HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Date: Fri, 23 Jun 2017 06:36:57 GMT
Pragma: no-cache
Cache-control: private
P3P: policyref="https://hotornot.com/w3c/p3p.xml", CP="NOI DSP COR NID ADM DEV PSA OUR IND UNI PUR COM NAV INT STA"
Set-Cookie: s2=477a776f8a93d4fdeb60eec6a1142f4d5; path=/; domain=.hotornot.com; HttpOnly
Set-Cookie: has_secure_session=1; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.hotornot.com
Content-Security-Policy: default-src 'self' hotornot.com eu1.hotornot.com us1.hotornot.com *.hotornot.com *.eu1.hotornot.com *.us1.hotornot.com honcdn.com *.honcdn.com *.api.here.com *.paypal.com pagead2.googlesyndication.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' honcdn.com *.honcdn.com *.googleapis.com maps.gstatic.com www.gstatic.com *.google.com vk.com *.vk.me cdn.syndication.twitter.com *.facebook.net *.facebook.com www.paypalobjects.com *.youtube.com *.ytimg.com api.ok.ru ssl.google-analytics.com *.api.here.com *.instagram.com *.digicert.com pagead2.googlesyndication.com; style-src 'self' 'unsafe-inline' honcdn.com *.honcdn.com vk.com *.vk.me *.googleapis.com; font-src 'self' honcdn.com *.honcdn.com fonts.googleapis.com fonts.gstatic.com; img-src * data: blob:; media-src * data: blob:; frame-src *; frame-ancestors 'self' apps.facebook.com twinfinder.com *.twinfinder.com; report-uri /jss/csp_report.phtml
Set-Cookie: device_id=d38ab98e-b98e-8eca-ca5c-5c4099b58c8f; expires=Sun, 30-May-2117 06:36:57 GMT; Max-Age=3153600000; path=/; domain=.hotornot.com
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Content-Encoding: gzip