HTTP/1.1 200 OK
X-Frame-Options: SAMEORIGIN
Content-Security-Policy-Report-Only: default-src 'self'; img-src 'self' data: blob: about: https://finance.yahoo.com https://s.yimg.com https://s1.yimg.com https://s2.yimg.com https://s3.yimg.com https://s4.yimg.com https://bats.video.yahoo.com https://geo.yahoo.com https://sb.scorecardresearch.com https://beap-bc.yahoo.com https://beap.gemini.yahoo.com https://dishdigital.sp1.convertro.com https://servedby.flashtalking.com https://d.agkn.com https://ct.yimg.com https://*.doubleclick.net https://*.adsafeprotected.com https://sp.analytics.yahoo.com https://*.googlesyndication.com https://pr.ybp.yahoo.com https://tps30.doubleverify.com https://secure.insightexpressai.com https://secure-gl.imrworldwide.com/cgi-bin/ https://www.facebook.com https://log.fc.yahoo.com https://syndication.twitter.com https://platform.twitter.com https://pbs.twimg.com; script-src 'self' blob: https://www.yahoo.com https://polyfills.yahooapis.com https://consent.cmp.oath.com https://yep.video.yahoo.com https://finance.yahoo.com https://s.yimg.com https://fc.yahoo.com/sdarla/ https://www.gstatic.com https://yqlmailapps.query.yahoo.com https://login.yahoo.com https://comet.yahoo.com https://cdn.syndication.twimg.com 'unsafe-inline' 'unsafe-eval'; object-src https://finance.yahoo.com https://s.yimg.com; style-src 'self' https://finance.yahoo.com https://s.yimg.com https://platform.twitter.com 'unsafe-inline'; media-src 'self' blob: https://*.2mdn.net https://finance.yahoo.com https://s.yimg.com; frame-src 'self' https://www.bankrate.com https://widget-yahoo.ofx.com https://sp.analytics.yahoo.com https://yahoo.real-estate.hk https://smartasset.com https://p.bankrate.com https://s.yimg.com https://fc.yahoo.com https://finance.yahoo.com https://guce.oath.com https://guce.yahoo.com https://delivery.vidible.tv https://platform.twitter.com https://*.advertising.com; worker-src 'self' blob: https://finance.yahoo.com; manifest-src 'self' https://s.yimg.com; font-src 'self' data: https://finance.yahoo.com https://s.yimg.com https://fonts.gstatic.com; connect-src 'self' https://s.yimg.com https://*.atlas.cdn.yimg.com https://rtr.innovid.com https://edgecast-livedax.yahoo.net https://geo.yahoo.com https://us.af.beap.bc.yahoo.com https://guce.yahoo.com https://udc.yahoo.com https://us.adserver.yahoo.com https://*.advertising.com https://bats.video.yahoo.com https://video-api.yql.yahoo.com https://query1.finance.yahoo.com https://query2.finance.yahoo.com https://finance-yql.rc-staging.media.yahoo.com:4080 https://streamerapi.finance.yahoo.com https://finance.yahoo.com https://*.vpg.cdn.yimg.com https://ima3vpaid.appspot.com https://comet.yahoo.com/comet https://ad.doubleclick.net https://sp.analytics.yahoo.com https://guce.oath.com https://guce.yahoo.com https://ganon.yahoo.com; report-uri https://csp.yahoo.com/beacon/csp?src=yahoofinance;
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Date: Sat, 29 Sep 2018 22:55:57 GMT
Via: http/1.1 media-router-omega53.prod.media.bf1.yahoo.com (ApacheTrafficServer [cMsSfW]), http/1.1 media-ncache3.prod.media.bf1.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 media-ncache3.prod.media.bf1.yahoo.com (ApacheTrafficServer [cRs f ]), http/1.1 media-ncache12.prod.media.bf1.yahoo.com (ApacheTrafficServer [cMsSf ]), http/1.1 media-router77.prod.media.bf1.yahoo.com (ApacheTrafficServer [cSsSfU]), https/1.1 e40.ycpi.dca.yahoo.com (ApacheTrafficServer [cMsSf ])
Server: ATS
Referrer-Policy: no-referrer-when-downgrade
P3P: policyref="http://info.yahoo.com/w3c/p3p.xml, CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV
Warning: 110 Response is stale
Strict-Transport-Security: max-age=15552000
Cache-Control: max-age=0, private
Expires: -1
Set-Cookie: B=b0db6vpdr06pq&b=3&s=qi; expires=Mon, 30-Sep-2019 00:39:22 GMT; path=/; domain=.yahoo.com
Age: 6205
Transfer-Encoding: chunked
Connection: keep-alive
Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Public-Key-Pins-Report-Only: max-age=2592000; pin-sha256="2fRAUXyxl4A1/XHrKNBmc8bTkzA7y4FB/GLJuNAzCqY="; pin-sha256="I/Lt/z7ekCWanjD0Cvj5EqXls2lOaThEA0H2Bg4BT/o="; pin-sha256="Wd8xe/qfTwq3ylFNd3IpaqLHZbh2ZNCLluVzmeNkcpw="; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="uUwZgwDOxcBXrQcntwu+kYFpkiVkOaezL0WYEZ3anJc="; pin-sha256="dolnbtzEBnELx/9lOEQ22e6OZO/QNb6VSSX2XHA3E7A="; includeSubdomains; report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-hpkp-report-only"