firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-stale=0
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 27 Sep 2022 19:05:14 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: afENIhF6bwewZmnac18vzOMRAiFTCpYx7uVa7AIVqbACika7a1E2tA==
Age: 3474
tracking.consumerfinnetwork.com/campaigns/lr167gmvjcdda/track-url/ev426a8s4j909/ca46cc20624935d6516beb0144eadc908eb82e27
301 Moved Permanently 169 B URL HTTP/1.1 tracking.consumerfinnetwork.com/campaigns/lr167gmvjcdda/track-url/ev426a8s4j909/ca46cc20624935d6516beb0144eadc908eb82e27
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 0f952b73d3f5586637ea9a5a789d48f4
b29aff4ffa1d4decd77db5160f920e1c6417e5e9
69d11528ee32902d0c47ed215877f0610399536f755db03ed02a77ecedd74751
Analyzer Verdict Alert fortinet Phishing
GET /campaigns/lr167gmvjcdda/track-url/ev426a8s4j909/ca46cc20624935d6516beb0144eadc908eb82e27 HTTP/1.1
Host: tracking.consumerfinnetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.1
Date: Tue, 27 Sep 2022 20:03:08 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://tracking.consumerfinnetwork.com/campaigns/lr167gmvjcdda/track-url/ev426a8s4j909/ca46cc20624935d6516beb0144eadc908eb82e27
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2560f62890e75b8de444fed96c22f52
334ce0c48e606ee029f31eeb1463af87b1024bb9
4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11725
Expires: Tue, 27 Sep 2022 23:18:33 GMT
Date: Tue, 27 Sep 2022 20:03:08 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 27 Sep 2022 09:24:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 06SpnYiDYelZScRPYGQqfyZl_YbDz5tgL1iDiSuh0ey7iMj3AkJj6Q==
age: 38335
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 20:03:09 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 19:10:46 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Tue, 27 Sep 2022 19:51:05 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 5SJR6DZ1F-UQfycDF3LYMBx9GkqFqjuMhkJ06vz_GR-EquRoFe8ZmA==
Age: 3143
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash afd2eb8df033f4f95d8db0d03f27941a
d8866759ecb01ba0dd042bed1860656a07cbac30
75c8ed9d63a7e783a60d999302f77d8a7d123c4ad188eeacf3fd3833a5cbd40f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "75C8ED9D63A7E783A60D999302F77D8A7D123C4AD188EEACF3FD3833A5CBD40F"
Last-Modified: Tue, 27 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 28 Sep 2022 02:03:09 GMT
Date: Tue, 27 Sep 2022 20:03:09 GMT
Connection: keep-alive
tracking.consumerfinnetwork.com/campaigns/lr167gmvjcdda/track-url/ev426a8s4j909/ca46cc20624935d6516beb0144eadc908eb82e27
301 Moved Permanently 169 B URL HTTP/1.1 tracking.consumerfinnetwork.com/campaigns/lr167gmvjcdda/track-url/ev426a8s4j909/ca46cc20624935d6516beb0144eadc908eb82e27
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 0f952b73d3f5586637ea9a5a789d48f4
b29aff4ffa1d4decd77db5160f920e1c6417e5e9
69d11528ee32902d0c47ed215877f0610399536f755db03ed02a77ecedd74751
Analyzer Verdict Alert fortinet Phishing
GET /campaigns/lr167gmvjcdda/track-url/ev426a8s4j909/ca46cc20624935d6516beb0144eadc908eb82e27 HTTP/1.1
Host: tracking.consumerfinnetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.1
Date: Tue, 27 Sep 2022 20:03:09 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://www.consumerfinnetwork.com/campaigns/lr167gmvjcdda/track-url/ev426a8s4j909/ca46cc20624935d6516beb0144eadc908eb82e27
ocsp.digicert.com/
200 OK 471 B IP
Hash c18823050f86339eaa73ddb1bf80d64c
ac4ee81f59f706cee8a74458d498bbc20d8d351a
9a505647517bd02d8ff994fd4ad98dc2f4b519916145b0c327691420c1084c46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6044
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 20:03:09 GMT
Last-Modified: Tue, 27 Sep 2022 18:22:25 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: XE7mr+boPQinhhWYkD+J4w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: vRdGtY6vZEPV4YB2pLqdQsFB4lA=
www.consumerfinnetwork.com/campaigns/lr167gmvjcdda/track-url/ev426a8s4j909/ca46cc20624935d6516beb0144eadc908eb82e27
301 Moved Permanently 0 B URL HTTP/1.1 www.consumerfinnetwork.com/campaigns/lr167gmvjcdda/track-url/ev426a8s4j909/ca46cc20624935d6516beb0144eadc908eb82e27
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /campaigns/lr167gmvjcdda/track-url/ev426a8s4j909/ca46cc20624935d6516beb0144eadc908eb82e27 HTTP/1.1
Host: www.consumerfinnetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.1
Date: Tue, 27 Sep 2022 20:03:09 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.29
Set-Cookie: mwsid=88rp37075btl724kmb5q400vsd; path=/; HttpOnly
X-XSS-Protection: 1; mode=block
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Tue, 27 Sep 2022 20:03:09 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: https://engage.freshmarketadvantage.com/aff_c?offer_id=288&aff_id=11&aff_sub=CF1TCS16&aff_sub2=vhicks@caddis.com&aff_sub3=179&aff_sub4=9328&aff_sub5=&email=vhicks@caddis.com&resid=&kid=
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 09171fc89f05624bc15d64c5df2d301e
d87722e01591e56a623340cc8589e80956a448bd
dc9eb6eb1b218366bc915586a32f5ba26e6d1a980d473e3a49c36f34c091314d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 20:03:09 GMT
Server: ECS (dcb/7F80)
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Myb2MLas6sBtXSTuyx6UIshnpEVa4Nvw9kbWyf8VPhWU8BhmYssB6g==
engage.freshmarketadvantage.com/aff_c?offer_id=288&aff_id=11&aff_sub=CF1TCS16&aff_sub2=vhicks@caddis.com&aff_sub3=179&aff_sub4=9328&aff_sub5=&email=vhicks@caddis.com&resid=&kid=
302 Found 414 B URL HTTP/1.1 engage.freshmarketadvantage.com/aff_c?offer_id=288&aff_id=11&aff_sub=CF1TCS16&aff_sub2=vhicks@caddis.com&aff_sub3=179&aff_sub4=9328&aff_sub5=&email=vhicks@caddis.com&resid=&kid=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d75f9bd5d3a8ddcba9f403e9ffd5ca2d
a9de1f8d9abea7074ccb0b390dc9b6b7ccd8b9b8
f7406aa7ddc6f9fcde91bc466360ae890fc5e0b7db6a632e9840d61daa7d27b3
GET /aff_c?offer_id=288&aff_id=11&aff_sub=CF1TCS16&aff_sub2=vhicks@caddis.com&aff_sub3=179&aff_sub4=9328&aff_sub5=&email=vhicks@caddis.com&resid=&kid= HTTP/1.1
Host: engage.freshmarketadvantage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 27 Sep 2022 20:03:10 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 414
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: https://offer.mamothloans.com?aid=503475&acid=14&subid=11:CF1TCS16&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname={fname}&lname={lname}&xi_resid=&xi_oclkid=
P3p: CP="NOI CUR OUR NOR INT"
Pragma: no-cache
Set-Cookie: enc_aff_session_288=ENC0329e96d4ff54ab7551af1c068f9c57ecb1258b1dd4b8559e7c012c89f6c818ad971a7135e55c86c4b33e1982a255d6445a8dfb2628614e309092543524ca769c9984a0233e8656729f87abca3ff4e9e3247bfb5c2f48dc2d509d38eab2701a894c4ad436b6d5261f40ff5a584f2af2767aa7cddc3afafb7e129bfe5f1eb2350dfd059824463321c0ad5cb87cd9d45b2183bfbc56a6807aacb0dd443d0d60ca145155d6e50; expires=Thu, 27 Oct 2022 20:03:10 GMT; path=/; SameSite=None; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiI5Ni4wIiwibW9iaWxlX2NhcnJpZXIiOiI/IiwidXNlcl9hZ2VudCI6Ik1vemlsbGEvNS4wIChYMTE7IExpbnV4IFg4Nl82NDsgUnY6OTYuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC85Ni4wIiwiYWNjZXB0X2xhbmd1YWdlIjoiZW4tVVMsZW47cT0wLjUiLCJjb25uZWN0aW9uX3NwZWVkIjoiYnJvYWRiYW5kIn0=; expires=Fri, 22 Aug 2025 06:43:10 GMT; path=/; SameSite=None; Secure
Tracking_id: 102d6fc9f2325829652c70ed8979b1
X-Robots-Tag: noindex, nofollow
Access-Control-Allow-Origin: *
X-Request-Id: 32d2eb95ca8ad9fe4378f0cd3bc06274
Access-Control-Allow-Headers: Tune-SDK-Version
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2dcd251dc1c478671a8122349d0fab17
361e146313217ea8ca2eb309fc21e4ce4c18585a
1ec37f54576809899d7a9e588f2d658f9cf59b52b9a018aa42ce3a2bb364e01e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 20:03:10 GMT
Server: ECS (dcb/7EC9)
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: LMVnj1VZU60xj1kCk4XlWg0SKdFhYZ4BjeUvrqebwF58VJ2N8Hr7Eg==
offer.mamothloans.com/?aid=503475&acid=14&subid=11:CF1TCS16&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname={fname}&lname={lname}&xi_resid=&xi_oclkid=
200 OK 402 B URL HTTP/2 offer.mamothloans.com/?aid=503475&acid=14&subid=11:CF1TCS16&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname={fname}&lname={lname}&xi_resid=&xi_oclkid=
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (673), with CRLF line terminators
Hash fc3eea0a98e0936d585d724a80675ebf
29665884b93719c85b33d60754a1080ec64d4693
42c8647d83305c486c903fd8def177d902d72eda3ea170351eca2e21dbb8898b
GET /?aid=503475&acid=14&subid=11:CF1TCS16&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname={fname}&lname={lname}&xi_resid=&xi_oclkid= HTTP/1.1
Host: offer.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:10 GMT
content-type: text/html; charset=UTF-8
content-length: 402
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.25
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-max-age: 1000
access-control-allow-headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token, accept-encoding, accept-language, host, referer, user-agent
x-powered-by: PHP/7.4.25
refresh: 1; url=https://www.mamothloans.com/?rtrcid=503475~cf652b60~1618444&rtrtid=11:CF1TCS16&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_resid=&xi_oclkid=&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={"srtr":1,"ertr":1,"psrtr":1,"bcktr":1,"pv":[11,13]}&xi_tft={"rtrcid":"503475~cf652b60~1618444","xi_tier":"1"}&odata={"aid":"503475","acid":"14","subid":"11:CF1TCS16","x_offerid":"288","x_clickid":"102d6fc9f2325829652c70ed8979b1","email":"vhicks@caddis.com","fname":"{fname}","lname":"{lname}","xi_resid":"","xi_oclkid":"","x_psac":"3703"}
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7585
Expires: Tue, 27 Sep 2022 22:09:36 GMT
Date: Tue, 27 Sep 2022 20:03:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7585
Expires: Tue, 27 Sep 2022 22:09:36 GMT
Date: Tue, 27 Sep 2022 20:03:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7585
Expires: Tue, 27 Sep 2022 22:09:36 GMT
Date: Tue, 27 Sep 2022 20:03:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7585
Expires: Tue, 27 Sep 2022 22:09:36 GMT
Date: Tue, 27 Sep 2022 20:03:11 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F63a7aeb3-999a-4e57-9255-c40e0376d08e.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F63a7aeb3-999a-4e57-9255-c40e0376d08e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 46e31aa06b8e86a9a5f9ba1cc3feca08
75df3341e30281fcbf78c7074980356fdf0be8e2
d1fd4f81b7e0f43de960f0ee024d9e87bcb395f032a4ab0360e3829d1ec8a42b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F63a7aeb3-999a-4e57-9255-c40e0376d08e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5319
x-amzn-requestid: 74191b02-ebea-48bd-8522-f05bf8080f31
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlOKFtsIAMFyGQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321bf4-1f2daa9d7906bf9812e10953;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:39:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Y0gjPs-l9_JD9F-LSH_i1uL2Nz0UcWCG-9PmDmRH8cN_cNAeSchJTA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:39:00 GMT
etag: "75df3341e30281fcbf78c7074980356fdf0be8e2"
content-type: image/jpeg
age: 80651
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5274e770cb5a704916c8965659709f4a
1a26007f761e439db575fb80fb403031260aecf4
e36e8be75c92feb9b416a46c5918356d8f9694894a799b7c10de21034d33d5ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7455
x-amzn-requestid: 0887cd56-f324-46cf-a086-709e1c66f354
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGBTdHmhoAMFvIw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633248e2-42391706084f335228fe3994;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 00:50:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: IWzfDNFlgYdqYnbQ9uWfOvqb5zl3I3mgTZrT5pU5P3EvetMRDN5P7w==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 01:06:47 GMT
age: 68184
etag: "1a26007f761e439db575fb80fb403031260aecf4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg
200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash deb8d1e3b6d7fbc8c8ba478269621676
84f5a4c8b38acde814bc790e5b514347718d5bb9
ed14fa766f0708b4166e83b61f160db5671af430917b7c67184bf18d9208742b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9163
x-amzn-requestid: 8ccd9b1f-bef9-4591-be32-e6dd98f4ee78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlKpEZrIAMFS1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321bdd-4a40b9c8281b64c725fec0f1;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:38:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: bs6HOUmHOoYKDuzBoVHhcr8d4HP4bBmwUF3EtOmwKXo7ozhfaIYEvw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:39:07 GMT
age: 80644
etag: "84f5a4c8b38acde814bc790e5b514347718d5bb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F658e1cdd-3e54-47dd-9724-ec65659721ea.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F658e1cdd-3e54-47dd-9724-ec65659721ea.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14218a43c5e5bbce546735a780c8ccce
61676358cdbb2373bc644e66f8a84fbc8cc5daf6
905b1c30a2273aef69904f2eb1451c756fc1fdba02e86ea5c957629dd056aeda
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F658e1cdd-3e54-47dd-9724-ec65659721ea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6390
x-amzn-requestid: b2681ff8-ab83-41e6-adef-3e6772c93c3f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGFJ6Gc_oAMF44g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63324f0c-3dbf9f4e2047567b5abdbe74;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 01:17:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8JXEBo_L_xKuKdeoOXEJ6FO7ZVsZVQzUmQFe7fYcxaHRQNEq1HWp6w==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 01:37:50 GMT
age: 66321
etag: "61676358cdbb2373bc644e66f8a84fbc8cc5daf6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 62e68c3cd08dd94d910507512a67e85f
3d4fa8701f17e8818c25584ef5f04bfbee8440cd
058d798963f83f5fb88ab728185f755c5353fa981d93e1b6ff869089f501586b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13213
x-amzn-requestid: fe9ec409-2757-4910-8443-5b4d3be7efd3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlATEp8oAMFd9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b9b-3230e97a4fe34413285eb578;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: kRSg9NTTAgeAJgIZ_C9_rRodCX4bzGduJEvNPNHUya0Moa2vsmWSoQ==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:38:57 GMT
age: 80654
etag: "3d4fa8701f17e8818c25584ef5f04bfbee8440cd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a90590f26bae9ad9e95ffdfbfb7dd21d
cde7845f38c4c077f1f1cfda1d1e3b00065d3ac3
33fe3394213e01d11c3e005cb5a678ba74511704d4132fc2bd9f7ad4e1b7dbfc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10318
x-amzn-requestid: 6a205445-8a9e-4f25-b144-ba6e6934d383
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSlhFNAIAMFmBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330caef-61ecbf9154cd56131b940ac0;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:41:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: qP5-TglQAoTGc78-rIK27mKRTS_WthN0OpiiMqSF-y2rmWxVOyfNVw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 19:30:15 GMT
age: 1976
etag: "cde7845f38c4c077f1f1cfda1d1e3b00065d3ac3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
offer.mamothloans.com/favicon.ico
404 Not Found 196 B URL HTTP/2 offer.mamothloans.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /favicon.ico HTTP/1.1
Host: offer.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://offer.mamothloans.com/?aid=503475&acid=14&subid=11:CF1TCS16&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname={fname}&lname={lname}&xi_resid=&xi_oclkid=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
date: Tue, 27 Sep 2022 20:03:11 GMT
content-type: text/html; charset=iso-8859-1
content-length: 196
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.25
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-max-age: 1000
access-control-allow-headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token, accept-encoding, accept-language, host, referer, user-agent
X-Firefox-Spdy: h2
www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/css/google_fonts.css?version=1664007591
200 OK 1.2 kB URL HTTP/2 www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/css/google_fonts.css?version=1664007591
IP
Hash 8108c6011ba65ac5f0610b05074e9950
5f39fe89039d79a2926d9256081cd91497203964
b0c689c20a67111ad0b928d9be91f0aa8e2847e4719b00e9c1b18dd484859436
GET /common/assets/js/funnel/pvexl42step/final/lib/css/google_fonts.css?version=1664007591 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cf652b60~1618444&rtrtid=11:CF1TCS16&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_resid=&xi_oclkid=&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cf652b60~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%2211:CF1TCS16%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%22102d6fc9f2325829652c70ed8979b1%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22%22,%22xi_oclkid%22:%22%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=0qigvf4vg09mnerj1pfdcfv3pg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:12 GMT
content-type: text/css
content-length: 1167
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Tue, 27 Sep 2022 08:20:47 GMT
etag: "161a-5e9a4523c18f0-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
www.mamothloans.com/common/template/funnel/pvexl42step/L4/DynamicRLA-wCS/style.css?version=1664007591
200 OK 6.6 kB URL HTTP/2 www.mamothloans.com/common/template/funnel/pvexl42step/L4/DynamicRLA-wCS/style.css?version=1664007591
IP
Hash 848a84c24b0ab976b9d36a4ea9428bb8
bcb930bd62ed9b65bdc0aea3d690f9b2c3972960
c4516c421c694c714d7f2b5b4d01ef12629ec400f34c431dd9c1e4833fe7467f
GET /common/template/funnel/pvexl42step/L4/DynamicRLA-wCS/style.css?version=1664007591 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cf652b60~1618444&rtrtid=11:CF1TCS16&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_resid=&xi_oclkid=&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cf652b60~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%2211:CF1TCS16%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%22102d6fc9f2325829652c70ed8979b1%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22%22,%22xi_oclkid%22:%22%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=0qigvf4vg09mnerj1pfdcfv3pg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:12 GMT
content-type: text/css
content-length: 6612
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Sat, 24 Sep 2022 08:19:51 GMT
etag: "6307-5e967f5663711-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 1c0abe54e947c17bb537f605a5a92f49
450935b033b5a6f825530a6563df2e09e26a6f13
8e65f0e09c420f0ddcc399729fe7ee3407c2f96d6f15aee695b9842520067aae
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 20:03:12 GMT
Last-Modified: Tue, 27 Sep 2022 18:59:42 GMT
Server: ECS (dcb/7F5B)
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Fn79a33d8NnGv1GW4Kx_t32ky8srJY485qsbnHljSmJvgJZrdhgJHA==
Age: 3810
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 1c0abe54e947c17bb537f605a5a92f49
450935b033b5a6f825530a6563df2e09e26a6f13
8e65f0e09c420f0ddcc399729fe7ee3407c2f96d6f15aee695b9842520067aae
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 20:03:12 GMT
Last-Modified: Tue, 27 Sep 2022 19:07:55 GMT
Server: ECS (dcb/7F5C)
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: TjW9fALDSYZ9IogxI1Jv6ge8TNaCtSAkCdDmAD10GkVz656u4k1QiQ==
Age: 3317
offer.mamothloans.com/pxl.php?rxid=503475~cf652b60~1618444&tdat=11:CF1TCS16&evt=J1
200 OK 43 B URL HTTP/2 offer.mamothloans.com/pxl.php?rxid=503475~cf652b60~1618444&tdat=11:CF1TCS16&evt=J1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /pxl.php?rxid=503475~cf652b60~1618444&tdat=11:CF1TCS16&evt=J1 HTTP/1.1
Host: offer.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:12 GMT
content-type: image/gif
content-length: 43
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.25
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-max-age: 1000
access-control-allow-headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token, accept-encoding, accept-language, host, referer, user-agent
x-powered-by: PHP/7.4.25
vary: User-Agent
X-Firefox-Spdy: h2
img.emlasts.com/epcvip/ac-icons/spinner.gif
200 OK 73 kB URL HTTP/2 img.emlasts.com/epcvip/ac-icons/spinner.gif
IP
File type GIF image data, version 89a, 200 x 200\012- data
Hash f05d5e1f77b32a187040b0c3b3b06481
6b0728cb2b735aca08043b2e80e42e4c8e490a6c
7bf6600fc5e0e9ba6e0816783e3346ca53d016c65feac96d24da10ea307e1b08
GET /epcvip/ac-icons/spinner.gif HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 73338
date: Tue, 27 Sep 2022 03:56:14 GMT
last-modified: Thu, 11 Mar 2021 23:55:10 GMT
etag: "f05d5e1f77b32a187040b0c3b3b06481"
x-amz-version-id: MXyLnF3YP.QdPE6INbkqV5vz_1brMawS
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aEIQH7Yg5cEtWPLqexH75LHLm1MOMEKhqTBJ4owo52zbyoHVU1b2RA==
age: 58019
cache-control: max-age=31536000
X-Firefox-Spdy: h2
img.emlasts.com/epcvip/ac-icons/worker-07.jpg
200 OK 27 kB URL HTTP/2 img.emlasts.com/epcvip/ac-icons/worker-07.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x400, components 3\012- data
Hash c43fbbb54845c8a46eaaa9a547653b39
d4a6699278f98dc83a445e511950fbe665d169a8
1f1f396e24884a8c24ba29fb60b167cd51c64b22cab0922c4b43e629fdf29b9f
GET /epcvip/ac-icons/worker-07.jpg HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 26786
last-modified: Thu, 01 Apr 2021 22:04:51 GMT
x-amz-version-id: 7w7isLoDcH69.UW.mZA695oQSQH5X2uL
accept-ranges: bytes
server: AmazonS3
date: Tue, 27 Sep 2022 06:42:22 GMT
etag: "c43fbbb54845c8a46eaaa9a547653b39"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6r-gjfuvd1bBqgxAFDiOV3qzcIKCYzWlRvPQDdLd0ODkLk7hhrhdrA==
age: 48051
cache-control: max-age=31536000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 1c0abe54e947c17bb537f605a5a92f49
450935b033b5a6f825530a6563df2e09e26a6f13
8e65f0e09c420f0ddcc399729fe7ee3407c2f96d6f15aee695b9842520067aae
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 20:03:12 GMT
Server: ECS (dcb/7F14)
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: l_s0j-YUPj3LO0NIw3sLid9KDQAaX5jkkVLdYc_r3odjCFlGlb95kQ==
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 1c0abe54e947c17bb537f605a5a92f49
450935b033b5a6f825530a6563df2e09e26a6f13
8e65f0e09c420f0ddcc399729fe7ee3407c2f96d6f15aee695b9842520067aae
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 20:03:12 GMT
Server: ECS (dcb/7F3B)
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Byeeg9QpC4pFcOvoSnoF3j-M1WWRK2JEgqIAX-hkIanaH1AdQc02HA==
img.emlasts.com/epcvip/ac-icons-grey/icon-ownhome.png
200 OK 6.4 kB URL HTTP/2 img.emlasts.com/epcvip/ac-icons-grey/icon-ownhome.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 586dacd0c109fa905b7edb0ef4abdefe
3b419acc60e26aacf2a8dd1fc08460bb25f636a2
fd5bf883ed0f5bf746fd4abd0a6a43b9b19380682308aab6cae85f189ddd25a9
GET /epcvip/ac-icons-grey/icon-ownhome.png HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 6367
date: Tue, 27 Sep 2022 05:47:12 GMT
last-modified: Sat, 23 Nov 2019 00:18:30 GMT
etag: "586dacd0c109fa905b7edb0ef4abdefe"
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bLdMJGAtSP_8fkZZ1Mw38g4E27pXVxWPBzBECFKfT_o5dt7cZ-_4eA==
age: 51361
cache-control: max-age=31536000
X-Firefox-Spdy: h2
img.emlasts.com/epcvip/ac-icons/secure-ssl3.png
200 OK 7.3 kB URL HTTP/2 img.emlasts.com/epcvip/ac-icons/secure-ssl3.png
IP
File type PNG image data, 200 x 72, 8-bit/color RGBA, non-interlaced\012- data
Hash 831f890e664ce35d7f0554e2126078aa
6ed787560e553674d14d58e279c3e299414009f8
855b0a95aeeb8aa9486858e43e750dd74ca266ffd79078426ccd1b60f5e270f2
GET /epcvip/ac-icons/secure-ssl3.png HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 7289
date: Tue, 27 Sep 2022 05:50:41 GMT
last-modified: Thu, 29 Oct 2020 17:38:08 GMT
etag: "831f890e664ce35d7f0554e2126078aa"
x-amz-version-id: wR0zkLiUqp1C6RY7mam1Yg4lA3JtwZ0j
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4iV6p5YQnvI7E58q_cjvvLLqbfl9TUAfW5AVW_5wdmZYZwS73sXsJQ==
age: 51152
cache-control: max-age=31536000
X-Firefox-Spdy: h2
img.emlasts.com/epcvip/ac-icons/icon_success.png
200 OK 12 kB URL HTTP/2 img.emlasts.com/epcvip/ac-icons/icon_success.png
IP
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 646beb0fefb01ebf9006e7722c5b4611
17cb12b9b3ae6322c8dcf28f5e3832910e384525
bcba7e55c4cbbebd3ab071c189c875aebd5999ecd1c7ef835da7fed4e81bb692
GET /epcvip/ac-icons/icon_success.png HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 11695
date: Tue, 27 Sep 2022 01:07:23 GMT
last-modified: Thu, 11 Mar 2021 22:01:06 GMT
etag: "646beb0fefb01ebf9006e7722c5b4611"
x-amz-version-id: vue7UWARodNTQ1z3_MZFfQrXOvBUZEpx
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: stx8NulkqVOqDCYhkGxxmVBTFyLK6OX2Avye7nEvF_sPSGF45pb3Qg==
age: 68150
cache-control: max-age=31536000
X-Firefox-Spdy: h2
img.emlasts.com/epcvip/ac-icons/chevron-right.png
200 OK 280 B URL HTTP/2 img.emlasts.com/epcvip/ac-icons/chevron-right.png
IP
File type PNG image data, 13 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 8608fe7805f9b2cc600d488487ae4b8f
77905d057928f48036bbd182f0b3306b76d7486c
bd0f9937b7933017c088172977ba87a577e80f1786c30ee92cc4030690b1fd69
GET /epcvip/ac-icons/chevron-right.png HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 280
date: Tue, 27 Sep 2022 06:23:50 GMT
last-modified: Thu, 11 Mar 2021 23:32:01 GMT
etag: "8608fe7805f9b2cc600d488487ae4b8f"
x-amz-version-id: eGPQONq.wABFUcImR8OR.6golFu.9eyT
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pLvFGxPs7I085R85UVaM3cRNi1W1c5HPr1CEm3spbbzOYs78-OzOfA==
age: 49163
cache-control: max-age=31536000
X-Firefox-Spdy: h2
ocsp.comodoca4.com/
200 OK 281 B IP
Hash 7c3c9759c896e906ce60b5fdaf91b73c
5403f69fd83a049bac7d3c068691d7b06aaf6b51
4f481a80d9f1a75c28de85206fe5e63bb2d6bcba85b28d7d05633d37eac09675
POST / HTTP/1.1
Host: ocsp.comodoca4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 20:03:12 GMT
Content-Type: application/ocsp-response
Content-Length: 281
Connection: keep-alive
Last-Modified: Sat, 24 Sep 2022 20:10:54 GMT
Expires: Sat, 01 Oct 2022 20:10:53 GMT
Etag: "5403f69fd83a049bac7d3c068691d7b06aaf6b51"
Cache-Control: max-age=345460,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7516d7608b4eb503-OSL
www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_cookie_141.js?version=1664007591
200 OK 696 B URL HTTP/2 www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_cookie_141.js?version=1664007591
IP
File type ASCII text, with very long lines (1266)
Hash 61d49a466143545253d40c6c6a91226d
4f7f06c8b9794690bf1d513126156b46185a6c30
7319fe517f9aac436543b8bc617df02f653023519622d8a0c064368946961f5a
GET /common/assets/js/funnel/pvexl42step/final/lib/js/jquery_cookie_141.js?version=1664007591 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cf652b60~1618444&rtrtid=11:CF1TCS16&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_resid=&xi_oclkid=&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cf652b60~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%2211:CF1TCS16%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%22102d6fc9f2325829652c70ed8979b1%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22%22,%22xi_oclkid%22:%22%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=0qigvf4vg09mnerj1pfdcfv3pg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:12 GMT
content-type: application/javascript
content-length: 696
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Tue, 27 Sep 2022 08:20:47 GMT
etag: "514-5e9a4523c8650-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_validate_119.js?version=1664007591
200 OK 9.7 kB URL HTTP/2 www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_validate_119.js?version=1664007591
IP
File type Unicode text, UTF-8 text, with very long lines (24292)
Hash 2d29a91f4da2add72ef6d7a71d2a29a6
67a3dfcd09c184128f76d7b3a33507f0ae3d86ee
9fe41ee1c8bbe47173dd9fd6cd6951029df7fb6f90c89513570b1ed95305d3ab
GET /common/assets/js/funnel/pvexl42step/final/lib/js/jquery_validate_119.js?version=1664007591 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cf652b60~1618444&rtrtid=11:CF1TCS16&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_resid=&xi_oclkid=&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cf652b60~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%2211:CF1TCS16%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%22102d6fc9f2325829652c70ed8979b1%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22%22,%22xi_oclkid%22:%22%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=0qigvf4vg09mnerj1pfdcfv3pg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:12 GMT
content-type: application/javascript
content-length: 9726
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Tue, 27 Sep 2022 08:20:47 GMT
etag: "5f6e-5e9a4523c8650-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_validation_methods_119.js?version=1664007591
200 OK 7.8 kB URL HTTP/2 www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_validation_methods_119.js?version=1664007591
IP
File type Unicode text, UTF-8 text, with very long lines (22514)
Hash 6834ecad7088cefc2a704c93a45f06e7
e41df4f655ec226532df22891793f50f9dbebd6d
f07e88fdfdfda9917a7f371a6ef10032bacd13e328e6e71ebca7398c9b28ec86
GET /common/assets/js/funnel/pvexl42step/final/lib/js/jquery_validation_methods_119.js?version=1664007591 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cf652b60~1618444&rtrtid=11:CF1TCS16&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_resid=&xi_oclkid=&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cf652b60~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%2211:CF1TCS16%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%22102d6fc9f2325829652c70ed8979b1%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22%22,%22xi_oclkid%22:%22%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=0qigvf4vg09mnerj1pfdcfv3pg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:12 GMT
content-type: application/javascript
content-length: 7805
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Tue, 27 Sep 2022 08:20:47 GMT
etag: "5883-5e9a4523c8650-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_mask_114.js?version=1664007591
200 OK 3.7 kB URL HTTP/2 www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_mask_114.js?version=1664007591
IP
File type ASCII text, with very long lines (1024)
Hash 6e4835c7754f969f87db2aec362f93d7
5e99b01c948bca2ce3f1b464420ca24008869516
e37e47c1692b9f3d3f4fecb8530b88330559c88aa29e4697d85dccd774e4e6c8
GET /common/assets/js/funnel/pvexl42step/final/lib/js/jquery_mask_114.js?version=1664007591 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cf652b60~1618444&rtrtid=11:CF1TCS16&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_resid=&xi_oclkid=&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cf652b60~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%2211:CF1TCS16%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%22102d6fc9f2325829652c70ed8979b1%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22%22,%22xi_oclkid%22:%22%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=0qigvf4vg09mnerj1pfdcfv3pg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:12 GMT
content-type: application/javascript
content-length: 3741
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Sat, 24 Sep 2022 08:19:51 GMT
etag: "218e-5e967f55f2287-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
www.mamothloans.com/?rtrcid=503475~cf652b60~1618444&rtrtid=11:CF1TCS16&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_resid=&xi_oclkid=&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cf652b60~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%2211:CF1TCS16%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%22102d6fc9f2325829652c70ed8979b1%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22%22,%22xi_oclkid%22:%22%22,%22x_psac%22:%223703%22}
200 OK 52 kB URL HTTP/2 www.mamothloans.com/?rtrcid=503475~cf652b60~1618444&rtrtid=11:CF1TCS16&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_resid=&xi_oclkid=&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cf652b60~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%2211:CF1TCS16%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%22102d6fc9f2325829652c70ed8979b1%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22%22,%22xi_oclkid%22:%22%22,%22x_psac%22:%223703%22}
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1950)
Hash c7cfedcea23d3773f8f923d69fc6fa25
68ca8c0f64813c0d317dcbaf10ba63d6edcdb4fd
99fbf52d5b896eeeeb4e48cea7e297b8f1763a6cfa153f657cdead7ae95f0c94
GET /?rtrcid=503475~cf652b60~1618444&rtrtid=11:CF1TCS16&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_resid=&xi_oclkid=&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cf652b60~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%2211:CF1TCS16%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%22102d6fc9f2325829652c70ed8979b1%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22%22,%22xi_oclkid%22:%22%22,%22x_psac%22:%223703%22} HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://offer.mamothloans.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:11 GMT
content-type: text/html; charset=UTF-8
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
x-powered-by: PHP/7.4.30
set-cookie: SCSSESSIONID=0qigvf4vg09mnerj1pfdcfv3pg; expires=Wed, 28-Sep-2022 04:03:11 GMT; Max-Age=28800; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/local-storage-wrapper.js?version=1664007591
200 OK 447 B URL HTTP/2 www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/local-storage-wrapper.js?version=1664007591
IP
Hash d62c5ca1baa18951e04f01c446c1ac1d
ea2b43b7b4fba74a53a16ece693dac223c98b74b
4b06bf9902324b73ac543c6a8227a59cda93bf74652e6f9291b03de44d512d0f
GET /common/assets/js/funnel/pvexl42step/final/local-storage-wrapper.js?version=1664007591 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cf652b60~1618444&rtrtid=11:CF1TCS16&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_resid=&xi_oclkid=&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cf652b60~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%2211:CF1TCS16%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%22102d6fc9f2325829652c70ed8979b1%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22%22,%22xi_oclkid%22:%22%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=0qigvf4vg09mnerj1pfdcfv3pg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:12 GMT
content-type: application/javascript
content-length: 447
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Sat, 24 Sep 2022 08:19:51 GMT
etag: "826-5e967f55f41c7-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
www.mamothloans.com/common/assets/js/global/noSleep.min.js?version=1664007591
200 OK 7.4 kB URL HTTP/2 www.mamothloans.com/common/assets/js/global/noSleep.min.js?version=1664007591
IP
File type ASCII text, with very long lines (16658)
Hash cc72b9cea8878304f558e99f7dfc7c34
bb749c9280dacd9ff76af6fc745d280fc0e4ad4a
3a7c696703ea3fea8ae4bdde898b184fb188474869aac897dfa65625f0dbedb5
GET /common/assets/js/global/noSleep.min.js?version=1664007591 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cf652b60~1618444&rtrtid=11:CF1TCS16&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_resid=&xi_oclkid=&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cf652b60~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%2211:CF1TCS16%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%22102d6fc9f2325829652c70ed8979b1%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22%22,%22xi_oclkid%22:%22%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=0qigvf4vg09mnerj1pfdcfv3pg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:12 GMT
content-type: application/javascript
content-length: 7378
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Tue, 27 Sep 2022 08:20:47 GMT
etag: "415c-5e9a45240cc14-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
www.mamothloans.com/common/assets/js/global/lazysizes.min.js?version=1664007591
200 OK 3.5 kB URL HTTP/2 www.mamothloans.com/common/assets/js/global/lazysizes.min.js?version=1664007591
IP
File type ASCII text, with very long lines (6761)
Hash ca6266d69da1d8eb8e6875062b3a2b1f
6599d22230cc84fba297b588ba1184aaf1d299fa
9d2dcd6895f7d1ef4dbe6c772cb2357b9eab6192440a650b84b7c2b31fb0c9cc
GET /common/assets/js/global/lazysizes.min.js?version=1664007591 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cf652b60~1618444&rtrtid=11:CF1TCS16&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_resid=&xi_oclkid=&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cf652b60~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%2211:CF1TCS16%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%22102d6fc9f2325829652c70ed8979b1%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22%22,%22xi_oclkid%22:%22%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=0qigvf4vg09mnerj1pfdcfv3pg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:12 GMT
content-type: application/javascript
content-length: 3454
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Sat, 24 Sep 2022 08:19:51 GMT
etag: "1a83-5e967f563972d-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_steps_110.js?version=1664007591
200 OK 5.9 kB URL HTTP/2 www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_steps_110.js?version=1664007591
IP
File type ASCII text, with very long lines (13686)
Hash 9122fadc073d660ce3ee7c3afbb02d2b
5df9c5da5c7f71e43961fcd601aa0d6969212005
54a75ab40ca4289011a1355bbd2078e80be34c7d6c1933a24e528d82a5957d7c
GET /common/assets/js/funnel/pvexl42step/final/lib/js/jquery_steps_110.js?version=1664007591 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cf652b60~1618444&rtrtid=11:CF1TCS16&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_resid=&xi_oclkid=&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cf652b60~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%2211:CF1TCS16%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%22102d6fc9f2325829652c70ed8979b1%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22%22,%22xi_oclkid%22:%22%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=0qigvf4vg09mnerj1pfdcfv3pg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:12 GMT
content-type: application/javascript
content-length: 5931
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Tue, 27 Sep 2022 08:20:47 GMT
etag: "3620-5e9a4523c8650-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
www.mamothloans.com/?cmd=ExtTAVSEvent&i_tavsid=7687&sugid=21&i_appid=&appSessDataId=727787475&evt=P1
200 OK 43 B URL HTTP/2 www.mamothloans.com/?cmd=ExtTAVSEvent&i_tavsid=7687&sugid=21&i_appid=&appSessDataId=727787475&evt=P1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /?cmd=ExtTAVSEvent&i_tavsid=7687&sugid=21&i_appid=&appSessDataId=727787475&evt=P1 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cf652b60~1618444&rtrtid=11:CF1TCS16&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_resid=&xi_oclkid=&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cf652b60~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%2211:CF1TCS16%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%22102d6fc9f2325829652c70ed8979b1%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22%22,%22xi_oclkid%22:%22%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=0qigvf4vg09mnerj1pfdcfv3pg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:12 GMT
content-type: image/gif
content-length: 43
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
x-powered-by: PHP/7.4.30
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: User-Agent
X-Firefox-Spdy: h2
img.emlasts.com/epcvip/ac-icons/asterisks.png
200 OK 587 B URL HTTP/2 img.emlasts.com/epcvip/ac-icons/asterisks.png
IP
File type PNG image data, 184 x 42, 8-bit colormap, non-interlaced\012- data
Hash 4b7874d634e9faa2470b05f42b731aa0
dcfb3eab7ccc349b47196d1354387ad204c62e2c
22e29b0f2fa3e4c59fbed79e72c2b339a4ea76f9d6ddd5eba59c0e668bf0b1b8
GET /epcvip/ac-icons/asterisks.png HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 587
date: Tue, 27 Sep 2022 07:28:31 GMT
last-modified: Tue, 06 Apr 2021 21:06:50 GMT
etag: "4b7874d634e9faa2470b05f42b731aa0"
x-amz-version-id: 3gNNo2cxRohJ_8ZRm9kVCxwIRHxSx4ek
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nM8-1Fi-1RhWK0wrq7ip7ZKWOHGcN5JFuteWdYfOamsBylWYdeO3Lg==
age: 45282
cache-control: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fc82211401f793132f7d43c2fd253af5
605d8371709b5d2a41967fd390c34fa649f89ea3
b23fd36ec037710672ac1aa6fea284e3869c4bae7941d9b53c771cff8743478e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 20:03:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fc82211401f793132f7d43c2fd253af5
605d8371709b5d2a41967fd390c34fa649f89ea3
b23fd36ec037710672ac1aa6fea284e3869c4bae7941d9b53c771cff8743478e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 20:03:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fc82211401f793132f7d43c2fd253af5
605d8371709b5d2a41967fd390c34fa649f89ea3
b23fd36ec037710672ac1aa6fea284e3869c4bae7941d9b53c771cff8743478e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 20:03:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fc82211401f793132f7d43c2fd253af5
605d8371709b5d2a41967fd390c34fa649f89ea3
b23fd36ec037710672ac1aa6fea284e3869c4bae7941d9b53c771cff8743478e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 20:03:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fc82211401f793132f7d43c2fd253af5
605d8371709b5d2a41967fd390c34fa649f89ea3
b23fd36ec037710672ac1aa6fea284e3869c4bae7941d9b53c771cff8743478e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 20:03:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img.emlasts.com/epcvip/ac-icons/point_online.png
200 OK 1.7 kB URL HTTP/2 img.emlasts.com/epcvip/ac-icons/point_online.png
IP
File type PNG image data, 85 x 85, 8-bit/color RGBA, non-interlaced\012- data
Hash b7106637d27b8935b243868d559964d9
a7af18522be80b76e2ff69b6b3e67e9afa143bae
eee7b579b6209a4d45aaf94fefb1c04908ad8021250e3b73e84be24475afafb2
GET /epcvip/ac-icons/point_online.png HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1716
date: Tue, 27 Sep 2022 07:15:38 GMT
last-modified: Tue, 23 Mar 2021 22:56:35 GMT
etag: "b7106637d27b8935b243868d559964d9"
x-amz-version-id: cNjZgvknIhiZHhv31pjFkikTELtLDYxY
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7FAC5xIZUogN5CrbWFRjBt7Bt9s2SbeqjJ8xW6GdOxxPBYR1k37pvA==
age: 46055
cache-control: max-age=31536000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v15/pxiEyp8kv8JHgFVrJJfecnFHGPc.woff2
200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v15/pxiEyp8kv8JHgFVrJJfecnFHGPc.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7900, version 1.0\012- data
Hash 9ed361bba8488aeb2797b82befda20f1
6f80d965a066aff81c0a344d4b7297bd009cc099
41e46faff74c6a77d581689ec35eb040f6c96d17f4d2c5b25dccd42ed498b01c
GET /s/poppins/v15/pxiEyp8kv8JHgFVrJJfecnFHGPc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mamothloans.com
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7900
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 26 Sep 2022 01:36:51 GMT
expires: Tue, 26 Sep 2023 01:36:51 GMT
cache-control: public, max-age=31536000
age: 152781
last-modified: Thu, 05 Nov 2020 22:01:13 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img.emlasts.com/epcvip/ac-icons/point_cards.png
200 OK 2.9 kB URL HTTP/2 img.emlasts.com/epcvip/ac-icons/point_cards.png
IP
File type PNG image data, 85 x 85, 8-bit/color RGBA, non-interlaced\012- data
Hash eeeda29d39302be45f4c1f4617975b11
09753ab28d2c6d7e8f5db1c1d7ad03a674b61e97
50e8f37b4bb0ecd3bae73788be069b5b9578da527040124676cd3d257ac2d247
GET /epcvip/ac-icons/point_cards.png HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2871
last-modified: Tue, 23 Mar 2021 22:56:35 GMT
x-amz-version-id: 4FoewmqY5fkC9PQVQvhlQzDPeayvKJ7k
accept-ranges: bytes
server: AmazonS3
date: Tue, 27 Sep 2022 09:06:35 GMT
etag: "eeeda29d39302be45f4c1f4617975b11"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: yt4zOuFMStbwR4ZruQFqIrcVk33tpAAKNYEJw7WnkCcROayc17pLQw==
age: 39398
cache-control: max-age=31536000
X-Firefox-Spdy: h2
www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_ui_112.js?version=1664007591
200 OK 99 kB URL HTTP/2 www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_ui_112.js?version=1664007591
IP
Hash 7ce57576b1d98c189205d3e233f943fb
748cb2591b7633560ab759dd4e643d4667ecbe3f
5aab2a72cdff1619965ce5fd8caee6c6ab91402ffbe7f31200cf94a9154ba84e
GET /common/assets/js/funnel/pvexl42step/final/lib/js/jquery_ui_112.js?version=1664007591 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cf652b60~1618444&rtrtid=11:CF1TCS16&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_resid=&xi_oclkid=&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cf652b60~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%2211:CF1TCS16%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%22102d6fc9f2325829652c70ed8979b1%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22%22,%22xi_oclkid%22:%22%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=0qigvf4vg09mnerj1pfdcfv3pg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:12 GMT
content-type: application/javascript
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Sat, 24 Sep 2022 08:19:51 GMT
etag: "3ddf1-5e967f55f41c7-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_360.js?version=1664007591
200 OK 47 kB URL HTTP/2 www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_360.js?version=1664007591
IP
Hash ef441a963c03a59bf786eeb6be49fafe
404f0cba173412a70226728693ed5a8b80bc2915
4a5f3cbc8f4598176bb9b2463f9a6629c92bfeb075441357a83d87468c76fa94
GET /common/assets/js/funnel/pvexl42step/final/lib/js/jquery_360.js?version=1664007591 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cf652b60~1618444&rtrtid=11:CF1TCS16&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_resid=&xi_oclkid=&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cf652b60~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%2211:CF1TCS16%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%22102d6fc9f2325829652c70ed8979b1%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22%22,%22xi_oclkid%22:%22%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=0qigvf4vg09mnerj1pfdcfv3pg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:12 GMT
content-type: application/javascript
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Sat, 24 Sep 2022 08:19:51 GMT
etag: "15d9c-5e967f55f2287-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v15/pxiByp8kv8JHgFVrLGT9Z1xlFd2JQEk.woff2
200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v15/pxiByp8kv8JHgFVrLGT9Z1xlFd2JQEk.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7776, version 1.0\012- data
Hash 84780596e268aa0cb2be48af2ed5c375
d67ccd32f8c790a746d64d06145882a2f7b06560
d7ba57e3ccc2e3b2bdf8cc9e613194b802607682bf473293c2e3e29de82c9491
GET /s/poppins/v15/pxiByp8kv8JHgFVrLGT9Z1xlFd2JQEk.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mamothloans.com
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 27 Sep 2022 06:10:18 GMT
expires: Wed, 27 Sep 2023 06:10:18 GMT
cache-control: public, max-age=31536000
age: 49974
last-modified: Thu, 05 Nov 2020 22:01:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v15/pxiByp8kv8JHgFVrLDD4Z1xlFd2JQEk.woff2
200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v15/pxiByp8kv8JHgFVrLDD4Z1xlFd2JQEk.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7844, version 1.0\012- data
Hash 93c0db9332c3f46d1842b36bcf89dac0
7d5057e994e405022a1bfa3c6c668028ac222532
e28d860a51754d183f6f97432fd94046cd31afb7ce65c8ea179b0ff63b3d84fa
GET /s/poppins/v15/pxiByp8kv8JHgFVrLDD4Z1xlFd2JQEk.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mamothloans.com
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7844
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 08:17:26 GMT
expires: Fri, 22 Sep 2023 08:17:26 GMT
cache-control: public, max-age=31536000
age: 474346
last-modified: Thu, 05 Nov 2020 22:01:51 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fc82211401f793132f7d43c2fd253af5
605d8371709b5d2a41967fd390c34fa649f89ea3
b23fd36ec037710672ac1aa6fea284e3869c4bae7941d9b53c771cff8743478e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 20:03:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.mamothloans.com/assets/img/logo.png
200 OK 15 kB URL HTTP/2 www.mamothloans.com/assets/img/logo.png
IP
File type PNG image data, 422 x 111, 8-bit/color RGBA, non-interlaced\012- data
Hash f93d85bdc9d017f6b40945b2faba8591
2f14e48da9997212ae945614fa992ae07f9d8884
70e61df5ea30b4b1c0df1095aa20d6865450c4201de9b2369964aff649c1acaf
GET /assets/img/logo.png HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cf652b60~1618444&rtrtid=11:CF1TCS16&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_resid=&xi_oclkid=&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cf652b60~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%2211:CF1TCS16%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%22102d6fc9f2325829652c70ed8979b1%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22%22,%22xi_oclkid%22:%22%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=0qigvf4vg09mnerj1pfdcfv3pg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:12 GMT
content-type: image/png
content-length: 15325
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Sat, 24 Sep 2022 09:25:53 GMT
etag: "3bdd-5e968e189f9f6"
accept-ranges: bytes
vary: User-Agent
X-Firefox-Spdy: h2
img.emlasts.com/epcvip/ac-icons/point_require.png
200 OK 2.5 kB URL HTTP/2 img.emlasts.com/epcvip/ac-icons/point_require.png
IP
File type PNG image data, 85 x 85, 8-bit/color RGBA, non-interlaced\012- data
Hash 5131654e37c3fe6c3ddbed25e397e136
cab55bc50213b84b088e65fe44ee9c9f1a41ea2e
421a6e46be6f1fea476a59431f97eff87b1b888cdcde020d6e75ff767649f34d
GET /epcvip/ac-icons/point_require.png HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2495
last-modified: Tue, 23 Mar 2021 22:56:36 GMT
x-amz-version-id: lHlHEphfWqC3XH.CuG3_CDT5vzRlR2q8
accept-ranges: bytes
server: AmazonS3
date: Tue, 27 Sep 2022 05:31:07 GMT
etag: "5131654e37c3fe6c3ddbed25e397e136"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BdDiUgpVWu2lvBJ1exEV9zDi0HAPDI3o6Yl7TM8b7plMszFKtckT9w==
age: 52326
cache-control: max-age=31536000
X-Firefox-Spdy: h2
img.emlasts.com/epcvip/ac-icons/point_bank.png
200 OK 2.0 kB URL HTTP/2 img.emlasts.com/epcvip/ac-icons/point_bank.png
IP
File type PNG image data, 85 x 85, 8-bit/color RGBA, non-interlaced\012- data
Hash aa079a92b89893842226149cf779d8b0
145f7b66882deb3d08b77416cdf30f2a87c6828a
21dff3be1d7fc41ebada2386ffcf13261bf0adae089902012b3d1c0df1492432
GET /epcvip/ac-icons/point_bank.png HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1963
last-modified: Tue, 23 Mar 2021 22:56:35 GMT
x-amz-version-id: qHFNgw0Eq5FCoyIyUa88cwP9.EslyGYg
accept-ranges: bytes
server: AmazonS3
date: Tue, 27 Sep 2022 12:12:16 GMT
etag: "aa079a92b89893842226149cf779d8b0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: I8KjiIkvX4TLKZQ-Lsig-TnvRc5WLCtykWyIksZ-ZHIx4wmVG81qJQ==
age: 28257
cache-control: max-age=31536000
X-Firefox-Spdy: h2
www.mamothloans.com/apple-touch-icon.png?version=1664011553
200 OK 27 kB URL HTTP/2 www.mamothloans.com/apple-touch-icon.png?version=1664011553
IP
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash fbcdf1580e41fb965f3f0fd073621d81
3e43db98e8c01324985c0509fb4eb760212d32f3
2e0981f7bc33a300ab0475729546a923229ebcc89e18fcbe83e7e4892a068676
GET /apple-touch-icon.png?version=1664011553 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cf652b60~1618444&rtrtid=11:CF1TCS16&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_resid=&xi_oclkid=&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cf652b60~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%2211:CF1TCS16%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%22102d6fc9f2325829652c70ed8979b1%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22%22,%22xi_oclkid%22:%22%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=0qigvf4vg09mnerj1pfdcfv3pg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:13 GMT
content-type: image/png
content-length: 26781
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Tue, 27 Sep 2022 09:19:41 GMT
etag: "689d-5e9a524eb0d96"
accept-ranges: bytes
vary: User-Agent
X-Firefox-Spdy: h2
www.mamothloans.com/favicon-16x16.png?version=1664011553
200 OK 1.4 kB URL HTTP/2 www.mamothloans.com/favicon-16x16.png?version=1664011553
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 559fca6d521cc4fe464e7b3349519885
c989a15eb183db6409f8a503a7420297c98277dc
9d338a3bdcee4544a20458a8dc6af692e6c26103d5ee8c8138e39899a577a98f
GET /favicon-16x16.png?version=1664011553 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cf652b60~1618444&rtrtid=11:CF1TCS16&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_resid=&xi_oclkid=&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cf652b60~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%2211:CF1TCS16%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%22102d6fc9f2325829652c70ed8979b1%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22%22,%22xi_oclkid%22:%22%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=0qigvf4vg09mnerj1pfdcfv3pg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:13 GMT
content-type: image/png
content-length: 1435
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Tue, 27 Sep 2022 09:19:41 GMT
etag: "59b-5e9a524ed4fb9"
accept-ranges: bytes
vary: User-Agent
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash cdd1c0ad9317eda4ec7e3f3c4bd3af88
2b39ae5f0cd2f84010e1ea9f5e3347af113058c4
7139a773c61884bd2d447b67e09fa02c189c8b0a88b4818cfff00483c66b9937
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 20:03:13 GMT
Last-Modified: Tue, 27 Sep 2022 18:16:35 GMT
Server: ECS (nyb/1D35)
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: nL40s0-F8XEhaGadGY3f64ApKGwXOW7HpkXrP60n4D8wLAiRjRE_IQ==
Age: 6398
warmestdear-llc.zendesk.com/embeddable_blip?type=performance&data=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
200 OK 0 B URL HTTP/2 warmestdear-llc.zendesk.com/embeddable_blip?type=performance&data=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
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embeddable_blip?type=performance&data=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 HTTP/1.1
Host: warmestdear-llc.zendesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mamothloans.com/
Origin: https://www.mamothloans.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:13 GMT
content-length: 0
access-control-allow-origin: *
vary: Origin, Accept-Encoding
x-zendesk-zorg: yes
x-request-id: 9e9727f50ec30f60c1cd3283e65e6929
last-modified: Tue, 27 Sep 2022 20:03:13 GMT
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z0tioBGFUCsTki%2Bc4201Eyi1ec6j2K64%2BumG5R%2B9KtOB6auTts6Ec17JWJOE8cGGvmrhZqlJoziQrCnAVUrm%2BwClff5ostYEtPp7t65APfiLr0Ik4B7i9KMiyUM2fRNLIa5zYgVXvGHMjqrSuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
set-cookie: __cfruid=bc4958f5c78eb55bcb05889da630c1b0f5d100aa-1664308993; path=/; domain=.warmestdear-llc.zendesk.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7516d76b4ebd0b06-OSL
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-5324-a0de4fd.js
200 OK 168 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-5324-a0de4fd.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 168 kB (167493 bytes)
Hash fda3ea9e968114749f5ebc65b0ceedb0
8bf9ec638a522db39585764b75db00427da16a92
35c6b89968dc0ce8664408e57baf90b8faf910a517c1d79bb7b5c261b36d203a
GET /web_widget/latest/classic/web-widget-5324-a0de4fd.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:13 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: jiUjS8i5ogBKsEY8pXtFP3p54eMkadqLldCsRkLKVi6JK+vQJnPnOKnzGA+9Xd4cTR1i8Xl1Sc4=
x-amz-request-id: QCVJWAWE00VBJ4R9
x-amz-replication-status: COMPLETED
last-modified: Wed, 21 Sep 2022 08:20:58 GMT
etag: W/"fe63a00c4999fd63f0b0c1bea23a82e7"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 21 Sep 2023 08:20:57 GMT
x-amz-version-id: 8QZqPdR3EEy5MEkLovIhBiJkm4B5PkAM
cf-cache-status: HIT
age: 53278
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=omKgHOQIoeXP4BhMw%2F1DJBSKWRlPev2tarJOKnVg8%2BDfQVU%2F1e4fcwM6I8dQaRLzACHCsF7liILBls9D9tqLBlvTd27EnV%2F0XjEkhgNWbwwtGwn7UFNS7ooEzjvdvad1X0bRnSo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7516d767ba1b0b51-OSL
content-encoding: br
X-Firefox-Spdy: h2
warmestdear-llc.zendesk.com/talk_embeddables_service/web/status?subdomain=warmestdear-llc&nickname=Support
200 OK 20 kB URL HTTP/2 warmestdear-llc.zendesk.com/talk_embeddables_service/web/status?subdomain=warmestdear-llc&nickname=Support
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 36bd47408bf08c54b26f7a7a21cedd26
fdfc6e09826c8f152a23583869d9c13ba78289b8
67e5ff61acb69cee11a2ba8994f806933ad61a7e37abebf4a7a8cfedda942f81
GET /talk_embeddables_service/web/status?subdomain=warmestdear-llc&nickname=Support HTTP/1.1
Host: warmestdear-llc.zendesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.mamothloans.com
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:14 GMT
content-type: application/json; charset=utf-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
x-ratelimit-limit: 500
x-ratelimit-remaining: 499
x-ratelimit-reset: 1664308995
etag: W/"66-aJA2X0meaAnn8SEhHewRMlSvtL0"
x-zendesk-zorg: yes
x-request-id: d560a083660f76f9a96f896d24cb9977
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BXhN%2B6wW5D9TKo2B2eqMW42lVvcENADcx87gVQbrLx5Y%2BuLN%2BEFdVN2EZdGyCa%2BLQc2Zgz9u0P8o3Hna%2BdvbPFlNFVuR5d6bz%2B6mmxsMzT%2FMB7XD%2F6zRiB11MEQgXG%2FnuT%2Bja3lSKkH27VtZdg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
set-cookie: _zdsession_talk_embeddables_service=b9b311018f23d6dec300c9628911336e; path=/
__cfruid=ac93887d794302af50d96bca6a63a8d8bc82a082-1664308994; path=/; domain=.warmestdear-llc.zendesk.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7516d76a8dcd0b06-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/ekr/snippet.js?key=045675ec-ff49-47ff-8850-a8e0143537be
200 OK 0 B URL HTTP/2 static.zdassets.com/ekr/snippet.js?key=045675ec-ff49-47ff-8850-a8e0143537be
IP
GET /ekr/snippet.js?key=045675ec-ff49-47ff-8850-a8e0143537be HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:12 GMT
content-type: application/javascript
x-amz-id-2: 2vczt6VEQAujZh2Sn1saK7Q0yPHQMRKRQuuC+kOwLnJ40itjD1HXfy2Id85tVz8wD4O1ArN10VQ=
x-amz-request-id: 4MARQ9YY8PDZ70A8
x-amz-replication-status: PENDING
last-modified: Thu, 28 Jul 2022 23:44:02 GMT
etag: W/"5cae6ce528dce0c327b2bcbaad459fdb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600, s-maxage=60
x-amz-version-id: TCAqq4sghBBBAAXd3MLZ8Fy8XIds..vO
cf-cache-status: HIT
age: 60
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VutqiNumtsJF83auiKQ0EnXLwDeF%2Fke1HmuY0x%2BdVj6vnDArKHpLORcEcGN7HRAAmq%2FCr9Z76QWhhuk2D8SLOl0xp9EZ66B4%2B7iV2g04g%2BcE3dyfxqLdFOCTg3B59UG0x245Egw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7516d761ebc30b51-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/web-widget-framework-f946e922bd3a194625ec.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/web-widget-framework-f946e922bd3a194625ec.js
IP
GET /web_widget/latest/web-widget-framework-f946e922bd3a194625ec.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:12 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: UPfMdFM5rMXpAVGC3UCGqZvolEXW9obw5S95yXk31vNIQhgS+sTttfupcdvCOCC7tTJYDTaoccA=
x-amz-request-id: QCVT93WX42ZYK37S
x-amz-replication-status: COMPLETED
last-modified: Wed, 21 Sep 2022 08:20:45 GMT
etag: W/"2e6239dd99b9e86e717b8eb3c1c8d59c"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 21 Sep 2023 08:20:44 GMT
x-amz-version-id: OfPluWx04UFRk_evdpa1t4UW.QUvdFFU
cf-cache-status: HIT
age: 53277
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gq2W9c69kWsGcKPs7XMnzfYpO7p8AERF4jQMtxVHOhx8WhQpzJiNO0Ka8zcC%2FMIVWocqkBWDSsa9QH3pVp7kklPyUbM0bfSbE9sqp6idrqX%2FwmB%2BQnjlUyqaUQmNDhdUsBLGOS4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7516d766082f0b51-OSL
content-encoding: br
X-Firefox-Spdy: h2
warmestdear-llc.zendesk.com/embeddable/config
200 OK 0 B URL HTTP/2 warmestdear-llc.zendesk.com/embeddable/config
IP
GET /embeddable/config HTTP/1.1
Host: warmestdear-llc.zendesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mamothloans.com/
Origin: https://www.mamothloans.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:13 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers:
access-control-max-age: 7200
cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600
x-zendesk-origin-server: embeddable-app-server-fd4c54598-4wc4f
x-request-id: 61df53ec583b5a2a68026ed2249f0e73
x-runtime: 0.002614
vary: Origin, Accept-Encoding
x-cached: MISS
last-modified: Tue, 27 Sep 2022 19:14:38 GMT
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DOan4HsqnUk79ES2OQ8f%2FoNvYduuwuRxH3Z8I51dysSddsN5a6hE4T5Tvgd370ETlZXPgKlezEWm36Si1bcCMlny7ToUM1u1IKQb%2FSs%2F7ig5wFpt0443wmGxsHTP6tmvK%2F2FkHgHTpi0xLm6Yw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
set-cookie: __cfruid=bc4958f5c78eb55bcb05889da630c1b0f5d100aa-1664308993; path=/; domain=.warmestdear-llc.zendesk.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 7516d7669ffa0b06-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.mamothloans.com/common/template/funnel/pvexl42step/L4/DynamicRLA-wCS/scripts.js?version=1664007591
200 OK 0 B URL HTTP/2 www.mamothloans.com/common/template/funnel/pvexl42step/L4/DynamicRLA-wCS/scripts.js?version=1664007591
IP
GET /common/template/funnel/pvexl42step/L4/DynamicRLA-wCS/scripts.js?version=1664007591 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cf652b60~1618444&rtrtid=11:CF1TCS16&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_resid=&xi_oclkid=&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cf652b60~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%2211:CF1TCS16%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%22102d6fc9f2325829652c70ed8979b1%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22%22,%22xi_oclkid%22:%22%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=0qigvf4vg09mnerj1pfdcfv3pg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:12 GMT
content-type: application/javascript
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Tue, 27 Sep 2022 08:20:47 GMT
etag: "10c34-5e9a452438b36-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/css/bootstrap_337.css?version=1664007591
200 OK 0 B URL HTTP/2 www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/css/bootstrap_337.css?version=1664007591
IP
GET /common/assets/js/funnel/pvexl42step/final/lib/css/bootstrap_337.css?version=1664007591 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cf652b60~1618444&rtrtid=11:CF1TCS16&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=102d6fc9f2325829652c70ed8979b1&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_resid=&xi_oclkid=&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cf652b60~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%2211:CF1TCS16%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%22102d6fc9f2325829652c70ed8979b1%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22%22,%22xi_oclkid%22:%22%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=0qigvf4vg09mnerj1pfdcfv3pg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:12 GMT
content-type: text/css
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Tue, 27 Sep 2022 08:20:47 GMT
etag: "1d942-5e9a4523c18f0-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
ekr.zdassets.com/compose/045675ec-ff49-47ff-8850-a8e0143537be
200 OK 0 B URL HTTP/2 ekr.zdassets.com/compose/045675ec-ff49-47ff-8850-a8e0143537be
IP
GET /compose/045675ec-ff49-47ff-8850-a8e0143537be HTTP/1.1
Host: ekr.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.mamothloans.com
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 20:03:12 GMT
content-type: application/json; charset=utf-8
status: 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers:
access-control-max-age: 7200
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cache-control: max-age=600, public, s-maxage=60, stale-while-revalidate=600, stale-if-error=3600
etag: W/"80bbf4240cf0a42c6fcefe2b0ae72878"
x-request-id: 94cc58ab934cd5c566c368b8df888933, 94cc58ab934cd5c566c368b8df888933
x-runtime: 0.002918
vary: Origin, Accept-Encoding
x-zendesk-zorg: yes
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nVG%2FHyOMQj4Dl5uYOVIW%2BX8Ou8cFrLp3f0YxK5Zviur6W6mtvQYlsdRUEblYL%2FcdwnY1QjaD0%2F4yNGmZWn3ALlMLGZ7N4KYTR7yYINHhq9%2FcNu7jiNbJHiRC9j2n8qcUnkk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7516d764a816b50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
15.235.35.187
93.184.220.29
143.204.55.115
23.36.77.32
104.16.51.111
99.80.78.167