.com www.googletagmanager.com maps.gstatic.com maps.googleapis.com developers.google.com pagead2.googlesyndication.com www.googleadservices.com googleads.g.doubleclick.net partner.googleadservices.com adservice.google.com.hk adservice.google.com tpc.googlesyndication.com; connect-src 'self' 'unsafe-inline' www.google-analytics.com maps.googleapis.com fonts.gstatic.com pagead2.googlesyndication.com; object-src 'none' ; frame-ancestors 'self';
Cache-Control: no-cache
Date: Sat, 12 Sep 2026 12:50:44 GMT
Connection: keep-alive
Set-Cookie: ARRAffinity=2921ecf7942c4b49c110faa2133dfa73fa975d79b43fe28830a2b574cc6c903c;Path=/;HttpOnly;Secure;Domain=www.mtr.com.hk
Strict-Transport-Security: max-age=15768000 ; includeSubDomains

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: POST,GET,OPTIONS,PUT,DELETE
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Last-Modified: Sat, 12 Sep 2026 12:50:44 GMT
Pragma: no-cache
Pragma: no-cache
Referrer-Policy: No-referrer-when-downgrade
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: media-src 'self' www.youtube.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' ssl.google-analytics.com https://ssl.google-analytics.com www.google.com www.google-analytics.com ajax.googleapis.com www.googletagmanager.com maps.gstatic.com maps.googleapis.com developers.google.com pagead2.googlesyndication.com www.googleadservices.com googleads.g.doubleclick.net partner.googleadservices.com adservice.google.com.hk adservice.google.com tpc.googlesyndication.com; connect-src 'self' 'unsafe-inline' www.google-analytics.com maps.googleapis.com fonts.gstatic.com pagead2.googlesyndication.com; object-src 'none' ; frame-ancestors 'self';
Content-Length: 553
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Date: Sat, 12 Sep 2026 12:50:44 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: gTour=L; expires=Sun, 12 Sep 2027 12:50:44 GMT; Max-Age=31536000; path=/; secure; HttpOnly
Set-Cookie: ARRAffinity=2536f1133b893c6636d5f885f870cf017011e2add5f611e7f64de7d7f61a07e2;Path=/;HttpOnly;Secure;Domain=www.mtr.com.hk
Strict-Transport-Security: max-age=15768000 ; includeSubDomains