mtr.com.hk Review

 N/A

HTTP/1.1 301 Moved Permanently
Content-Length: 0
Location: https://www.mtr.com.hk/
Cache-Control: max-age=0
Date: Sat, 05 Jul 2025 20:50:13 GMT
Connection: keep-alive

HTTP/1.1 301 Moved Permanently
Content-Length: 169
Content-Type: text/html
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: POST,GET,OPTIONS,PUT,DELETE
Access-Control-Allow-Origin: *
Location: https://www.mtr.com.hk/index.php
Pragma: no-cache
Referrer-Policy: No-referrer-when-downgrade
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: media-src 'self' www.youtube.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' ssl.google-analytics.com https://ssl.google-analytics.com www.google.com www.google-analytics.com ajax.googleapis.com www.googletagmanager.com maps.gstatic.com maps.googleapis.com developers.google.com pagead2.googlesyndication.com www.googleadservices.com googleads.g.doubleclick.net partner.googleadservices.com adservice.google.com.hk adservice.google.com tpc.googlesyndication.com; connect-src 'self' 'unsafe-inline' www.google-analytics.com maps.googleapis.com fonts.gstatic.com pagead2.googlesyndication.com; object-src 'none' ; frame-ancestors 'self';
Cache-Control: no-store
Date: Sat, 05 Jul 2025 20:50:13 GMT
Connection: keep-alive
Set-Cookie: ARRAffinity=ef83e514b16d8af75c05eee8e105250f2b02e931327dd1d53e797fbd7d5c2db5;Path=/;HttpOnly;Secure;Domain=www.mtr.com.hk
Strict-Transport-Security: max-age=15768000 ; includeSubDomains

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: POST,GET,OPTIONS,PUT,DELETE
Access-Control-Allow-Origin: *
Last-Modified: Sat, 05 Jul 2025 20:50:14 GMT
Pragma: no-cache
Pragma: no-cache
Referrer-Policy: No-referrer-when-downgrade
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: media-src 'self' www.youtube.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' ssl.google-analytics.com https://ssl.google-analytics.com www.google.com www.google-analytics.com ajax.googleapis.com www.googletagmanager.com maps.gstatic.com maps.googleapis.com developers.google.com pagead2.googlesyndication.com www.googleadservices.com googleads.g.doubleclick.net partner.googleadservices.com adservice.google.com.hk adservice.google.com tpc.googlesyndication.com; connect-src 'self' 'unsafe-inline' www.google-analytics.com maps.googleapis.com fonts.gstatic.com pagead2.googlesyndication.com; object-src 'none' ; frame-ancestors 'self';
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Date: Sat, 05 Jul 2025 20:50:14 GMT
Content-Length: 558
Connection: keep-alive
Set-Cookie: gTour=L; expires=Sun, 05 Jul 2026 20:50:14 GMT; Max-Age=31536000; path=/; secure; HttpOnly
Set-Cookie: ARRAffinity=d4a00fa473ff864622eb12d8d3129e7aa2ebef046a284e68d224ad97f41fadcd;Path=/;HttpOnly;Secure;Domain=www.mtr.com.hk
Strict-Transport-Security: max-age=15768000 ; includeSubDomains