Badoo.is

Server: nginx/1.18.0
Date: Mon, 31 Jul 2023 17:05:32 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://badoo.com/
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 31 Jul 2023 17:05:33 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
Cache-control: private
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
P3P: policyref="https://badoo.com/w3c/p3p.xml", CP="NOI DSP COR NID ADM DEV PSA OUR IND UNI PUR COM NAV INT STA"
Vary: User-Agent
Set-Cookie: device_id=6389f8b2-f8b2-b2fe-fe11-11459f8929cc; expires=Wed, 07-Jul-2123 17:05:33 GMT; Max-Age=3153600000; path=/; domain=.badoo.com
Content-Security-Policy: default-src 'self' badoocdn.com *.badoocdn.com us1.badoocdn.com; connect-src 'self' badoo.com eu1.badoo.com us1.badoo.com am1.badoo.com gew3.badoo.com fr1.badoo.com badoocdn.com *.badoocdn.com us1.badoocdn.com  https://*.amazon-adsystem.com https://*.g.doubleclick.net https://*.google-analytics.com https://*.googletagmanager.com https://*.analytics.google.com https://google.com https://*.google.com https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://www.facebook.com https://cdn.ampproject.org https://api.giphy.com https://www.googleadservices.com https://attestation.android.com https://csi.gstatic.com https://s0.2mdn.net https://api.tenor.com https://g.tenor.com https://maps.googleapis.com https://consent.badoo.com https://essentialaccessibility.com;  script-src 'self' 'unsafe-inline' 'unsafe-eval' 'nonce-UiEXHgzkLEVZrXCz2dK31jMYHJ4=' 'report-sample' badoocdn.com *.badoocdn.com us1.badoocdn.com  https://*.googletagmanager.com https://connect.facebook.net https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://s0.2mdn.net https://cdn.ampproject.org https://c.amazon-adsystem.com https://www.google-analytics.com https://pay.google.com https://adservice.google.com https://www.googletagservices.com https://maps.googleapis.com https://dashboard.essentialaccessibility.com https://consent.badoo.com https://essentialaccessibility.com https://www.google.com https://cdn.plaid.com https://cdn.plaid.com; style-src 'self' 'unsafe-inline' badoocdn.com *.badoocdn.com us1.badoocdn.com https://fonts.googleapis.com; font-src 'self' data: badoocdn.com *.badoocdn.com us1.badoocdn.com https://fonts.gstatic.com https://tpc.googlesyndication.com;  prefetch-src 'self'  badoocdn.com *.badoocdn.com us1.badoocdn.com https://cdn.plaid.com ; img-src * data: blob: android-webview-video-poster:; child-src 'self' blob:; worker-src 'self' blob:; media-src * data: blob:; object-src 'self'  badoocdn.com *.badoocdn.com us1.badoocdn.com; base-uri 'self'; manifest-src 'self' badoo.com eu1.badoo.com us1.badoo.com am1.badoo.com gew3.badoo.com fr1.badoo.com; form-action 'self'  https://www.facebook.com; frame-src * bds: bdp:; frame-ancestors 'none'; upgrade-insecure-requests; report-uri /jss/csp_report.phtml?token=badoo_mobile_web&release=29222&env=production
Link: <https://us1.badoocdn.com>; rel=dns-prefetch
Link: <https://us1.badoocdn.com>; rel=preconnect; crossorigin=use-credentials
Link: <https://consent.badoo.com>; rel=dns-prefetch
Link: <https://consent.badoo.com>; rel=preconnect
Link: <https://us1.badoocdn.com/i/v2/-/mobileweb/webdist/js/es5/main.35109153b0e360cc4823.js>; rel=preload; as=script; crossorigin=use-credentials
X-Server: www20
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Referrer-Policy: strict-origin-when-cross-origin
X-Content-Type-Options: nosniff
Content-Encoding: gzip