mtr.com.hk Review

 N/A

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Location: https://www.mtr.com.hk/
Cache-Control: max-age=0
Date: Sun, 08 Feb 2026 04:44:31 GMT
Connection: keep-alive

HTTP/1.1 301 Moved Permanently
Content-Length: 169
Content-Type: text/html
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: POST,GET,OPTIONS,PUT,DELETE
Access-Control-Allow-Origin: *
Location: https://www.mtr.com.hk/index.php
Pragma: no-cache
Referrer-Policy: No-referrer-when-downgrade
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: media-src 'self' www.youtube.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' ssl.google-analytics.com https://ssl.google-analytics.com www.google.com www.google-analytics.com ajax.googleapis.com www.googletagmanager.com maps.gstatic.com maps.googleapis.com developers.google.com pagead2.googlesyndication.com www.googleadservices.com googleads.g.doubleclick.net partner.googleadservices.com adservice.google.com.hk adservice.google.com tpc.googlesyndication.com; connect-src 'self' 'unsafe-inline' www.google-analytics.com maps.googleapis.com fonts.gstatic.com pagead2.googlesyndication.com; object-src 'none' ; frame-ancestors 'self';
Cache-Control: no-cache
Date: Sun, 08 Feb 2026 04:44:31 GMT
Connection: keep-alive
Set-Cookie: ARRAffinity=a2ce3628f007062d321b414957a757a1657985926cabe59df33c912d78ad44cd;Path=/;HttpOnly;Secure;Domain=www.mtr.com.hk
Strict-Transport-Security: max-age=15768000 ; includeSubDomains

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: POST,GET,OPTIONS,PUT,DELETE
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Last-Modified: Sun, 08 Feb 2026 04:44:31 GMT
Pragma: no-cache
Pragma: no-cache
Referrer-Policy: No-referrer-when-downgrade
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: media-src 'self' www.youtube.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' ssl.google-analytics.com https://ssl.google-analytics.com www.google.com www.google-analytics.com ajax.googleapis.com www.googletagmanager.com maps.gstatic.com maps.googleapis.com developers.google.com pagead2.googlesyndication.com www.googleadservices.com googleads.g.doubleclick.net partner.googleadservices.com adservice.google.com.hk adservice.google.com tpc.googlesyndication.com; connect-src 'self' 'unsafe-inline' www.google-analytics.com maps.googleapis.com fonts.gstatic.com pagead2.googlesyndication.com; object-src 'none' ; frame-ancestors 'self';
Content-Length: 553
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Date: Sun, 08 Feb 2026 04:44:31 GMT
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: gTour=L; expires=Mon, 08 Feb 2027 04:44:31 GMT; Max-Age=31536000; path=/; secure; HttpOnly
Set-Cookie: ARRAffinity=c8ab7f8027a1267e0a5a5ae15d41614da90e0e68913243c5c4b45901ca969951;Path=/;HttpOnly;Secure;Domain=www.mtr.com.hk
Strict-Transport-Security: max-age=15768000 ; includeSubDomains