tracking.dandeliontakeover.com/tracking/click?d=DLyP-zp4c_RRQRN0TOXrWJBTsplwRRdgw_3RAThOjBz_Wn906aJ1hl-faLkffO1rwGRhEO5W21p2IGf0IW7Jkn_H0wNmg46H3LqAdELwZk3d1PAD5vbqepmeS4i52beJBlEOWqvOUTQN12z9RGRCrhakl-8b4t1rjvWg6SUcZgiPY6V-g-mCi0hVDb80b_KMzoRxvDXBuZflU6Pl66twvi4VPzfsLY52PJPHHWCBM4sVo4SjNYC2QLPH_m-15sSla8YFGV5aEYMv_raXc5GLQu41
302 Found 239 B URL HTTP/1.1 tracking.dandeliontakeover.com/tracking/click?d=DLyP-zp4c_RRQRN0TOXrWJBTsplwRRdgw_3RAThOjBz_Wn906aJ1hl-faLkffO1rwGRhEO5W21p2IGf0IW7Jkn_H0wNmg46H3LqAdELwZk3d1PAD5vbqepmeS4i52beJBlEOWqvOUTQN12z9RGRCrhakl-8b4t1rjvWg6SUcZgiPY6V-g-mCi0hVDb80b_KMzoRxvDXBuZflU6Pl66twvi4VPzfsLY52PJPHHWCBM4sVo4SjNYC2QLPH_m-15sSla8YFGV5aEYMv_raXc5GLQu41
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 5cb24eef31ab47a41ab5300c84c7ab82
e6c8f64a243f775b8bfcf60e68a310ce0b644ed5
f5bd4061d1e81fa4ee5c95e91a1e4b18beedcfe8a29bcbf9fae300359a3395bb
Analyzer Verdict Alert fortinet Phishing
GET /tracking/click?d=DLyP-zp4c_RRQRN0TOXrWJBTsplwRRdgw_3RAThOjBz_Wn906aJ1hl-faLkffO1rwGRhEO5W21p2IGf0IW7Jkn_H0wNmg46H3LqAdELwZk3d1PAD5vbqepmeS4i52beJBlEOWqvOUTQN12z9RGRCrhakl-8b4t1rjvWg6SUcZgiPY6V-g-mCi0hVDb80b_KMzoRxvDXBuZflU6Pl66twvi4VPzfsLY52PJPHHWCBM4sVo4SjNYC2QLPH_m-15sSla8YFGV5aEYMv_raXc5GLQu41 HTTP/1.1
Host: tracking.dandeliontakeover.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: private
Content-Type: text/html; charset=utf-8
Location: https://www.dandeliontakeover.com/campaigns/vy4607l0crdbe/track-url/zv5113qps36ab/3324801af2054d2dadac55614329e4add06de17d
Server: Microsoft-IIS/10.0
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, X-ElasticEmail-ApiKey, X-ElasticEmail-BrowserToken, X-ElasticEmail-ImpersonateAs
Access-Control-Expose-Headers: X-ElasticEmail-BrowserToken, X-Total-Count, X-ElasticEmail-AccessToken
X-Robots-Tag: noindex, nofollow
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Wed, 14 Sep 2022 22:03:05 GMT
Content-Length: 239
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 14 Sep 2022 21:09:59 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: qGJpsS8MmX3-jRuU6Q77fPdJgUDYJp5picNt945DEme_KRU62YJNjg==
Age: 3186
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be88d3e043e3b95b52e41812e50fb634
0318ba1ce487817ea7cba61dd9413bed29213800
b5f178d23e633283f226cca7a9ae79b01e6cab2299ff7065c980d3a9953212fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5F178D23E633283F226CCA7A9AE79B01E6CAB2299FF7065C980D3A9953212FD"
Last-Modified: Tue, 13 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8370
Expires: Thu, 15 Sep 2022 00:22:35 GMT
Date: Wed, 14 Sep 2022 22:03:05 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 14 Sep 2022 04:35:16 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: X_4iPZOnozNND3JBFogxH4wh-KVOz8yxnIeZt0yH9Hkrsh5mAX8PMA==
age: 62870
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 22:03:05 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0b30995b8a5bf1557ecdea7028d804f3
470999b9351430e618eda9d902dbe7ad4af546cb
308499ad1e7069d456d34c4c729bc48b07923d55cf426ecfd2b21fa1a57b0c86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "308499AD1E7069D456D34C4C729BC48B07923D55CF426ECFD2B21FA1A57B0C86"
Last-Modified: Wed, 14 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21590
Expires: Thu, 15 Sep 2022 04:02:56 GMT
Date: Wed, 14 Sep 2022 22:03:06 GMT
Connection: keep-alive
www.dandeliontakeover.com/campaigns/vy4607l0crdbe/track-url/zv5113qps36ab/3324801af2054d2dadac55614329e4add06de17d
301 Moved Permanently 0 B URL HTTP/1.1 www.dandeliontakeover.com/campaigns/vy4607l0crdbe/track-url/zv5113qps36ab/3324801af2054d2dadac55614329e4add06de17d
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /campaigns/vy4607l0crdbe/track-url/zv5113qps36ab/3324801af2054d2dadac55614329e4add06de17d HTTP/1.1
Host: www.dandeliontakeover.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.20.0
Date: Wed, 14 Sep 2022 22:03:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.27
X-XSS-Protection: 1; mode=block
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Wed, 14 Sep 2022 22:03:06 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Location: https://engage.freshmarketadvantage.com/aff_c?offer_id=288&aff_id=4&aff_sub=DLTTCS109&aff_sub2=vhicks@caddis.com&aff_sub3=[SOURCEID]&aff_sub4=3424&aff_sub5=[POSTURL]&email=vhicks@caddis.com
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Wed, 14 Sep 2022 21:03:22 GMT
Cache-Control: max-age=3600
Expires: Wed, 14 Sep 2022 21:10:49 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3wCg3NDGI-vaHrZo37FsBOEXJCNBLjZJo4uAEgjQ1VGNUGGzY2uxbg==
Age: 3584
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 574e4fc6fae35fb5d0cf7d6ab4aa9755
ea5da4fb49a17f7e964495bc5851cedd82b21aa5
519659f93994c2bf932db9379fbda46233f8adf04e7c1ec3c8fa31498a34bb36
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=171590
Date: Wed, 14 Sep 2022 22:03:06 GMT
Etag: "63224ae0-1d7"
Expires: Fri, 16 Sep 2022 21:42:56 GMT
Last-Modified: Wed, 14 Sep 2022 21:42:56 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: v-9sKDliYzM6hmYMOpQYiA2KBO054DbOZEAuUPbHzMZyjsjbezxadA==
ocsp.digicert.com/
200 OK 471 B IP
Hash d3ac56507d17ffff5e8b486406985d68
17d26336cd8ea65af3f23db166945f1b3fbbfbab
e7e321340eed681c1269f715b0214e1511d5762fffbe930e7c157b800afa9a39
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6314
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 22:03:06 GMT
Last-Modified: Wed, 14 Sep 2022 20:17:52 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
engage.freshmarketadvantage.com/aff_c?offer_id=288&aff_id=4&aff_sub=DLTTCS109&aff_sub2=vhicks@caddis.com&aff_sub3=[SOURCEID]&aff_sub4=3424&aff_sub5=[POSTURL]&email=vhicks@caddis.com
302 Found 426 B URL HTTP/1.1 engage.freshmarketadvantage.com/aff_c?offer_id=288&aff_id=4&aff_sub=DLTTCS109&aff_sub2=vhicks@caddis.com&aff_sub3=[SOURCEID]&aff_sub4=3424&aff_sub5=[POSTURL]&email=vhicks@caddis.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 9b13aa34353d0026a9b2a0eed9b920d8
65f767e5f6c74d74b3be560d64cf63c645490245
bfa6726b2978bd5a162e812090ecf87bb65920d7f77155e1c30e83f491f196f7
GET /aff_c?offer_id=288&aff_id=4&aff_sub=DLTTCS109&aff_sub2=vhicks@caddis.com&aff_sub3=[SOURCEID]&aff_sub4=3424&aff_sub5=[POSTURL]&email=vhicks@caddis.com HTTP/1.1
Host: engage.freshmarketadvantage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 14 Sep 2022 22:03:06 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 426
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: https://offer.mamothloans.com?aid=503475&acid=14&subid=4:DLTTCS109&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname={fname}&lname={lname}&xi_resid={resid}&xi_oclkid={kid}
P3p: CP="NOI CUR OUR NOR INT"
Pragma: no-cache
Set-Cookie: enc_aff_session_288=ENC0328882c1fd5b467fc3010e50b201c5f01b41813fd20477c1de30a1841680c69172f39de59043d21c8e1ae8799379ee8fa048ee3b1b8f6272cae19edc0757a9147fb9e08decebc7d8e4b510462067b5675e57502dfb384053a3769ee3b88d6a83c58a050aa3a3dbb539772be3417e8167ce318ca96a344425d13ea58f0df64e785facf23123758ae6b65a80eb28042d36ab0467d9fd9cd3d299838e49bf5851db827994c73; expires=Fri, 14 Oct 2022 22:03:06 GMT; path=/; SameSite=None; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiI5Ni4wIiwibW9iaWxlX2NhcnJpZXIiOiI/IiwidXNlcl9hZ2VudCI6Ik1vemlsbGEvNS4wIChYMTE7IExpbnV4IFg4Nl82NDsgUnY6OTYuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC85Ni4wIiwiYWNjZXB0X2xhbmd1YWdlIjoiZW4tVVMsZW47cT0wLjUiLCJjb25uZWN0aW9uX3NwZWVkIjoiYnJvYWRiYW5kIn0=; expires=Sat, 09 Aug 2025 08:43:06 GMT; path=/; SameSite=None; Secure
Tracking_id: 10238036278a65bb1162c66ac3019c
X-Robots-Tag: noindex, nofollow
Access-Control-Allow-Origin: *
X-Request-Id: 773bfc991a9681e78a7729e865b0f735
Access-Control-Allow-Headers: Tune-SDK-Version
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: vpYcxEFweiGVxov1rAmvdw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: aqgdbqW8UoKyENwJeji5vq4u5PI=
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash baa93e3ee2b0caf0670dd7beef7eb1f0
4c96a76b173a9ecbaec821010f856ee63f4aff12
c9b0df74c1f960ab7ccc33601fc013045285f87c67996f023c336153f0157736
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Wed, 14 Sep 2022 22:03:06 GMT
Server: ECS (dcb/7F17)
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: i1SVZkh43ow1EfM0LP9pET14cM7B2qUxBkUcxHYI0R4HM_PCXDNcrw==
offer.mamothloans.com/?aid=503475&acid=14&subid=4:DLTTCS109&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname={fname}&lname={lname}&xi_resid={resid}&xi_oclkid={kid}
200 OK 404 B URL HTTP/2 offer.mamothloans.com/?aid=503475&acid=14&subid=4:DLTTCS109&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname={fname}&lname={lname}&xi_resid={resid}&xi_oclkid={kid}
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (664), with CRLF line terminators
Hash 9614e6d31f6e8191d63eecae58841840
33522192a73c0f52047587a40577be1f4e75fc32
07a80637909f92ea9c59c5c57c1ca5e72db55b9d4c42a6ec5b407ed7d84d6ca9
GET /?aid=503475&acid=14&subid=4:DLTTCS109&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname={fname}&lname={lname}&xi_resid={resid}&xi_oclkid={kid} HTTP/1.1
Host: offer.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:07 GMT
content-type: text/html; charset=UTF-8
content-length: 404
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.25
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-max-age: 1000
access-control-allow-headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token, accept-encoding, accept-language, host, referer, user-agent
x-powered-by: PHP/7.4.25
refresh: 1; url=https://www.mamothloans.com/?rtrcid=503475~cb737883~1618444&rtrtid=4:DLTTCS109&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={"srtr":1,"ertr":1,"psrtr":1,"bcktr":1,"pv":[11,13]}&xi_tft={"rtrcid":"503475~cb737883~1618444","xi_tier":"1"}&odata={"aid":"503475","acid":"14","subid":"4:DLTTCS109","x_offerid":"288","x_clickid":"10238036278a65bb1162c66ac3019c","email":"vhicks@caddis.com","fname":"{fname}","lname":"{lname}","xi_resid":"{resid}","xi_oclkid":"{kid}","x_psac":"3703"}
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
offer.mamothloans.com/favicon.ico
404 Not Found 196 B URL HTTP/2 offer.mamothloans.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /favicon.ico HTTP/1.1
Host: offer.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://offer.mamothloans.com/?aid=503475&acid=14&subid=4:DLTTCS109&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname={fname}&lname={lname}&xi_resid={resid}&xi_oclkid={kid}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
date: Wed, 14 Sep 2022 22:03:07 GMT
content-type: text/html; charset=iso-8859-1
content-length: 196
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.25
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-max-age: 1000
access-control-allow-headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token, accept-encoding, accept-language, host, referer, user-agent
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8944
Expires: Thu, 15 Sep 2022 00:32:11 GMT
Date: Wed, 14 Sep 2022 22:03:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8944
Expires: Thu, 15 Sep 2022 00:32:11 GMT
Date: Wed, 14 Sep 2022 22:03:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8944
Expires: Thu, 15 Sep 2022 00:32:11 GMT
Date: Wed, 14 Sep 2022 22:03:07 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f033f00-b116-4419-9d21-3aed9c73ea2e.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f033f00-b116-4419-9d21-3aed9c73ea2e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9d97e56f75165efcc71ae54952ded405
28d47359e70789115b2954b6c94711bb783b3c8c
564eac2ae99724e5f43aa1ae0afe4dec03697f888f51774e70e1b9c273c2d9d6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f033f00-b116-4419-9d21-3aed9c73ea2e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8764
x-amzn-requestid: 5f78a61a-f4c3-4f15-80e6-5d3e3e0db46f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YVa6AFvwoAMFyOA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ed83f-3e0fa606132b3cfb771af58d;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 06:57:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: kg7T9joYF6fwLTBPrmrAnWfzweJpRedkAlHkMoU5qOICjiElKHVkrQ==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 20:21:24 GMT
age: 6103
etag: "28d47359e70789115b2954b6c94711bb783b3c8c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16b1b829-b672-479c-964a-2f636f65f91e.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16b1b829-b672-479c-964a-2f636f65f91e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fef8234ab83f6f8f8b29665f592cbc9f
a3e706d6309e4a9d7b293f2b9255f1550ba5e9b7
569c8c9736026fc310e148d4d74081e96a86245baaa1f784280d44a1cbd25ed0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16b1b829-b672-479c-964a-2f636f65f91e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14151
x-amzn-requestid: d5bc9be4-af3a-40fd-bfc9-1ac4769d2d3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yauv4GhboAMF2dA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f7ff-375df72d2d67582635b9e4ae;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:37:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: CZRpgjU_AxNYoyeSTOwhJhONl2DS4pvCLJ62RgAFp0flw-kPz3GkpQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 19:32:55 GMT
age: 9012
etag: "a3e706d6309e4a9d7b293f2b9255f1550ba5e9b7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8cb650f7-1b0f-4a3d-898f-97b846afe9db.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8cb650f7-1b0f-4a3d-898f-97b846afe9db.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0789404fdbe3613d465d8fa89a63d7b8
0617d2e513097ca415a1d07cd39b1cb64d832ecf
80e55e383f354113c3694bbcc00fd1c544a97079bd3c462f1b90e952c0634bac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8cb650f7-1b0f-4a3d-898f-97b846afe9db.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10138
x-amzn-requestid: bdf798d9-6729-4363-a900-f32c4041d0c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YU5qsGZ-oAMFQ1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ea311-7b146c0620a83d5c00446f87;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 03:10:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: qXiu9j6ht1_T8fMsK5WXU-t7EQGF8tqVDO-wcl4QoFmCQEpdU5mjug==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 20:21:10 GMT
age: 6117
etag: "0617d2e513097ca415a1d07cd39b1cb64d832ecf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2b71bb0-fd92-43d0-8cd0-b426d0b88ee8.jpeg
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2b71bb0-fd92-43d0-8cd0-b426d0b88ee8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 56811a1a20a467464e1f3da171ef8b14
366b2090d409d694b72b4b4131df46dd65d69c5a
4c208fb88884166adf4ecc5882f75948b4a87d85c76ad6e7137e8edbd125c996
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2b71bb0-fd92-43d0-8cd0-b426d0b88ee8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15547
x-amzn-requestid: a78f7d90-84c3-4198-88bf-1d722c37f09f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yauv4EUDoAMF13A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f7ff-49535e5525606250306488ba;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:37:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: CWzE6n2U7hSFcSIHX5z76DPIid9pvbOqM6ikOlegBxzbuRThMeLKZA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 20:21:11 GMT
age: 6116
etag: "366b2090d409d694b72b4b4131df46dd65d69c5a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f2157f7cfbdeb607f28ae51eb090f2c3
33d0dcadaa42179b2eae914c8ad16c9c088afbc9
135cd89c2c82f0f5e53d2612d5eac868c175b28a567a07e63a2073942e36a066
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6078
x-amzn-requestid: e09c099f-5a2d-49d7-b6ab-e16f09c28bd0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YavJEEM5IAMFreQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f8a0-0fbb7b3d0cd6fbfa04f5a5d2;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:39:44 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Rx8KX_QI5I2x7q0gcvxcJX7QzZUe2KkfqAUVR64lEujF4xDEWWDhZQ==
via: 1.1 9b21fd56256eda6d1379e32829c4c446.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 20:21:10 GMT
age: 6117
etag: "33d0dcadaa42179b2eae914c8ad16c9c088afbc9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34a3d36b-806f-4fea-a370-b26c1e8473d0.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34a3d36b-806f-4fea-a370-b26c1e8473d0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f5befd5bb8e6d5dad2465be69d5a33e4
e5b46c3ca439a09950290cada1af5e27cede10f2
4dc0a3373fb4c1830c4e2420dddbcbe8dceecf10e969cbe8d02368e41207832c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34a3d36b-806f-4fea-a370-b26c1e8473d0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5988
x-amzn-requestid: a0d81c7a-14e3-443d-8fb7-19241f06d3c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yaux0H77IAMF2_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f80b-0fe6fbbe75e891b925f88dc2;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:37:15 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: sXVy7OFoVpLgfEUTqNaYBESwKOhqP9mG-uOb80Ye6bFb518BB-Panw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 20:21:11 GMT
age: 6116
etag: "e5b46c3ca439a09950290cada1af5e27cede10f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 25f3d2db821f67a575f2fc15aef202d8
35e3307f748e13b2547fc114520e15adcbdb111d
89c4984a53ae681d9e92922f476c287ad2caf1ca0aa6e70152c351477848d5e7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 14 Sep 2022 22:03:08 GMT
Last-Modified: Wed, 14 Sep 2022 20:17:00 GMT
Server: ECS (nyb/1D2B)
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: GeJm-7TRoN_qdYvh2HkBFGnORYsALg1794PiYeQb9_s1y9wKRKL01Q==
Age: 6368
img.emlasts.com/epcvip/ac-icons/spinner.gif
200 OK 73 kB URL HTTP/2 img.emlasts.com/epcvip/ac-icons/spinner.gif
IP
File type GIF image data, version 89a, 200 x 200\012- data
Hash f05d5e1f77b32a187040b0c3b3b06481
6b0728cb2b735aca08043b2e80e42e4c8e490a6c
7bf6600fc5e0e9ba6e0816783e3346ca53d016c65feac96d24da10ea307e1b08
GET /epcvip/ac-icons/spinner.gif HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
content-length: 73338
last-modified: Thu, 11 Mar 2021 23:55:10 GMT
x-amz-version-id: MXyLnF3YP.QdPE6INbkqV5vz_1brMawS
accept-ranges: bytes
server: AmazonS3
date: Wed, 14 Sep 2022 05:44:55 GMT
etag: "f05d5e1f77b32a187040b0c3b3b06481"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4mufNqB3C7_TTrUeodl4ap-w1fC5DhFShiSBa576Ob6Z9j6ilMFSSA==
age: 58694
cache-control: max-age=31536000
X-Firefox-Spdy: h2
img.emlasts.com/epcvip/ac-icons-grey/icon-ownhome.png
200 OK 6.4 kB URL HTTP/2 img.emlasts.com/epcvip/ac-icons-grey/icon-ownhome.png
IP
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 586dacd0c109fa905b7edb0ef4abdefe
3b419acc60e26aacf2a8dd1fc08460bb25f636a2
fd5bf883ed0f5bf746fd4abd0a6a43b9b19380682308aab6cae85f189ddd25a9
GET /epcvip/ac-icons-grey/icon-ownhome.png HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 6367
last-modified: Sat, 23 Nov 2019 00:18:30 GMT
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
date: Wed, 14 Sep 2022 06:29:52 GMT
etag: "586dacd0c109fa905b7edb0ef4abdefe"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pOumK_MDEJK7gNXOZVckCeQjOEZMfMEbUPje6Z1zrbD_nfR7q6uT2g==
age: 55996
cache-control: max-age=31536000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 25f3d2db821f67a575f2fc15aef202d8
35e3307f748e13b2547fc114520e15adcbdb111d
89c4984a53ae681d9e92922f476c287ad2caf1ca0aa6e70152c351477848d5e7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 14 Sep 2022 22:03:08 GMT
Last-Modified: Wed, 14 Sep 2022 21:37:55 GMT
Server: ECS (dcb/7EA5)
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: FMm22SaehTcJotGWSeT7LBIG7c-qQDPiL1AfmP7wccie9j-XmllkwA==
Age: 1513
img.emlasts.com/epcvip/ac-icons/secure-ssl3.png
200 OK 7.3 kB URL HTTP/2 img.emlasts.com/epcvip/ac-icons/secure-ssl3.png
IP
File type PNG image data, 200 x 72, 8-bit/color RGBA, non-interlaced\012- data
Hash 831f890e664ce35d7f0554e2126078aa
6ed787560e553674d14d58e279c3e299414009f8
855b0a95aeeb8aa9486858e43e750dd74ca266ffd79078426ccd1b60f5e270f2
GET /epcvip/ac-icons/secure-ssl3.png HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 7289
last-modified: Thu, 29 Oct 2020 17:38:08 GMT
x-amz-version-id: wR0zkLiUqp1C6RY7mam1Yg4lA3JtwZ0j
accept-ranges: bytes
server: AmazonS3
date: Wed, 14 Sep 2022 05:37:21 GMT
etag: "831f890e664ce35d7f0554e2126078aa"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HvnCrHOR4C-j2kuY0pAqr6zMDg8pIHJff5-DrsHUx8IPHR3cpaPygg==
age: 59148
cache-control: max-age=31536000
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 25f3d2db821f67a575f2fc15aef202d8
35e3307f748e13b2547fc114520e15adcbdb111d
89c4984a53ae681d9e92922f476c287ad2caf1ca0aa6e70152c351477848d5e7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Wed, 14 Sep 2022 22:03:08 GMT
Server: ECS (dcb/7FA3)
X-Cache: Miss from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: bhJ_c7hlIgTc6CHoSH9yuR51TaddwWshDdHQosP1p2xED_ssBq77Og==
www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/css/google_fonts.css?version=1663143909
200 OK 1.2 kB URL HTTP/2 www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/css/google_fonts.css?version=1663143909
IP
Hash 8108c6011ba65ac5f0610b05074e9950
5f39fe89039d79a2926d9256081cd91497203964
b0c689c20a67111ad0b928d9be91f0aa8e2847e4719b00e9c1b18dd484859436
GET /common/assets/js/funnel/pvexl42step/final/lib/css/google_fonts.css?version=1663143909 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cb737883~1618444&rtrtid=4:DLTTCS109&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cb737883~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%224:DLTTCS109%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%2210238036278a65bb1162c66ac3019c%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=5kvm8n6vbgk40hikgchimict6u
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:08 GMT
content-type: text/css
content-length: 1167
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Wed, 14 Sep 2022 08:25:09 GMT
etag: "161a-5e89eddeef973-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 25f3d2db821f67a575f2fc15aef202d8
35e3307f748e13b2547fc114520e15adcbdb111d
89c4984a53ae681d9e92922f476c287ad2caf1ca0aa6e70152c351477848d5e7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Wed, 14 Sep 2022 22:03:08 GMT
Server: ECS (dcb/7ECB)
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: EQk_0nJvwr74ufyg8iO5xSovSRSIpHPJoA1P_En0xhxe5NGNJ1COcA==
www.mamothloans.com/common/template/funnel/pvexl42step/L4/DynamicRLA-wCS/style.css?version=1663143909
200 OK 6.6 kB URL HTTP/2 www.mamothloans.com/common/template/funnel/pvexl42step/L4/DynamicRLA-wCS/style.css?version=1663143909
IP
Hash 848a84c24b0ab976b9d36a4ea9428bb8
bcb930bd62ed9b65bdc0aea3d690f9b2c3972960
c4516c421c694c714d7f2b5b4d01ef12629ec400f34c431dd9c1e4833fe7467f
GET /common/template/funnel/pvexl42step/L4/DynamicRLA-wCS/style.css?version=1663143909 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cb737883~1618444&rtrtid=4:DLTTCS109&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cb737883~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%224:DLTTCS109%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%2210238036278a65bb1162c66ac3019c%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=5kvm8n6vbgk40hikgchimict6u
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:08 GMT
content-type: text/css
content-length: 6612
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Wed, 14 Sep 2022 08:25:09 GMT
etag: "6307-5e89eddf69a9a-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
img.emlasts.com/epcvip/ac-icons/icon_success.png
200 OK 12 kB URL HTTP/2 img.emlasts.com/epcvip/ac-icons/icon_success.png
IP
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 646beb0fefb01ebf9006e7722c5b4611
17cb12b9b3ae6322c8dcf28f5e3832910e384525
bcba7e55c4cbbebd3ab071c189c875aebd5999ecd1c7ef835da7fed4e81bb692
GET /epcvip/ac-icons/icon_success.png HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 11695
last-modified: Thu, 11 Mar 2021 22:01:06 GMT
x-amz-version-id: vue7UWARodNTQ1z3_MZFfQrXOvBUZEpx
accept-ranges: bytes
server: AmazonS3
date: Wed, 14 Sep 2022 06:38:14 GMT
etag: "646beb0fefb01ebf9006e7722c5b4611"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: i_LdMKNWW4ENG18nijLaSL8kb1ZDXcp86G_JFphb0mE8vPGGT1g7mg==
age: 55495
cache-control: max-age=31536000
X-Firefox-Spdy: h2
www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_cookie_141.js?version=1663143909
200 OK 696 B URL HTTP/2 www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_cookie_141.js?version=1663143909
IP
File type ASCII text, with very long lines (1266)
Hash 61d49a466143545253d40c6c6a91226d
4f7f06c8b9794690bf1d513126156b46185a6c30
7319fe517f9aac436543b8bc617df02f653023519622d8a0c064368946961f5a
GET /common/assets/js/funnel/pvexl42step/final/lib/js/jquery_cookie_141.js?version=1663143909 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cb737883~1618444&rtrtid=4:DLTTCS109&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cb737883~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%224:DLTTCS109%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%2210238036278a65bb1162c66ac3019c%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=5kvm8n6vbgk40hikgchimict6u
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:08 GMT
content-type: application/javascript
content-length: 696
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Tue, 13 Sep 2022 08:21:03 GMT
etag: "514-5e88ab173dffd-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 25f3d2db821f67a575f2fc15aef202d8
35e3307f748e13b2547fc114520e15adcbdb111d
89c4984a53ae681d9e92922f476c287ad2caf1ca0aa6e70152c351477848d5e7
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Wed, 14 Sep 2022 22:03:08 GMT
Etag: "6321da43-1d7"
Server: ECS (dcb/7FA3)
X-Cache: Miss from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: BzpYb-UuHoh-jDSOiDBDVDND6jmYQF9PQXM-UqPCOA5pyUjg_z0TmA==
img.emlasts.com/epcvip/ac-icons/worker-07.jpg
200 OK 27 kB URL HTTP/2 img.emlasts.com/epcvip/ac-icons/worker-07.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x400, components 3\012- data
Hash c43fbbb54845c8a46eaaa9a547653b39
d4a6699278f98dc83a445e511950fbe665d169a8
1f1f396e24884a8c24ba29fb60b167cd51c64b22cab0922c4b43e629fdf29b9f
GET /epcvip/ac-icons/worker-07.jpg HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
content-length: 26786
last-modified: Thu, 01 Apr 2021 22:04:51 GMT
x-amz-version-id: 7w7isLoDcH69.UW.mZA695oQSQH5X2uL
accept-ranges: bytes
server: AmazonS3
date: Wed, 14 Sep 2022 04:45:52 GMT
etag: "c43fbbb54845c8a46eaaa9a547653b39"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DTI_4RuSyev1ziwuoISsxzi6TCNh2dsa1k0xHfNF9yy_c9NEKSiCwg==
age: 62237
cache-control: max-age=31536000
X-Firefox-Spdy: h2
img.emlasts.com/epcvip/ac-icons/chevron-right.png
200 OK 280 B URL HTTP/2 img.emlasts.com/epcvip/ac-icons/chevron-right.png
IP
File type PNG image data, 13 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 8608fe7805f9b2cc600d488487ae4b8f
77905d057928f48036bbd182f0b3306b76d7486c
bd0f9937b7933017c088172977ba87a577e80f1786c30ee92cc4030690b1fd69
GET /epcvip/ac-icons/chevron-right.png HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 280
last-modified: Thu, 11 Mar 2021 23:32:01 GMT
x-amz-version-id: eGPQONq.wABFUcImR8OR.6golFu.9eyT
accept-ranges: bytes
server: AmazonS3
date: Wed, 14 Sep 2022 05:37:20 GMT
etag: "8608fe7805f9b2cc600d488487ae4b8f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: W8_tZUdL4UOGcJt56K0yIvysNFwAJlnCdzu0wLdbRlPl2gaAMm0qJw==
age: 59149
cache-control: max-age=31536000
X-Firefox-Spdy: h2
offer.mamothloans.com/pxl.php?rxid=503475~cb737883~1618444&tdat=4:DLTTCS109&evt=J1
200 OK 43 B URL HTTP/2 offer.mamothloans.com/pxl.php?rxid=503475~cb737883~1618444&tdat=4:DLTTCS109&evt=J1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 55fade2068e7503eae8d7ddf5eb6bd09
317496a096d6c86486a71d4521994bcd171a6bb3
e586a84d8523747f42e510d78e141015b6424cf67d612854e892a7bcedc8ec9e
GET /pxl.php?rxid=503475~cb737883~1618444&tdat=4:DLTTCS109&evt=J1 HTTP/1.1
Host: offer.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:08 GMT
content-type: image/gif
content-length: 43
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.25
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE, PUT
access-control-max-age: 1000
access-control-allow-headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token, accept-encoding, accept-language, host, referer, user-agent
x-powered-by: PHP/7.4.25
vary: User-Agent
X-Firefox-Spdy: h2
www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_validation_methods_119.js?version=1663143909
200 OK 7.8 kB URL HTTP/2 www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_validation_methods_119.js?version=1663143909
IP
File type Unicode text, UTF-8 text, with very long lines (22514)
Hash 6834ecad7088cefc2a704c93a45f06e7
e41df4f655ec226532df22891793f50f9dbebd6d
f07e88fdfdfda9917a7f371a6ef10032bacd13e328e6e71ebca7398c9b28ec86
GET /common/assets/js/funnel/pvexl42step/final/lib/js/jquery_validation_methods_119.js?version=1663143909 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cb737883~1618444&rtrtid=4:DLTTCS109&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cb737883~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%224:DLTTCS109%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%2210238036278a65bb1162c66ac3019c%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=5kvm8n6vbgk40hikgchimict6u
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:08 GMT
content-type: application/javascript
content-length: 7805
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Wed, 14 Sep 2022 08:25:09 GMT
etag: "5883-5e89eddef4793-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_validate_119.js?version=1663143909
200 OK 9.7 kB URL HTTP/2 www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_validate_119.js?version=1663143909
IP
File type Unicode text, UTF-8 text, with very long lines (24292)
Hash 2d29a91f4da2add72ef6d7a71d2a29a6
67a3dfcd09c184128f76d7b3a33507f0ae3d86ee
9fe41ee1c8bbe47173dd9fd6cd6951029df7fb6f90c89513570b1ed95305d3ab
GET /common/assets/js/funnel/pvexl42step/final/lib/js/jquery_validate_119.js?version=1663143909 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cb737883~1618444&rtrtid=4:DLTTCS109&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cb737883~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%224:DLTTCS109%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%2210238036278a65bb1162c66ac3019c%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=5kvm8n6vbgk40hikgchimict6u
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:08 GMT
content-type: application/javascript
content-length: 9726
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Tue, 13 Sep 2022 08:21:03 GMT
etag: "5f6e-5e88ab173dffd-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_mask_114.js?version=1663143909
200 OK 3.7 kB URL HTTP/2 www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_mask_114.js?version=1663143909
IP
File type ASCII text, with very long lines (1024)
Hash 6e4835c7754f969f87db2aec362f93d7
5e99b01c948bca2ce3f1b464420ca24008869516
e37e47c1692b9f3d3f4fecb8530b88330559c88aa29e4697d85dccd774e4e6c8
GET /common/assets/js/funnel/pvexl42step/final/lib/js/jquery_mask_114.js?version=1663143909 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cb737883~1618444&rtrtid=4:DLTTCS109&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cb737883~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%224:DLTTCS109%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%2210238036278a65bb1162c66ac3019c%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=5kvm8n6vbgk40hikgchimict6u
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:08 GMT
content-type: application/javascript
content-length: 3741
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Tue, 13 Sep 2022 08:21:03 GMT
etag: "218e-5e88ab173dffd-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/bootstrap_341.js?version=1663143909
200 OK 15 kB URL HTTP/2 www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/bootstrap_341.js?version=1663143909
IP
File type ASCII text, with very long lines (39553)
Hash 4ca1581bbfa1769fd90081a0d3b217db
aa70415458ccab5aaefabac126a0e32197cad909
3a1f15a5e529a47aa078b75a643bc3c3d9755d11745e231423074883a394526f
GET /common/assets/js/funnel/pvexl42step/final/lib/js/bootstrap_341.js?version=1663143909 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cb737883~1618444&rtrtid=4:DLTTCS109&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cb737883~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%224:DLTTCS109%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%2210238036278a65bb1162c66ac3019c%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=5kvm8n6vbgk40hikgchimict6u
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:08 GMT
content-type: application/javascript
content-length: 15342
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Wed, 14 Sep 2022 08:25:09 GMT
etag: "9b00-5e89eddeef973-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
www.mamothloans.com/common/assets/js/global/lazysizes.min.js?version=1663143909
200 OK 3.5 kB URL HTTP/2 www.mamothloans.com/common/assets/js/global/lazysizes.min.js?version=1663143909
IP
File type ASCII text, with very long lines (6761)
Hash ca6266d69da1d8eb8e6875062b3a2b1f
6599d22230cc84fba297b588ba1184aaf1d299fa
9d2dcd6895f7d1ef4dbe6c772cb2357b9eab6192440a650b84b7c2b31fb0c9cc
GET /common/assets/js/global/lazysizes.min.js?version=1663143909 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cb737883~1618444&rtrtid=4:DLTTCS109&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cb737883~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%224:DLTTCS109%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%2210238036278a65bb1162c66ac3019c%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=5kvm8n6vbgk40hikgchimict6u
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:08 GMT
content-type: application/javascript
content-length: 3454
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Wed, 14 Sep 2022 08:25:09 GMT
etag: "1a83-5e89eddf3ac97-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
www.mamothloans.com/?rtrcid=503475~cb737883~1618444&rtrtid=4:DLTTCS109&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cb737883~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%224:DLTTCS109%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%2210238036278a65bb1162c66ac3019c%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%223703%22}
200 OK 37 kB URL HTTP/2 www.mamothloans.com/?rtrcid=503475~cb737883~1618444&rtrtid=4:DLTTCS109&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cb737883~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%224:DLTTCS109%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%2210238036278a65bb1162c66ac3019c%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%223703%22}
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1950)
Hash eaad9a40f39376ea0a55ffb6b196d4fd
98fda6aa0f4920cfc72e36708e3bdc1d65b4e108
fadd06d14fd30a33ddbff965c224183e3c73f91fa90854cb0b98d4fb15cb0e64
GET /?rtrcid=503475~cb737883~1618444&rtrtid=4:DLTTCS109&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cb737883~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%224:DLTTCS109%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%2210238036278a65bb1162c66ac3019c%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%223703%22} HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://offer.mamothloans.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:08 GMT
content-type: text/html; charset=UTF-8
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
x-powered-by: PHP/7.4.30
set-cookie: SCSSESSIONID=5kvm8n6vbgk40hikgchimict6u; expires=Thu, 15-Sep-2022 06:03:07 GMT; Max-Age=28800; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
www.mamothloans.com/common/assets/js/global/noSleep.min.js?version=1663143909
200 OK 7.4 kB URL HTTP/2 www.mamothloans.com/common/assets/js/global/noSleep.min.js?version=1663143909
IP
File type ASCII text, with very long lines (16658)
Hash cc72b9cea8878304f558e99f7dfc7c34
bb749c9280dacd9ff76af6fc745d280fc0e4ad4a
3a7c696703ea3fea8ae4bdde898b184fb188474869aac897dfa65625f0dbedb5
GET /common/assets/js/global/noSleep.min.js?version=1663143909 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cb737883~1618444&rtrtid=4:DLTTCS109&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cb737883~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%224:DLTTCS109%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%2210238036278a65bb1162c66ac3019c%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=5kvm8n6vbgk40hikgchimict6u
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:08 GMT
content-type: application/javascript
content-length: 7378
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Wed, 14 Sep 2022 08:25:09 GMT
etag: "415c-5e89eddf3ac97-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_steps_110.js?version=1663143909
200 OK 5.9 kB URL HTTP/2 www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_steps_110.js?version=1663143909
IP
File type ASCII text, with very long lines (13686)
Hash 9122fadc073d660ce3ee7c3afbb02d2b
5df9c5da5c7f71e43961fcd601aa0d6969212005
54a75ab40ca4289011a1355bbd2078e80be34c7d6c1933a24e528d82a5957d7c
GET /common/assets/js/funnel/pvexl42step/final/lib/js/jquery_steps_110.js?version=1663143909 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cb737883~1618444&rtrtid=4:DLTTCS109&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cb737883~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%224:DLTTCS109%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%2210238036278a65bb1162c66ac3019c%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=5kvm8n6vbgk40hikgchimict6u
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:08 GMT
content-type: application/javascript
content-length: 5931
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Wed, 14 Sep 2022 08:25:09 GMT
etag: "3620-5e89eddef37f3-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
img.emlasts.com/epcvip/ac-icons/asterisks.png
200 OK 587 B URL HTTP/2 img.emlasts.com/epcvip/ac-icons/asterisks.png
IP
File type PNG image data, 184 x 42, 8-bit colormap, non-interlaced\012- data
Hash 4b7874d634e9faa2470b05f42b731aa0
dcfb3eab7ccc349b47196d1354387ad204c62e2c
22e29b0f2fa3e4c59fbed79e72c2b339a4ea76f9d6ddd5eba59c0e668bf0b1b8
GET /epcvip/ac-icons/asterisks.png HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 587
last-modified: Tue, 06 Apr 2021 21:06:50 GMT
x-amz-version-id: 3gNNo2cxRohJ_8ZRm9kVCxwIRHxSx4ek
accept-ranges: bytes
server: AmazonS3
date: Wed, 14 Sep 2022 03:07:40 GMT
etag: "4b7874d634e9faa2470b05f42b731aa0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TPk_9pi-43_4i3qAV2ZTzzzPjBnKPRCqr7AbFtAWEob1Pnn48RnV3Q==
age: 68130
cache-control: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d5a5d04d15c71a4e71821b6ddd4110e0
7c5495f9d4165a90ce681ddd1b330675e55a4993
545c765db5e55c1d89bc56d93a3cde1a3b6f5c9d741ad9b58253f9fd7ab24457
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 22:03:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d5a5d04d15c71a4e71821b6ddd4110e0
7c5495f9d4165a90ce681ddd1b330675e55a4993
545c765db5e55c1d89bc56d93a3cde1a3b6f5c9d741ad9b58253f9fd7ab24457
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 22:03:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d5a5d04d15c71a4e71821b6ddd4110e0
7c5495f9d4165a90ce681ddd1b330675e55a4993
545c765db5e55c1d89bc56d93a3cde1a3b6f5c9d741ad9b58253f9fd7ab24457
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 22:03:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d5a5d04d15c71a4e71821b6ddd4110e0
7c5495f9d4165a90ce681ddd1b330675e55a4993
545c765db5e55c1d89bc56d93a3cde1a3b6f5c9d741ad9b58253f9fd7ab24457
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 22:03:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d5a5d04d15c71a4e71821b6ddd4110e0
7c5495f9d4165a90ce681ddd1b330675e55a4993
545c765db5e55c1d89bc56d93a3cde1a3b6f5c9d741ad9b58253f9fd7ab24457
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 22:03:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/css/bootstrap_337.css?version=1663143909
200 OK 35 kB URL HTTP/2 www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/css/bootstrap_337.css?version=1663143909
IP
Hash 45f59b0dd9da9d2964d19059dc7301af
51337a54cea36b58f2903a56d7c72b4912fe3679
947764397a55525332d0973515b504b4469abf4f3454b0ad9dc904ea5d5660a7
GET /common/assets/js/funnel/pvexl42step/final/lib/css/bootstrap_337.css?version=1663143909 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cb737883~1618444&rtrtid=4:DLTTCS109&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cb737883~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%224:DLTTCS109%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%2210238036278a65bb1162c66ac3019c%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=5kvm8n6vbgk40hikgchimict6u
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:08 GMT
content-type: text/css
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Wed, 14 Sep 2022 08:25:09 GMT
etag: "1d942-5e89eddeef973-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v15/pxiByp8kv8JHgFVrLCz7Z1xlFd2JQEk.woff2
200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v15/pxiByp8kv8JHgFVrLCz7Z1xlFd2JQEk.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7832, version 1.0\012- data
Hash f4f17fd53c7d040e56f91a3ecb692b22
1b51342175762634835645ba2f99cd3ab0ac615c
b0b43e548e691662dac85b1dc159d148a273d5cb9139f3fcf457cdeebe7bdf3f
GET /s/poppins/v15/pxiByp8kv8JHgFVrLCz7Z1xlFd2JQEk.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mamothloans.com
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Sep 2022 10:12:22 GMT
expires: Wed, 13 Sep 2023 10:12:22 GMT
cache-control: public, max-age=31536000
age: 129047
last-modified: Thu, 05 Nov 2020 22:01:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v15/pxiByp8kv8JHgFVrLGT9Z1xlFd2JQEk.woff2
200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v15/pxiByp8kv8JHgFVrLGT9Z1xlFd2JQEk.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7776, version 1.0\012- data
Hash 84780596e268aa0cb2be48af2ed5c375
d67ccd32f8c790a746d64d06145882a2f7b06560
d7ba57e3ccc2e3b2bdf8cc9e613194b802607682bf473293c2e3e29de82c9491
GET /s/poppins/v15/pxiByp8kv8JHgFVrLGT9Z1xlFd2JQEk.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mamothloans.com
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Sep 2022 06:10:14 GMT
expires: Wed, 13 Sep 2023 06:10:14 GMT
cache-control: public, max-age=31536000
age: 143575
last-modified: Thu, 05 Nov 2020 22:01:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v15/pxiByp8kv8JHgFVrLEj6Z1xlFd2JQEk.woff2
200 OK 8.0 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v15/pxiByp8kv8JHgFVrLEj6Z1xlFd2JQEk.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7988, version 1.0\012- data
Hash 087457026965f98466618a478c4b1b07
00b024ccb35e3694de662d180d6ea7f56de6d654
b93b9165269362989e2855d0bf0ae232d7193a45c43627b2d03b26d7eb98263b
GET /s/poppins/v15/pxiByp8kv8JHgFVrLEj6Z1xlFd2JQEk.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mamothloans.com
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7988
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Sep 2022 00:52:26 GMT
expires: Sat, 09 Sep 2023 00:52:26 GMT
cache-control: public, max-age=31536000
age: 508243
last-modified: Thu, 05 Nov 2020 22:02:15 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v15/pxiByp8kv8JHgFVrLDD4Z1xlFd2JQEk.woff2
200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v15/pxiByp8kv8JHgFVrLDD4Z1xlFd2JQEk.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7844, version 1.0\012- data
Hash 93c0db9332c3f46d1842b36bcf89dac0
7d5057e994e405022a1bfa3c6c668028ac222532
e28d860a51754d183f6f97432fd94046cd31afb7ce65c8ea179b0ff63b3d84fa
GET /s/poppins/v15/pxiByp8kv8JHgFVrLDD4Z1xlFd2JQEk.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.mamothloans.com
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7844
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Sep 2022 08:10:04 GMT
expires: Fri, 08 Sep 2023 08:10:04 GMT
cache-control: public, max-age=31536000
age: 568385
last-modified: Thu, 05 Nov 2020 22:01:51 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d5a5d04d15c71a4e71821b6ddd4110e0
7c5495f9d4165a90ce681ddd1b330675e55a4993
545c765db5e55c1d89bc56d93a3cde1a3b6f5c9d741ad9b58253f9fd7ab24457
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 22:03:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img.emlasts.com/epcvip/ac-icons/point_cards.png
200 OK 2.9 kB URL HTTP/2 img.emlasts.com/epcvip/ac-icons/point_cards.png
IP
File type PNG image data, 85 x 85, 8-bit/color RGBA, non-interlaced\012- data
Hash eeeda29d39302be45f4c1f4617975b11
09753ab28d2c6d7e8f5db1c1d7ad03a674b61e97
50e8f37b4bb0ecd3bae73788be069b5b9578da527040124676cd3d257ac2d247
GET /epcvip/ac-icons/point_cards.png HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2871
last-modified: Tue, 23 Mar 2021 22:56:35 GMT
x-amz-version-id: 4FoewmqY5fkC9PQVQvhlQzDPeayvKJ7k
accept-ranges: bytes
server: AmazonS3
date: Wed, 14 Sep 2022 08:07:19 GMT
etag: "eeeda29d39302be45f4c1f4617975b11"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iCC_kj_VH3bPVh7MWYkPuf_kvnzFDKhWi1noTBmoSBrqNbeVBs68rw==
age: 50151
cache-control: max-age=31536000
X-Firefox-Spdy: h2
img.emlasts.com/epcvip/ac-icons/point_online.png
200 OK 1.7 kB URL HTTP/2 img.emlasts.com/epcvip/ac-icons/point_online.png
IP
File type PNG image data, 85 x 85, 8-bit/color RGBA, non-interlaced\012- data
Hash b7106637d27b8935b243868d559964d9
a7af18522be80b76e2ff69b6b3e67e9afa143bae
eee7b579b6209a4d45aaf94fefb1c04908ad8021250e3b73e84be24475afafb2
GET /epcvip/ac-icons/point_online.png HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1716
last-modified: Tue, 23 Mar 2021 22:56:35 GMT
x-amz-version-id: cNjZgvknIhiZHhv31pjFkikTELtLDYxY
accept-ranges: bytes
server: AmazonS3
date: Wed, 14 Sep 2022 03:07:41 GMT
etag: "b7106637d27b8935b243868d559964d9"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TtPkG8hhqOpfeRYajItZKwIItMzZaYB0bK9Llw-PFlzPWRTrqI3sMg==
age: 68129
cache-control: max-age=31536000
X-Firefox-Spdy: h2
img.emlasts.com/epcvip/ac-icons/point_bank.png
200 OK 2.0 kB URL HTTP/2 img.emlasts.com/epcvip/ac-icons/point_bank.png
IP
File type PNG image data, 85 x 85, 8-bit/color RGBA, non-interlaced\012- data
Hash aa079a92b89893842226149cf779d8b0
145f7b66882deb3d08b77416cdf30f2a87c6828a
21dff3be1d7fc41ebada2386ffcf13261bf0adae089902012b3d1c0df1492432
GET /epcvip/ac-icons/point_bank.png HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1963
last-modified: Tue, 23 Mar 2021 22:56:35 GMT
x-amz-version-id: qHFNgw0Eq5FCoyIyUa88cwP9.EslyGYg
accept-ranges: bytes
server: AmazonS3
date: Wed, 14 Sep 2022 09:34:42 GMT
etag: "aa079a92b89893842226149cf779d8b0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tddfiAFYp9gLHK1yETFjnMd475uaz7b0XME7VtpS1YvAXOxHTkwUhA==
age: 44908
cache-control: max-age=31536000
X-Firefox-Spdy: h2
img.emlasts.com/epcvip/ac-icons/point_require.png
200 OK 2.5 kB URL HTTP/2 img.emlasts.com/epcvip/ac-icons/point_require.png
IP
File type PNG image data, 85 x 85, 8-bit/color RGBA, non-interlaced\012- data
Hash 5131654e37c3fe6c3ddbed25e397e136
cab55bc50213b84b088e65fe44ee9c9f1a41ea2e
421a6e46be6f1fea476a59431f97eff87b1b888cdcde020d6e75ff767649f34d
GET /epcvip/ac-icons/point_require.png HTTP/1.1
Host: img.emlasts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 2495
last-modified: Tue, 23 Mar 2021 22:56:36 GMT
x-amz-version-id: lHlHEphfWqC3XH.CuG3_CDT5vzRlR2q8
accept-ranges: bytes
server: AmazonS3
date: Wed, 14 Sep 2022 02:11:22 GMT
etag: "5131654e37c3fe6c3ddbed25e397e136"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9AO9StzkwIxR8ub1klulIDQ0124PoojEKP3WzRE03VByNK07eH-5-Q==
age: 71508
cache-control: max-age=31536000
X-Firefox-Spdy: h2
www.mamothloans.com/assets/img/logo.png
200 OK 15 kB URL HTTP/2 www.mamothloans.com/assets/img/logo.png
IP
File type PNG image data, 422 x 111, 8-bit/color RGBA, non-interlaced\012- data
Hash f93d85bdc9d017f6b40945b2faba8591
2f14e48da9997212ae945614fa992ae07f9d8884
70e61df5ea30b4b1c0df1095aa20d6865450c4201de9b2369964aff649c1acaf
GET /assets/img/logo.png HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cb737883~1618444&rtrtid=4:DLTTCS109&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cb737883~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%224:DLTTCS109%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%2210238036278a65bb1162c66ac3019c%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=5kvm8n6vbgk40hikgchimict6u
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:09 GMT
content-type: image/png
content-length: 15325
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Tue, 13 Sep 2022 08:49:55 GMT
etag: "3bdd-5e88b18af69c1"
accept-ranges: bytes
vary: User-Agent
X-Firefox-Spdy: h2
www.mamothloans.com/apple-touch-icon.png?version=1663145484
200 OK 27 kB URL HTTP/2 www.mamothloans.com/apple-touch-icon.png?version=1663145484
IP
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash fbcdf1580e41fb965f3f0fd073621d81
3e43db98e8c01324985c0509fb4eb760212d32f3
2e0981f7bc33a300ab0475729546a923229ebcc89e18fcbe83e7e4892a068676
GET /apple-touch-icon.png?version=1663145484 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cb737883~1618444&rtrtid=4:DLTTCS109&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cb737883~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%224:DLTTCS109%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%2210238036278a65bb1162c66ac3019c%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=5kvm8n6vbgk40hikgchimict6u
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:09 GMT
content-type: image/png
content-length: 26781
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Wed, 14 Sep 2022 08:51:24 GMT
etag: "689d-5e89f3bd115c8"
accept-ranges: bytes
vary: User-Agent
X-Firefox-Spdy: h2
www.mamothloans.com/favicon-16x16.png?version=1663145484
200 OK 1.4 kB URL HTTP/2 www.mamothloans.com/favicon-16x16.png?version=1663145484
IP
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 559fca6d521cc4fe464e7b3349519885
c989a15eb183db6409f8a503a7420297c98277dc
9d338a3bdcee4544a20458a8dc6af692e6c26103d5ee8c8138e39899a577a98f
GET /favicon-16x16.png?version=1663145484 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cb737883~1618444&rtrtid=4:DLTTCS109&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cb737883~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%224:DLTTCS109%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%2210238036278a65bb1162c66ac3019c%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=5kvm8n6vbgk40hikgchimict6u
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:09 GMT
content-type: image/png
content-length: 1435
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Wed, 14 Sep 2022 08:51:24 GMT
etag: "59b-5e89f3bd357ea"
accept-ranges: bytes
vary: User-Agent
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 72ddec9e00bfcb021f67710d6e2e0d03
fd14807c89582040bafe785c2189dbdc77b5c38b
a4d76f1cecaf560ed9184cb65ac213c78dc8e5d22ebae8380411443a0b5f1f0f
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 14 Sep 2022 22:03:10 GMT
Last-Modified: Wed, 14 Sep 2022 21:02:20 GMT
Server: ECS (dcb/7F84)
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: fH2AbshPjRVHnLs1qAD5RtK5CnRzAnh7QWDkAP9gnoDQIIwP-BDpNA==
Age: 3650
static.zdassets.com/web_widget/latest/classic/web-widget-classic-90bee35.js
200 OK 56 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-classic-90bee35.js
IP
File type ASCII text, with very long lines (13518), with no line terminators
Hash 68673c2a5ab3e952a14f7b81915d56dd
4fae9c60a952bc1f0d6bdbe9541d6380057f36f5
e2b5231d25a8ce0f604f4c3fbe5ffe2f3ced58ceb065b54ab167736127f4c7ae
GET /web_widget/latest/classic/web-widget-classic-90bee35.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:09 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: R6CSDxzU9Wnglr6kvPZu/J9VLysqmDotyPQyq3mi+6hBsosOFq54N6Y2lgmpr6XB/9zmS4BEtM8=
x-amz-request-id: Y8G46Z2A9BVK85EQ
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 23:59:37 GMT
etag: W/"acc0272ff26f9e9f07f375360e97f9c4"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 07 Sep 2023 23:59:36 GMT
x-amz-version-id: fC22iUBU7.KcVnEhTOoxgXWcov6IU0Ga
cf-cache-status: HIT
age: 57602
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BQ%2Bk9puuR0fioxKsyNuHTzOO8WY2jrblUzLJuaMeosoDmTeCcHPM4YLr%2Fs9KjrNlLrVfWXuvoaN0X1VBXhvSR6buuc5dmCCh28RefIbaCgDa3NHrpuZrHLGylhz0ApF162YJsK8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 74ac6939ba9d0b06-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-chat-incoming-message-notification-90bee35.js
200 OK 20 kB URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-chat-incoming-message-notification-90bee35.js
IP
File type ASCII text, with no line terminators
Hash 7ecbeb9fbae3abfe6ebd258f7d0b9ad3
c51d653cfe5d82402b6d029ad66022cc42cbe190
5dc737f70ad8bc7f9aa0e601985b1c5fba3120f71f3bb29387c12b1df54b5059
GET /web_widget/latest/classic/web-widget-chat-incoming-message-notification-90bee35.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:10 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: N1kVl74/X3OYTs7Jl1BFTu7vNQkAt6QPEEOIFEHAwN3L87DSQUHztGurfkg6JqHsh1LJ3iH2dsI=
x-amz-request-id: DNKR5JQ49G4MHGQC
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 23:59:37 GMT
etag: W/"659635f5ad1b6653645380f46aa42236"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 07 Sep 2023 23:59:36 GMT
x-amz-version-id: 5A2.9PZUQ4wJX4xpWHxXfUA4.YVuy4NW
cf-cache-status: HIT
age: 57601
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ToSC8wkPotFdvyCNgZUpgMhwxs%2BW0MSpO1WvRPH8xNNTqz9VGHI7BGc%2BBMkq7%2FbImBQSleG%2F9zWAt0SBzLHCZX%2Blet%2F3VROWTPwVTFuLuWXWeGoFIgYukb1w5adgF4jMHkFgHn0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 74ac693f4f0c0b06-OSL
content-encoding: br
X-Firefox-Spdy: h2
ekr.zdassets.com/compose/045675ec-ff49-47ff-8850-a8e0143537be
200 OK 0 B URL HTTP/2 ekr.zdassets.com/compose/045675ec-ff49-47ff-8850-a8e0143537be
IP
GET /compose/045675ec-ff49-47ff-8850-a8e0143537be HTTP/1.1
Host: ekr.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.mamothloans.com
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:09 GMT
content-type: application/json; charset=utf-8
status: 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers:
access-control-max-age: 7200
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cache-control: max-age=600, public, s-maxage=60, stale-while-revalidate=600, stale-if-error=3600
etag: W/"7425a42ea21c40281a631af5e72266d4"
x-request-id: 3b12319a803a9098240a49652cf9e0cf, 3b12319a803a9098240a49652cf9e0cf
x-runtime: 0.001712
vary: Origin, Accept-Encoding
x-zendesk-zorg: yes
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DQhDPJiES0QpWaHgIVoPECvXpgGwQ9KcEYUC1ZKGKchwVtNtfYTiXXvR326rfimhpgBToffnuSduDfKe1YSsaPbq4a5IHdTFVJFcu1Fctz7gP%2B%2F9x8zDf%2FBfX5CicS9N9QY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 74ac6936cbc01c06-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_360.js?version=1663143909
200 OK 0 B URL HTTP/2 www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_360.js?version=1663143909
IP
GET /common/assets/js/funnel/pvexl42step/final/lib/js/jquery_360.js?version=1663143909 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cb737883~1618444&rtrtid=4:DLTTCS109&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cb737883~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%224:DLTTCS109%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%2210238036278a65bb1162c66ac3019c%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=5kvm8n6vbgk40hikgchimict6u
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:08 GMT
content-type: application/javascript
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Wed, 14 Sep 2022 08:25:09 GMT
etag: "15d9c-5e89eddef37f3-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_ui_112.js?version=1663143909
200 OK 0 B URL HTTP/2 www.mamothloans.com/common/assets/js/funnel/pvexl42step/final/lib/js/jquery_ui_112.js?version=1663143909
IP
GET /common/assets/js/funnel/pvexl42step/final/lib/js/jquery_ui_112.js?version=1663143909 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cb737883~1618444&rtrtid=4:DLTTCS109&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cb737883~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%224:DLTTCS109%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%2210238036278a65bb1162c66ac3019c%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=5kvm8n6vbgk40hikgchimict6u
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:08 GMT
content-type: application/javascript
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Wed, 14 Sep 2022 08:25:09 GMT
etag: "3ddf1-5e89eddef37f3-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/web-widget-framework-5b7452867b0bdc119349.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/web-widget-framework-5b7452867b0bdc119349.js
IP
GET /web_widget/latest/web-widget-framework-5b7452867b0bdc119349.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:09 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: BKmyICt9QkV+RPev8Y7yzzEep8aEJfIlEBYRJ6XtbfzGVCDH+M4vjs8ratK91Kr+epZxZgJNueU=
x-amz-request-id: Y8G6BHF5C4X9FS5V
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 23:59:24 GMT
etag: W/"1ca4c184eab3ff777753a0863d8dbce4"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 07 Sep 2023 23:59:23 GMT
x-amz-version-id: FNHCq25cugRsETU3qoOa8F7WQnVBq6TG
cf-cache-status: HIT
age: 57602
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a1MGhNg6E9EqS1mbTjjreVmjgE0XqNoMVmSRCiE6qQhnGW6zjpUy000hWq%2BY7brXioLZUZvdsPgzwaNedAvym%2BKtKUUf2RiSVqjpNrFK0Q0%2BH8i4yK7zHsb5OteoB6v3mWBb54U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 74ac693819920b06-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-locales/classic/en-us-json-90bee35.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-locales/classic/en-us-json-90bee35.js
IP
GET /web_widget/latest/classic/web-widget-locales/classic/en-us-json-90bee35.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:10 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: QtGy9DBSGroO9dZ0nQm7qlAwCYwrFZ1cEBT+6Gxe82f+QSSV5bJxJxiBQrcyB5juuGYJN15AhOQ=
x-amz-request-id: Y8GER788ETD2EZRF
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 23:59:38 GMT
etag: W/"10d9a30eac6ed106c66673278428cd9d"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 07 Sep 2023 23:59:37 GMT
x-amz-version-id: V8asJIpCTPOekIKp8hooEU74eFrJ4NJY
cf-cache-status: HIT
age: 57602
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MRM7k2BDFw4nf9%2B7EflzRifgT0DFgqkhIz7mYLK8wTTHiDGmv%2B22Pu7qbnSNFVsP5zPHLPUxAp21aYeCainlxNml0P9WZ4jdzlJJq8lIPq7oqLvR1OcJk%2FfZ2FQ1jsdxL9pGew4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 74ac693b8bb40b06-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.mamothloans.com/?cmd=ExtTAVSEvent&i_tavsid=7687&sugid=21&i_appid=&appSessDataId=718398377&evt=P1
200 OK 0 B URL HTTP/2 www.mamothloans.com/?cmd=ExtTAVSEvent&i_tavsid=7687&sugid=21&i_appid=&appSessDataId=718398377&evt=P1
IP
GET /?cmd=ExtTAVSEvent&i_tavsid=7687&sugid=21&i_appid=&appSessDataId=718398377&evt=P1 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cb737883~1618444&rtrtid=4:DLTTCS109&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cb737883~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%224:DLTTCS109%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%2210238036278a65bb1162c66ac3019c%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=5kvm8n6vbgk40hikgchimict6u
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:08 GMT
content-type: image/gif
content-length: 43
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
x-powered-by: PHP/7.4.30
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: User-Agent
X-Firefox-Spdy: h2
static.zdassets.com/ekr/snippet.js?key=045675ec-ff49-47ff-8850-a8e0143537be
200 OK 0 B URL HTTP/2 static.zdassets.com/ekr/snippet.js?key=045675ec-ff49-47ff-8850-a8e0143537be
IP
GET /ekr/snippet.js?key=045675ec-ff49-47ff-8850-a8e0143537be HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:08 GMT
content-type: application/javascript
x-amz-id-2: 2vczt6VEQAujZh2Sn1saK7Q0yPHQMRKRQuuC+kOwLnJ40itjD1HXfy2Id85tVz8wD4O1ArN10VQ=
x-amz-request-id: 4MARQ9YY8PDZ70A8
x-amz-replication-status: PENDING
last-modified: Thu, 28 Jul 2022 23:44:02 GMT
etag: W/"5cae6ce528dce0c327b2bcbaad459fdb"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=3600, s-maxage=60
x-amz-version-id: TCAqq4sghBBBAAXd3MLZ8Fy8XIds..vO
cf-cache-status: HIT
age: 14
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A2js4d3TW7I%2BvZA7CaVvkk0k0Jx6D9zR3CLjreSyclImeNaHgoQJdEdQpdP1GDeTF97CzmdUTlwq7atqKSJVxIYFXliED2qvsz6GRhpMixKBZznnI4MVQokE6yVnX6Og8xMh2MM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 74ac69333d6a0b06-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-7495-90bee35.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-7495-90bee35.js
IP
GET /web_widget/latest/classic/web-widget-7495-90bee35.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:09 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: ZBr913E0HWa7WElrl7UEO+IQkcHOrTR4UnHOtT+/BvuuhfwwUo4GWxm9KKC1lTUb9nrRoOZLx6k=
x-amz-request-id: Y8G5HBZ9MF190HB5
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 23:59:37 GMT
etag: W/"e3d47e602c7c001fa5a7ce4f932eb4b2"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 07 Sep 2023 23:59:36 GMT
x-amz-version-id: 3ayjeJfsxaQP1TngNH_QToghKc6IA83d
cf-cache-status: HIT
age: 57602
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OzfPp%2FcMT5R9spv1eNS2yIvyo6ilgNzscyzgrezMR%2B5epDPtnbem9y%2FaQtFNwcaR8Gkan8lctWkgwR07mgGFMbXXMN6r%2FPM8kMTO12AgCyDHWBrV6ki6Kh5ptyjMikA%2Fq1yK8Q4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 74ac6939eab30b06-OSL
content-encoding: br
X-Firefox-Spdy: h2
warmestdear-llc.zendesk.com/talk_embeddables_service/web/status?subdomain=warmestdear-llc&nickname=Support
200 OK 0 B URL HTTP/2 warmestdear-llc.zendesk.com/talk_embeddables_service/web/status?subdomain=warmestdear-llc&nickname=Support
IP
GET /talk_embeddables_service/web/status?subdomain=warmestdear-llc&nickname=Support HTTP/1.1
Host: warmestdear-llc.zendesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.mamothloans.com
Connection: keep-alive
Referer: https://www.mamothloans.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:10 GMT
content-type: application/json; charset=utf-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
x-ratelimit-limit: 500
x-ratelimit-remaining: 499
x-ratelimit-reset: 1663192992
etag: W/"66-aJA2X0meaAnn8SEhHewRMlSvtL0"
x-zendesk-zorg: yes
x-request-id: ce541a231c41a9d7c8d7a7b9e63372cf
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SWMaHmeJmhb%2BBLk%2Bh3A687dKZhaL7ZcdXGQaJ%2BPWQx0ZVFXNL8Vpidi%2BGYCgrUOCnJK842LFYfzWIChab0bYRxYW3VVraOEACNSt4jJr88NSUEaEsyOJtMcyc5hiMq5Gus%2BoHJQWK%2FYB7Y0uGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
set-cookie: _zdsession_talk_embeddables_service=b9b311018f23d6dec300c9628911336e; path=/
__cfruid=b5bfba5dc8feeedab2d4b6f6a50db001b9e2e664-1663192990; path=/; domain=.warmestdear-llc.zendesk.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 74ac693bba51fac4-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.zdassets.com/web_widget/latest/classic/web-widget-8165-90bee35.js
200 OK 0 B URL HTTP/2 static.zdassets.com/web_widget/latest/classic/web-widget-8165-90bee35.js
IP
GET /web_widget/latest/classic/web-widget-8165-90bee35.js HTTP/1.1
Host: static.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:09 GMT
content-type: application/javascript; charset=utf-8
x-amz-id-2: YwnHc7xYNPBFFxkS/C50e3eq87gV6fPFOAkk7Y39xvnJzBnhFNiKfan+1MevFdd33GS9115nYe4=
x-amz-request-id: Y8GFEMQBCFR452VG
x-amz-replication-status: COMPLETED
last-modified: Wed, 07 Sep 2022 23:59:37 GMT
etag: W/"3fb1755f31689e15a362e7877ecd38ff"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000
expires: Thu, 07 Sep 2023 23:59:36 GMT
x-amz-version-id: fl4iJBp226DsBwc17By.2NRmuCl7N21T
cf-cache-status: HIT
age: 57602
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ADkIVx0ieAYkNt07aSg293zPs%2Bgz4YFUB5ncVBmK0NO%2B3%2B0xqQ8x%2FGikcikOnV51KUH5K3FZOkQkeAeezQYEAF779aJC8XLDOY2c88pBBVZyJR6RsHGTfc4gDkM4RLl1FGgleLQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 74ac6939dab10b06-OSL
content-encoding: br
X-Firefox-Spdy: h2
warmestdear-llc.zendesk.com/embeddable/config
200 OK 0 B URL HTTP/2 warmestdear-llc.zendesk.com/embeddable/config
IP
GET /embeddable/config HTTP/1.1
Host: warmestdear-llc.zendesk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.mamothloans.com/
Origin: https://www.mamothloans.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:09 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-expose-headers:
access-control-max-age: 7200
cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600
x-zendesk-origin-server: embeddable-app-server-85999978df-q42kw
x-request-id: f41d3a43a7c1a5b41ca6744ef4d71b55
x-runtime: 0.001916
vary: Origin, Accept-Encoding
x-cached: MISS
last-modified: Wed, 14 Sep 2022 21:00:48 GMT
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eQqNWotRRhdeeVxchXtcYRopxWEmxZd56w7rNhXUJ7dGh83yFbez%2BMHiZaeYkPd5SRCQI7WAFvR%2B1gCS58dxMJ%2FaHS6I3BSlBCuJcvhhavI6o29a6wCy0DUUfhNE%2BYFg%2F6WNynUfPTPj%2F%2BmASg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
set-cookie: __cfruid=fe40413389cba4dd29f11c2a733b88f12d31d959-1663192989; path=/; domain=.warmestdear-llc.zendesk.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 74ac6938a927fac4-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.mamothloans.com/common/template/funnel/pvexl42step/L4/DynamicRLA-wCS/scripts.js?version=1663143909
200 OK 0 B URL HTTP/2 www.mamothloans.com/common/template/funnel/pvexl42step/L4/DynamicRLA-wCS/scripts.js?version=1663143909
IP
GET /common/template/funnel/pvexl42step/L4/DynamicRLA-wCS/scripts.js?version=1663143909 HTTP/1.1
Host: www.mamothloans.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mamothloans.com/?rtrcid=503475~cb737883~1618444&rtrtid=4:DLTTCS109&rtrsid=1&xi_rtrtsrc=1&x_offerid=288&x_clickid=10238036278a65bb1162c66ac3019c&email=vhicks@caddis.com&fname=%7Bfname%7D&lname=%7Blname%7D&xi_tier=1&xi_ac=3703&x_psac=3703&xi_oss=on&xi_cfg={%22srtr%22:1,%22ertr%22:1,%22psrtr%22:1,%22bcktr%22:1,%22pv%22:[11,13]}&xi_tft={%22rtrcid%22:%22503475~cb737883~1618444%22,%22xi_tier%22:%221%22}&odata={%22aid%22:%22503475%22,%22acid%22:%2214%22,%22subid%22:%224:DLTTCS109%22,%22x_offerid%22:%22288%22,%22x_clickid%22:%2210238036278a65bb1162c66ac3019c%22,%22email%22:%22vhicks@caddis.com%22,%22fname%22:%22{fname}%22,%22lname%22:%22{lname}%22,%22xi_resid%22:%22{resid}%22,%22xi_oclkid%22:%22{kid}%22,%22x_psac%22:%223703%22}
Cookie: SCSSESSIONID=5kvm8n6vbgk40hikgchimict6u
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 22:03:08 GMT
content-type: application/javascript
server: Apache/2.4.54 () mod_fcgid/2.3.9 PHP/7.4.30
last-modified: Tue, 13 Sep 2022 08:21:04 GMT
etag: "10c34-5e88ab17b040f-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
94.23.161.19
23.36.76.226
143.204.55.110
93.184.220.29
104.16.51.111
54.38.226.140
99.81.210.173