CloudFlare

HTTP/1.1 403 Forbidden
Date: Sun, 06 Oct 2024 12:00:29 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5894
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8ce57dc7995c6bce-DFW

Home Mortgage Loans - Apply for a Home Loan Online | SoFi

HTTP/1.1 200 OK
Date: Sun, 06 Oct 2024 11:47:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
content-security-policy: default-src 'self' https://*.sofi.com  ; script-src https: data: 'unsafe-inline' 'unsafe-eval' https://www.sofi.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://forms.hsforms.com/ https://*.audioeye.com; connect-src 'self'  https://pagead2.googlesyndication.com https://maps.googleapis.com https://www.google-analytics.com https://analytics.google.com https://ssl.google-analytics.com https://www.google.com/ads/ga-audiences/ https://www.google.com/pagead/ https://adservice.google.com/pagead/ https://www.googletagmanager.com https://ampcid.google.com https://ampcid.google.ca https://stats.g.doubleclick.net https://*.doubleclick.net https://bat.bing.com https://t.co/i/adsct https://analytics.twitter.com https://s.yimg.com/wi/ https://sp.analytics.yahoo.com https://static.ads-twitter.com https://www.facebook.com/tr/ https://www.redditstatic.com/ads/ https://c.conversionlogic.net/track/event/v2/sofi https://api.rollbar.com https://report.sofi.glassboxdigital.io https://sdk.iad-03.braze.com https://sdk.iad-03.appboy.com https://jssdks.mparticle.com https://identity.mparticle.com https://*.sofi.com https://*.datadoghq.com https://rum.browser-intake-datadoghq.com https://cdn.cookielaw.org https://geolocation.onetrust.com/cookieconsentpub/ https://logx.optimizely.com https://errors.client.optimizely.com https://rum.optimizely.com https://analytics.tiktok.com/api/ https://api2.branch.io wss://*.glance.net https://*.glance.net https://d32ijn7u0aqfv4.cloudfront.net https://d3331otr86r7j1.cloudfront.net https://tags.srv.stackadapt.com https://*.audioeye.com https://us-central1-adaptive-growth.cloudfunctions.net https://ct.pinterest.com https://cta-service-cms2.hubspot.com https://csmetrics.hotjar.com https://in.hotjar.com https://vc.hotjar.io https://track.contently.com https://translate.googleapis.com https://*.analytics.google.com https://ampcid.google.lt https://*.crazyegg.com https://cdn.linkedin.oribi.io https://stats.addtoany.com https://api.socialsolutionapp.com https://forms.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://privacyportal.onetrust.com https://rts.persado.com https://tapi.optimizely.com https://amplify.review-alerts.com/ https://api.ipify.org https://api.typeform.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://forms.hsforms.com/; style-src 'self' https://*.sofi.com  'unsafe-inline' https://use.fontawesome.com https://www.glancecdn.net https://d32ijn7u0aqfv4.cloudfront.net https://s3.amazonaws.com/glancecdn/ https://tags.srv.stackadapt.com https://cdnjs.cloudflare.com https://embed.typeform.com https://optimize.google.com https://fonts.googleapis.com https://www.googletagmanager.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://forms.hsforms.com/ https://*.audioeye.com; img-src 'self' https: data: https://www.googletagmanager.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://forms.hsforms.com/; font-src 'self' data: https://s3-us-west-2.amazonaws.com/sofi-wordpress-prod/fonts/ https://d32ijn7u0aqfv4.cloudfront.net https://use.fontawesome.com https://fonts.gstatic.com https://*.audioeye.com https://zip.co/static-assets/fonts/ https://cdn.jsdelivr.net https://forms.hsforms.com/; frame-ancestors 'self' *.w3schools.com; object-src 'none'; child-src blob: https://*.sofi.com  https://form.typeform.com https://forms.hsforms.com/ https://*.cdn.optimizely.com https://*.calconic.com/; media-src data: https://*.sofi.com  https://d32ijn7u0aqfv4.cloudfront.net; worker-src blob: https://*.sofi.com  https://*.visualwebsiteoptimizer.com https://app.vwo.com; frame-src 'self' https://app.calconic.com/ https://6375438.fls.doubleclick.net https://td.doubleclick.net https://*.sofi.com https://*.sofiatwork.com https://*.online-metrix.net https://di.rlcdn.com https://www.youtube.com https://ct.pinterest.com https://www.facebook.com https://*.audioeye.com https://a10819474327.cdn.optimizely.com https://assets.contently.com https://tpc.googlesyndication.com https://vars.hotjar.com https://static.addtoany.com https://boards.greenhouse.io https://pixel.mathtag.com https://d32ijn7u0aqfv4.cloudfront.net https://www.slideshare.net https://filter.techloq.com https://go.pardot.com https://platform.twitter.com https://mozbar.moz.com https://v3.inviteeducation.com https://form.typeform.com https://optimize.google.com https://*.mykukun.com/ https://widget.trustpilot.com/ https://*.visualwebsiteoptimizer.com https://app.vwo.com https://forms.hsforms.com/ https://allpoint.locatorsearch.net/ https://*.tradingview-widget.com https://*.tradingview.com
referrer-policy: no-referrer-when-downgrade
link: <https://www.sofi.com/wp-json/>; rel="https://api.w.org/"
link: <https://www.sofi.com/wp-json/wp/v2/pages/51747>; rel="alternate"; type="application/json"
link: <https://www.sofi.com/?p=51747>; rel=shortlink
x-envoy-upstream-service-time: 1
expires: Sun, 06 Oct 2024 11:57:58 GMT
Cache-Control: max-age=600,public
x-sofi-wordpress-cache-status: HIT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://sofi.com
access-control-allow-credentials: true
x-content-type-options: nosniff
x-sr-trace-id: f7024de251de3f8cc304b22c88afa1dd
set-cookie: SOFI_WEB_USER_ID=Cv5Fw2cCeO5LIQAi//GsAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; path=/; HTTPOnly; Secure
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=klozVLT0ZBxhELLXZ59BqlPuWFL2MwUspqO4vffCpUdLLD5e7BPFrFVvK4EiUZYIfoWcCWJHlDMacO8lo9cM66YDBT7b8%2B3%2BWzqO0QBw9yUyyvojiVC3a4w68OVYSg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Set-Cookie: __cf_bm=FTRGE0Rlt3VLrDBDZEU_mUGWdNLcPn3cMP84tbuqy2k-1728215278-1.0.1.1-GVxRfhhRezLRWCQIDpAYmV.vpt2F5kDwG_zmyyjh0ay4HLowGKbBVLwulAZjsb.Sjz3679XqpNl9lvBa7krQKA; path=/; expires=Sun, 06-Oct-24 12:17:58 GMT; domain=.sofi.com; HttpOnly; Secure; SameSite=None
Set-Cookie: _cfuvid=peJHBmKsPuMbs77usD0u5g.BhtMkiSRoTmQvrbIP2uI-1728215278845-0.0.1.1-604800000; path=/; domain=.sofi.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 8ce56b746a99987f-SJC

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7937707722584297897 (0x6e28671e2f8311a9)
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority - G2
        Validity
            Not Before: Nov 28 15:41:11 2023 GMT
            Not After : Dec 29 15:41:11 2024 GMT
        Subject: CN=*.sofi.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bc:7c:e5:08:65:24:8d:5a:fd:4c:e9:cf:08:c2:
                    08:89:8e:5b:54:b7:b5:63:47:16:5e:db:99:30:d2:
                    d6:b6:d7:dd:23:d7:ed:de:1a:f1:16:33:4c:a6:25:
                    48:6c:5f:a3:d7:e4:b6:ad:2c:d1:58:f5:e5:81:fa:
                    65:18:0a:27:c0:53:22:2f:c0:c8:12:bc:48:5c:47:
                    38:4e:01:34:9e:e1:e4:5b:e9:3a:86:16:c8:63:f8:
                    20:ef:2a:af:18:60:2d:bb:da:49:90:fa:70:09:6c:
                    c2:47:e4:ff:8f:4e:09:5c:50:1c:89:d4:72:00:a0:
                    6e:ea:b2:49:42:a5:85:26:f7:e6:9b:2a:3f:e0:cd:
                    74:76:b7:43:14:c4:1b:f2:a0:c4:23:d8:4d:f5:73:
                    94:27:de:c6:96:b4:66:35:9a:01:60:e1:08:4a:4e:
                    cb:6d:dc:87:74:59:66:87:ac:40:0e:6e:99:9f:2f:
                    f5:7d:ee:3f:27:10:3b:8c:4c:e8:29:24:22:7e:37:
                    b0:87:c3:f7:7b:4a:3e:74:3c:d8:f9:e4:49:b9:4c:
                    2b:c3:29:a9:ba:3e:40:14:5c:75:c8:7c:91:5b:e1:
                    3f:0f:4e:74:7a:39:f7:43:7d:1f:17:a7:f8:91:b0:
                    5d:67:51:a5:88:3e:b0:d1:1b:d2:fc:ad:09:bd:30:
                    a7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.godaddy.com/gdig2s1-12548.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114413.1.7.23.1
                  CPS: http://certificates.godaddy.com/repository/
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                OCSP - URI:http://ocsp.godaddy.com/
                CA Issuers - URI:http://certificates.godaddy.com/repository/gdig2.crt
            X509v3 Authority Key Identifier: 
                40:C2:BD:27:8E:CC:34:83:30:A2:33:D7:FB:6C:B3:F0:B4:2C:80:CE
            X509v3 Subject Alternative Name: 
                DNS:*.sofi.com, DNS:sofi.com
            X509v3 Subject Key Identifier: 
                8F:23:78:98:26:10:40:13:35:E3:92:7B:46:5B:C4:3A:C4:EB:38:83
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Nov 28 15:41:12.179 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:40:91:3E:BB:CE:3B:C7:10:32:4C:FB:9C:
                                12:4B:61:D7:DB:92:D9:B2:E1:9E:F5:C2:AA:EF:FF:B0:
                                5A:6C:6A:E2:02:21:00:B5:AC:4D:BD:53:A2:5B:12:BC:
                                9C:2A:71:E9:56:C8:58:31:6A:22:7C:7A:2B:1B:B4:0A:
                                99:5B:24:19:E2:EF:90
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Nov 28 15:41:12.489 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:D0:95:D9:2A:48:E9:15:AD:6A:EE:43:
                                CB:F3:7D:50:DE:8B:20:F8:82:7A:03:86:BF:51:37:44:
                                9A:FF:7E:AB:0A:02:21:00:9B:47:57:D1:A3:8B:3B:08:
                                2B:AE:37:A6:E4:15:A0:9F:7C:9F:21:E0:5F:7C:26:A0:
                                EF:34:62:FC:E8:59:AC:05
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Nov 28 15:41:12.610 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:99:E6:98:44:E7:08:E3:65:89:3F:23:
                                73:72:B3:64:94:DF:B4:3A:35:F6:47:BD:9C:B9:39:9B:
                                5A:D1:7E:8F:9C:02:21:00:DD:19:0F:2C:2A:0F:3A:57:
                                E5:A4:80:3C:2F:EF:3D:82:B7:8E:32:E0:FF:93:7E:B9:
                                95:40:6D:23:EC:B1:6A:CB
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        8c:bb:e7:c4:15:a2:03:5a:7e:91:44:d1:29:ce:36:45:56:de:
        b8:28:e2:76:d5:c6:b7:37:d4:ff:45:ba:05:de:65:60:d3:27:
        6a:e8:91:39:aa:85:d8:f8:a7:18:da:8f:03:d6:af:6e:65:33:
        9b:2f:bf:2f:32:9b:50:07:32:dd:ae:c7:5b:01:3b:a5:21:58:
        72:1f:fb:d4:65:ea:5d:4a:b7:15:2e:5f:af:05:57:4b:70:47:
        05:59:7e:c1:bd:0f:96:a0:19:00:fe:06:12:63:4f:c7:78:9a:
        24:9c:02:02:8a:b8:86:c2:80:e3:0b:58:b4:3b:7c:c2:85:f0:
        8d:16:4a:85:97:5c:0b:99:06:4c:5f:c7:cd:05:72:4e:d1:8b:
        ab:d9:9b:11:b5:ba:18:c4:46:c2:af:b0:7d:49:0b:6c:f4:f6:
        50:5f:64:8f:dd:37:76:44:88:9e:6a:45:d3:e6:9b:e0:7d:7e:
        01:15:78:93:1d:ab:c9:cb:55:f3:f1:fc:79:22:af:ed:84:c3:
        80:48:49:a6:e6:35:11:ec:13:1e:71:77:4f:2a:9f:51:fa:62:
        c5:90:5c:83:0f:4d:74:c3:14:86:bf:9f:30:74:3f:82:b5:bd:
        72:88:c6:2a:bd:b8:82:88:9a:35:ad:04:0e:c9:83:c3:41:30:
        65:e7:52:64

HTTP/1.1 400 Bad Request
Server: cloudflare
Date: Wed, 25 Sep 2024 12:23:20 GMT
Content-Type: text/html
Content-Length: 655
Connection: close
CF-RAY: -

HTTP/1.1 403 Forbidden
Date: Sun, 06 Oct 2024 08:22:26 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5896
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8ce43e60ee7ed380-FRA

HTTP/1.1 400 Bad Request
Server: cloudflare
Date: Sun, 06 Oct 2024 09:16:18 GMT
Content-Type: text/html
Content-Length: 655
Connection: close
CF-RAY: -

HTTP/1.1 403 Forbidden
Date: Sun, 06 Oct 2024 07:15:09 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5894
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8ce3dbcde9a22847-DFW

HTTP/1.1 400 Bad Request
Server: cloudflare
Date: Sun, 06 Oct 2024 04:50:32 GMT
Content-Type: text/html
Content-Length: 655
Connection: close
CF-RAY: -

CloudFlare

HTTP/1.1 403 Forbidden
Date: Sun, 06 Oct 2024 09:32:35 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5894
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8ce4a5203f1e72f5-DFW

CloudFlare

HTTP/1.1 400 Bad Request
Server: cloudflare
Date: Sun, 06 Oct 2024 06:32:37 GMT
Content-Type: text/html
Content-Length: 655
Connection: close
CF-RAY: -

HTTP/1.1 403 Forbidden
Date: Sun, 06 Oct 2024 10:15:54 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 16
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Server: cloudflare
CF-RAY: 8ce4e49659132e34-DFW

error code: 1003