Bookmate.com

server: nginx
date: Tue, 11 Mar 2025 11:57:38 GMT
content-type: text/html; charset=utf-8
surrogate-control: no-store
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
report-to: {"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"/csp-logger"}]}
content-security-policy: report-uri /csp-logger;report-to csp-endpoint;default-src 'self' https://vanguardassets.bmstatic.com/assets/;connect-src 'self' https://vanguardassets.bmstatic.com/assets/ https://mc.yandex.fr https://mc.yandex.kz https://mc.yandex.ru https://mc.yandex.tr https://mc.yandex.com https://cognito-identity.us-east-1.amazonaws.com https://mobileanalytics.us-east-1.amazonaws.com https://stats.g.doubleclick.net https://www.facebook.com https://connect.facebook.net https://www.google-analytics.com https://*.google-analytics.com https://*.googlesyndication.com https://*.analytics.google.com https://www.google.com/pagead/landing https://googleads.g.doubleclick.net https://analytics.google.com https://api.rollbar.com https://ajax.googleapis.com https://wa.onelink.me https://wa.appsflyer.com https://analytics.tiktok.com/api/v2/pixel https://analytics.tiktok.com/api/v2/pixel/act https://m.m2888.net/c/p/78a1fd2a638d42918f6403e6550027a1 http://www1.dev.bookmate.com/api/v5/mtn_ghana/identity https://www1.dev.bookmate.com/api/v5/mtn_ghana/identity_sign_in;style-src 'self' 'unsafe-inline' https://vanguardassets.bmstatic.com/assets/ https://tagmanager.google.com https://fonts.googleapis.com https://www.googletagmanager.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://vanguardassets.bmstatic.com/assets/ https://app.link https://connect.facebook.net https://www.google-analytics.com https://ssl.google-analytics.com https://*.google-analytics.com https://*.googlesyndication.com https://*.analytics.google.com https://www.google.com https://www.googletagmanager.com https://www.googleadservices.com https://www.gstatic.com https://js.stripe.com https://mc.yandex.ru https://tagmanager.google.com https://websdk.appsflyer.com https://wa.onelink.me https://analytics.tiktok.com/;font-src 'self' https://vanguardassets.bmstatic.com/assets/ data: https://fonts.gstatic.com;img-src * 'self' 'unsafe-inline' https://vanguardassets.bmstatic.com/assets/ data: https://www.gstatic.com https://ssl.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net;media-src * 'self' 'unsafe-inline' https://ssl.gstatic.com;frame-src 'self' https://*.bookmate.com https://bookmate.com https://bookmate.onelink.me https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://js.stripe.com https://simplecast.com https://mc.yandex.ru;form-action 'self' https://vanguardassets.bmstatic.com/assets/ https://www.facebook.com;object-src 'none';base-uri 'self';frame-ancestors 'self';script-src-attr 'none';upgrade-insecure-requests
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
origin-agent-cluster: ?1
referrer-policy: no-referrer
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-xss-protection: 0
set-cookie: _csrf=aEtBOKcp7z0RUDovWi4bpqpF; Path=/
x-generated-with: LOVE
content-encoding: gzip