Cache-Control: private, no-cache, no-store, must-revalidate Cf-Ray: 3a969bf41dd10743-AMS Content-Security-Policy: default-src 'self' https://www.coinbase.com; child-src 'self' https://www.coinbase.com https://*.online-metrix.net https://*.wpstn.com https://netverify.com https://platform.twitter.com https://www.google.com/recaptcha/ https://cdn.plaid.com/link/ blob: https://coinbase.ada.support; connect-src 'self' https://www.coinbase.com https://api.coinbase.com https://api.mixpanel.com https://*.online-metrix.net https://api.cloudinary.com https://ott9.wpstn.com/live static.coinbase.com wss://ws.coinbase.com wss://ws.coinbase.com:443 https://coinbase.ada.support/api/; font-src 'self' https://www.coinbase.com https://assets.coinbase.com/ static.coinbase.com; img-src 'self' data: https://www.coinbase.com https://images.coinbase.com https://exceptions.coinbase.com https://coinbase-uploads.s3.amazonaws.com https://s3.amazonaws.com/app-public/Coinbase-email/ https://maps.gstatic.com https://ssl.google-analytics.com https://www.google.com https://maps.googleapis.com https://csi.gstatic.com https://www.google-analytics.com https://res.cloudinary.com https://secure.gravatar.com https://i2.wp.com https://*.online-metrix.net https://assets.coinbase.com/ https://hexagon-analytics.com https://api.mixpanel.com blob: static.coinbase.com https://d124s1zbdqkqqe.cloudfront.net https://www.facebook.com/tr; media-src 'self' https://www.coinbase.com blob:; object-src 'self' data: https://www.coinbase.com https://cdn.siftscience.com https://*.online-metrix.net https://www.gstatic.com https://www.google.com/recaptcha/api/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.coinbase.com https://cdn.siftscience.com https://*.newrelic.com https://bam.nr-data.net https://*.google-analytics.com https://www.google.com https://www.gstatic.com https://*.online-metrix.net https://code.jquery.com https://chart.googleapis.com https://maps.googleapis.com https://maps.gstatic.com https://netverify.com https://ajax.cloudflare.com https://cdn.plaid.com/link/v2/stable/ https://assets.coinbase.com/ static.coinbase.com; style-src 'self' 'unsafe-inline' https://www.coinbase.com https://assets.coinbase.com/ static.coinbase.com; report-uri /csp-report Content-Type: text/html; charset=utf-8 Date: Fri, 06 Oct 2017 06:36:56 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT Pragma: no-cache Public-Key-Pins: max-age=5184000; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="JbQbUG5JMJUoI6brnx0x3vZF6jilxsapbXGVfjhN8Fg=" Server: cloudflare-nginx Set-Cookie: __cfduid=dfd12a71f5626e49ec62e365ac6b64fc51507271816; expires=Sat, 06-Oct-18 06:36:56 GMT; path=/; domain=.coinbase.com; HttpOnly _coinbase_session=VkFLd0NyemZaM2FzeWJNUmM3UXFRNVBuc1U2T3M1bitIcSsxWVYyRWtneXFWK0lETmNwVHBQRXNoNGs1RGpsUXF3aG1MNUNMWjd6U2JqMEdXNEVWZ01TNFpESVQvaHMrN2NSV3N0K3BYdVRReENZaTYvOVlNZnNjQXl3MW1YZGMvSmlOQWpKUFRETkUyTTFMai9ickxyYWJOUWJyRjlMWGNhZHhhWGw4blJvSDhxVUNYaWNpbkhWOW9JVTNaN2RvVDRYL0NEeWhjWDJzRldjaXRXU1dPUT09LS1sZVIvWVhqTFN5L3ptRUY4N0EwM3V3PT0%3D--a03b1be003d13360862ad037a02fa2abee9cb9fa; path=/; secure; HttpOnly Status: 200 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: DENY X-Permitted-Cross-Domain-Policies: none X-Powered-By: Proof-of-Work X-Request-Id: 9bd71d32-6b8a-495c-a5be-72af8bd0427d X-Xss-Protection: 1; mode=block