🦊StackFox
hsbc.com.au logo

hsbc.com.au

Detected Technologies

Visit Site
AI Policy
Tech
InfraStatus
20 technologies5 categories

hsbc.com.au is built on Adobe Experience Manager with Facebook Pixel and Optimizely.

Analytics are handled by Facebook Pixel and Google Tag Manager. Infrastructure includes Amazon CloudFront and Amazon S3.

Tech Stack Highlights

www.adobe.com logoAdobe Experience ManagerCMS
P
ProofpointEmailwww.optimizely.com logoOptimizelyA/B Testingfacebook.com logoFacebook PixelAnalyticsjava.com logoJavaProgramming languages

Core Platform1

www.adobe.com logo
Adobe Experience Manager
CMS
100%
3 evidence signals
Scripthttps://www.hsbc.com.au/etc.clientlibs/hsbc/global/clientlibs/appd.min.9a0d6a727f8b92f3a4cce4a6985afacb.js
Scripthttps://www.hsbc.com.au/etc.clientlibs/dpws/clientlibs-public/clientlib-all.min.961c834f445a0853afc656b59f2d2437.js
stylesheet/etc.clientlibs/dpws/clientlibs-public/clientlib-default.min.e097f5476ae994e846d32f0c87328d80.css

Frameworks & Languages1

java.com logo
Java
Programming languages
75%
1 evidence signal
HTMLimplied by Adobe Experience Manager

Analytics & Marketing11

facebook.com logo
Facebook Pixelv2.9.281
Analytics
100%
4 evidence signals
Scripthttps://connect.facebook.net/signals/config/235390370455098?v=2.9.281&r=stable&domain=www.hsbc.com.au&hme=7561e8db2489737df4c74b634c943d82cefbf4e67acc7fda2493ff919471f0aa&ex_m=101%2C194%2C143%2C22%2C69%2C70%2C136%2C65%2C64%2C11%2C151%2C87%2C16%2C130%2C123%2C72%2C75%2C129%2C148%2C153%2C8%2C4%2C5%2C7%2C6%2C3%2C88%2C98%2C154%2C159%2C208%2C59%2C175%2C176%2C52%2C264%2C30%2C71%2C220%2C219%2C218%2C23%2C32%2C100%2C58%2C10%2C60%2C94%2C95%2C96%2C102%2C126%2C31%2C29%2C128%2C125%2C124%2C144%2C73%2C147%2C145%2C146%2C47%2C57%2C119%2C15%2C150%2C42%2C251%2C252%2C250%2C26%2C27%2C28%2C45%2C137%2C74%2C109%2C18%2C20%2C41%2C37%2C39%2C38%2C80%2C89%2C93%2C107%2C135%2C138%2C43%2C108%2C24%2C21%2C115%2C66%2C35%2C140%2C139%2C141%2C132%2C131%2C25%2C34%2C56%2C106%2C149%2C67%2C17%2C142%2C111%2C78%2C63%2C19%2C82%2C83%2C112%2C81%2C33%2C280%2C201%2C190%2C191%2C189%2C283%2C275%2C49%2C202%2C104%2C127%2C77%2C117%2C51%2C44%2C46%2C110%2C116%2C122%2C55%2C61%2C50%2C53%2C97%2C152%2C1%2C120%2C14%2C118%2C12%2C2%2C54%2C90%2C62%2C114%2C86%2C85%2C155%2C156%2C91%2C92%2C9%2C121%2C99%2C48%2C133%2C84%2C76%2C68%2C113%2C103%2C40%2C134%2C0%2C79%2C36%2C105%2C13%2C157
Scripthttps://connect.facebook.net/en_US/fbevents.js
Scripthttps://connect.facebook.net/en_US/fbevents.js
JS Global_fbq → function(v2.9.281)
www.optimizely.com logo
Optimizely
A/B Testing
100%
3 evidence signals
CookieoptimizelyEndUserId
Scripthttps://cdn.optimizely.com/js/20365490699.js
JS Globaloptimizely → object
P
Proofpoint
Email
100%
1 evidence signal
dnsMX: mxb-00299f02.gslb.pphosted.com
tagmanager.google.com logo
Google Tag Manager
Tag managers
75%
2 evidence signals
JS Globalgoogle_tag_manager → object
JS GlobaldataLayer → object
analytics.google.com logo
Google Analytics
Analytics
75%
2 evidence signals
Scripthttps://www.googletagmanager.com/gtag/js?id=AW-944473433&cx=c&gtm=4e63i0
Scripthttps://www.googletagmanager.com/gtag/js?id=DC-8709841
tealium.com logo
Tealium AudienceStream
Segmentation
75%
1 evidence signal
Scripthttps://visitor-service-ap-southeast-2.tealiumiq.com/hsbc/wpb-stream-au/019d172a5e5f004169d19e03edfc05075001806d00590?callback=utag.ut%5B%22writevawpb-stream-au%22%5D&rnd=1774210147128
tealium.com logo
Tealium
Tag managers
75%
17 evidence signals
Scripthttps://tags.tiqcdn.com/utag/hsbc/au-rbwm/prod/utag.js
Scripthttps://tags.tiqcdn.com/utag/hsbc/au-rbwm/prod/utag.sync.js
Scripthttps://tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=hsbc/au-rbwm/202511061100&cb=1774210146737
Scripthttps://tags.tiqcdn.com/utag/hsbc/au-rbwm/prod/utag.974.js?utv=ut4.46.202502240726
Scripthttps://tags.tiqcdn.com/utag/hsbc/au-rbwm/prod/utag.587.js?utv=ut4.46.202010210957
Scripthttps://tags.tiqcdn.com/utag/hsbc/au-rbwm/prod/utag.924.js?utv=ut4.46.202207191534
Scripthttps://tags.tiqcdn.com/utag/hsbc/au-rbwm/prod/utag.972.js?utv=ut4.46.202502240726
Scripthttps://tags.tiqcdn.com/utag/hsbc/au-rbwm/prod/utag.1050.js?utv=ut4.46.202303280919
Scripthttps://tags.tiqcdn.com/utag/hsbc/au-rbwm/prod/utag.1074.js?utv=ut4.46.202301201405
Scripthttps://tags.tiqcdn.com/utag/hsbc/au-rbwm/prod/utag.1075.js?utv=ut4.46.202301201405
Scripthttps://tags.tiqcdn.com/utag/hsbc/au-rbwm/prod/utag.1099.js?utv=ut4.46.202403150748
Scripthttps://tags.tiqcdn.com/utag/hsbc/au-rbwm/prod/utag.1171.js?utv=ut4.46.202206171012
Scripthttps://tags.tiqcdn.com/utag/hsbc/au-rbwm/prod/utag.1201.js?utv=ut4.46.202507171123
Scripthttps://tags.tiqcdn.com/utag/hsbc/au-rbwm/prod/utag.1246.js?utv=ut4.46.202508141013
Scripthttps://tags.tiqcdn.com/utag/hsbc/au-rbwm/prod/utag.1311.js?utv=ut4.46.202507211033
Scripthttps://tags.tiqcdn.com/utag/hsbc/au-rbwm/prod/utag.1369.js?utv=ut4.46.202507211033
Scripthttps://tags.tiqcdn.com/utag/hsbc/au-rbwm/prod/utag.1388.js?utv=ut4.46.202510281250
appdynamics.com logo
AppDynamics
Analytics
75%
1 evidence signal
Scripthttps://cdn.appdynamics.com/adrum-ext.0086dbec5e8a6e717bf36d3a06b62042.js
ads.tiktok.com logo
TikTok Pixel
Analytics
75%
1 evidence signal
JS GlobalTiktokAnalyticsObject → string
www.liveperson.com logo
LivePerson
Live chat
75%
1 evidence signal
Scripthttps://lptag.liveperson.net/tag/tag.js?site=21508700
www.lytics.com logo
Lytics
Customer data platform
75%
1 evidence signal
Scripthttps://c-hsbc.lytics.io/api/tag/3496e14563cb05d46aeb7562c0a86024/latest.min.js

Infrastructure & Security5

www.rfc-editor.org logo
HSTS
Security
75%
1 evidence signal
Headermax-age=31536000; includeSubdomains
aws.amazon.com logo
Amazon CloudFront
CDN
75%
2 evidence signals
Header\(CloudFront\)$: 1.1 ff6f775130876a90bb15705dd183ba98.cloudfront.net (CloudFront)
Header5fe4VY4-5hF8ya_yJUW1ZQLLQ1yKj3tBK3UkziSexN4jkfxqOCn_qQ==
aws.amazon.com logo
Amazon S3
CDN
75%
1 evidence signal
Headers3[^ ]*amazonaws\.com: default-src 'self' *.hsbc.com.hk *.mastercard.com.au *.demdex.net *.lpsnmedia.net *.liveperson.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.tiqcdn.com *.tealiumiq.com *.liveperson.net *.googletagmanager.com *.hsbc.co.uk *.hsbc.com.hk *.doubleclick.net *.googleadservices.com *.lpsnmedia.net *.optimizely.com *.facebook.net *.google.com *.gstatic.com *.appdynamics.com *.googleapis.com *.awswaf.com *.analytics.yahoo.com vjs.zencdn.net players.brightcove.net *.ads-twitter.com *.hsbc.ae rum.hlx.page *.hsbc.com.hk:* *.hsbc.com.au *.veda.com.au *.widgetworks.com.au *.infochoice.com.au geocoderweb.veda.com.au *.member-hsbc-group.com *.licdn.com *.trkd-hs.com *.v.liveperson.net googleads.g.doubleclick.net connect.facebook.net tags.tiqcdn.com lpcdn.lpsnmedia.net cdn.optimizely.com lptag.liveperson.net accdn.lpsnmedia.net www.googletagmanager.com cdn.appdynamics.com www.google-analytics.com ssl.google-analytics.com maps.googleapis.com s.yimg.com bat.bing.com *.ebanking.hsbc.com.hk cdn-assets-prod.s3.amazonaws.com analytics.tiktok.com services.postcodeanywhere.co.uk *.googlesyndication.com *.g.doubleclick.net *.google-analytics.com tpc.googlesyndication.com www.google.com api.addressy.com www.recaptcha.net www.gstatic.cn c-hsbc.lytics.io; img-src data: * android-webview-video-poster: android-webview: blob: *.liveperson.net *.lpsnmedia.net; connect-src 'self' *.tiqcdn.com *.tealiumiq.com *.hsbc.com.hk *.eum-appdynamics.com *.optimizely.com wss://*.liveperson.net *.cloud.hsbc *.awswaf.com *.analytics.yahoo.com players.brightcove.net edge.api.brightcove.com *.googleapis.com *.hsbc.ae *.omtrdc.net *.demdex.net *.hsbc.co.om *.brightcovecdn.com *.hsbc.com.au *.veda.com.au wss://*.hsbc.com *.hsbc.com.hk:* *.onfido.com *.hsbc.com *.biocatch.com *.amazonaws.com *.siteintercept.qualtrics.com adservice.google.com manifest.prod.boltdns.net www.google.com www.facebook.com maps.googleapis.com ad.doubleclick.net www.googletagmanager.com analytics.google.com stats.g.doubleclick.net www.google-analytics.com akamai.tiqcdn.com www.google.com.au www.hsbc.com.au col.eum-appdynamics.com *.tt.omtrdc.net rbwm-api.us.hsbc.com rbwm-api.hsbc.co.uk rbwm-api.hsbc.com.hk cdn.linkedin.oribi.io translate.googleapis.com *.dbankcloud.com *.liveperson.net cdn-assets-prod.s3.amazonaws.com analytics.tiktok.com cdnbc-wup.hsbc.com.au cdnbc-logs.hsbc.com.au image.apacdms.uat.ironmountain.com image.apacdms.ironmountain.com *.ironmountain.com *.googletagmanager.com *.facebook.com *.google.com *.doubleclick.net *.google-analytics.com *.analytics.google.com *.g.doubleclick.net services.postcodeanywhere.co.uk api.addressy.com analytics-ipv6.tiktokw.us *.lpsnmedia.net; frame-src 'self' blob: *.lpsnmedia.net *.optimizely.com *.liveperson.net *.google.com *.doubleclick.net *.analytics.yahoo.com players.brightcove.net *.hsbc.com.au *.bankstatements.com.au *.infochoice.com.au *.widgetworks.com.au *.trkd-hs.com *.googletagmanager.com www.facebook.com connect.facebook.net td.doubleclick.net *.demdex.net 8709841.fls.doubleclick.net *.ebanking.hsbc.com.hk *.hsbc.com.hk *.cdn.optimizely.com gateway.zscloud.net gateway.zscalertwo.net google.com gateway.zscaler.net analytics.tiktok.com h.online-metrix.net cdntm.hsbc.com.au cdnbc-wup.hsbc.com.au cdnbc-logs.hsbc.com.au *.online-metrix.net *.facebook.com bid.g.doubleclick.net bankstatements.com.au; frame-ancestors 'self' www.hsbc.com.au; font-src 'self' data: *.hsbc.com.hk *.gstatic.com *.hsbc.com.au fonts.gstatic.com at.alicdn.com cdn.jsdelivr.net; worker-src 'self' blob: *.hsbc.com.au; style-src 'self' 'unsafe-inline' *.hsbc.com.hk *.googleapis.com players.brightcove.net *.hsbc.com.au *.infochoice.com.au www.googletagmanager.com *.liveperson.net *.lpsnmedia.net c-hsbc.lytics.io; object-src 'self' blob: players.brightcove.net; child-src 'self'; media-src 'self' blob: *.boltdns.net *.media.brightcove.com *.llnw.net *.llnwd.net *.akafms.net *.akamaihd.net *.cf.brightcove.com *.brightcovecdn.com lpcdn.lpsnmedia.net ssl.gstatic.com manifest.prod.boltdns.net *.lpsnmedia.net; manifest-src 'self' www.hsbc.com.au *.hsbc.com.au; upgrade-insecure-requests ; report-uri /csp/report;
httpd.apache.org logo
Apache HTTP Server
Web servers
75%
1 evidence signal
Header(?:Apache(?:$|/([\d.]+)|[^/-])|(?:^|\b)HTTPD)\;version:\1: Apache
aws.amazon.com logo
Amazon Web Services
PaaS
50%
1 evidence signal
HTMLimplied by Amazon CloudFront

Libraries & Utilities2

github.com logo
core-js
JavaScript libraries
75%
1 evidence signal
JS Global__core-js_shared__ → object
momentjs.com logo
Moment.jsv2.30.1
JavaScript libraries
75%
1 evidence signal
JS Globalmoment → function(v2.30.1)

Want to see AI crawler policies?

Check which AI bots can access this site.

View AI Policy →