HTTP/1.1 200 OK
x-powered-by: Express
content-type: text/html; charset=utf-8
content-security-policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://tag.tapad.com https://*.appboycdn.com https://*.intercomcdn.com https://*.crazyegg.com https://*.dashhudson.com https://*.stripe.com http://*.friendbuy.com http://djnf6e5yyirys.cloudfront.net http://idsync.rlcdn.com http://images.ctfassets.net http://tag.rmp.rakuten.com https://*.crazyegg.com https://*.friendbuy.com https://*.intercom.io https://*.linksynergy.com https://*.scene7.com https://api.recurly.com https://cdn.contentful.com https://connect.facebook.net https://www.pinterest.com https://ct.pinterest.com https://djnf6e5yyirys.cloudfront.net https://idsync.rlcdn.com https://images.contentful.com https://images.ctfassets.net https://js.appboycdn.com https://js.recurly.com https://nypi.dc-storm.com https://s.pinimg.com https://sdk.iad-01.braze.com https://static.intercomassets.com https://stats.g.doubleclick.net https://storage.googleapis.com https://tag.rmp.rakuten.com https://us-east4-rental-dev.cloudfunctions.net https://us-east4-rental-prod.cloudfunctions.net https://us-east4-rental-staging.cloudfunctions.net https://videos.contentful.com https://videos.ctfassets.net https://www.facebook.com https://*.google-analytics.com https://*.google.com https://www.google.com.pr https://www.google.co.uk https://www.google.ca https://www.google.de https://www.google.fr https://www.google.es https://www.google.com.au https://www.google.co.jp https://www.google.nl https://www.google.it https://www.google.com.mx https://www.google.ie https://www.google.com.ar https://www.google.co.nz https://www.google.co.in https://www.googletagmanager.com ws: wss: *.rewardstyle.com *.nuuly.com *.tiktok.com *.typhoona.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://td.doubleclick.net https://d38xvr37kwwhcm.cloudfront.net https://www.cloudflare.com/cdn-cgi/trace https://trail.grin.co https://fast.fonts.net https://data.adxcel-ec2.com https://trkn.us https://js-agent.newrelic.com https://bam.nr-data.net https://*.clarity.ms https://*.bing.com https://*.pdst.fm https://*.cloudfunctions.net/pdst-events-prod-sink https://*.byspotify.com blob: https://intercom-sheets.com https://*.fbot.me http://*.tvsquared.com https://adsmeasurement.com amazon-adsystem.com *.amazon-adsystem.com paa-reporting-advertising.amazon *.paa-reporting-advertising.amazon https://pixels.spotify.com; frame-ancestors 'none'; report-uri https://www.nuuly.com/api/security/csp/violation
set-cookie: x_nuuly_clientId=f57de79b-eae8-4f50-9deb-b774550b804c; Max-Age=157784630; Path=/; Expires=Fri, 01 Feb 2030 07:56:55 GMT
Content-Length: 610491
etag: W/"950bb-wFsnNU7MOK/PboelkORMrVBe3Gc"
vary: Accept-Encoding
date: Sat, 01 Feb 2025 02:53:05 GMT
via: 1.1 google, 1.1 google
access-control-allow-credentials: true
access-control-allow-headers: x-nuuly-clientid,x-urbn-channel,x-urbn-auth-code-bypass,content-type,x-urbn-clientId,x-urbn-responseId,x-urbn-trackingOptIn,x-urbn-query-version
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-origin: *
access-control-max-age: 1728000
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:cd:41:35:59:de:53:1e:39:da:73:64:ba:cd:3f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust TLS RSA CA G1
Validity
Not Before: Jan 15 00:00:00 2025 GMT
Not After : Jan 14 23:59:59 2026 GMT
Subject: C=US, ST=Pennsylvania, L=Philadelphia, O=Urban Outfitters, Inc., CN=*.nuuly.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:c4:19:08:3c:be:cf:9a:d9:92:ab:27:13:6a:3e:
74:bd:18:0e:f5:e7:4c:9d:55:cf:ce:f5:7c:86:87:
b6:16:b0:33:91:4a:ea:2c:52:a8:50:d4:d9:67:ae:
2d:6b:6b:18:c2:82:7e:fa:d9:2c:60:57:ee:e6:ce:
85:d9:02:ad:cb:ac:63:a6:60:a9:f6:3e:47:47:18:
39:9c:cc:78:e3:80:92:0c:c5:c9:ac:ac:d9:30:27:
49:de:6a:be:87:8f:f5:11:e5:e5:62:ad:13:77:2a:
3c:bb:fd:c8:ca:28:86:8b:5b:58:1d:51:e0:39:92:
b2:61:ed:c8:01:72:19:d3:67:37:c5:a4:cd:2e:4a:
40:6d:90:8e:da:69:d9:43:cb:15:ff:a7:c5:8a:a3:
17:0f:ea:e6:4a:a9:39:26:5e:9c:82:8b:1a:fe:c4:
d2:6a:c5:e9:9c:07:a4:7d:96:f4:41:5d:bf:22:e7:
bc:7c:5e:5f:25:3f:0f:25:55:2f:e3:95:ed:0d:cc:
78:9e:fb:b1:10:c2:f2:c7:6f:9b:f7:8d:e4:3d:68:
b8:4d:a7:29:0f:89:59:a1:cf:7e:1e:e4:80:c3:a9:
95:09:b7:84:f1:6f:4f:fc:ff:db:9a:ce:7e:d1:f0:
c0:3b:a5:11:32:cf:ce:1f:11:fa:d4:da:f9:d1:81:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57
X509v3 Subject Key Identifier:
5E:4E:08:E1:45:61:FF:7E:00:38:CB:38:E3:83:59:2A:D2:B3:7E:9C
X509v3 Subject Alternative Name:
DNS:*.nuuly.com, DNS:nuuly.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.2
CPS: http://www.digicert.com/CPS
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 CRL Distribution Points:
Full Name:
URI:http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
Authority Information Access:
OCSP - URI:http://status.geotrust.com
CA Issuers - URI:http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
X509v3 Basic Constraints: critical
CA:FALSE
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
Timestamp : Jan 15 16:54:04.508 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:79:A2:11:8C:84:63:23:FD:C8:C0:B7:77:
27:A7:04:43:0F:3B:D0:76:B2:27:45:0C:E1:50:D8:04:
9B:1F:74:DC:02:20:32:78:58:B9:7D:2A:F5:5D:DE:84:
EA:C5:00:FB:94:FB:C9:50:17:D9:6F:34:94:53:49:24:
FB:B4:09:76:3C:72
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
Timestamp : Jan 15 16:54:04.574 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:76:C7:61:68:96:6B:CA:60:04:6B:C9:03:
74:B2:EE:C2:08:6F:25:E4:E7:52:D1:05:73:5B:C4:DF:
B3:F8:26:DF:02:20:2E:4D:0B:51:9D:88:3A:B1:0D:23:
3B:F1:6E:CC:1F:BA:0E:22:32:DD:0C:63:25:E1:AD:77:
FA:CF:76:A0:70:BE
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:
5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3
Timestamp : Jan 15 16:54:04.590 2025 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:DE:53:86:D1:F7:EC:1D:B5:D1:6E:68:
37:81:6E:45:0D:00:32:9E:21:17:97:92:AA:31:F7:5D:
19:C0:D0:A6:C2:02:21:00:E3:BC:53:4E:6E:46:32:5C:
85:9B:40:A9:E7:C4:43:87:DF:05:FB:F4:98:5D:79:82:
15:A8:C5:44:24:09:F6:65
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
8e:02:e5:4f:7a:c4:d6:ef:34:b6:31:4a:41:16:ab:fb:cd:42:
45:73:f2:95:56:97:74:70:b8:e4:f5:b0:b4:30:47:32:78:91:
60:51:88:cd:1c:db:d5:da:ba:23:32:e3:80:02:1c:a3:7d:15:
ec:e9:33:b8:a5:bf:71:a4:78:7b:d3:ba:86:d7:95:f9:94:c0:
86:32:30:14:d4:50:6b:f1:34:59:64:20:26:24:ac:b3:88:58:
94:7a:d6:b4:48:92:50:3e:94:ee:2c:20:df:11:56:81:c7:6e:
70:49:e0:fe:79:51:fa:a4:44:8a:23:46:1f:f5:75:ac:d6:af:
17:be:70:1c:02:33:3a:89:bd:65:a8:94:86:d1:c6:f0:2d:d1:
d5:4d:79:10:79:a6:ad:46:96:83:28:62:05:c1:e0:ee:0c:4e:
4d:41:4f:33:56:a7:05:7e:af:7e:5e:ca:c9:be:39:92:ed:36:
10:c7:11:8a:55:48:a3:6a:11:b4:52:76:87:d8:39:34:69:0e:
d4:65:56:7c:a5:1d:5e:f7:bb:85:19:a5:41:f2:be:d5:bc:34:
30:8e:35:ab:7a:0f:c1:25:4d:17:4e:90:dd:bc:23:f6:1b:4a:
c0:79:cc:16:6d:60:06:ac:c7:db:b1:6c:d8:b4:10:3e:53:7d:
3b:1e:43:6a