GET /?E=mNHoyPdMFhiR7tYY/i6apJ5RhbGgAHnRDbfaF54T/x8=&s1=OF_QL_350_01_10MB&ckmguid=fc05f1cb-438d-4fae-8010-fb8dba42e52a HTTP/1.1
Host: trkfocus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
date: Sun, 20 Oct 2024 15:31:15 GMT
content-type: text/html; charset=utf-8
content-length: 213
cache-control: private
location: https://www.lmbahsj2.com/CK67XL/964QF6/?sub1=42215&sub2=458611460&sub3=OF_QL_350_01_10MB
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
set-cookie: sfd=bG0lX4yvoUKOuCP9F1i3k7hk4pmb2uA2+lMQGm/U4f+WMVyTc+dZ5g==; domain=.trkfocus.com; path=/; SameSite=None; secure; HttpOnly
tfl=P+DIHBiey4ykmRmqkZFiZrhk4pmb2uA2+lMQGm/U4f+WMVyTc+dZ5g==; domain=.trkfocus.com; expires=Tue, 20-Oct-2026 15:31:15 GMT; path=/; SameSite=None; secure; HttpOnly
c31895=bG0lX4yvoUL1kSvKhO/PrzzOc9lhfqzW7vKhY6iQqikk7ZwUTmlKRA==; domain=.trkfocus.com; expires=Tue, 19-Nov-2024 15:31:15 GMT; path=/; SameSite=None; secure; HttpOnly

GET /CK67XL/964QF6/?sub1=42215&sub2=458611460&sub3=OF_QL_350_01_10MB HTTP/1.1
Host: www.lmbahsj2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Sun, 20 Oct 2024 15:31:16 GMT
content-type: text/html; charset=utf-8
content-length: 401
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
location: https://refinance.quickenloans.com/?moid=322646&sourceid=affl_everflow_ql-lre_165_233&pkey1=233&pkey2=42215&pkey3=d36e83b6259e4b919b3128ce6fdada08&pkey=458611460&sid=165&cmpid=165&crtid=&oid=165&affid=233&_ef_transaction_id=d36e83b6259e4b919b3128ce6fdada08&utm_medium=affiliate&utm_source=Direct+Agents%2C+Inc&utm_content=
set-cookie: uniqueClick_964QF6=8e73df75-7c2b-4f0e-a3ae-42ee45de0247:1729438276; Path=/; Expires=Mon, 21 Oct 2024 15:31:16 GMT; Secure; SameSite=None
transaction_id=d36e83b6259e4b919b3128ce6fdada08; Path=/; Expires=Sat, 18 Jan 2025 15:31:16 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: 5d2a53cc-60f4-41a5-9763-141c2ce71bb0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1
Host: widget.trustpilot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://refinance.quickenloans.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/x-javascript
content-length: 7350
last-modified: Wed, 09 Oct 2024 12:04:38 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
accept-ranges: bytes
server: AmazonS3
date: Sun, 20 Oct 2024 01:25:26 GMT
cache-control: max-age=86400
etag: "7d4644d89e45fe92623bdd628e60e8dd"
x-cache: Hit from cloudfront
via: 1.1 f8f6e32ae3e5c2420050bcd1a2ee6090.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: oLXF-o1552dVSb4p2FeXcthpMZ7YwQEDDaD4KXqjaiH_x21aPXEpBA==
age: 50752
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

GET /b14636b10888/a3ec7ef1f366/launch-099982a746cc.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://refinance.quickenloans.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "b31a1f9e9f88d2133e2b3a9abeeddcd7:1696276509.604687"
last-modified: Mon, 02 Oct 2023 19:55:09 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Sun, 20 Oct 2024 16:31:17 GMT
date: Sun, 20 Oct 2024 15:31:17 GMT
content-length: 82392
access-control-allow-origin: https://refinance.quickenloans.com
timing-allow-origin: *
X-Firefox-Spdy: h2

GET /dacs.js HTTP/1.1
Host: cs-cdn.deviceatlas.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://refinance.quickenloans.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.17.9
date: Sun, 20 Oct 2024 15:31:18 GMT
content-type: application/javascript
content-length: 21896
last-modified: Wed, 24 Jan 2024 11:56:56 GMT
etag: "cfe6e4ceafbea9f6e6c1edad91770ce9"
expires: Sun, 20 Oct 2024 15:31:17 GMT
cache-control: no-cache
x-cache: HIT
accept-ch: DPR,Width,Viewport-Width,Viewport-Height,Device-Memory,RTT,Downlink,ECT,Lang,Sec-CH-DPR,Sec-CH-Width,Sec-CH-Viewport-Width,Sec-CH-Viewport-Height,Sec-CH-Device-Memory,Sec-CH-RTT,Sec-CH-Downlink,Sec-CH-ECT,Sec-CH-Lang,Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Bitness,Sec-CH-UA-WoW64,Sec-CH-Prefers-Reduced-Motion,Sec-CH-Prefers-Reduced-Transparency,Sec-CH-Prefers-Contrast,Sec-CH-Forced-Colors,Sec-CH-Prefers-Color-Scheme,Sec-CH-Prefers-Reduced-Data
accept-ranges: bytes
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

GET /msql-lre/pixel.js HTTP/1.1
Host: trackpixel.refinance.quickenloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://refinance.quickenloans.com/
Cookie: visitorId=49b87d61-1767-42ea-8df9-6a8ff41b1016; __cf_bm=EczRncMCUOoeifofaHZARbXg34KL1F6In_NphFkECKY-1729438277-1.0.1.1-4T8.FKon2_A45JIDHg..LF2yDH9sjHZAN5icUzblla0cGuiQFoaw9iirrYuU.GyLUxYS3ZFzisC9bbH6SL9sjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sun, 20 Oct 2024 15:31:17 GMT
content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Sat, 12 Oct 2024 15:35:42 GMT
etag: W/"0c25af5e43c7b99d093fc122747c3ec9"
x-amz-server-side-encryption: AES256
x-amz-website-redirect-location: /msql-lre/pixel-10db75aea9e4bfb51757.js
x-amz-version-id: daZbcO4G_O69br0_FMxJ_PBPSkSxrg4U
x-cache: Miss from cloudfront
via: 1.1 f8ca9b75d11e3a046bde65a42959179c.cloudfront.net (CloudFront)
x-amz-cf-pop: SOF50-P2
x-amz-cf-id: fJmWcxjC7kBayp8AASqTSGyXv90dC4HfUXrHmJeDBL1nBzhhojxmQg==
cf-cache-status: HIT
expires: Sun, 20 Oct 2024 19:31:17 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
strict-transport-security: max-age=2592000
content-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8d5a0dd4dae6b4fd-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

GET /main.de6ab8fad49030efd730.css HTTP/1.1
Host: static-msql-prod.refinance.quickenloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://refinance.quickenloans.com/
Cookie: visitorId=49b87d61-1767-42ea-8df9-6a8ff41b1016; __cf_bm=EczRncMCUOoeifofaHZARbXg34KL1F6In_NphFkECKY-1729438277-1.0.1.1-4T8.FKon2_A45JIDHg..LF2yDH9sjHZAN5icUzblla0cGuiQFoaw9iirrYuU.GyLUxYS3ZFzisC9bbH6SL9sjg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sun, 20 Oct 2024 15:31:17 GMT
content-type: text/css
last-modified: Mon, 30 Sep 2024 22:46:38 GMT
etag: W/"d1d7421dd4fee0db86cfb454f8855665"
x-amz-server-side-encryption: AES256
x-amz-version-id: Kqwh4SheKvLR9USBbe_TYa9JKeIS9OvX
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 62fb1524856e68ad0114bff2e7022164.cloudfront.net (CloudFront)
x-amz-cf-pop: MXP53-P1
x-amz-cf-id: qUc4fkD5fLT97E0t6CT-C2gPPj7J7NgD9eVw-j27jPOsEjpyfdRqpA==
cf-cache-status: HIT
expires: Sun, 20 Oct 2024 19:31:17 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=2592000
content-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8d5a0dd4ba9cb4fd-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

GET /css?family=Montserrat:thin,extra-light,light,100,200,300,400,500,600,700,800 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://static-msql-prod.refinance.quickenloans.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 20 Oct 2024 15:31:18 GMT
date: Sun, 20 Oct 2024 15:31:18 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /gtm.js?id=GTM-5B82MZ73 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://refinance.quickenloans.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 20 Oct 2024 15:31:19 GMT
expires: Sun, 20 Oct 2024 15:31:19 GMT
cache-control: private, max-age=900
last-modified: Sun, 20 Oct 2024 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1080:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1080:0"}],}
server: Google Tag Manager
content-length: 104028
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=5D60123F5245B13E0A490D45%40AdobeOrg&mid=33697271892276425533484443043584338706&ts=1729438279636 HTTP/1.1
Host: somni.rocketmortgage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://refinance.quickenloans.com
DNT: 1
Connection: keep-alive
Referer: https://refinance.quickenloans.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: https://refinance.quickenloans.com
access-control-allow-credentials: true
date: Sun, 20 Oct 2024 15:31:19 GMT
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: s_ecid=MCMID%7C33697271892276425533484443043584338706; Path=/; Domain=rocketmortgage.com; Max-Age=63072000; Expires=Tue, 20 Oct 2026 15:31:31 GMT; SameSite=Lax;
vary: Origin
content-type: application/x-javascript;charset=utf-8
content-length: 48
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2

GET /msql-lre/pixel-10db75aea9e4bfb51757.js HTTP/1.1
Host: trackpixel.refinance.quickenloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://refinance.quickenloans.com/
Cookie: visitorId=49b87d61-1767-42ea-8df9-6a8ff41b1016; __cf_bm=EczRncMCUOoeifofaHZARbXg34KL1F6In_NphFkECKY-1729438277-1.0.1.1-4T8.FKon2_A45JIDHg..LF2yDH9sjHZAN5icUzblla0cGuiQFoaw9iirrYuU.GyLUxYS3ZFzisC9bbH6SL9sjg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sun, 20 Oct 2024 15:31:19 GMT
content-type: application/javascript
x-amz-replication-status: COMPLETED
last-modified: Fri, 04 Oct 2024 15:20:50 GMT
etag: W/"ef774eeaeecb34d170aad41f40a59b82"
x-amz-server-side-encryption: AES256
x-amz-version-id: tJC1B2g3uzxKbyWKvKkYdacANQdoHPdI
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bc2ad79bb70175937978804970010644.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P2
x-amz-cf-id: e5o7mqWnWETG65vYY-3vFHEB_EbAvdQjqgjQ0I-rBRYBZ2mvTuTUwQ==
cf-cache-status: REVALIDATED
expires: Sun, 20 Oct 2024 19:31:19 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=2592000
content-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8d5a0dd97b59b4fd-OSL
X-Firefox-Spdy: h2

POST /cdn-cgi/rum? HTTP/1.1
Host: refinance.quickenloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1410
Origin: https://refinance.quickenloans.com
DNT: 1
Connection: keep-alive
Referer: https://refinance.quickenloans.com/?moid=322646&sourceid=affl_everflow_ql-lre_165_233&pkey1=233&pkey2=42215&pkey3=d36e83b6259e4b919b3128ce6fdada08&pkey=458611460&sid=165&cmpid=165&crtid=&oid=165&affid=233&_ef_transaction_id=d36e83b6259e4b919b3128ce6fdada08&utm_medium=affiliate&utm_source=Direct+Agents%2C+Inc&utm_content=
Cookie: visitorId=49b87d61-1767-42ea-8df9-6a8ff41b1016; visitorId=49b87d61-1767-42ea-8df9-6a8ff41b1016; contentTarget=%7B%22moid%22%3A%22322646%22%2C%22sourceId%22%3A%22affl_everflow_ql-lre_165_233%22%7D; __cf_bm=EczRncMCUOoeifofaHZARbXg34KL1F6In_NphFkECKY-1729438277-1.0.1.1-4T8.FKon2_A45JIDHg..LF2yDH9sjHZAN5icUzblla0cGuiQFoaw9iirrYuU.GyLUxYS3ZFzisC9bbH6SL9sjg; AMCV_5D60123F5245B13E0A490D45%40AdobeOrg=179643557%7CMCIDTS%7C20017%7CMCMID%7C33697271892276425533484443043584338706%7CvVersion%7C5.5.0; _dd_s=rum=0&expire=1729439179672; _gcl_au=1.1.530233817.1729438280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 204 No Content
date: Sun, 20 Oct 2024 15:31:19 GMT
access-control-allow-origin: https://refinance.quickenloans.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 8d5a0de159eeb4fd-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

POST /api/click HTTP/1.1
Host: refinance.quickenloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Authorization: Bearer null
Content-Length: 2371
Origin: https://refinance.quickenloans.com
DNT: 1
Connection: keep-alive
Referer: https://refinance.quickenloans.com/?moid=322646&sourceid=affl_everflow_ql-lre_165_233&pkey1=233&pkey2=42215&pkey3=d36e83b6259e4b919b3128ce6fdada08&pkey=458611460&sid=165&cmpid=165&crtid=&oid=165&affid=233&_ef_transaction_id=d36e83b6259e4b919b3128ce6fdada08&utm_medium=affiliate&utm_source=Direct+Agents%2C+Inc&utm_content=
Cookie: visitorId=49b87d61-1767-42ea-8df9-6a8ff41b1016; visitorId=49b87d61-1767-42ea-8df9-6a8ff41b1016; contentTarget=%7B%22moid%22%3A%22322646%22%2C%22sourceId%22%3A%22affl_everflow_ql-lre_165_233%22%7D; __cf_bm=EczRncMCUOoeifofaHZARbXg34KL1F6In_NphFkECKY-1729438277-1.0.1.1-4T8.FKon2_A45JIDHg..LF2yDH9sjHZAN5icUzblla0cGuiQFoaw9iirrYuU.GyLUxYS3ZFzisC9bbH6SL9sjg; AMCV_5D60123F5245B13E0A490D45%40AdobeOrg=179643557%7CMCIDTS%7C20017%7CMCMID%7C33697271892276425533484443043584338706%7CvVersion%7C5.5.0; _dd_s=rum=0&expire=1729439179672
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sun, 20 Oct 2024 15:31:20 GMT
content-type: application/json; charset=utf-8
x-powered-by: Express
etag: W/"150a-nIG7z89PrSBPUqjPxQAnvmI5i6M"
cf-cache-status: DYNAMIC
strict-transport-security: max-age=2592000
content-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8d5a0de06800b4fd-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-RXLL9Z7XBK&cid=1820996468.1729438280&gtm=45je4ah0v9169491831z89137104487za200zb9137104487&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1l1&npa=1&frm=0&tag_exp=101686685~101794736&tag_exp=101686685~101794736&z=385424760 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://refinance.quickenloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 20 Oct 2024 15:31:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

POST /g/collect?v=2&tid=G-RXLL9Z7XBK&gtm=45je4ah0v9169491831z89137104487za200zb9137104487&_p=1729438279537&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101686685~101794736&cid=1820996468.1729438280&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&sid=1729438280&sct=1&seg=1&dl=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_233%26pkey1%3D233%26pkey2%3D42215%26pkey3%3Dd36e83b6259e4b919b3128ce6fdada08%26pkey%3D458611460%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D233%26_ef_transaction_id%3Dd36e83b6259e4b919b3128ce6fdada08%26utm_medium%3Daffiliate%26utm_source%3DDirect%2BAgents%252C%2BInc%26utm_content%3D&dt=Refinance%20Mortgage%2C%20Refinancing%20Rates%2C%20Mortgage%20Rates&_s=2&tfd=5297 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://refinance.quickenloans.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 69
Origin: https://refinance.quickenloans.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 204 No Content
access-control-allow-origin: https://refinance.quickenloans.com
date: Sun, 20 Oct 2024 15:31:20 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],}
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /gtag/js?id=AW-966730890 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://refinance.quickenloans.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 20 Oct 2024 15:31:20 GMT
expires: Sun, 20 Oct 2024 15:31:20 GMT
cache-control: private, max-age=900
last-modified: Sun, 20 Oct 2024 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 87418
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET /gtag/js?id=DC-852807 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://refinance.quickenloans.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 20 Oct 2024 15:31:20 GMT
expires: Sun, 20 Oct 2024 15:31:20 GMT
cache-control: private, max-age=900
last-modified: Sun, 20 Oct 2024 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 81817
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000