HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 23 Sep 2023 14:19:23 GMT
Content-Type: application/ocsp-response
Content-Length: 2149
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 22 Sep 2023 22:07:10 GMT
Expires: Sat, 23 Sep 2023 22:07:10 GMT
ETag: "be0215f3e4c3e0eef0919d58034913f81ded1b9e"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"

HTTP/2 302 Found
server: nginx
date: Sat, 23 Sep 2023 14:19:23 GMT
content-type: text/html; charset=utf-8
content-length: 260
accept-ch: Sec-Ch-Ua-Platform-Version
location: https://www.lmbahsj2.com/29PD1BG/8N7X34/?__rpt=0&__po=9&__ptid=f183010c9c0f42c29e16e6ebcef77f7f&__rpa=0&__rc=1&sub1=2&sub2=cefc44054ed64b2fb2f304d931b70884&sub3=&sub4=&sub5=&source_id=9&__pcd=9
set-cookie: uniqueClick_FGXLG=88be45d2-435c-4865-9e30-8241fd3e96b3:1695478763; Path=/; Expires=Sun, 24 Sep 2023 14:19:23 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: 51081e33-3c0e-477a-af43-e4a84b3d9974
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

HTTP/2 302 Found
server: nginx
date: Sat, 23 Sep 2023 14:19:23 GMT
content-type: text/html; charset=utf-8
content-length: 290
accept-ch: Sec-Ch-Ua-Platform-Version
location: https://home.refily.com/?moid=314646&sourceid=affl_everflow_lre-rfl_155_809&pkey1=809&pkey2=2&pkey3=bc805b829ef849478351eeabe32f80e2&sid=155&cmpid=155&crtid=&oid=155&affid=809&_ef_transaction_id=bc805b829ef849478351eeabe32f80e2
set-cookie: uniqueClick_8N7X34=8ccb776c-9144-40e2-8484-3b4c5f85a061:1695478763; Path=/; Expires=Sun, 24 Sep 2023 14:19:23 GMT; Secure; SameSite=None
transaction_id=bc805b829ef849478351eeabe32f80e2; Path=/; Expires=Fri, 22 Dec 2023 14:19:23 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: 8b77a2bf-9a5f-4013-8eeb-8a4e398b2ef0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 23 Sep 2023 14:19:23 GMT
Content-Type: application/ocsp-response
Content-Length: 2149
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 22 Sep 2023 22:07:10 GMT
Expires: Sat, 23 Sep 2023 22:07:10 GMT
ETag: "be0215f3e4c3e0eef0919d58034913f81ded1b9e"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 14:19:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

HTTP/2 200 OK
server: nginx
content-type: text/css;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: private, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 680
date: Sat, 23 Sep 2023 14:19:25 GMT
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 23 Sep 2023 14:19:25 GMT
Content-Type: application/ocsp-response
Content-Length: 2107
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 23 Sep 2023 06:15:33 GMT
Expires: Sun, 24 Sep 2023 06:15:33 GMT
ETag: "75bfa0951a48ff286ffbe1f60861528ead99091a"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"

HTTP/2 200 OK
date: Sat, 23 Sep 2023 14:19:25 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2023.7.1"
last-modified: Thu, 20 Jul 2023 18:10:27 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 80b36c2b4b441c06-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

HTTP/2 200 OK
server: nginx/1.17.9
date: Sat, 23 Sep 2023 14:19:25 GMT
content-type: application/javascript
content-length: 22174
last-modified: Tue, 19 Sep 2023 15:04:35 GMT
etag: "e71b3f9237222c70c0d54c8dc2740fdd"
expires: Sat, 23 Sep 2023 14:19:24 GMT
cache-control: no-cache
x-cache: HIT
accept-ch: DPR,Width,Viewport-Width,Viewport-Height,Device-Memory,RTT,Downlink,ECT,Lang,Sec-CH-DPR,Sec-CH-Width,Sec-CH-Viewport-Width,Sec-CH-Viewport-Height,Sec-CH-Device-Memory,Sec-CH-RTT,Sec-CH-Downlink,Sec-CH-ECT,Sec-CH-Lang,Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Bitness,Sec-CH-UA-WoW64,Sec-CH-Prefers-Reduced-Motion,Sec-CH-Prefers-Reduced-Transparency,Sec-CH-Prefers-Contrast,Sec-CH-Forced-Colors,Sec-CH-Prefers-Color-Scheme,Sec-CH-Prefers-Reduced-Data
accept-ranges: bytes
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

HTTP/2 200 OK
server: nginx
content-type: text/css
content-length: 5
last-modified: Tue, 07 Mar 2023 19:56:00 GMT
etag: "640796d0-5"
cache-control: public, max-age=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
date: Sat, 23 Sep 2023 14:19:25 GMT
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Sat, 23 Sep 2023 14:19:26 GMT
content-type: image/png
content-length: 551
last-modified: Thu, 07 Sep 2023 16:30:01 GMT
x-amz-server-side-encryption: AES256
etag: "90732fd581b4624530c995d70d3f17a8"
x-cache: Hit from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: AOXjKlyCHYMxJN3pqKtLg1TBEg2WyqycahamYtkrkZeRdwYtfiIoYg==
cf-cache-status: HIT
age: 443
expires: Sat, 23 Sep 2023 18:19:26 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
set-cookie: __cf_bm=S.1Wz71sZTxFrM7320wfAP2asFJ3P2.BNS3XgWxjBHk-1695478766-0-AWS1UdAqwIyy7KhgPLzMDht6YfVSVUcRbH8aP8dKyMUQcu6SjsRg9grhDzs7o0Jy6qaKxD8axR/nLdY38dWPWLg=; path=/; expires=Sat, 23-Sep-23 14:49:26 GMT; domain=.quickencompare.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=2592000
content-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 80b36c336ba556a8-OSL
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Sat, 23 Sep 2023 14:19:26 GMT
content-type: image/png
content-length: 10196
last-modified: Fri, 11 Aug 2023 14:08:53 GMT
x-amz-server-side-encryption: AES256
etag: "6b6fdfba73cbc7cad1164a06e7ba471b"
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SvS5z6BO8ImQf-6_zKEJWqf_aScILSbKjWXSB-ZIUAB_2fOamogsUA==
cf-cache-status: HIT
age: 443
expires: Sat, 23 Sep 2023 18:19:26 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
set-cookie: __cf_bm=5TJB80vN4Tk6NhgbRon_nDXwAozdkReA8rYhXTU7vUI-1695478766-0-AaFVRy6PK0/71FepLlRUPlzChOg4FMlzgEmnuVTmM4+IjOMNUl/5YhQnEG69MJJw6jJxlF62lFTp8/yg3ws3Ilo=; path=/; expires=Sat, 23-Sep-23 14:49:26 GMT; domain=.quickencompare.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=2592000
content-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 80b36c336bb056a8-OSL
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Sat, 23 Sep 2023 14:19:26 GMT
content-type: image/png
content-length: 12593
last-modified: Thu, 07 Sep 2023 16:30:01 GMT
x-amz-server-side-encryption: AES256
etag: "1cc128d542f50dda4737c738da7d124d"
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SM_v2DQtZ6_lMVTrn-Fvvn9gQZFmdhjql6B4xd0L26t7RwmgTAAmMQ==
cf-cache-status: HIT
age: 443
expires: Sat, 23 Sep 2023 18:19:26 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
set-cookie: __cf_bm=KBPCS04KGiMoioNMJgdCV_nlDfbLH_WpXt2m1e5lJBQ-1695478766-0-AXGpgWWOJDIYrPj8ZiRwAT3xzr8G93/3TFfZBnSGxrPZFX9XFBBJKD2XjSNTxAitCspzktav2wNJ5Ge5axnP8Ts=; path=/; expires=Sat, 23-Sep-23 14:49:26 GMT; domain=.quickencompare.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=2592000
content-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 80b36c336bae56a8-OSL
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Sat, 23 Sep 2023 14:19:26 GMT
content-type: image/png
content-length: 6523
last-modified: Thu, 07 Sep 2023 16:30:01 GMT
x-amz-server-side-encryption: AES256
etag: "df9a33f17dfc149b279fd77bc757293d"
x-cache: Hit from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PMQrh0lUkjal15FOdeweAb9cVFWmYfJpqMyApVUJKnUOCCqmdlK8uA==
cf-cache-status: HIT
age: 443
expires: Sat, 23 Sep 2023 18:19:26 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
set-cookie: __cf_bm=GCDDH.VQqAk8.oHtHjglc4oxCf3cArBdkmsjHXoaWiI-1695478766-0-AWSCGO2pqdksYJLgCTHYbdFwpAO1LjXQHJ10A0+dR5HGJdqlueq2ecf92kUUpMk0MofkZSZ7GMqBwdX05yooZ2Y=; path=/; expires=Sat, 23-Sep-23 14:49:26 GMT; domain=.quickencompare.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=2592000
content-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 80b36c336ba756a8-OSL
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 14:19:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 22 Sep 2023 12:01:36 GMT
expires: Sat, 21 Sep 2024 12:01:36 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
age: 94670
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 14:19:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

HTTP/3 200 OK
date: Sat, 23 Sep 2023 14:19:26 GMT
content-type: font/woff
content-length: 29480
last-modified: Sat, 05 Feb 2022 02:00:58 GMT
etag: "7328-5d73bbd14dee6"
cache-control: max-age=2678400
cf-cache-status: HIT
age: 233306
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TuGCsb67016DQ%2BKlOA%2FT2yW5sqbY3gsVC%2F4CYuWh3pH2QTYy6yCpvcc1op6NFPnHUn%2ByUOPG7APpPWxqdlLB6pm5JBBw%2BAqlQKavjvYWno0d7zdkDNZEaADV9m0pctTcO1lJKic%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b36c355d895318-LHR
alt-svc: h3=":443"; ma=86400

HTTP/3 200 OK
date: Sat, 23 Sep 2023 14:19:26 GMT
content-type: font/woff
content-length: 28872
last-modified: Sat, 05 Feb 2022 02:00:58 GMT
etag: "70c8-5d73bbd14e2ce"
cache-control: max-age=2678400
cf-cache-status: HIT
age: 441
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=USo5GUNw1CKE78EaWoiFCZHnuxQ8mNm7qgt6OZinWGghF4SriEEJeO3u5qz3HrVOFr2JcOUM2jztbQeap2zri%2BJ9CodV5CMQdChT3omgTUHNjE99TJjVvns59skI65KwrA%2B48MQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b36c355d8e5318-LHR
alt-svc: h3=":443"; ma=86400

HTTP/3 200 OK
date: Sat, 23 Sep 2023 14:19:26 GMT
content-type: font/woff
content-length: 29868
last-modified: Sat, 05 Feb 2022 02:00:58 GMT
etag: "74ac-5d73bbd14dee6"
cache-control: max-age=2678400
cf-cache-status: HIT
age: 441
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FlgLcFpJZ1Z2DhHEIWQzfSqchwiDsubf2uwZznH42VVDJQM8MwCKTgLWRy49PfZuVFvW%2FGePGfPD6FO2puPYL5EU4siFW5J0n3BL0VwmQepMd3x9MU0F4%2B3JdiTpcOWSNLYNtDQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b36c355d915318-LHR
alt-svc: h3=":443"; ma=86400

HTTP/3 200 OK
date: Sat, 23 Sep 2023 14:19:26 GMT
content-type: font/woff
content-length: 28744
last-modified: Sat, 05 Feb 2022 02:00:58 GMT
etag: "7048-5d73bbd14dee6"
cache-control: max-age=2678400
cf-cache-status: HIT
age: 233306
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QmYi4Xp%2BxJYRm7WHktKA29fyq7yRG%2FaUAVsL7MKrv9fGX%2B5uUv5SXLToKIp3ts8PuK%2BcmM9MbStanE1Ixb0bdt1Fl6mooZBZzFiA1Ewv%2BUb0xbyHrs4VtZB1hTLMbJI4JrKCuvU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b36c355d965318-LHR
alt-svc: h3=":443"; ma=86400

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 14:19:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

HTTP/2 204 No Content
date: Sat, 23 Sep 2023 14:19:27 GMT
access-control-allow-origin: https://home.refily.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 80b36c37680456af-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 14:19:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 14:19:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

HTTP/2 200 OK
last-modified: Thu, 15 Jun 2023 20:49:59 GMT
etag: "4a205643a240cb95fa82289d62b5af7e"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=60
content-encoding: gzip
content-type: application/javascript
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 23 Sep 2023 14:19:27 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true,  "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7409
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 23 Sep 2023 14:19:27 GMT
Content-Type: application/ocsp-response
Content-Length: 2149
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 22 Sep 2023 22:07:10 GMT
Expires: Sat, 23 Sep 2023 22:07:10 GMT
ETag: "be0215f3e4c3e0eef0919d58034913f81ded1b9e"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 23 Sep 2023 14:19:27 GMT
expires: Sat, 23 Sep 2023 14:19:27 GMT
cache-control: private, max-age=900
last-modified: Sat, 23 Sep 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74930
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 23 Sep 2023 14:19:27 GMT
expires: Sat, 23 Sep 2023 14:19:27 GMT
cache-control: private, max-age=900
last-modified: Sat, 23 Sep 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75030
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 23 Sep 2023 14:19:27 GMT
expires: Sat, 23 Sep 2023 14:19:27 GMT
cache-control: private, max-age=900
last-modified: Sat, 23 Sep 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74856
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 14:19:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sat, 23 Sep 2023 14:19:27 GMT
Last-Modified: Sat, 23 Sep 2023 13:10:12 GMT
Server: ECAcc (ska/F791)
X-Cache: Miss from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: CjczdFzu6ueYKJxOY5D6EF9N8N3mmD_esN3iEiwAtWX5G03MBdAwpA==
Age: 4155

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 23 Sep 2023 14:19:27 GMT
expires: Sat, 23 Sep 2023 14:19:27 GMT
cache-control: private, max-age=900
last-modified: Sat, 23 Sep 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75123
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

HTTP/1.1 200 OK
Date: Sat, 23 Sep 2023 14:19:27 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 21 Sep 2023 23:11:04 GMT
Expires: Thu, 28 Sep 2023 23:11:03 GMT
Etag: "5d9f82d5b0268e67489615be7f0001629b025662"
Cache-Control: max-age=464468,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80b36c39a97856b9-OSL

HTTP/2 200 OK
date: Sat, 23 Sep 2023 14:19:27 GMT
content-type: text/javascript
content-length: 46
set-cookie: trx=4787106513420869790; Max-Age=63072000; Expires=Mon, 22 Sep 2025 14:19:27 GMT; Path=/; Domain=.revjet.com; Secure; SameSite=None
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Sat, 23 Sep 2023 14:19:27 GMT
content-type: application/json
content-length: 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2

HTTP/1.1 200 
P3P: CP="Act-On does not have a P3P policy. Learn why here: https://act-on.com/p3p-policy/"
Set-Cookie: wp44325="XXWVYDDDDDDIBUCBZJU-ZWHM-XWJT-HUWY-ACZUKTVCZZHHDgNssDDD"; Path=/; Max-Age=31536000; Domain=.actonservice.com; SameSite=None; Secure; Version=1
Content-Type: application/javascript;charset=utf-8
Content-Length: 4850
Date: Sat, 23 Sep 2023 14:19:27 GMT
X-Cnection: close
Strict-Transport-Security: max-age=16070400

HTTP/2 200 OK
date: Sat, 23 Sep 2023 14:19:27 GMT
content-type: application/json
content-length: 2
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sat, 23 Sep 2023 14:19:27 GMT
Last-Modified: Sat, 23 Sep 2023 13:07:23 GMT
Server: ECAcc (amb/6AD5)
X-Cache: Miss from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: TAoAtvZtZndV8x25nNoaSSTO1rmfnMKbkR2J923ZTZjlOdmwq5sopQ==
Age: 4324

HTTP/1.1 200 
Set-Cookie: wp44325="XXWVYDDDDDDIBUCBZJU-ZWHM-XWJT-HUWY-ACZUKTVCZZHHDMCZAKJWC-ZKLL-XCCH-CHTB-IBBUUBWZZCBKDkLMpsR_JhtDD"; Path=/; Max-Age=31536000; Domain=.actonservice.com; SameSite=None; Secure; Version=1
P3P: CP="Act-On does not have a P3P policy. Learn why here: https://act-on.com/p3p-policy/"
Content-Type: image/gif
Content-Length: 43
Date: Sat, 23 Sep 2023 14:19:27 GMT
X-Cnection: close
Strict-Transport-Security: max-age=16070400
Vary: Accept-Encoding

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 14:19:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 12981
content-type: application/javascript
content-encoding: gzip
last-modified: Wed, 06 Sep 2023 22:41:28 GMT
accept-ranges: bytes
etag: "09cc4613e1d91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: C3FB47167EEA4A4C80E0F3942A9195B7 Ref B: OSL30EDGE0219 Ref C: 2023-09-23T14:19:28Z
date: Sat, 23 Sep 2023 14:19:27 GMT
X-Firefox-Spdy: h2

HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 23 Sep 2023 14:19:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/320492720/?random=1695478767747&cv=11&fst=1695478767747&bg=ffffff&guid=ON&async=1&gtm=45be39k2&u_w=1280&u_h=1024&url=https%3A%2F%2Fhome.refily.com%2F%3Fmoid%3D314646%26sourceid%3Daffl_everflow_lre-rfl_155_809%26pkey1%3D809%26pkey2%3D2%26pkey3%3Dbc805b829ef849478351eeabe32f80e2%26sid%3D155%26cmpid%3D155%26crtid%3D%26oid%3D155%26affid%3D809%26_ef_transaction_id%3Dbc805b829ef849478351eeabe32f80e2&label=xSwBCJum9PsCELCp6ZgB&hn=www.google.com&frm=0&tiba=Refily&gtm_ee=1&auid=152001604.1695478768&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Sat, 23 Sep 2023 14:19:28 GMT
content-type: image/vnd.microsoft.icon
last-modified: Thu, 07 Sep 2023 16:29:59 GMT
x-amz-server-side-encryption: AES256
etag: W/"89bc42e3115e844dd692674ac4de5429"
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: o7OwaQpnhzIurOz_8aSPj1-XIr20Q9TXMM8wEy3JSvxN1kMh7G1x7w==
cf-cache-status: HIT
age: 442
expires: Sat, 23 Sep 2023 18:19:28 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
strict-transport-security: max-age=2592000
content-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 80b36c3d0866b4f3-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Sat, 23 Sep 2023 14:19:28 GMT
content-type: application/json; charset=utf-8
x-dns-prefetch-control: off
strict-transport-security: max-age=2592000
x-download-options: noopen
referrer-policy: same-origin
cache-control: no-store
etag: W/"f6-vara537zPnTOWSTtHnb8jRb4KYI"
cf-cache-status: DYNAMIC
content-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 80b36c3abb7e56af-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

HTTP/3 200 OK
date: Sat, 23 Sep 2023 14:19:28 GMT
content-type: font/woff
content-length: 29480
last-modified: Sat, 05 Feb 2022 02:00:58 GMT
etag: "7328-5d73bbd14dee6"
cache-control: max-age=2678400
cf-cache-status: HIT
age: 233308
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Kvfxx%2BTpHdUso7I%2FTfmu77jmSqDI0p3JV%2FwWrKoacC3ezcrjKEW0oaZmdfcfF5%2F5neWepGcCjfcu09AYzJvT32uAwBBU6QAccvAMIYFESM4VnnAICYbO2O2V7jo4NsTMPWR1Pq0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b36c3dde3a5318-LHR
alt-svc: h3=":443"; ma=86400

HTTP/3 200 OK
date: Sat, 23 Sep 2023 14:19:28 GMT
content-type: font/woff
content-length: 29868
last-modified: Sat, 05 Feb 2022 02:00:58 GMT
etag: "74ac-5d73bbd14dee6"
cache-control: max-age=2678400
cf-cache-status: HIT
age: 443
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8VF%2FYp2%2FjMtGFyZNIURXH3qM7a8O%2FxpqII9%2Bmzdy0C1kmL%2FyXKC3jiFTQdfk0P4uvOEShtwh%2FcHK9DhNc9FbQabWKQ5tgEHR7ZdiBxjpLqs2ilgCUw%2FBUkLeF74RkWG7Wf80M1c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b36c3dde375318-LHR
alt-svc: h3=":443"; ma=86400

HTTP/3 200 OK
date: Sat, 23 Sep 2023 14:19:28 GMT
content-type: font/woff
content-length: 28872
last-modified: Sat, 05 Feb 2022 02:00:58 GMT
etag: "70c8-5d73bbd14e2ce"
cache-control: max-age=2678400
cf-cache-status: HIT
age: 443
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CSGSm3GdUu4Bcumi%2BmNr%2BPMsovZyj3VN153hTcnydWIctibK1U6W4pgo3A5DMmIGhiqKPNgc%2B9kKzN%2BJijm5ggMWlbvyMl7cSZWp2xbpmse%2FV%2B4RZ3Ih2RG71vN5h0zvZRbQRVM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 80b36c3dde385318-LHR
alt-svc: h3=":443"; ma=86400

HTTP/3 200 OK
server: nginx
date: Sat, 23 Sep 2023 14:19:28 GMT
content-type: application/json; charset=utf-8
content-length: 87
accept-ch: Sec-Ch-Ua-Platform-Version
access-control-allow-credentials: true
access-control-allow-origin: https://home.refily.com
set-cookie: uniqueClick=4fb4b091-ad00-46e8-b5ac-75d4aa78110e:1695478768; Path=/; Expires=Sun, 24 Sep 2023 14:19:28 GMT; Secure; SameSite=None
transaction_id=bc805b829ef849478351eeabe32f80e2; Path=/; Expires=Fri, 22 Dec 2023 14:19:28 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: a51755a1-d360-4630-a34e-479b8bef7b6e
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

HTTP/2 200 OK
date: Sat, 23 Sep 2023 14:19:27 GMT
content-type: application/json; charset=utf-8
x-dns-prefetch-control: off
strict-transport-security: max-age=2592000
x-download-options: noopen
referrer-policy: same-origin
cache-control: no-store
etag: W/"568-BURrUbs7+xHrImv/TxtzNwlGYuQ"
cf-cache-status: DYNAMIC
content-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 80b36c367f0a56af-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A0DEAA3E9969418293768F1C30E63EB5 Ref B: OSL30EDGE0219 Ref C: 2023-09-23T14:19:28Z
date: Sat, 23 Sep 2023 14:19:27 GMT
X-Firefox-Spdy: h2

HTTP/2 200 OK
x-amz-id-2: F3Cvcd8nMPU6zsdWv11r70RAKKS87wJ3n/6ifJtZU7DzlKSPQQ+Uf6C4dzv1NER09cnkcGoyvMM=
x-amz-request-id: V8EVRMHWP18Q9CGZ
date: Sat, 23 Sep 2023 14:18:48 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "5c6ed25dce803fd84288922b8928409e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 42
content-encoding: gzip
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 23 Sep 2023 14:19:28 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2