Link Check results for tinder.com

cache-control: must-revalidate, public, max-age=3600

content-encoding: gzip

content-security-policy: default-src *;script-src * 'unsafe-inline' 'unsafe-eval';style-src * 'unsafe-inline' blob:;img-src * data: blob:;media-src * data:;font-src * data: https:

content-security-policy-report-only: default-src 'self';base-uri 'self';connect-src 'self' wss://keepalive.gotinder.com wss://keepalive.ue1.d1.tstaging.com https://messagepublish.ue1.d4.tstaging.com https://*.gotinder.com https://*.appsflyer.com https://*.bugsnag.com https://tinder-api.arkoselabs.com https://*.spotify.com https://*.line.me https://*.onelink.me https://*.*.braintree-api.com https://*.*.paypal.com https://*.braintree-api.com https://*.paypal.com https://*.braintreegateway.com https://*.s3.amazonaws.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.doubleclick.net https://*.google.com https://maps.googleapis.com https://*.gstatic.com https://fonts.googleapis.com;script-src 'nonce-aR8nh8dZEMVNIKQC/rcsnw==' 'strict-dynamic' 'unsafe-eval' 'unsafe-hashes' 'sha256-PLCxbpHSwAa8+W198R1KQQ9UDCexTvYy4z4YmCg21NM=' 'unsafe-inline' https:;style-src 'self' 'unsafe-inline' blob: https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.doubleclick.net https://*.google.com https://maps.googleapis.com https://*.gstatic.com https://fonts.googleapis.com;frame-src 'self' https://tinder-api.arkoselabs.com https://*.*.paypal.com https://*.paypal.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.doubleclick.net https://*.google.com https://maps.googleapis.com https://*.gstatic.com https://fonts.googleapis.com;frame-ancestors 'self';form-action 'self' *.tinder.com tinder.com;object-src 'none';img-src 'self' data: blob: https://*.gotinder.com https://*.scdn.co https://*.cdninstagram.com https://*.cloudfront.net https://*.s3.amazonaws.com https://*.*.paypal.com https://*.paypalobjects.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.doubleclick.net https://*.google.com https://maps.googleapis.com https://*.gstatic.com https://fonts.googleapis.com;media-src 'self' data: https://*.scdn.co https://*.spotify.com https://media.tenor.com;report-to csp-reports;font-src 'self' data: https:;manifest-src 'self' https:

content-type: text/html; charset=utf-8

cross-origin-opener-policy: same-origin-allow-popups

date: Fri, 16 May 2025 10:53:43 GMT

etag: W/"7238e-xPpUA/PM+LE+G0FnL6jZdkFVovw"

referrer-policy: origin-when-cross-origin

report-to: {"group":"csp-reports","max_age":604800,"endpoints":[{"url":"/api/csp-reports"}]}

server: nginx

strict-transport-security: max-age=31536000

vary: Accept-Encoding

via: 1.1 efb576f3260fb935bd57cce721b78428.cloudfront.net (CloudFront)

x-amz-cf-id: pF02h8S3FSmm6i-aMqekjIccBrpMmFOQEQ0Yo-VJNkdusXMMxyuljA==

x-amz-cf-pop: FRA60-P8

x-cache: Miss from cloudfront

x-content-type-options: nosniff

x-dns-prefetch-control: on

x-frame-options: SAMEORIGIN

x-powered-by: Express

x-render-method: ssr

x-xss-protection: 1; mode=block