autoplansforus.vip

Http-Version: 1.1
Status-Code: 200
Status: 200 OK
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
x-xss-protection: 1; mode=block
Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation;
Content-Security-Policy-Report-Only: default-src 'self'; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; img-src 'self' data: blob: about: https://finance.yahoo.com https://*.yimg.com https://*.yahoo.com https://sb.scorecardresearch.com https://dishdigital.sp1.convertro.com https://servedby.flashtalking.com https://d.agkn.com https://*.doubleclick.net https://*.adsafeprotected.com https://*.googlesyndication.com https://tps30.doubleverify.com https://secure.insightexpressai.com https://secure-gl.imrworldwide.com/cgi-bin/ https://www.facebook.com https://syndication.twitter.com https://platform.twitter.com https://pbs.twimg.com; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://polyfills.yahooapis.com https://*.oath.com https://s.yimg.com https://fc.yahoo.com/sdarla/ https://www.gstatic.com https://*.yahoo.com https://cdn.syndication.twimg.com; object-src https://finance.yahoo.com https://s.yimg.com; style-src 'self' 'unsafe-inline' https://finance.yahoo.com https://s.yimg.com https://platform.twitter.com; media-src 'self' blob: https://*.2mdn.net https://finance.yahoo.com https://s.yimg.com; frame-src 'self' https://www.bankrate.com https://widget-yahoo.ofx.com https://sp.analytics.yahoo.com https://yahoo.real-estate.hk https://smartasset.com https://p.bankrate.com https://s.yimg.com https://fc.yahoo.com https://finance.yahoo.com https://guce.oath.com https://guce.yahoo.com https://delivery.vidible.tv https://platform.twitter.com https://*.advertising.com https://yahoo.crunchbaseembed.com https://www.surveymonkey.com; worker-src 'self' blob: https://finance.yahoo.com; manifest-src 'self' https://s.yimg.com; font-src 'self' data: https://finance.yahoo.com https://s.yimg.com https://fonts.gstatic.com; connect-src 'self' https://s.yimg.com https://rtr.innovid.com https://*.yahoo.net https://*.yahoo.com https://*.oath.com https://*.advertising.com https://*.cdn.yimg.com https://ima3vpaid.appspot.com https://ad.doubleclick.net; report-uri https://csp.yahoo.com/beacon/csp?src=yahoofinance; report-to csp-endpoint;
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Date: Wed, 17 Oct 2018 03:55:27 GMT
Via: http/1.1 media-router-omega21.prod.media.sg3.yahoo.com (ApacheTrafficServer [cMsSfW]), http/1.1 media-router24.prod.media.sg3.yahoo.com (ApacheTrafficServer [cMsSfW])
Server: ATS
Referrer-Policy: no-referrer-when-downgrade
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Cache-Control: max-age=0, private
Expires: -1
Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"