Aoaco.info - Aoa Co

Webserver

Signature: ATS
Response status code: 200
Response speed: 4502 milliseconds

HTTP headers

• Cache-Control: max-age=0, private
• Connection: keep-alive
• Content-Encoding: gzip
• Content-Security-Policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation;
• Content-Security-Policy-Report-Only: default-src 'self'; sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation; img-src 'self' data: blob: about: https://finance.yahoo.com https://*.yimg.com https://*.yahoo.com https://sb.scorecardresearch.com https://dishdigital.sp1.convertro.com https://servedby.flashtalking.com https://d.agkn.com https://*.doubleclick.net https://*.adsafeprotected.com https://*.googlesyndication.com https://tps30.doubleverify.com https://secure.insightexpressai.com https://secure-gl.imrworldwide.com/cgi-bin/ https://www.facebook.com https://syndication.twitter.com https://platform.twitter.com https://pbs.twimg.com; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://polyfills.yahooapis.com https://*.oath.com https://s.yimg.com https://fc.yahoo.com/sdarla/ https://www.gstatic.com https://*.yahoo.com https://cdn.syndication.twimg.com; object-src https://finance.yahoo.com https://s.yimg.com; style-src 'self' 'unsafe-inline' https://finance.yahoo.com https://s.yimg.com https://platform.twitter.com; media-src 'self' blob: https://*.2mdn.net https://finance.yahoo.com https://s.yimg.com; frame-src 'self' https://www.bankrate.com https://widget-yahoo.ofx.com https://sp.analytics.yahoo.com https://yahoo.real-estate.hk https://smartasset.com https://p.bankrate.com https://s.yimg.com https://fc.yahoo.com https://finance.yahoo.com https://guce.oath.com https://guce.yahoo.com https://delivery.vidible.tv https://platform.twitter.com https://*.advertising.com https://yahoo.crunchbaseembed.com https://www.surveymonkey.com; worker-src 'self' blob: https://finance.yahoo.com; manifest-src 'self' https://s.yimg.com; font-src 'self' data: https://finance.yahoo.com https://s.yimg.com https://fonts.gstatic.com; connect-src 'self' https://s.yimg.com https://rtr.innovid.com https://*.yahoo.net https://*.yahoo.com https://*.oath.com https://*.advertising.com https://*.cdn.yimg.com https://ima3vpaid.appspot.com https://ad.doubleclick.net; report-uri https://csp.yahoo.com/beacon/csp?src=yahoofinance; report-to csp-endpoint;
• Content-Type: text/html; charset=utf-8
• Date: Tue, 30 Oct 2018 08:56:09 GMT
• Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
• Expires: -1
• Referrer-Policy: no-referrer-when-downgrade
• Strict-Transport-Security: max-age=31536000
• Transfer-Encoding: chunked
• Via: http/1.1 media-router-omega2.prod.media.bf1.yahoo.com (ApacheTrafficServer [cMsSfW]), http/1.1 media-router80.prod.media.bf1.yahoo.com (ApacheTrafficServer [cMsSfW])
• X-Content-Type-Options: nosniff
• X-Frame-Options: SAMEORIGIN
• set-cookie: B=ete2r4ddtg759&b=3&s=gn; expires=Tue, 30-Oct-2019 08:56:09 GMT; path=/; domain=.yahoo.com
• x-xss-protection: 1; mode=block