=== HTTP code : 200 ===

Response headers
================
HTTP/1.1 200 
Date: Sun, 28 Nov 2021 22:15:39 GMT
Content-Type: text/html;charset=ISO-8859-1
Connection: close
Server: nginx
Vary: Accept-Encoding
Set-Cookie: JSESSIONID=BA29A63FCDB5C570F0BE15DA27C35D80; Path=/; secure; HttpOnly; SameSite=Strict; Secure; HttpOnly
Content-Security-Policy: object-src 'none'; base-uri 'self'; frame-ancestors 'self' https://*.mockflow.com https://mockflow.com; script-src https://ajax.googleapis.com https://d20hhedk3h2l88.cloudfront.net https://apis.google.com https://www.google.com https://www.google-analytics.com static.chartbeat.com 'self' 'unsafe-eval'  'nonce-4a0dbf8ea0ca43eaa38cf32c4e131374' 'nonce-1239911217e14168ae6a246eb1d12e2e' 'nonce-e2e1c98a61e94ad087bea58dbab49ddd' 'nonce-4ef8ebcb525347caa0c50004a4319e9d' 'nonce-2abb0b76267b4009be8ffbed1ffd566a' 'nonce-689209b9b4e04542812e354cb637b54a' 'nonce-e6b48f6f7c434c2ea8661721dff1af7d' 'nonce-dd19f2767df84cf3baeb7b99a4072af1' 'nonce-30d8593628b046249ce88166a429d2a4' 'nonce-506e1f01f371460e92db0c267ed64764'
vary: accept-encoding
Strict-Transport-Security: max-age=63072000; includeSubdomains
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin

Request headers
================
HEAD /apps/sitemap/ HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Host: mockflow.com
Accept: */*
Referer: http://web-marketing.zako.org
Connection: close


Link is valid.