HTTP/1.1 200 OK Date: Tue, 15 Apr 2025 02:28:49 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1721143 Connection: keep-alive content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.happify.com https://hpf-happify-marty-b2b-user-uploads.happify.com *.ads-twitter.com *.vimeo.com *.google.com *.google.ac *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.com.kh *.google.cc *.google.cd *.google.cf *.google.cat *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn g.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gf *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gp *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.iq *.google.ie *.google.co.il *.google.im *.google.co.in *.google.io *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.com.lc *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.ne *.google.com.nf *.google.com.ng *.google.com.ni *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pk *.google.com.pa *.google.com.pe *.google.com.ph *.google.pl *.google.com.pg *.google.pn *.google.co.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.rs *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.sm *.google.so *.google.st *.google.sr *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tk *.google.tl *.google.tm *.google.to *.google.tn *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.co.za *.google.co.zm *.google.co.zw *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.g.doubleclick.net *.youtube.com *.ytimg.com *.licdn.com tracker.mrpfd.com rum-static.pingdom.net cdn.mxpnl.com platform.twitter.com analytics.twitter.com cdn.branch.io connect.facebook.net app.link js.braintreegateway.com tiktok.com *.tiktok.com *.ibytedtos.com *.tiktokcdn.com *.ttwstatic.com instagram.com *.instagram.com;img-src 'self' data: https: http:;connect-src 'self' *.happify.com *.happify.com *.happifyhealth.com *.twill.health *.happifychina.cn *.adservice.google.com api2.branch.io api-js.mixpanel.com www.facebook.com *.pingdom.net *.googlesyndication.com *.g.doubleclick.net tracker.mrpfd.com *.google-analytics.com *.gstatic.com *.ibytedtos.com *.google.com;frame-src 'self' *.happify.com platform.twitter.com *.facebook.com *.googlesyndication.com *.g.doubleclick.net youtube.com *.youtube.com *.vimeo.com embed.ted.com player.youku.com www.googletagservices.com instagram.com *.instagram.com tiktok.com *.tiktok.com *.google.com;style-src 'self' 'unsafe-inline' *.happify.com https://hpf-happify-marty-b2b-user-uploads.happify.com fonts.googleapis.com *.typekit.net *.tiktokcdn.com;font-src 'self' *.happify.com https://hpf-happify-marty-b2b-user-uploads.happify.com fonts.gstatic.com typekit.com use.typekit.net data:;default-src 'self' *.happify.com https://hpf-happify-marty-b2b-user-uploads.happify.com *.googlesyndication.com; cache-control: private, no-store access-control-allow-headers: Content-Type, Authorization x-frame-options: deny set-cookie: marty_session_id=d988aeb0-1c40-42d5-9e3d-b53c60df93b7; Domain=.happify.com; Expires=Wed, 16-Apr-2025 02:28:49 GMT; Secure; HttpOnly; Path=/ set-cookie: marty_session_id_hash=c1a4881171657713273d28ce26d6b554; Domain=.happify.com; Expires=Wed, 16-Apr-2025 02:28:49 GMT; Secure; HttpOnly; Path=/ x-envoy-upstream-service-time: 200 server: istio-envoy vary: Accept-Encoding
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:d6:80:ae:7a:ce:0f:5f:0b:73:7f:8e:70:c0:ed:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=Amazon, CN=Amazon RSA 2048 M03
Validity
Not Before: May 20 00:00:00 2024 GMT
Not After : Jun 18 23:59:59 2025 GMT
Subject: CN=happify.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:b7:99:99:74:39:63:49:0b:97:03:4c:4a:ad:88:
db:52:e8:00:f6:e7:a3:0a:a1:3f:ed:62:30:44:db:
16:c2:6a:b3:22:e9:05:0f:d0:bf:48:3d:60:48:09:
01:0c:73:7e:6b:44:3d:61:7c:18:31:7e:ec:36:fc:
c8:1f:ca:65:99:2b:82:c0:ff:f8:17:1f:ce:a9:bc:
61:bb:23:a7:6c:db:09:96:70:6a:36:9b:47:7a:e2:
2e:6a:af:97:45:55:d8:2b:68:49:a0:a7:e1:72:79:
45:1a:a7:3a:29:3e:50:dc:72:a2:e4:6d:83:3a:6b:
31:02:bc:b3:32:d3:bd:fe:8c:64:c6:91:3e:d4:34:
21:90:cc:bf:2f:d2:0e:15:e0:c7:1a:10:48:43:1f:
01:d1:dc:c5:01:3c:54:ba:e4:2c:1f:69:5c:7d:13:
3a:8a:1f:7f:c3:dc:2b:e3:7f:e5:49:62:55:b5:00:
89:37:99:bf:b4:f1:a3:f8:2b:1e:67:0e:29:8a:4e:
81:8b:0c:ca:6a:92:be:00:5b:f4:31:7b:0a:bb:7e:
33:47:05:da:40:77:30:83:04:b6:e5:48:55:78:9e:
b3:59:ed:88:ce:25:40:02:cd:a9:f7:17:aa:8a:d2:
21:44:13:0e:89:d4:7a:6a:d6:e2:70:59:f2:a8:44:
e7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
55:D9:18:5F:D2:1C:CC:01:E1:58:B4:BE:AB:D9:55:42:01:D7:2E:02
X509v3 Subject Key Identifier:
3B:30:21:B8:F4:9F:78:44:3B:91:AF:D4:28:83:80:BD:7E:F4:9F:9E
X509v3 Subject Alternative Name:
DNS:happify.com, DNS:*.b2b.happify.com, DNS:*.happify.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl.r2m03.amazontrust.com/r2m03.crl
Authority Information Access:
OCSP - URI:http://ocsp.r2m03.amazontrust.com
CA Issuers - URI:http://crt.r2m03.amazontrust.com/r2m03.cer
X509v3 Basic Constraints: critical
CA:FALSE
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : May 20 12:26:53.261 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:CB:9A:91:18:97:A8:82:BE:48:2E:3C:
D5:49:73:04:C7:D7:F8:A2:01:70:B1:86:6F:DE:87:3F:
CE:A5:71:44:8B:02:20:61:3B:86:0E:56:38:E6:2C:8D:
68:F7:E4:25:C7:70:AE:B8:77:C4:7B:71:8C:33:E5:1F:
9C:5F:51:12:36:17:0A
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
Timestamp : May 20 12:26:53.278 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:40:B9:74:96:79:6D:EE:F6:4B:C8:0D:C6:
D1:53:A2:FC:04:08:22:28:2A:1C:1F:C6:72:60:D4:2F:
30:DB:5B:A5:02:21:00:92:8C:03:C4:F3:00:4B:15:E6:
C7:1B:30:CB:4A:3C:0B:72:BB:F1:F1:BD:70:DD:30:53:
16:7B:4F:8A:FE:47:C3
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
Timestamp : May 20 12:26:53.449 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:BD:87:26:E3:CF:56:EB:FD:AC:E2:7F:
44:61:A5:1E:5D:85:B0:89:83:F6:49:2F:2B:4D:B0:C2:
1F:1A:BD:68:BC:02:20:3C:88:A6:17:BA:3F:29:CA:8E:
37:AB:32:D2:76:58:F2:2F:A3:F2:90:BE:7C:0D:A9:26:
A2:81:61:C2:CE:91:56
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
16:e6:91:d5:94:41:b1:95:db:ba:fb:15:32:d2:28:dc:77:fb:
3f:20:45:81:da:76:32:b1:92:23:e3:c8:7f:7c:9c:34:56:c7:
53:6f:20:3f:38:f2:11:9d:6a:6f:d7:da:c7:8b:82:19:c5:03:
6a:83:8d:2b:97:3e:9f:1c:fc:9b:0c:63:ed:c9:51:45:df:74:
6e:64:b6:13:71:2f:2c:c0:84:18:8b:cf:20:fb:af:1c:0c:7c:
d4:fe:3f:76:c5:5b:90:d7:9b:1e:e2:6f:c6:bd:85:b9:7b:a6:
17:09:7a:86:83:d1:18:cc:dc:bb:15:a8:39:9f:89:b0:05:29:
5a:29:51:5e:e3:bd:60:74:7a:5a:c7:e8:79:05:3f:5e:fb:eb:
c4:e7:89:90:41:93:32:40:80:64:10:5b:4b:c4:10:8b:e2:80:
b4:b5:fe:2e:d6:cf:64:a2:46:f6:93:d9:a8:4d:9a:bf:5f:de:
90:57:2a:c5:cb:f8:16:87:47:92:4e:d0:cc:76:f4:47:0c:a2:
e8:3d:17:5a:cb:65:c5:75:aa:0d:71:f2:e3:20:be:83:28:90:
94:17:5f:e9:31:77:dc:f9:f5:f0:8e:7b:21:d6:73:78:f2:55:
45:81:0d:e6:9f:56:17:cf:6b:83:71:db:34:45:7e:53:f1:3e:
a0:99:68:61
Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.