Server: nginx
Date: Mon, 16 Nov 2020 19:40:23 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Pragma: no-cache
Cache-control: private
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
P3P: policyref="https://badoo.com/w3c/p3p.xml", CP="NOI DSP COR NID ADM DEV PSA OUR IND UNI PUR COM NAV INT STA"
Vary: User-Agent
Set-Cookie: s2=s2%3A9999%3AMRV0kmoQunF3cqWeNo29eWZJBuyURJL3l0bg9MOm; path=/; domain=.badoo.com; HttpOnly
Set-Cookie: session_cookie_name=s2; path=/; domain=.badoo.com; HttpOnly
Set-Cookie: has_secure_session=1; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.badoo.com
Set-Cookie: device_id=b0b21cd1-1cd1-d144-4483-834dd58a815b; expires=Wed, 23-Oct-2120 19:40:23 GMT; Max-Age=3153600000; path=/; domain=.badoo.com
Set-Cookie: lvnp=0; expires=Sun, 15-Nov-2020 19:40:23 GMT; Max-Age=0; path=/; domain=.badoo.com
Content-Security-Policy: default-src 'self' badoo.com eu1.badoo.com us1.badoo.com am1.badoo.com *.badoo.com *.eu1.badoo.com *.us1.badoo.com *.am1.badoo.com badoocdn.com *.badoocdn.com pd1us.badoocdn.com *.pd1us.badoocdn.com *.api.here.com *.paypal.com *.googlesyndication.com api.giphy.com api.tenor.com *.doubleclick.net *.mapbox.com www.google.ca *.agora.io:* wss://*.agora.io:* wss://badoocdn.com:* wss://*.badoocdn.com:* https://www.google.com https://www.google-analytics.com https://www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' badoocdn.com *.badoocdn.com pd1us.badoocdn.com *.pd1us.badoocdn.com *.googleapis.com *.gstatic.com *.google.com vk.com *.vk.me cdn.syndication.twitter.com *.facebook.net *.facebook.com *.paypal.com www.paypalobjects.com *.youtube.com *.ytimg.com api.ok.ru *.google-analytics.com *.googletagmanager.com *.api.here.com *.instagram.com *.digicert.com *.mapbox.com *.googlesyndication.com *.googletagservices.com *.googleadservices.com *.doubleclick.net *.googlesyndication.com *.ampproject.org *.amazon-adsystem.com adservice.google.com adservice.google.ca *.google.ca https://cdn.ampproject.org; style-src 'self' 'unsafe-inline' badoocdn.com *.badoocdn.com pd1us.badoocdn.com *.pd1us.badoocdn.com vk.com *.vk.me *.googleapis.com; font-src 'self' data: badoocdn.com *.badoocdn.com pd1us.badoocdn.com *.pd1us.badoocdn.com fonts.googleapis.com fonts.gstatic.com; img-src * data: blob:; child-src 'self' badoo.com eu1.badoo.com us1.badoo.com am1.badoo.com *.badoo.com *.eu1.badoo.com *.us1.badoo.com *.am1.badoo.com badoocdn.com *.badoocdn.com pd1us.badoocdn.com *.pd1us.badoocdn.com *.api.here.com *.paypal.com *.googlesyndication.com api.giphy.com api.tenor.com *.doubleclick.net *.mapbox.com www.google.ca *.agora.io:* wss://*.agora.io:* wss://badoocdn.com:* wss://*.badoocdn.com:* https://www.google.com https://www.google-analytics.com https://www.facebook.com blob:; worker-src 'self' badoo.com eu1.badoo.com us1.badoo.com am1.badoo.com *.badoo.com *.eu1.badoo.com *.us1.badoo.com *.am1.badoo.com badoocdn.com *.badoocdn.com pd1us.badoocdn.com *.pd1us.badoocdn.com *.api.here.com *.paypal.com *.googlesyndication.com api.giphy.com api.tenor.com *.doubleclick.net *.mapbox.com www.google.ca *.agora.io:* wss://*.agora.io:* wss://badoocdn.com:* wss://*.badoocdn.com:* https://www.google.com https://www.google-analytics.com https://www.facebook.com blob:; media-src * data: blob:; frame-src * bds: bdp:; prefetch-src 'self' *.googlesyndication.com *.googletagservices.com *.googleadservices.com *.doubleclick.net *.googlesyndication.com *.ampproject.org *.amazon-adsystem.com adservice.google.com adservice.google.ca; frame-ancestors 'self' apps.facebook.com; report-uri /jss/csp_report.phtml
X-Server: www14
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Referrer-Policy: strict-origin-when-cross-origin
x-encoded-content-encoding: gzip
|
