>http://masspay.io

GET /video/1204574767?h=16e51647de&background=1 HTTP/1.1
Host: player.vimeo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://www.masspay.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Priority: u=6
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 
date: Sun, 04 Oct 2026 03:53:33 GMT
content-type: text/html; charset=UTF-8
cf-ray: a4513d7c7efb5685-OSL
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=uCSWjq8pu4B6fyc9txhyuUioSl2IxQ5XXnDx6pKrA64-1791086012.8786256-1.0.1.1-qMIXSECPpjpdOSrlXbJt27M5CtdHHlo98aAPYWEIOI.9llRO6Ka4xZDYct4XMFAfsWmmTGEKSgrAv9CUFKBpNl48OZzndNPrJXCIXHKcdunAnUXTF0i0Gwc_wVySk7Gf; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Sun, 04 Oct 2026 04:23:33 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Fri, 15 Dec 1985 19:30:00 GMT
link: <https://lensflare.vimeo.com>; rel=preconnect; crossorigin, <https://arclight.vimeo.com>; rel=preconnect; crossorigin, <https://i.vimeocdn.com>; rel=preconnect; crossorigin, <https://f.vimeocdn.com>; rel=preconnect; crossorigin
server: cloudflare
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Referer, Accept-Encoding
via: 1.1 varnish, 1.1 varnish
content-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' resource: https://vimeo.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://browser-intake-datadoghq.com https://src.litix.io https://www.gstatic.com https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.video https://embedder-sdk.wirewax.tv https://*.vimeo.work; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://edge-player5.wirewax.com https://edge-player5.wirewax.video; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm.vhx.com/v2/fairplay/cert https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://browser-intake-datadoghq.com https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.paychex.com https://*.hivestreaming.com https://vimeo.magisto.com https://stage.vimeo.magisto.com https://stage-proxy.vimeo.magisto.com https://interactive.create.vimeo.com https://*.wirewax.com https://*.wirewax.video https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com https://player-telemetry.vimeo.com https://lensflare.vimeo.com https://arclight.vimeo.com https://orion.bendingspoons.com https://pico.bendingspoons.com https://*.vimeo.work; font-src data: https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://branding.cdn.magisto.com https://d2by6sxflmuwyq.cloudfront.net https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://duysrfiajusdh.cloudfront.net https://d263mgllkjh2k2.cloudfront.net https://storage.googleapis.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://studio-media.wirewax.video https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://maps.googleapis.com android-webview-video-poster: https://*.vimeo.work; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://captions.vimeo.com https://captions-eu.vimeo.com; frame-src 'self' https://*; worker-src blob:; report-uri /_csp
cross-origin-resource-policy: cross-origin
x-backend-server: srv001
x-bapp-server: player-backend-595f5557c7-fhbwz
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-content-type-options: nosniff
x-host: player-backend-595f5557c7-fhbwz
x-link-match: 105
x-player-backend: g
x-served-by: cache-iad-kiad7000088-IAD, cache-bma-essb1270040-BMA
x-timer: S1791086013.894874,VS0,VE133
x-xss-protection: 1; mode=block
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2