www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
200 OK 26 kB URL User Request GET HTTP/2 www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
IP
Certificate IssuerGoDaddy.com, Inc.
Subject*.newamericanfunding.com
FingerprintF5:1A:31:60:D2:14:AD:61:49:B8:2F:2D:FF:B0:5D:0A:FA:FB:76:61
ValidityWed, 26 Apr 2023 07:22:07 GMT - Mon, 27 May 2024 07:22:07 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1285), with CRLF, LF line terminators
Hash 496a17d8685fac26fba9d4bc1c2860cb
f12b9f24b6fa7a9eb636cdb220b43003c2df7296
1d0a4b60161c2949b4c0a965f86d393b0469766da3156e33766f763f7046a454
GET /lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default HTTP/1.1
Host: www.newamericanfunding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:40:59 GMT
content-type: text/html; charset=utf-8
content-length: 25720
server: nginx
cache-control: private,max-age=0
content-encoding: gzip
vary: Accept-Encoding
set-cookie: ASP.NET_SessionId=4ufzrchrkowfk2kctcvvkss1; path=/; secure; HttpOnly; SameSite=Lax
SessionId=8b95e606-0501-46aa-a795-caa089295c5d; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure; HttpOnly
amp-access-control-allow-source-origin: http://74.80.208.44
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self' www.newamericanfunding.com thebrokernetwork.com www.thebrokernetwork.com qa.thebrokernetwork.com staging.thebrokernetwork.com uat.thebrokernetwork.com https://patch.com https://mortgage.patch.com; default-src 'unsafe-eval' 'unsafe-inline' data: https:; script-src 'unsafe-eval' 'unsafe-inline' data: https: blob:; style-src 'unsafe-inline' data: https:; img-src data: https: blob:; font-src data: https:; connect-src https: blob:; media-src data: https: blob:; object-src https:; frame-src data: https:; child-src data: https: blob:; form-action https:;
x-xss-protection: 1; mode=block
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-request-id: 414cb3eb8ca7d755e0070ca73e6c8ec2
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.7.1/slick.min.css
200 OK 394 B URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.7.1/slick.min.css
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (1327)
Hash 6a62ad0f300504c583e7797c79c2d8ab
e6e4f113fc2d008516d21228dac93bb6a2fcbb53
50ad448a8a5720bf8a5617db15af31ae60163de06331576f60c6244c012ffc72
GET /ajax/libs/slick-carousel/1.7.1/slick.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:00 GMT
content-type: text/css; charset=utf-8
content-length: 394
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fd5-559"
last-modified: Mon, 04 May 2020 16:16:21 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 979141
expires: Mon, 25 Nov 2024 15:41:00 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JMckLOSak7VZ9D%2FiFAnsRntoQkE7pRI2nG5A4xOZgKz2uANhKCk5gE8%2BXWJkrvQoZncwLLcoNjxkULUZaaZsrUT81BskWPt0WjCHmb6iWzzulHVeKNgzzh%2BA%2FdzT%2BSDrWSaOZoW4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8315a16dc9bc5688-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.13/jquery.mask.min.js
200 OK 3.0 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.13/jquery.mask.min.js
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (551)
Hash 7cf822dfabcf03f507100695b88df84b
3e9ff06e8f52afdb8193584c61d4400938b71d63
0aaed71320dc122a42a59383acc7b8071ba4aa5c7c47d667773218b38c32b443
GET /ajax/libs/jquery.mask/1.14.13/jquery.mask.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:00 GMT
content-type: application/javascript; charset=utf-8
content-length: 3001
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec3-1f3d"
last-modified: Mon, 04 May 2020 16:11:47 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1081833
expires: Mon, 25 Nov 2024 15:41:00 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BSKcSBRFyOmzpDIv%2B%2F19dxm%2Fygf5QcgiG6KTCdtk7X89qSusJGdad7MG6LcORuOHoCIPXUnGNQFhTWsZkQkDcfG%2BgTrGCv7AM9bqgPVD%2BGcRHm%2FM%2BZBPqttp6BJNP8p4uiZw4%2B%2Bt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8315a16dc9bf5688-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/balance-text/3.2.0/balancetext.min.js
200 OK 2.5 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/balance-text/3.2.0/balancetext.min.js
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (9109)
Hash 5c065791de8ba52f2888be98548af79a
7b8add661d25267850dbe6cf41a4423345a0a76f
dcb31c4ac1ffbf43d3f036c39f64e614b9e623a205b40e7ddb3ec6b9cf663694
GET /ajax/libs/balance-text/3.2.0/balancetext.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:00 GMT
content-type: application/javascript; charset=utf-8
content-length: 2546
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03d72-2397"
last-modified: Mon, 04 May 2020 16:06:10 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1149542
expires: Mon, 25 Nov 2024 15:41:00 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TQaR6ZpzuTc1Vc5EuKmUDgCXtYKVeoJ1i1VviVBQ0CsWfKU%2FwX2sqTVSeDSK21GDLuST7Mi8%2Bd8mj9yuGQ5aNJVBRauUwMsMEw3yI9TzVabagAUiHq0UAchu8vdPKnTShZVgq99t"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8315a16de9cf5688-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/css/bootstrap.min.css
200 OK 30 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/css/bootstrap.min.css
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type Unicode text, UTF-8 text, with very long lines (65305)
Hash 3f30c2c47d7d23c7a994db0c862d45a5
7791dd1f3173a0d62cc39c21d2ad71fc8dad0e72
c0bcf7898fdc3b87babca678cd19a8e3ef570e931c80a3afbffcc453738c951a
GET /npm/bootstrap@5.2.3/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newamericanfunding.com
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.2.3
x-jsd-version-type: version
etag: W/"2f955-d5HdHzFzoNYsw5wh0q1x/I2tDnI"
content-encoding: br
accept-ranges: bytes
date: Wed, 06 Dec 2023 15:41:00 GMT
age: 3628936
x-served-by: cache-fra-eddf8230122-FRA, cache-bma1667-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 30336
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js
200 OK 25 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type ASCII text, with very long lines (65299)
Hash b75ae000439862b6a97d2129c85680e8
90d15036ef48fcb336a135bae812b45669f19044
9520018fa5d81f4e4dc9d06afb576f90cbbaba209cfcc6cb60e1464647f7890b
GET /npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newamericanfunding.com
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.2.3
x-jsd-version-type: version
etag: W/"13a24-kNFQNu9I/LM2oTW66BK0VmnxkEQ"
content-encoding: br
accept-ranges: bytes
date: Wed, 06 Dec 2023 15:41:00 GMT
age: 13556555
x-served-by: cache-fra-eddf8230056-FRA, cache-bma1667-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 24659
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
200 OK 34 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (32077)
Hash 4f252523d4af0b478c810c2547a63e19
5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb
668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404
GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 13:25:09 GMT
expires: Wed, 04 Dec 2024 13:25:09 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 94551
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.newamericanfunding.com/scripts-compiled/dist/progressbar.min.js
200 OK 7.0 kB URL GET HTTP/2 www.newamericanfunding.com/scripts-compiled/dist/progressbar.min.js
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoDaddy.com, Inc.
Subject*.newamericanfunding.com
FingerprintF5:1A:31:60:D2:14:AD:61:49:B8:2F:2D:FF:B0:5D:0A:FA:FB:76:61
ValidityWed, 26 Apr 2023 07:22:07 GMT - Mon, 27 May 2024 07:22:07 GMT
File type ASCII text, with very long lines (22496), with CRLF line terminators
Hash a2ad947bd096bfc0a832273e40386877
017eb2e4743bcb77a5d9d98d00defd2d3ae6e256
fb178d0a551b045b17f8876b0cedaa4cedfd253c4de00150469b776666226d45
GET /scripts-compiled/dist/progressbar.min.js HTTP/1.1
Host: www.newamericanfunding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Cookie: ASP.NET_SessionId=4ufzrchrkowfk2kctcvvkss1; SessionId=8b95e606-0501-46aa-a795-caa089295c5d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:00 GMT
content-type: application/javascript
content-length: 6972
server: nginx
cache-control: public;max-age,max-age=691200,max-age=0
content-encoding: gzip
last-modified: Thu, 29 Jun 2023 16:00:34 GMT
accept-ranges: bytes
etag: "0bd3ed6a2aad91:0"
vary: Accept-Encoding
amp-access-control-allow-source-origin: http://74.80.208.44
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self' www.newamericanfunding.com thebrokernetwork.com www.thebrokernetwork.com qa.thebrokernetwork.com staging.thebrokernetwork.com uat.thebrokernetwork.com https://patch.com https://mortgage.patch.com; default-src 'unsafe-eval' 'unsafe-inline' data: https:; script-src 'unsafe-eval' 'unsafe-inline' data: https: blob:; style-src 'unsafe-inline' data: https:; img-src data: https: blob:; font-src data: https:; connect-src https: blob:; media-src data: https: blob:; object-src https:; frame-src data: https:; child-src data: https: blob:; form-action https:;
x-xss-protection: 1; mode=block
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-request-id: bc577822ef101ad78a130d0f5f96fedf
X-Firefox-Spdy: h2
www.newamericanfunding.com/scripts/countdown.js
200 OK 616 B URL GET HTTP/2 www.newamericanfunding.com/scripts/countdown.js
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoDaddy.com, Inc.
Subject*.newamericanfunding.com
FingerprintF5:1A:31:60:D2:14:AD:61:49:B8:2F:2D:FF:B0:5D:0A:FA:FB:76:61
ValidityWed, 26 Apr 2023 07:22:07 GMT - Mon, 27 May 2024 07:22:07 GMT
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 82988e030554c60e70ea65e7d53f6f85
251ad92677133847e2115a0990d32d60fb16c819
cccf7dc0c85ab2de6ab2f6166fb4435b8f20bc6fceac1a143214c93c7cd21225
GET /scripts/countdown.js HTTP/1.1
Host: www.newamericanfunding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Cookie: ASP.NET_SessionId=4ufzrchrkowfk2kctcvvkss1; SessionId=8b95e606-0501-46aa-a795-caa089295c5d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:00 GMT
content-type: application/javascript
content-length: 616
server: nginx
cache-control: public;max-age,max-age=691200,max-age=0
content-encoding: gzip
last-modified: Thu, 29 Jun 2023 16:00:34 GMT
accept-ranges: bytes
etag: "c3fdacd6a2aad91:0"
vary: Accept-Encoding
amp-access-control-allow-source-origin: http://74.80.208.44
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self' www.newamericanfunding.com thebrokernetwork.com www.thebrokernetwork.com qa.thebrokernetwork.com staging.thebrokernetwork.com uat.thebrokernetwork.com https://patch.com https://mortgage.patch.com; default-src 'unsafe-eval' 'unsafe-inline' data: https:; script-src 'unsafe-eval' 'unsafe-inline' data: https: blob:; style-src 'unsafe-inline' data: https:; img-src data: https: blob:; font-src data: https:; connect-src https: blob:; media-src data: https: blob:; object-src https:; frame-src data: https:; child-src data: https: blob:; form-action https:;
x-xss-protection: 1; mode=block
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-request-id: 443f7e43ba1c444c61f8a647e05eb5bb
X-Firefox-Spdy: h2
www.newamericanfunding.com/scripts/crystal.min.js
200 OK 3.6 kB URL GET HTTP/2 www.newamericanfunding.com/scripts/crystal.min.js
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoDaddy.com, Inc.
Subject*.newamericanfunding.com
FingerprintF5:1A:31:60:D2:14:AD:61:49:B8:2F:2D:FF:B0:5D:0A:FA:FB:76:61
ValidityWed, 26 Apr 2023 07:22:07 GMT - Mon, 27 May 2024 07:22:07 GMT
File type Unicode text, UTF-8 text, with very long lines (10601), with no line terminators
Hash be6e4ecee422de17cdcaf9424ac944e4
ff66912cc6ddeb414671180eb46168ac7315edac
74e140e596e221735d8a771f69f5167fbbdec8b4b96e05a0a23397581608662b
GET /scripts/crystal.min.js HTTP/1.1
Host: www.newamericanfunding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Cookie: ASP.NET_SessionId=4ufzrchrkowfk2kctcvvkss1; SessionId=8b95e606-0501-46aa-a795-caa089295c5d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:00 GMT
content-type: application/javascript
content-length: 3562
server: nginx
cache-control: public;max-age,max-age=691200,max-age=0
content-encoding: gzip
last-modified: Mon, 18 Sep 2023 18:41:54 GMT
accept-ranges: bytes
etag: "0456fcb5fead91:0"
vary: Accept-Encoding
amp-access-control-allow-source-origin: http://74.80.208.44
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self' www.newamericanfunding.com thebrokernetwork.com www.thebrokernetwork.com qa.thebrokernetwork.com staging.thebrokernetwork.com uat.thebrokernetwork.com https://patch.com https://mortgage.patch.com; default-src 'unsafe-eval' 'unsafe-inline' data: https:; script-src 'unsafe-eval' 'unsafe-inline' data: https: blob:; style-src 'unsafe-inline' data: https:; img-src data: https: blob:; font-src data: https:; connect-src https: blob:; media-src data: https: blob:; object-src https:; frame-src data: https:; child-src data: https: blob:; form-action https:;
x-xss-protection: 1; mode=block
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-request-id: 367e08aae0d5aa725a479e002642c402
X-Firefox-Spdy: h2
www.newamericanfunding.com/css/dynamiclongform-b.min.css?v=branding
200 OK 22 kB URL GET HTTP/2 www.newamericanfunding.com/css/dynamiclongform-b.min.css?v=branding
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoDaddy.com, Inc.
Subject*.newamericanfunding.com
FingerprintF5:1A:31:60:D2:14:AD:61:49:B8:2F:2D:FF:B0:5D:0A:FA:FB:76:61
ValidityWed, 26 Apr 2023 07:22:07 GMT - Mon, 27 May 2024 07:22:07 GMT
File type Unicode text, UTF-8 (with BOM) text, with very long lines (62830), with no line terminators
Hash c9debc812ff9cb5c481a041065c1c0c8
80a6b2263545ed92c53fa7dc22ce3b5f96928a53
dd2b0aec922b7a95cebf014c4db69c76405f5ed29da46763e6be80bec6178008
GET /css/dynamiclongform-b.min.css?v=branding HTTP/1.1
Host: www.newamericanfunding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Cookie: ASP.NET_SessionId=4ufzrchrkowfk2kctcvvkss1; SessionId=8b95e606-0501-46aa-a795-caa089295c5d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:00 GMT
content-type: text/css
content-length: 21792
server: nginx
cache-control: public;max-age,max-age=691200,max-age=0
content-encoding: gzip
last-modified: Tue, 05 Dec 2023 23:31:58 GMT
accept-ranges: bytes
etag: "7516d73dd327da1:0"
vary: Accept-Encoding
amp-access-control-allow-source-origin: http://74.80.208.44
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self' www.newamericanfunding.com thebrokernetwork.com www.thebrokernetwork.com qa.thebrokernetwork.com staging.thebrokernetwork.com uat.thebrokernetwork.com https://patch.com https://mortgage.patch.com; default-src 'unsafe-eval' 'unsafe-inline' data: https:; script-src 'unsafe-eval' 'unsafe-inline' data: https: blob:; style-src 'unsafe-inline' data: https:; img-src data: https: blob:; font-src data: https:; connect-src https: blob:; media-src data: https: blob:; object-src https:; frame-src data: https:; child-src data: https: blob:; form-action https:;
x-xss-protection: 1; mode=block
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-request-id: 1e74a9688c39a2b237dbed4465cf642c
X-Firefox-Spdy: h2
www.newamericanfunding.com/scripts/url-param-helper.min.js?v=8
200 OK 5.6 kB URL GET HTTP/2 www.newamericanfunding.com/scripts/url-param-helper.min.js?v=8
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoDaddy.com, Inc.
Subject*.newamericanfunding.com
FingerprintF5:1A:31:60:D2:14:AD:61:49:B8:2F:2D:FF:B0:5D:0A:FA:FB:76:61
ValidityWed, 26 Apr 2023 07:22:07 GMT - Mon, 27 May 2024 07:22:07 GMT
File type ASCII text, with very long lines (15945), with no line terminators
Hash 92f0f2cc9b71ea94abf88e40aa0f13e0
dc302095d4b56b906e311524d73d83de2b7d9b8e
94274e4fe6c686e5470c69bd3e2bb979fd00818dc046402b7f4e323866777466
GET /scripts/url-param-helper.min.js?v=8 HTTP/1.1
Host: www.newamericanfunding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Cookie: ASP.NET_SessionId=4ufzrchrkowfk2kctcvvkss1; SessionId=8b95e606-0501-46aa-a795-caa089295c5d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:00 GMT
content-type: application/javascript
content-length: 5606
server: nginx
cache-control: public;max-age,max-age=691200,max-age=0
content-encoding: gzip
last-modified: Thu, 29 Jun 2023 16:00:34 GMT
accept-ranges: bytes
etag: "0bd3ed6a2aad91:0"
vary: Accept-Encoding
amp-access-control-allow-source-origin: http://74.80.208.44
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self' www.newamericanfunding.com thebrokernetwork.com www.thebrokernetwork.com qa.thebrokernetwork.com staging.thebrokernetwork.com uat.thebrokernetwork.com https://patch.com https://mortgage.patch.com; default-src 'unsafe-eval' 'unsafe-inline' data: https:; script-src 'unsafe-eval' 'unsafe-inline' data: https: blob:; style-src 'unsafe-inline' data: https:; img-src data: https: blob:; font-src data: https:; connect-src https: blob:; media-src data: https: blob:; object-src https:; frame-src data: https:; child-src data: https: blob:; form-action https:;
x-xss-protection: 1; mode=block
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-request-id: 3af0b4f64d8f808767f6a3a1a71088f1
X-Firefox-Spdy: h2
www.newamericanfunding.com/scripts/slick1.7.1-nick-modified.min.js
200 OK 10 kB URL GET HTTP/2 www.newamericanfunding.com/scripts/slick1.7.1-nick-modified.min.js
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoDaddy.com, Inc.
Subject*.newamericanfunding.com
FingerprintF5:1A:31:60:D2:14:AD:61:49:B8:2F:2D:FF:B0:5D:0A:FA:FB:76:61
ValidityWed, 26 Apr 2023 07:22:07 GMT - Mon, 27 May 2024 07:22:07 GMT
File type ASCII text, with very long lines (42557), with no line terminators
Hash a3855c559f03e988c811d7987cfff478
0dad5053404311cadd7062c55834d2de9c280232
6163d42cd4f6ee6b0ec2649ab91189654d07eef9dbd92e0ba768612f813a21ff
GET /scripts/slick1.7.1-nick-modified.min.js HTTP/1.1
Host: www.newamericanfunding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Cookie: ASP.NET_SessionId=4ufzrchrkowfk2kctcvvkss1; SessionId=8b95e606-0501-46aa-a795-caa089295c5d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:00 GMT
content-type: application/javascript
content-length: 10317
server: nginx
cache-control: public;max-age,max-age=691200,max-age=0
content-encoding: gzip
last-modified: Thu, 29 Jun 2023 16:00:34 GMT
accept-ranges: bytes
etag: "0bd3ed6a2aad91:0"
vary: Accept-Encoding
amp-access-control-allow-source-origin: http://74.80.208.44
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self' www.newamericanfunding.com thebrokernetwork.com www.thebrokernetwork.com qa.thebrokernetwork.com staging.thebrokernetwork.com uat.thebrokernetwork.com https://patch.com https://mortgage.patch.com; default-src 'unsafe-eval' 'unsafe-inline' data: https:; script-src 'unsafe-eval' 'unsafe-inline' data: https: blob:; style-src 'unsafe-inline' data: https:; img-src data: https: blob:; font-src data: https:; connect-src https: blob:; media-src data: https: blob:; object-src https:; frame-src data: https:; child-src data: https: blob:; form-action https:;
x-xss-protection: 1; mode=block
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-request-id: 7201b4d0d8e68b4f062500ae3a963907
X-Firefox-Spdy: h2
www.newamericanfunding.com/scripts/criteo-events.js
200 OK 1.5 kB URL GET HTTP/2 www.newamericanfunding.com/scripts/criteo-events.js
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoDaddy.com, Inc.
Subject*.newamericanfunding.com
FingerprintF5:1A:31:60:D2:14:AD:61:49:B8:2F:2D:FF:B0:5D:0A:FA:FB:76:61
ValidityWed, 26 Apr 2023 07:22:07 GMT - Mon, 27 May 2024 07:22:07 GMT
File type ASCII text, with CRLF line terminators
Hash 08ec98f5067044a38a0d912efd361d7d
1eca5be9b7f778225e57a68655adf0be7905f0a4
f4bf81be06bf87cacf4da2a0244a9694a22cd92d772eb46b2bb0c2a0d55990c2
GET /scripts/criteo-events.js HTTP/1.1
Host: www.newamericanfunding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Cookie: ASP.NET_SessionId=4ufzrchrkowfk2kctcvvkss1; SessionId=8b95e606-0501-46aa-a795-caa089295c5d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:00 GMT
content-type: application/javascript
content-length: 1480
server: nginx
cache-control: public;max-age,max-age=691200,max-age=0
content-encoding: gzip
last-modified: Thu, 29 Jun 2023 16:00:34 GMT
accept-ranges: bytes
etag: "0bd3ed6a2aad91:0"
vary: Accept-Encoding
amp-access-control-allow-source-origin: http://74.80.208.44
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self' www.newamericanfunding.com thebrokernetwork.com www.thebrokernetwork.com qa.thebrokernetwork.com staging.thebrokernetwork.com uat.thebrokernetwork.com https://patch.com https://mortgage.patch.com; default-src 'unsafe-eval' 'unsafe-inline' data: https:; script-src 'unsafe-eval' 'unsafe-inline' data: https: blob:; style-src 'unsafe-inline' data: https:; img-src data: https: blob:; font-src data: https:; connect-src https: blob:; media-src data: https: blob:; object-src https:; frame-src data: https:; child-src data: https: blob:; form-action https:;
x-xss-protection: 1; mode=block
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-request-id: edca3c5266461627b41e411f5fcca674
X-Firefox-Spdy: h2
www.newamericanfunding.com/scripts/Dynamiclongform-2.min.js
200 OK 12 kB URL GET HTTP/2 www.newamericanfunding.com/scripts/Dynamiclongform-2.min.js
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoDaddy.com, Inc.
Subject*.newamericanfunding.com
FingerprintF5:1A:31:60:D2:14:AD:61:49:B8:2F:2D:FF:B0:5D:0A:FA:FB:76:61
ValidityWed, 26 Apr 2023 07:22:07 GMT - Mon, 27 May 2024 07:22:07 GMT
File type ASCII text, with very long lines (52030), with no line terminators
Hash 0349dd862c2ad0070ea3256f46169a1c
b46701c27fd4c2ea205777eb1141c79505efe726
711e404db552cb108ff41c37cf7e2f2da82b34e501e4535c1cb16b4b504d241b
GET /scripts/Dynamiclongform-2.min.js HTTP/1.1
Host: www.newamericanfunding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Cookie: ASP.NET_SessionId=4ufzrchrkowfk2kctcvvkss1; SessionId=8b95e606-0501-46aa-a795-caa089295c5d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:01 GMT
content-type: application/javascript
content-length: 12529
server: nginx
cache-control: public;max-age,max-age=691200,max-age=0
content-encoding: gzip
last-modified: Tue, 14 Nov 2023 20:59:45 GMT
accept-ranges: bytes
etag: "8076e17e3d17da1:0"
vary: Accept-Encoding
amp-access-control-allow-source-origin: http://74.80.208.44
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self' www.newamericanfunding.com thebrokernetwork.com www.thebrokernetwork.com qa.thebrokernetwork.com staging.thebrokernetwork.com uat.thebrokernetwork.com https://patch.com https://mortgage.patch.com; default-src 'unsafe-eval' 'unsafe-inline' data: https:; script-src 'unsafe-eval' 'unsafe-inline' data: https: blob:; style-src 'unsafe-inline' data: https:; img-src data: https: blob:; font-src data: https:; connect-src https: blob:; media-src data: https: blob:; object-src https:; frame-src data: https:; child-src data: https: blob:; form-action https:;
x-xss-protection: 1; mode=block
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-request-id: 93a2e0545f1a07f97a91d50eb7ddb9e0
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
200 OK 7.7 kB URL GET HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 7748, version 1.0\012- data
Hash a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.newamericanfunding.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:35:53 GMT
expires: Thu, 28 Nov 2024 21:35:53 GMT
cache-control: public, max-age=31536000
age: 583508
last-modified: Wed, 27 Apr 2022 16:21:30 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Poppins:wght@400;500;600&family=Roboto:wght@400;500;700&display=swap
200 OK 8.9 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Poppins:wght@400;500;600&family=Roboto:wght@400;500;700&display=swap
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type gzip compressed data, max compression\012- data
Hash 1f49e57564a5120c391a3d2635069972
0a5e399d336c374a0f406f58cbdf6e1fc93cf4f6
0217deb27ed4d171126f805f4bcf48ad4892308ef83392a79dc0aaa9bb5eb0e8
GET /css2?family=Poppins:wght@400;500;600&family=Roboto:wght@400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 06 Dec 2023 15:41:01 GMT
date: Wed, 06 Dec 2023 15:41:01 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-P8VB28
200 OK 115 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-P8VB28
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (59621)
Size 115 kB (115122 bytes)
Hash 109cec93ca8f9498814c614bffe4caf7
336325a6d56653a2e0d14018720caf9fe41590c0
f698d6119b01253fc6bc05145a9f06caf45236fe2a7de05813673935caf4152b
GET /gtm.js?id=GTM-P8VB28 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 06 Dec 2023 15:41:01 GMT
expires: Wed, 06 Dec 2023 15:41:01 GMT
cache-control: private, max-age=900
last-modified: Wed, 06 Dec 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 115122
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.newamericanfunding.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:57:34 GMT
expires: Fri, 29 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 557007
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.newamericanfunding.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 03:54:00 GMT
expires: Wed, 04 Dec 2024 03:54:00 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 128821
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-5TM5YGZ59X&l=dataLayer&cx=c
200 OK 95 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-5TM5YGZ59X&l=dataLayer&cx=c
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (9122)
Hash 521751adc52a4be9622bfb0ca174dd13
9f51646676d6c50d107ed67103ad9edc2a60c562
510602c9e0e25a33b8aa8f0afa713f7f85bc256abbe14a8e8bb426a3476b8e52
GET /gtag/js?id=G-5TM5YGZ59X&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 06 Dec 2023 15:41:01 GMT
expires: Wed, 06 Dec 2023 15:41:01 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 94601
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.newamericanfunding.com/scripts/parsley.min.js
200 OK 16 kB URL GET HTTP/2 www.newamericanfunding.com/scripts/parsley.min.js
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoDaddy.com, Inc.
Subject*.newamericanfunding.com
FingerprintF5:1A:31:60:D2:14:AD:61:49:B8:2F:2D:FF:B0:5D:0A:FA:FB:76:61
ValidityWed, 26 Apr 2023 07:22:07 GMT - Mon, 27 May 2024 07:22:07 GMT
File type ASCII text, with very long lines (32013), with CRLF line terminators
Hash 860026146ecae5c0a895ea8c1c063aa9
14e32edaa28f63a3d16a59cd1892684ea29bb4bb
245874bc5f7fc9c7db1efce402ba631adc149d1787eb47e3d7b421ce4c5260a4
GET /scripts/parsley.min.js HTTP/1.1
Host: www.newamericanfunding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Cookie: ASP.NET_SessionId=4ufzrchrkowfk2kctcvvkss1; SessionId=8b95e606-0501-46aa-a795-caa089295c5d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:01 GMT
content-type: application/javascript
content-length: 15648
server: nginx
cache-control: public;max-age,max-age=691200,max-age=0
content-encoding: gzip
last-modified: Thu, 29 Jun 2023 16:00:34 GMT
accept-ranges: bytes
etag: "8128b3d6a2aad91:0"
vary: Accept-Encoding
amp-access-control-allow-source-origin: http://74.80.208.44
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self' www.newamericanfunding.com thebrokernetwork.com www.thebrokernetwork.com qa.thebrokernetwork.com staging.thebrokernetwork.com uat.thebrokernetwork.com https://patch.com https://mortgage.patch.com; default-src 'unsafe-eval' 'unsafe-inline' data: https:; script-src 'unsafe-eval' 'unsafe-inline' data: https: blob:; style-src 'unsafe-inline' data: https:; img-src data: https: blob:; font-src data: https:; connect-src https: blob:; media-src data: https: blob:; object-src https:; frame-src data: https:; child-src data: https: blob:; form-action https:;
x-xss-protection: 1; mode=block
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-request-id: 5ca4d282a42ac031d4096c153ea86544
X-Firefox-Spdy: h2
www.upsellit.com/active/newamericanfunding.jsp
200 OK 14 kB URL GET HTTP/2 www.upsellit.com/active/newamericanfunding.jsp
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerDigiCert Inc
Subject*.upsellit.com
FingerprintC1:23:66:EA:31:52:E6:DA:61:AB:28:E9:CB:5F:08:3F:D3:A5:41:86
ValidityMon, 11 Sep 2023 00:00:00 GMT - Thu, 03 Oct 2024 23:59:59 GMT
File type ASCII text, with very long lines (8683), with CRLF, LF line terminators
Hash 2b789fbbd59c9c17639f86895bf4843b
1d495e82ae07b79188ae9a62b1f999547c4c86c2
82fc4130554fca0a1f506b3dd5aee2a67bfcf14aad356849d0a2ff9f5ab620f7
GET /active/newamericanfunding.jsp HTTP/1.1
Host: www.upsellit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
via: 1.1 google
date: Tue, 05 Dec 2023 22:27:45 GMT
expires: Wed, 06 Dec 2023 22:27:45 GMT
cache-control: max-age=86400
content-type: application/x-javascript;charset=ISO-8859-1
vary: Accept-Encoding
content-length: 14172
age: 61997
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/otSDKStub.js
200 OK 6.8 kB URL GET HTTP/2 cdn.cookielaw.org/scripttemplates/otSDKStub.js
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (21099)
Hash 653dc5af4212698688db76a143fdd61a
393fada41c29c4d6c85a7857def729bc4d2cecce
9ea1823078c462969eaa59d6ef62623c19d77b72e25a103105b043aefaa0769a
GET /scripttemplates/otSDKStub.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:02 GMT
content-type: application/javascript
content-length: 6841
content-encoding: gzip
content-md5: /EzX6ku1+i8ak28m1WuIrw==
last-modified: Tue, 05 Dec 2023 17:22:05 GMT
etag: 0x8DBF5B6B3AFD752
x-ms-request-id: 210f1c52-c01e-00a6-07f1-278e9d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 30508
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8315a178eb2056c9-OSL
X-Firefox-Spdy: h2
dx.mountain.com/spx?dxver=4.0.0&shaid=32559&tdr=&plh=https%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F%3Frefinance%3D31806835%26purchase%3D31806844%26phone%3D8552750073%26utm_source%3DMXB%26utm_medium%3Ddisplay%26utm_content%3Ddefault%26utm_campaign%3DMXB_Contextual_112171%26lp%3Drf%26lt%3Dhe%26sub_id%3D1389282404%26pub_id%3D112172%26utm_content%3Ddefault&cb=2450266247383115term=value
200 OK 4.3 kB URL GET HTTP/1.1 dx.mountain.com/spx?dxver=4.0.0&shaid=32559&tdr=&plh=https%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F%3Frefinance%3D31806835%26purchase%3D31806844%26phone%3D8552750073%26utm_source%3DMXB%26utm_medium%3Ddisplay%26utm_content%3Ddefault%26utm_campaign%3DMXB_Contextual_112171%26lp%3Drf%26lt%3Dhe%26sub_id%3D1389282404%26pub_id%3D112172%26utm_content%3Ddefault&cb=2450266247383115term=value
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoDaddy.com, Inc.
Subject*.mountain.com
Fingerprint60:38:AB:C1:29:01:0A:9E:70:DF:E1:A9:65:7C:E4:4D:66:48:51:62
ValidityMon, 12 Jun 2023 16:30:05 GMT - Sun, 23 Jun 2024 07:06:21 GMT
File type ASCII text, with very long lines (15726), with no line terminators
Hash ff9727f0edb1e0cfa689ff6ba740db78
f969cc2d99c2bd58068263d781c90128afa59a56
36afe3692e63d80f58e0c221bfb1b54bf38506bb1a406bdb6d06602175abdeb4
GET /spx?dxver=4.0.0&shaid=32559&tdr=&plh=https%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F%3Frefinance%3D31806835%26purchase%3D31806844%26phone%3D8552750073%26utm_source%3DMXB%26utm_medium%3Ddisplay%26utm_content%3Ddefault%26utm_campaign%3DMXB_Contextual_112171%26lp%3Drf%26lt%3Dhe%26sub_id%3D1389282404%26pub_id%3D112172%26utm_content%3Ddefault&cb=2450266247383115term=value HTTP/1.1
Host: dx.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
vary: origin,access-control-request-method,access-control-request-headers,accept-encoding
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-encoding: gzip
content-type: application/javascript;charset=utf-8
date: Wed, 06 Dec 2023 15:41:02 GMT
x-envoy-upstream-service-time: 1
be: spx-prod
server: istio-envoy
transfer-encoding: chunked
cdn.cookielaw.org/consent/a0772e31-2281-4518-9658-1384f25126fa/a0772e31-2281-4518-9658-1384f25126fa.json
200 OK 1.4 kB URL GET HTTP/2 cdn.cookielaw.org/consent/a0772e31-2281-4518-9658-1384f25126fa/a0772e31-2281-4518-9658-1384f25126fa.json
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (3353), with no line terminators
Hash c2f8cc837dfecbfba83c2d5617ec8a0d
44beaadc736c3164b4cd28bc01161e3e51f500b3
d748350e656496ad692ccc35dc9ae0106dfd479d9f44162d771324ef4693a3a2
GET /consent/a0772e31-2281-4518-9658-1384f25126fa/a0772e31-2281-4518-9658-1384f25126fa.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newamericanfunding.com
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:03 GMT
content-type: application/x-javascript
content-length: 1445
cf-ray: 8315a17dbe340b65-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 51574
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DB6DA4406B7BBE
expires: Thu, 07 Dec 2023 15:41:03 GMT
last-modified: Thu, 15 Jun 2023 13:27:22 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
content-md5: beGqkXuNVZknKaNoPGIIxQ==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: c5873259-b01e-003a-3b92-1323fb000000
x-ms-version: 2009-09-19
server: cloudflare
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/202305.1.0/otBannerSdk.js
200 OK 99 kB URL GET HTTP/2 cdn.cookielaw.org/scripttemplates/202305.1.0/otBannerSdk.js
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (65451)
Hash 53e75bd25e32c985e8459eba598e5e64
9765a64b1e9c9dea4ed7c93d619e59ce7ea2d1e0
ed3a69e3267f056582ed012f7252319adb227fed203a4781eb820ea732aa4594
GET /scripttemplates/202305.1.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:03 GMT
content-type: application/javascript
content-length: 99428
content-encoding: gzip
content-md5: fuN6EZWNAh2xn3yE+0HSRQ==
last-modified: Tue, 11 Jul 2023 02:35:48 GMT
etag: 0x8DB81B7897E828A
x-ms-request-id: bb61c14c-801e-006c-0ac6-0bd214000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 33145
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8315a17f6d3e56c9-OSL
X-Firefox-Spdy: h2
geolocation.onetrust.com/cookieconsentpub/v1/geo/location
200 OK 88 B URL GET HTTP/2 geolocation.onetrust.com/cookieconsentpub/v1/geo/location
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerCloudflare, Inc.
Subjectonetrust.com
Fingerprint9B:BC:B4:A8:C7:6C:6C:02:0F:FD:9F:06:F2:67:FB:DD:A1:E0:3F:47
ValidityMon, 13 Nov 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash fe506d323c85bc3dd9796f556171d98b
845dab04559e189aa483314a4d8f7da2841addbc
e8ed6ce42e1e11bbbae707014c7ec376a2a55f132b839f8af85353087adc58cd
GET /cookieconsentpub/v1/geo/location HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newamericanfunding.com
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:03 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8315a17edb2a56bd-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
54.156.2.105/is
200 OK 32 B IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerSectigo Limited
Subject54.156.2.105
Fingerprint64:CD:CB:F1:A5:AC:ED:9F:B7:9C:54:7C:C5:39:FA:03:FF:17:7F:AA
ValidityTue, 14 Feb 2023 00:00:00 GMT - Wed, 14 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 241377b91df3e7c5df87051c83647d0a
d2262526238e96b39a4dbbb3c48594a7b7233b71
14c0aa239da11575a4e2fba174ead8e4eeb02c08615294bbf37b69ace0ff73aa
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /is HTTP/1.1
Host: 54.156.2.105
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.newamericanfunding.com/
Origin: https://www.newamericanfunding.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Wed, 06 Dec 2023 15:41:03 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: text/plain;charset=utf-8
content-length: 32
x-envoy-upstream-service-time: 2
server: istio-envoy
connection: close
cdn.cookielaw.org/consent/a0772e31-2281-4518-9658-1384f25126fa/91b643e5-d648-49a2-afee-e8d8195ae0b3/en.json
200 OK 18 kB URL GET HTTP/2 cdn.cookielaw.org/consent/a0772e31-2281-4518-9658-1384f25126fa/91b643e5-d648-49a2-afee-e8d8195ae0b3/en.json
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (65507), with no line terminators
Hash 44a5dd7a7262fb044af9c024a1dd3c7c
cc4a3aebc6c13067ba8f81abb70cf24d83d2e78b
ac0959b63e34f5c69d71377bd2d3508087f4df889fd887ffb8915b66b35b008e
GET /consent/a0772e31-2281-4518-9658-1384f25126fa/91b643e5-d648-49a2-afee-e8d8195ae0b3/en.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.newamericanfunding.com/
Origin: https://www.newamericanfunding.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:03 GMT
content-type: application/x-javascript
content-length: 17794
cf-ray: 8315a18078d60b65-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 51574
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DB6DA4423B90AB
expires: Thu, 07 Dec 2023 15:41:03 GMT
last-modified: Thu, 15 Jun 2023 13:27:25 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
content-md5: Z+gqhzUZt4wVYmEQIRmYJw==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 51551fc7-a01e-00a0-5239-23bd22000000
x-ms-version: 2009-09-19
server: cloudflare
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/202305.1.0/assets/otFlat.json
200 OK 3.0 kB URL GET HTTP/2 cdn.cookielaw.org/scripttemplates/202305.1.0/assets/otFlat.json
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (11171)
Hash c2bbc3724e963e27244e489b265363b5
d1fbd7d575c4fe9ada30ffe47633a288caeb23e7
aa355c393e03f831dbdbcc678ba16396aab95930b1bc5b0549695d40cc955ca1
GET /scripttemplates/202305.1.0/assets/otFlat.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.newamericanfunding.com/
Origin: https://www.newamericanfunding.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:03 GMT
content-type: application/json
content-length: 3019
content-encoding: gzip
content-md5: iCAxFkQWfzfDHevR0IbBjg==
last-modified: Tue, 11 Jul 2023 02:35:41 GMT
etag: 0x8DB81B78556557A
x-ms-request-id: c3cb017b-201e-004a-3a91-0c9a0c000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 51574
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8315a181397c0b65-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/202305.1.0/assets/otCookieSettingsButton.json
200 OK 1.8 kB URL GET HTTP/2 cdn.cookielaw.org/scripttemplates/202305.1.0/assets/otCookieSettingsButton.json
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (3095)
Hash e6872c90592c095ac4b05fc37cb2f2c0
b71b3312ec6bd7cbaadd947cc95042496e0410f3
509f2e49500fbaeb5d7e1959071f2922b693d0135080e2871e124ec8bdd08bb2
GET /scripttemplates/202305.1.0/assets/otCookieSettingsButton.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.newamericanfunding.com/
Origin: https://www.newamericanfunding.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:03 GMT
content-type: application/json
content-length: 1766
content-encoding: gzip
content-md5: 6UUu9ITWusP/z8oTYDPzzQ==
last-modified: Tue, 11 Jul 2023 02:35:43 GMT
etag: 0x8DB81B7865DB57F
x-ms-request-id: 992e3130-e01e-0018-21e9-1de6e4000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 51574
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8315a18179be0b65-OSL
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/202305.1.0/assets/v2/otPcCenter.json
200 OK 4.4 kB URL GET HTTP/2 cdn.cookielaw.org/scripttemplates/202305.1.0/assets/v2/otPcCenter.json
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 5a5f42b7b28549fedbda5b3ba34ce2d2
f12a71b98c79fad0a8b0ed07f3e06a1fb91a90d9
a1322c5a1af74147bdaefbc70f615128a41c4292172bef886294cdda1253141e
GET /scripttemplates/202305.1.0/assets/v2/otPcCenter.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.newamericanfunding.com/
Origin: https://www.newamericanfunding.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:03 GMT
content-type: application/json
content-length: 12544
content-encoding: gzip
content-md5: Nrtw9V+L/sfw1fri0BTPUA==
last-modified: Tue, 11 Jul 2023 02:35:44 GMT
etag: 0x8DB81B786A27D0E
x-ms-request-id: 2c457168-101e-000c-7a8c-22ae8b000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 51574
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8315a18139820b65-OSL
X-Firefox-Spdy: h2
www.newamericanfunding.com/umbraco/surface/socialreview/getreviewsgrandtotal
200 OK 66 kB URL GET HTTP/2 www.newamericanfunding.com/umbraco/surface/socialreview/getreviewsgrandtotal
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoDaddy.com, Inc.
Subject*.newamericanfunding.com
FingerprintF5:1A:31:60:D2:14:AD:61:49:B8:2F:2D:FF:B0:5D:0A:FA:FB:76:61
ValidityWed, 26 Apr 2023 07:22:07 GMT - Mon, 27 May 2024 07:22:07 GMT
File type JSON data\012- , ASCII text, with very long lines (2928)
Hash caf15e6c14f6ed5a6cc07673e7d392da
ae444e678f9c94c7f3feee9636993e784f2481ef
4b8b5e9515ac3e2828ae12fbba726e7e6b985964975227ae7be7263c67c65405
GET /umbraco/surface/socialreview/getreviewsgrandtotal HTTP/1.1
Host: www.newamericanfunding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
DNT: 1
Connection: keep-alive
Cookie: ASP.NET_SessionId=4ufzrchrkowfk2kctcvvkss1; SessionId=8b95e606-0501-46aa-a795-caa089295c5d; _gcl_au=1.1.1317321986.1701877268
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:03 GMT
content-type: application/json; charset=utf-8
server: nginx
vary: Accept-Encoding
cache-control: private,max-age=0
amp-access-control-allow-source-origin: http://74.80.208.44
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self' www.newamericanfunding.com thebrokernetwork.com www.thebrokernetwork.com qa.thebrokernetwork.com staging.thebrokernetwork.com uat.thebrokernetwork.com https://patch.com https://mortgage.patch.com; default-src 'unsafe-eval' 'unsafe-inline' data: https:; script-src 'unsafe-eval' 'unsafe-inline' data: https: blob:; style-src 'unsafe-inline' data: https:; img-src data: https: blob:; font-src data: https:; connect-src https: blob:; media-src data: https: blob:; object-src https:; frame-src data: https:; child-src data: https: blob:; form-action https:;
x-xss-protection: 1; mode=block
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-request-id: e45b63e1c2e630b1929b802b5b95e5c6
content-encoding: gzip
X-Firefox-Spdy: h2
s.pinimg.com/ct/core.js
200 OK 1.8 kB IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerDigiCert Inc
Subject*.pinterest.com
Fingerprint4D:02:6D:A8:DF:FA:2E:1C:D3:43:46:EF:CF:92:F1:7A:41:8F:BA:0B
ValidityMon, 31 Jul 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (4523), with no line terminators
Hash e4b77d27dd0f447b2fff34711b3027be
e1aa5db723cc0475f991ba4a3d998d2a052d1308
ef45c21f7e054481c81992c1a46293a28c9bb8b3722bc566479326187f473c8c
GET /ct/core.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
etag: "8d7d8ce32aa2a45d64e9f04a9a5cb1c4"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: application/javascript
x-cdn: fastly
alt-svc: h3=":443";ma=600
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 86400
access-control-expose-headers: X-CDN
vary: Accept-Encoding, Origin
cache-control: max-age=7200
date: Wed, 06 Dec 2023 15:41:04 GMT
content-length: 1793
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 6.3 kB IP
ASN #203220 Yahoo! UK Services Limited
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (18187), with no line terminators
Hash 5c6ed25dce803fd84288922b8928409e
3ccc10546ae12f160bacac1e9e422af091ea4a41
480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: +gfQCBue6no1ilnNWlp4iraQz95gQ8WuR5S1HSpDroiWZadHz3aY7pYTe+y+X2TrYafLkt0PTas=
x-amz-request-id: 18R7HJWYC66TKT0E
date: Wed, 06 Dec 2023 15:06:21 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "5c6ed25dce803fd84288922b8928409e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 2084
content-encoding: gzip
content-length: 6262
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
ats-carp-promotion: 1, 1
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 13 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintA5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD
ValidityTue, 24 Oct 2023 07:42:22 GMT - Sun, 21 Apr 2024 07:42:22 GMT
File type Unicode text, UTF-8 text, with very long lines (46103), with no line terminators
Hash 7f75f159026f3a2c8cccda487b43157b
021cf5c854db063cd79bf0394c24eb994e095640
5e319852607809336b2534ffeb96f6933f26994dd040f535302c84f59cc0a214
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 13175
content-type: application/javascript
content-encoding: gzip
last-modified: Fri, 10 Nov 2023 20:09:55 GMT
accept-ranges: bytes
etag: "80abcdf1114da1:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: F4AFF10404CD402F8496FC482386C383 Ref B: OSL30EDGE0115 Ref C: 2023-12-06T15:41:04Z
date: Wed, 06 Dec 2023 15:41:03 GMT
X-Firefox-Spdy: h2
www.newamericanfunding.com/favicon.ico
200 OK 15 kB URL GET HTTP/2 www.newamericanfunding.com/favicon.ico
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoDaddy.com, Inc.
Subject*.newamericanfunding.com
FingerprintF5:1A:31:60:D2:14:AD:61:49:B8:2F:2D:FF:B0:5D:0A:FA:FB:76:61
ValidityWed, 26 Apr 2023 07:22:07 GMT - Mon, 27 May 2024 07:22:07 GMT
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 84e75f08d1892feac15c7ba21d8fd691
a6d874cad4a03a518ef00cea0039ea3e2ea78e37
fe54f0a6f97b047e83d0a0d82479754e23fb7efbc7a6fa6de2e9a3a58a2076c1
GET /favicon.ico HTTP/1.1
Host: www.newamericanfunding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Cookie: ASP.NET_SessionId=4ufzrchrkowfk2kctcvvkss1; SessionId=8b95e606-0501-46aa-a795-caa089295c5d; _gcl_au=1.1.1317321986.1701877268; _ga_5TM5YGZ59X=GS1.1.1701877268.1.0.1701877268.60.0.0; _ga=GA1.1.1701042725.1701877269; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Dec+06+2023+15%3A41%3A09+GMT%2B0000+(Coordinated+Universal+Time)&version=202305.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=b6a7e243-fbfd-498d-80b2-d90e2683eb8f&interactionCount=0&landingPath=https%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F%3Frefinance%3D31806835%26purchase%3D31806844%26phone%3D8552750073%26utm_source%3DMXB%26utm_medium%3Ddisplay%26utm_content%3Ddefault%26utm_campaign%3DMXB_Contextual_112171%26lp%3Drf%26lt%3Dhe%26sub_id%3D1389282404%26pub_id%3D112172%26utm_content%3Ddefault&groups=C0001%3A1%2CC0003%3A1%2CBG1%3A1%2CC0002%3A1%2CC0004%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:04 GMT
content-type: image/x-icon
content-length: 15406
server: nginx
cache-control: public;max-age,max-age=691200,max-age=0
last-modified: Thu, 29 Jun 2023 16:00:33 GMT
accept-ranges: bytes
etag: "14d0cdd5a2aad91:0"
amp-access-control-allow-source-origin: http://74.80.208.44
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self' www.newamericanfunding.com thebrokernetwork.com www.thebrokernetwork.com qa.thebrokernetwork.com staging.thebrokernetwork.com uat.thebrokernetwork.com https://patch.com https://mortgage.patch.com; default-src 'unsafe-eval' 'unsafe-inline' data: https:; script-src 'unsafe-eval' 'unsafe-inline' data: https: blob:; style-src 'unsafe-inline' data: https:; img-src data: https: blob:; font-src data: https:; connect-src https: blob:; media-src data: https: blob:; object-src https:; frame-src data: https:; child-src data: https: blob:; form-action https:;
x-xss-protection: 1; mode=block
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-request-id: c51cedb044dc2e7b4e7d99776c3bc75f
X-Firefox-Spdy: h2
px.mountain.com/st?ga_tracking_id=UA-17024218-1&ga_client_id=&shpt=Lander%20Form%20J-HELOC&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-17024218-1%22%2C%22ga_client_id%22%3A%22%22%2C%22shpt%22%3A%22Lander%20Form%20J-HELOC%22%2C%22dcm_cid%22%3A%221701042725.1701877269%22%2C%22ga_utm_campaign%22%3A%22MXB_Contextual_112171%22%2C%22ga_utm_source%22%3A%22MXB%22%2C%22ga_utm_medium%22%3A%22display%22%2C%22mntnis%22%3A%22QAVZ8g5wPAEfQtci%2Fl8UGyOswnntqueO%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1701042725.1701877269&available_ga=%5B%7B%22id%22%3A%22G-5TM5YGZ59X%22%2C%22sess_id%22%3A%221701877268%22%7D%2C%7B%22id%22%3A%22UA-17024218-1%22%2C%22sess_id%22%3Anull%7D%5D&hardcoded_ga=UA-17024218-1&dxver=4.0.0&shaid=32559&plh=https%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F%3Frefinance%3D31806835%26purchase%3D31806844%26phone%3D8552750073%26utm_source%3DMXB%26utm_medium%3Ddisplay%26utm_content%3Ddefault%26utm_campaign%3DMXB_Contextual_112171%26lp%3Drf%26lt%3Dhe%26sub_id%3D1389282404%26pub_id%3D112172%26utm_content%3Ddefault&cb=2450266247383115term%3Dvalue&shadditional=criteo%3Dtrue%2Cadroll%3Dtrue%2Cgoogletagmanager%3Dtrue%2C
200 OK 1.4 kB URL GET HTTP/1.1 px.mountain.com/st?ga_tracking_id=UA-17024218-1&ga_client_id=&shpt=Lander%20Form%20J-HELOC&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-17024218-1%22%2C%22ga_client_id%22%3A%22%22%2C%22shpt%22%3A%22Lander%20Form%20J-HELOC%22%2C%22dcm_cid%22%3A%221701042725.1701877269%22%2C%22ga_utm_campaign%22%3A%22MXB_Contextual_112171%22%2C%22ga_utm_source%22%3A%22MXB%22%2C%22ga_utm_medium%22%3A%22display%22%2C%22mntnis%22%3A%22QAVZ8g5wPAEfQtci%2Fl8UGyOswnntqueO%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1701042725.1701877269&available_ga=%5B%7B%22id%22%3A%22G-5TM5YGZ59X%22%2C%22sess_id%22%3A%221701877268%22%7D%2C%7B%22id%22%3A%22UA-17024218-1%22%2C%22sess_id%22%3Anull%7D%5D&hardcoded_ga=UA-17024218-1&dxver=4.0.0&shaid=32559&plh=https%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F%3Frefinance%3D31806835%26purchase%3D31806844%26phone%3D8552750073%26utm_source%3DMXB%26utm_medium%3Ddisplay%26utm_content%3Ddefault%26utm_campaign%3DMXB_Contextual_112171%26lp%3Drf%26lt%3Dhe%26sub_id%3D1389282404%26pub_id%3D112172%26utm_content%3Ddefault&cb=2450266247383115term%3Dvalue&shadditional=criteo%3Dtrue%2Cadroll%3Dtrue%2Cgoogletagmanager%3Dtrue%2C
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoDaddy.com, Inc.
Subject*.mountain.com
Fingerprint60:38:AB:C1:29:01:0A:9E:70:DF:E1:A9:65:7C:E4:4D:66:48:51:62
ValidityMon, 12 Jun 2023 16:30:05 GMT - Sun, 23 Jun 2024 07:06:21 GMT
File type ASCII text, with very long lines (2652)
Hash e3b1f0828a96d0ce612edfba84da655c
23819aad6c14c5f906c66903d1ea6c409942ff15
c8ac1d6531471ddf265e8cf3d438f53ea29fa8c172d378edaa52df2ad3bdd476
GET /st?ga_tracking_id=UA-17024218-1&ga_client_id=&shpt=Lander%20Form%20J-HELOC&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-17024218-1%22%2C%22ga_client_id%22%3A%22%22%2C%22shpt%22%3A%22Lander%20Form%20J-HELOC%22%2C%22dcm_cid%22%3A%221701042725.1701877269%22%2C%22ga_utm_campaign%22%3A%22MXB_Contextual_112171%22%2C%22ga_utm_source%22%3A%22MXB%22%2C%22ga_utm_medium%22%3A%22display%22%2C%22mntnis%22%3A%22QAVZ8g5wPAEfQtci%2Fl8UGyOswnntqueO%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1701042725.1701877269&available_ga=%5B%7B%22id%22%3A%22G-5TM5YGZ59X%22%2C%22sess_id%22%3A%221701877268%22%7D%2C%7B%22id%22%3A%22UA-17024218-1%22%2C%22sess_id%22%3Anull%7D%5D&hardcoded_ga=UA-17024218-1&dxver=4.0.0&shaid=32559&plh=https%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F%3Frefinance%3D31806835%26purchase%3D31806844%26phone%3D8552750073%26utm_source%3DMXB%26utm_medium%3Ddisplay%26utm_content%3Ddefault%26utm_campaign%3DMXB_Contextual_112171%26lp%3Drf%26lt%3Dhe%26sub_id%3D1389282404%26pub_id%3D112172%26utm_content%3Ddefault&cb=2450266247383115term%3Dvalue&shadditional=criteo%3Dtrue%2Cadroll%3Dtrue%2Cgoogletagmanager%3Dtrue%2C HTTP/1.1
Host: px.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Wed, 06 Dec 2023 15:41:04 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: guid=dd676efd-944d-11ee-a2af-f19c2fd8ee58;Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
transfer-encoding: chunked
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-5TM5YGZ59X&cid=1701042725.1701877269>m=45je3bt0v894720821z86511264&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1083901418
200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-5TM5YGZ59X&cid=1701042725.1701877269>m=45je3bt0v894720821z86511264&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1083901418
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint6E:E4:BC:4A:67:5E:46:6A:B3:E4:CA:61:A7:C0:97:AB:14:F0:34:32
ValidityMon, 23 Oct 2023 11:27:27 GMT - Mon, 15 Jan 2024 11:27:26 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-5TM5YGZ59X&cid=1701042725.1701877269>m=45je3bt0v894720821z86511264&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1083901418 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 06 Dec 2023 15:41:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ipinfo.io/geo?token=e7ad35d83b2fc8
200 OK 57 kB URL GET HTTP/2 ipinfo.io/geo?token=e7ad35d83b2fc8
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerLet's Encrypt
Subjectipinfo.io
Fingerprint02:67:9A:BD:EB:E2:DF:E4:D3:87:6D:3B:B4:56:D4:77:D6:F3:61:E3
ValidityTue, 07 Nov 2023 06:17:02 GMT - Mon, 05 Feb 2024 06:17:01 GMT
File type gzip compressed data, from Unix\012- data
Hash cf91b590b0f3e4d788212e7f16ee2c4f
67388587b66e7a74e05e1cb37d40c9366828bb81
81e76d7f780393f02a8b816803b2f95ca31a87e727552046f1eca5c941b5e92c
GET /geo?token=e7ad35d83b2fc8 HTTP/1.1
Host: ipinfo.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newamericanfunding.com
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-type: application/json; charset=utf-8
date: Wed, 06 Dec 2023 15:41:04 GMT
x-envoy-upstream-service-time: 2
strict-transport-security: max-age=2592000; includeSubDomains
vary: Accept-Encoding
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
maps.googleapis.com/maps-api-v3/api/js/55/3/places_impl.js
200 OK 16 kB URL GET HTTP/3 maps.googleapis.com/maps-api-v3/api/js/55/3/places_impl.js
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (3135)
Hash a348fb604cebdc186375b982307794b8
7a2092b29cc4c036c667e3b3e4b16d5f7c45bc44
ab65c7170cddaad6e90543cf4f8dd3b3de316d7a89370e31ce67cb187500805e
GET /maps-api-v3/api/js/55/3/places_impl.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 16299
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 23:30:10 GMT
expires: Tue, 03 Dec 2024 23:30:10 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 29 Nov 2023 00:55:44 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 144654
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
maps.googleapis.com/maps-api-v3/api/js/55/3/controls.js
200 OK 24 kB URL GET HTTP/3 maps.googleapis.com/maps-api-v3/api/js/55/3/controls.js
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (1732)
Hash 4a6e6c51762fe71f75f971200e3e12ce
162795ab3499ae84cf93d46ff208725111face9b
8e279f8c303d5fc6d29fcf4ffca5bff03c0013c3299b26ffe546d5a467927429
GET /maps-api-v3/api/js/55/3/controls.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 24427
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 00:31:40 GMT
expires: Wed, 04 Dec 2024 00:31:40 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 29 Nov 2023 00:55:44 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 140964
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
s.pinimg.com/ct/lib/main.74d80534.js
200 OK 19 kB URL GET HTTP/3 s.pinimg.com/ct/lib/main.74d80534.js
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerDigiCert Inc
Subject*.pinterest.com
Fingerprint4D:02:6D:A8:DF:FA:2E:1C:D3:43:46:EF:CF:92:F1:7A:41:8F:BA:0B
ValidityMon, 31 Jul 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 63101c79e5dbfd10a3cb8539e831be1f
3b7aa3cab6eefce969df8e12dd289e6bb196b54a
60cc60a6fcbd230def379432395199b585791ed521e2e5f595369a2193e617fb
GET /ct/lib/main.74d80534.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 18895
etag: "cb251578b1e91b3cc440fd1521770cc5"
x-amz-server-side-encryption: AES256
content-encoding: br
content-type: application/javascript
x-cdn: fastly
alt-svc: h3=":443";ma=600
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 86400
access-control-expose-headers: X-CDN
vary: Accept-Encoding, Origin
cache-control: max-age=1209600
date: Wed, 06 Dec 2023 15:41:04 GMT
maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
200 OK 23 B URL GET HTTP/3 maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text
Hash 8a80554c91d9fca8acb82f023de02f11
5f36b2ea290645ee34d943220a14b54ee5ea5be5
ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356
GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newamericanfunding.com
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 06 Dec 2023 15:41:04 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 23
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.newamericanfunding.com
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
bat.bing.com/p/action/13003688.js
204 No Content 0 B URL GET HTTP/2 bat.bing.com/p/action/13003688.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintA5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD
ValidityTue, 24 Oct 2023 07:42:22 GMT - Sun, 21 Apr 2024 07:42:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/13003688.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 12D4EEF739A14CC59C71116337469B3F Ref B: OSL30EDGE0115 Ref C: 2023-12-06T15:41:04Z
date: Wed, 06 Dec 2023 15:41:04 GMT
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=13003688&Ver=2&mid=59c9538a-3831-480b-b985-4773e5f68ac4&sid=e14c6880944d11eeb817d141e70835cc&vid=e14c6940944d11eeac97e3e44a09a086&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Lander%20Form%20J-HELOC&p=https%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F%3Frefinance%3D31806835%26purchase%3D31806844%26phone%3D8552750073%26utm_source%3DMXB%26utm_medium%3Ddisplay%26utm_content%3Ddefault%26utm_campaign%3DMXB_Contextual_112171%26lp%3Drf%26lt%3Dhe%26sub_id%3D1389282404%26pub_id%3D112172%26utm_content%3Ddefault&r=<=3898&evt=pageLoad&sv=1&rn=276835
204 No Content 0 B URL GET HTTP/2 bat.bing.com/action/0?ti=13003688&Ver=2&mid=59c9538a-3831-480b-b985-4773e5f68ac4&sid=e14c6880944d11eeb817d141e70835cc&vid=e14c6940944d11eeac97e3e44a09a086&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Lander%20Form%20J-HELOC&p=https%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F%3Frefinance%3D31806835%26purchase%3D31806844%26phone%3D8552750073%26utm_source%3DMXB%26utm_medium%3Ddisplay%26utm_content%3Ddefault%26utm_campaign%3DMXB_Contextual_112171%26lp%3Drf%26lt%3Dhe%26sub_id%3D1389282404%26pub_id%3D112172%26utm_content%3Ddefault&r=<=3898&evt=pageLoad&sv=1&rn=276835
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintA5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD
ValidityTue, 24 Oct 2023 07:42:22 GMT - Sun, 21 Apr 2024 07:42:22 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=13003688&Ver=2&mid=59c9538a-3831-480b-b985-4773e5f68ac4&sid=e14c6880944d11eeb817d141e70835cc&vid=e14c6940944d11eeac97e3e44a09a086&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Lander%20Form%20J-HELOC&p=https%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F%3Frefinance%3D31806835%26purchase%3D31806844%26phone%3D8552750073%26utm_source%3DMXB%26utm_medium%3Ddisplay%26utm_content%3Ddefault%26utm_campaign%3DMXB_Contextual_112171%26lp%3Drf%26lt%3Dhe%26sub_id%3D1389282404%26pub_id%3D112172%26utm_content%3Ddefault&r=<=3898&evt=pageLoad&sv=1&rn=276835 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=0430D935F4D56A273F0ACAEAF5206BDD; domain=.bing.com; expires=Mon, 30-Dec-2024 15:41:05 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0664F5397DE64643A3C9630B1EE181DD Ref B: OSL30EDGE0115 Ref C: 2023-12-06T15:41:05Z
date: Wed, 06 Dec 2023 15:41:04 GMT
X-Firefox-Spdy: h2
maps.googleapis.com/maps/api/js/AuthenticationService.Authenticate?1shttps%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F&4sAIzaSyCvRwR3-fGr8AsnMdzmQVkgCdlWhqUiCG0&8b0&callback=_xdc_._6d8w3o&key=AIzaSyCvRwR3-fGr8AsnMdzmQVkgCdlWhqUiCG0&token=6858
200 OK 63 B URL GET HTTP/3 maps.googleapis.com/maps/api/js/AuthenticationService.Authenticate?1shttps%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F&4sAIzaSyCvRwR3-fGr8AsnMdzmQVkgCdlWhqUiCG0&8b0&callback=_xdc_._6d8w3o&key=AIzaSyCvRwR3-fGr8AsnMdzmQVkgCdlWhqUiCG0&token=6858
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with no line terminators
Hash c379efc3d602467e241836ab2ffa175c
e2a6f3f814ede271cbf39cf8b47617c403caa84f
a4056ff794770e8a5ad6d42989823939f6297a49f74a5e9eaf33a18d7581911d
GET /maps/api/js/AuthenticationService.Authenticate?1shttps%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F&4sAIzaSyCvRwR3-fGr8AsnMdzmQVkgCdlWhqUiCG0&8b0&callback=_xdc_._6d8w3o&key=AIzaSyCvRwR3-fGr8AsnMdzmQVkgCdlWhqUiCG0&token=6858 HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
date: Wed, 06 Dec 2023 15:41:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-disposition: attachment
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: mafe
content-length: 63
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=36
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
maps.gstatic.com/mapfiles/api-3/images/powered-by-google-on-white3.png
200 OK 1.6 kB URL GET HTTP/2 maps.gstatic.com/mapfiles/api-3/images/powered-by-google-on-white3.png
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type PNG image data, 120 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash f28a13545ca7be5cd9ea31bdd9ea7f8e
f4f45a59720b9d637b1e7e0ed5783ee84887287f
cd80d0dcb2a44bd30c11fcdf13d4c280f336dad9442ee7da79146f2bb77381a4
GET /mapfiles/api-3/images/powered-by-google-on-white3.png HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/geo-tactile
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="geo-tactile"
report-to: {"group":"geo-tactile","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/geo-tactile"}]}
content-length: 1616
date: Wed, 06 Dec 2023 15:41:05 GMT
expires: Wed, 06 Dec 2023 15:41:05 GMT
cache-control: private, max-age=31536000
last-modified: Tue, 18 May 2021 19:15:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
maps.gstatic.com/mapfiles/api-3/images/autocomplete-icons.png
200 OK 3.4 kB URL GET HTTP/2 maps.gstatic.com/mapfiles/api-3/images/autocomplete-icons.png
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type PNG image data, 34 x 280, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e9dd969ceb057a228067a1c539127f9
fb2da26959858054157960bb7f8e6c145648eaac
db209390b90b70f4b1ef3540cb581e4ec8edbba21980971b68e4aef5c5d352fb
GET /mapfiles/api-3/images/autocomplete-icons.png HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/geo-tactile
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="geo-tactile"
report-to: {"group":"geo-tactile","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/geo-tactile"}]}
content-length: 3351
date: Wed, 06 Dec 2023 15:41:05 GMT
expires: Wed, 06 Dec 2023 15:41:05 GMT
cache-control: private, max-age=31536000
last-modified: Tue, 18 May 2021 19:15:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ct.pinterest.com/user/?tid=2613421283631&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1701877271051&dep=2%2CPAGE_LOAD
200 OK 172 B URL GET HTTP/2 ct.pinterest.com/user/?tid=2613421283631&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1701877271051&dep=2%2CPAGE_LOAD
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerDigiCert Inc
Subject*.pinterest.com
Fingerprint4D:02:6D:A8:DF:FA:2E:1C:D3:43:46:EF:CF:92:F1:7A:41:8F:BA:0B
ValidityMon, 31 Jul 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (303), with no line terminators
Hash c25cd59dcd733122afabf68b1d9fcc93
78ab6cd5d737c1e4d9869bcf93f9b410738cfd08
4e7140f58b2b89a1c8ffba6df69a1e845f6e8fee48987276a7523b8244191c3e
GET /user/?tid=2613421283631&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1701877271051&dep=2%2CPAGE_LOAD HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newamericanfunding.com
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-expose-headers: Epik,Pin-Unauth
pin-unauth: dWlkPVpUYzBOV0UyWkdZdFlUZGhaUzAwWm1OaExUa3dNakV0WkRFM1lUZzFZekExWm1Reg
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
access-control-allow-origin: https://www.newamericanfunding.com
content-type: application/json; charset=utf-8
content-encoding: gzip
x-envoy-upstream-service-time: 3
referrer-policy: origin
x-pinterest-rid: 1391126993430617
date: Wed, 06 Dec 2023 15:41:05 GMT
x-cdn: fastly
alt-svc: h3=":443";ma=600
pinterest-version: e7249d1c03a7694dfa35055671bb9f996ab3ca0c
content-length: 172
X-Firefox-Spdy: h2
ct.pinterest.com/v3/?tid=2613421283631&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F%3Frefinance%3D31806835%26purchase%3D31806844%26phone%3D8552750073%26utm_source%3DMXB%26utm_medium%3Ddisplay%26utm_content%3Ddefault%26utm_campaign%3DMXB_Contextual_112171%26lp%3Drf%26lt%3Dhe%26sub_id%3D1389282404%26pub_id%3D112172%26utm_content%3Ddefault%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2274d80534%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D&cb=1701877271060
200 OK 35 B URL GET HTTP/2 ct.pinterest.com/v3/?tid=2613421283631&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F%3Frefinance%3D31806835%26purchase%3D31806844%26phone%3D8552750073%26utm_source%3DMXB%26utm_medium%3Ddisplay%26utm_content%3Ddefault%26utm_campaign%3DMXB_Contextual_112171%26lp%3Drf%26lt%3Dhe%26sub_id%3D1389282404%26pub_id%3D112172%26utm_content%3Ddefault%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2274d80534%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D&cb=1701877271060
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerDigiCert Inc
Subject*.pinterest.com
Fingerprint4D:02:6D:A8:DF:FA:2E:1C:D3:43:46:EF:CF:92:F1:7A:41:8F:BA:0B
ValidityMon, 31 Jul 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9b8d19f4310c758344e40bf17fbc7e85
2290ef058812d5f5e398736e2316cba8cf8093cf
37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b
GET /v3/?tid=2613421283631&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F%3Frefinance%3D31806835%26purchase%3D31806844%26phone%3D8552750073%26utm_source%3DMXB%26utm_medium%3Ddisplay%26utm_content%3Ddefault%26utm_campaign%3DMXB_Contextual_112171%26lp%3Drf%26lt%3Dhe%26sub_id%3D1389282404%26pub_id%3D112172%26utm_content%3Ddefault%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%2274d80534%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D&cb=1701877271060 HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-type: image/gif
access-control-allow-origin: *
set-cookie: ar_debug=1; Expires=Thu, 05 Dec 2024 15:41:05 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None
x-envoy-upstream-service-time: 1
referrer-policy: origin
x-pinterest-rid: 6019198895111828
date: Wed, 06 Dec 2023 15:41:05 GMT
x-cdn: fastly
alt-svc: h3=":443";ma=600
pinterest-version: e7249d1c03a7694dfa35055671bb9f996ab3ca0c
content-length: 35
X-Firefox-Spdy: h2
s.yimg.com/wi/config/27998.json
200 OK 43 B URL GET HTTP/2 s.yimg.com/wi/config/27998.json
IP
ASN #203220 Yahoo! UK Services Limited
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6
ValidityMon, 06 Nov 2023 00:00:00 GMT - Wed, 27 Dec 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash dd84dc953a10de3dcc9217e587533619
6104f638b12efd9cb80d0ad1019ce01e8d21378e
0617f823cca6b4e998c7a5a27d917c448f1d2ffad7a09b1eb5c1852eff3d5533
GET /wi/config/27998.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newamericanfunding.com
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: yHvWr8vngI5QYnnyOcmU4KKQBOjLOU/u/PVpPrZDvnrpKQszH262g9GpuuYYnqvcKLY5cDnkk4w=
x-amz-request-id: H2E29PSRTKGBJF3Y
date: Wed, 06 Dec 2023 15:19:44 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Wed, 06 Dec 2023 13:43:29 GMT
x-amz-expiration: expiry-date="Fri, 10 Jan 2025 00:00:00 GMT", rule-id="oath-standard-lifecycle"
x-amz-server-side-encryption: AES256
x-amz-version-id: imzwl6TF5KitcmglPJeR0VZEvZjdpPcx
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 43
referrer-policy: no-referrer-when-downgrade
etag: "dd84dc953a10de3dcc9217e587533619"
age: 1282
ats-carp-promotion: 1
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
maps.googleapis.com/maps/api/place/js/AutocompletionService.GetPredictionsJson?1sTustin%2CCalifornia&4sen-US&9s(cities)&15e3&21m1&2e1&callback=_xdc_._gkpmo4&key=AIzaSyCvRwR3-fGr8AsnMdzmQVkgCdlWhqUiCG0&token=100153
200 OK 396 B URL GET HTTP/3 maps.googleapis.com/maps/api/place/js/AutocompletionService.GetPredictionsJson?1sTustin%2CCalifornia&4sen-US&9s(cities)&15e3&21m1&2e1&callback=_xdc_._gkpmo4&key=AIzaSyCvRwR3-fGr8AsnMdzmQVkgCdlWhqUiCG0&token=100153
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash b70737c81908c203459e1aa383b41507
da8e8cc245c70b2730ee04b9f4d8f38792cc92fb
82c2d6f2e61628969f305e258b0b60346ba90c4977ea0bafb778ecff5a28228e
GET /maps/api/place/js/AutocompletionService.GetPredictionsJson?1sTustin%2CCalifornia&4sen-US&9s(cities)&15e3&21m1&2e1&callback=_xdc_._gkpmo4&key=AIzaSyCvRwR3-fGr8AsnMdzmQVkgCdlWhqUiCG0&token=100153 HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
date: Wed, 06 Dec 2023 15:41:05 GMT
expires: Wed, 06 Dec 2023 15:41:05 GMT
cache-control: private, max-age=300
content-disposition: attachment
content-encoding: gzip
server: scaffolding on HTTPServer2
content-length: 396
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=48
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
gs.mountain.com/gs
200 OK 144 B IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoDaddy.com, Inc.
Subject*.mountain.com
Fingerprint60:38:AB:C1:29:01:0A:9E:70:DF:E1:A9:65:7C:E4:4D:66:48:51:62
ValidityMon, 12 Jun 2023 16:30:05 GMT - Sun, 23 Jun 2024 07:06:21 GMT
File type ASCII text, with no line terminators
Hash 68890af43dad4532db620575b646261f
022513fcbfebfbbf53f708b7e72bf8ffec85f030
2829e9872dd25928eb0da47f61bbd069cdc3f18e6f1095d527c01c312645a325
GET /gs HTTP/1.1
Host: gs.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Cookie: guid=dd676efd-944d-11ee-a2af-f19c2fd8ee58
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Wed, 06 Dec 2023 15:41:05 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header
x-application-context: application:prod:8080
content-type: application/javascript;charset=utf-8
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jan 1970 00:00:00 GMT
content-length: 144
x-envoy-upstream-service-time: 1
server: istio-envoy
connection: close
px.mountain.com/st?ga_tracking_id=UA-17024218-1&ga_client_id=&shpt=Lander%20Form%20J-HELOC&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-17024218-1%22%2C%22ga_client_id%22%3A%22%22%2C%22shpt%22%3A%22Lander%20Form%20J-HELOC%22%2C%22dcm_cid%22%3A%221701042725.1701877269%22%2C%22ga_utm_campaign%22%3A%22MXB_Contextual_112171%22%2C%22ga_utm_source%22%3A%22MXB%22%2C%22ga_utm_medium%22%3A%22display%22%2C%22mntnis%22%3A%22QAVZ8g5wPAEfQtci%2Fl8UGyOswnntqueO%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1701042725.1701877269&available_ga=%5B%7B%22id%22%3A%22G-5TM5YGZ59X%22%2C%22sess_id%22%3A%221701877268%22%7D%2C%7B%22id%22%3A%22UA-17024218-1%22%2C%22sess_id%22%3Anull%7D%5D&hardcoded_ga=UA-17024218-1&dxver=4.0.0&shaid=32559&plh=https%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F%3Frefinance%3D31806835%26purchase%3D31806844%26phone%3D8552750073%26utm_source%3DMXB%26utm_medium%3Ddisplay%26utm_content%3Ddefault%26utm_campaign%3DMXB_Contextual_112171%26lp%3Drf%26lt%3Dhe%26sub_id%3D1389282404%26pub_id%3D112172%26utm_content%3Ddefault&shadditional=criteo%3Dtrue%2Cadroll%3Dtrue%2Cgoogletagmanager%3Dtrue%2C&cb=1701877264300959&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1701877265427
200 OK 1.5 kB URL GET HTTP/1.1 px.mountain.com/st?ga_tracking_id=UA-17024218-1&ga_client_id=&shpt=Lander%20Form%20J-HELOC&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-17024218-1%22%2C%22ga_client_id%22%3A%22%22%2C%22shpt%22%3A%22Lander%20Form%20J-HELOC%22%2C%22dcm_cid%22%3A%221701042725.1701877269%22%2C%22ga_utm_campaign%22%3A%22MXB_Contextual_112171%22%2C%22ga_utm_source%22%3A%22MXB%22%2C%22ga_utm_medium%22%3A%22display%22%2C%22mntnis%22%3A%22QAVZ8g5wPAEfQtci%2Fl8UGyOswnntqueO%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1701042725.1701877269&available_ga=%5B%7B%22id%22%3A%22G-5TM5YGZ59X%22%2C%22sess_id%22%3A%221701877268%22%7D%2C%7B%22id%22%3A%22UA-17024218-1%22%2C%22sess_id%22%3Anull%7D%5D&hardcoded_ga=UA-17024218-1&dxver=4.0.0&shaid=32559&plh=https%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F%3Frefinance%3D31806835%26purchase%3D31806844%26phone%3D8552750073%26utm_source%3DMXB%26utm_medium%3Ddisplay%26utm_content%3Ddefault%26utm_campaign%3DMXB_Contextual_112171%26lp%3Drf%26lt%3Dhe%26sub_id%3D1389282404%26pub_id%3D112172%26utm_content%3Ddefault&shadditional=criteo%3Dtrue%2Cadroll%3Dtrue%2Cgoogletagmanager%3Dtrue%2C&cb=1701877264300959&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1701877265427
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoDaddy.com, Inc.
Subject*.mountain.com
Fingerprint60:38:AB:C1:29:01:0A:9E:70:DF:E1:A9:65:7C:E4:4D:66:48:51:62
ValidityMon, 12 Jun 2023 16:30:05 GMT - Sun, 23 Jun 2024 07:06:21 GMT
File type ASCII text, with very long lines (6007), with no line terminators
Hash 85c5a0ab507eab1db697b7d44c722ca5
5b29df9a4ea4e8381e0ddac5965553e119405a83
a99c843ff1474d42f35aabc884d25cb2f69310272107a081ead15afdfd17f327
GET /st?ga_tracking_id=UA-17024218-1&ga_client_id=&shpt=Lander%20Form%20J-HELOC&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22UA-17024218-1%22%2C%22ga_client_id%22%3A%22%22%2C%22shpt%22%3A%22Lander%20Form%20J-HELOC%22%2C%22dcm_cid%22%3A%221701042725.1701877269%22%2C%22ga_utm_campaign%22%3A%22MXB_Contextual_112171%22%2C%22ga_utm_source%22%3A%22MXB%22%2C%22ga_utm_medium%22%3A%22display%22%2C%22mntnis%22%3A%22QAVZ8g5wPAEfQtci%2Fl8UGyOswnntqueO%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A5%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%2C%22ga_utm_campaign%22%3A%22OK%22%2C%22ga_utm_source%22%3A%22OK%22%2C%22ga_utm_medium%22%3A%22OK%22%7D%7D&dcm_cid=1701042725.1701877269&available_ga=%5B%7B%22id%22%3A%22G-5TM5YGZ59X%22%2C%22sess_id%22%3A%221701877268%22%7D%2C%7B%22id%22%3A%22UA-17024218-1%22%2C%22sess_id%22%3Anull%7D%5D&hardcoded_ga=UA-17024218-1&dxver=4.0.0&shaid=32559&plh=https%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F%3Frefinance%3D31806835%26purchase%3D31806844%26phone%3D8552750073%26utm_source%3DMXB%26utm_medium%3Ddisplay%26utm_content%3Ddefault%26utm_campaign%3DMXB_Contextual_112171%26lp%3Drf%26lt%3Dhe%26sub_id%3D1389282404%26pub_id%3D112172%26utm_content%3Ddefault&shadditional=criteo%3Dtrue%2Cadroll%3Dtrue%2Cgoogletagmanager%3Dtrue%2C&cb=1701877264300959&shguid=35b0bce9-d250-329d-b012-c0426f88d0bd&shgts=1701877265427 HTTP/1.1
Host: px.mountain.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Cookie: guid=dd676efd-944d-11ee-a2af-f19c2fd8ee58
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Wed, 06 Dec 2023 15:41:06 GMT
content-type: application/javascript;charset=utf-8
access-control-allow-origin: *
p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE"
set-cookie: tt="H4sIAAAAAAAAAKtW8guKNzYyNbWMNzK3NFayMtBBErEwtgCLlClZGekoIQsamhsYWpibG5mZGVoa1gIAtttSq0YAAAA=";Domain=px.mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
rt="MzI1NTk6MTcwMTg3NzI2Ng==";Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
guid=dd676efd-944d-11ee-a2af-f19c2fd8ee58;Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure
content-encoding: gzip
x-envoy-upstream-service-time: 19
server: istio-envoy
connection: close
transfer-encoding: chunked
ct.pinterest.com/ct.html
200 OK 323 B IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerDigiCert Inc
Subject*.pinterest.com
Fingerprint4D:02:6D:A8:DF:FA:2E:1C:D3:43:46:EF:CF:92:F1:7A:41:8F:BA:0B
ValidityMon, 31 Jul 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (565), with no line terminators
Hash 433cbac690542626f503b4269a8da12a
3e810bc4abaccf42ac5e4b0b939d63c03711bbd9
f83b1a3ea61ad62e47fad82de5495a2547e2f12e591ad8108050538c566ae1e3
GET /ct.html HTTP/1.1
Host: ct.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 323
cache-control: max-age=86400
content-type: text/html; charset=utf-8
content-encoding: gzip
x-envoy-upstream-service-time: 0
referrer-policy: origin
x-pinterest-rid: 1525196928227052
date: Wed, 06 Dec 2023 15:41:06 GMT
x-cdn: fastly
alt-svc: h3=":443";ma=600
pinterest-version: e7249d1c03a7694dfa35055671bb9f996ab3ca0c
region1.analytics.google.com/g/collect?v=2&tid=G-5TM5YGZ59X>m=45je3bt0v894720821z86511264&_p=1701877267538&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1701042725.1701877269&ul=en-us&sr=1280x1024&ir=1&_eu=EA&_s=2&sid=1701877268&sct=1&seg=0&dl=https%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F%3Frefinance%3D31806835%26purchase%3D31806844%26phone%3D8552750073%26utm_source%3DMXB%26utm_medium%3Ddisplay%26utm_content%3Ddefault%26utm_campaign%3DMXB_Contextual_112171%26lp%3Drf%26lt%3Dhe%26sub_id%3D1389282404%26pub_id%3D112172%26utm_content%3Ddefault&dt=Lander%20Form%20J-HELOC&en=PageView&ep.event_id=1701877948195_17018773966531&tfd=8606
204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-5TM5YGZ59X>m=45je3bt0v894720821z86511264&_p=1701877267538&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1701042725.1701877269&ul=en-us&sr=1280x1024&ir=1&_eu=EA&_s=2&sid=1701877268&sct=1&seg=0&dl=https%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F%3Frefinance%3D31806835%26purchase%3D31806844%26phone%3D8552750073%26utm_source%3DMXB%26utm_medium%3Ddisplay%26utm_content%3Ddefault%26utm_campaign%3DMXB_Contextual_112171%26lp%3Drf%26lt%3Dhe%26sub_id%3D1389282404%26pub_id%3D112172%26utm_content%3Ddefault&dt=Lander%20Form%20J-HELOC&en=PageView&ep.event_id=1701877948195_17018773966531&tfd=8606
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-5TM5YGZ59X>m=45je3bt0v894720821z86511264&_p=1701877267538&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1701042725.1701877269&ul=en-us&sr=1280x1024&ir=1&_eu=EA&_s=2&sid=1701877268&sct=1&seg=0&dl=https%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F%3Frefinance%3D31806835%26purchase%3D31806844%26phone%3D8552750073%26utm_source%3DMXB%26utm_medium%3Ddisplay%26utm_content%3Ddefault%26utm_campaign%3DMXB_Contextual_112171%26lp%3Drf%26lt%3Dhe%26sub_id%3D1389282404%26pub_id%3D112172%26utm_content%3Ddefault&dt=Lander%20Form%20J-HELOC&en=PageView&ep.event_id=1701877948195_17018773966531&tfd=8606 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newamericanfunding.com
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://www.newamericanfunding.com
date: Wed, 06 Dec 2023 15:41:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
maps.googleapis.com/maps/api/js?key=AIzaSyCvRwR3-fGr8AsnMdzmQVkgCdlWhqUiCG0&libraries=places&callback=CityStateObject.initAutocomplete
200 OK 198 kB URL GET HTTP/3 maps.googleapis.com/maps/api/js?key=AIzaSyCvRwR3-fGr8AsnMdzmQVkgCdlWhqUiCG0&libraries=places&callback=CityStateObject.initAutocomplete
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (2928)
Size 198 kB (198226 bytes)
Hash a1d6d73facbc9e6e41425975c0db5ea2
1942c889b41941108e0b204e8739ca950f02d9c0
997b01db6c3212ac9ce242265cb5188869ba3201025bc040b1ba9c7614f5860a
GET /maps/api/js?key=AIzaSyCvRwR3-fGr8AsnMdzmQVkgCdlWhqUiCG0&libraries=places&callback=CityStateObject.initAutocomplete HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=UTF-8
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Language, Origin, X-Origin, Referer
cache-control: public, max-age=1800
content-encoding: gzip
date: Wed, 06 Dec 2023 15:41:03 GMT
server: scaffolding on HTTPServer2
content-length: 66435
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
use.fortawesome.com/kits/d622b6b8/publications/126196/woff2.css
200 OK 58 kB URL GET HTTP/2 use.fortawesome.com/kits/d622b6b8/publications/126196/woff2.css
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF8:13:6D:77:CA:4E:CA:8E:98:D4:51:62:D6:E3:FA:36:1B:94:F8:26
ValiditySun, 09 Apr 2023 00:00:00 GMT - Mon, 08 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (57895), with no line terminators
Hash 463e32d2e0969e125114ec5f709b20f3
23dc50379fa0e2dd94b3919da0b30845f5ed0eaa
b38b08928ea5b75f7bd59ca94db9c5cfacc49a76b25c0541dab5a3660b9de573
GET /kits/d622b6b8/publications/126196/woff2.css HTTP/1.1
Host: use.fortawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:02 GMT
content-type: text/css
x-amz-id-2: 4PPvuvJ4zRLrqCAX3a9gup+vvpm95seDSOZIHMeyUYPHGaTL3+xP9EuBVGDFi8TBq6MYCUjhmis=
x-amz-request-id: Y6JZXJQ2PG82F9VA
last-modified: Tue, 19 Sep 2023 00:23:05 GMT
etag: W/"463e32d2e0969e125114ec5f709b20f3"
x-amz-server-side-encryption: AES256
cf-cache-status: REVALIDATED
expires: Thu, 05 Dec 2024 15:41:02 GMT
cache-control: public, max-age=31536000
vary: Accept-Encoding
server: cloudflare
cf-ray: 8315a17bdd7b712a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/logos/static/powered_by_logo.svg
200 OK 5.2 kB URL GET HTTP/2 cdn.cookielaw.org/logos/static/powered_by_logo.svg
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (5220), with no line terminators
Hash 38b5388f36f8f885deb26afdac0e3116
112eccab1891a3a7cab1c5602ba72c9e127136e0
a8562f11c5a80a5c1c4ab388cfa2a69598203a57a5c67d1f80512bddd80d09ef
GET /logos/static/powered_by_logo.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:03 GMT
content-type: image/svg+xml
content-md5: Y+c301RBZNK39PvKQWrIBw==
last-modified: Tue, 05 Dec 2023 03:37:38 GMT
x-ms-request-id: 869332fc-301e-0069-6b2e-2700cf000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 47714
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8315a182ab3b56c9-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/logos/static/ot_guard_logo.svg
200 OK 497 B URL GET HTTP/2 cdn.cookielaw.org/logos/static/ot_guard_logo.svg
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (507), with no line terminators
Hash 4cefeea2da1f500b581d4842d6454a50
9939dd4c1394641f53655e558bfdca7499480c52
220f235f0188ff469b92b56eb86adf4e828b8a90c587ebfa073383b8583aaeb2
GET /logos/static/ot_guard_logo.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.newamericanfunding.com/
Origin: https://www.newamericanfunding.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:03 GMT
content-type: image/svg+xml
content-md5: tXyZydHjxQshFMbbBT1/8A==
last-modified: Tue, 05 Dec 2023 04:23:21 GMT
x-ms-request-id: 0e3f047b-501e-009b-653b-27f886000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 51573
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8315a182aaf40b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
maps.googleapis.com/maps-api-v3/api/js/55/3/util.js
200 OK 177 kB URL GET HTTP/3 maps.googleapis.com/maps-api-v3/api/js/55/3/util.js
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (562)
Size 177 kB (177367 bytes)
Hash 90e04afddd95ef43014450cadb771307
84382d86cb0b94bebef21276b757402c80a49950
416d94f82831298c634952e55392f6a187d52da70fe49083b99af1755bde4615
GET /maps-api-v3/api/js/55/3/util.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 55134
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 01:53:05 GMT
expires: Wed, 04 Dec 2024 01:53:05 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 29 Nov 2023 00:55:44 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 136079
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
assets.newamericanfunding.com/images/awards/inc-5000-inverse.svg
200 OK 4.0 kB URL GET HTTP/2 assets.newamericanfunding.com/images/awards/inc-5000-inverse.svg
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerAmazon
Subjectassets.newamericanfunding.com
FingerprintCD:FB:8B:EA:B0:B0:B9:92:A5:9D:10:EF:BC:0A:63:3B:87:DB:38:2E
ValidityThu, 09 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4249), with no line terminators
Hash 860ec56602380064320b90998df724ef
3cff76eebf2c4cbeaddb2a5d0fa0954dd93fee26
78bf90409081abd197ccc68f017c39e9ac8b81a271542d6676bfdd5c551f68bb
GET /images/awards/inc-5000-inverse.svg HTTP/1.1
Host: assets.newamericanfunding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Mon, 02 Jan 2023 11:19:59 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: BKkxBPI5UcScS9wZsMbqRm1AZu6iYTrL
server: AmazonS3
content-security-policy: default-src 'self'; img-src 'self' 'unsafe-inline' naf-emails.s3.amazonaws.com s3.amazonaws.com; style-src 'self' 'unsafe-inline'
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
content-encoding: gzip
date: Wed, 06 Dec 2023 15:41:01 GMT
cache-control: max-age=0
etag: W/"d7f61a51bd704daf708f0b6adac13e19"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3l7OVi7iiJL-Xh7stMzjvjfP9ZGquuaWGR7uF6OOQv2-gGP9VOm27A==
X-Firefox-Spdy: h2
assets.newamericanfunding.com/images/awards/experience-5-star-inverse.svg
200 OK 7.4 kB URL GET HTTP/2 assets.newamericanfunding.com/images/awards/experience-5-star-inverse.svg
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerAmazon
Subjectassets.newamericanfunding.com
FingerprintCD:FB:8B:EA:B0:B0:B9:92:A5:9D:10:EF:BC:0A:63:3B:87:DB:38:2E
ValidityThu, 09 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (7943), with no line terminators
Hash 2a120cfe54eb4073feded61657c894f0
7eaecbbe901aa39358bb836d2b2bca1b06e05e55
0d33e3bc501d77c4f9c7350de95553fb269d662d1b58b6ff8d0ae33f13ed17ac
GET /images/awards/experience-5-star-inverse.svg HTTP/1.1
Host: assets.newamericanfunding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Mon, 02 Jan 2023 11:40:30 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: Jh0f42PhZNEQBpHC.77mm63tMXM9qkpa
server: AmazonS3
content-security-policy: default-src 'self'; img-src 'self' 'unsafe-inline' naf-emails.s3.amazonaws.com s3.amazonaws.com; style-src 'self' 'unsafe-inline'
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
content-encoding: gzip
date: Wed, 06 Dec 2023 15:41:01 GMT
cache-control: max-age=0
etag: W/"bcf6c9d1a279fbac85832d1a19850717"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ETS4Iu-nApx_bp2hNlY6jFz8rGeiiTcgt8scLSe2jc464ft3ImDYwA==
X-Firefox-Spdy: h2
assets.newamericanfunding.com/images/awards/fortune-100-inverse.svg
200 OK 11 kB URL GET HTTP/2 assets.newamericanfunding.com/images/awards/fortune-100-inverse.svg
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerAmazon
Subjectassets.newamericanfunding.com
FingerprintCD:FB:8B:EA:B0:B0:B9:92:A5:9D:10:EF:BC:0A:63:3B:87:DB:38:2E
ValidityThu, 09 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 8f118bf3c7c2555cbf0619e4b32fca56
2d0057b81dcbebb80501ada831bde1a368cceaed
fe38d15b85a5603d726e6f173f2b31a3aec08a6cb9bc0ba37235eedb382e4e41
GET /images/awards/fortune-100-inverse.svg HTTP/1.1
Host: assets.newamericanfunding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Tue, 04 Apr 2023 21:48:57 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: Cd1VxRHjaGCQbdDELqRHIqbNSPVnAPLc
server: AmazonS3
content-security-policy: default-src 'self'; img-src 'self' 'unsafe-inline' naf-emails.s3.amazonaws.com s3.amazonaws.com; style-src 'self' 'unsafe-inline'
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
content-encoding: gzip
date: Wed, 06 Dec 2023 15:41:01 GMT
cache-control: max-age=0
etag: W/"8f118bf3c7c2555cbf0619e4b32fca56"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3PFoHZ87k3TSBlD14Wg94BLc95psBkidskn9JOz1QFiHFabGjY4OUw==
X-Firefox-Spdy: h2
maps.googleapis.com/maps-api-v3/api/js/55/3/common.js
200 OK 261 kB URL GET HTTP/3 maps.googleapis.com/maps-api-v3/api/js/55/3/common.js
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (5883)
Size 261 kB (261096 bytes)
Hash 9b44e2e564f70b079e48e73680228d50
21cbe8228939cccbe04d618cc62592abe8168292
862626d7f047d662ba009df71a153f10d6e807f7ef17d0d5127f0bef16e215d7
GET /maps-api-v3/api/js/55/3/common.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 57129
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 23:59:20 GMT
expires: Wed, 04 Dec 2024 23:59:20 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 29 Nov 2023 00:55:44 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 56504
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.cookielaw.org/logos/static/ot_close.svg
200 OK 651 B URL GET HTTP/2 cdn.cookielaw.org/logos/static/ot_close.svg
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (663), with no line terminators
Hash 775913dc8267eb216d54c1e1dfe467b1
c6c68dea713afbe52666360532140507347a5d10
7f95ae3119579940ba6840a95abc442065d3a8412a8f6aff872ffdf86bcc8240
GET /logos/static/ot_close.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:03 GMT
content-type: image/svg+xml
content-md5: pcXWFGpuVeSg/jVnYCseRg==
last-modified: Wed, 06 Dec 2023 04:17:21 GMT
x-ms-request-id: edaa8dd9-001e-004d-4f00-28f66f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 34252
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8315a1826ae256c9-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/logos/static/ot_company_logo.png
200 OK 4.0 kB URL GET HTTP/2 cdn.cookielaw.org/logos/static/ot_company_logo.png
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type PNG image data, 600 x 106, 8-bit colormap, non-interlaced\012- data
Hash 13cfac93f102cca813515b432e292220
2515da7707d11c89185c9021f0000cffbe0578f9
a335fc1da4a5ffc1fcacfa3eab57506faa41f026954496becb59cf5fbcd99d0e
GET /logos/static/ot_company_logo.png HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:03 GMT
content-type: image/png
content-length: 4036
content-md5: E8+sk/ECzKgTUVtDLikiIA==
last-modified: Tue, 05 Dec 2023 04:23:22 GMT
etag: 0x8DBF549EAD34420
x-ms-request-id: 15be45cd-801e-0053-3852-271ab7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 31052
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8315a1829b3556c9-OSL
X-Firefox-Spdy: h2
www.newamericanfunding.com/umbraco/Surface/Lead/PostPageVisit
200 OK 467 B URL POST HTTP/2 www.newamericanfunding.com/umbraco/Surface/Lead/PostPageVisit
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoDaddy.com, Inc.
Subject*.newamericanfunding.com
FingerprintF5:1A:31:60:D2:14:AD:61:49:B8:2F:2D:FF:B0:5D:0A:FA:FB:76:61
ValidityWed, 26 Apr 2023 07:22:07 GMT - Mon, 27 May 2024 07:22:07 GMT
File type troff or preprocessor input, ASCII text, with very long lines (496), with no line terminators
Hash 89674d45c0b8ba9f114d53115ae44c03
0c966bd58578854d0110d4efcce6e878a455d12e
800f9d7e2f66f5f559fdc312396c6b88ad85b7f2787335d1781f2aee8a6159b0
POST /umbraco/Surface/Lead/PostPageVisit HTTP/1.1
Host: www.newamericanfunding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 362
Origin: https://www.newamericanfunding.com
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Cookie: ASP.NET_SessionId=4ufzrchrkowfk2kctcvvkss1; SessionId=8b95e606-0501-46aa-a795-caa089295c5d; _gcl_au=1.1.1317321986.1701877268
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:02 GMT
content-type: application/json; charset=utf-8
server: nginx
vary: Accept-Encoding
cache-control: private,max-age=0
amp-access-control-allow-source-origin: http://74.80.208.44
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; frame-ancestors 'self' www.newamericanfunding.com thebrokernetwork.com www.thebrokernetwork.com qa.thebrokernetwork.com staging.thebrokernetwork.com uat.thebrokernetwork.com https://patch.com https://mortgage.patch.com; default-src 'unsafe-eval' 'unsafe-inline' data: https:; script-src 'unsafe-eval' 'unsafe-inline' data: https: blob:; style-src 'unsafe-inline' data: https:; img-src data: https: blob:; font-src data: https:; connect-src https: blob:; media-src data: https: blob:; object-src https:; frame-src data: https:; child-src data: https: blob:; form-action https:;
x-xss-protection: 1; mode=block
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-request-id: 06379334bb7b300e7e5a6086844175f3
content-encoding: gzip
X-Firefox-Spdy: h2
use.fortawesome.com/d622b6b8.js
200 OK 10 kB URL GET HTTP/2 use.fortawesome.com/d622b6b8.js
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF8:13:6D:77:CA:4E:CA:8E:98:D4:51:62:D6:E3:FA:36:1B:94:F8:26
ValiditySun, 09 Apr 2023 00:00:00 GMT - Mon, 08 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (10199), with no line terminators
Hash fc5eb5e04cd643c0a3cd92427d848a8b
ad797984b54794a7977bd5fa69e4e375387da704
9612e20a47c6e57680c880ebc69f5a5847fa54400744a0a3f31702b9cf523d38
GET /d622b6b8.js HTTP/1.1
Host: use.fortawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:00 GMT
content-type: application/javascript
x-amz-id-2: HsJsGlyNurUQTmaMl0JBww0lW9U24Qyt0HvDqiOaRYT3Vs5+P3HeK7BI16L5gIql7CsK4vCtDyI=
x-amz-request-id: 5SK9MNQG0MCDD7EX
last-modified: Tue, 19 Sep 2023 00:23:03 GMT
etag: W/"7641628206692d35951a3c7458b3822f"
x-amz-server-side-encryption: AES256
cf-cache-status: REVALIDATED
expires: Wed, 06 Dec 2023 16:41:00 GMT
cache-control: public, max-age=3600
vary: Accept-Encoding
server: cloudflare
cf-ray: 8315a16ea833712a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.cookielaw.org/scripttemplates/202305.1.0/assets/otCommonStyles.css
200 OK 22 kB URL GET HTTP/2 cdn.cookielaw.org/scripttemplates/202305.1.0/assets/otCommonStyles.css
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerCloudflare, Inc.
Subjectcookielaw.org
Fingerprint72:BB:48:60:EB:F2:A2:EB:51:29:51:1A:B9:2A:85:30:97:3D:9A:2E
ValiditySat, 01 Apr 2023 00:00:00 GMT - Sun, 31 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (21608), with no line terminators
Hash a169014cb8030d7beb52c77ddf2fd9c6
fbe4667b4f8f01cd6c4dd2f9c9cacfb389cb54e1
d0c233d327541d2961f1cde9e53a6166279655f4d4041c1bc458ac1701827719
GET /scripttemplates/202305.1.0/assets/otCommonStyles.css HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.newamericanfunding.com/
Origin: https://www.newamericanfunding.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 06 Dec 2023 15:41:03 GMT
content-type: text/css
content-md5: oWkBTLgDDXvrUsd93y/Zxg==
last-modified: Tue, 11 Jul 2023 02:35:52 GMT
x-ms-request-id: f5985c44-801e-0088-7391-17dc8a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 51574
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8315a18179bf0b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
assets.newamericanfunding.com/images/logos/logo-new-american-funding.svg
200 OK 7.9 kB URL GET HTTP/2 assets.newamericanfunding.com/images/logos/logo-new-american-funding.svg
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerAmazon
Subjectassets.newamericanfunding.com
FingerprintCD:FB:8B:EA:B0:B0:B9:92:A5:9D:10:EF:BC:0A:63:3B:87:DB:38:2E
ValidityThu, 09 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- SVG XML document\012- XML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (8485), with no line terminators
Hash ea6766d8e4a459a9882e216b7c60c00b
f7aea8d2afc9d845e1711028b142476e0b0c579e
981a8dfa7a2aef787b67aa664896bf91f5cb33cdd9ca843bb934f6d4dcd43546
GET /images/logos/logo-new-american-funding.svg HTTP/1.1
Host: assets.newamericanfunding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
last-modified: Thu, 23 Mar 2023 15:11:32 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: BvU8uMMeYAm5V0Ose1nxSYs0dUdo_bXN
server: AmazonS3
content-security-policy: default-src 'self'; img-src 'self' 'unsafe-inline' naf-emails.s3.amazonaws.com s3.amazonaws.com; style-src 'self' 'unsafe-inline'
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
content-encoding: gzip
date: Wed, 06 Dec 2023 15:41:01 GMT
cache-control: max-age=0
etag: W/"ca548b8c19417181c31d446c6de0105a"
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ruVDztGPPNygGsLlO00nmgtiWU6m6vSIG8vl8lRcShP1QG_cX23vPw==
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-5TM5YGZ59X>m=45je3bt0v894720821z86511264&_p=1701877267538&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1701042725.1701877269&ul=en-us&sr=1280x1024&ir=1&_eu=EA&_s=1&sid=1701877268&sct=1&seg=0&dl=https%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F%3Frefinance%3D31806835%26purchase%3D31806844%26phone%3D8552750073%26utm_source%3DMXB%26utm_medium%3Ddisplay%26utm_content%3Ddefault%26utm_campaign%3DMXB_Contextual_112171%26lp%3Drf%26lt%3Dhe%26sub_id%3D1389282404%26pub_id%3D112172%26utm_content%3Ddefault&dt=Lander%20Form%20J-HELOC&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=3558
204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-5TM5YGZ59X>m=45je3bt0v894720821z86511264&_p=1701877267538&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1701042725.1701877269&ul=en-us&sr=1280x1024&ir=1&_eu=EA&_s=1&sid=1701877268&sct=1&seg=0&dl=https%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F%3Frefinance%3D31806835%26purchase%3D31806844%26phone%3D8552750073%26utm_source%3DMXB%26utm_medium%3Ddisplay%26utm_content%3Ddefault%26utm_campaign%3DMXB_Contextual_112171%26lp%3Drf%26lt%3Dhe%26sub_id%3D1389282404%26pub_id%3D112172%26utm_content%3Ddefault&dt=Lander%20Form%20J-HELOC&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=3558
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-5TM5YGZ59X>m=45je3bt0v894720821z86511264&_p=1701877267538&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=1701042725.1701877269&ul=en-us&sr=1280x1024&ir=1&_eu=EA&_s=1&sid=1701877268&sct=1&seg=0&dl=https%3A%2F%2Fwww.newamericanfunding.com%2Flfj-heloc%2Fmxb-he%2F%3Frefinance%3D31806835%26purchase%3D31806844%26phone%3D8552750073%26utm_source%3DMXB%26utm_medium%3Ddisplay%26utm_content%3Ddefault%26utm_campaign%3DMXB_Contextual_112171%26lp%3Drf%26lt%3Dhe%26sub_id%3D1389282404%26pub_id%3D112172%26utm_content%3Ddefault&dt=Lander%20Form%20J-HELOC&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=3558 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.newamericanfunding.com
DNT: 1
Connection: keep-alive
Referer: https://www.newamericanfunding.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.newamericanfunding.com
date: Wed, 06 Dec 2023 15:41:03 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
200 OK 8.0 kB URL GET HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP
Requested by https://www.newamericanfunding.com/lfj-heloc/mxb-he/?refinance=31806835&purchase=31806844&phone=8552750073&utm_source=MXB&utm_medium=display&utm_content=default&utm_campaign=MXB_Contextual_112171&lp=rf<=he&sub_id=1389282404&pub_id=112172&utm_content=default
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 8000, version 1.0\012- data
Hash 72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.newamericanfunding.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 00:39:49 GMT
expires: Wed, 04 Dec 2024 00:39:49 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 16:59:07 GMT
content-type: font/woff2
age: 140472
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
52.223.12.227
87.248.119.251
104.18.131.236
151.101.244.84
0.0.0.0