badoo.com

.com toplist crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 499 ms crawled 2026-05-18

CZ · 31.222.67.112 · AS12678 Badoo Trading Limited

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title

Best Free Online Dating Site & App - Friends, Chat, Flirt | Badoo

Description

Join Badoo’s community - the best free online dating app. Chat before you match, meet & date people in your area or make new friends from all over the world.

Language

Canonical

https://badoo.com/

Translations

ar
bg
bs
ca
cs
da
de
el
en-gb
en-us
es
es-ar
es-co
es-mx
fi
fr
gl
he
hi
hr
hu
id
it
ja
ko
lt
lv
ms
nb
nl
pl
pt
pt-pt
ro
ru
sk
sl
sq
sr
sv
sw
th
tl
tr
uk
vi
zh
zh-hant

Open Graph

url: https://badoo.com/en/
title: Best Free Online Dating Site & App - Friends, Chat, Flirt | Badoo
locale: en
site name: Badoo
description: Join Badoo’s community - the best free online dating app. Chat before you match, meet & date people in your area or make new friends from all over the world.

Technology

Server: nginx
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Registration

Registrar

MarkMonitor Inc.

Created

2003-05-26

Expires

2027-05-26 371 days left

Updated

2025-04-24

Name servers

ns1.badoo.com
ns2.badoo.com
ns3.badoo.com
ns4.badoo.com
ns5.badoo.com
ns6.badoo.com

DNS records live

NS

ns1.badoo.com
ns2.badoo.com
ns3.badoo.com
ns4.badoo.com
ns5.badoo.com
ns6.badoo.com
ns7.badoo.com
ns8.badoo.com

MX

5 mailin1eu.monopost.com
5 mailin1us.monopost.com

TXT

Show 6 TXT records

facebook-domain-verification=go09qpwzxq40ry6h4ehsynos0y824n
google-site-verification=nW3eL-Oz934O7wMttQ855YJ9seq5866Xly_qarjPhj4
sql35j0cp6sccts163r949kc1zghds8c
google-site-verification=MNvdEFom8ksg-0SRNZRPQHPqnE4-HS3q8HvOFSoWHd0
google-site-verification=pj-0XqkiW0M4hU5dJNxkPghak-swvnDtPywyY7aK4Qs
google-site-verification=lzwmS88UMZwgkBTtXaIpsXv6DVDas3pbBQCrkCa8bgE

Email authentication strong

SPF: v=spf1 include:mail.zendesk.com ip4:31.222.64.0/20 ip4:159.253.176.0/21 -all
strict (-all)
DMARC: v=DMARC1; p=reject; pct=100; fo=1; rua=mailto:dmarc-rua@corp.badoo.com
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-04-12 to 2026-07-11

Expires in 52 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 40/100 Checked live page: https://badoo.com/

present

content-security-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: default-src 'self' https://consent.badoo.com; script-src 'self' 'unsafe-inline' 'report-sample' 'nonce-m7ELM7ZLeYexDIqFr14J0w==' badoocdn.com *.badoocdn.com https://consent.badoo.com https://*.googletagmanager.com https://tr.snapchat.com https://tr-shadow.snapchat.com; style-src 'self' 'unsafe-inline'; connect-src 'self' *.badoo.com *.badoo.eu *.badoo.us https://consent.badoo.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://tr.snapchat.com https://tr-shadow.snapchat.com https://*.sentry.io; child-src 'self' blob:; font-src * data:; manifest-src 'self'; base-uri 'self'; frame-src * bds: bdp:; img-src * data: blob:; media-src * data: blob:; report-uri /jss/csp_report.phtml?token=badoo_homepage&env=production; upgrade-insecure-requests;