{"report_id":"343e6c07-8159-48f8-964e-a98c1c6b32f2","version":6,"status":"done","tags":[],"date":"2026-03-20T23:48:09Z","url":{"schema":"http","addr":"www.accountingclientportal.com/client-login","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"65.9.46.11","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.accountingclientportal.com/client-login","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"title":"Client Portal","dom":{"size":499,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (460)","md5":"2c914cfb4ebb3e44d217ef978f060ec3","sha1":"7958da0ab93418c7fe8d1901ff94ab75f20ac7c7","sha256":"b7e1b775a108d34f7094390fc7427a26baf155cd753a7d046cd42c6e3ceea3c9","sha512":"c03f5f66bc9d6d966c05bde7a80231df43d77d734d63ca6aa055cf6991086090e440bdd3d809236c0f4e8064d8cabf3da307a6f768b37ba4c992bc28c8b0117a","ssdeep":"","tlshash":"f9f09ea62c16a90d42914f8cd8f0e93c6804735ba040ec91b6fe75bcb7c2d9ecc1a1c9","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.accountingclientportal.com/client-login","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"65.9.46.11","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-24T23:48:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-20","alert":"Hunting_JS_WebAssembly","trigger":"cdn.intake-lr.com/logger-1.min.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-20","alert":"Hunting_JS_WebAssembly","trigger":"www.accountingclientportal.com/assets/db.worker-CIleOwvi.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null},"summary":[{"fqdn":"www.accountingclientportal.com","ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-04-30","domain_rank":0,"first_seen":"2026-03-20T23:48:18.323349Z","last_seen":"2026-03-20T23:48:18.323349Z","alert_count":1,"request_count":41,"received_data":19712966,"sent_data":20679,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"prod.keeper.app","ip":{"addr":"18.65.39.94","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-10-23","domain_rank":1984252,"first_seen":"2025-09-30T22:43:14.777494Z","last_seen":"2026-01-19T13:26:48.114145Z","alert_count":0,"request_count":5,"received_data":5494,"sent_data":3028,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdn.intake-lr.com","ip":{"addr":"104.21.14.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-11-09","domain_rank":156595,"first_seen":"2023-11-09T18:29:20Z","last_seen":"2026-03-14T07:29:47.746197Z","alert_count":1,"request_count":1,"received_data":794311,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":1,"received_data":73799,"sent_data":553,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api-iam.intercom.io","ip":{"addr":"174.129.2.219","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":17818,"first_seen":"2018-08-02T22:07:54Z","last_seen":"2026-03-18T12:33:51.342791Z","alert_count":0,"request_count":2,"received_data":2799,"sent_data":1125,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-15T22:19:58.945817Z","alert_count":0,"request_count":3,"received_data":20254,"sent_data":1521,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"js.intercomcdn.com","ip":{"addr":"18.239.105.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-25","domain_rank":23692,"first_seen":"2020-02-19T12:43:00Z","last_seen":"2026-03-16T07:59:58.888153Z","alert_count":0,"request_count":2,"received_data":1698866,"sent_data":969,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"app.launchdarkly.com","ip":{"addr":"151.101.65.55","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-07-15","domain_rank":5566,"first_seen":"2015-06-15T05:36:08Z","last_seen":"2026-03-18T16:01:55.125062Z","alert_count":0,"request_count":4,"received_data":15272,"sent_data":2652,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"ws-mt1.pusher.com","ip":{"addr":"52.45.46.132","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"1997-06-03","domain_rank":33232,"first_seen":"2016-01-27T14:04:54Z","last_seen":"2026-03-14T04:44:50.167943Z","alert_count":0,"request_count":1,"received_data":268,"sent_data":642,"comment":"","tags":null,"fingerprints":null},{"fqdn":"events.launchdarkly.com","ip":{"addr":"54.147.178.212","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2014-07-15","domain_rank":4335,"first_seen":"2016-02-06T07:13:26Z","last_seen":"2026-03-18T23:07:40.422426Z","alert_count":0,"request_count":2,"received_data":1035,"sent_data":1307,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"widget.intercom.io","ip":{"addr":"18.239.36.23","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":19213,"first_seen":"2020-07-20T12:16:46Z","last_seen":"2026-03-16T04:09:33.3934Z","alert_count":0,"request_count":1,"received_data":8368,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"o552561.ingest.sentry.io","ip":{"addr":"34.160.81.0","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2012-04-07","domain_rank":3758970,"first_seen":"2024-12-03T21:05:11.663722Z","last_seen":"2026-01-19T13:26:48.823471Z","alert_count":0,"request_count":1,"received_data":522,"sent_data":664,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"r.intake-lr.com","ip":{"addr":"104.198.23.205","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2023-11-09","domain_rank":173293,"first_seen":"2023-11-13T18:52:02Z","last_seen":"2026-03-11T16:26:12.076492Z","alert_count":0,"request_count":2,"received_data":115207,"sent_data":1384,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/logrocket-CREWEnoA.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"fa801b832c77e98f1204986d1840cd93","sha1":"3bf9f9e5068b37d07b2412f58907d89f920b0342","sha256":"fac98e0695bce26eb1b93fa967435ea49ca02592ddd6ff9d63a6bb169d3b78ca","sha512":"6b8b66883bf395e729342d84eabdbc2c837fe4b27bc577fff7a6df70b51a1a4cae3968be738cbaf979e15e0f807a2c9b1b8c139646910f5c6923340a3a0d4f66","ssdeep":"1536:+fH0yCnhsbGZhkdqod32X6EKGbP/+4nGaMvav0hGHOULAgckt+5lt+54t+55ol4x:+fH0yCn1hkdqods3bekDgPgAgRKS","tlshash":"65e3b7c9b4f8fd5327da652e712b5209b7ee9490b029e4907315cfc26c912cb90a7e1f","size":145107,"data":"","first_seen":"2025-12-09T19:58:53.080578Z","last_seen":"2026-03-20T23:48:23.766909Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.3444d8e0.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"18.239.105.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"43b66cc504e152b4230ba37671fb2267","sha1":"82424af546617a3fad58a59bc27870ba907d2c8b","sha256":"bacb73b046b119a39ccd6f083d6988d36cfe8a49295e87111f1df7706866fdb9","sha512":"7ef7adaa956314c4e91a1ae5ea4027a861a35d476ddb3e990a9f95770132609d17ed357e99b6d5f8d0154525889d5bd87223bb23ab6097f80d326eb8d4b4bf0e","ssdeep":"6144:j8C6LzOQnUndrYkgmjajpqjcGBqu0HRbHdCVbp1TTkJhOILiBZ:jN6LzOqYajmdEhCVbp1cM","tlshash":"7fb418dd7591f46207f312f2407f180ab379296a284c4860f664e8dd78f994da23bf6e","size":521222,"data":"","first_seen":"2026-03-18T14:52:54.200083Z","last_seen":"2026-03-31T10:06:51.556813Z","times_seen":1817,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/scripts/beforeunload.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d01d6bf80d9a4fa062be49d6a796b7f","sha1":"26013f87119f270b551c5c45205a2ada5d58018a","sha256":"bac0fea41f08f4c8c5b252d645bf6e0f5d8b23e66cba4558c1bf3ce2b61faa39","sha512":"36bde4c21e5cbac4b89d7dc08a5c9e713c7924f6d7b90b2ef39b4e872fed29a8d24ed8ff39ebfc126a590b992aa38db2ca4aafdcdea38a9008b36f6d37df092b","ssdeep":"","tlshash":"ab019c296bf01426106622bd82df6603277514b3074c0eb1d13cceb86f64577866c6c7","size":721,"data":"","first_seen":"2025-12-09T19:58:53.043949Z","last_seen":"2026-03-20T23:48:23.764073Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/client-login","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-04-05T13:48:10.287343Z","times_seen":266058,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/AlertHexagon-Cx7Ucoj8.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"28201b70c022fa8755f755b9c97cd529","sha1":"1fee1c0fbdb94ba5cfb2860b2934a0e68323b663","sha256":"28829e75f05d9a31c02c135f3d6a8cec35d07eca428cc60ae65c5972d4f9c4f4","sha512":"1862765ed50eb4f7210b24547c05a3c223412a0660c72362f5cc4c904274219b039b703d13292e4899121cce6f680b0da1ff04336dbfa937d43dd8ac69af13e6","ssdeep":"","tlshash":"e931a6e993d078b8a00c2bf9d62a442773a13a3b7fc347c4809c4834f115e9d5a5fe95","size":1635,"data":"","first_seen":"2026-03-20T23:48:23.769943Z","last_seen":"2026-03-20T23:48:23.769943Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/n1ttmdbg","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"18.239.36.23","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7a715e97a86c9e09573813e06a0141b","sha1":"1ca8a1dccc191cc84033e46c53c1b766b1f4ab75","sha256":"3ae747d7d4ddbf16f9f06c8379e8470e3d440d8de8a3df78cece439b64fe1363","sha512":"b9cc3f4557270c47c9b4df16cfd7045ceb804f2326ca554522c0cac4ba13f8ca803dc1cf6348280379cb3bf8aaa54beba269fb7dae99332c910b55c8b207ddf9","ssdeep":"96:v2NH8/xVRyhsXtpZ8HEZgOM09SP0Ffp5ilzfDsJeiMw938I5Zv1JVqUP:v2YVNCH8bMFOCMMiZ935pqUP","tlshash":"51f174eeb6c2793806a31576623b770c7e3b654528494890d066c8cc797adcbc12bfad","size":7614,"data":"","first_seen":"2026-03-20T16:39:47.626731Z","last_seen":"2026-03-23T09:53:28.444165Z","times_seen":230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.de31ab18.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"18.239.105.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7dbf300b634a330eb13e7c798167eea","sha1":"aa708e171174f4f2bc997a1e7e680269b7b3ce60","sha256":"a22d57406f0a24045551b212560771413d910ffc5d742adaf3affe8c8719e95a","sha512":"68f14386bbd891133f6796a36ea186c31a5edb54aad5a36f4b5cf7fe07f0cf39c7f2f207da958cd5bc4d4202625a5b9a4e2565bf0259bddd566806c100aaba52","ssdeep":"12288:GK3iemcoYAgvcXAJwfRiDZ0eKTRAaLdAw+7Uie1IELuyA0:GTCvWAFDZ0DhLdMyx","tlshash":"d945b6ccb2d6f06a43976575812f200af33e699ab54d8050e629e8d1bcb858dd237f7c","size":1175864,"data":"","first_seen":"2026-03-20T16:39:47.690416Z","last_seen":"2026-03-23T09:53:28.615252Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/rw.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3d23cfb1b01dbcc93af6dc5ad7d3960","sha1":"f99596aac190fd136e57aa7d4dadde4195fc2e0d","sha256":"79fc839a832ad94ddbb4b998c9652f57847ef2008f592ab6fbea97897dc46e1a","sha512":"229172a95769ff91bb3f75ff68b3ecb483c2e75c5e717e19c3562360dc7dbe0d6ba92a5a5ba06fcaf34f4d0b5dd4d9fa88d518eda93a74d18e7c6fe65853d472","ssdeep":"192:bBi20Ozg5fd3tqNEz5CgxpRyAEEEAnACJwOL4l7V/U38ERBtYLH9yducUIeWSx:Njzgw+zLACSa4l23PIH9yducUGC","tlshash":"5372959976d1b4a203977475863f220bf3766c6308bcd4d0e3319ce9aea894f8126f5d","size":16389,"data":"","first_seen":"2025-12-09T19:58:53.063727Z","last_seen":"2026-03-20T23:48:23.770638Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/react-4rdz0Zvz.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"78a336bc3f737aeb693b767e97a942ae","sha1":"452f99692f96b8751423ae5cdc0f7f278d4a4d44","sha256":"827e1dd0a6b5e4e99d3e63b6fd1db110b6011918e4ffe175f52040258e973a1f","sha512":"2365fb150c7cbbf0ce946fc7c5f1cc901cf659841bc2dfc98274d0898012044218aa71140969ece1092df6452be2aad4874ec440f31e958de27c0e19d42cf2e8","ssdeep":"1536:P5OgtvL/25P53wmxaRPZvnfz8QCuITgiy35eFnUQXSxN/NXH/H+:hOWD+mxZvfz8QJIK34VUQ89fe","tlshash":"b6d319e83992f6616ab312a700ef1817733d2a1b240c4960a615fd9d75f801eb27bfdd","size":139993,"data":"","first_seen":"2025-12-09T19:58:53.008579Z","last_seen":"2026-03-20T23:48:23.783521Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/udecode-Qbd5AnIU.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a407c7a0755febfc781e7d8f5e201dce","sha1":"552d979437ef3a94303fe119a95e0999c03cf3ef","sha256":"2261277b0375bd05e3e5b42207d998af148c8738a62432d00bc62c9375873d86","sha512":"a2a3544d721401ddc87b41ddf5ee894fa7f5fb1d53e6738a1b740bb0cc057a7fb57d432a66fe8d0a9c55e0318ce1683613ff27bac4475b175ea0edc3f3b1577f","ssdeep":"24576:tnsgASS4jIp0Dziy7MWv3Ll+UssOH9qxABEZLU3FdLD4/im1l:tSKpZIsOH9qxAKZLU1dLD4/im1l","tlshash":"3f353b9533c1b27657da10e6807f020bf2396a1a340ed050f2b5e8eb7c79a866177f79","size":1117177,"data":"","first_seen":"2026-03-20T23:48:23.793022Z","last_seen":"2026-03-20T23:48:23.793022Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/useLDIdentify-DI-TRUre.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e26a615214adcb1b4c884b46860915d7","sha1":"2c109ee74397cd39427d0461663196ad15c0b53a","sha256":"d54d21268da57cbbbfe38fbc57de57609a9ebd70c96960b5be24176f66261fbe","sha512":"7eb38738d75ea94fd9d17de1b0ed5cc5140b74b327e6668349550d865ffe160ad9bfc33f2eb742ad9e129f6d444f750c6011f8f1b21675c364b8853d0c460386","ssdeep":"","tlshash":"5901208a6bb487b8902409fcd1375003aa94007b738c03f5d07d4e7caf66c868388e97","size":776,"data":"","first_seen":"2026-03-20T23:48:23.77746Z","last_seen":"2026-03-20T23:48:23.77746Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/scripts/rewardful.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"244fe3988b5b690dfe8539d2062f6e22","sha1":"e4b5ee51ece000f33f19279a7f81c95de13e002e","sha256":"1af386f0a2d0dcb9e1a1fe0c538a89925af8462a5b790c0074261635a71f8a2f","sha512":"315007e13c663774a5b85997d4280056a743474a4e97f26144d72bef15e39938c616a79c92e4bb53a1358482431a8854506ad09b355e8399eaec0979cabee980","ssdeep":"","tlshash":"87f059146bb0242a803a21ecc32f1a037991483783cd0fb5f27886795f65c6b8e08acf","size":528,"data":"","first_seen":"2025-12-09T19:58:52.99372Z","last_seen":"2026-03-20T23:48:23.787185Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/antd-rx9FrHo4.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ac959f12083bd999b438e94a6c63c1a5","sha1":"2480d9c4c71799320dd6dc581a3a25d35c434c8f","sha256":"b4ebfb400563e6cec67335daa9895ac0ec3dc2750f0819c36c83557ebcf5037c","sha512":"937134b49a50e309a050cf424584ab34392f2bcb7f523efb614f3931795400bf49d247711f74ae0985296ebb514a678377c511287327e3eedc3e651902638b15","ssdeep":"6144:H9rBKPqwn+u6Ytz+574yzY+Nlf4DN+crQZVAy0AGcYcLsJPc4m0l1Dk3VB+/3wKx:TwndwjzY+Nlf40YcoLEC3UH/pSuvCAX2","tlshash":"79150adcb289b02456ab54b6006f140ab33f3a5d785d8820e276c9c87975ecde137f6e","size":940157,"data":"","first_seen":"2026-03-20T23:48:23.760062Z","last_seen":"2026-03-20T23:48:23.760062Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.intake-lr.com/logger-1.min.js","fqdn":"cdn.intake-lr.com","domain":"intake-lr.com","tld":"com"},"ip":{"addr":"104.21.14.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c8d8d92e651954e731a23ff3fea9fae","sha1":"b313f64a93a62e43395808cbaac2717820a7bfa2","sha256":"027b95fe04f27bb6730bf18068cb9456a11c8607c68a25b301b9adf95d13e15f","sha512":"743405c56e9bc7f30dd9c5af6236b66e407d1e043fe348533acd4f755d1a7dba5c5d2361fd38d8719a96068d4ea689035e61e0930636e14f92f46311d2478f39","ssdeep":"12288:4XNeTSffRyAtU+PKYyxmYqr+7eU1o3PNvxE/JCqzHbA0hyp8CTACwZE5ZT8gY:WgQLrzE/JCqzHbAvp8CTAjZE5ZTpY","tlshash":"4af42b853a58f46302ea80d9503b2407f335581e706de0e4f3d9ddda686da8e617bb3b","size":793280,"data":"","first_seen":"2026-03-20T22:08:30.516391Z","last_seen":"2026-03-23T02:02:34.53609Z","times_seen":52,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-20","alert":"Hunting_JS_WebAssembly","trigger":"cdn.intake-lr.com/logger-1.min.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/ClientPortalLogin-DxfYx-Ro.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"afb278947a6eca586df9d0c74ef334ad","sha1":"6d3af5734c6ddedbc4b514c557f4e028361bf944","sha256":"4b118e237473763fe3d7e2957bebb10ba983aa4fc9460cd19f30583e0966d9f7","sha512":"4088b9e4dabd54224f68062de4d8cec988bc1815ed590323f0862ccfba05b607b571bd223ae0afa16df43f228d8a179979f47c6504522a74dcefd8952174f67d","ssdeep":"384:+xaFRIIzv1iSQYR/zJEtwVFvS+xl8zL9+EcZLTudwBblsIKXcCbR3rEUrb:+wKIzv1dR/zJEtmFvS+o9+EcZLTudwBu","tlshash":"a0822a82423633be3c264a94b0f39004e416595c5e3985faa17f153d2b7de83b717bea","size":18355,"data":"","first_seen":"2026-03-20T23:48:23.780948Z","last_seen":"2026-03-20T23:48:23.780948Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/scripts/array-polyfill.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ec433ba041e1512cd0536ebd060f610","sha1":"23fb0ed2348be486cb0f05a99c9f54cfed727752","sha256":"f93cab52c8fb1268f83969a83f49ab98550e9e78aa31a43e767b90c5d1566add","sha512":"81453a7cfecb507c1184aae785296c6743f9b6d4975fbbe17b2d5695260fd3ce5e090d58bdf97d58ed329a48cc09b01cc95d9c56f8185f2782baf885452ed46e","ssdeep":"","tlshash":"9201bd490bb81201423d03e8d51a0d077a55643f5fcc4ab4e1789ab81ab3854db2c9af","size":763,"data":"","first_seen":"2025-12-09T19:58:53.062388Z","last_seen":"2026-03-20T23:48:23.773965Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"fe364450e1391215f596d043488f989f","sha1":"d1848aa7b5cfd853609db178070771ad67d351e9","sha256":"c77e5168dffda66b8dc13f1425b4d3630a6656a3e5acf707f4393277ba3c8b5e","sha512":"2b11cd287b8fae7a046f160bee092e22c6db19d38b17888aed6f98f5c3e936a46766fb1e947ecc0cc5964548474b7866eb60a71587a04f1af8f816df8afa221e","ssdeep":"","tlshash":"54600088282020000000228008802020000203e02002020020c020202aa02280800200","size":15,"data":"","first_seen":"2023-03-07T01:02:47Z","last_seen":"2026-04-05T13:41:25.507361Z","times_seen":63396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"r.intake-lr.com/i?a=fchghe%2Fkeeper\u0026r=6-019d0da5-e2a5-7bbc-99f7-c4b59a9b6cd2\u0026t=380b211a-d8b9-4ebf-9517-9257099393d9\u0026s=0\u0026ro=t\u0026st=web\u0026rs=0%2Cu","fqdn":"r.intake-lr.com","domain":"intake-lr.com","tld":"com"},"ip":{"addr":"104.198.23.205","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:49.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.logrocket.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 19:25:40 GMT","end":"Mon, 11 May 2026 19:25:39 GMT"},"fingerprint":{"sha1":"E1:62:ED:34:49:F5:BC:17:3E:52:B2:98:28:B2:D6:47:BF:A9:00:AF","sha256":"53:3A:7A:32:B7:FC:C3:FC:B3:84:67:4A:3E:A3:81:68:C6:DC:7A:D2:5B:37:B9:DF:FA:38:50:CB:8F:07:1E:D2"}}},"request":{"raw":"POST /i?a=fchghe%2Fkeeper\u0026r=6-019d0da5-e2a5-7bbc-99f7-c4b59a9b6cd2\u0026t=380b211a-d8b9-4ebf-9517-9257099393d9\u0026s=0\u0026ro=t\u0026st=web\u0026rs=0%2Cu HTTP/1.1\r\nHost: r.intake-lr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-LogRocket-Relay-Version: 2025.8.0\r\nContent-Type: application/octet-stream\r\nContent-Length: 0\r\nOrigin: https://www.accountingclientportal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Mar 2026 23:47:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-expose-headers: X-LogRocket-Upload-Max-Interval,X-LogRocket-Upload-Max-Size\r\nx-logrocket-upload-max-interval: 30000\r\nx-logrocket-upload-max-size: 50000000\r\netag: W/\"1bba5-43716tYbIBNJnnbm4m3ZzL09BiA\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,X-Csrftoken,If-Modified-Since,Cache-Control,Content-Type,Authorization,Accept,Origin,X-Logrocket-Url,X-Logrocket-Ignore,X-Logrocket-Secret,X-LogRocket-Relay-Version,traceparent\r\naccess-control-max-age: 1728000\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":113573,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4e0987bcfee2fb219543d0ff0e787493","sha1":"e37ef5ead61b2013499e76e6e26dd9ccbd3d0620","sha256":"093b8f1d56d7ebf92bb97d6c8cd61326f70375dbd05bd8a8bac09d9bebedef71","sha512":"d18aa268002fa680d398c2fca427d71d5b2303dae4495bbfdacabf881567bd584cb784b6e427ef90ee983f645fe31afea024983ec42f1046f89f46ce075be7a2","ssdeep":"384:u860DmiDvvJXLnmcuwWQJ2BROGsAkPCIzfB3r6M05OFrgPsiAch3P0B5fnP1LYo4:xMRxqPBTLYMQz/MlX3phNj5NB/4hF","tlshash":"7fb3559c81831c7f6a08276584df0fdc55803827e7a9dde1ffed998ca661b488bb4634","first_seen":"2026-03-20T23:48:23.758142Z","last_seen":"2026-03-20T23:48:23.758142Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/ping","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"174.129.2.219","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:49.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/ping HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 683\r\nOrigin: https://www.accountingclientportal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":683,"data":"app_id=n1ttmdbg\u0026v=3\u0026g=1cab8b9482b2b778bf46814d572b9de179c15410\u0026s=dc979b99-5f7c-49e1-8721-367b8d3b905c\u0026r=\u0026platform=web\u0026installation_type=npm-package\u0026installation_version=undefined\u0026Idempotency-Key=9d33727d1c03b49d\u0026internal=%7B%22marketo_tracking_cookie%22%3Anull%2C%22hubspot_tracking_cookie%22%3Anull%7D\u0026is_intersection_booted=false\u0026page_title=Client%20Portal\u0026user_active_company_id=undefined\u0026user_data=%7B%22email%22%3A%22%22%2C%22user_id%22%3A0%2C%22role%22%3A%22%22%2C%22company%22%3A%7B%22name%22%3A%22%22%2C%22id%22%3A0%7D%2C%22created_at%22%3A%222026-03-20T23%3A47%3A48.859Z%22%7D\u0026source=apiBoot\u0026sampling=false\u0026referer=https%3A%2F%2Fwww.accountingclientportal.com%2Fclient-login"}},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Fri, 20 Mar 2026 23:47:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 403 Forbidden\r\ncache-control: no-cache\r\naccess-control-allow-origin: https://www.accountingclientportal.com\r\nvary: Accept-Encoding, Accept\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\naccess-control-expose-headers: x-request-id, x-runtime\r\nx-intercom-version: 0cfb82a79decc7ea34e326c2f7c1079794f67e42\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\nx-request-id: 0008ul0cesb2ujisevv0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.060769\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nserver: nginx\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":281,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"089c175524515d7e1a8c6c555dffcce7","sha1":"54615d7ee474622527f97e3a2962caa114da17eb","sha256":"f64cda83a0de6b8095464524243206cc8044bd08e740de6601978c4b7a23416a","sha512":"f1dbcdb59f96be6ea136f6cc1d21dd2ab311a5b307e78441855afdf083f046335e0d210260868b52394f32a2df6b78c1f6d0cc6da37f4500cbf99a13ec650a5e","ssdeep":"","tlshash":"f9d02bd7428d09370ed603537a0431480a58e44483ae1c45513581bdc549b44c331368","first_seen":"2026-03-20T23:48:23.759194Z","last_seen":"2026-03-20T23:48:23.759194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":217,"dns":22,"connect":94,"send":0,"wait":173,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/antd-rx9FrHo4.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/antd-rx9FrHo4.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.accountingclientportal.com/client-login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:42:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:27 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"ac959f12083bd999b438e94a6c63c1a5\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: GWnG1cQWGno-yHDMPOEZdjZQMtwnfh275gRyjC7B91SHz6E3MvciuQ==\r\nage: 7498\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":940157,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65228)","md5":"ac959f12083bd999b438e94a6c63c1a5","sha1":"2480d9c4c71799320dd6dc581a3a25d35c434c8f","sha256":"b4ebfb400563e6cec67335daa9895ac0ec3dc2750f0819c36c83557ebcf5037c","sha512":"937134b49a50e309a050cf424584ab34392f2bcb7f523efb614f3931795400bf49d247711f74ae0985296ebb514a678377c511287327e3eedc3e651902638b15","ssdeep":"6144:H9rBKPqwn+u6Ytz+574yzY+Nlf4DN+crQZVAy0AGcYcLsJPc4m0l1Dk3VB+/3wKx:TwndwjzY+Nlf40YcoLEC3UH/pSuvCAX2","tlshash":"79150adcb289b02456ab54b6006f140ab33f3a5d785d8820e276c9c87975ecde137f6e","first_seen":"2026-03-20T23:48:23.760062Z","last_seen":"2026-03-20T23:48:23.760062Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/recharts-CsBei5kJ.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/recharts-CsBei5kJ.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.accountingclientportal.com/client-login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:42:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:34 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"8f7b5e01bf83496ee364c2d03ed36345\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: yPd-7MHvnvXMWXWpAvUMySnHaDzeFuTdwCZK9XBeAEqE-PA_cwhA2w==\r\nage: 7498\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":379196,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65228)","md5":"8f7b5e01bf83496ee364c2d03ed36345","sha1":"1af21879b12eb46d500ef48813b049dedf7ee839","sha256":"dfd0c275b5f4a6974ad6e569a5c858ef92fcc15ff9535251d3b7b1c500bf526a","sha512":"9375dfc343cefeca38914af14af4a08faf6628a4a1b7b407df6b0ebb4d6248c6a623205b50daabac7100269c16aad5202d4ad2e53ee56cc7f711064a56a10e8c","ssdeep":"3072:pAKkplFQYzESZvIYMKZ+QWpzrWy7oNqsgad4jFy6dWYgVFyWI1mvKkMI8:2KkLFt4KgLad4jo6AYuFBK3I8","tlshash":"e3841ac47696f46542a352a2007f590bf23c3e1a282dd454f362ddd97ca488ea1bbf37","first_seen":"2026-03-20T23:48:23.760793Z","last_seen":"2026-03-20T23:48:23.760793Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/emojiMart-D1C9f3VX.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/emojiMart-D1C9f3VX.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.accountingclientportal.com/client-login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:42:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:28 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"ef2a7759c058bf2824a771b22207fae5\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: SuR9ue7a-Hkkv69gZszXBNntvf3nSUCqTAfQ2lL3omBZvXS0bPG4RQ==\r\nage: 7498\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":510608,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (63842)","md5":"ef2a7759c058bf2824a771b22207fae5","sha1":"0fee7231df2322bf68822a49076269536e0952de","sha256":"06782ceecfd729efa9b6cbeaecee3eb95fd34190ac58d1d1cb6c2602074acda7","sha512":"6d53334df5e233b8d0f99705a996e7df6c5f30f06476dac6d7f0d1c52affe5df21d7265efa1e1d96ef356fb31e4477aa22acbb47fbf0f16a397bc7c0c0f56757","ssdeep":"6144:GzKS/t72jJ0b5UXqPwr583G0eY2KxqDhNMF0S:G40eY0Nw0S","tlshash":"c1b4cb1e01159ebddac8b3939412dec9a7e47063c2884eac31f5c9a9cbc0bbd3645d76","first_seen":"2026-03-20T23:48:23.761642Z","last_seen":"2026-03-20T23:48:23.761642Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/pdfLib-Dawvqq-2.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/pdfLib-Dawvqq-2.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.accountingclientportal.com/client-login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:44:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:34 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"a12a714806a2b96b774568c05c57101d\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: _kgZxdaeNtzuUXUbcCmK9YYyRx5Z52pLwOsaJr8InDLIMQ890cJEEQ==\r\nage: 7404\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":425033,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65226)","md5":"a12a714806a2b96b774568c05c57101d","sha1":"82bdf5cec94ddae36582f66ad6b1d9862a9e64d5","sha256":"0a5f402b0ea8aabb315b8d6a2b522c8ffb7df4395bf3ac537688c529942b6293","sha512":"ddde6affd5a87a7170deb7770aaa72ab4790c4b69a60b2874e47d1db77d0f379cf76a93922d75fea23705e8a02e5e5268fdc9715811071008447d1d0906329cf","ssdeep":"6144:F7jSB+iIojzQOfLa7BNww+PNTbrULVPKKqknlWwZicDQGPeS0/q:FrijzVG7BNww+Pr07Qq","tlshash":"83944ad4b2a1b42443a3a4b4042f154af33f792ea80981bdf265c8d66cf45de917bf39","first_seen":"2025-12-09T19:58:53.012182Z","last_seen":"2026-03-20T23:48:23.762333Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/favicon.ico","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:46.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/client-login\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 9251\r\ndate: Fri, 20 Mar 2026 21:42:53 GMT\r\nlast-modified: Fri, 20 Mar 2026 21:42:44 GMT\r\netag: \"7f9a5b0404336211468010154b34e37e\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: naBkTQFZWinF24Zxu00p3QiNw9og5LyRpLvjZvcZkNF0i9GT36vpYw==\r\nage: 7494\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":9251,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"7f9a5b0404336211468010154b34e37e","sha1":"1f9be0fc0339abf1783b72b6cd0007d423dfeac4","sha256":"6a6ef1674d7a160b0fdf090017045f76fc7544c7fd2b5e4ea8e3ad5aaa8fb0ba","sha512":"7c484999bc0164cbcd22997095da2297f7881b09263c1b2db3dacbb9628043254b69e2b420e8842b3fd60a5a15829d99b46ba9920a5d9249b044e22dcf20f1f2","ssdeep":"192:T7VYe3EQvbrY2JEHIURC38bV2unYg+oqOMwV4R056/wAU0nI:nyeZPHJHVsh1aKY7I","tlshash":"f812bfd80b534a230a3067fbac3bcb12246c9144e046015596ba37effd91e4c97b7d6e","first_seen":"2025-11-03T14:17:03.129537Z","last_seen":"2026-03-20T23:48:23.763219Z","times_seen":6,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/pdfLib-Dawvqq-2.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/pdfLib-Dawvqq-2.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/assets/index-CTHyKSCX.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:44:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:34 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"a12a714806a2b96b774568c05c57101d\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: vKr0x60P1tXk9iwDf17UDHGHLIb0ZguqbF0mtSSkMEU-RM5-oA2i2Q==\r\nage: 7404\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":425033,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65226)","md5":"a12a714806a2b96b774568c05c57101d","sha1":"82bdf5cec94ddae36582f66ad6b1d9862a9e64d5","sha256":"0a5f402b0ea8aabb315b8d6a2b522c8ffb7df4395bf3ac537688c529942b6293","sha512":"ddde6affd5a87a7170deb7770aaa72ab4790c4b69a60b2874e47d1db77d0f379cf76a93922d75fea23705e8a02e5e5268fdc9715811071008447d1d0906329cf","ssdeep":"6144:F7jSB+iIojzQOfLa7BNww+PNTbrULVPKKqknlWwZicDQGPeS0/q:FrijzVG7BNww+Pr07Qq","tlshash":"83944ad4b2a1b42443a3a4b4042f154af33f792ea80981bdf265c8d66cf45de917bf39","first_seen":"2025-12-09T19:58:53.012182Z","last_seen":"2026-03-20T23:48:23.762333Z","times_seen":4,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/scripts/beforeunload.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:45.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /scripts/beforeunload.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/client-login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ncontent-length: 721\r\ndate: Fri, 20 Mar 2026 21:44:24 GMT\r\nlast-modified: Fri, 20 Mar 2026 21:42:44 GMT\r\netag: \"4d01d6bf80d9a4fa062be49d6a796b7f\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: GYBdn3vB4o9C2j5k9rJ4ihoYt-PZUsHFwOClf424jqaZOe96jzOSyw==\r\nage: 7402\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":721,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (306)","md5":"4d01d6bf80d9a4fa062be49d6a796b7f","sha1":"26013f87119f270b551c5c45205a2ada5d58018a","sha256":"bac0fea41f08f4c8c5b252d645bf6e0f5d8b23e66cba4558c1bf3ce2b61faa39","sha512":"36bde4c21e5cbac4b89d7dc08a5c9e713c7924f6d7b90b2ef39b4e872fed29a8d24ed8ff39ebfc126a590b992aa38db2ca4aafdcdea38a9008b36f6d37df092b","ssdeep":"","tlshash":"ab019c296bf01426106622bd82df6603277514b3074c0eb1d13cceb86f64577866c6c7","first_seen":"2025-12-09T19:58:53.043949Z","last_seen":"2026-03-20T23:48:23.764073Z","times_seen":4,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/xlsx-CzhbZ2LK.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/xlsx-CzhbZ2LK.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.accountingclientportal.com/client-login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:44:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:44 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"af312619e9f0580ea5ac4f4a2f3d1ca5\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: WE3QlnDWmUypKdE5JzNOndJo1nA6Im9Pll6eQRAD00MzsU-fQoCC6Q==\r\nage: 7404\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":479078,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"af312619e9f0580ea5ac4f4a2f3d1ca5","sha1":"95292e8da9d3c86d3b7115d56fcd7ad12462e4e1","sha256":"24da0197ced64e22aa58e4ba248e53e1fb5fe7ddfa311770a93950e7c0d792ba","sha512":"91f3f4fd9cfff2d23007f4b09f70683dbc15a666fa6eaffa8a72a74b1b948b72aef88698a4153f7c9db2cd824a0ad8b5d7c6cb3e440608ae423ecd70fe1ad754","ssdeep":"6144:k/U8vIqMIzWOMEnaxkD+1h9onoymRCptQlpcB:kTTzR6V0oyABp6","tlshash":"85a45cc636ce712a535272b7141f3046b4b4ea18d48f9e61f201f26178beec950efe99","first_seen":"2026-03-20T23:48:23.764912Z","last_seen":"2026-03-20T23:48:23.764912Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r.intake-lr.com/i?a=fchghe%2Fkeeper\u0026r=6-019d0da5-e2a5-7bbc-99f7-c4b59a9b6cd2\u0026t=380b211a-d8b9-4ebf-9517-9257099393d9\u0026s=0\u0026ro=t\u0026st=web\u0026rs=0%2Cu","fqdn":"r.intake-lr.com","domain":"intake-lr.com","tld":"com"},"ip":{"addr":"104.198.23.205","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:48.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.logrocket.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 19:25:40 GMT","end":"Mon, 11 May 2026 19:25:39 GMT"},"fingerprint":{"sha1":"E1:62:ED:34:49:F5:BC:17:3E:52:B2:98:28:B2:D6:47:BF:A9:00:AF","sha256":"53:3A:7A:32:B7:FC:C3:FC:B3:84:67:4A:3E:A3:81:68:C6:DC:7A:D2:5B:37:B9:DF:FA:38:50:CB:8F:07:1E:D2"}}},"request":{"raw":"OPTIONS /i?a=fchghe%2Fkeeper\u0026r=6-019d0da5-e2a5-7bbc-99f7-c4b59a9b6cd2\u0026t=380b211a-d8b9-4ebf-9517-9257099393d9\u0026s=0\u0026ro=t\u0026st=web\u0026rs=0%2Cu HTTP/1.1\r\nHost: r.intake-lr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-logrocket-relay-version\r\nReferer: https://www.accountingclientportal.com/\r\nOrigin: https://www.accountingclientportal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 20 Mar 2026 23:47:49 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-logrocket-upload-max-interval: 30000\r\nx-logrocket-upload-max-size: 50000000\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,X-Csrftoken,If-Modified-Since,Cache-Control,Content-Type,Authorization,Accept,Origin,X-Logrocket-Url,X-Logrocket-Ignore,X-Logrocket-Secret,X-LogRocket-Relay-Version,traceparent\r\naccess-control-expose-headers: X-LogRocket-Upload-Max-Interval,X-LogRocket-Upload-Max-Size\r\naccess-control-max-age: 1728000\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":766,"timings":{"blocked":320,"dns":56,"connect":124,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/images/google-logo.png","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:49.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /images/google-logo.png HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/client-login\r\nCookie: _lr_tabs_-fchghe%2Fkeeper={%22recordingID%22:%226-019d0da5-e2a5-7bbc-99f7-c4b59a9b6cd2%22%2C%22sessionID%22:0%2C%22lastActivity%22:1774050468525%2C%22hasActivity%22:false%2C%22clearsIdentifiedUser%22:false}; _lr_hb_-fchghe%2Fkeeper={%22heartbeat%22:1774050468522}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Azeret+Mono:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:45.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css2?family=Azeret+Mono:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 20 Mar 2026 23:47:45 GMT\r\ndate: Fri, 20 Mar 2026 23:47:45 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1747,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"30f50048e2fb992a5fa0b595794afc2d","sha1":"d80353d4302ca1add55da7ff8f4dd12bc75a1f90","sha256":"24a74834456060b09748e7f3233cdf299be5b4f189d243a50254758d3a0796b9","sha512":"7b9d23f8158c4c88d425d9aa5c1b19cbd121ed544ba348225396216a6a2d58bf21e1f9c4a3409efee10571ffdcc097ae9417a1db30f7cff554a5315b7c3e533d","ssdeep":"","tlshash":"2a3115c2087f9504eb430cc116db3e36ee0ea2d46411ea786ffe24d8ad57c25536670c","first_seen":"2025-09-12T01:33:43.723958Z","last_seen":"2026-03-20T23:48:23.766133Z","times_seen":16,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":220,"dns":1,"connect":23,"send":0,"wait":30,"receive":0,"ssl":199},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/logrocket-CREWEnoA.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/logrocket-CREWEnoA.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.accountingclientportal.com/client-login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:44:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:33 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"fa801b832c77e98f1204986d1840cd93\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: XTN9Yd7n64Tr2bTrm8IkJmXp3nUdub91OX-PyK1Ms8WOI_KnKQc4Ag==\r\nage: 7404\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":145107,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65228)","md5":"fa801b832c77e98f1204986d1840cd93","sha1":"3bf9f9e5068b37d07b2412f58907d89f920b0342","sha256":"fac98e0695bce26eb1b93fa967435ea49ca02592ddd6ff9d63a6bb169d3b78ca","sha512":"6b8b66883bf395e729342d84eabdbc2c837fe4b27bc577fff7a6df70b51a1a4cae3968be738cbaf979e15e0f807a2c9b1b8c139646910f5c6923340a3a0d4f66","ssdeep":"1536:+fH0yCnhsbGZhkdqod32X6EKGbP/+4nGaMvav0hGHOULAgckt+5lt+54t+55ol4x:+fH0yCn1hkdqods3bekDgPgAgRKS","tlshash":"65e3b7c9b4f8fd5327da652e712b5209b7ee9490b029e4907315cfc26c912cb90a7e1f","first_seen":"2025-12-09T19:58:53.080578Z","last_seen":"2026-03-20T23:48:23.766909Z","times_seen":4,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/sentry-CTqS8Hgx.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/sentry-CTqS8Hgx.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.accountingclientportal.com/client-login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:42:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:35 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"3f3d9c25d2dff20050e310efc97ddb91\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: m5mj6bcjYi-kat3rcnGgIrwa_bymLtC-GziAcyhxKL_vDX3tK6DkPg==\r\nage: 7498\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":149664,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65228)","md5":"3f3d9c25d2dff20050e310efc97ddb91","sha1":"0e7863b99847d00acbb704e2558d394e17abfd42","sha256":"9046f17308226a6db3eecd42149a52266715923ed707435162524aee92d99f55","sha512":"82c1d510f0a608396a922fcbe1937447903a0de789edcf10bf5f77f17723a4b35dce753b53a660c368e8031f5e18967fdfe1f9d51ba3783f8c934adfa3c7ca1b","ssdeep":"3072:fD0x5dvBr4BQtkh9i5vXsU/x2j/vcnuC7okFDpg6sGHDHa:QxPv5UQtTESxjuC7ompgRGHDHa","tlshash":"ece3c6d9b196b03207e616a5a07b0106f7395950310bc194f63cddde2eba44ea1b7f3e","first_seen":"2026-03-20T23:48:23.767779Z","last_seen":"2026-03-20T23:48:23.767779Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.3444d8e0.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"18.239.105.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:49.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /vendor.3444d8e0.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.accountingclientportal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 159709\r\nlast-modified: Fri, 20 Mar 2026 16:12:17 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: NEJncqrHj1den4GsKa9Joeo4DgR7q9we\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 20 Mar 2026 21:57:44 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"1e854cace4c74c2c6527cf1defcfe18d\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8e8e0fdfe938f4dbcfa8bb4284454f5a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: TmfyXKnawZU-0vx4gHcj7pWkGya4kQ_4eC1vD7-AwXwDd-tcWaEzEw==\r\nage: 6606\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":521222,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65463)","md5":"43b66cc504e152b4230ba37671fb2267","sha1":"82424af546617a3fad58a59bc27870ba907d2c8b","sha256":"bacb73b046b119a39ccd6f083d6988d36cfe8a49295e87111f1df7706866fdb9","sha512":"7ef7adaa956314c4e91a1ae5ea4027a861a35d476ddb3e990a9f95770132609d17ed357e99b6d5f8d0154525889d5bd87223bb23ab6097f80d326eb8d4b4bf0e","ssdeep":"6144:j8C6LzOQnUndrYkgmjajpqjcGBqu0HRbHdCVbp1TTkJhOILiBZ:jN6LzOqYajmdEhCVbp1cM","tlshash":"7fb418dd7591f46207f312f2407f180ab379296a284c4860f664e8dd78f994da23bf6e","first_seen":"2026-03-18T14:52:54.200083Z","last_seen":"2026-03-31T10:06:51.556813Z","times_seen":1817,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":67,"dns":22,"connect":18,"send":0,"wait":63,"receive":8,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/udecode-Qbd5AnIU.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/udecode-Qbd5AnIU.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/assets/index-CTHyKSCX.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:42:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:35 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"a407c7a0755febfc781e7d8f5e201dce\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: R6sLavcqG1t8nT06bpyIP9kcLp4_o7rjUfwuXd-aqsAlujnrcsgl0A==\r\nage: 7498\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1117177,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65228)","md5":"e4864ed42a32a33588bcf519bd09f94e","sha1":"8096e3268a93e7fc6f213c0f7e921647308c8114","sha256":"132877543bcd0c7a09e43da7f54f2847e894b56454a57e1d4016a5e50f433fc1","sha512":"31c873d516268754d2b6440ac3c09e64c8673aedb7a795a2490a48f7903f43837f21ae287701bc9daf8947ec1caabc1f8d3f60eff8dacf27e7289032ac5a820d","ssdeep":"24576:tnsgASS4jIp0Dziy7MWv3Ll+UssOH9qxABEZLU3FdLD4/im4:tSKpZIsOH9qxAKZLU1dLD4/im4","tlshash":"6a253b9533c1b27657da10ea807f020bf2396a1a340ed150f2b4e8eb7c799866177f79","first_seen":"2026-03-20T23:48:23.76902Z","last_seen":"2026-03-20T23:48:23.76902Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/emojiMart-D1C9f3VX.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/emojiMart-D1C9f3VX.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/assets/index-CTHyKSCX.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:42:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:28 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"ef2a7759c058bf2824a771b22207fae5\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: U4N83pAzVKZu6PNiIPzv2ao4MgGtphqxt_NDE5eu5LOvPbAxcCLqgw==\r\nage: 7498\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":510608,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (63842)","md5":"ef2a7759c058bf2824a771b22207fae5","sha1":"0fee7231df2322bf68822a49076269536e0952de","sha256":"06782ceecfd729efa9b6cbeaecee3eb95fd34190ac58d1d1cb6c2602074acda7","sha512":"6d53334df5e233b8d0f99705a996e7df6c5f30f06476dac6d7f0d1c52affe5df21d7265efa1e1d96ef356fb31e4477aa22acbb47fbf0f16a397bc7c0c0f56757","ssdeep":"6144:GzKS/t72jJ0b5UXqPwr583G0eY2KxqDhNMF0S:G40eY0Nw0S","tlshash":"c1b4cb1e01159ebddac8b3939412dec9a7e47063c2884eac31f5c9a9cbc0bbd3645d76","first_seen":"2026-03-20T23:48:23.761642Z","last_seen":"2026-03-20T23:48:23.761642Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/AlertHexagon-Cx7Ucoj8.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:48.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/AlertHexagon-Cx7Ucoj8.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.accountingclientportal.com/client-login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:57:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:41:52 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"28201b70c022fa8755f755b9c97cd529\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: 5IFAekHdVVxsaP71EfkDAvo9j3KjX-aGHcYAEx8rqlPUUbL7rcWW3g==\r\nage: 6598\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1635,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1226)","md5":"28201b70c022fa8755f755b9c97cd529","sha1":"1fee1c0fbdb94ba5cfb2860b2934a0e68323b663","sha256":"28829e75f05d9a31c02c135f3d6a8cec35d07eca428cc60ae65c5972d4f9c4f4","sha512":"1862765ed50eb4f7210b24547c05a3c223412a0660c72362f5cc4c904274219b039b703d13292e4899121cce6f680b0da1ff04336dbfa937d43dd8ac69af13e6","ssdeep":"","tlshash":"e931a6e993d078b8a00c2bf9d62a442773a13a3b7fc347c4809c4834f115e9d5a5fe95","first_seen":"2026-03-20T23:48:23.769943Z","last_seen":"2026-03-20T23:48:23.769943Z","times_seen":1,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.launchdarkly.com/sdk/goals/63b838700e955212fb9b1b24","fqdn":"app.launchdarkly.com","domain":"launchdarkly.com","tld":"com"},"ip":{"addr":"151.101.65.55","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:48.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.launchdarkly.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 09 Dec 2025 01:05:16 GMT","end":"Sun, 10 Jan 2027 01:05:15 GMT"},"fingerprint":{"sha1":"45:A2:66:40:2A:B8:39:2E:E9:1B:C9:50:99:20:95:01:03:85:E3:2D","sha256":"DA:6B:B2:AF:A0:8C:BC:9D:6F:9D:C1:F5:51:1F:6D:93:B8:AC:5A:1C:DF:BB:9F:F9:62:C2:E5:75:B0:BF:15:F5"}}},"request":{"raw":"OPTIONS /sdk/goals/63b838700e955212fb9b1b24 HTTP/1.1\r\nHost: app.launchdarkly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-launchdarkly-user-agent,x-launchdarkly-wrapper\r\nReferer: https://www.accountingclientportal.com/\r\nOrigin: https://www.accountingclientportal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags\r\naccess-control-allow-methods: GET, OPTIONS, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\nallow: GET, OPTIONS, HEAD\r\ncontent-encoding: gzip\r\nld-region: us-east-1\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ndate: Fri, 20 Mar 2026 23:47:48 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410020-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1774050469.726458,VS0,VE99\r\nvary: Accept-Encoding\r\nage: 0\r\ncontent-length: 23\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":70,"dns":37,"connect":13,"send":0,"wait":113,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/rw.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:45.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /rw.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/client-login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:44:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:44 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"e3d23cfb1b01dbcc93af6dc5ad7d3960\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: dczS1jiQl-7m3Kb0uIUUhXXjCPlXwu6TCp8eYXtRwr6BcYqQjXKung==\r\nage: 7402\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16389,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15729)","md5":"e3d23cfb1b01dbcc93af6dc5ad7d3960","sha1":"f99596aac190fd136e57aa7d4dadde4195fc2e0d","sha256":"79fc839a832ad94ddbb4b998c9652f57847ef2008f592ab6fbea97897dc46e1a","sha512":"229172a95769ff91bb3f75ff68b3ecb483c2e75c5e717e19c3562360dc7dbe0d6ba92a5a5ba06fcaf34f4d0b5dd4d9fa88d518eda93a74d18e7c6fe65853d472","ssdeep":"192:bBi20Ozg5fd3tqNEz5CgxpRyAEEEAnACJwOL4l7V/U38ERBtYLH9yducUIeWSx:Njzgw+zLACSa4l23PIH9yducUGC","tlshash":"5372959976d1b4a203977475863f220bf3766c6308bcd4d0e3319ce9aea894f8126f5d","first_seen":"2025-12-09T19:58:53.063727Z","last_seen":"2026-03-20T23:48:23.770638Z","times_seen":4,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/recharts-CsBei5kJ.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/recharts-CsBei5kJ.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/assets/index-CTHyKSCX.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:42:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:34 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"8f7b5e01bf83496ee364c2d03ed36345\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: EEiFkk5TNi78DvzxIIe2d-y5zBC7tBns3QUq3gWOnilwJW3sGutwqQ==\r\nage: 7498\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":379196,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65228)","md5":"8f7b5e01bf83496ee364c2d03ed36345","sha1":"1af21879b12eb46d500ef48813b049dedf7ee839","sha256":"dfd0c275b5f4a6974ad6e569a5c858ef92fcc15ff9535251d3b7b1c500bf526a","sha512":"9375dfc343cefeca38914af14af4a08faf6628a4a1b7b407df6b0ebb4d6248c6a623205b50daabac7100269c16aad5202d4ad2e53ee56cc7f711064a56a10e8c","ssdeep":"3072:pAKkplFQYzESZvIYMKZ+QWpzrWy7oNqsgad4jFy6dWYgVFyWI1mvKkMI8:2KkLFt4KgLad4jo6AYuFBK3I8","tlshash":"e3841ac47696f46542a352a2007f590bf23c3e1a282dd454f362ddd97ca488ea1bbf37","first_seen":"2026-03-20T23:48:23.760793Z","last_seen":"2026-03-20T23:48:23.760793Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prod.keeper.app/practice/branding?whiteLabelUrl=https:%2F%2Fwww.accountingclientportal.com","fqdn":"prod.keeper.app","domain":"keeper.app","tld":"app"},"ip":{"addr":"18.65.39.94","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:49.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5B:34:7A:C1:BD:AF:A9:24:F5:04:0E:9F:C8:85:AA:E6:13:00:A3:B9","sha256":"52:89:35:13:1C:5F:5E:E1:58:B3:72:0C:66:BA:A9:80:05:8F:08:E6:C3:83:3D:A1:43:BB:8D:95:42:0E:94:99"}}},"request":{"raw":"GET /practice/branding?whiteLabelUrl=https:%2F%2Fwww.accountingclientportal.com HTTP/1.1\r\nHost: prod.keeper.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nsentry-trace: e7652592b7f94050b4889f4d3ad9be8f-93450bbbb811dc2d-0\r\nbaggage: sentry-environment=production,sentry-release=9b46da856612c74d8ca4a79d9ac5b9319a0e02b5,sentry-public_key=a1ec4ceac79f4228841055b5e33cb53e,sentry-trace_id=e7652592b7f94050b4889f4d3ad9be8f,sentry-org_id=552561,sentry-sampled=false,sentry-sample_rand=0.4351229406889985,sentry-sample_rate=0.1\r\nOrigin: https://www.accountingclientportal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 180\r\ndate: Fri, 20 Mar 2026 23:47:49 GMT\r\nvary: Accept-Encoding\r\ncontent-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\norigin-agent-cluster: ?1\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nx-request-id: Root=1-69bddca5-57e9c9fa2550499a18554c26\r\nx-trace-id: e7652592b7f94050b4889f4d3ad9be8f\r\naccess-control-expose-headers: X-Request-Id, X-Trace-Id\r\netag: W/\"b4-93ks+5xv6NLwttjBeQYAaX+g8ow\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 37bca31d9c7de06b67b2363770e065b4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P1\r\nx-amz-cf-id: K7EWxck-tMHS9M4eBKhDDr4ZzXCow9uhB7YKWWipLYntVJkZAwm9Bg==\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":180,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cfa774a768d7d1f3acb869e646e10fd2","sha1":"f7792cfb9c6fe8d2f0b6d8c1790600697fa0f28c","sha256":"b0fd68d5d2b3273ed25e26e6e560f74ebf7774b39e3b9849e93f0800c8f2eb4c","sha512":"395c94283c90bb9e237b07a25708fd6652e6284663f6dc775524fbd0f85bcb39d48b565ac8bfce8afecbf4801ed26e36f3150c61d1922c8d1fd6c66f070cc01d","ssdeep":"","tlshash":"39c0124894cc4639d55e889494a2b235340d624749781da2a018dd60e1f124de941699","first_seen":"2026-03-20T23:48:23.771555Z","last_seen":"2026-03-20T23:48:23.771555Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/launcher_settings","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"174.129.2.219","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:49.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/launcher_settings HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 435\r\nOrigin: https://www.accountingclientportal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":435,"data":"app_id=n1ttmdbg\u0026v=3\u0026g=1cab8b9482b2b778bf46814d572b9de179c15410\u0026s=be3d4270-2754-447a-b89f-fdbb7db700b5\u0026r=\u0026platform=web\u0026installation_type=npm-package\u0026installation_version=undefined\u0026Idempotency-Key=75659c7b4b8a0148\u0026internal=\u0026is_intersection_booted=false\u0026page_title=Client%20Portal\u0026user_active_company_id=undefined\u0026user_data=%7B%22email%22%3A%22%22%2C%22user_id%22%3A0%7D\u0026referer=https%3A%2F%2Fwww.accountingclientportal.com%2Fclient-login"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Mar 2026 23:47:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 200 OK\r\nvary: Accept-Encoding, Accept\r\nx-intercom-version: 0cfb82a79decc7ea34e326c2f7c1079794f67e42\r\naccess-control-expose-headers: x-request-id, x-runtime\r\nx-request-id: 0008jriejdnrpgitd450\r\netag: W/\"68e9d4aa1ed5899b454adb1620668d65\"\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: https://www.accountingclientportal.com\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.024518\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nx-ami-version: ami-050d1869df3666e48\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":347,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a9d75afdef9b0479774fa16c507891a3","sha1":"b740117b93d3e891a11166e9b4fc6a6d2e13d448","sha256":"68e9d4aa1ed5899b454adb1620668d65304379e5865e0765ffbe08e3e1fcecdd","sha512":"f8da98e18afba9a7cb5ddcf1ad78eead8ac74ae9cc626db213613710fa37bc1ea037ea282434aeae253d692960483395fba52bdc95a9c479db8e3c498dcc9394","ssdeep":"","tlshash":"2de0c0185b9c583914d607f9c515fe32034c00da67801eb3f8a8d35411fd10c060280b","first_seen":"2026-03-20T23:48:23.77234Z","last_seen":"2026-03-20T23:48:23.77234Z","times_seen":1,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":226,"dns":26,"connect":94,"send":0,"wait":121,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.launchdarkly.com/sdk/evalx/63b838700e955212fb9b1b24/contexts/eyJraW5kIjoidXNlciIsImFub255bW91cyI6dHJ1ZSwia2V5IjoiYW5vbnltb3VzLXVzZXItY2xpZW50LWFwcGxpY2F0aW9uIn0","fqdn":"app.launchdarkly.com","domain":"launchdarkly.com","tld":"com"},"ip":{"addr":"151.101.65.55","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:48.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.launchdarkly.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 09 Dec 2025 01:05:16 GMT","end":"Sun, 10 Jan 2027 01:05:15 GMT"},"fingerprint":{"sha1":"45:A2:66:40:2A:B8:39:2E:E9:1B:C9:50:99:20:95:01:03:85:E3:2D","sha256":"DA:6B:B2:AF:A0:8C:BC:9D:6F:9D:C1:F5:51:1F:6D:93:B8:AC:5A:1C:DF:BB:9F:F9:62:C2:E5:75:B0:BF:15:F5"}}},"request":{"raw":"GET /sdk/evalx/63b838700e955212fb9b1b24/contexts/eyJraW5kIjoidXNlciIsImFub255bW91cyI6dHJ1ZSwia2V5IjoiYW5vbnltb3VzLXVzZXItY2xpZW50LWFwcGxpY2F0aW9uIn0 HTTP/1.1\r\nHost: app.launchdarkly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-LaunchDarkly-User-Agent: JSClient/3.9.0\r\nX-LaunchDarkly-Wrapper: react-client-sdk/3.5.0\r\nOrigin: https://www.accountingclientportal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nx-ld-envid: 63b838700e955212fb9b1b24\r\ncache-control: max-age=0\r\netag: W/\"(p:222D1SKG5Y8VTASV1M18QH0K53:2794)\"\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: OPTIONS, GET\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-Requested-With, X-LD-Private, X-LD-AccountId, X-LD-EnvId, X-LD-PrjId, X-LaunchDarkly-Event-Schema, X-LaunchDarkly-User-Agent, X-LaunchDarkly-Wrapper, LD-API-Version, X-LaunchDarkly-Tags\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Fri, 20 Mar 2026 23:47:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL, cache-hel1410020-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1774050469.868488,VS0,VE731\r\nvary: Authorization, Accept-Encoding\r\nage: 0\r\ncontent-length: 1769\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":11839,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"844da9e0e28e58c73c3b00192b5cef5a","sha1":"a4c1cdc3b03cd33e12454bb7f4fe1bf1d72f9dba","sha256":"fd7b8117140a40f072628c929fcd82331fa091d7e171906a7a28b7a2f76c85e0","sha512":"018b59ad1afdfbbea6b6ca9fa68115300a79d03ba97c086227c4b0d7e66e38f48adb8d2c43d1a4325f8b114faf5bff2ecc168c6312ff23b052cb64ea083f010c","ssdeep":"192:2dbUTZRdrPNaRS9mu+rl1ulLtz/I9rpMYI7KqHKh5a/k4ke5Fv1KMSMjvZT74:2dbUFRdrPNaRS9mu+rl1ulL1/INpMYII","tlshash":"f2323859b26b68fb9036075fdd6e7882d3fc92de380651ccfa9002453b926fd421b893","first_seen":"2026-03-20T23:48:23.77311Z","last_seen":"2026-03-20T23:48:23.77311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":745,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/scripts/array-polyfill.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:45.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /scripts/array-polyfill.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/client-login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ncontent-length: 763\r\ndate: Fri, 20 Mar 2026 21:44:24 GMT\r\nlast-modified: Fri, 20 Mar 2026 21:42:44 GMT\r\netag: \"0ec433ba041e1512cd0536ebd060f610\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: q4_b7B9LzlGGjXwtx_fsbs7SmJm-fFSmjg_tlhupeOEGbqkJBF-QAQ==\r\nage: 7402\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":763,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (306)","md5":"0ec433ba041e1512cd0536ebd060f610","sha1":"23fb0ed2348be486cb0f05a99c9f54cfed727752","sha256":"f93cab52c8fb1268f83969a83f49ab98550e9e78aa31a43e767b90c5d1566add","sha512":"81453a7cfecb507c1184aae785296c6743f9b6d4975fbbe17b2d5695260fd3ce5e090d58bdf97d58ed329a48cc09b01cc95d9c56f8185f2782baf885452ed46e","ssdeep":"","tlshash":"9201bd490bb81201423d03e8d51a0d077a55643f5fcc4ab4e1789ab81ab3854db2c9af","first_seen":"2025-12-09T19:58:53.062388Z","last_seen":"2026-03-20T23:48:23.773965Z","times_seen":4,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/logrocket-CREWEnoA.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/logrocket-CREWEnoA.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/assets/index-CTHyKSCX.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:44:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:33 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"fa801b832c77e98f1204986d1840cd93\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: y_tWShqLgHbeqOL4txJpGuEcezobHyzt0yG2h6Zp63ZfAdNwo9cmnA==\r\nage: 7404\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":145107,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65228)","md5":"fa801b832c77e98f1204986d1840cd93","sha1":"3bf9f9e5068b37d07b2412f58907d89f920b0342","sha256":"fac98e0695bce26eb1b93fa967435ea49ca02592ddd6ff9d63a6bb169d3b78ca","sha512":"6b8b66883bf395e729342d84eabdbc2c837fe4b27bc577fff7a6df70b51a1a4cae3968be738cbaf979e15e0f807a2c9b1b8c139646910f5c6923340a3a0d4f66","ssdeep":"1536:+fH0yCnhsbGZhkdqod32X6EKGbP/+4nGaMvav0hGHOULAgckt+5lt+54t+55ol4x:+fH0yCn1hkdqods3bekDgPgAgRKS","tlshash":"65e3b7c9b4f8fd5327da652e712b5209b7ee9490b029e4907315cfc26c912cb90a7e1f","first_seen":"2025-12-09T19:58:53.080578Z","last_seen":"2026-03-20T23:48:23.766909Z","times_seen":4,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/pdfjs-DDljtr9W.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/pdfjs-DDljtr9W.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/assets/index-CTHyKSCX.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:44:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:34 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"b5ea9b84d137cd40aea51c34de998248\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: YYXT3iQCF51ygJqRJp8976MPipvoEy5Fw7wmASmknWr7WIC1qJ_j8w==\r\nage: 7404\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":308633,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65217)","md5":"b5ea9b84d137cd40aea51c34de998248","sha1":"47edcf7a947954daa7b3258bd43fc394bd970b2c","sha256":"d5f29144e0cdacd62a88189f01d36cb0b4bc69f9260cd86d6ea4d285ad04b5eb","sha512":"e77b2ea6936381a78f7d75085afc17e1f46d1bc53247684155b0911891839b1a4b6cf38c198ca97432ab08b91337e1af76a8ebcb575e7ab7804b73539b3ca3c8","ssdeep":"6144:7zJLS+Gi4sOnVKh6FPmxlw/8rXQNvuypG/HDZV2ItR4:hSI4FnVR18g5oNVfR4","tlshash":"916418b63255243666c581c6a8b41203e72574523807c8bcb67cdddf6cafcc272bab76","first_seen":"2026-03-20T23:48:23.775268Z","last_seen":"2026-03-20T23:48:23.775268Z","times_seen":1,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/reactTreeTable-FnIFbEZE.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/reactTreeTable-FnIFbEZE.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/assets/index-CTHyKSCX.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:42:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:34 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"f1c9e06fdb4f7aa23b50b2a13b04f4a4\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: iFVJkQd2hFGwo2GvoY4eYfjPRbsHWt_CbGA-gvHlgzfpr18NQUr9Cg==\r\nage: 7498\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":89669,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65032)","md5":"f1c9e06fdb4f7aa23b50b2a13b04f4a4","sha1":"0447b4248d67092b3f7b940252cc077dbe17c70d","sha256":"8a79363c270e2a378caaa464f0f8db6449352578c7f1753f6c00fb6c5b4a16b3","sha512":"e13af8decce934ddb382db1cee4584fc61087abe5cd2ab9e970c2324b9653208f951895c2001ca9bf58f94563ace2be9d35c5d8389420ecaf29ad87bbaa86e4b","ssdeep":"1536:+3Dlew1dWYHMAlPQVrdEVg31Be7JXKVcH1e7Jv+SxEufZMS4Dlp:mmAIdVFBe7pKVue7Jv+SxEufZfgD","tlshash":"759372dc7a92f02a83632464006f440bf33e7e28a44f8504d565e8e97dbc95ea5bbf1c","first_seen":"2026-03-20T23:48:23.776158Z","last_seen":"2026-03-20T23:48:23.776158Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/udecode-Qbd5AnIU.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/udecode-Qbd5AnIU.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.accountingclientportal.com/client-login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:42:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:35 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"a407c7a0755febfc781e7d8f5e201dce\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: jHUdtrBPwtIMwPYsi_YWBCj3WlSWCNIxyV4BJsOdW4GfizFz8ZSrTg==\r\nage: 7498\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1117177,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65228)","md5":"e4864ed42a32a33588bcf519bd09f94e","sha1":"8096e3268a93e7fc6f213c0f7e921647308c8114","sha256":"132877543bcd0c7a09e43da7f54f2847e894b56454a57e1d4016a5e50f433fc1","sha512":"31c873d516268754d2b6440ac3c09e64c8673aedb7a795a2490a48f7903f43837f21ae287701bc9daf8947ec1caabc1f8d3f60eff8dacf27e7289032ac5a820d","ssdeep":"24576:tnsgASS4jIp0Dziy7MWv3Ll+UssOH9qxABEZLU3FdLD4/im4:tSKpZIsOH9qxAKZLU1dLD4/im4","tlshash":"6a253b9533c1b27657da10ea807f020bf2396a1a340ed150f2b4e8eb7c799866177f79","first_seen":"2026-03-20T23:48:23.76902Z","last_seen":"2026-03-20T23:48:23.76902Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prod.keeper.app/log/csp-log","fqdn":"prod.keeper.app","domain":"keeper.app","tld":"app"},"ip":{"addr":"18.65.39.94","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"csp","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:48.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5B:34:7A:C1:BD:AF:A9:24:F5:04:0E:9F:C8:85:AA:E6:13:00:A3:B9","sha256":"52:89:35:13:1C:5F:5E:E1:58:B3:72:0C:66:BA:A9:80:05:8F:08:E6:C3:83:3D:A1:43:BB:8D:95:42:0E:94:99"}}},"request":{"raw":"POST /log/csp-log HTTP/1.1\r\nHost: prod.keeper.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/csp-report\r\nContent-Length: 914\r\nOrigin: https://www.accountingclientportal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: report\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":914,"data":"{\"csp-report\":{\"blocked-uri\":\"eval\",\"column-number\":5263,\"disposition\":\"report\",\"document-uri\":\"https://www.accountingclientportal.com/client-login\",\"effective-directive\":\"script-src\",\"line-number\":1,\"original-policy\":\"default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log\",\"referrer\":\"\",\"source-file\":\"blob\",\"status-code\":200,\"violated-directive\":\"script-src\"}}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 20 Mar 2026 23:47:49 GMT\r\nvary: Accept-Encoding\r\ncontent-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\norigin-agent-cluster: ?1\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nx-request-id: Root=1-69bddca5-7253ad4161b1eafb2dc62866\r\nx-trace-id: 8d8ec333f127f3a076982214fd8ac2f4\r\naccess-control-expose-headers: X-Request-Id, X-Trace-Id\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 37bca31d9c7de06b67b2363770e065b4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P1\r\nx-amz-cf-id: Pp3sUz5JjdnGtxeFZIMYceo7qVbuk7atusUjltTGdwAl0p78RGtYcA==\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":583,"timings":{"blocked":153,"dns":1,"connect":18,"send":0,"wait":270,"receive":0,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.de31ab18.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"18.239.105.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:49.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /frame.de31ab18.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.accountingclientportal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 250815\r\nlast-modified: Fri, 20 Mar 2026 16:12:16 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: ejfWtzD.BVmyRyJotC.J6WlmmunZk5bP\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 20 Mar 2026 21:57:44 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"5948c8d8ae5d3fcdf0c757c873ee3a52\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 8e8e0fdfe938f4dbcfa8bb4284454f5a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: _Td7eoBEUD5Cigl_4CIv0NIwbs_KyTbSDsfsMu3xCHFAiruDalKNQQ==\r\nage: 6606\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1175864,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65464)","md5":"51c8f449e4048466df5dbf9ab8a3510c","sha1":"68666b7b1cd8ddc0e1a858834ca713ee14f78b4f","sha256":"68dba49f3272b9027e895447686cbf95dc3acfaf97f542701d02de7db90a908c","sha512":"f542b70bb18d7c46aa500c5b8ae372a659a0536e4ed3f46106c3eaef8fd1d9accc757f2c2ed510892e65500a94e43971406590a8f2aafda74b947b57440a7109","ssdeep":"12288:GK3iemcoYAgvcXAJwfRiDZ0eKTRAaLdAw+7Uip:GTCvWAFDZ0DhLdA","tlshash":"7f25c5ccb2d6f06a43976535812f200af33ea959b54d8050f629d8d1bcb958ee237f78","first_seen":"2026-03-20T16:39:47.608535Z","last_seen":"2026-03-23T09:53:28.550929Z","times_seen":230,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":64,"dns":23,"connect":16,"send":0,"wait":18,"receive":49,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"ws-mt1.pusher.com/app/86b1984cf8ed8f7b4258?protocol=7\u0026client=js\u0026version=7.6.0\u0026flash=false","fqdn":"ws-mt1.pusher.com","domain":"pusher.com","tld":"com"},"ip":{"addr":"52.45.46.132","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:48.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pusher.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 26 Apr 2025 00:00:00 GMT","end":"Tue, 26 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A0:DE:9E:B2:F9:F5:73:2A:6E:2B:F5:19:BD:77:99:37:06:A0:23:A9","sha256":"16:4B:AC:61:45:72:01:1D:80:46:8B:63:53:83:7F:05:C3:50:77:3B:79:FD:88:14:1C:D0:AD:9F:47:EB:AB:53"}}},"request":{"raw":"GET /app/86b1984cf8ed8f7b4258?protocol=7\u0026client=js\u0026version=7.6.0\u0026flash=false HTTP/1.1\r\nHost: ws-mt1.pusher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.accountingclientportal.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: W95FpHxZO6RLG3BB/BqpFA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 20 Mar 2026 23:47:48 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: fdvOt4pAIHSNmtB8iKVM2jdsgb0=\r\nSec-WebSocket-Extensions: permessage-deflate; client_no_context_takeover; server_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":993,"timings":{"blocked":0,"dns":302,"connect":395,"send":0,"wait":101,"receive":0,"ssl":493},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/useLDIdentify-DI-TRUre.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:48.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/useLDIdentify-DI-TRUre.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/assets/ClientPortalLogin-DxfYx-Ro.js\r\nCookie: _lr_tabs_-fchghe%2Fkeeper={%22recordingID%22:%226-019d0da5-e2a5-7bbc-99f7-c4b59a9b6cd2%22%2C%22sessionID%22:0%2C%22lastActivity%22:1774050468525%2C%22hasActivity%22:false%2C%22clearsIdentifiedUser%22:false}; _lr_hb_-fchghe%2Fkeeper={%22heartbeat%22:1774050468522}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ncontent-length: 776\r\ndate: Fri, 20 Mar 2026 21:49:32 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:40 GMT\r\netag: \"e26a615214adcb1b4c884b46860915d7\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: RSuz2-z-15FMIqaac3bmrQQhdex9eqGHD-9SaEG2kd_GQKdDjMsxEA==\r\nage: 7097\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":776,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (366)","md5":"e26a615214adcb1b4c884b46860915d7","sha1":"2c109ee74397cd39427d0461663196ad15c0b53a","sha256":"d54d21268da57cbbbfe38fbc57de57609a9ebd70c96960b5be24176f66261fbe","sha512":"7eb38738d75ea94fd9d17de1b0ed5cc5140b74b327e6668349550d865ffe160ad9bfc33f2eb742ad9e129f6d444f750c6011f8f1b21675c364b8853d0c460386","ssdeep":"","tlshash":"5901208a6bb487b8902409fcd1375003aa94007b738c03f5d07d4e7caf66c868388e97","first_seen":"2026-03-20T23:48:23.77746Z","last_seen":"2026-03-20T23:48:23.77746Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.launchdarkly.com/sdk/goals/63b838700e955212fb9b1b24","fqdn":"app.launchdarkly.com","domain":"launchdarkly.com","tld":"com"},"ip":{"addr":"151.101.65.55","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:48.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.launchdarkly.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 09 Dec 2025 01:05:16 GMT","end":"Sun, 10 Jan 2027 01:05:15 GMT"},"fingerprint":{"sha1":"45:A2:66:40:2A:B8:39:2E:E9:1B:C9:50:99:20:95:01:03:85:E3:2D","sha256":"DA:6B:B2:AF:A0:8C:BC:9D:6F:9D:C1:F5:51:1F:6D:93:B8:AC:5A:1C:DF:BB:9F:F9:62:C2:E5:75:B0:BF:15:F5"}}},"request":{"raw":"GET /sdk/goals/63b838700e955212fb9b1b24 HTTP/1.1\r\nHost: app.launchdarkly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-LaunchDarkly-User-Agent: JSClient/3.9.0\r\nX-LaunchDarkly-Wrapper: react-client-sdk/3.5.0\r\nOrigin: https://www.accountingclientportal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\naccess-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags\r\naccess-control-allow-methods: GET, OPTIONS, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: max-age=0\r\ncontent-encoding: gzip\r\ncontent-md5: d751713988987e9331980363e24189ce\r\netag: \"d751713988987e9331980363e24189cec\"\r\nld-region: us-east-1\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-ld-envid: 63b838700e955212fb9b1b24\r\naccept-ranges: bytes\r\ndate: Fri, 20 Mar 2026 23:47:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410020-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1774050469.841172,VS0,VE395\r\nvary: Accept-Encoding, X-CDN-LD-POP-ID\r\nage: 0\r\ncontent-length: 26\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-04-05T13:45:37.24507Z","times_seen":227484,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/antd-rx9FrHo4.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/antd-rx9FrHo4.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/assets/index-CTHyKSCX.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:42:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:27 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"ac959f12083bd999b438e94a6c63c1a5\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: 4NqOY6DJVH1j1VmGT3iquxAFt1jPrHkOn0Ufg4VorLjBy4uOQ6u8YA==\r\nage: 7498\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":940157,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65228)","md5":"ac959f12083bd999b438e94a6c63c1a5","sha1":"2480d9c4c71799320dd6dc581a3a25d35c434c8f","sha256":"b4ebfb400563e6cec67335daa9895ac0ec3dc2750f0819c36c83557ebcf5037c","sha512":"937134b49a50e309a050cf424584ab34392f2bcb7f523efb614f3931795400bf49d247711f74ae0985296ebb514a678377c511287327e3eedc3e651902638b15","ssdeep":"6144:H9rBKPqwn+u6Ytz+574yzY+Nlf4DN+crQZVAy0AGcYcLsJPc4m0l1Dk3VB+/3wKx:TwndwjzY+Nlf40YcoLEC3UH/pSuvCAX2","tlshash":"79150adcb289b02456ab54b6006f140ab33f3a5d785d8820e276c9c87975ecde137f6e","first_seen":"2026-03-20T23:48:23.760062Z","last_seen":"2026-03-20T23:48:23.760062Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/reactTreeTable-FnIFbEZE.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/reactTreeTable-FnIFbEZE.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.accountingclientportal.com/client-login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:42:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:34 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"f1c9e06fdb4f7aa23b50b2a13b04f4a4\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: OeVi4elKJXl72DJRcMgf8wL0QLVvI0-Q8TEJuTimcYacM7OsJw7YiQ==\r\nage: 7498\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":89669,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65032)","md5":"f1c9e06fdb4f7aa23b50b2a13b04f4a4","sha1":"0447b4248d67092b3f7b940252cc077dbe17c70d","sha256":"8a79363c270e2a378caaa464f0f8db6449352578c7f1753f6c00fb6c5b4a16b3","sha512":"e13af8decce934ddb382db1cee4584fc61087abe5cd2ab9e970c2324b9653208f951895c2001ca9bf58f94563ace2be9d35c5d8389420ecaf29ad87bbaa86e4b","ssdeep":"1536:+3Dlew1dWYHMAlPQVrdEVg31Be7JXKVcH1e7Jv+SxEufZMS4Dlp:mmAIdVFBe7pKVue7Jv+SxEufZfgD","tlshash":"759372dc7a92f02a83632464006f440bf33e7e28a44f8504d565e8e97dbc95ea5bbf1c","first_seen":"2026-03-20T23:48:23.776158Z","last_seen":"2026-03-20T23:48:23.776158Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.launchdarkly.com/sdk/evalx/63b838700e955212fb9b1b24/contexts/eyJraW5kIjoidXNlciIsImFub255bW91cyI6dHJ1ZSwia2V5IjoiYW5vbnltb3VzLXVzZXItY2xpZW50LWFwcGxpY2F0aW9uIn0","fqdn":"app.launchdarkly.com","domain":"launchdarkly.com","tld":"com"},"ip":{"addr":"151.101.65.55","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:48.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.launchdarkly.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 09 Dec 2025 01:05:16 GMT","end":"Sun, 10 Jan 2027 01:05:15 GMT"},"fingerprint":{"sha1":"45:A2:66:40:2A:B8:39:2E:E9:1B:C9:50:99:20:95:01:03:85:E3:2D","sha256":"DA:6B:B2:AF:A0:8C:BC:9D:6F:9D:C1:F5:51:1F:6D:93:B8:AC:5A:1C:DF:BB:9F:F9:62:C2:E5:75:B0:BF:15:F5"}}},"request":{"raw":"OPTIONS /sdk/evalx/63b838700e955212fb9b1b24/contexts/eyJraW5kIjoidXNlciIsImFub255bW91cyI6dHJ1ZSwia2V5IjoiYW5vbnltb3VzLXVzZXItY2xpZW50LWFwcGxpY2F0aW9uIn0 HTTP/1.1\r\nHost: app.launchdarkly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-launchdarkly-user-agent,x-launchdarkly-wrapper\r\nReferer: https://www.accountingclientportal.com/\r\nOrigin: https://www.accountingclientportal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags\r\naccess-control-allow-methods: GET, OPTIONS, HEAD\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\nallow: GET, OPTIONS, HEAD\r\ncontent-encoding: gzip\r\nld-region: us-east-1\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ndate: Fri, 20 Mar 2026 23:47:48 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410020-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1774050469.741146,VS0,VE104\r\nvary: Accept-Encoding\r\nage: 0\r\ncontent-length: 23\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":84,"dns":33,"connect":17,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"events.launchdarkly.com/events/diagnostic/63b838700e955212fb9b1b24","fqdn":"events.launchdarkly.com","domain":"launchdarkly.com","tld":"com"},"ip":{"addr":"54.147.178.212","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:49.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"events.launchdarkly.com","organization":""},"issuer":{"commonName":"Amazon ECDSA 256 M03","organization":"Amazon"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:6F:FC:0B:EB:77:6F:8B:28:FF:8B:49:75:83:70:F1:2D:80:D3:0B","sha256":"FD:3D:7C:D5:80:BC:D1:5E:D9:2A:AF:11:E1:E6:C0:CF:07:1A:43:95:45:22:1B:6F:FE:67:A6:3E:99:43:A7:41"}}},"request":{"raw":"OPTIONS /events/diagnostic/63b838700e955212fb9b1b24 HTTP/1.1\r\nHost: events.launchdarkly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-launchdarkly-user-agent,x-launchdarkly-wrapper\r\nReferer: https://www.accountingclientportal.com/\r\nOrigin: https://www.accountingclientportal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 20 Mar 2026 23:47:50 GMT\r\naccess-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccess-control-max-age: 300\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":729,"timings":{"blocked":315,"dns":9,"connect":101,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/client-login","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-20T23:47:44.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /client-login HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/html\r\ndate: Fri, 20 Mar 2026 21:42:50 GMT\r\nlast-modified: Fri, 20 Mar 2026 21:42:44 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"4350d506e6bfc9ef8b70c71762d02b90\"\r\nvary: accept-encoding\r\nx-cache: Error from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: Bpw_78oqPngVF_6rEYvrQ9Q_Sh0HtU4DABfsEtvn9UVsPHj_s8p3Mg==\r\nage: 7495\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":4307,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"4350d506e6bfc9ef8b70c71762d02b90","sha1":"07588c97067225f470fe4f28670d8909d1839229","sha256":"f875726011429e2046df64d18fd5476def49e57e48c6ede9ec1720de6a80683b","sha512":"fac91168dde5e0053ed623151b3da9f4442858f67896460856ebbef937c960675798677d2d1947a23da128640ffa229b348fe57e33fd371d0e5cd669f9546303","ssdeep":"48:EZJX/hYJMb5NXNcC3hV15Q+N89p2B79He7fmlYuFWRR:aJX/B6Cf15Q+N89ghskrgRR","tlshash":"cf914f1a6ce0c46622205b15b8e1f82ecd92b24f4648e4a4f0ee50bd6f91fd54bd78b5","first_seen":"2026-03-20T23:48:23.778693Z","last_seen":"2026-03-20T23:48:23.778693Z","times_seen":1,"resource_available":true,"data":null}},"time_used":570,"timings":{"blocked":212,"dns":111,"connect":16,"send":0,"wait":145,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/index-CTHyKSCX.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:45.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/index-CTHyKSCX.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/client-login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:42:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:30 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"0d18d7d19fdbd18a8a2646415a0b8d89-2\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: zYd42gZMcXkDdQtBF6yxo1Dt2szCGlPcutCKv0Fsw1KDSsbuffT_gg==\r\nage: 7496\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9342763,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (60509)","md5":"b9ce3a9681bf8693ef722c9b8d753723","sha1":"06b7987d90bde38da4f70d9ba123d3fa45dc3f97","sha256":"112feb13f2f5ed3d9aec09ce0db8f202d8d8d563dae1252d2ae1bc6b0045a459","sha512":"707a7ea757b70fb3300c07bdc1fc538ed0dcc4cd3b222a13a327df176e6b037036d2f15261bb0b46b11fb27775df1b2a7e47d9b5bcefa5d74c477d39286e2ea8","ssdeep":"24576:m2oxMVYqpgUdWwrrDIRePg63x2FuYd9kdsHXIBIJs7BMdySIFz4LGlhgMaaxpkhf:m2oxMVYqpgbwrrDIRePg63x2FuYd9kdq","tlshash":"ad254ba33256743556dd45eb74a40600ab3564c8b80ad0acbe3ccceb5897c4b72bfb79","first_seen":"2026-03-20T23:48:23.779935Z","last_seen":"2026-03-20T23:48:23.779935Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prod.keeper.app/log/csp-log","fqdn":"prod.keeper.app","domain":"keeper.app","tld":"app"},"ip":{"addr":"18.65.39.94","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"csp","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:48.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5B:34:7A:C1:BD:AF:A9:24:F5:04:0E:9F:C8:85:AA:E6:13:00:A3:B9","sha256":"52:89:35:13:1C:5F:5E:E1:58:B3:72:0C:66:BA:A9:80:05:8F:08:E6:C3:83:3D:A1:43:BB:8D:95:42:0E:94:99"}}},"request":{"raw":"POST /log/csp-log HTTP/1.1\r\nHost: prod.keeper.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/csp-report\r\nContent-Length: 976\r\nOrigin: https://www.accountingclientportal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: report\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":976,"data":"{\"csp-report\":{\"blocked-uri\":\"eval\",\"column-number\":7251,\"disposition\":\"report\",\"document-uri\":\"https://www.accountingclientportal.com/client-login\",\"effective-directive\":\"script-src\",\"line-number\":4756,\"original-policy\":\"default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log\",\"referrer\":\"\",\"source-file\":\"https://www.accountingclientportal.com/assets/index-CTHyKSCX.js\",\"status-code\":200,\"violated-directive\":\"script-src\"}}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 20 Mar 2026 23:47:49 GMT\r\nvary: Accept-Encoding\r\ncontent-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\norigin-agent-cluster: ?1\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nx-request-id: Root=1-69bddca5-2997e3bb687593db4b4a08e1\r\nx-trace-id: cdc46e49a764578b2282f8903e57b377\r\naccess-control-expose-headers: X-Request-Id, X-Trace-Id\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 37bca31d9c7de06b67b2363770e065b4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P1\r\nx-amz-cf-id: nbw_4PV2mpUwR1uH6Zi0IN-rwTOdlh6G0GWSFammXpSA3HeQhqDPVg==\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":1370,"timings":{"blocked":551,"dns":57,"connect":16,"send":0,"wait":268,"receive":1,"ssl":475},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/ClientPortalLogin-DxfYx-Ro.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:48.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/ClientPortalLogin-DxfYx-Ro.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/assets/index-CTHyKSCX.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:57:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:41:57 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"afb278947a6eca586df9d0c74ef334ad\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: bWuSEdnRQQXFGCY8XFybETG_ki5TqxiNuoxdOU-uRu4oJBW_FL7itw==\r\nage: 6598\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":18355,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (11838)","md5":"afb278947a6eca586df9d0c74ef334ad","sha1":"6d3af5734c6ddedbc4b514c557f4e028361bf944","sha256":"4b118e237473763fe3d7e2957bebb10ba983aa4fc9460cd19f30583e0966d9f7","sha512":"4088b9e4dabd54224f68062de4d8cec988bc1815ed590323f0862ccfba05b607b571bd223ae0afa16df43f228d8a179979f47c6504522a74dcefd8952174f67d","ssdeep":"384:+xaFRIIzv1iSQYR/zJEtwVFvS+xl8zL9+EcZLTudwBblsIKXcCbR3rEUrb:+wKIzv1dR/zJEtmFvS+o9+EcZLTudwBu","tlshash":"a0822a82423633be3c264a94b0f39004e416595c5e3985faa17f153d2b7de83b717bea","first_seen":"2026-03-20T23:48:23.780948Z","last_seen":"2026-03-20T23:48:23.780948Z","times_seen":1,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/n1ttmdbg","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"18.239.36.23","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:48.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"GET /widget/n1ttmdbg HTTP/1.1\r\nHost: widget.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 3158\r\nlast-modified: Fri, 20 Mar 2026 16:14:44 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: .ZdFDFIamnlJMC3y7ROIatX28_Wr6VUd\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 20 Mar 2026 23:45:47 GMT\r\ncache-control: max-age=300, s-maxage=300, public\r\netag: \"f486c4ed1455ea17acaa6638451c9770\"\r\nx-cache: Error from cloudfront\r\nvia: 1.1 b9be498b57d2aee7c2096da28228e858.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 7Moi-riu1lm__tDd-Xx72YwlnKjx1mWeAsb9XGSPEG6iWLd7EiiPdg==\r\nage: 127\r\ncross-origin-resource-policy: cross-origin\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":7614,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7614), with no line terminators","md5":"d7a715e97a86c9e09573813e06a0141b","sha1":"1ca8a1dccc191cc84033e46c53c1b766b1f4ab75","sha256":"3ae747d7d4ddbf16f9f06c8379e8470e3d440d8de8a3df78cece439b64fe1363","sha512":"b9cc3f4557270c47c9b4df16cfd7045ceb804f2326ca554522c0cac4ba13f8ca803dc1cf6348280379cb3bf8aaa54beba269fb7dae99332c910b55c8b207ddf9","ssdeep":"96:v2NH8/xVRyhsXtpZ8HEZgOM09SP0Ffp5ilzfDsJeiMw938I5Zv1JVqUP:v2YVNCH8bMFOCMMiZ935pqUP","tlshash":"51f174eeb6c2793806a31576623b770c7e3b654528494890d066c8cc797adcbc12bfad","first_seen":"2026-03-20T16:39:47.626731Z","last_seen":"2026-03-23T09:53:28.444165Z","times_seen":230,"resource_available":true,"data":null}},"time_used":462,"timings":{"blocked":73,"dns":27,"connect":17,"send":0,"wait":314,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:300,400,500,600,700,800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:45.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css?family=Montserrat:300,400,500,600,700,800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 20 Mar 2026 23:47:45 GMT\r\ndate: Fri, 20 Mar 2026 23:47:45 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11562,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2c2f658c6c4aa7f9c74ec9eddba6314e","sha1":"47e9dc1163a015e89dd3a14cb82dc3e0e77b5b1c","sha256":"01758188035c63f724b9ab5222cf55d7d3bce15f046e54ed33a2b31ecf3c5551","sha512":"c04365bc33a1740266775847ff7468088ccef6725c9c3b6149bf0aabd4706fb8701bb140a849c7a0bf49b8629a1516dcf373472dfa2561b13a2eb200077152be","ssdeep":"192:FRV7y6OfuXRo7TbOmuwRv7M0OFupRS719Ocu6RB7W+OjuTRU7XPOKu8:zRPQPTzajdfMh","tlshash":"f432ad91105be500e6472cc923cf7e26dd4e21627494c57a7ffe2ca8adeac224325b3d","first_seen":"2025-09-05T07:15:58.331555Z","last_seen":"2026-04-05T11:11:40.707391Z","times_seen":1547,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":87,"dns":1,"connect":21,"send":0,"wait":33,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/index-CViC3s0R.css","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:45.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/index-CViC3s0R.css HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/client-login\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/css\r\ndate: Fri, 20 Mar 2026 21:42:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:30 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"3ead232b622f4f2201613799a1aed0fc\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: y-VF8O-EL80Ou8DIMoaOYMNbOXyotkSPgw1D6W9DVFAmf6C5CDToQg==\r\nage: 7496\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":749721,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3ead232b622f4f2201613799a1aed0fc","sha1":"eeb09c1d5102c70f3e78d3c66ac1eb25f1857bf1","sha256":"2664151734e5588af9b04a7f67f24374aaca9d4bb0b9e58295b6523ad3155921","sha512":"53fd1c23dc148a222f423f9d54216c6ee60588849b5a687ad84ab4fd4395b5e48bfb47dee2aff61c95ce813bf3aba18a8c308545d3176449e83a93016058e793","ssdeep":"6144:BEZghQGVwg2MsWPzH1vQ341uiK0orcDjJzsDNgntJLaLkVSmrcRlUG28:Urmbq","tlshash":"61f4fa18ab41207ee4e7c33a64e0f96d69259903d57f8e7ff3a17b188b4a6c901b3d05","first_seen":"2026-03-20T23:48:23.782648Z","last_seen":"2026-03-20T23:48:23.782648Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/react-4rdz0Zvz.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/react-4rdz0Zvz.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/assets/index-CTHyKSCX.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:44:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:34 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"78a336bc3f737aeb693b767e97a942ae\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: GYaNXVMazTgUHga6cr4BmWlSWxXHnhvbqXMABlK-vvxPFnEazk3Sfw==\r\nage: 7404\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139993,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65228)","md5":"78a336bc3f737aeb693b767e97a942ae","sha1":"452f99692f96b8751423ae5cdc0f7f278d4a4d44","sha256":"827e1dd0a6b5e4e99d3e63b6fd1db110b6011918e4ffe175f52040258e973a1f","sha512":"2365fb150c7cbbf0ce946fc7c5f1cc901cf659841bc2dfc98274d0898012044218aa71140969ece1092df6452be2aad4874ec440f31e958de27c0e19d42cf2e8","ssdeep":"1536:P5OgtvL/25P53wmxaRPZvnfz8QCuITgiy35eFnUQXSxN/NXH/H+:hOWD+mxZvfz8QJIK34VUQ89fe","tlshash":"b6d319e83992f6616ab312a700ef1817733d2a1b240c4960a615fd9d75f801eb27bfdd","first_seen":"2025-12-09T19:58:53.008579Z","last_seen":"2026-03-20T23:48:23.783521Z","times_seen":4,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/db.worker-CIleOwvi.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:48.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/db.worker-CIleOwvi.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/client-login\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:44:25 GMT\r\nlast-modified: Fri, 20 Mar 2026 21:42:28 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"c9ba4ded8076f678e99d93eb9701fcf9\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: in4q3qoRaNVI5g-RamnsSTs371S00fdgRF9ILojfdxLctuS69RQxPQ==\r\nage: 7404\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":46005,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (45599)","md5":"c9ba4ded8076f678e99d93eb9701fcf9","sha1":"8d0dc5a026fcbc45df8b8f4a0e545946091aff36","sha256":"bbc0beb8fd1b7bbf7884cf90579bbe5584a283288e03d9bdb90b8494c63088ad","sha512":"40f06e689871451727f61b0fa137ceb2207e148b151197a05f236fcc846871d2972dbb712784a8a082eace0efb1d7fca43c4a5c4c5d673a7544af0560f223497","ssdeep":"768:bbgNo4pRET4T5eIhBGepa6eccAwxky5fStzReXn:b0upT44EaYyb","tlshash":"31232ac6b17ab06623d331e5107f128bf1295918fd8d8658f341d8963c7a24aba7bf70","first_seen":"2025-12-09T19:58:53.033032Z","last_seen":"2026-03-20T23:48:23.784369Z","times_seen":4,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-20","alert":"Hunting_JS_WebAssembly","trigger":"www.accountingclientportal.com/assets/db.worker-CIleOwvi.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"events.launchdarkly.com/events/diagnostic/63b838700e955212fb9b1b24","fqdn":"events.launchdarkly.com","domain":"launchdarkly.com","tld":"com"},"ip":{"addr":"54.147.178.212","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:50.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"events.launchdarkly.com","organization":""},"issuer":{"commonName":"Amazon ECDSA 256 M03","organization":"Amazon"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:6F:FC:0B:EB:77:6F:8B:28:FF:8B:49:75:83:70:F1:2D:80:D3:0B","sha256":"FD:3D:7C:D5:80:BC:D1:5E:D9:2A:AF:11:E1:E6:C0:CF:07:1A:43:95:45:22:1B:6F:FE:67:A6:3E:99:43:A7:41"}}},"request":{"raw":"POST /events/diagnostic/63b838700e955212fb9b1b24 HTTP/1.1\r\nHost: events.launchdarkly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-LaunchDarkly-User-Agent: JSClient/3.9.0\r\nX-LaunchDarkly-Wrapper: react-client-sdk/3.5.0\r\nContent-Length: 737\r\nOrigin: https://www.accountingclientportal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":737,"data":"{\"kind\":\"diagnostic-combined\",\"id\":{\"diagnosticId\":\"336afa20-24b7-11f1-8463-ade939a7453e\",\"sdkKeySuffix\":\"9b1b24\"},\"creationDate\":1774050469780,\"dataSinceDate\":1774050468547,\"droppedEvents\":0,\"eventsInLastBatch\":0,\"streamInits\":[],\"sdk\":{\"name\":\"js-client-sdk\",\"version\":\"3.9.0\",\"wrapperName\":\"react-client-sdk\",\"wrapperVersion\":\"3.5.0\"},\"configuration\":{\"customBaseURI\":false,\"customStreamURI\":false,\"customEventsURI\":false,\"eventsCapacity\":100,\"eventsFlushIntervalMillis\":2000,\"reconnectTimeMillis\":1000,\"streamingDisabled\":false,\"allAttributesPrivate\":false,\"diagnosticRecordingIntervalMillis\":900000,\"usingSecureMode\":false,\"bootstrapMode\":false,\"fetchGoalsDisabled\":false,\"sendEventsOnlyForVariation\":true},\"platform\":{\"name\":\"JS\"}}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Fri, 20 Mar 2026 23:47:50 GMT\r\ncontent-type: application/json\r\ncontent-length: 0\r\naccess-control-allow-headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccess-control-max-age: 300\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/sentry-CTqS8Hgx.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/sentry-CTqS8Hgx.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/assets/index-CTHyKSCX.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:42:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:35 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"3f3d9c25d2dff20050e310efc97ddb91\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: IRGjhp4J8vVa28hBsOE6G5mZBgB8wDxZvf6g07IlyfZFdlFXz8GzzQ==\r\nage: 7498\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":149664,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65228)","md5":"3f3d9c25d2dff20050e310efc97ddb91","sha1":"0e7863b99847d00acbb704e2558d394e17abfd42","sha256":"9046f17308226a6db3eecd42149a52266715923ed707435162524aee92d99f55","sha512":"82c1d510f0a608396a922fcbe1937447903a0de789edcf10bf5f77f17723a4b35dce753b53a660c368e8031f5e18967fdfe1f9d51ba3783f8c934adfa3c7ca1b","ssdeep":"3072:fD0x5dvBr4BQtkh9i5vXsU/x2j/vcnuC7okFDpg6sGHDHa:QxPv5UQtTESxjuC7ompgRGHDHa","tlshash":"ece3c6d9b196b03207e616a5a07b0106f7395950310bc194f63cddde2eba44ea1b7f3e","first_seen":"2026-03-20T23:48:23.767779Z","last_seen":"2026-03-20T23:48:23.767779Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/pdfjs-DDljtr9W.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/pdfjs-DDljtr9W.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.accountingclientportal.com/client-login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:44:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:34 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"b5ea9b84d137cd40aea51c34de998248\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: rYf_vvT1bPbGiyRLezgiFBTXCGlJe-AIlE44vfg0mMRiIc7N7L68FA==\r\nage: 7404\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":308633,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65217)","md5":"b5ea9b84d137cd40aea51c34de998248","sha1":"47edcf7a947954daa7b3258bd43fc394bd970b2c","sha256":"d5f29144e0cdacd62a88189f01d36cb0b4bc69f9260cd86d6ea4d285ad04b5eb","sha512":"e77b2ea6936381a78f7d75085afc17e1f46d1bc53247684155b0911891839b1a4b6cf38c198ca97432ab08b91337e1af76a8ebcb575e7ab7804b73539b3ca3c8","ssdeep":"6144:7zJLS+Gi4sOnVKh6FPmxlw/8rXQNvuypG/HDZV2ItR4:hSI4FnVR18g5oNVfR4","tlshash":"916418b63255243666c581c6a8b41203e72574523807c8bcb67cdddf6cafcc272bab76","first_seen":"2026-03-20T23:48:23.775268Z","last_seen":"2026-03-20T23:48:23.775268Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/ClientPortalLogin-DxfYx-Ro.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:48.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/ClientPortalLogin-DxfYx-Ro.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.accountingclientportal.com/client-login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:57:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:41:57 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"afb278947a6eca586df9d0c74ef334ad\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: VM48dWymYw2axKyff38TbLYI4uHfo2DENjTTIEx-81sN1umXqSXQWQ==\r\nage: 6598\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18355,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (11838)","md5":"afb278947a6eca586df9d0c74ef334ad","sha1":"6d3af5734c6ddedbc4b514c557f4e028361bf944","sha256":"4b118e237473763fe3d7e2957bebb10ba983aa4fc9460cd19f30583e0966d9f7","sha512":"4088b9e4dabd54224f68062de4d8cec988bc1815ed590323f0862ccfba05b607b571bd223ae0afa16df43f228d8a179979f47c6504522a74dcefd8952174f67d","ssdeep":"384:+xaFRIIzv1iSQYR/zJEtwVFvS+xl8zL9+EcZLTudwBblsIKXcCbR3rEUrb:+wKIzv1dR/zJEtmFvS+o9+EcZLTudwBu","tlshash":"a0822a82423633be3c264a94b0f39004e416595c5e3985faa17f153d2b7de83b717bea","first_seen":"2026-03-20T23:48:23.780948Z","last_seen":"2026-03-20T23:48:23.780948Z","times_seen":1,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prod.keeper.app/practice/branding?whiteLabelUrl=https:%2F%2Fwww.accountingclientportal.com","fqdn":"prod.keeper.app","domain":"keeper.app","tld":"app"},"ip":{"addr":"18.65.39.94","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:48.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5B:34:7A:C1:BD:AF:A9:24:F5:04:0E:9F:C8:85:AA:E6:13:00:A3:B9","sha256":"52:89:35:13:1C:5F:5E:E1:58:B3:72:0C:66:BA:A9:80:05:8F:08:E6:C3:83:3D:A1:43:BB:8D:95:42:0E:94:99"}}},"request":{"raw":"OPTIONS /practice/branding?whiteLabelUrl=https:%2F%2Fwww.accountingclientportal.com HTTP/1.1\r\nHost: prod.keeper.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: baggage,sentry-trace\r\nReferer: https://www.accountingclientportal.com/\r\nOrigin: https://www.accountingclientportal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 20 Mar 2026 23:47:49 GMT\r\naccess-control-allow-headers: baggage,sentry-trace\r\ncontent-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\norigin-agent-cluster: ?1\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers, Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 37bca31d9c7de06b67b2363770e065b4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P1\r\nx-amz-cf-id: 2aAmwD-HvtHmO_qmLryAzFMBDUbNz7woipb6VBvx7ftBhBvy49b61g==\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:45.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 20 Mar 2026 23:47:45 GMT\r\ndate: Fri, 20 Mar 2026 23:47:45 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-04-05T13:25:25.062641Z","times_seen":11215,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":111,"dns":1,"connect":23,"send":0,"wait":38,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/react-4rdz0Zvz.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/react-4rdz0Zvz.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.accountingclientportal.com/client-login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:44:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:34 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"78a336bc3f737aeb693b767e97a942ae\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: 6WXgAOTDL4fVkAxS33aQ5fk75MIBtNPA6s0RWfzMSR63szKqVWJNVw==\r\nage: 7404\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":139993,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65228)","md5":"78a336bc3f737aeb693b767e97a942ae","sha1":"452f99692f96b8751423ae5cdc0f7f278d4a4d44","sha256":"827e1dd0a6b5e4e99d3e63b6fd1db110b6011918e4ffe175f52040258e973a1f","sha512":"2365fb150c7cbbf0ce946fc7c5f1cc901cf659841bc2dfc98274d0898012044218aa71140969ece1092df6452be2aad4874ec440f31e958de27c0e19d42cf2e8","ssdeep":"1536:P5OgtvL/25P53wmxaRPZvnfz8QCuITgiy35eFnUQXSxN/NXH/H+:hOWD+mxZvfz8QJIK34VUQ89fe","tlshash":"b6d319e83992f6616ab312a700ef1817733d2a1b240c4960a615fd9d75f801eb27bfdd","first_seen":"2025-12-09T19:58:53.008579Z","last_seen":"2026-03-20T23:48:23.783521Z","times_seen":4,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.intake-lr.com/logger-1.min.js","fqdn":"cdn.intake-lr.com","domain":"intake-lr.com","tld":"com"},"ip":{"addr":"104.21.14.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intake-lr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 02:14:30 GMT","end":"Fri, 15 May 2026 03:11:04 GMT"},"fingerprint":{"sha1":"78:0D:0A:40:F7:E9:26:AE:7E:45:E3:E6:CF:5B:2F:4F:24:7B:3F:C0","sha256":"97:BB:26:90:28:73:E9:13:A4:D8:F8:C6:72:A1:F1:B6:9E:49:CF:B5:80:AD:2D:3E:C2:19:E7:3F:9F:63:53:BB"}}},"request":{"raw":"GET /logger-1.min.js HTTP/1.1\r\nHost: cdn.intake-lr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Mar 2026 23:47:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 126241\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\netag: \"4e28c515bc7b6742b162c9ce87b550e160bca07d6a61b424a5f02698fdb8e54b-br\"\r\nlast-modified: Fri, 20 Mar 2026 21:41:07 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\nx-served-by: cache-bma-essb1270062-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1774049721.813530,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 747\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CXRPj516jz%2FlQik9AMzCmRrhyhJam1HWDz1tqNORK0ruYmfL%2Fl8wSw5uZWItleIqrb0b4FcbOeqK6qVK5qjQUS9OzSrd93%2F58EorFaBYXn4k\"}]}\r\nserver: cloudflare\r\ncf-ray: 9df89aa08d2e23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":793280,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0c8d8d92e651954e731a23ff3fea9fae","sha1":"b313f64a93a62e43395808cbaac2717820a7bfa2","sha256":"027b95fe04f27bb6730bf18068cb9456a11c8607c68a25b301b9adf95d13e15f","sha512":"743405c56e9bc7f30dd9c5af6236b66e407d1e043fe348533acd4f755d1a7dba5c5d2361fd38d8719a96068d4ea689035e61e0930636e14f92f46311d2478f39","ssdeep":"12288:4XNeTSffRyAtU+PKYyxmYqr+7eU1o3PNvxE/JCqzHbA0hyp8CTACwZE5ZT8gY:WgQLrzE/JCqzHbAvp8CTAjZE5ZTpY","tlshash":"4af42b853a58f46302ea80d9503b2407f335581e706de0e4f3d9ddda686da8e617bb3b","first_seen":"2026-03-20T22:08:30.516391Z","last_seen":"2026-03-23T02:02:34.53609Z","times_seen":52,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":20,"dns":35,"connect":1,"send":0,"wait":8,"receive":14,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-20","alert":"Hunting_JS_WebAssembly","trigger":"cdn.intake-lr.com/logger-1.min.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:48.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.accountingclientportal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Mar 2026 19:26:26 GMT\r\nexpires: Thu, 18 Mar 2027 19:26:26 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nage: 188482\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-04-05T13:08:51.058723Z","times_seen":18625,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":73,"dns":1,"connect":8,"send":0,"wait":10,"receive":15,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/scripts/rewardful.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:45.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /scripts/rewardful.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/client-login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ncontent-length: 528\r\ndate: Fri, 20 Mar 2026 21:44:24 GMT\r\nlast-modified: Fri, 20 Mar 2026 21:42:44 GMT\r\netag: \"244fe3988b5b690dfe8539d2062f6e22\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: XSAZLn57eGtZwn95StmtcCmyTnU3p6k1IPCLOvNu4_vXEP-K0R7nSQ==\r\nage: 7402\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":528,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (306)","md5":"244fe3988b5b690dfe8539d2062f6e22","sha1":"e4b5ee51ece000f33f19279a7f81c95de13e002e","sha256":"1af386f0a2d0dcb9e1a1fe0c538a89925af8462a5b790c0074261635a71f8a2f","sha512":"315007e13c663774a5b85997d4280056a743474a4e97f26144d72bef15e39938c616a79c92e4bb53a1358482431a8854506ad09b355e8399eaec0979cabee980","ssdeep":"","tlshash":"87f059146bb0242a803a21ecc32f1a037991483783cd0fb5f27886795f65c6b8e08acf","first_seen":"2025-12-09T19:58:52.99372Z","last_seen":"2026-03-20T23:48:23.787185Z","times_seen":4,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/lodash-ghza8Gt8.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/lodash-ghza8Gt8.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/assets/index-CTHyKSCX.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:42:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:33 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"79b06df255484515fdd35ec24397b957\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: SSzV9JNWULtjVwbVBm8jvynb-eYH7YwvDmM9VjJMJuNIg0UIFTVRqg==\r\nage: 7498\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36143,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35544)","md5":"79b06df255484515fdd35ec24397b957","sha1":"fb4e3e2840189e8444a15f23cbf24625b7c6f90b","sha256":"f612b2b9769596c474c4173a58b10e3a4e6ba82ceb5308dadccd27a2afd9562d","sha512":"678106ff853f0fc57c744c4130eef6bb1465c5ff264e1f43d1004f40b04a1e66cf56a7baed609111bc91eab6bd6b9bb6bdf2a2db98d7b4776ac08af50b03d525","ssdeep":"768:FrfrH9hnDgwir+SUVdQzoXEIq8FY0LTsXnF0hWamIqv6RyhcrNyr:Zr/gwir+/dQzwdtTsXnyhJmIZyCsr","tlshash":"fef262c9b683f06643676864406f040bf23d7f68a08f9044d2e6d8d9bcbc55ed277e5a","first_seen":"2026-03-20T23:48:23.788472Z","last_seen":"2026-03-20T23:48:23.788472Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/xlsx-CzhbZ2LK.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/xlsx-CzhbZ2LK.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/assets/index-CTHyKSCX.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:44:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:44 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"af312619e9f0580ea5ac4f4a2f3d1ca5\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: hTNCoMCLlyRepBOmao5UaDulQlbu3B2VlI02oiTkCivhxYsgu52uow==\r\nage: 7404\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":479078,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"af312619e9f0580ea5ac4f4a2f3d1ca5","sha1":"95292e8da9d3c86d3b7115d56fcd7ad12462e4e1","sha256":"24da0197ced64e22aa58e4ba248e53e1fb5fe7ddfa311770a93950e7c0d792ba","sha512":"91f3f4fd9cfff2d23007f4b09f70683dbc15a666fa6eaffa8a72a74b1b948b72aef88698a4153f7c9db2cd824a0ad8b5d7c6cb3e440608ae423ecd70fe1ad754","ssdeep":"6144:k/U8vIqMIzWOMEnaxkD+1h9onoymRCptQlpcB:kTTzR6V0oyABp6","tlshash":"85a45cc636ce712a535272b7141f3046b4b4ea18d48f9e61f201f26178beec950efe99","first_seen":"2026-03-20T23:48:23.764912Z","last_seen":"2026-03-20T23:48:23.764912Z","times_seen":1,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/images/google-logo.png","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:49.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /images/google-logo.png HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/client-login\r\nCookie: _lr_tabs_-fchghe%2Fkeeper={%22recordingID%22:%226-019d0da5-e2a5-7bbc-99f7-c4b59a9b6cd2%22%2C%22sessionID%22:0%2C%22lastActivity%22:1774050468525%2C%22hasActivity%22:false%2C%22clearsIdentifiedUser%22:false}; _lr_hb_-fchghe%2Fkeeper={%22heartbeat%22:1774050468522}\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: image/png\r\ncontent-length: 1381\r\ndate: Fri, 20 Mar 2026 21:57:51 GMT\r\nlast-modified: Fri, 20 Mar 2026 21:42:44 GMT\r\netag: \"4b8d8fb4e4909750ae06a182b8ccc625\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: Zhl-PfBYP83Mo5pAAwGUwkcA857UxvlmyAirOdwT4MSbuUDputdlxw==\r\nage: 6599\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1381,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 33 x 32, 8-bit/color RGBA, non-interlaced","md5":"4b8d8fb4e4909750ae06a182b8ccc625","sha1":"99798ab00b2ad8374c98a8a3a05428d38f009d6d","sha256":"0c924d63aaec21f395fc00a8e4d03c5898c50a1730162e9aec65c4ee2c936158","sha512":"b43453d2474be845555bc2effe96cbf107f5299318eb180221f90a9444e83b1c2f7d9b9d456784ce85dc649a874edcf0bda3b2f247feca385b11aff01bc2659f","ssdeep":"","tlshash":"5221db4e63fc2d50d6512c35e82783d1c84fea07a512632d0e53477c581065ea5f63b7","first_seen":"2025-09-30T22:43:26.757714Z","last_seen":"2026-03-20T23:48:23.789506Z","times_seen":8,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/lodash-ghza8Gt8.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:47.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/lodash-ghza8Gt8.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.accountingclientportal.com/client-login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:42:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:33 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"79b06df255484515fdd35ec24397b957\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: LQoLiQq9j88YaKyJryAlFb3kws66cbBazYLBtnSsfCTYD0BU3OEL8g==\r\nage: 7498\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":36143,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35544)","md5":"79b06df255484515fdd35ec24397b957","sha1":"fb4e3e2840189e8444a15f23cbf24625b7c6f90b","sha256":"f612b2b9769596c474c4173a58b10e3a4e6ba82ceb5308dadccd27a2afd9562d","sha512":"678106ff853f0fc57c744c4130eef6bb1465c5ff264e1f43d1004f40b04a1e66cf56a7baed609111bc91eab6bd6b9bb6bdf2a2db98d7b4776ac08af50b03d525","ssdeep":"768:FrfrH9hnDgwir+SUVdQzoXEIq8FY0LTsXnF0hWamIqv6RyhcrNyr:Zr/gwir+/dQzwdtTsXnyhJmIZyCsr","tlshash":"fef262c9b683f06643676864406f040bf23d7f68a08f9044d2e6d8d9bcbc55ed277e5a","first_seen":"2026-03-20T23:48:23.788472Z","last_seen":"2026-03-20T23:48:23.788472Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o552561.ingest.sentry.io/api/5678521/envelope/?sentry_version=7\u0026sentry_key=a1ec4ceac79f4228841055b5e33cb53e\u0026sentry_client=sentry.javascript.react%2F10.28.0","fqdn":"o552561.ingest.sentry.io","domain":"sentry.io","tld":"io"},"ip":{"addr":"34.160.81.0","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:48.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingest.sentry.io","organization":"Sentry"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Mon, 24 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:C7:A0:3C:30:51:F2:AE:98:2C:88:9F:C7:8D:24:55:ED:C3:34:BD","sha256":"78:73:F7:3D:EE:58:1B:F8:9A:1E:17:AB:A3:70:00:86:76:EA:4E:AF:AB:F4:7B:34:5F:FA:39:D8:3B:5D:F4:B5"}}},"request":{"raw":"POST /api/5678521/envelope/?sentry_version=7\u0026sentry_key=a1ec4ceac79f4228841055b5e33cb53e\u0026sentry_client=sentry.javascript.react%2F10.28.0 HTTP/1.1\r\nHost: o552561.ingest.sentry.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.accountingclientportal.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 484\r\nOrigin: https://www.accountingclientportal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":484,"data":"{\"sent_at\":\"2026-03-20T23:47:48.258Z\",\"sdk\":{\"name\":\"sentry.javascript.react\",\"version\":\"10.28.0\"}}\n{\"type\":\"session\"}\n{\"sid\":\"dc417766c00e44ae920e4f78ff369e95\",\"init\":true,\"started\":\"2026-03-20T23:47:48.258Z\",\"timestamp\":\"2026-03-20T23:47:48.258Z\",\"status\":\"ok\",\"errors\":0,\"attrs\":{\"release\":\"9b46da856612c74d8ca4a79d9ac5b9319a0e02b5\",\"environment\":\"production\",\"ip_address\":\"{{auto}}\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Mar 2026 23:47:48 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-05T13:48:10.240835Z","times_seen":556126,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":125,"dns":29,"connect":12,"send":0,"wait":27,"receive":2,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/useLDIdentify-DI-TRUre.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:48.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/useLDIdentify-DI-TRUre.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.accountingclientportal.com/client-login\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ncontent-length: 776\r\ndate: Fri, 20 Mar 2026 21:49:32 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:42:40 GMT\r\netag: \"e26a615214adcb1b4c884b46860915d7\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: EowTc9p5hfOBJbHw69j-17CaGcEUvj1wUP9UFqCYIbvallXnplD8IA==\r\nage: 7097\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":776,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (366)","md5":"e26a615214adcb1b4c884b46860915d7","sha1":"2c109ee74397cd39427d0461663196ad15c0b53a","sha256":"d54d21268da57cbbbfe38fbc57de57609a9ebd70c96960b5be24176f66261fbe","sha512":"7eb38738d75ea94fd9d17de1b0ed5cc5140b74b327e6668349550d865ffe160ad9bfc33f2eb742ad9e129f6d444f750c6011f8f1b21675c364b8853d0c460386","ssdeep":"","tlshash":"5901208a6bb487b8902409fcd1375003aa94007b738c03f5d07d4e7caf66c868388e97","first_seen":"2026-03-20T23:48:23.77746Z","last_seen":"2026-03-20T23:48:23.77746Z","times_seen":1,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prod.keeper.app/log/csp-log","fqdn":"prod.keeper.app","domain":"keeper.app","tld":"app"},"ip":{"addr":"18.65.39.94","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"csp","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:48.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 12 Mar 2026 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5B:34:7A:C1:BD:AF:A9:24:F5:04:0E:9F:C8:85:AA:E6:13:00:A3:B9","sha256":"52:89:35:13:1C:5F:5E:E1:58:B3:72:0C:66:BA:A9:80:05:8F:08:E6:C3:83:3D:A1:43:BB:8D:95:42:0E:94:99"}}},"request":{"raw":"POST /log/csp-log HTTP/1.1\r\nHost: prod.keeper.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/csp-report\r\nContent-Length: 914\r\nOrigin: https://www.accountingclientportal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: report\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":914,"data":"{\"csp-report\":{\"blocked-uri\":\"eval\",\"column-number\":5263,\"disposition\":\"report\",\"document-uri\":\"https://www.accountingclientportal.com/client-login\",\"effective-directive\":\"script-src\",\"line-number\":1,\"original-policy\":\"default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log\",\"referrer\":\"\",\"source-file\":\"blob\",\"status-code\":200,\"violated-directive\":\"script-src\"}}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 20 Mar 2026 23:47:49 GMT\r\nvary: Accept-Encoding\r\ncontent-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\norigin-agent-cluster: ?1\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nx-request-id: Root=1-69bddca5-5bcc929d4165bdd842f132de\r\nx-trace-id: 742095b2807086ec644bd3204c236950\r\naccess-control-expose-headers: X-Request-Id, X-Trace-Id\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 37bca31d9c7de06b67b2363770e065b4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS1-P1\r\nx-amz-cf-id: pb8R4lmTS_993X0A8ghJvywWvJUOgeanaXlcAOEYYxfsGYKUnenQDQ==\r\nreferrer-policy: strict-origin-when-cross-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":487,"timings":{"blocked":105,"dns":1,"connect":16,"send":0,"wait":268,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.accountingclientportal.com/assets/AlertHexagon-Cx7Ucoj8.js","fqdn":"www.accountingclientportal.com","domain":"accountingclientportal.com","tld":"com"},"ip":{"addr":"18.239.83.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.accountingclientportal.com/client-login","date":"2026-03-20T23:47:48.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"keeper.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 23 Apr 2025 00:00:00 GMT","end":"Sat, 23 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"18:B0:78:69:6F:A5:0D:92:EB:1C:AA:01:8E:74:F5:81:3F:08:C0:86","sha256":"C8:57:C8:C4:F9:54:C2:71:54:92:75:05:B3:07:38:8D:AB:F5:E7:79:0D:85:F2:AD:3D:41:1D:7A:DD:6E:C1:51"}}},"request":{"raw":"GET /assets/AlertHexagon-Cx7Ucoj8.js HTTP/1.1\r\nHost: www.accountingclientportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.accountingclientportal.com/assets/ClientPortalLogin-DxfYx-Ro.js\r\nCookie: _lr_tabs_-fchghe%2Fkeeper={%22recordingID%22:%226-019d0da5-e2a5-7bbc-99f7-c4b59a9b6cd2%22%2C%22sessionID%22:0%2C%22lastActivity%22:1774050468525%2C%22hasActivity%22:false%2C%22clearsIdentifiedUser%22:false}; _lr_hb_-fchghe%2Fkeeper={%22heartbeat%22:1774050468522}\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: text/javascript\r\ndate: Fri, 20 Mar 2026 21:57:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 20 Mar 2026 21:41:52 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\netag: W/\"28201b70c022fa8755f755b9c97cd529\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 97f993f9d41d16f3f36b8c466857e2d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-cf-id: ct_g5kgVPlRed6cboZ8n7syfX1dYcW1jc80x8LVbiASBho-5KQSjeQ==\r\nage: 6598\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self' *.cohere.so *.intercomcdn.com; script-src 'self' 'wasm-unsafe-eval' static.cohere.so cdn.docuseal.com cdn.quiltt.io *.intercomcdn.com *.intercom.io vercel.live unpkg.com *.unpkg.com *.intake-lr.com *.google.com *.gstatic.com *.googleapis.com localhost:*; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.intercomcdn.com fonts.gstatic.com; worker-src 'self' blob:; object-src 'none'; frame-src 'self' voice.cohere.so vercel.live docuseal.com *.quiltt.app; img-src 'self' * data: blob:; connect-src * blob: data:; report-uri https://prod.keeper.app/log/csp-log; report-to csp-log;\r\ndocument-policy: js-profiling\r\nreporting-endpoints: csp-log=\"https://prod.keeper.app/log/csp-log\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1635,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1226)","md5":"28201b70c022fa8755f755b9c97cd529","sha1":"1fee1c0fbdb94ba5cfb2860b2934a0e68323b663","sha256":"28829e75f05d9a31c02c135f3d6a8cec35d07eca428cc60ae65c5972d4f9c4f4","sha512":"1862765ed50eb4f7210b24547c05a3c223412a0660c72362f5cc4c904274219b039b703d13292e4899121cce6f680b0da1ff04336dbfa937d43dd8ac69af13e6","ssdeep":"","tlshash":"e931a6e993d078b8a00c2bf9d62a442773a13a3b7fc347c4809c4834f115e9d5a5fe95","first_seen":"2026-03-20T23:48:23.769943Z","last_seen":"2026-03-20T23:48:23.769943Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
