HTTP/1.1 200 OK
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-security-policy: default-src 'self'; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-top-navigation-by-user-activation allow-presentation; img-src 'self' data: blob: about: https://*.yimg.com https://*.yahoo.com https://*.yahoo.net https://*.yahoodns.net https://us.y.atwola.com https://*.scorecardresearch.com https://dishdigital.sp1.convertro.com https://servedby.flashtalking.com https://d.agkn.com https://*.doubleclick.net https://*.adsafeprotected.com https://*.googlesyndication.com https://tps30.doubleverify.com https://secure.insightexpressai.com https://secure-gl.imrworldwide.com/cgi-bin/ https://www.facebook.com https://syndication.twitter.com https://platform.twitter.com https://pbs.twimg.com https://abs.twimg.com https://*.adaptv.advertising.com/ https://trk.vidible.tv/ https://media-mbst-pub-ue1.s3.amazonaws.com https://*.cloudfront.net https://vop-yahoo.secure.footprint.net https://vop-yahoo.akamaized.net https://yahoovod.hs.llnwd.net; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://polyfills.yahooapis.com https://*.oath.com https://s.yimg.com https://fc.yahoo.com/sdarla/ https://www.gstatic.com https://*.yahoo.com https://cdn.syndication.twimg.com https://search.cashay.com https://platform.twitter.com https://instagram.com https://www.instagram.com https://s.yimg.com/rx/ https://assets.video.yahoo.net/; object-src https://cashay.com https://s.yimg.com; style-src 'self' 'unsafe-inline' https://cashay.com https://s.yimg.com https://platform.twitter.com https://assets.video.yahoo.net; media-src 'self' blob: https://*.2mdn.net https://cashay.com https://s.yimg.com https://video-api.yql.yahoo.com https://*.yahoo.net/; frame-src 'self' https://sp.analytics.yahoo.com https://smartasset.com https://s.yimg.com https://fc.yahoo.com https://cashay.com https://guce.oath.com https://guce.yahoo.com https://guce.cashay.com https://delivery.vidible.tv https://platform.twitter.com https://syndication.twitter.com https://*.advertising.com https://www.surveymonkey.com https://www.instagram.com https://www.googletagmanager.com https://www.youtube.com https://embed.acast.com https://assets.video.yahoo.net/ https://cdn-ssl.vidible.tv/prod/; worker-src 'self' blob: https://cashay.com; manifest-src 'self' https://s.yimg.com; font-src 'self' data: https://cashay.com https://s.yimg.com https://fonts.gstatic.com; child-src blob:; connect-src 'self' https://guce.cashay.com https://s.yimg.com https://rtr.innovid.com https://*.yahoo.net https://*.yahoo.com https://*.oath.com https://*.advertising.com https://ima3vpaid.appspot.com https://ad.doubleclick.net https://*.vpg.cdn.yimg.com/ https://media.zenfs.com/ https://*.uplynk.com https://cloudflare-dns.com; report-uri https://csp.yahoo.com/beacon/csp?src=cashay; report-to csp-endpoint; upgrade-insecure-requests;
report-to: {"group":"csp-endpoint","max-age":10886400,"endpoints":[{"url":"https://csp.yahoo.com/beacon/csp?src=cashay"}]}
content-type: text/html; charset=utf-8
vary: Accept-Encoding
set-cookie: B=02eacvlfr2u2b&b=3&s=al; expires=Sun, 15-Nov-2021 18:49:47 GMT; path=/; domain=.yahoo.com
date: Sun, 15 Nov 2020 18:49:47 GMT
x-envoy-upstream-service-time: 727
server: ATS
x-envoy-decorator-operation: cashay--mtls-production-bf1.finance-personalfinance-k8s.svc.yahoo.local:4080/*
Age: 0
Transfer-Encoding: chunked
Connection: keep-alive