paired.com website report

HTTP/2 200 
accept-ranges: bytes
access-control-allow-origin: *
age: 1100788
cache-control: public, max-age=0, must-revalidate
content-disposition: inline
content-security-policy-report-only: default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdn.amplitude.com https://connect.facebook.net https://analytics.tiktok.com https://*.hotjar.com https://*.usercentrics.eu https://onelinksmartscript.appsflyersdk.com https://websdk.appsflyersdk.com https://cdn.paddle.com https://public.profitwell.com https://*.stripe.com https://www.google.com https://apis.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.paddle.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.appsflyer.com; img-src 'self' data: blob: https://media.graphassets.com https://media.graphcms.com https://us-east-1.graphassets.com https://www.facebook.com https://analytics.tiktok.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://*.doubleclick.net https://*.googlesyndication.com https://*.hotjar.com https://*.usercentrics.eu https://*.appsflyersdk.com https://impressions.onelink.me https://*.google.com https://*.google.co.uk https://*.google.ie https://*.google.ca https://*.google.com.au https://*.google.co.nz https://*.google.de https://*.google.fr https://*.google.es https://*.google.it https://*.google.nl https://*.google.be https://*.google.pt https://*.google.se https://*.google.dk https://*.google.no https://*.google.fi https://*.google.ch https://*.google.at https://*.google.pl https://*.google.co.in https://*.google.co.id https://*.google.com.br https://*.google.com.mx https://*.google.co.za https://*.google.com.sg https://*.google.com.ph https://*.google.ae; connect-src 'self' https://api-us-east-1.graphcms.com https://*.hygraph.com https://proxy.paired.run https://*.amplitude.com https://cdn.paddle.com https://api.paddle.com https://sandbox-api.paddle.com https://*.stripe.com https://www.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.googleadservices.com https://*.doubleclick.net https://*.googlesyndication.com https://*.hotjar.com wss://*.hotjar.com https://*.hotjar.io wss://*.hotjar.io https://*.firebaseapp.com https://identitytoolkit.googleapis.com https://securetoken.googleapis.com https://www.googleapis.com https://www.google.com https://*.usercentrics.eu https://analytics.tiktok.com https://*.tiktokw.us https://*.appsflyersdk.com https://*.onelink.me https://unpkg.com; frame-src 'self' https://*.paddle.com https://*.stripe.com https://*.stripe.network https://www.youtube.com https://youtube.com https://*.firebaseapp.com https://www.google.com https://www.facebook.com https://td.doubleclick.net; worker-src 'self' blob:; manifest-src 'self'; report-uri /api/csp-report; report-to csp-endpoint
content-type: text/html; charset=utf-8
date: Mon, 21 Sep 2026 05:42:25 GMT
etag: "81bb3899e3531510ff48757fb52ba2c7"
permissions-policy: camera=(), microphone=(), geolocation=(), browsing-topics=()
referrer-policy: strict-origin-when-cross-origin
reporting-endpoints: csp-endpoint="/api/csp-report"
server: Vercel
set-cookie: d6d=fe46dda7-2641-46f5-a9b8-72538c5f177c; Path=/; Expires=Tue, 26 Oct 2027 05:42:25 GMT; Max-Age=34560000, g9n=eyJjb3VudHJ5Q29kZSI6IkZSIiwicmVnaW9uQ29kZSI6ImNkZzEiLCJjaXR5TmFtZSI6IlBhcmlzIn0%3D; Path=/, c6y=EUR; Path=/
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-matched-path: /
x-vercel-cache: HIT
x-vercel-id: cdg1::8kcwb-1789969345462-c586acc6c07e
content-length: 93820