{"report_id":"451b683e-3cae-4ac4-89cd-50125dfe5184","version":6,"status":"done","tags":[],"date":"2025-01-19T23:57:02Z","url":{"schema":"http","addr":"www.npvnt7trk.com/4RQSJ/B34MN4/?sub2=GoldMB17","fqdn":"www.npvnt7trk.com","domain":"npvnt7trk.com","tld":"com"},"ip":{"addr":"34.36.162.171","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","fqdn":"refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"title":"Calculate New Payment - Start Here | Quicken Loans"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-03-30T23:57:02Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-01-15T01:35:32.072438Z","alert_count":0,"request_count":4,"received_data":272345,"sent_data":1971,"comment":"","tags":null,"fingerprints":null},{"fqdn":"content.refinance.quickenloans.com","ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-07-24","domain_rank":0,"first_seen":"2022-03-18T18:21:56Z","last_seen":"2025-01-13T20:11:18.057906Z","alert_count":0,"request_count":4,"received_data":45645,"sent_data":3321,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.mortgage.quickenloans.com","ip":{"addr":"104.18.9.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-07-24","domain_rank":520707,"first_seen":"2017-05-18T09:58:36Z","last_seen":"2025-01-13T20:11:17.907591Z","alert_count":0,"request_count":1,"received_data":1475,"sent_data":665,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ads.anura.io","ip":{"addr":"54.240.174.26","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2016-03-22","domain_rank":75730,"first_seen":"2016-10-29T23:38:15Z","last_seen":"2025-01-19T22:39:16.551693Z","alert_count":0,"request_count":1,"received_data":983,"sent_data":461,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bat.bing.com","ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1996-01-29","domain_rank":387,"first_seen":"2014-04-08T09:23:16Z","last_seen":"2025-01-15T03:29:12.465587Z","alert_count":0,"request_count":6,"received_data":34148,"sent_data":5198,"comment":"","tags":null,"fingerprints":null},{"fqdn":"action.dstillery.com","ip":{"addr":"104.18.41.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-07-10","domain_rank":6810,"first_seen":"2015-04-08T22:45:29Z","last_seen":"2025-01-15T13:01:49.069261Z","alert_count":0,"request_count":1,"received_data":1122,"sent_data":478,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":25607,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-01-15T02:08:33.226043Z","alert_count":0,"request_count":5,"received_data":2874,"sent_data":3405,"comment":"","tags":null,"fingerprints":null},{"fqdn":"script.anura.io","ip":{"addr":"18.132.34.251","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"domain_registered":"2016-03-22","domain_rank":43801,"first_seen":"2017-05-19T19:00:19Z","last_seen":"2025-01-19T22:39:16.80466Z","alert_count":0,"request_count":2,"received_data":138308,"sent_data":1073,"comment":"","tags":null,"fingerprints":null},{"fqdn":"trackpixel.refinance.quickenloans.com","ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-07-24","domain_rank":0,"first_seen":"2022-07-03T23:04:36Z","last_seen":"2025-01-13T20:11:17.431871Z","alert_count":0,"request_count":2,"received_data":209992,"sent_data":1333,"comment":"","tags":null,"fingerprints":null},{"fqdn":"c.pmsrv.co","ip":{"addr":"34.144.246.130","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2017-06-20","domain_rank":45333,"first_seen":"2017-11-13T18:10:50Z","last_seen":"2025-01-17T13:35:34.537444Z","alert_count":0,"request_count":1,"received_data":4057,"sent_data":474,"comment":"","tags":null,"fingerprints":null},{"fqdn":"refinance.quickenloans.com","ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-07-24","domain_rank":0,"first_seen":"2019-08-13T02:34:47Z","last_seen":"2025-01-13T20:11:17.395036Z","alert_count":0,"request_count":5,"received_data":243310,"sent_data":11659,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pix.revjet.com","ip":{"addr":"37.27.142.241","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2008-09-14","domain_rank":4646,"first_seen":"2015-09-01T15:11:50Z","last_seen":"2025-01-13T20:11:18.704508Z","alert_count":0,"request_count":2,"received_data":626,"sent_data":2198,"comment":"","tags":null,"fingerprints":null},{"fqdn":"browser-intake-datadoghq.com","ip":{"addr":"3.233.158.24","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2020-08-06","domain_rank":5640,"first_seen":"2023-01-14T12:08:31Z","last_seen":"2025-01-16T03:42:38.098676Z","alert_count":0,"request_count":3,"received_data":1254,"sent_data":2288,"comment":"","tags":null,"fingerprints":null},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":0,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-01-15T01:59:33.068057Z","alert_count":0,"request_count":2,"received_data":1562,"sent_data":1294,"comment":"","tags":null,"fingerprints":null},{"fqdn":"flask.nextdoor.com","ip":{"addr":"44.239.153.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2004-02-11","domain_rank":7771,"first_seen":"2018-02-22T11:32:07Z","last_seen":"2025-01-17T00:17:34.489694Z","alert_count":0,"request_count":1,"received_data":186,"sent_data":1092,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ct.pinterest.com","ip":{"addr":"96.6.16.234","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2009-11-26","domain_rank":852,"first_seen":"2015-03-12T08:12:48Z","last_seen":"2025-01-15T15:02:27.574088Z","alert_count":0,"request_count":3,"received_data":2918,"sent_data":2189,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-01-15T01:41:04.695646Z","alert_count":0,"request_count":1,"received_data":575,"sent_data":816,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sgtm.quickenloans.com","ip":{"addr":"216.239.32.21","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1998-07-24","domain_rank":0,"first_seen":"2024-12-03T14:07:06.786394Z","last_seen":"2025-01-13T20:11:17.291792Z","alert_count":0,"request_count":4,"received_data":6195,"sent_data":7503,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.npvnt7trk.com","ip":{"addr":"34.36.162.171","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2023-07-17","domain_rank":0,"first_seen":"2023-07-29T15:51:52Z","last_seen":"2025-01-15T21:46:04.655525Z","alert_count":0,"request_count":2,"received_data":1674,"sent_data":1163,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s.pinimg.com","ip":{"addr":"96.6.16.234","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2010-05-29","domain_rank":732,"first_seen":"2017-01-13T22:40:08Z","last_seen":"2025-01-15T14:33:56.382775Z","alert_count":0,"request_count":2,"received_data":26309,"sent_data":843,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sc-static.net","ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-16","domain_rank":1183,"first_seen":"2017-09-05T18:35:04Z","last_seen":"2025-01-15T08:47:58.9267Z","alert_count":0,"request_count":1,"received_data":24485,"sent_data":413,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.datadoghq-browser-agent.com","ip":{"addr":"54.230.219.234","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-03-26","domain_rank":3490,"first_seen":"2019-04-26T16:31:20Z","last_seen":"2025-01-16T01:59:53.857436Z","alert_count":0,"request_count":2,"received_data":176315,"sent_data":877,"comment":"","tags":null,"fingerprints":null},{"fqdn":"widget.trustpilot.com","ip":{"addr":"143.204.55.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2007-06-30","domain_rank":6018,"first_seen":"2017-02-01T19:05:34Z","last_seen":"2025-01-15T10:53:49.140158Z","alert_count":0,"request_count":1,"received_data":8023,"sent_data":446,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cs-cdn.deviceatlas.com","ip":{"addr":"52.58.191.183","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2007-11-29","domain_rank":0,"first_seen":"2019-07-10T12:47:14Z","last_seen":"2025-01-13T20:11:17.539689Z","alert_count":0,"request_count":1,"received_data":22870,"sent_data":415,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":1294,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-01-15T02:04:41.44168Z","alert_count":0,"request_count":1,"received_data":45189,"sent_data":516,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.cdnfonts.com","ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2018-10-03","domain_rank":26261,"first_seen":"2020-06-10T09:02:17Z","last_seen":"2025-01-16T22:44:53.33369Z","alert_count":0,"request_count":7,"received_data":319249,"sent_data":3544,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rum-http-intake.logs.datadoghq.com","ip":{"addr":"3.233.158.30","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2010-07-09","domain_rank":3196,"first_seen":"2019-08-02T10:28:45Z","last_seen":"2025-01-13T20:11:17.916107Z","alert_count":0,"request_count":7,"received_data":2149,"sent_data":4725,"comment":"","tags":null,"fingerprints":null},{"fqdn":"a.mgid.com","ip":{"addr":"104.17.198.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2001-12-30","domain_rank":18073,"first_seen":"2013-11-17T05:08:48Z","last_seen":"2025-01-17T13:35:33.987211Z","alert_count":0,"request_count":2,"received_data":17892,"sent_data":914,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ads.nextdoor.com","ip":{"addr":"44.239.153.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2004-02-11","domain_rank":7992,"first_seen":"2017-07-08T13:48:16Z","last_seen":"2025-01-14T14:36:47.97757Z","alert_count":0,"request_count":1,"received_data":7984,"sent_data":423,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ads.revjet.com","ip":{"addr":"95.217.226.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2008-09-14","domain_rank":2924,"first_seen":"2015-08-11T18:59:57Z","last_seen":"2025-01-13T20:11:19.575425Z","alert_count":0,"request_count":1,"received_data":19798,"sent_data":420,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-01-15T01:50:05.730111Z","alert_count":0,"request_count":17,"received_data":2074656,"sent_data":7707,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-01-15T01:38:19.518894Z","alert_count":0,"request_count":2,"received_data":77322,"sent_data":1092,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.lmbahsj2.com","ip":{"addr":"35.201.76.131","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2021-09-21","domain_rank":0,"first_seen":"2022-05-13T15:11:55Z","last_seen":"2025-01-13T20:11:17.752121Z","alert_count":0,"request_count":3,"received_data":21758,"sent_data":1725,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static-msql-prod.refinance.quickenloans.com","ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-07-24","domain_rank":0,"first_seen":"2022-07-03T23:04:36Z","last_seen":"2025-01-13T20:11:17.579571Z","alert_count":0,"request_count":2,"received_data":1678400,"sent_data":1361,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-01-19T23:56:36Z","timestamp":1737330996,"ip_dst":{"addr":"18.159.105.57","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.16","port":35267,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard Low Port)","source":"{\"timestamp\":\"2025-01-19T23:56:36.508491+0000\",\"flow_id\":2105240785830475,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":35267,\"dest_ip\":\"18.159.105.57\",\"dest_port\":443,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033077,\"rev\":2,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard Low Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-01-19T23:56:36.508491+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c89400da8007fd16d4f3dc7b2146be79","sha1":"7d246f68fefac7ce198164ca71aa5520b7b9bd1e","sha256":"0637af202b93480d33516e43543b647bb7cf47ff70f30de5a285dcf0ad273157","sha512":"65ff409b28e3dee3361e309549bf9fcbbd3b1d04125c18917fddebda733c71cb756208bca133cf3e59130b0b0b505edcaee0bf7672ef8fd833d31f31a7bf3e3f","ssdeep":"","tlshash":"07f08b1a7d18a0392a43992a0e7ae924328f70cc0403c95a7e4ed8da4f29757101feee","size":537,"data":"","first_seen":"2024-10-13T13:50:30.365315Z","last_seen":"2025-03-26T03:39:35.002715Z","times_seen":431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=DC-852807","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2d54af968e9a720ab5696f7d83d6bf8","sha1":"c4fb77be680541bd838c10cd3f57a51bbb26e2a5","sha256":"9af2397a0110b1c217052eecb1b55e217e3a4f96ba2126622969cdd18024130f","sha512":"f13a7b7ce6fb460936ae1e693dd9188a052c01f69c6776dfdf6503b9d7d46621698a08e6035fd036acd925a61b7a78b0780740500db81dec1fe1829b86a9d37f","ssdeep":"3072:5Bam4s8CIE/rNPtcJW00Sy2igrJQomfE7NJY95LJcwdlojDAy3wCIM:zOCIEDNPtF18/mLJcwdlojDAVM","tlshash":"c33408cdb3d6b46693a2a474507f014bb13a6dd2f80cd8d0e186c8d92e74aa94277f7c","size":242954,"data":"","first_seen":"2025-01-19T23:57:07.331746Z","last_seen":"2025-01-19T23:57:07.331746Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"496d31c761c5a14db66d3b2cd0cad5c4","sha1":"0fe07f920a9e80eb3ecf6f0e529f97ca203346f7","sha256":"d7f24be7752de51a14ee818d017bedd1ccaf0aef8dd0395f23de6e8e90344dbd","sha512":"379a28ec1c5b2a2cbae931d997b7a3ffbf26d11a9a5b3773f576b6ef65b9ca1c216e433fbd21a0983588500bda7d55fbf7f4e29b615439f53b888d7ca255cc58","ssdeep":"","tlshash":"3dc02bcd31820c7935ef2f604b3ff310b4412150e4b128300d1273444310c13e754851","size":144,"data":"","first_seen":"2023-03-26T08:07:59Z","last_seen":"2025-03-26T03:39:35.0002Z","times_seen":532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"14142c6ac8326194c19f18b5fa4401b7","sha1":"640ca6a944d21976e4d59bff6e459f5b8362d8bb","sha256":"e6bd3594f4f7590362557e48b6e23ae8f57d570a09c301bfc2a14d33bb4360bd","sha512":"0cd72fde1a35fb551a9fdb66c915d2e8de3bf663688c9cd5fde83d11bb500604d5b8d830369afe265cf08490b01bd9f57cf997b1ceb543d1970fe5448200bf05","ssdeep":"","tlshash":"67c08c8d317a0cb24ab72e508b3ff904b02272a0a4a108320d0a63854120f73da24850","size":160,"data":"","first_seen":"2023-03-26T08:07:59Z","last_seen":"2025-03-26T03:39:35.01597Z","times_seen":532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.pinimg.com/ct/lib/main.7d8116bd.js","fqdn":"s.pinimg.com","domain":"pinimg.com","tld":"com"},"ip":{"addr":"96.6.16.234","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"43ca2ef81268626d2307cc19da6571f7","sha1":"6fb22644688507414dfdba0ac8e562da6efded3b","sha256":"fb322d9e801b20f445402380d99d144e674abdc4821c6b5d30936c0ecfe381ab","sha512":"ea6e93fa44546e3b843b5e4fa70a6e792c8e9bd4e96fbb84da2437356347713a9e1d044736b81b5a1f2fb4c20751ccebf9c1cf0f81a4a13694e71ff09c486a3c","ssdeep":"1536:jXSoCrN0AWYiVpTJU3rz5ZwcLNxsLzc0NR3:jXSoCr6AgFSz5ZPDQFN9","tlshash":"d4831a49f5d5b06503a364a1422f510bf33aaa18a84e50b4b61dd8f13cb89dfa17bf7c","size":82915,"data":"","first_seen":"2024-12-12T18:59:21.5695Z","last_seen":"2025-08-28T05:03:27.637911Z","times_seen":1929,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.datadoghq-browser-agent.com/datadog-rum-v3.js","fqdn":"www.datadoghq-browser-agent.com","domain":"datadoghq-browser-agent.com","tld":"com"},"ip":{"addr":"54.230.219.234","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"647fda9a4d3d74344732d76cf1fff47c","sha1":"01720d421ce3373f1a1958a1d85edfae5ab5f442","sha256":"4375ebb4771e6dbb66555214b78781f96a3f6fc43f26b6e9acc4a4751551706b","sha512":"7a3c35cb75c6387a8c4f4359287cdad42c5722b7c1362c8189f8ef3d36f1f7642453ca830bf7b315f79947b384034d216e165b5b8b4f79a7596db760ceb86cad","ssdeep":"1536:yHOG/ZzSpabEJ1No/5612iRFDQ+0WVN83fIXDVeAr0tRoBAb3KrFgQn:wPIswXDVeA5Ab6rrn","tlshash":"2bb3e5dcf6c2b07517e33475516f260ab33a2954784a80a4e27ad1d53cb868ea237f7c","size":117677,"data":"","first_seen":"2023-03-07T13:55:13Z","last_seen":"2026-04-03T21:22:30.140755Z","times_seen":1525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"060a6c9d49bb81e351dc79d6a7e659bc","sha1":"efb197c58d5c17effa0ed1b89ef79cba9f820562","sha256":"90a457f7d3785c5b9b077945d6fd6b79c24d43be8265a2f8a52cc20690cb028d","sha512":"cb263a933f837280e058a0e68532fb83aba5aedbbf8f095ac294e0b4e86e303531723070d052761023095119a38cc80c1bcfaf928cb3f3d5695f635177291e05","ssdeep":"","tlshash":"5ee023593c09551dc7a43e9727bb575f33a51134f4900511c54ec7ecb074957443594d","size":418,"data":"","first_seen":"2023-03-26T08:07:58Z","last_seen":"2025-03-26T03:39:34.974972Z","times_seen":530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1431bdc89523494dc6a5f033be1319ee","sha1":"69da210009ac659bedacedd4da9ffa34de3fa8d6","sha256":"a6b33b146664bb2e10d4530b9f581a65de7112b651eb199799b8029a41d409c5","sha512":"92137d19e6b4e3318fa61678af9467d24f315a7d4b2cdad7d0456607748a630860044ec704b2c142f7eca1438306c396fa5617a9d0983608ec8bd784163fe64b","ssdeep":"","tlshash":"71c08c88210a0cb156f62f400b3fa540b00ab250a8a108320d0a23046120e1beb18800","size":150,"data":"","first_seen":"2023-03-26T08:07:58Z","last_seen":"2025-10-31T16:44:45.458959Z","times_seen":537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4002fd7653d0d57fd1a04699c0da703","sha1":"219151991fefca84a68470af550bb9cb55510877","sha256":"faa44d8fc1537bca4f1f6271f701c518a91f76bca19d2ed33f46b01567f94bcf","sha512":"6b47d8c301334449ced075752e4da29297ca837a0ad7fdc18f7eb658cf4e7edc14404c80c1f654bbeac51bd59e1769a884899a7472f8ce9ec2c7da68543a69bd","ssdeep":"","tlshash":"62c02bcc31460cb129e71f400b3fb740f0452140b8a118310d0623446220c0beb18802","size":142,"data":"","first_seen":"2023-03-26T08:07:58Z","last_seen":"2025-03-26T03:39:35.012488Z","times_seen":532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pix.revjet.com/track/pd2259?__noscript=false\u0026__cbf=revjet.callbacks.cb1737330995396\u0026location=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_921%26pkey1%3D921%26pkey2%3D2%26pkey3%3D6aeda80d793c4e668875c6eeb310defb%26pkey%3Dbbfd82cef7884374bc46935904839e80%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D921%26_ef_transaction_id%3D6aeda80d793c4e668875c6eeb310defb%26utm_medium%3Daffiliate%26utm_source%3DJMG%2BMedia%26utm_content%3D\u0026referrer=\u0026creditProfile=\u0026firstMortgageBalance=\u0026firstMortgageInterestRate=\u0026hasFHALoan=\u0026homeValue=\u0026loanToValue=\u0026propertyCity=\u0026propertyDescription=\u0026propertyState=\u0026propertyZipCode=\u0026rateType=FIXED\u0026typeOfLoan=\u0026loanRefiPurpose=","fqdn":"pix.revjet.com","domain":"revjet.com","tld":"com"},"ip":{"addr":"37.27.142.241","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb4fdb17ca9227deaa4632bbe613e405","sha1":"2c5250420c67225e5ee288cb30d5448247f0c14f","sha256":"72cf7a38429157ff399bb21909501d493072de8557fd9999749c367db683bf07","sha512":"628d12686c2d00074bd7f9d15b25f6a259341ab2cfd725b870cbb3110777496b18002d6369598d29851d1dd06750c06dc9b88737c37e7b7a1e1bd3b6a95fc921","ssdeep":"","tlshash":"5a900240886154926c289b2554aa4718215d4289d6284561515c4b2459088605650634","size":46,"data":"","first_seen":"2025-01-19T23:57:07.288078Z","last_seen":"2025-01-19T23:57:07.288078Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-857412364","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"19f235642d13dbbba33bd202e35c2bf7","sha1":"554e90b2eca32184205014123195cdf37e705c1e","sha256":"96eda16a9f9ccc8efb52fc649adddd5e3547dc8d414b63bd0b10b188ed204464","sha512":"8c0079c36430584245d3e0ed4031fdc1528c111e87dcf708613e86e1c400b61953f20e964b6d13c18fcef493c710f395e0bc34e71645a7d792868ca1f0559ef0","ssdeep":"3072:0zkam4s8CIE/rNPbaJW00Jy2igrJQomfnIZ7yJGsOp05LJcwdlojUy34CIM:VOCIEDNPbC1fA8G6LJcwdlojUFM","tlshash":"5c4418cdb3d6b4669293a474407f014bb13a6ca2f84cc8d4f185d8e52e74aaa4277f3d","size":277150,"data":"","first_seen":"2025-01-19T23:57:07.26717Z","last_seen":"2025-01-19T23:57:07.26717Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-813495030","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6657d7b1fdca1d07e93fb1b3d76cab96","sha1":"524209daa58b448866a97ce5e37a09fa7da5e75e","sha256":"83368a5a9b2d4d66fe9a74df37e0bccfdb4241360e8664918e5f2d015a49241c","sha512":"05d8816ccd0237d2880055bf87d43c22be78be716ffefbafeb0002b8f2eb4db637f12a5bf8c8276eda8421d4231423ae8654f80b0596b689fdab033440cff633","ssdeep":"3072:yjam4s8CIE/rNPbLJW00Oy2igrJQomfnIK7yJGsOp05LJcwdlojUy3VCIM:EOCIEDNPb+1fz8G6LJcwdlojUKM","tlshash":"d24419cdb3c6b4669393a474507f010bb13a6da2f84cd8c4e185d8e52e74aaa4277f3d","size":272570,"data":"","first_seen":"2025-01-19T23:57:07.329198Z","last_seen":"2025-01-19T23:57:07.329198Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-700319321","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"88eabf0e512777140c39e326e6c7f5c5","sha1":"ec304c4eb56d7697d5355c87d8358b64e98bc242","sha256":"9718ff866f33a597243aa7ed66e648320741fd39a50c8a88519ef3397d607351","sha512":"cdc005fe4ab6bfb0de902262be6cac756fa75384e93c26c4d15b6d74f75f921c19973bdc83915036635e727e82c4ae48b0a91ba6996a56d76ee5d91d082ad019","ssdeep":"3072:p5am4s8CIE/rNPfXJW00Dy2igrJQomfnIZ7yJGsOp05LJcwdlojUy3VCIM:fOCIEDNPft1fA8G6LJcwdlojUKM","tlshash":"a84419cdb3c6b4669393a474507f010bb13a6da2f84cd8c4e186d8e52e74aa94277f3d","size":272799,"data":"","first_seen":"2025-01-19T23:57:07.313733Z","last_seen":"2025-01-19T23:57:07.313733Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pix.revjet.com/track/pd3876?__noscript=false\u0026__cbf=revjet.callbacks.cb1737330995398\u0026location=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_921%26pkey1%3D921%26pkey2%3D2%26pkey3%3D6aeda80d793c4e668875c6eeb310defb%26pkey%3Dbbfd82cef7884374bc46935904839e80%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D921%26_ef_transaction_id%3D6aeda80d793c4e668875c6eeb310defb%26utm_medium%3Daffiliate%26utm_source%3DJMG%2BMedia%26utm_content%3D\u0026referrer=\u0026creditProfile=\u0026firstMortgageBalance=\u0026firstMortgageInterestRate=\u0026hasFHALoan=\u0026homeValue=\u0026loanToValue=\u0026propertyCity=\u0026propertyDescription=\u0026propertyState=\u0026propertyZipCode=\u0026rateType=FIXED\u0026typeOfLoan=\u0026loanRefiPurpose=","fqdn":"pix.revjet.com","domain":"revjet.com","tld":"com"},"ip":{"addr":"37.27.142.241","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"33dd4b1f10d8e8252d4fae1477b4b790","sha1":"740e78a6a65e53921fa58a9f6c9a571384a42a6b","sha256":"af188a674d79ce9edf4738340e1bf36cd5491d78b857cf2125f7cb4f3ae2dc9a","sha512":"9b7006faef0801c7d9f8d13a5ed262227bd96e9f18c2413a3d9a2c6efa821a718b3477c0a14b4df3ff37bd0f8b77e4ffdd9218de8d15ce76bd28ae4b58b727dd","ssdeep":"","tlshash":"91900240881154926c289b2544aa4718215d4786d6284171915c4b245d188604640634","size":46,"data":"","first_seen":"2025-01-19T23:57:07.286638Z","last_seen":"2025-01-19T23:57:07.286638Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"143.204.55.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c43bf70191aaaffa3931cae06f621b10","sha1":"5959464f9c301cb4e5a94d9bfe72d74891a93af3","sha256":"c69de41dda83f00cc1b13dba90a57f25df046286ecd227bdd0c4d51d94947b61","sha512":"0962c1977390a89d554b8d20f3f645a33ecf79a4214135670bbcfb16775a39b74faa2b9748b28359bedee7eb34ff4fc4e222ff963cacd7e4aad4960be5ee0fd2","ssdeep":"384:hGa7ce7wDhA2hmwqU3o+Vpfz3y2uoeanPkmhuyq865CFbVEpHN4yFqtR695:hGa7ce7UATwqU3o+jz3y2uo7xq89ApH9","tlshash":"5db2e5e931a1b47642ca607d543f6209b2b23468b985d488b53cc8f66fa0c9e3137f7d","size":23672,"data":"","first_seen":"2024-10-09T14:53:39Z","last_seen":"2026-03-28T19:22:38.967439Z","times_seen":10673,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","fqdn":"refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bfffde6d94f630dc1cd37a112882253d","sha1":"34f5423b1170aa3f061898aff5b726fa5e15a314","sha256":"bcd69b99c11e4ba1552b4b739be8110191ea7d6ecbf5efe69d10b39959f55ce0","sha512":"1df134cede948f264c0b35856ca1ec3ea7176f98aefdf45c55e4a3437cea088267f3fac7a8d26d62ca9b30a75c350928ef16d493088d254e1ad69040c8d8f9e4","ssdeep":"","tlshash":"9a70002820a0202088300000020a3200a028200080032830002320803200a0320800a0","size":21,"data":"","first_seen":"2023-03-26T08:07:58Z","last_seen":"2025-11-04T22:10:55.101993Z","times_seen":635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"92528bd020f3cc273a2ac25dc548648d","sha1":"26c65140eed0d3c7703827bc61fb9d1f701a2236","sha256":"333c6b38a93fd7697260c0d5d313d488ab7b49c188428d27feb9e01167ed72eb","sha512":"34bdfbc00a173ecdfe1b38fae7c2657322fdde132853265a981731c29be41ba137ed87487f187c7f46f5df4be7c98e7202e95b3901ac6ba1499c72f6bb7a4417","ssdeep":"","tlshash":"51e0abc22809184e4ba31038153beb1235f61328b4118230cc06cf007cb48de084ef0c","size":423,"data":"","first_seen":"2023-03-26T08:07:59Z","last_seen":"2025-03-26T03:39:35.008287Z","times_seen":530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script.anura.io/request.js?instance=3439535758\u0026exid=e598c9a0-61c6-5038-bcb9-b901393cb55e\u0026source=affl_everflow_ql-lre_165_921\u0026campaign=2\u0026708909439396","fqdn":"script.anura.io","domain":"anura.io","tld":"io"},"ip":{"addr":"18.132.34.251","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"a853082932bb804df1fc84a72058623b","sha1":"03aaddf41d3e5bb85338ad16c1247f0fbac4d955","sha256":"f7148146abdefb162dd8cbd0d8c17857add0ba6eeba8006e827430b4234aa2f3","sha512":"705f4da5ac96246ce3efde6c9de5a201a4fe089ffb63c78e2c7944d60be84223364d10a552ac350df0b79251784985bd407400ac9c0cfa4eab9c1b509aceb197","ssdeep":"1536:ILa67Z2Ttj43Xkb0+GMwzGEVUCb1O5nzr4zLAADC2eAWpyW:ILaOZcC3kL5Fd","tlshash":"dc73f8da7622f01109a221e8627f060ff37a1b74799c5450d7a5ccf428b4d8f8a3af9d","size":77295,"data":"","first_seen":"2025-01-19T23:57:07.321023Z","last_seen":"2025-01-19T23:57:07.321023Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5B82MZ73","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8d01778c8d1ed7d8030fbbd2cdadeec","sha1":"a5c544a38d329d8dca7b6c566c51b35e62a5447b","sha256":"f77ea93e31be23bf6bc98f1862900713ca558dcba30ac93a3824b560c0f5cb6d","sha512":"b571d008c106fb72a67bd35c20270e26fc7d8a23c2fdec62d794088f64ef5c1b803d90c4bac5aadf6d67a3f9e8d35c1d7748c3f3a15958d49b81524e98a59b7d","ssdeep":"3072:1wTMam4s8CIv/r2PbkJW00OD2igrJQomfnIK7yJGsOp05LJcwdlSkx7y3ePUATCX:DOCIvD2PbO1fz8G6LJcwdlVx7BsAbM","tlshash":"f6742aceb3c6b4678292a474503f010fb53a68e2b54cd8d4f185c8e42e74aaa5277f7d","size":345889,"data":"","first_seen":"2025-01-19T23:57:01.527894Z","last_seen":"2025-01-19T23:57:07.244642Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e9f5d2a3421c3f3dce4bb190e32d4bb","sha1":"5e66b1599f7de002695f7230151fcfcd0617f825","sha256":"9ab30053598626f30d0b0b25cf3988a7cd08dc13555ececd37ec03514a30b3ef","sha512":"c28c9f88a7937a0a5776b044fdd86588300184babb73086bbda99301cfb7a6a42b5667a71f3ee69cdce5fdc873dc4f81bea1d8cae3ecdc0a2631011064e09897","ssdeep":"","tlshash":"4331be1730c5552850a438ac8b7f2e1a20763263f76418bfd83a5a947b2d8a3d7f2f94","size":1474,"data":"","first_seen":"2024-11-27T23:08:18.730755Z","last_seen":"2025-02-12T04:57:24.104783Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d142dae714a9d814328842a8875b725","sha1":"c61e571b64f82cd2bbcf862cfed5402fca50db66","sha256":"deeffe8b6ce6ac15ba5f54cdecb2ca8da08967c7fc180300e5fe42141831e529","sha512":"305264aa3891eb94658bf099a621f620619944854590c47026596c74e7a4bf39ea7a49694e02b7f8825ede8b281329a9130fc251e3f1c06f8f47974bfa8d4865","ssdeep":"","tlshash":"88c02bc8310b0cf142db2f024b3fb240b002315594b10c300c016304de20d07fb88c60","size":146,"data":"","first_seen":"2024-06-17T00:05:15Z","last_seen":"2025-03-26T03:39:35.011916Z","times_seen":493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa8ff721ae75280f1f8132cd26452a29","sha1":"ad9dc8e00594401e31cfbc14fa365a1e61743a43","sha256":"6afdd0cfed7520f1d9ff3dd8736b680df270dc0b3ccfd9aaf1a6c783ac693984","sha512":"4e8771884b5a3007a57d0df9cdcb7229a73e99295210699914bbbd87d01f61bee242b12a6867d1ae27ad18d01f58636fe72273cf8f1a3c8a92c9340a28a3b04a","ssdeep":"1536:l1ZMskjfDr/l5OPRojcuF31yCSWQUfK3vk1Cq:rZkx5OkWqCq","tlshash":"4b43e6dcb7dab02103a73476457f105be23bba646c4b8540c126e5c87dbc69ea237dac","size":56248,"data":"","first_seen":"2025-01-16T19:48:53.252744Z","last_seen":"2025-03-14T04:44:03.172878Z","times_seen":391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","fqdn":"refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d59ab34369ae08df18cb89b7a6273b0e","sha1":"6e2aa2df4bbc1a743645b5bb992623bf712dff18","sha256":"b0313fec7daf4cb5f74d599dcf2e1d72976278db813491c6f201bc3596675bca","sha512":"898b01612ba6fd75351cfc941a073ff91b4f6889fbb9df7cebc02c5b5a85db92a0f70c82557cf5870b119cd02716d226844684e05c9ad81f475921d23b238e7a","ssdeep":"","tlshash":"9131df05f25978380fd611a533177852ea14f00aa3345474f39fd7681f0d00e88b89d7","size":1557,"data":"","first_seen":"2023-05-29T22:47:53Z","last_seen":"2025-03-26T03:39:34.982974Z","times_seen":532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","fqdn":"refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebab7de6eb00e5513f2e7f0ffb5777ae","sha1":"5685205b287b81ed6a15df88da24df1ee8c9f946","sha256":"88ee854180d12acce5c8e0e5eda08c3e139939f3e7efd6738db9a6812a589272","sha512":"3d7ceef59962f22fc61b0bbe09d1e6811eee8836cfe28c17e66c84298ced3deea1d05119890e7394a8f58752e63cfe74a97d72ac0ae08d47e0493c8ac12bd8a4","ssdeep":"","tlshash":"ffe02e388da3c0301f27001f2a3bfa4c2a98848be920e207b0bcfe080f80f880c459cc","size":334,"data":"","first_seen":"2023-03-26T08:07:59Z","last_seen":"2025-03-26T03:39:34.988033Z","times_seen":532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"19537bad18b6737decd5e4ce3ca1b179","sha1":"5d261b64d4cd33bc84d66b06aca375e1f791b7bd","sha256":"34075d00cd87b71134cb41cffa41312cdad73d64450f13530f93c283b28f5618","sha512":"0e33f88d84155980f5c4d7d376be54a09a3d58b3306d09773bafc4ce8101b1caebd1eaf20f7a804e62f8e97d9a146b057261b8019f0fa2e61f3e3d5fcae1c2c7","ssdeep":"","tlshash":"74f0594f680445b4775a1f692bf5d41872c6312414f5c0267e0df44f5758fe09d28ae6","size":580,"data":"","first_seen":"2023-07-01T19:27:36Z","last_seen":"2025-03-26T03:39:35.00889Z","times_seen":491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3b2c0aa96d593d3d0447c1abd619933","sha1":"e878c8115644c2ffaca9c6ea06a4932715e6110c","sha256":"4cca9e0c06b3657c20c216d19f02a39afd1d36a4308b97b994f2fb4e30742789","sha512":"96a6b06d9d996303b93e474915c7f20ddfd5051cbce52837bc01434c5729292dce667b98c865b64ea3b0e43b4dd6163baee4249972a4295a41e8d70af8934c1f","ssdeep":"","tlshash":"d7c08cc9210a0c7162b72f604f3fb100b006725094f108320d0a23054120f4be714850","size":152,"data":"","first_seen":"2023-03-26T08:07:59Z","last_seen":"2025-03-26T03:39:35.011288Z","times_seen":532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RXLL9Z7XBK\u0026l=dataLayer\u0026cx=c\u0026gtm=45He51g0v9137104487za200","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4da53f4a5cb15b4de6bccead3365b95","sha1":"4081bf65668b139252065da7537c454e51852443","sha256":"62e1cabfa951e83525a4ddaab50219f1d39f8163aceccc587b5e2d3a2a4148a5","sha512":"a513e0c90cfdff083f9953d82a493b072a58cfa20fd8aebf0dfa1d89aaba6c3175e0798e67fe1ce9f469ead071b68e6c1b9de46011b9e0f47576e0b77183d795","ssdeep":"6144:4YqOCIEDHUPtP1/eodbcwdlf7Y/Lrxu2w3RSQABSUgeQM:tnEjgtQJrxuygrM","tlshash":"f87408de73c674275296e478507f028ba57a28a2b40cc8d5f1c9cce42e74a9a4277f7c","size":350971,"data":"","first_seen":"2025-01-19T23:57:07.247053Z","last_seen":"2025-01-19T23:57:07.247053Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6a8ebfa482a78a6bdbb257e02b7f86a","sha1":"8db90ad5dad17a2770e6706bf60e8187cf0ec324","sha256":"d4d8bd3107dc49644e9ca6310c38ffb2db27695c3a273df3458fbd9d9574345d","sha512":"62d0d10c9447135dfcef1700bcc6b881e8293c754d7bcc06fc66c440a3f0a6106110ffdce99cc31c1ec7610258e4fe5379177e0edb4d599e42e3cf14eac7da02","ssdeep":"","tlshash":"cbf09e983c52605733ed2f38c7eb96ae37560b0064e255048e42c46724a98425c4288d","size":462,"data":"","first_seen":"2023-03-26T08:07:59Z","last_seen":"2025-03-26T03:39:35.006107Z","times_seen":530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba44b5bbf0434b65e839729dd67e2853","sha1":"034666e60439367e3ef848f3cba5ff4dc6149ad0","sha256":"1d416ff7b659b2b9c39bf524d2199251f2e7f2d8ae054d6c35987765c294c0e9","sha512":"09cb7a18f12cbf0d2a781c1397680ecbca963db6339323d51c5533615cd6ba0dbf8e2cf0755805d84519fd0026c1ea6627dc6dd6dfb4b049b323f87f503b4a37","ssdeep":"","tlshash":"5311c0d629478cf04dd90e5f2129eb24b1183238f874e4a1b28ccf2327c36a51846275","size":858,"data":"","first_seen":"2023-03-26T08:07:59Z","last_seen":"2025-03-26T03:39:35.020651Z","times_seen":530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c8da1834f041ce64117d596e9e16db6","sha1":"7be867f8885ca7022f313ee02c6404fe04c21b84","sha256":"8232f7462b85adbf9f2194376b7f9cff5d1a9d00b826422fadb35198beeb4f0d","sha512":"79d064c04fb9fcacd864d678c63f1102c117f456b03a23bb7a49d3c82772ba40b6c4c41f1f23acd432dd2604142ddaf11f56521c77d4a83381d0ecfb5d1d013d","ssdeep":"","tlshash":"7bf09e6d7e18b00a5545982a0bafee24215b70985803d96a894fc8dc5d3c7a7111fd8f","size":459,"data":"","first_seen":"2024-06-17T00:05:15Z","last_seen":"2025-03-26T03:39:34.997824Z","times_seen":493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.revjet.com/analytics?acu=3394","fqdn":"ads.revjet.com","domain":"revjet.com","tld":"com"},"ip":{"addr":"95.217.226.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"26ec352468322f70910e03feb9b8b8fb","sha1":"18878e8adcd809ad7a4850c8698efd24b22c04e5","sha256":"2d84cdbfaf9b2bc0ba30bc5f67e45d03b265b52c3cfe24353e09175b1fb0fdfb","sha512":"9b0d180ab85748c8e16701d2ab1603c9be6aaef8e481574d3b35152f9f134e66c07a4620101e23044c1a07c458b7aa02cfac1474089e44ba262eec85283aa0bc","ssdeep":"384:S7NAWyKtqOLyN59yqK+VDSvNjHwAcOOStnW/np:S5w0sq9+5S1LwARFmp","tlshash":"d892d68cba65b426876330b1617f560f723ba46fb884c8a4a184d8e17c7496d427bf6c","size":19476,"data":"","first_seen":"2023-03-12T09:30:56Z","last_seen":"2025-11-04T04:39:00.128265Z","times_seen":729,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"61a4babee8801e9cd65a3cc847f73415","sha1":"4b5b75be557ab15006e6e21351869daaaec57285","sha256":"5b45aca71a119b3ffbda013825e47d8ad664f31782c169412121ba4af3db2ff7","sha512":"e4f9213d9c3cd2d5dfa370440c873d32824093581e219605e64a4f18bb0aed58a4319aefbeefe5a084520de23ed2ac121b6f652ec164ced4a5f309a7a4f07d45","ssdeep":"","tlshash":"c0f0dd1a2c14eca693413f7733f79a0a6691122430b5da314d76808a0f64a46152b3fd","size":593,"data":"","first_seen":"2024-11-30T19:27:53.17238Z","last_seen":"2025-03-26T03:39:35.014446Z","times_seen":392,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c64f9b75c62328fa5ab3ee1290f2fa7","sha1":"a72b3b5f542570149985d1b9b81362b98b78542e","sha256":"45c2706a3a4378b6d7013019015f169cc307383bbfa2c1e30bf873055ddefe93","sha512":"adb8894d017629d1164086298d4a661c080caac9550078fd794c7064c3272a4578e74a795d8b27070b87bca5b5006e45cc661e823348a76020576a9754a7f00e","ssdeep":"","tlshash":"a6c02bcd71321cb1ace71f000b3fb340b0423180e4e208300d0227458610e03eb18cc2","size":147,"data":"","first_seen":"2023-03-26T08:07:59Z","last_seen":"2025-03-26T03:39:35.015466Z","times_seen":532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ct.pinterest.com/ct.html","fqdn":"ct.pinterest.com","domain":"pinterest.com","tld":"com"},"ip":{"addr":"96.6.16.234","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"250d339503efb028a3df7f67be7dfa33","sha1":"56b10df7d949eb7f4ca69d6f4da37cc82cdb2b3d","sha256":"9e4a89b010cd8524c2f80d9a57cc74252af3c7b63636598eba3e65de9e6e438d","sha512":"10c5fba6da93046bdf5a701ffc3adf83f89071f31f36b393a134db904609dd6b17d446feb76a133a285f4c5930a00323d8c08292a30e06b03c34401aeab3ea6b","ssdeep":"","tlshash":"89f05c1e93094e3c528850de7f6b3a41b533c1c5449882d478488f8cb3c4a9f62f1bc5","size":450,"data":"","first_seen":"2023-04-05T03:29:13Z","last_seen":"2025-03-02T04:49:53.485968Z","times_seen":19770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","fqdn":"refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b17e432ab8c157d0ee1f4bad3958a3f","sha1":"970bd5ad61ae4180a9b6091097af519fe3f6f39b","sha256":"2e85c9bdb394826036f1f41c420ea3851d4040afe2c8f9947f3c6856b991f684","sha512":"d538a605c5a56f98840d310d7871d8788a7ab253c30d179bd569bac3333bd95d1387d95b7d87d2ebcaaae7e384022ff9d0bdc700d75ea26058b3021918cd8f0a","ssdeep":"","tlshash":"c01123ab648f51b50527227c1b3f80042437204b2c6a1bd1fc3c02e87f2c6bc1496788","size":950,"data":"","first_seen":"2024-12-05T19:04:48.626808Z","last_seen":"2025-03-26T03:39:34.99101Z","times_seen":390,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-cdn.deviceatlas.com/dacs.js","fqdn":"cs-cdn.deviceatlas.com","domain":"deviceatlas.com","tld":"com"},"ip":{"addr":"52.58.191.183","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfe6e4ceafbea9f6e6c1edad91770ce9","sha1":"b73e476a3b1acfbc92e38cbd045448627434f8df","sha256":"145029bd46ef6268a3683431599d1cc5e9b0153c2c5bf840f931e78da99ee2a6","sha512":"01f28d571beff5b0e0114662e4d0d72ab696c4fb580be768365d98cc504ef6b3eadb5810205ccf9ba13e261e55ffdf851935c3ac3203360bd0420cf420f2bbde","ssdeep":"384:cv6oZby61loUBRL0Q9/y9mImAEH+T6T11+4QUbyHZKqr:+xhy6RFhwQ1+DkW","tlshash":"54a2734871a2b89a03d322f9506f410af2bb5979246eb454c7e2dcd1be398de4133f69","size":21896,"data":"","first_seen":"2024-02-06T20:27:09Z","last_seen":"2025-03-30T17:03:26.871564Z","times_seen":536,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-msql-prod.refinance.quickenloans.com/main.bf7600f7f2427f73dfea.js","fqdn":"static-msql-prod.refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e26aa8ba820ab0dc294d3354d6f6805a","sha1":"884d94351bd0d218b32f69cb36b7681e0a4ef47f","sha256":"9651ba1cca27977a1522d6eee5cdd445a42386c4253cc1765436ca1d3e381ac3","sha512":"f93796929e3d8a268901ac20694ac0472dca71dd47fd9267456156342d002f8bb8c1f67711df2870911874c19b83e6aa494b0501e8b3237b48f6089cb00e541e","ssdeep":"12288:AkiJVkPZQTS4bbgy0tg7wGbhd/wrjov9kA2DZNCRAjINC88Fpg:CVWZQTpbbgFtgtbhxwPu9kridAg","tlshash":"7045f988b997f9a813e35466003f110af33d3f1aa42c5450e262ddd9b974b4fb276b39","size":1225045,"data":"","first_seen":"2025-01-17T20:04:25.2685Z","last_seen":"2025-02-12T04:57:24.08285Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.pmsrv.co/v2/conversion/src?a=01c6d627-6102-4850-a756-2978545ac884\u0026event=land\u0026dnt=true","fqdn":"c.pmsrv.co","domain":"pmsrv.co","tld":"co"},"ip":{"addr":"34.144.246.130","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0864bfe8edc21f72f6881d85f9c5e79e","sha1":"e45beb63d3025d5e73a42aff40be14d7650948bd","sha256":"d8cbc596bdee9ceb0f3b176892acfb59f5535b3ab2f7f3da519a9c59a7389531","sha512":"2038b9f94e76c503ddf3d52217788f034f4b9d50065e1d29e215dd2fab7746f903b48b84e7dcc328ee3dea6bdbaf02501c17a576282a6b0656b56782596af1ca","ssdeep":"","tlshash":"ca7182e71966ed390ac5062e233fae39a0bf1c223d1e0406a549d7381f28f7127d7e91","size":3435,"data":"","first_seen":"2024-06-17T00:05:15Z","last_seen":"2025-03-26T03:39:34.977826Z","times_seen":493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-11388547050","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8606552721c4518736b5988aeb68e5ff","sha1":"7b1795b3b3dc278d3ca35028ffa2499be777d282","sha256":"10c9a168cb2f06c1631d0afc3d3da017a496cb3d9a1adcea12c1e2e5fe1be7c5","sha512":"74804f23f5f8c04943a10316a39fdd623a0bc9b6315778dab82f2a3033086161c95ea0b983c6dfee1af41abb6bd23394582b73a999921c50c81ddd9765a7e1cd","ssdeep":"3072:8tam4s8CIE/rlcPfUJW00Xy2igrJQomfnIK7yJGsOp0vdbcwdlNjty3rCIM:IOCIED2Pf21fz8G8dbcwdlNjtaM","tlshash":"e05419cdb3d7b4679392a474507f014bb13a68a2b44cc8d4f189c8e52e74aaa4277f3d","size":303175,"data":"","first_seen":"2025-01-19T23:57:07.261317Z","last_seen":"2025-01-19T23:57:07.261317Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e57144448fd2a75039d28ee29c1bc3e5","sha1":"8b7ba95d76170580344bf8a60be3ab3b85f2e4c5","sha256":"831f58dbb19742c5ea0a874fa7ffc53bcde354b7a580c8c7ceb026578edaaa9a","sha512":"e48dbab728da501b0a5c6a6ee00a0ff7cb6e0ad799bcafc9eb1515a6acc75a0210c9c017097fa31ceac3185535406577df7822b43649181c854ed4ea9ff843cc","ssdeep":"","tlshash":"7dd0228c250a0c32c0ab2f420b7ff000e26e3220d4f008302e1b32090310d0bf354410","size":197,"data":"","first_seen":"2023-03-26T08:07:59Z","last_seen":"2025-03-26T03:39:34.998653Z","times_seen":532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a70142dba164d267b830be1a209ea505","sha1":"c1fac35e31d8ac665c1aeac7b5f924970ec9e50d","sha256":"1699bb8d87e8ac56d2dc905b3fae83604060104f234cfe1159a5f1f3cc6c392d","sha512":"427af83a718bce4a22b7077f0c241749c0f55fc253492679cdc8b585e2b8e799e5633481237d6477056b6780475c25a972766616c376fa21bc6d062aef1bcbc2","ssdeep":"","tlshash":"32c080cd398d4d75d5db5f51477bf255f35531a4f9f014300d1572444210c079795462","size":183,"data":"","first_seen":"2023-03-26T08:07:59Z","last_seen":"2025-03-26T03:39:35.016482Z","times_seen":532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","fqdn":"refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"be2fa4b945397ae525389b0d79009a7a","sha1":"ae91b0b3f38a1626b172bef8383468b01e261f49","sha256":"90651088409bec74c1dfe71db7d495f4e1ad8a3bb7eef4c749c0794e5537b73a","sha512":"b46fb01fe1025a34237716845e8739591f81effa83534c437002d9e21de6f698bce7dc4287bc81b41a162c7ad80ae730f08867d2b19019b6447e83cd4cd30e42","ssdeep":"","tlshash":"e49000cc33030c0000f0ab002f0fbb88b0023020e0f0ac320e00300cb320c0bbac00c0","size":42,"data":"","first_seen":"2023-03-07T01:19:11Z","last_seen":"2026-04-04T04:00:41.35773Z","times_seen":18628,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d07d98b97154701a99faef3fa639fb02","sha1":"1e79f33e4ac6e24c09350babd9a65a70debc7a5b","sha256":"517d26aac757304b7e1461562acad2c6b49585ed2e7be78d197e11a39763d555","sha512":"e3b06e9e2430b42088c669ef914c5013a81294aeb3efbca422adde6d06fc5dc489c0b990fe7aa706017aa1edefdc6bef1bdd34781c8fcc9021ef50d62fecf2c3","ssdeep":"","tlshash":"aea02288c002302082232bf02ccb08ec0c300030a0003080ec0880c088b030f080beec","size":64,"data":"","first_seen":"2023-03-26T08:07:59Z","last_seen":"2026-02-03T00:41:02.712261Z","times_seen":659,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6dede314b1a5791ba1181b52dce97e7","sha1":"cec588ec8046786e45bc69256702aa917c35a340","sha256":"fcb61856f2b61646a3f5a8bde77ea779b3e8da4b22cda209de05fc19f8318be1","sha512":"e7e70c79b741c0edacba158e737987deca5a91bb097e893a49ab106a3d095ac5052c3f8681104c86ae259503d0d60545331b6a06e4deabebd92589fcef3159b0","ssdeep":"","tlshash":"2ee06177248244341bea19fd33f9cf4a7b9a33901031c2677dcd84066326ad3c554bac","size":417,"data":"","first_seen":"2023-03-26T08:07:59Z","last_seen":"2025-03-26T03:39:34.99271Z","times_seen":530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-966730890","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"343c2242cbb80a123a92e8922e3fefbf","sha1":"1930b5de6c87f7179496070e090e626077a06abe","sha256":"c9537b13de685b7509485518b839e662240fea1da9dcf620e7181e784bd5a0ad","sha512":"4fac9c20bfad26d930b2645741b5d6554e116e5572d0b7c29d5ba0626c1b86e0f0ca6904fd9e825e6f7fa1cfe24e5c28c73f0a4535550893ba70c4648f30bbf1","ssdeep":"3072:LSam4s8CIE/rlPbMJW00Py2igrJQomfnIK7yJGsOp05LJcwdloj4y3iCIM:GOCIEDlPbW1fz8G6LJcwdloj4JM","tlshash":"5b4408cdb396b4669392a874507f010bb13a7d92f80cd8c4e186d8d53e74aa98277f3d","size":261844,"data":"","first_seen":"2025-01-19T23:57:01.660101Z","last_seen":"2025-01-19T23:57:07.253655Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-755089552","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d10305bf6232e5ffa5c22f2e7338c1b9","sha1":"c8a1e9d3940cc1ef2a4b8ec13596b4bb3f84c07e","sha256":"6be7bd20160242b2685da894903de5e7ec5aa22a48a848ca6fa9f3c023667e82","sha512":"fa19a178bd7183c7b004b31b50d87990ec986558c106640bc9bdbdc93fb653d124f7314fe064285de0ae485b0cd170131aef7381d7b9f4ae7f9850b0d73614d2","ssdeep":"3072:8fam4s8CIE/rlcPb3JW00Rx2igrJQomfnIZ7yJGsOp0vdbcwdl4jqy3sCIM:MOCIED2Pbi1fA8G8dbcwdl4jqzM","tlshash":"ec5419cdb3d7b4679392a474507f014bb13a68a2b84cc8d4f185c8e52e74aaa4277f3d","size":299117,"data":"","first_seen":"2025-01-19T23:57:07.258737Z","last_seen":"2025-01-19T23:57:07.258737Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-10910338944\u0026l=dataLayer\u0026cx=c\u0026gtm=45He51g0v9137104487za200","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"21c9c762dbb2f402816a74d74bee66c9","sha1":"b0353ec57421604cbe1ffc27fc54e088532cf594","sha256":"7b62d816f56733795ce7a49ac2b156b09b6a14c0fd1fc3772b4e9cc4701dfbf5","sha512":"589d4a551d88f2b86739d25ba9abbc3db6e312e1e9de388604345347184b1cc634457834e523c132cd46aff61bcb18907ac21423a8e523ccb9424e49a1154569","ssdeep":"3072:n1Iam4s8CIE/rlcPbXJW00jx2igrJQomfnIK7yJGsOp0vdbcwdl4jiy3r8IM:GOCIED2Pbc1fz8G8dbcwdl4ji2M","tlshash":"3a5419cdb3c7b4679392a474507f014bb57a68a2b44cc8d4f189c8e42e74aaa4277f3d","size":306132,"data":"","first_seen":"2025-01-19T23:57:07.273133Z","last_seen":"2025-01-19T23:57:07.273133Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-10866176763","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"27df0dc6bbc30c2681f90e842ef9f15b","sha1":"87f440457d9f14fcb8dc35fc8ed96a2e4d95c592","sha256":"99c97de463f6fc6e121d50abf1be09e8e241609251de97384f88b54b16d18279","sha512":"984708f76225fa74f3c3014ea1a27b1e504cfb2d3fce51073c633ae7e3aa476f608e892414ae5ad3d6b2e0b03b514572baa051a0b0e81869ce86ab9d6781d291","ssdeep":"3072:Gjam4s8CIE/rNPfwJW00Ay2igrJQomfnIK7yJGsOp05LJcwdlojUy3VCIM:oOCIEDNPfX1fz8G6LJcwdlojUKM","tlshash":"9c4419cdb3c6b4669393a474507f010bb13a6da2f84cd8c4e186d8e52e74aa94277f3d","size":272834,"data":"","first_seen":"2025-01-19T23:57:07.274704Z","last_seen":"2025-01-20T02:10:00.072328Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/bat.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6626c1362840ebfc8f48294e8f023e18","sha1":"4ec0dfb37c3e536c1b5ec04b68c9846fdbaf9eef","sha256":"aabc88a6db8b22022f96ca88e4f0a7be426abef2b35169a71515a2d55246402a","sha512":"b037a19b52c1047198ec7f19e99066054e454964380e2354239834260d11248e617d6759b944ddf39a25b883c8f430603d8e13097396e2deda9bb6905c1cd42a","ssdeep":"768:IaOFhhRC5JFhLjfRysgLzQynDw5YyDMFW8KQ:IaOFnR2DRszQKaoWtQ","tlshash":"6333e8833390492b4aed82dc74691a03a336570e20fe709d7b8ce9f1555de0b527bb7a","size":51385,"data":"","first_seen":"2024-10-17T00:49:50.937136Z","last_seen":"2025-11-05T10:31:39.465059Z","times_seen":16264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lmbahsj2.com/scripts/sdk/everflow.js","fqdn":"www.lmbahsj2.com","domain":"lmbahsj2.com","tld":"com"},"ip":{"addr":"35.201.76.131","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5fd9f15e022b5f18e83cff4510503ff","sha1":"950e89496aa490e9048c94aac10fce42fbfd759c","sha256":"1a6435ec41848bb2da51f6c469d1168e15993000f11a96638cbd488b06ba3ad4","sha512":"1331fb5d13ca7f5b742a6a192863eb19588b3e7ec1f1b9273a164c8df72ffb70aeeff89dc98f2d562a2db31c1204a5c69ab54cff3c6b7b5772c94be9c444fddc","ssdeep":"768:BAuXnhgPw1AuCIOTQpzEeIHV7xk65nTBt0haRAY/2bVZYRMU3qnjcs3nATAruf6n:RgPw1AuCITEeIHto6dpsXjuf6Eq6w","tlshash":"be53184c3296703503a371b0213fa40ab2ba9d95744c8854fa76ccd46dbce5ea277fb8","size":61548,"data":"","first_seen":"2024-05-14T19:52:45Z","last_seen":"2025-07-01T02:25:15.160247Z","times_seen":510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/p/action/283017207.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"45100ddbe4fb816ca7ba9f16f494964a","sha1":"b7a62a6e65e6cbf915b895ce14952250387295d9","sha256":"cce2184ec089babc70ded47b8474c543f6a5ff013e4bfd9dbae8689489bb13ba","sha512":"08d730db7ff2e5ee9bef496cac3341ecdec96d579fd034087813fc9cbc87008824ee9577409bcb6002815fd441a7a05ef1b860a6340e59afef5181cb2665d674","ssdeep":"","tlshash":"cfe0265b25007079c813ed6d9273869c3fe23389c2a1ea10bd6cc8663bd92181800f8d","size":364,"data":"","first_seen":"2024-10-30T19:34:42.438991Z","last_seen":"2025-03-03T19:56:21.603369Z","times_seen":7907,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.datadoghq-browser-agent.com/us1/v5/datadog-logs.js","fqdn":"www.datadoghq-browser-agent.com","domain":"datadoghq-browser-agent.com","tld":"com"},"ip":{"addr":"54.230.219.234","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e75663f032e0bd3e7de52b417f22cb78","sha1":"899d8e0bc68712afc2e04796cedf4915333e3e59","sha256":"85698fb5db78f05d951fc0501f2d4a824b8d264a2239eddf37dcdfd02de43bec","sha512":"3f541d660b1f0003afb170c514953e3340d631188114ac64cec1f09656afa49b89c374a306b5b0e959e0b0d91d32052565c570ec0b42fb6b6a95d9ac0f9f22dc","ssdeep":"768:osGeLUpZ3YH4xWNMsTx0TujWlUPLc7xWDcFiTXGwudUp6K:osps3H8isTiUPLM9iMUUK","tlshash":"fe43b6ccb686b02113977172517f260ab33f2e55781e8420e267e2c47db865e9633f6d","size":57534,"data":"","first_seen":"2025-01-07T23:10:06.070692Z","last_seen":"2025-02-12T04:57:24.054103Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"06d3a28e4bd87e32f0de39eb26e78193","sha1":"9e81b1c3565a271a097099829360042a09c37de1","sha256":"20617cc86029fbf5c9b597eaa196f1e5e9f297a48a190909c6f16ceded5ed21d","sha512":"038ee643bf1185ec411f2ea51aae98708becaff85c5e0200011c565b95ac825335e045776220d502e8403dc0a90f7bfefdd8703013cd302319fd1f744184bde0","ssdeep":"","tlshash":"86c08c84442401bae0bee22cc8492998822032e2c9e14282d82bbe105307256d500d56","size":146,"data":"","first_seen":"2023-03-26T08:07:58Z","last_seen":"2025-03-26T03:39:35.021256Z","times_seen":532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"694b0c2a35a87c49ef88116d99cb10d4","sha1":"8cb03de707eec87e118c95d3f5eaae3a25a22f93","sha256":"6d76325098f659e34d59becf13af99b36011f75dad341ac63a2828eaaf4b8aff","sha512":"568b7bcbc11602d7de369a7beab59cf1e007bd978a6ea9985fa6202fce2f47706b5985990cc9f064570f5a2c38a0bfcb512e8240603bc8d5824b7adc0f4b6f6d","ssdeep":"","tlshash":"a0e039c6b82aa0cf126a1d52761a3d27c7f6ef75a5bad18d5a58e2040ece1184341685","size":372,"data":"","first_seen":"2023-03-26T08:07:59Z","last_seen":"2025-03-26T03:39:35.006656Z","times_seen":532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=DC-852807","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd8e3ee143665d03906b5463576af877","sha1":"b312998c5d6912a640e1dbb146b2f7ab734f587b","sha256":"f515727bac9c045f077ff99b36d143e2c03f6ac10408131e35f14c69358d439e","sha512":"3abefb638dd05986f6aa3fe2098d146683923b3214483b94380b31dd19320c0cbd967906e955c22aa37dc7c9e2ad027c04ae0aefedf17f43a75b737302cd4395","ssdeep":"3072:5Bam4s8CIE/rNPtmJW00Sy2igrJQomfE7NJY95LJcwdlojDAy3wCIM:zOCIEDNPtT18/mLJcwdlojDAVM","tlshash":"7b3408cdb3d6b46693a2a474507f014bb13a6dd2f80cd8d0e186c8d92e74aa94277f7c","size":242954,"data":"","first_seen":"2025-01-19T23:57:07.257359Z","last_seen":"2025-01-20T02:45:14.148651Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-11380533681","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"50bfb494d6f60b0d994439a4f7c794ac","sha1":"e9c67e330abcc0a949e235bf636aaec220bdb274","sha256":"c81b263057ffa769601e26f776310625994bfd8e8a308778dda0c34f64a31198","sha512":"ddd18295f30e87029dc58ae968c2d41fecd59baeae932f78e2eb5e0829f2b6c222192bb7c417320ce974737409b568640316213597e3fc099b3f2de4d214f464","ssdeep":"3072:yPam4s8CIE/rlcPbOJW003y2igrJQomfnIK7yJGsOp0vdbcwdlNjWy3rCIM:8OCIED2Pbg1fz8G8dbcwdlNjWaM","tlshash":"875419cdb3c7b4679392a474507f014bb17a68a2b44cc8d4f189c8e52e74aaa4277f3d","size":303898,"data":"","first_seen":"2025-01-19T23:57:07.279671Z","last_seen":"2025-01-19T23:57:07.279671Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.nextdoor.com/public/pixel/ndp.js","fqdn":"ads.nextdoor.com","domain":"nextdoor.com","tld":"com"},"ip":{"addr":"44.239.153.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"627204c0b3efe9fe08a570e230facab8","sha1":"7ead77e56af7771e88a38008f27cc064e01271a4","sha256":"505549ac9575aaf296267c006641ea43b9d798f4504d2ebd7920e3fa67e2788c","sha512":"c07d946ee3e57d1a6b33f2f908b6c49ee05f018eaaa2c7fde1175420a77b7b14fbbc4a3368c03e02f490dae278d31cd4bc778fa06527239b3f59df0a9540263a","ssdeep":"192:0bVEFxmacUHn9IBDkpfm7vkdIE/IjjbA2U292NO:0+xcY9IBDkpfm7vJE/Gwl2YNO","tlshash":"f7f1b4dcb6cef04153db6464503f680ab2b66a1460ad4860e109d6d53db8a7f8337fea","size":7561,"data":"","first_seen":"2024-07-12T20:44:28Z","last_seen":"2025-09-19T18:13:47.333396Z","times_seen":898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackpixel.refinance.quickenloans.com/msql-lre/pixel.js","fqdn":"trackpixel.refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a335369f8c20f2d323213029892b43d0","sha1":"bbb48e20f67fa6be4beb8ffe1ba9364624d7048a","sha256":"eb67cba878aa26f05793e3b59c45ebd89b726c5e5dce54890b64e6b6ad957117","sha512":"05a4c605c941f17cb3670cae850284f3c2722c6e8672b5a448f39fd30f890174cb1019da5c0895b1101006bf5abead13b55e4b1d1494d70bd3dc16f707da31ce","ssdeep":"","tlshash":"6be0a30b2d19fc3045565fb945f0e184257137786e31d3207c4c80135b90fda18a0cf4","size":411,"data":"","first_seen":"2024-11-30T19:27:53.129796Z","last_seen":"2025-02-24T01:52:09.149503Z","times_seen":307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"dccde4cb76c6dd13723425550c7276e8","sha1":"1b58cc94bcf473e3a5aeadbec9de2d9a42fb1ba9","sha256":"9c0ba813459e6ee5dc2915f57456026b982473e10c7ac5ab66efc642170c2be7","sha512":"9850aece201a16c889f2243d192b334d217b36a4617c1864345d4c0b8bc4932f65ec3a4ab6ed195663a54430a240c9b40813d11c28d5cc03777ee2621ce34385","ssdeep":"","tlshash":"2c11d04b771d623555eb78000fff6b28307bb65593818128bab4d9dc2b08553b91fdc8","size":934,"data":"","first_seen":"2024-11-27T23:08:18.738785Z","last_seen":"2025-01-30T13:36:39.050071Z","times_seen":338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"84dadea2a00ec7b58d97d3e4d828692c","sha1":"d4ba1f8b28d2fd11fdb684daa79411dd8a0529b1","sha256":"c9335c28e7b7d662d5f5d675370ff56a6958fa6b0304d75a4f7ba8e328426848","sha512":"b1ebbd546899679124e9a304bb91c4086ebf63a14e0060fc99fc42dbbd8dead5f469175444df0cb5a436bf97509178fcb019505dac5af71a2f4e7c58eeb1bdbb","ssdeep":"","tlshash":"b7e068b5389684782eee1c79323def8abe2a21802021935749de4c402429ad3ca75b9d","size":374,"data":"","first_seen":"2023-03-26T08:07:58Z","last_seen":"2025-03-26T03:39:34.975689Z","times_seen":530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee4ace64e24bb3804f455c9335b6077e","sha1":"9b5f79855d39f83d838fd326e6ac1519b94722f3","sha256":"3ada6a608ceb5c3f90e89d9bf71a32ddc58548f055bd8a808d99999ed49f2622","sha512":"c29f4fb9487be510e395a547b8c157f7b8b2263b18600c0d483e789c4845bf8b0502bad6edeb4a73090f63f15a7a987325aa8837d30f608d291d66b717bbcbb1","ssdeep":"","tlshash":"e2d01299797a4db2d9eb5f414b3ff505e2657224e4a004210e1a22454121f77ea65960","size":199,"data":"","first_seen":"2023-03-26T08:07:59Z","last_seen":"2025-03-26T03:39:35.014956Z","times_seen":532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackpixel.refinance.quickenloans.com/msql-lre/pixel-a4430dafe2716675c1f5.js","fqdn":"trackpixel.refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e39ef9df180cf8eb9d8d28deb76708be","sha1":"179ec7c00e3b9c08f4f12be668eca8cfafc94b49","sha256":"b10c96a3927d805e28126c77c2c23197605b143f9f285a727f320f2d23f80eae","sha512":"daac72982e2f61835fb5e18381c6d0a5c62687bc4e5409f4a851687e38c5cee1569b981a70bb73d2974836fb2fdf75b2e223555d96e81bb6b75a91fe96498927","ssdeep":"1536:4V5u7V4BYGgDyotdTR/bzuJhEoxbZDFSiqi1YNEsSGug+IUZrEEJXUezExMng9Mc:4V5G4ZgFzKt3afsIUTg8eTGvWt","tlshash":"d414b76877d5f9f98d8231e4703fe606f12e35116020d084e8ecd499ad76dd788a3bba","size":207501,"data":"","first_seen":"2024-11-30T19:27:53.077854Z","last_seen":"2025-02-24T01:52:09.132675Z","times_seen":307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8363b5dde60bd0e5e54ec62bdf39f45","sha1":"42318a90719697182f695361c0c90698973db863","sha256":"abeef223ecdc631a7a31b0eee8f5b87d1bfbbccd1fc8fa190d96e134208ecc4f","sha512":"7fbb308d1730ad49b4d50ef35b0ee0893a7cedae310e51c78a36127ccad1211c9b49d097765d8524786e803362c70ed20d89c29434ea6f8bbd43672e466f184b","ssdeep":"","tlshash":"52e0f176254244301be918f933b9cf4b7b5a33901430c2577ccd440e1339ad3c914bac","size":417,"data":"","first_seen":"2023-03-26T08:07:59Z","last_seen":"2025-03-26T03:39:35.013858Z","times_seen":530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-865435318","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"18b143c258e45a3beda2bb5c4dec5a52","sha1":"373ac5c567571de3da97f8079b9c8629f84c11f8","sha256":"e539ebaf65667a176142b104e45b3c87efca00d75a54c6500b20c350cb51731c","sha512":"814ed7afefb3dae61c9e99f76ad57d2d4a07aaa86eb60669694aed8ee1377a930c3cc99533e4485dc41a76565c1f9ba98699f3fb21f4f472d9bc25634e78de68","ssdeep":"3072:EIam4s8CIE/rlcPf8JW00Ox2igrJQomfnIZ7yJGsOp0vdbcwdl4j/y3sCIM:TOCIED2Pf21fA8G8dbcwdl4j/zM","tlshash":"a95419cdb3d7b4679292a474507f014bb13a68a2b84cc8d4f185c8e52e74aaa4277f3d","size":299124,"data":"","first_seen":"2025-01-19T23:57:07.268999Z","last_seen":"2025-01-19T23:57:07.268999Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"09706bee5ae849023daf40e97142f74d","sha1":"8a27cda282a1a8e1f21def525a2aa70386be4828","sha256":"393bb08613579f65fb82d21feb684dbdc52bf45959a550b5f4ce2b0750a14474","sha512":"8b6a6655762e40a7432df7620683f4e3a993c3ab3be4fd0669915f531155c6608cc38c8334f04f9d4a59ca84374642b09651e675937023a3ccb1ffbec25f92d2","ssdeep":"","tlshash":"bfc080cd398d4d75d5db1f51473bf616f3552166f5f015300d1533444210c07d7594a1","size":183,"data":"","first_seen":"2023-03-26T08:07:58Z","last_seen":"2025-03-26T03:39:34.989013Z","times_seen":532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f9b57bb94aa83cd11d8083f9f41b46d","sha1":"511763fd1dc4b01777d981f2fab3f6c9d48da967","sha256":"c310c8ada351dc0adc94f40ff5889846c4ea2afb466340dd430dd3989b174022","sha512":"a4495d5d426695896f42c4bb3cd9e38b3e80890685ed46f1f853b89177cbc1aad7e224d2ae0edeb5a02beb2fef7002a639c6e74e005920d8c5a6b74f2899494a","ssdeep":"","tlshash":"e7f0a02bf11c203924eba51966ff6b39903766aa0ab05144b27a8ee03343187041fdce","size":429,"data":"","first_seen":"2024-11-27T23:08:18.716444Z","last_seen":"2025-01-30T13:36:39.077942Z","times_seen":338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.pinimg.com/ct/core.js","fqdn":"s.pinimg.com","domain":"pinimg.com","tld":"com"},"ip":{"addr":"96.6.16.234","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1af331e3b3445bcfba8699b3962e5432","sha1":"766995eac418da1ff108b9c6636b4cd594a414ac","sha256":"46811578437caf8eac61ac10112c43b46ede17063b29ac96b866c7027b6fd1d2","sha512":"7f5ef9acc78807857864d64ee870ec0019df172d10405bcd0da3b2ed5c5f113e1da63f3ce86e14d55b0b4a2acd1c0ab464fc3027a430c69c92919e51c2149f3b","ssdeep":"96:dWIMorTxu+6Y6yHyTKCP2y1mCjLwzxakMG2B3Z5ZT5BuoXmmL5ZSWnBn:5M+2yPCPuIuDMr9Z5Zlgo2MkWnB","tlshash":"08a1c7fa3984f04155b3a0b1223f19c7f17a0504a4ace4d0d189eeecac5857d91abe9c","size":4730,"data":"","first_seen":"2024-12-12T18:59:21.529877Z","last_seen":"2025-08-28T05:03:27.641281Z","times_seen":1933,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-966730890","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"168aa6e88b9225881b24d26254484100","sha1":"c3b995bba40bc30f535cbb5d442d9813fa2aa4f1","sha256":"fa9a64ff21a629fa0b1c4421deca8a800d3ea4b5deb00b5a4a39d1d067c1cc23","sha512":"d773d92891d624dd6c80e62836fef860aa75ddebd62511d9dc1e07f6ebdcfcdc917da0c42199092ec786045a30310a487093d5406839ac26e6a61191922e0820","ssdeep":"3072:LSam4s8CIE/rlPfNJW00Py2igrJQomfnIK7yJGsOp05LJcwdloj4y3iCIM:GOCIEDlPfL1fz8G6LJcwdloj4JM","tlshash":"3e4408cdb396b4669392a874507f010bb13a7d92f80cd8c4e186d8d53e74aa98277f3d","size":261851,"data":"","first_seen":"2025-01-19T23:57:07.252104Z","last_seen":"2025-01-20T02:48:48.110581Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7cb13988c250629f1accb2f85b8860d","sha1":"575c0fc657fc84b6aef8a6c0e8c00c2523ad7583","sha256":"e202c5a3d6adc0a6a165241f1d7211e214acd7da4857b1714223cd4440658841","sha512":"529852862fd89466133c0196537420d20e5404da88745d02b681f3b57225ad46161934a0d7e1adcdb631a738060096eccf314267734b57be01e6cc950c9ecd87","ssdeep":"","tlshash":"a7d0228c160a0c30c09b2f430b7fb004b25d322090f004302e1b73090311907e258454","size":197,"data":"","first_seen":"2023-03-26T08:07:59Z","last_seen":"2025-03-26T03:39:35.010731Z","times_seen":532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e604fd01a141ce560df82b25852c1c09","sha1":"d4aae42f6af21bd988fe576ab31e9e1f58efaad6","sha256":"61d01f7edd86aff6512d214f1eb9b98210a72311ea4439d22474a12164335f0f","sha512":"e641c2206a3d0b3c6716e4f520688c4e62fa8c23f3421c889543548c7b8c7262d2140e4e7716c77d383207303584d37e934f1a688fc0cab16e5747b5b1d0c044","ssdeep":"","tlshash":"c2f0b701db566ef2460116fb787bc37b90efb189b16b8499b9c420835f1feadb010768","size":498,"data":"","first_seen":"2023-03-26T08:07:59Z","last_seen":"2025-03-26T03:39:35.016988Z","times_seen":532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8194c4a37542d8df8791b5b6def01e0","sha1":"de90e76807c48852c204ed27726d5392dfaca7ec","sha256":"8598156cfc99d6db4ec84b645f570e134cef9fbf89e06969e36f3b111ec2d9a8","sha512":"252d9e331aff47b7682ed845f59b2d6e0e35391c6f8326b456bf1e9c65d490ab45995e962f7e8199682593d8450a5d7eeb8cb2c1480ddfb8f520a7f6b143afe1","ssdeep":"","tlshash":"06d0128925094d71d6eb2f51477ff115b2552264d4e014310d1962484510e07d659570","size":190,"data":"","first_seen":"2024-06-17T00:05:16Z","last_seen":"2025-03-26T03:39:35.000853Z","times_seen":493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.mgid.com/mgsensor.js?d=1737330994753","fqdn":"a.mgid.com","domain":"mgid.com","tld":"com"},"ip":{"addr":"104.17.198.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ce70f3ba285bdc7ed99d95a5c60af1d","sha1":"0212d85a8640d127b903fea703208beeb4daed07","sha256":"50717873101f479c7173074a285d6d1037bb55493e044b26f079a723bcfb425f","sha512":"7b349e7af6b9f3a10248818e045c4c43dfaaf6ab62a313fba6b2b898316d2b98d5a24f6b7b5a45d6c6688e537ebb8a2af4ea5b7637992fa1c487a788e9c347e7","ssdeep":"192:22zVfz/9UJfRykpXbf/OFON6b5v1a/yYi/1g4GT2bpziHJfrDF1Lgiuk9S3TnZU:8JQuPo5vcy7Nb8gkonW","tlshash":"0b727389b6c4b15103e3617d493fb20ab3326579689a84a06571c4d07cba74fb2a3ff9","size":17067,"data":"","first_seen":"2024-12-18T14:25:59.416487Z","last_seen":"2025-08-05T10:11:29.444304Z","times_seen":1164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","fqdn":"refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b62d2f032ef77256dd932fe2d017a0d","sha1":"0f9b9a3aa52ee85cf112e83c49893dd59c79b878","sha256":"bcb2895304de6e5092eded4b064a1725ac891e6fb2f673e6c2564ee213615f11","sha512":"570e70b96b254d8c6c100ac30fad9e3774f6daccbc23d26499c9ab629e67447c2ea3527514a976c978350b500e83961421a3a82686b5acf581fc9da01841373e","ssdeep":"","tlshash":"7be028db78210c7570dd06f633b1e11d7143120878091d22cefdc93469186c78c134cc","size":342,"data":"","first_seen":"2024-06-17T00:05:17Z","last_seen":"2025-03-26T03:39:35.018954Z","times_seen":486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","fqdn":"refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"01b35506f935bfe803188af7f6273761","sha1":"c8c657bdbd1bf293579de2095dd319f2aaf8d982","sha256":"aa57ace4efc6ddd52df2e6b695d3c40ccf2280d260a92391daf88ee1e0f1f767","sha512":"93f00bf9b9582dcfdf61817de8543ba8ba6fab6fe9f459b83a5a26775eb6faa5275a0373867cf69421ea828eebd613d480c87ab2deed3c890c5588a32ff829bf","ssdeep":"768:n0DwjMg72hU37AqqEAlo2oDnkKJJJeVNZJ02ZeJgOeE/B9Slsseo7qRzlnb9YZCV:n0nXCnkKiVSAeBF2qGc69gyOG+5","tlshash":"5bb3f86b76c0063607664d8232367b2fbe65f749b995c5c6fa3ccb9c0b92d6881372d0","size":111474,"data":"","first_seen":"2025-01-19T23:57:07.369952Z","last_seen":"2025-01-19T23:57:07.369952Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fb1b20cd3fe84b478b7728a23b513ba","sha1":"fd54a5aa3a5141158b3ff5058aa235ae113f8ca3","sha256":"27b6b3b02a9f3440a745746a44f93b6bad4e3e1ad71e8f23760d56ef60b07684","sha512":"0cbe12111dd9dc5185c340932a7bb48080179ab1b1682e67beeb4f5041212bf7ba7e7a03b97164f8e82a98858c15e474ef9dcb448b7c7c1b22f188cb904dc1b0","ssdeep":"","tlshash":"b80123ecf1be317404536bb287ef925470307c4481808c712048ccbf18384990a83a49","size":645,"data":"","first_seen":"2024-06-17T00:05:15Z","last_seen":"2026-04-03T13:54:33.010475Z","times_seen":684,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"213dc5df19da5b19a64d9f11c10bd3f3","sha1":"2ed04f9b1cc5dc01e20522d85013ad1478c6a6d3","sha256":"d71f9e5508408b976e402612c9fb7605630deb35e475961f667dad54be8147fa","sha512":"5062214a84ccfb657569b0726ebe93ba053cd743ad3d928e16984a7b6deac988df8bcc4908129ede3f233b7b575eebffd881293a345cfe644496cd201e03247c","ssdeep":"","tlshash":"d2c08cc931461c7568a76e400b3fb700b0412040a0b108320d176b444210c07eb24881","size":147,"data":"","first_seen":"2023-03-26T08:07:58Z","last_seen":"2025-03-26T03:39:34.985809Z","times_seen":532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-10866179376","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3aabddc776ddbe0beace0dd05139eabe","sha1":"d5b1a60362206e0f7a22572370561f9ff3663b5f","sha256":"810c249b8bf1a6a144c66f9eddfe29ce5470c547d385506814601749c2cafbb0","sha512":"98e656bec25f1e2c7e9d074f15a5e83427eb33e4ab836e5e5c2dd5a1c3122e9f04e731c419081cded1bd84fb464d7462a6936d23ee8ee15144d6b3c0d43951d8","ssdeep":"3072:1Cam4s8CIE/rNPfQJW009y2igrJQomfnIK7yJGsOp05LJcwdlojUy34CIM:UOCIEDNPf41fz8G6LJcwdlojUFM","tlshash":"f84419cdb3c6b4669393a474507f014bb13a68a2f84cc8d4f185d8e52e74aaa4277f3d","size":277008,"data":"","first_seen":"2025-01-19T23:57:07.265425Z","last_seen":"2025-01-19T23:57:07.265425Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-848879802\u0026l=dataLayer\u0026cx=c\u0026gtm=45He51g0v9137104487za200","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"34ca0dd637684d2fe00422204441e454","sha1":"b6db84069d6e4d7930e0c27893e233caea72c5b4","sha256":"5afc4e8a7169bd445a6b0db11a088a82fbc2f8e89e66735cf46a91a4b294df59","sha512":"f96c89b2f1d2a873e73581c5762dc1728d4c9bebe9a31c75aeb63372f02670a36f339d8b1df70263813eaa908f8020799db2d649f2bfd6a85c5c8f4d59a2527d","ssdeep":"3072:LSam4s8CIE/rlPbcJW00xy2igrJQomfnIK7yJGsOp05LJcwdlojmy3i8IM:GOCIEDlPb41fz8G6LJcwdlojm3M","tlshash":"634408cdb396b4669392a874507f010bb13a7d92f80cd8c4e186d8d53e74aa98277f3d","size":261853,"data":"","first_seen":"2025-01-19T23:57:01.567641Z","last_seen":"2025-01-19T23:57:07.28281Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-04T03:45:49.849196Z","times_seen":330097,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e36ceaebc4d6ff26bb31a1fedc2d074","sha1":"35c89f5fbe369d59b02886749c58dea2632eaa1b","sha256":"425584148712e9177ca47127a6b81bcf16c2b60345467e0843e45fcfd7c5670b","sha512":"4231fdd5a67cc1a32e0763ee831c851bf1b2968de74c1c319ef89bc980598d159a17606cad91ba416b9722319207ab9304bedabc722b8c259e56354bc158a1ab","ssdeep":"","tlshash":"2a11c0d619478cf04dc90f5f2129eb24b1183338f874e4a1734ccf232bc36a52846275","size":858,"data":"","first_seen":"2023-03-26T08:07:58Z","last_seen":"2025-03-26T03:39:34.991986Z","times_seen":530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-16663922781","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a321e7b55e7b4cf8018bb5282caf7eb8","sha1":"efd698f3c3bb1aeb40c65810578efbea83f28a7c","sha256":"1624104c7290097ff8b1003617d305f08c4ec3f414704f3121099af2e9e98e3a","sha512":"459a942beefd22f9b146d447ee45f7a5194e8912d8cc89b1ce53606e13c47a8e2e586b0d46f85d9379e91968c1096680a749ee04131ef0891ca184d25542137e","ssdeep":"3072:ulam4s8CIE/rlcPfKJW004y2igrJQomfnIK7yJGsOp0vdbcwdlNjMy3sCIM:SOCIED2Pfh1fz8G8dbcwdlNjMzM","tlshash":"cb5419cdb3c7b4679392a474507f014bb17a68a2b84cc8d4f185c8e52e74aaa4277f3d","size":299619,"data":"","first_seen":"2025-01-19T23:57:07.276312Z","last_seen":"2025-01-19T23:57:07.276312Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7648c73f026d128fff934703747eadf4","sha1":"179654537628d027b86ac509998ed953c7d72545","sha256":"742047d0745a31afa33e21ad21e9bf0a0ee75f2a21d594e44b5ccf7971fbf36e","sha512":"7a281889b7f3fc542af2e6ced0d105379a258021e4217054520ced56ed4824a2d29e1a62431a7f5a7aac973fc9b45313a9b4c8ab3c1f4b7b0476f5b32b66401e","ssdeep":"","tlshash":"40c08c89224e0c7146f62f108b3fa200b086725098b108320d2a23045120f63eb14890","size":155,"data":"","first_seen":"2024-08-10T19:47:19Z","last_seen":"2025-03-26T03:39:35.021895Z","times_seen":452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"710bdea64550ede6e649011504de1a1b","sha1":"57c2712e478b0886c301107b85b8c3f5d6ae3df7","sha256":"b057bc2c5b73cae70e3b085262d0a265279f7b0e1bc33b20e78d3de4e1dfc14f","sha512":"d9a75a1783c8581665755efd867933ef7b0d1820886a9170a1f2409456de86498c2327071e98b905939bfc2424da292306e7d736243ff05b9ecb5c58041b2109","ssdeep":"","tlshash":"a4d05ec6c11c0db10bc6087919284b3315c836e38c3b5a083e4df2af037e0207620091","size":230,"data":"","first_seen":"2024-08-10T19:47:21Z","last_seen":"2025-03-26T03:39:35.005544Z","times_seen":452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"b66a764eb1b6ee3c4a2349ee12cf734a","sha1":"6c83f6fc3484cc37ee68d770739879a42745c018","sha256":"fc6818ec549231801c6d07129c809376e3bdb2d22f2f7a5dbd8ba1be61564f9a","sha512":"6238f59c6170b723803876d340f2b78ec9ac71770f3118c7e87b1528dfa3adfa92c02c653e1503b1f1cf32c16bc70c815d0d979562f31791ac80ca04adacffe4","ssdeep":"","tlshash":"93b0125ff39e7176afc763e2016d9a84102324610844e6c8e2b97de1513d15960bee9f","size":119,"data":"","first_seen":"2024-11-27T23:08:18.752224Z","last_seen":"2025-01-30T13:36:39.088029Z","times_seen":337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b2c2041f8d99c45e0f21474fe4f8b7bc","sha1":"0b876666393469c726a2e3edbb29544c03a92154","sha256":"17f5bfdbae6b35ae8bc3b27c069526d694021fe1e37a8027678e770fbb05e061","sha512":"401fafee1b739893eea01d7a74ddc334d123ec98208c7ccbfbc8cdbcaa51f0dc3c94cb1efc856e65a13640428c189f44a82e3f9036c3d69924d62074e800f412","ssdeep":"","tlshash":"016000c0cc30000c0c000030003030300000c0000c300330c03000c030300f00c03000","size":17,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-04-04T02:23:53.841573Z","times_seen":13691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":[{"md5":"bc1d3a136e6f54eff73adaf5669b9be3","sha1":"1a0f53998a4dd4c3f5e9a6fbadc64d21046d1295","sha256":"9aabfd165cfb96fc5e170862e4fd9c90cfa2a5705af401617c836f152398fce1","sha512":"8ee80ff0951e9ad9d691b55512e6260db1cca513173006de59376f7efe72e57f07b231591e456ff9a25fab549e113f03af2c3cc70fed354d03cf503f4e4bbfb4","ssdeep":"","tlshash":"184000000000000000300000000000000000030000000000000000000000000c0030c0","size":6,"data":"","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-04-04T03:42:11.69904Z","times_seen":97852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a0bf95a38cb701564c34134431943259","sha1":"0187395c6d7697a45f0464905d967396748b2194","sha256":"124207d84bdc8a107cbcc04212a091e85157e09d7bf208f7afb4839498fef083","sha512":"d5060e5b2d8370e3c8ec336f5b957d73d4dfe43e55244e46bb32d1060dddb7023d1aa46bc3561ba86146035200748360eb19b7852038ef2bec925f39d3313310","ssdeep":"","tlshash":"804000000000000000300000000300c00000000000000000000000000000000c0030cc","size":7,"data":"","first_seen":"2023-03-07T12:56:09Z","last_seen":"2026-04-04T03:42:11.704478Z","times_seen":97722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"308065b5078a49f986fc3c9f9b66e5d3","sha1":"be1628c3c7d88ddfb243f216545e780b98cc4386","sha256":"fdfe0993e6e9e9917554bb95b1137af5870146fd38da5f13bea1b530ac05b296","sha512":"7c55327b79cd297b8b6984212dedc5066f88a06d4ab528bd982ea2fdb6f55468c6cd77fc9b27ab12346123b6c84aa573a8719eb4e3435bd01847fe20790a3f1c","ssdeep":"","tlshash":"214000c03000000000000c000cc00300000000000000000000c00030000030c0c00000","size":7,"data":"","first_seen":"2023-03-07T12:56:09Z","last_seen":"2026-04-04T03:42:11.705008Z","times_seen":102828,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"18677ea6e07c07112bec226915275c94","sha1":"071839002cb9ad61b486c94b34da58c1c09298b4","sha256":"edd69cf296d250e5a4d913d21d0f321c8f373f25a32f6d793898d9af625647ce","sha512":"36a559ac55fbd750f7456d52ae2eb6280f9e5968cda427b0ab397d559785e10c28220bf20719c991eac784c3a550b9de877eea87d6ac3231f4fc932bbb2a48e8","ssdeep":"","tlshash":"f8b0924faf6df27905244a9cb0b2b15cdc4ed93ec59495b8caa099000f58ad76aa0008","size":126,"data":"","first_seen":"2024-11-30T19:27:53.21249Z","last_seen":"2025-02-24T01:52:09.162226Z","times_seen":307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"166248a6129a1e4370d20adc2d4c23f3","sha1":"0fe0bb445f51fad57f3fc4115d7c66cf18545107","sha256":"b7d082ee12e91b756ea22e8513b8594eebcf5d39fab813da3cb55794dc888ad7","sha512":"ec7f23faf755a87ffa0e75a4cb03a07f23768e9691d7965d0fc060797aabdeaba450df5c416656b1fe6f68ec9360a43e4d3190b7059a82a77acf5b54012a4c11","ssdeep":"","tlshash":"5e4000c000000000000000000cc00000000000000000000000c0003000000000c00000","size":6,"data":"","first_seen":"2023-03-07T12:56:09Z","last_seen":"2026-04-04T03:42:11.705511Z","times_seen":102513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"babd0daf38a8ba8a6c33c4d1d354eb56","sha1":"c64904f4f0bdb995912fdd1667d538cff4dee6e2","sha256":"ce519cccc38cf22bd82579910ddfdcb00f5726373dae5af87048b157303e8f27","sha512":"0c92e118e967aa1aa38876eb0d13f1864b4e9b6205673454ba516e6a5ef56307e8f08d74a076290c8201f35818c8b43f6dafcb7b7e8ce293e4a2166c0ee7a8d5","ssdeep":"","tlshash":"d64000030000000300000000000030000000000000000c000000000000000000000000","size":6,"data":"","first_seen":"2023-03-07T12:56:09Z","last_seen":"2026-04-04T03:42:11.706176Z","times_seen":97713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"18f6c5915df0ee9e990a9ed34e7e4c9e","sha1":"12ca6d04aca4a6c2d3c35d7bb3e0b17ee2b40eaf","sha256":"8a68328caf368d532d46b3f92810fc12cca5aa75b37860bd64de60c540ad8844","sha512":"6799e84485b804fa66b1aa37ebd1dd056dcc2693706a425419aa99ced9cbc87ba0500f2a3bf01dd5bd2fffa722f8f151b13dbebaeab8af5b46accc76aa73626d","ssdeep":"","tlshash":"a6a011888c02b0a082232ae028eae8ac08a02020a000a080e88888800aa038a0c0bea8","size":81,"data":"","first_seen":"2023-03-26T08:07:59Z","last_seen":"2026-02-03T00:41:02.728641Z","times_seen":661,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0efa13d18e21e1c280569064dccd2d9f","sha1":"0656901371cc259791bd253dc8835dc44b0575fd","sha256":"69eb3111ab6500088bcc0f5cb043f452bd7b7801bdcd7b0e478c2fc454fdba0a","sha512":"c2a8b7bd626179f2de81621b288bdcd7bce4f06a9511031f0fb9786650bcf5cb7af87539efcc195964f038788d84fc4bc77c00df6317048d38db8eb715a31210","ssdeep":"","tlshash":"1240000000000000000030c0000000000000000000000c000300000000000000000000","size":7,"data":"","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-04-04T03:42:11.69826Z","times_seen":97798,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"www.npvnt7trk.com/4RQSJ/B34MN4/?sub2=GoldMB17","fqdn":"www.npvnt7trk.com","domain":"npvnt7trk.com","tld":"com"},"ip":{"addr":"34.36.162.171","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-01-19T23:56:31.042Z","timestamp":1737330991042,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"npvnt7trk.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Wed, 08 Jan 2025 22:07:58 GMT","end":"Sat, 06 Dec 2025 02:59:20 GMT"},"fingerprint":{"sha1":"C6:A9:5D:7F:C2:73:F1:A8:DC:C8:66:67:E9:F0:46:D3:47:F2:16:DC","sha256":"EA:0F:CF:8D:C2:31:73:24:BD:F3:03:13:07:72:51:EF:BC:98:31:49:14:24:FB:F0:83:82:40:51:EC:25:A8:32"}}},"request":{"raw":"GET /4RQSJ/B34MN4/?sub2=GoldMB17 HTTP/1.1\r\nHost: www.npvnt7trk.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 19 Jan 2025 23:56:31 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 175\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model\r\nlocation: https://www.npvnt7trk.com/4RQSJ/79C6G4/?__ptid=5f125c275d5b4781b1b3141e623ab00d\u0026sub1=\u0026sub2=GoldMB17\u0026sub3=\u0026sub4=\u0026sub5=\u0026source_id=\r\nset-cookie: uniqueClick_B34MN4=ad8c627a-0e2d-4495-98c3-2b544775c22d:1737330991; Path=/; Expires=Mon, 20 Jan 2025 23:56:31 GMT; Secure; SameSite=None\r\nvary: Origin\r\nx-eflow-request-id: ee490072-7c0a-4c1d-994b-d35f38840919\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":175,"size_decoded":175,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"f6ade0b0e9fe72765f83fbd5f4ba040c","sha1":"e3e620a6ef1258ddec4330b3d5e82e3f4ff40ba4","sha256":"17b4d6b1158dc3e9ae8f9fd4427b7a44e99d26cc65be4b0d52edf7c2ec71a144","sha512":"d68bf3047c73d688b6033bda1df36fec1cc9f29c75e0ed732f7e3385ff57f6f75d285d17d68ec312c9c782d3b2abf8468cfdea81b73930281406b67d141ff62f","ssdeep":"","tlshash":"45c08c2fa8c2f4c60a304232215213ce0d8b0235f04320a3f12f1be0dd481b308036f2","first_seen":"2025-01-19T23:57:07.231891Z","last_seen":"2025-01-19T23:57:07.231891Z","times_seen":1,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":121,"dns":1,"connect":8,"send":0,"wait":126,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.npvnt7trk.com/4RQSJ/79C6G4/?__ptid=5f125c275d5b4781b1b3141e623ab00d\u0026sub1=\u0026sub2=GoldMB17\u0026sub3=\u0026sub4=\u0026sub5=\u0026source_id=","fqdn":"www.npvnt7trk.com","domain":"npvnt7trk.com","tld":"com"},"ip":{"addr":"34.36.162.171","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-01-19T23:56:31.297Z","timestamp":1737330991297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"npvnt7trk.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Wed, 08 Jan 2025 22:07:58 GMT","end":"Sat, 06 Dec 2025 02:59:20 GMT"},"fingerprint":{"sha1":"C6:A9:5D:7F:C2:73:F1:A8:DC:C8:66:67:E9:F0:46:D3:47:F2:16:DC","sha256":"EA:0F:CF:8D:C2:31:73:24:BD:F3:03:13:07:72:51:EF:BC:98:31:49:14:24:FB:F0:83:82:40:51:EC:25:A8:32"}}},"request":{"raw":"GET /4RQSJ/79C6G4/?__ptid=5f125c275d5b4781b1b3141e623ab00d\u0026sub1=\u0026sub2=GoldMB17\u0026sub3=\u0026sub4=\u0026sub5=\u0026source_id= HTTP/1.1\r\nHost: www.npvnt7trk.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uniqueClick_B34MN4=ad8c627a-0e2d-4495-98c3-2b544775c22d:1737330991\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 19 Jan 2025 23:56:31 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 128\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model\r\nlocation: https://www.lmbahsj2.com/2GRQG2G/964QF6/?source_id=9\u0026sub1=2\u0026sub2=bbfd82cef7884374bc46935904839e80\r\nset-cookie: uniqueClick_79C6G4=fd75fee0-71db-481b-bf22-cb92a6a7b6a3:1737330991; Path=/; Expires=Tue, 21 Jan 2025 05:56:31 GMT; Secure; SameSite=None\ntransaction_id=bbfd82cef7884374bc46935904839e80; Path=/; Expires=Sat, 19 Apr 2025 23:56:31 GMT; Secure; SameSite=None\r\nvary: Origin\r\nx-eflow-request-id: 5e3136e1-1816-42c4-aa59-1b82ddf66cf9\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":128,"size_decoded":128,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"1027300aa86a0926d03438ff3ea78f15","sha1":"67d1e2fa10b34e796bf9ade5c3349e6c9d691d14","sha256":"df976b46a4ddae43b73f7e5711980d4eb91982bfb70bf3dde46ec9a2cf355c68","sha512":"37e150bd758e348a1882d12135ff2177c8f56eb12740af90e39dc4659d2f71d4e10b2566d3ee9297a83bb655b12c2e9c99990ba5687a8d1455b378e122119078","ssdeep":"","tlshash":"beb02bab0051a088056195f8c3087240018f0042fc0720c07099008800238e701e3da1","first_seen":"2025-01-19T23:57:07.235817Z","last_seen":"2025-01-19T23:57:07.235817Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lmbahsj2.com/2GRQG2G/964QF6/?source_id=9\u0026sub1=2\u0026sub2=bbfd82cef7884374bc46935904839e80","fqdn":"www.lmbahsj2.com","domain":"lmbahsj2.com","tld":"com"},"ip":{"addr":"35.201.76.131","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-01-19T23:56:31.443Z","timestamp":1737330991443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmbahsj2.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 14 Mar 2024 13:49:10 GMT","end":"Tue, 15 Apr 2025 13:49:10 GMT"},"fingerprint":{"sha1":"A1:7A:C4:FC:AC:8D:B7:8D:5A:15:64:81:79:E7:87:53:DB:D0:A2:1B","sha256":"91:3C:DE:7D:4F:80:B0:C2:C0:3C:9E:D6:92:D6:04:02:C4:19:28:56:2C:5D:FD:3F:A7:94:D4:CD:34:99:69:79"}}},"request":{"raw":"GET /2GRQG2G/964QF6/?source_id=9\u0026sub1=2\u0026sub2=bbfd82cef7884374bc46935904839e80 HTTP/1.1\r\nHost: www.lmbahsj2.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 19 Jan 2025 23:56:31 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 409\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model\r\nlocation: https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=\r\nset-cookie: uniqueClick_964QF6=51acc8ac-2546-4bd4-b9fa-5f37b10507c2:1737330991; Path=/; Expires=Mon, 20 Jan 2025 23:56:31 GMT; Secure; SameSite=None\ntransaction_id=6aeda80d793c4e668875c6eeb310defb; Path=/; Expires=Sat, 19 Apr 2025 23:56:31 GMT; Secure; SameSite=None\r\nvary: Origin\r\nx-eflow-request-id: 09b77537-2145-4de8-b93a-7bed744e6c28\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":409,"size_decoded":409,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (407)","md5":"01ad8e2bf0e3fff1ef1ef3768ce41f29","sha1":"096afa290820a88c638ac48b4709e31aefb596b3","sha256":"0fc5e4726967c6bf6a10608c1f4423905de459251e316e53dd2701e0e98fff0c","sha512":"3d9ebd1c3c7d2cac5a0098f68e7ec6e2320815b491f5783bff9ceccc026de018523c0766fbd06a6cf6c1711f557448e78cf6d2aa2df9fb684e688e74b5a9c18c","ssdeep":"","tlshash":"2fe0f8b6000bc19b063406c0b9ccf0e15e4e08d0f484a281f3db8b0d0ec0f8715c303a","first_seen":"2025-01-19T23:57:07.238845Z","last_seen":"2025-01-19T23:57:07.238845Z","times_seen":1,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":161,"dns":0,"connect":20,"send":0,"wait":146,"receive":0,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"143.204.55.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:33.032Z","timestamp":1737330993032,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 03 Dec 2024 00:00:00 GMT","end":"Thu, 01 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5C:AB:2E:95:E4:51:10:BB:40:25:C7:8D:ED:DC:24:1E:43:F0:65:23","sha256":"C4:F5:ED:4E:65:82:2A:E2:CC:A8:0F:73:B9:88:4B:8C:C1:8B:C2:87:0E:56:96:25:92:42:25:7A:4B:DF:95:30"}}},"request":{"raw":"GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/x-javascript\r\ncontent-length: 7350\r\nlast-modified: Wed, 09 Oct 2024 12:04:38 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 19 Jan 2025 01:10:41 GMT\r\ncache-control: max-age=86400\r\netag: \"7d4644d89e45fe92623bdd628e60e8dd\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: skyxvInHd6DtDAVrRjFLfVrRGqPLjFa_UwreuQb84o8OOnxDk-yvhA==\r\nage: 81952\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7350,"size_decoded":23675,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (23588)","md5":"aaede52b3eb338a4c40a92d3dbe23826","sha1":"230358c6626a991066aa9d0a759961ddf864be8a","sha256":"682ab4c8be1cb38cf575dddee00463eb0a6b4c21c322c9be24eb76ca899117f2","sha512":"edcc128fd2c6cb160d76921a8809a38b08b91eb0298867d331c90f6f0169bc513502d17fa86bf479cb4435fc6e066fe0916ccede9b7550b79fa51a5b16d58698","ssdeep":"384:YGa7ce7wDhA2hmwqU3o+Vpfz3y2uoeanPkmhuyq865CFbVEpHN4yFqtR695:YGa7ce7UATwqU3o+jz3y2uo7xq89ApH9","tlshash":"81b2e5e931a1b47642ca607d543f6209b2b23468b985d488b53cc8f66fa0c9e3137f7d","first_seen":"2024-10-09T14:53:40Z","last_seen":"2025-03-02T06:08:45.129373Z","times_seen":4414,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":15,"dns":0,"connect":3,"send":0,"wait":1,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-cdn.deviceatlas.com/dacs.js","fqdn":"cs-cdn.deviceatlas.com","domain":"deviceatlas.com","tld":"com"},"ip":{"addr":"52.58.191.183","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:33.033Z","timestamp":1737330993033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deviceatlas.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 04 Mar 2024 08:26:42 GMT","end":"Sat, 05 Apr 2025 08:26:42 GMT"},"fingerprint":{"sha1":"DF:1C:66:CC:79:DC:3B:40:CC:0C:DC:C9:33:E3:2F:79:88:2A:1A:1C","sha256":"73:B4:D4:1F:86:27:B6:E7:42:76:8F:EB:A9:42:22:F4:92:3F:CD:38:F0:27:C1:E5:40:D2:3C:52:18:27:52:3B"}}},"request":{"raw":"GET /dacs.js HTTP/1.1\r\nHost: cs-cdn.deviceatlas.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.2\r\ndate: Sun, 19 Jan 2025 23:56:33 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 21896\r\nlast-modified: Wed, 24 Jan 2024 11:56:56 GMT\r\netag: \"cfe6e4ceafbea9f6e6c1edad91770ce9\"\r\nexpires: Sun, 19 Jan 2025 23:56:32 GMT\r\ncache-control: no-cache\r\nx-cache: HIT\r\naccept-ch: DPR,Width,Viewport-Width,Viewport-Height,Device-Memory,RTT,Downlink,ECT,Lang,Sec-CH-DPR,Sec-CH-Width,Sec-CH-Viewport-Width,Sec-CH-Viewport-Height,Sec-CH-Device-Memory,Sec-CH-RTT,Sec-CH-Downlink,Sec-CH-ECT,Sec-CH-Lang,Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Bitness,Sec-CH-UA-WoW64,Sec-CH-Prefers-Reduced-Motion,Sec-CH-Prefers-Reduced-Transparency,Sec-CH-Prefers-Contrast,Sec-CH-Forced-Colors,Sec-CH-Prefers-Color-Scheme,Sec-CH-Prefers-Reduced-Data\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21896,"size_decoded":21896,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21803)","md5":"cfe6e4ceafbea9f6e6c1edad91770ce9","sha1":"b73e476a3b1acfbc92e38cbd045448627434f8df","sha256":"145029bd46ef6268a3683431599d1cc5e9b0153c2c5bf840f931e78da99ee2a6","sha512":"01f28d571beff5b0e0114662e4d0d72ab696c4fb580be768365d98cc504ef6b3eadb5810205ccf9ba13e261e55ffdf851935c3ac3203360bd0420cf420f2bbde","ssdeep":"384:cv6oZby61loUBRL0Q9/y9mImAEH+T6T11+4QUbyHZKqr:+xhy6RFhwQ1+DkW","tlshash":"54a2734871a2b89a03d322f9506f410af2bb5979246eb454c7e2dcd1be398de4133f69","first_seen":"2024-02-06T20:27:09Z","last_seen":"2025-03-30T17:03:26.871564Z","times_seen":536,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":200,"dns":3,"connect":21,"send":0,"wait":33,"receive":14,"ssl":179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:33.667Z","timestamp":1737330993667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Dec 2024 10:58:15 GMT","end":"Sun, 30 Mar 2025 11:58:10 GMT"},"fingerprint":{"sha1":"68:D3:62:56:06:F9:32:39:3B:2D:19:7E:B1:45:4B:2C:76:5F:73:C6","sha256":"9E:DF:32:54:68:FD:9A:F7:B9:03:FB:D0:2A:A6:13:5A:3A:5C:75:CB:B1:51:77:C7:EC:16:83:F8:E2:0E:83:7A"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:33 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 904ac3169b75b4f3-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44795,"size_decoded":44795,"mime_type":"text/javascript; charset=UTF-8","magic":"gzip compressed data, from Unix","md5":"ca84fbccfcdb895b0f14decd9720a2e6","sha1":"28d1e4c50f71d25d0822386209314df1c48f38fd","sha256":"58e5672970be71c81c545cd3d40c6290fb9d4c34577d8cbc0b54b752135d5567","sha512":"9af46dbce5aed03ce8b138e506e51eec8287413d3820a73654d1f8152f97ba51dc41c827fa88c793eb17e921ce0e9c620057eb7c23fa85748a1c5f0c6d08ffc5","ssdeep":"768:7xmvd3CVRAPv34Fka2UiTP5c4wJeb3CojgiLq44V7f/ywXGZul6Jg2H7z:7xmvdOGvoFkaoDec9jN4umGS2g2H/","tlshash":"1513021d5b526c0fa8c8e80fcaddfb8345b89e99b57dcc31421ec8a8331219d8750b26","first_seen":"2025-01-19T23:57:07.242686Z","last_seen":"2025-01-19T23:57:07.242686Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":26,"dns":1,"connect":1,"send":0,"wait":18,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5B82MZ73","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:33.937Z","timestamp":1737330993937,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:36:18 GMT","end":"Mon, 03 Mar 2025 08:36:17 GMT"},"fingerprint":{"sha1":"BB:2E:7E:AD:26:E1:69:CA:59:9D:25:40:5F:20:4A:82:34:E8:D2:04","sha256":"5A:6F:35:5B:E3:09:08:2E:14:FC:4D:A7:BE:0C:A9:0A:CF:D1:DF:F0:C7:6B:B3:B6:D9:0A:7B:4E:DB:0F:92:F2"}}},"request":{"raw":"GET /gtm.js?id=GTM-5B82MZ73 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\nexpires: Sun, 19 Jan 2025 23:56:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 19 Jan 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1080:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"coop_reporting\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1080:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 115302\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":115302,"size_decoded":345889,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (18150)","md5":"f8d01778c8d1ed7d8030fbbd2cdadeec","sha1":"a5c544a38d329d8dca7b6c566c51b35e62a5447b","sha256":"f77ea93e31be23bf6bc98f1862900713ca558dcba30ac93a3824b560c0f5cb6d","sha512":"b571d008c106fb72a67bd35c20270e26fc7d8a23c2fdec62d794088f64ef5c1b803d90c4bac5aadf6d67a3f9e8d35c1d7748c3f3a15958d49b81524e98a59b7d","ssdeep":"3072:1wTMam4s8CIv/r2PbkJW00OD2igrJQomfnIK7yJGsOp05LJcwdlSkx7y3ePUATCX:DOCIvD2PbO1fz8G6LJcwdlVx7BsAbM","tlshash":"f6742aceb3c6b4678292a474503f010fb53a68e2b54cd8d4f185c8e42e74aaa5277f7d","first_seen":"2025-01-19T23:57:01.527894Z","last_seen":"2025-01-19T23:57:07.244642Z","times_seen":2,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":78,"dns":7,"connect":21,"send":0,"wait":45,"receive":53,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refinance.quickenloans.com/cdn-cgi/rum?","fqdn":"refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.311Z","timestamp":1737330994311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"refinance.quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jan 2025 23:31:57 GMT","end":"Sat, 19 Apr 2025 00:31:53 GMT"},"fingerprint":{"sha1":"CA:DC:00:08:E4:E8:98:30:E3:29:4F:78:62:53:16:CD:4B:C2:E9:A4","sha256":"53:BC:5E:71:5F:CF:07:58:BC:A4:31:9B:F5:92:34:34:69:D9:28:90:0F:B5:E5:A3:D1:1B:9E:BB:F2:F6:37:D7"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: refinance.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1410\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=\r\nCookie: AWSALBTG=81eaj/auj3I+x3GBkebnxQKES17tB2O/EENcP7WHylU20GJz28KoDmsDNZV3nVIWUIttH/IsYnGPRHvi6TCMOrtCdfkvc7LUHR7uOigenSgt1CEg1c6zynZgfbI7M0aHQJlXHNWiIOplnPahaK0GSOW2f2k/7LoNBmWAmuThPfajwCqp5Bg=; AWSALBTGCORS=81eaj/auj3I+x3GBkebnxQKES17tB2O/EENcP7WHylU20GJz28KoDmsDNZV3nVIWUIttH/IsYnGPRHvi6TCMOrtCdfkvc7LUHR7uOigenSgt1CEg1c6zynZgfbI7M0aHQJlXHNWiIOplnPahaK0GSOW2f2k/7LoNBmWAmuThPfajwCqp5Bg=; visitorId=6fe06897-c211-4c3f-a003-68355321c1a5; visitorId=6fe06897-c211-4c3f-a003-68355321c1a5; contentTarget=%7B%22moid%22%3A%22322646%22%2C%22sourceId%22%3A%22affl_everflow_ql-lre_165_921%22%7D; __cf_bm=z_Ecw8895AezetC.tRDhIO282Cn_tuThOBQE5pkWp34-1737330992-1.0.1.1-2b7xIuFXo5ebz5G3Ggz3IJSwTtmPN4Tfn7fA0aKRzTW8ReqwoIiWHuvpCf.RXA6rdiekgmcuhXEWsPyTP0YLHQ; _dd_s=rum=1\u0026id=5846c323-9573-490f-ad0c-619c3dbb651a\u0026created=1737330993959\u0026expire=1737331893959; _gcl_au=1.1.1441864768.1737330994\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\naccess-control-allow-origin: https://refinance.quickenloans.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 904ac31a7f630b41-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RXLL9Z7XBK\u0026l=dataLayer\u0026cx=c\u0026gtm=45He51g0v9137104487za200","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.285Z","timestamp":1737330994285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:36:18 GMT","end":"Mon, 03 Mar 2025 08:36:17 GMT"},"fingerprint":{"sha1":"BB:2E:7E:AD:26:E1:69:CA:59:9D:25:40:5F:20:4A:82:34:E8:D2:04","sha256":"5A:6F:35:5B:E3:09:08:2E:14:FC:4D:A7:BE:0C:A9:0A:CF:D1:DF:F0:C7:6B:B3:B6:D9:0A:7B:4E:DB:0F:92:F2"}}},"request":{"raw":"GET /gtag/js?id=G-RXLL9Z7XBK\u0026l=dataLayer\u0026cx=c\u0026gtm=45He51g0v9137104487za200 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\nexpires: Sun, 19 Jan 2025 23:56:34 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"coop_reporting\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 114778\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":114778,"size_decoded":350971,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7726)","md5":"d4da53f4a5cb15b4de6bccead3365b95","sha1":"4081bf65668b139252065da7537c454e51852443","sha256":"62e1cabfa951e83525a4ddaab50219f1d39f8163aceccc587b5e2d3a2a4148a5","sha512":"a513e0c90cfdff083f9953d82a493b072a58cfa20fd8aebf0dfa1d89aaba6c3175e0798e67fe1ce9f469ead071b68e6c1b9de46011b9e0f47576e0b77183d795","ssdeep":"6144:4YqOCIEDHUPtP1/eodbcwdlf7Y/Lrxu2w3RSQABSUgeQM:tnEjgtQJrxuygrM","tlshash":"f87408de73c674275296e478507f028ba57a28a2b40cc8d5f1c9cce42e74a9a4277f7c","first_seen":"2025-01-19T23:57:07.247053Z","last_seen":"2025-01-19T23:57:07.247053Z","times_seen":1,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refinance.quickenloans.com/api/click","fqdn":"refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.258Z","timestamp":1737330994258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"refinance.quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jan 2025 23:31:57 GMT","end":"Sat, 19 Apr 2025 00:31:53 GMT"},"fingerprint":{"sha1":"CA:DC:00:08:E4:E8:98:30:E3:29:4F:78:62:53:16:CD:4B:C2:E9:A4","sha256":"53:BC:5E:71:5F:CF:07:58:BC:A4:31:9B:F5:92:34:34:69:D9:28:90:0F:B5:E5:A3:D1:1B:9E:BB:F2:F6:37:D7"}}},"request":{"raw":"POST /api/click HTTP/1.1\r\nHost: refinance.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: Bearer null\r\nContent-Length: 2376\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=\r\nCookie: AWSALBTG=81eaj/auj3I+x3GBkebnxQKES17tB2O/EENcP7WHylU20GJz28KoDmsDNZV3nVIWUIttH/IsYnGPRHvi6TCMOrtCdfkvc7LUHR7uOigenSgt1CEg1c6zynZgfbI7M0aHQJlXHNWiIOplnPahaK0GSOW2f2k/7LoNBmWAmuThPfajwCqp5Bg=; AWSALBTGCORS=81eaj/auj3I+x3GBkebnxQKES17tB2O/EENcP7WHylU20GJz28KoDmsDNZV3nVIWUIttH/IsYnGPRHvi6TCMOrtCdfkvc7LUHR7uOigenSgt1CEg1c6zynZgfbI7M0aHQJlXHNWiIOplnPahaK0GSOW2f2k/7LoNBmWAmuThPfajwCqp5Bg=; visitorId=6fe06897-c211-4c3f-a003-68355321c1a5; visitorId=6fe06897-c211-4c3f-a003-68355321c1a5; contentTarget=%7B%22moid%22%3A%22322646%22%2C%22sourceId%22%3A%22affl_everflow_ql-lre_165_921%22%7D; __cf_bm=z_Ecw8895AezetC.tRDhIO282Cn_tuThOBQE5pkWp34-1737330992-1.0.1.1-2b7xIuFXo5ebz5G3Ggz3IJSwTtmPN4Tfn7fA0aKRzTW8ReqwoIiWHuvpCf.RXA6rdiekgmcuhXEWsPyTP0YLHQ; _dd_s=rum=1\u0026id=5846c323-9573-490f-ad0c-619c3dbb651a\u0026created=1737330993959\u0026expire=1737331893959\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: AWSALBTG=q8EZJLxoknqubQuhef73aW2IrbA2jWklwxxt4bYclxBlO6P0758ONb3rMjqNhLKCnjW3G+4+7riJe6rIs9/Ff3SLvFzGRBW6sjOCUvOLv3hbJD0kAbV6nWPAd1RQ2Wa+Ol0CKfLfOkvYUasG7W+snuVvBZyqNfNOKZzNOPdEla4lUFC2QMM=; Expires=Sun, 26 Jan 2025 23:56:34 GMT; Path=/\nAWSALBTGCORS=q8EZJLxoknqubQuhef73aW2IrbA2jWklwxxt4bYclxBlO6P0758ONb3rMjqNhLKCnjW3G+4+7riJe6rIs9/Ff3SLvFzGRBW6sjOCUvOLv3hbJD0kAbV6nWPAd1RQ2Wa+Ol0CKfLfOkvYUasG7W+snuVvBZyqNfNOKZzNOPdEla4lUFC2QMM=; Expires=Sun, 26 Jan 2025 23:56:34 GMT; Path=/; SameSite=None; Secure\r\nx-powered-by: Express\r\netag: W/\"1515-JLz+Ir7RsuGNGYMXL4fXTGu08Ns\"\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 904ac31a1f400b41-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3944,"size_decoded":3944,"mime_type":"application/json; charset=utf-8","magic":"gzip compressed data, from Unix","md5":"b3c3e90f07e74a2a1470f99854260f55","sha1":"6a0dacbec4f587cb0c8c2aa634563a4a009549a1","sha256":"1d2b94b8c78d0e68e9bc0665769de3924402d8cac01e24bd17794c425f7146d3","sha512":"1ad73d45285cf109f378bf3289abc1a9a1f28cd7944e0e9fb463c1193ebe29f3435cb57d1fe68320ea9da8b38491982db85615746cdf568da6bf111e44f4ad6d","ssdeep":"","tlshash":"52816de5b34a08acd047c5215950dc0c3a50439ef58ab6a4ee37eac369afe574011ada","first_seen":"2025-01-19T23:57:07.248549Z","last_seen":"2025-01-19T23:57:07.248549Z","times_seen":1,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/492/MYRIADPRO-COND.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:37.247Z","timestamp":1737330997247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jan 2025 09:04:05 GMT","end":"Wed, 16 Apr 2025 10:02:19 GMT"},"fingerprint":{"sha1":"01:DE:DA:C9:4A:74:99:9A:D5:6A:41:C2:81:92:CC:04:7B:2A:DF:35","sha256":"47:93:DA:4C:14:3A:C0:7F:F0:6E:F2:67:34:4E:CB:42:02:E3:43:E8:32:0A:AC:0F:07:03:1B:E6:53:DF:0C:D9"}}},"request":{"raw":"GET /s/492/MYRIADPRO-COND.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\ncontent-type: font/woff\r\ncontent-length: 60044\r\nlast-modified: Sat, 05 Feb 2022 02:00:51 GMT\r\netag: \"ea8c-5d73bbca4b3e7\"\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nage: 197150\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tuWYSqfZ%2BWPLxqAco9wKaW6z3zUjbwqsMakCPnpTHtYlrLa8lmZ204t90%2BCfBRnFWWTDhLsEV9QqxanGJ1lCkXP7NLMrnr%2FzkvNkQWSPq8Lr4fiO1ulW9kA2TZ2mXgdZMt1qIbc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 904ac31c9dfa56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=6899\u0026min_rtt=5061\u0026rtt_var=3210\u0026sent=11\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=4068\u0026recv_bytes=1583\u0026delivery_rate=117348\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=113e4ad8d0118f1d\u0026ts=42\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60044,"size_decoded":60044,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 60044, version 0.0","md5":"8b8a29e2f40541f5622a488a4fbcf316","sha1":"1a26ff5e79997f8a7d55f0234aba1ecfef86fdd6","sha256":"55cbdff52a4ce0061ff5347c7003f6086224a8f5b5d7d3afa3feb420ec8585b5","sha512":"c34c4fa9abed494bd4a7c51efd58912fbe4001f8ea77f471cb0e92db4206c901ce4feb199e160168c7f489c6e6a8086fd8f88c923530aab9f85b495905d0a3b6","ssdeep":"1536:KnOescHkglqCYXQWgnWgZPROD93nzgnvqjdz:Ksdg1WgWiODpnHdz","tlshash":"4143010f088e90ea0d2299b83884f39dd9fde5ff932e85110b0aa55ff616f583b01c95","first_seen":"2023-08-25T10:35:19Z","last_seen":"2026-03-30T11:23:45.794708Z","times_seen":591,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/492/MYRIADPRO-BOLD.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:37.249Z","timestamp":1737330997249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jan 2025 09:04:05 GMT","end":"Wed, 16 Apr 2025 10:02:19 GMT"},"fingerprint":{"sha1":"01:DE:DA:C9:4A:74:99:9A:D5:6A:41:C2:81:92:CC:04:7B:2A:DF:35","sha256":"47:93:DA:4C:14:3A:C0:7F:F0:6E:F2:67:34:4E:CB:42:02:E3:43:E8:32:0A:AC:0F:07:03:1B:E6:53:DF:0C:D9"}}},"request":{"raw":"GET /s/492/MYRIADPRO-BOLD.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\ncontent-type: font/woff\r\ncontent-length: 62676\r\nlast-modified: Sat, 05 Feb 2022 02:00:51 GMT\r\netag: \"f4d4-5d73bbca4afff\"\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nage: 648834\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=49C02xqvwXRnj71N5%2Bmy2xgIkB7uSFjryUjUKhcO7QNPTn8BJ1I%2BRiV%2BElnm0IfETTEE%2B5NWvARF1MDwBxduGbzQBaXpPUE%2FwxYlmEr8MmePCUvk5bDikENAiWILCq8r6vp4dyQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 904ac31c9dfc56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=6899\u0026min_rtt=5061\u0026rtt_var=3210\u0026sent=21\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=16068\u0026recv_bytes=1583\u0026delivery_rate=117348\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=113e4ad8d0118f1d\u0026ts=42\u0026x=1\", cfExtPri, cfHdrFlush;dur=5\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62676,"size_decoded":62676,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 62676, version 0.0","md5":"d6bee12c7e838e84074faeb7c131c988","sha1":"a1b31f5a9d369ae3597e427fc47d6a5d89d28cbd","sha256":"962f8da44a5e7f4416402f6bc4a7165ab26cef621f6c24cb74f5e8db5fdc5f9e","sha512":"a32fdc7839096a19812f27446cc3a5d050e93766dc5e6697ecede07e320e377ce2f89d3adab75034b937a0890ce0cc02fccacec84367786e4044d31be8b37c90","ssdeep":"1536:UydXXmsNrW3EMLhnG9Jp5SN/yh6ongk4MymBtWysU:3JXrrW3Z1sJpQw/g7KtWysU","tlshash":"b453020e77bbb9d47f975cb491dfa913397603dcaa4e420600512a5274e87c0af3ae17","first_seen":"2023-06-30T14:58:25Z","last_seen":"2026-03-28T01:36:55.708401Z","times_seen":773,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-966730890","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.723Z","timestamp":1737330994723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:36:18 GMT","end":"Mon, 03 Mar 2025 08:36:17 GMT"},"fingerprint":{"sha1":"BB:2E:7E:AD:26:E1:69:CA:59:9D:25:40:5F:20:4A:82:34:E8:D2:04","sha256":"5A:6F:35:5B:E3:09:08:2E:14:FC:4D:A7:BE:0C:A9:0A:CF:D1:DF:F0:C7:6B:B3:B6:D9:0A:7B:4E:DB:0F:92:F2"}}},"request":{"raw":"GET /gtag/js?id=AW-966730890 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\nexpires: Sun, 19 Jan 2025 23:56:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 19 Jan 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"coop_reporting\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 93786\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93786,"size_decoded":261851,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2146)","md5":"168aa6e88b9225881b24d26254484100","sha1":"c3b995bba40bc30f535cbb5d442d9813fa2aa4f1","sha256":"fa9a64ff21a629fa0b1c4421deca8a800d3ea4b5deb00b5a4a39d1d067c1cc23","sha512":"d773d92891d624dd6c80e62836fef860aa75ddebd62511d9dc1e07f6ebdcfcdc917da0c42199092ec786045a30310a487093d5406839ac26e6a61191922e0820","ssdeep":"3072:LSam4s8CIE/rlPfNJW00Py2igrJQomfnIK7yJGsOp05LJcwdloj4y3iCIM:GOCIEDlPfL1fz8G6LJcwdloj4JM","tlshash":"3e4408cdb396b4669392a874507f010bb13a7d92f80cd8c4e186d8d53e74aa98277f3d","first_seen":"2025-01-19T23:57:07.252104Z","last_seen":"2025-01-20T02:48:48.110581Z","times_seen":3,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-966730890","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.723Z","timestamp":1737330994723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:36:18 GMT","end":"Mon, 03 Mar 2025 08:36:17 GMT"},"fingerprint":{"sha1":"BB:2E:7E:AD:26:E1:69:CA:59:9D:25:40:5F:20:4A:82:34:E8:D2:04","sha256":"5A:6F:35:5B:E3:09:08:2E:14:FC:4D:A7:BE:0C:A9:0A:CF:D1:DF:F0:C7:6B:B3:B6:D9:0A:7B:4E:DB:0F:92:F2"}}},"request":{"raw":"GET /gtag/js?id=AW-966730890 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\nexpires: Sun, 19 Jan 2025 23:56:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 19 Jan 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"coop_reporting\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 93771\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93771,"size_decoded":261844,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2146)","md5":"343c2242cbb80a123a92e8922e3fefbf","sha1":"1930b5de6c87f7179496070e090e626077a06abe","sha256":"c9537b13de685b7509485518b839e662240fea1da9dcf620e7181e784bd5a0ad","sha512":"4fac9c20bfad26d930b2645741b5d6554e116e5572d0b7c29d5ba0626c1b86e0f0ca6904fd9e825e6f7fa1cfe24e5c28c73f0a4535550893ba70c4648f30bbf1","ssdeep":"3072:LSam4s8CIE/rlPbMJW00Py2igrJQomfnIK7yJGsOp05LJcwdloj4y3iCIM:GOCIEDlPbW1fz8G6LJcwdloj4JM","tlshash":"5b4408cdb396b4669392a874507f010bb13a7d92f80cd8c4e186d8d53e74aa98277f3d","first_seen":"2025-01-19T23:57:01.660101Z","last_seen":"2025-01-19T23:57:07.253655Z","times_seen":2,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.pinimg.com/ct/core.js","fqdn":"s.pinimg.com","domain":"pinimg.com","tld":"com"},"ip":{"addr":"96.6.16.234","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.662Z","timestamp":1737330994662,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pinterest.com","organization":"Pinterest, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 02 Aug 2024 00:00:00 GMT","end":"Thu, 07 Aug 2025 23:59:59 GMT"},"fingerprint":{"sha1":"34:B7:F7:0E:F0:07:7D:4D:C0:6D:8A:B2:05:18:67:8E:25:DF:7B:39","sha256":"3A:FC:05:E0:AF:A1:F2:71:08:61:05:8C:4D:33:6A:B9:14:A3:9F:C1:E6:C3:A2:0D:CF:5C:11:F4:22:F3:D9:9A"}}},"request":{"raw":"GET /ct/core.js HTTP/1.1\r\nHost: s.pinimg.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"11c76370dfab0397b8a31fe800363638\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\ncontent-length: 1863\r\nalt-svc: h3=\":443\"; ma=600\r\nvary: Accept-Encoding, Origin\r\nakamai-x-true-ttl: 7200\r\nx-cdn: akamai\r\naccess-control-max-age: 86400\r\naccess-control-expose-headers: X-CDN\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1863,"size_decoded":4730,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4730), with no line terminators","md5":"1af331e3b3445bcfba8699b3962e5432","sha1":"766995eac418da1ff108b9c6636b4cd594a414ac","sha256":"46811578437caf8eac61ac10112c43b46ede17063b29ac96b866c7027b6fd1d2","sha512":"7f5ef9acc78807857864d64ee870ec0019df172d10405bcd0da3b2ed5c5f113e1da63f3ce86e14d55b0b4a2acd1c0ab464fc3027a430c69c92919e51c2149f3b","ssdeep":"96:9WsFpRR6+6Y6yHuwCp0ywALw8LMpn02MGkdtmze91pecbt:9++2y7CpG8yfM2z+wcbt","tlshash":"82a1e8fd3985b45159b7b0b4227f02c7b03a0a04a0fcf4d0d24aeb986c5985e90faedd","first_seen":"2024-12-12T18:59:21.529877Z","last_seen":"2025-08-28T05:03:27.641281Z","times_seen":1933,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":54,"dns":6,"connect":2,"send":0,"wait":78,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Antic+Didone\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:33.205Z","timestamp":1737330993205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:37:20 GMT","end":"Mon, 03 Mar 2025 08:37:19 GMT"},"fingerprint":{"sha1":"40:E7:4C:FA:6D:23:B6:A9:19:0C:67:77:3A:43:22:D0:A4:CE:49:24","sha256":"06:52:12:65:60:CA:7F:5D:E6:72:0C:26:3B:A8:C5:A9:51:68:4D:2C:E4:2D:0C:4E:F7:63:D2:99:8C:AE:D8:06"}}},"request":{"raw":"GET /css2?family=Antic+Didone\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static-msql-prod.refinance.quickenloans.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 19 Jan 2025 23:56:33 GMT\r\ndate: Sun, 19 Jan 2025 23:56:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63171,"size_decoded":63171,"mime_type":"text/css; charset=utf-8","magic":"gzip compressed data, max compression","md5":"fa38dece936fad0b80ea7763b4176077","sha1":"d15cb1a4d26fc9e0c2c09dc4d62b6c007e577af6","sha256":"171dba11f45d777e3f7aa95267de511d651748448200ba142bf330971f3417ec","sha512":"1f6bdc7d45a51c89938addcacffc0025da7beca7b8dc20a495b73bf571df4f94a8f7f927b22d986ec368e36dd77f732c8fd4e36345871206a937e84c7f792d71","ssdeep":"768:zv1MOdvMGatydQv73qZZGZ7AVMqxZULreREud92B1C5buEpioxWe6O1ESHFnLQkO:xZwAuTyYu68248oxWe6O19H1zwnubdk","tlshash":"8d5302c909941a9af7333f2f52bf46992722d83da83140b664435fc3ae578bbdc106d4","first_seen":"2025-01-04T07:55:54.360619Z","last_seen":"2025-01-19T23:57:07.255908Z","times_seen":2,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":20,"receive":0,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=DC-852807","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.671Z","timestamp":1737330994671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:36:18 GMT","end":"Mon, 03 Mar 2025 08:36:17 GMT"},"fingerprint":{"sha1":"BB:2E:7E:AD:26:E1:69:CA:59:9D:25:40:5F:20:4A:82:34:E8:D2:04","sha256":"5A:6F:35:5B:E3:09:08:2E:14:FC:4D:A7:BE:0C:A9:0A:CF:D1:DF:F0:C7:6B:B3:B6:D9:0A:7B:4E:DB:0F:92:F2"}}},"request":{"raw":"GET /gtag/js?id=DC-852807 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\nexpires: Sun, 19 Jan 2025 23:56:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 19 Jan 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"coop_reporting\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 86754\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86754,"size_decoded":242954,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5268)","md5":"fd8e3ee143665d03906b5463576af877","sha1":"b312998c5d6912a640e1dbb146b2f7ab734f587b","sha256":"f515727bac9c045f077ff99b36d143e2c03f6ac10408131e35f14c69358d439e","sha512":"3abefb638dd05986f6aa3fe2098d146683923b3214483b94380b31dd19320c0cbd967906e955c22aa37dc7c9e2ad027c04ae0aefedf17f43a75b737302cd4395","ssdeep":"3072:5Bam4s8CIE/rNPtmJW00Sy2igrJQomfE7NJY95LJcwdlojDAy3wCIM:zOCIEDNPtT18/mLJcwdlojDAVM","tlshash":"7b3408cdb3d6b46693a2a474507f014bb13a6dd2f80cd8d0e186c8d92e74aa94277f7c","first_seen":"2025-01-19T23:57:07.257359Z","last_seen":"2025-01-20T02:45:14.148651Z","times_seen":2,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-755089552","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.763Z","timestamp":1737330994763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:36:18 GMT","end":"Mon, 03 Mar 2025 08:36:17 GMT"},"fingerprint":{"sha1":"BB:2E:7E:AD:26:E1:69:CA:59:9D:25:40:5F:20:4A:82:34:E8:D2:04","sha256":"5A:6F:35:5B:E3:09:08:2E:14:FC:4D:A7:BE:0C:A9:0A:CF:D1:DF:F0:C7:6B:B3:B6:D9:0A:7B:4E:DB:0F:92:F2"}}},"request":{"raw":"GET /gtag/js?id=AW-755089552 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\nexpires: Sun, 19 Jan 2025 23:56:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 19 Jan 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"coop_reporting\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 103035\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103035,"size_decoded":299117,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5268)","md5":"d10305bf6232e5ffa5c22f2e7338c1b9","sha1":"c8a1e9d3940cc1ef2a4b8ec13596b4bb3f84c07e","sha256":"6be7bd20160242b2685da894903de5e7ec5aa22a48a848ca6fa9f3c023667e82","sha512":"fa19a178bd7183c7b004b31b50d87990ec986558c106640bc9bdbdc93fb653d124f7314fe064285de0ae485b0cd170131aef7381d7b9f4ae7f9850b0d73614d2","ssdeep":"3072:8fam4s8CIE/rlcPb3JW00Rx2igrJQomfnIZ7yJGsOp0vdbcwdl4jqy3sCIM:MOCIED2Pbi1fA8G8dbcwdl4jqzM","tlshash":"ec5419cdb3d7b4679392a474507f014bb13a68a2b84cc8d4f185c8e52e74aaa4277f3d","first_seen":"2025-01-19T23:57:07.258737Z","last_seen":"2025-01-19T23:57:07.258737Z","times_seen":1,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":36,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.809Z","timestamp":1737330994809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sc-static.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 20 Nov 2024 00:00:00 GMT","end":"Sat, 20 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"F1:7E:BE:DE:70:59:C9:25:F5:A9:A0:FF:A5:D1:80:5A:79:B4:3E:74","sha256":"D1:44:0F:18:E4:9A:65:2F:DF:C4:55:C6:FA:A6:A3:ED:8C:4C:EC:B0:26:8F:37:B7:F5:57:A4:52:3B:04:3D:33"}}},"request":{"raw":"GET /scevent.min.js HTTP/1.1\r\nHost: sc-static.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript;charset=utf-8\r\ncontent-length: 23827\r\nserver: CloudFront\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncache-control: private, s-maxage=0, max-age=600\r\nset-cookie: X-AB=e4c8dfc3d7f84956afd570eb6e535017;max-age=86400;expires=Mon, 20 Jan 2025 23:56:34 GMT;Path=/scevent.min.js;Secure;SameSite=None\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: sJ0_nHbn760XNrOx_Z2GBWP36W90gRRRC3oHkeyrnuB7y83e96mjTw==\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23827,"size_decoded":56248,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (56221)","md5":"fa8ff721ae75280f1f8132cd26452a29","sha1":"ad9dc8e00594401e31cfbc14fa365a1e61743a43","sha256":"6afdd0cfed7520f1d9ff3dd8736b680df270dc0b3ccfd9aaf1a6c783ac693984","sha512":"4e8771884b5a3007a57d0df9cdcb7229a73e99295210699914bbbd87d01f61bee242b12a6867d1ae27ad18d01f58636fe72273cf8f1a3c8a92c9340a28a3b04a","ssdeep":"1536:l1ZMskjfDr/l5OPRojcuF31yCSWQUfK3vk1Cq:rZkx5OkWqCq","tlshash":"4b43e6dcb7dab02103a73476457f105be23bba646c4b8540c126e5c87dbc69ea237dac","first_seen":"2025-01-16T19:48:53.252744Z","last_seen":"2025-03-14T04:44:03.172878Z","times_seen":391,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":81,"dns":11,"connect":1,"send":0,"wait":57,"receive":2,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-11388547050","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.774Z","timestamp":1737330994774,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:36:18 GMT","end":"Mon, 03 Mar 2025 08:36:17 GMT"},"fingerprint":{"sha1":"BB:2E:7E:AD:26:E1:69:CA:59:9D:25:40:5F:20:4A:82:34:E8:D2:04","sha256":"5A:6F:35:5B:E3:09:08:2E:14:FC:4D:A7:BE:0C:A9:0A:CF:D1:DF:F0:C7:6B:B3:B6:D9:0A:7B:4E:DB:0F:92:F2"}}},"request":{"raw":"GET /gtag/js?id=AW-11388547050 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\nexpires: Sun, 19 Jan 2025 23:56:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 19 Jan 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"coop_reporting\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 104049\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":104049,"size_decoded":303175,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5268)","md5":"8606552721c4518736b5988aeb68e5ff","sha1":"7b1795b3b3dc278d3ca35028ffa2499be777d282","sha256":"10c9a168cb2f06c1631d0afc3d3da017a496cb3d9a1adcea12c1e2e5fe1be7c5","sha512":"74804f23f5f8c04943a10316a39fdd623a0bc9b6315778dab82f2a3033086161c95ea0b983c6dfee1af41abb6bd23394582b73a999921c50c81ddd9765a7e1cd","ssdeep":"3072:8tam4s8CIE/rlcPfUJW00Xy2igrJQomfnIK7yJGsOp0vdbcwdlNjty3rCIM:IOCIED2Pf21fz8G8dbcwdlNjtaM","tlshash":"e05419cdb3d7b4679392a474507f014bb13a68a2b44cc8d4f189c8e52e74aaa4277f3d","first_seen":"2025-01-19T23:57:07.261317Z","last_seen":"2025-01-19T23:57:07.261317Z","times_seen":1,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":36,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.refinance.quickenloans.com/msql/down-arrow.png","fqdn":"content.refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:35.147Z","timestamp":1737330995147,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"refinance.quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Dec 2024 23:31:14 GMT","end":"Tue, 18 Mar 2025 00:31:12 GMT"},"fingerprint":{"sha1":"D5:B9:5B:F3:73:A5:16:58:B2:9E:98:16:66:90:7F:C8:B6:19:B4:CC","sha256":"1C:E0:0B:77:90:A5:65:AB:B2:F0:6B:3D:B8:56:88:CC:BE:BE:8E:B9:DE:C3:5E:E1:C0:72:74:F0:9C:68:D7:5C"}}},"request":{"raw":"GET /msql/down-arrow.png HTTP/1.1\r\nHost: content.refinance.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nCookie: visitorId=6fe06897-c211-4c3f-a003-68355321c1a5; __cf_bm=z_Ecw8895AezetC.tRDhIO282Cn_tuThOBQE5pkWp34-1737330992-1.0.1.1-2b7xIuFXo5ebz5G3Ggz3IJSwTtmPN4Tfn7fA0aKRzTW8ReqwoIiWHuvpCf.RXA6rdiekgmcuhXEWsPyTP0YLHQ; _gcl_au=1.1.1441864768.1737330994; _ga_RXLL9Z7XBK=GS1.1.1737330994.1.1.1737330994.0.0.1434330028; _ga=GA1.1.1184530112.1737330994\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 333\r\nlast-modified: Mon, 09 Dec 2024 18:19:23 GMT\r\nx-amz-server-side-encryption: AES256\r\netag: \"b162a14dca2f70ac6f002b415f11d717\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c76d87fd83a704b78afc1028fc7bcea2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: _kJmbtgY5eoGQ-fruT_bfplR563OvmGdBGRtlE754iq1oq1eQawumg==\r\ncf-cache-status: HIT\r\nage: 4669\r\nexpires: Mon, 20 Jan 2025 03:56:34 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 904ac31e7857568e-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":333,"size_decoded":333,"mime_type":"image/png","magic":"PNG image data, 13 x 13, 8-bit/color RGBA, non-interlaced","md5":"b162a14dca2f70ac6f002b415f11d717","sha1":"b4018ff119ee12a5077773357aabdab17e6c269b","sha256":"29502f440e5e16b564bbd6922c08e44a959ef72aff8c4e41d9ecb57cb3bc2e06","sha512":"1da3041f3e97dc65b9800304ef218f37c10ec7b0fd7c15d03e764c8bd992e131a09662fc308af2f5a5b93feb48d65d5e041470527a42bdd03ecf99d004337944","ssdeep":"","tlshash":"a4e028df419094b1f15f6dbda5674014d077553e0d3060051a323c00d54e08481502f1","first_seen":"2024-06-17T00:05:18Z","last_seen":"2025-03-26T03:39:34.947261Z","times_seen":490,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.refinance.quickenloans.com/msql/home-icon.png","fqdn":"content.refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:35.150Z","timestamp":1737330995150,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"refinance.quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Dec 2024 23:31:14 GMT","end":"Tue, 18 Mar 2025 00:31:12 GMT"},"fingerprint":{"sha1":"D5:B9:5B:F3:73:A5:16:58:B2:9E:98:16:66:90:7F:C8:B6:19:B4:CC","sha256":"1C:E0:0B:77:90:A5:65:AB:B2:F0:6B:3D:B8:56:88:CC:BE:BE:8E:B9:DE:C3:5E:E1:C0:72:74:F0:9C:68:D7:5C"}}},"request":{"raw":"GET /msql/home-icon.png HTTP/1.1\r\nHost: content.refinance.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static-msql-prod.refinance.quickenloans.com/\r\nCookie: visitorId=6fe06897-c211-4c3f-a003-68355321c1a5; __cf_bm=z_Ecw8895AezetC.tRDhIO282Cn_tuThOBQE5pkWp34-1737330992-1.0.1.1-2b7xIuFXo5ebz5G3Ggz3IJSwTtmPN4Tfn7fA0aKRzTW8ReqwoIiWHuvpCf.RXA6rdiekgmcuhXEWsPyTP0YLHQ; _gcl_au=1.1.1441864768.1737330994; _ga_RXLL9Z7XBK=GS1.1.1737330994.1.1.1737330994.0.0.1434330028; _ga=GA1.1.1184530112.1737330994\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 499\r\nlast-modified: Thu, 14 Nov 2024 23:37:40 GMT\r\netag: \"0b1942df486abf0cbd77b876c966c942\"\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0e37105a96e87c22ff4981659a6dc176.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: FRA56-P6\r\nx-amz-cf-id: hfx5MlMFssKw-pDHMKFWaeik-qMlw83mWZnSYzJD4Z9_vPuGXpKLZw==\r\ncf-cache-status: HIT\r\nage: 4669\r\nexpires: Mon, 20 Jan 2025 03:56:34 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 904ac31e785a568e-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":499,"size_decoded":499,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"0b1942df486abf0cbd77b876c966c942","sha1":"61caa1365bd0ce1ab131bfa0c4ce189f952ad2e6","sha256":"64a6e8d00c22b320355dc737581468bfe44b606aecbfe2fc7d2d57ea4c1c2ad8","sha512":"d59e6659ddca47b11de641a760e7cd2fcece29569b719bb316bc97a1acdaf514f36f6cf3603f329a9480c3b28fdeeb2824f04a6fd7ba6d66aedf8f6ad06e7dc4","ssdeep":"","tlshash":"dcf0d4c9a33088ff441fd775939b13716f170aea8611922f5db22029a73d59445478d2","first_seen":"2024-06-17T00:05:18Z","last_seen":"2025-03-26T03:39:34.96069Z","times_seen":474,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-10866179376","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.787Z","timestamp":1737330994787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:36:18 GMT","end":"Mon, 03 Mar 2025 08:36:17 GMT"},"fingerprint":{"sha1":"BB:2E:7E:AD:26:E1:69:CA:59:9D:25:40:5F:20:4A:82:34:E8:D2:04","sha256":"5A:6F:35:5B:E3:09:08:2E:14:FC:4D:A7:BE:0C:A9:0A:CF:D1:DF:F0:C7:6B:B3:B6:D9:0A:7B:4E:DB:0F:92:F2"}}},"request":{"raw":"GET /gtag/js?id=AW-10866179376 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\nexpires: Sun, 19 Jan 2025 23:56:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 19 Jan 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"coop_reporting\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 97607\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":97607,"size_decoded":277008,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5268)","md5":"3aabddc776ddbe0beace0dd05139eabe","sha1":"d5b1a60362206e0f7a22572370561f9ff3663b5f","sha256":"810c249b8bf1a6a144c66f9eddfe29ce5470c547d385506814601749c2cafbb0","sha512":"98e656bec25f1e2c7e9d074f15a5e83427eb33e4ab836e5e5c2dd5a1c3122e9f04e731c419081cded1bd84fb464d7462a6936d23ee8ee15144d6b3c0d43951d8","ssdeep":"3072:1Cam4s8CIE/rNPfQJW009y2igrJQomfnIK7yJGsOp05LJcwdlojUy34CIM:UOCIEDNPf41fz8G6LJcwdlojUFM","tlshash":"f84419cdb3c6b4669393a474507f014bb13a68a2f84cc8d4f185d8e52e74aaa4277f3d","first_seen":"2025-01-19T23:57:07.265425Z","last_seen":"2025-01-19T23:57:07.265425Z","times_seen":1,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":36,"receive":306,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-857412364","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.801Z","timestamp":1737330994801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:36:18 GMT","end":"Mon, 03 Mar 2025 08:36:17 GMT"},"fingerprint":{"sha1":"BB:2E:7E:AD:26:E1:69:CA:59:9D:25:40:5F:20:4A:82:34:E8:D2:04","sha256":"5A:6F:35:5B:E3:09:08:2E:14:FC:4D:A7:BE:0C:A9:0A:CF:D1:DF:F0:C7:6B:B3:B6:D9:0A:7B:4E:DB:0F:92:F2"}}},"request":{"raw":"GET /gtag/js?id=AW-857412364 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\nexpires: Sun, 19 Jan 2025 23:56:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 19 Jan 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"coop_reporting\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 97621\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":97621,"size_decoded":277150,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5268)","md5":"19f235642d13dbbba33bd202e35c2bf7","sha1":"554e90b2eca32184205014123195cdf37e705c1e","sha256":"96eda16a9f9ccc8efb52fc649adddd5e3547dc8d414b63bd0b10b188ed204464","sha512":"8c0079c36430584245d3e0ed4031fdc1528c111e87dcf708613e86e1c400b61953f20e964b6d13c18fcef493c710f395e0bc34e71645a7d792868ca1f0559ef0","ssdeep":"3072:0zkam4s8CIE/rNPbaJW00Jy2igrJQomfnIZ7yJGsOp05LJcwdlojUy34CIM:VOCIEDNPbC1fA8G6LJcwdlojUFM","tlshash":"5c4418cdb3d6b4669293a474407f014bb13a6ca2f84cc8d4f185d8e52e74aaa4277f3d","first_seen":"2025-01-19T23:57:07.26717Z","last_seen":"2025-01-19T23:57:07.26717Z","times_seen":1,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":347,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-865435318","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.798Z","timestamp":1737330994798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:36:18 GMT","end":"Mon, 03 Mar 2025 08:36:17 GMT"},"fingerprint":{"sha1":"BB:2E:7E:AD:26:E1:69:CA:59:9D:25:40:5F:20:4A:82:34:E8:D2:04","sha256":"5A:6F:35:5B:E3:09:08:2E:14:FC:4D:A7:BE:0C:A9:0A:CF:D1:DF:F0:C7:6B:B3:B6:D9:0A:7B:4E:DB:0F:92:F2"}}},"request":{"raw":"GET /gtag/js?id=AW-865435318 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\nexpires: Sun, 19 Jan 2025 23:56:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 19 Jan 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"coop_reporting\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 103119\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103119,"size_decoded":299124,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5268)","md5":"18b143c258e45a3beda2bb5c4dec5a52","sha1":"373ac5c567571de3da97f8079b9c8629f84c11f8","sha256":"e539ebaf65667a176142b104e45b3c87efca00d75a54c6500b20c350cb51731c","sha512":"814ed7afefb3dae61c9e99f76ad57d2d4a07aaa86eb60669694aed8ee1377a930c3cc99533e4485dc41a76565c1f9ba98699f3fb21f4f472d9bc25634e78de68","ssdeep":"3072:EIam4s8CIE/rlcPf8JW00Ox2igrJQomfnIZ7yJGsOp0vdbcwdl4j/y3sCIM:TOCIED2Pf21fA8G8dbcwdl4j/zM","tlshash":"a95419cdb3d7b4679292a474507f014bb13a68a2b84cc8d4f185c8e52e74aaa4277f3d","first_seen":"2025-01-19T23:57:07.268999Z","last_seen":"2025-01-19T23:57:07.268999Z","times_seen":1,"resource_available":true,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":398,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:thin,extra-light,light,100,200,300,400,500,600,700,800","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:33.202Z","timestamp":1737330993202,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:37:20 GMT","end":"Mon, 03 Mar 2025 08:37:19 GMT"},"fingerprint":{"sha1":"40:E7:4C:FA:6D:23:B6:A9:19:0C:67:77:3A:43:22:D0:A4:CE:49:24","sha256":"06:52:12:65:60:CA:7F:5D:E6:72:0C:26:3B:A8:C5:A9:51:68:4D:2C:E4:2D:0C:4E:F7:63:D2:99:8C:AE:D8:06"}}},"request":{"raw":"GET /css?family=Montserrat:thin,extra-light,light,100,200,300,400,500,600,700,800 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static-msql-prod.refinance.quickenloans.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 19 Jan 2025 23:56:33 GMT\r\ndate: Sun, 19 Jan 2025 23:56:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":97198,"size_decoded":97198,"mime_type":"text/css; charset=utf-8","magic":"gzip compressed data, max compression","md5":"186c420e2580c49cff14cb5dab50af63","sha1":"2a356fab1221c3957f4bdd1ae044b99d9f8fd6f0","sha256":"95a70a14c8cc39d1c64b29c2ab7a8b37bd5bb9493585b0dcfe518a6121be8b40","sha512":"66738a76c88a7edb936215cca451512f2385bd62a645b37a948062d3d6fe0251997238c4fc5d78aed9c79bbcfd05459ca6b5a980fd82115ee0160b39ea0301fc","ssdeep":"1536:12yYAdmdtcOdwJE1b3++sn1MieBPIKRP1QSTtfQxYe9VKqU6rwZn41HQnsvcXyxV:12yadFdEQb3lsqBQCPfTFWfdU6MZ41Hb","tlshash":"a89302e8db20dd7b1e2232a404696db71ca9494fadc7df76ff216404ab018857bc11ed","first_seen":"2025-01-19T23:57:07.270473Z","last_seen":"2025-01-19T23:57:07.270473Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":3,"connect":24,"send":0,"wait":18,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.639Z","timestamp":1737330994639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:37:20 GMT","end":"Mon, 03 Mar 2025 08:37:19 GMT"},"fingerprint":{"sha1":"0A:7E:C7:68:03:0C:7D:D9:EA:D1:64:B5:09:F0:73:23:7E:07:0A:F2","sha256":"AC:04:9D:DD:39:52:BA:31:8E:A3:C7:1B:03:53:5D:B4:B0:43:D5:68:D9:70:93:D9:E7:C1:64:4E:8A:D3:72:2B"}}},"request":{"raw":"GET /s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37828\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jan 2025 14:04:54 GMT\r\nexpires: Fri, 16 Jan 2026 14:04:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 06 Nov 2024 17:30:37 GMT\r\ncontent-type: font/woff2\r\nage: 294701\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37828,"size_decoded":37828,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37828, version 1.0","md5":"50b140b1e97d859d6d0603414f4298ee","sha1":"500e4872ee1ba9cf89f1ba626d64987b0f9ab5c9","sha256":"fdc9964050bfa24c27a3c76c6791b3674292a5f352cbc83d7a4dc49595bc3fb1","sha512":"55ef84e956a7943e3fc61a8a349e64e9f35b7dfc63402ab52b995f43a7cd4b1d2acd300126dcdd610d0b106af426848f998ccf154f712034422d242d6ad9130d","ssdeep":"768:TLreREud92B1C5buEpioxWe6O1ESHFnLQkbknuF1dcjI5djeBX:Tu68248oxWe6O19H1zwnubdk","tlshash":"a103e0d50dd6198aa53b3f7f467f0a3e1b12c429a57180f44a135fd32e169a7e910f84","first_seen":"2024-11-07T01:11:00.992427Z","last_seen":"2026-04-04T03:46:46.006755Z","times_seen":32976,"resource_available":false,"data":null}},"time_used":1146,"timings":{"blocked":400,"dns":2,"connect":20,"send":0,"wait":339,"receive":2,"ssl":297},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-10910338944\u0026l=dataLayer\u0026cx=c\u0026gtm=45He51g0v9137104487za200","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.821Z","timestamp":1737330994821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:36:18 GMT","end":"Mon, 03 Mar 2025 08:36:17 GMT"},"fingerprint":{"sha1":"BB:2E:7E:AD:26:E1:69:CA:59:9D:25:40:5F:20:4A:82:34:E8:D2:04","sha256":"5A:6F:35:5B:E3:09:08:2E:14:FC:4D:A7:BE:0C:A9:0A:CF:D1:DF:F0:C7:6B:B3:B6:D9:0A:7B:4E:DB:0F:92:F2"}}},"request":{"raw":"GET /gtag/js?id=AW-10910338944\u0026l=dataLayer\u0026cx=c\u0026gtm=45He51g0v9137104487za200 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\nexpires: Sun, 19 Jan 2025 23:56:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 19 Jan 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"coop_reporting\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 104666\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":104666,"size_decoded":306132,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5268)","md5":"21c9c762dbb2f402816a74d74bee66c9","sha1":"b0353ec57421604cbe1ffc27fc54e088532cf594","sha256":"7b62d816f56733795ce7a49ac2b156b09b6a14c0fd1fc3772b4e9cc4701dfbf5","sha512":"589d4a551d88f2b86739d25ba9abbc3db6e312e1e9de388604345347184b1cc634457834e523c132cd46aff61bcb18907ac21423a8e523ccb9424e49a1154569","ssdeep":"3072:n1Iam4s8CIE/rlcPbXJW00jx2igrJQomfnIK7yJGsOp0vdbcwdl4jiy3r8IM:GOCIED2Pbc1fz8G8dbcwdl4ji2M","tlshash":"3a5419cdb3c7b4679392a474507f014bb57a68a2b44cc8d4f189c8e42e74aaa4277f3d","first_seen":"2025-01-19T23:57:07.273133Z","last_seen":"2025-01-19T23:57:07.273133Z","times_seen":1,"resource_available":true,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":523,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-10866176763","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.945Z","timestamp":1737330994945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:36:18 GMT","end":"Mon, 03 Mar 2025 08:36:17 GMT"},"fingerprint":{"sha1":"BB:2E:7E:AD:26:E1:69:CA:59:9D:25:40:5F:20:4A:82:34:E8:D2:04","sha256":"5A:6F:35:5B:E3:09:08:2E:14:FC:4D:A7:BE:0C:A9:0A:CF:D1:DF:F0:C7:6B:B3:B6:D9:0A:7B:4E:DB:0F:92:F2"}}},"request":{"raw":"GET /gtag/js?id=AW-10866176763 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\nexpires: Sun, 19 Jan 2025 23:56:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 19 Jan 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"coop_reporting\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 96428\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":96428,"size_decoded":272834,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5268)","md5":"27df0dc6bbc30c2681f90e842ef9f15b","sha1":"87f440457d9f14fcb8dc35fc8ed96a2e4d95c592","sha256":"99c97de463f6fc6e121d50abf1be09e8e241609251de97384f88b54b16d18279","sha512":"984708f76225fa74f3c3014ea1a27b1e504cfb2d3fce51073c633ae7e3aa476f608e892414ae5ad3d6b2e0b03b514572baa051a0b0e81869ce86ab9d6781d291","ssdeep":"3072:Gjam4s8CIE/rNPfwJW00Ay2igrJQomfnIK7yJGsOp05LJcwdlojUy3VCIM:oOCIEDNPfX1fz8G6LJcwdlojUKM","tlshash":"9c4419cdb3c6b4669393a474507f010bb13a6da2f84cd8c4e186d8e52e74aa94277f3d","first_seen":"2025-01-19T23:57:07.274704Z","last_seen":"2025-01-20T02:10:00.072328Z","times_seen":2,"resource_available":true,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":595,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-16663922781","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.949Z","timestamp":1737330994949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:36:18 GMT","end":"Mon, 03 Mar 2025 08:36:17 GMT"},"fingerprint":{"sha1":"BB:2E:7E:AD:26:E1:69:CA:59:9D:25:40:5F:20:4A:82:34:E8:D2:04","sha256":"5A:6F:35:5B:E3:09:08:2E:14:FC:4D:A7:BE:0C:A9:0A:CF:D1:DF:F0:C7:6B:B3:B6:D9:0A:7B:4E:DB:0F:92:F2"}}},"request":{"raw":"GET /gtag/js?id=AW-16663922781 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\nexpires: Sun, 19 Jan 2025 23:56:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 19 Jan 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"coop_reporting\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 103105\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103105,"size_decoded":299619,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5268)","md5":"a321e7b55e7b4cf8018bb5282caf7eb8","sha1":"efd698f3c3bb1aeb40c65810578efbea83f28a7c","sha256":"1624104c7290097ff8b1003617d305f08c4ec3f414704f3121099af2e9e98e3a","sha512":"459a942beefd22f9b146d447ee45f7a5194e8912d8cc89b1ce53606e13c47a8e2e586b0d46f85d9379e91968c1096680a749ee04131ef0891ca184d25542137e","ssdeep":"3072:ulam4s8CIE/rlcPfKJW004y2igrJQomfnIK7yJGsOp0vdbcwdlNjMy3sCIM:SOCIED2Pfh1fz8G8dbcwdlNjMzM","tlshash":"cb5419cdb3c7b4679392a474507f014bb17a68a2b84cc8d4f185c8e52e74aaa4277f3d","first_seen":"2025-01-19T23:57:07.276312Z","last_seen":"2025-01-19T23:57:07.276312Z","times_seen":1,"resource_available":true,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":580,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Shadows+Into+Light+Two\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:33.201Z","timestamp":1737330993201,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:37:20 GMT","end":"Mon, 03 Mar 2025 08:37:19 GMT"},"fingerprint":{"sha1":"40:E7:4C:FA:6D:23:B6:A9:19:0C:67:77:3A:43:22:D0:A4:CE:49:24","sha256":"06:52:12:65:60:CA:7F:5D:E6:72:0C:26:3B:A8:C5:A9:51:68:4D:2C:E4:2D:0C:4E:F7:63:D2:99:8C:AE:D8:06"}}},"request":{"raw":"GET /css2?family=Shadows+Into+Light+Two\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static-msql-prod.refinance.quickenloans.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 19 Jan 2025 23:56:33 GMT\r\ndate: Sun, 19 Jan 2025 23:56:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":96813,"size_decoded":96813,"mime_type":"text/css; charset=utf-8","magic":"gzip compressed data, max compression","md5":"9c5ffabe02a7edec8007a7c454ae0f15","sha1":"d84a2fc59f44b7602f3b672b865ac79e97865e19","sha256":"24af093d43249a32f48e0fa7e115a99499717c49c8fcb05685008de8b9805fd4","sha512":"7feb7f25a5c7ac5eb674dbc1a4e8f153de5ec0ab83d26ee71995f4a60d69e3d73ac4cd4f72fe849920a022753e949d37cc972c253b86f360d319c2f8a72a2e79","ssdeep":"1536:Kf/11E9RhnC29k7a0Ytpqf1ZHn4RTPfqO+kBAh41Z/mnDXKzA/79jKsmjpFR5Dbx:md1Ebp0Ytpqf1ZHn2TnqO5BAh4/unLI7","tlshash":"489312a70e4e303290aa40f6a6d5d7eecd9f33b64e860705fb4fa8b44714a127584b78","first_seen":"2025-01-19T23:57:07.277864Z","last_seen":"2025-01-19T23:57:07.277864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":3,"connect":18,"send":0,"wait":20,"receive":0,"ssl":196},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-11380533681","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.807Z","timestamp":1737330994807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:36:18 GMT","end":"Mon, 03 Mar 2025 08:36:17 GMT"},"fingerprint":{"sha1":"BB:2E:7E:AD:26:E1:69:CA:59:9D:25:40:5F:20:4A:82:34:E8:D2:04","sha256":"5A:6F:35:5B:E3:09:08:2E:14:FC:4D:A7:BE:0C:A9:0A:CF:D1:DF:F0:C7:6B:B3:B6:D9:0A:7B:4E:DB:0F:92:F2"}}},"request":{"raw":"GET /gtag/js?id=AW-11380533681 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\nexpires: Sun, 19 Jan 2025 23:56:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 19 Jan 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"coop_reporting\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 104172\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":104172,"size_decoded":303898,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5268)","md5":"50bfb494d6f60b0d994439a4f7c794ac","sha1":"e9c67e330abcc0a949e235bf636aaec220bdb274","sha256":"c81b263057ffa769601e26f776310625994bfd8e8a308778dda0c34f64a31198","sha512":"ddd18295f30e87029dc58ae968c2d41fecd59baeae932f78e2eb5e0829f2b6c222192bb7c417320ce974737409b568640316213597e3fc099b3f2de4d214f464","ssdeep":"3072:yPam4s8CIE/rlcPbOJW003y2igrJQomfnIK7yJGsOp0vdbcwdlNjWy3rCIM:8OCIED2Pbg1fz8G8dbcwdlNjWaM","tlshash":"875419cdb3c7b4679392a474507f014bb17a68a2b44cc8d4f189c8e52e74aaa4277f3d","first_seen":"2025-01-19T23:57:07.279671Z","last_seen":"2025-01-19T23:57:07.279671Z","times_seen":1,"resource_available":true,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":751,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.refinance.quickenloans.com/msql/ql-logo.svg","fqdn":"content.refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.616Z","timestamp":1737330994616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"refinance.quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Dec 2024 23:31:14 GMT","end":"Tue, 18 Mar 2025 00:31:12 GMT"},"fingerprint":{"sha1":"D5:B9:5B:F3:73:A5:16:58:B2:9E:98:16:66:90:7F:C8:B6:19:B4:CC","sha256":"1C:E0:0B:77:90:A5:65:AB:B2:F0:6B:3D:B8:56:88:CC:BE:BE:8E:B9:DE:C3:5E:E1:C0:72:74:F0:9C:68:D7:5C"}}},"request":{"raw":"GET /msql/ql-logo.svg HTTP/1.1\r\nHost: content.refinance.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static-msql-prod.refinance.quickenloans.com/\r\nCookie: visitorId=6fe06897-c211-4c3f-a003-68355321c1a5; __cf_bm=z_Ecw8895AezetC.tRDhIO282Cn_tuThOBQE5pkWp34-1737330992-1.0.1.1-2b7xIuFXo5ebz5G3Ggz3IJSwTtmPN4Tfn7fA0aKRzTW8ReqwoIiWHuvpCf.RXA6rdiekgmcuhXEWsPyTP0YLHQ; _gcl_au=1.1.1441864768.1737330994; _ga_RXLL9Z7XBK=GS1.1.1737330994.1.1.1737330994.0.0.1434330028; _ga=GA1.1.1184530112.1737330994\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 08 Aug 2024 07:51:01 GMT\r\netag: W/\"79fff40a65e4aef58a1ccfe7540ddb3a\"\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 269b0fad85dfd450220cf6573a2d384e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: DjkU6SAARk-6l5JsAJyTS3RBkQf_zoFLYRM2eq2TrHqlQooR5h882w==\r\ncf-cache-status: HIT\r\nage: 4669\r\nexpires: Mon, 20 Jan 2025 03:56:34 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 904ac31c5f5b568e-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40624,"size_decoded":40624,"mime_type":"image/svg+xml","magic":"gzip compressed data, from Unix","md5":"43bb086dfdb29afdce1743d7e7d60944","sha1":"e7bfe9d5cfba8e858c43a146e924717a61f76b29","sha256":"5151880a8ac4acae3d79a1c044a2a3c203ff7fb49f3f8446cf3a4963226ccce0","sha512":"b7fea8ca466be2dd3abeff3a78be8d296f9e9d6e6769961c7880b8d65258a7fd3abca10fa6e68faf50840e841ef7dd09409a448df4bbf4a8ca557c8387452d32","ssdeep":"768:bnQ+LreREud92B1C5buEpioxWe6O1ESHFnLQkbknuF1dcjI5djeBX:Fu68248oxWe6O19H1zwnubdk","tlshash":"1a03e1d50dc6198aa43b3f7f4abf0a3e1711c42da57180f946179fe32e52eaad510bc8","first_seen":"2024-12-25T11:57:57.084401Z","last_seen":"2025-01-19T23:57:07.281065Z","times_seen":14,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refinance.quickenloans.com/api/track","fqdn":"refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:35.276Z","timestamp":1737330995276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"refinance.quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jan 2025 23:31:57 GMT","end":"Sat, 19 Apr 2025 00:31:53 GMT"},"fingerprint":{"sha1":"CA:DC:00:08:E4:E8:98:30:E3:29:4F:78:62:53:16:CD:4B:C2:E9:A4","sha256":"53:BC:5E:71:5F:CF:07:58:BC:A4:31:9B:F5:92:34:34:69:D9:28:90:0F:B5:E5:A3:D1:1B:9E:BB:F2:F6:37:D7"}}},"request":{"raw":"POST /api/track HTTP/1.1\r\nHost: refinance.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 3825\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=\r\nCookie: AWSALBTG=q8EZJLxoknqubQuhef73aW2IrbA2jWklwxxt4bYclxBlO6P0758ONb3rMjqNhLKCnjW3G+4+7riJe6rIs9/Ff3SLvFzGRBW6sjOCUvOLv3hbJD0kAbV6nWPAd1RQ2Wa+Ol0CKfLfOkvYUasG7W+snuVvBZyqNfNOKZzNOPdEla4lUFC2QMM=; AWSALBTGCORS=q8EZJLxoknqubQuhef73aW2IrbA2jWklwxxt4bYclxBlO6P0758ONb3rMjqNhLKCnjW3G+4+7riJe6rIs9/Ff3SLvFzGRBW6sjOCUvOLv3hbJD0kAbV6nWPAd1RQ2Wa+Ol0CKfLfOkvYUasG7W+snuVvBZyqNfNOKZzNOPdEla4lUFC2QMM=; visitorId=6fe06897-c211-4c3f-a003-68355321c1a5; visitorId=6fe06897-c211-4c3f-a003-68355321c1a5; contentTarget=%7B%22moid%22%3A%22322646%22%2C%22sourceId%22%3A%22affl_everflow_ql-lre_165_921%22%7D; __cf_bm=z_Ecw8895AezetC.tRDhIO282Cn_tuThOBQE5pkWp34-1737330992-1.0.1.1-2b7xIuFXo5ebz5G3Ggz3IJSwTtmPN4Tfn7fA0aKRzTW8ReqwoIiWHuvpCf.RXA6rdiekgmcuhXEWsPyTP0YLHQ; _dd_s=rum=1\u0026id=5846c323-9573-490f-ad0c-619c3dbb651a\u0026created=1737330993959\u0026expire=1737331894325\u0026logs=1; _gcl_au=1.1.1441864768.1737330994; _ga_RXLL9Z7XBK=GS1.1.1737330994.1.1.1737330994.0.0.1434330028; _ga=GA1.1.1184530112.1737330994; click=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.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.rivaF-DuUAi0RncLViDAaH8714-wm-BLWKYPAroSNEfmRqK8sdhZd5uekhtdaDeBCxSKZUTlmYHlUhPEJeSY8MPNW2GZ5A8YepK8fveQV0O75EIUYJgKLdJQIdMOG3D8yH1B8oEfQN_wpeZpIvAn_CEokowavvnEOiBcwrITaqo2WOMet0wqtMBeCUiWZlMrfLawbQqqhtWBg-c3Iny-oUDVlqP3uIZSONq2qZKVjpV8clQprZh2mewd7wyFCbik1d0QM_hDolFBifKZkCen3K2xjkam7kY8-03Kyqp0S4uD-szc0uA2TaQhGJsEihzS4xSZRwBhSMGBFoSDBrZwL-I57ZoLIuP4pHS6ZpPlXi-wFYS64Ji5qcSpW9f6nD8g4JlUP2oVaAKz3GgtBi5e_IQASyfjlXp7v9MsXMkUtpaRCCo39V7PESAoW5spp4MKIVWkNuLTl3oEcY2ArC6nL4gWZS-CNBBMScLX8HNBDiJPmxQkd2aZaMVOkwFX7JKv0yKvK9K9vA_-OtSv7LvBe_J7lsp0XAVWiISxTnHO6Dorbh6OPUYlHl8hbnY1eG1AioK71nTXDgaKYf-5ZgvjyRkdipEGtgQmb8wf_b38bf6nL4c77bCht4Bx2_-c02vMeAel4PVF5is_TIC6No3Yfk5vOx0kI9bMS4-Woi2JArw8kCK2HmI0Ql4c7ieycVK9M-7vKb_fuRyX3UiDwLgPN-GS2nbw4DbUXSnbSRd2A9t2D0HLVcwxBKpB5nW9D5DUCaENT5AklQjV_QZQapyhwM04mJJmUi_2u5_rwuHm37S8v3fxc6imnszAb3P9LGM1I5IEdsBvqNvnAfpxk4bsLUUy9QFxGnMzpqp-35zwv3UDZ9JpNDx9jugbGppEfOPVI5crFzJsf2hiapDm57O4KiwTa9OLxRElkChrW63nX8dbs8FDH9zbsKqvtTAms6gB9sE1i8VJdM8pcKdvbev5Qc5AMJ0tUDSJcu4C1J-zxv78W2R9ZTrXhRumIDoJ1AARofT8c-Yszss7nXvnn4abejcC0iEgk28KwZewaNs5AV5z-Dec_SR_VOlj7GLa5kHFAIfoOr0LJDcKuc6mU4Atx37QLu4VAOmQt3gwhbfuliia3GUBMBV3uOr_2vYxCkvXATOB--j_-6hzjQTqu76lwKPkWQTZnjXwzxl2Pp3xvkKSVcVAFHNTId4HTJCAtmZhGEifqxRigENQ6-7NahOSwLB8jeVEASSmRiHEYdTLy36oenWqpVYxUB94iON4_bKJ2kMZ_0rr0qXFm3RW6yDahlIWhTxjjXnIoTJHcfP5Yqlmf7JVvxDUEqgLqkp3eJgCewYZbpDSZ7N52nZt6dEpIg; FPID=FPID2.2.2d8TxAeOLCcvz%2BCoq7PI632ayuH69bY%2B4DsVqHnOFbU%3D.1737330994; FPLC=r%2BFffad9kQXo8EhEqWp6RrHNRTamXqz%2FH4ru%2FKhMo3ajKq0VYxMw4l5YY00iKdsEx8cIP7wv6IWjQuxeVxwxNYtGpwSr8TwgTj4HvgypFvngsJK6OR12lUvKoYOc6A%3D%3D; FPAU=1.1.1441864768.1737330994; FPGSID=1.1737330994.1737330994.G-RXLL9Z7XBK.1Ng40wuWe9QZdWOBIHlHdg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:35 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nset-cookie: AWSALBTG=nrjw0ICbhbl1cTXgsFgU9Ucm1uK0NdYpf9i7I/Gv3pJaxNStXlF68T4ntfOWEcg5r3GEsQh/FVTAwXPi9srhTFspcHA2rE0zSxONc5K9l0OI1arefHy/Zld39YyM6+hUQYVpL5ohFrQq3JsIyBFVnte+ZchTnJrmqYe+GYfYekak5EtaO5I=; Expires=Sun, 26 Jan 2025 23:56:35 GMT; Path=/\nAWSALBTGCORS=nrjw0ICbhbl1cTXgsFgU9Ucm1uK0NdYpf9i7I/Gv3pJaxNStXlF68T4ntfOWEcg5r3GEsQh/FVTAwXPi9srhTFspcHA2rE0zSxONc5K9l0OI1arefHy/Zld39YyM6+hUQYVpL5ohFrQq3JsIyBFVnte+ZchTnJrmqYe+GYfYekak5EtaO5I=; Expires=Sun, 26 Jan 2025 23:56:35 GMT; Path=/; SameSite=None; Secure\r\nx-powered-by: Express\r\netag: W/\"2-nOO9QiTIwXgNtWtBJezz8kv3SLc\"\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 904ac3212a380b41-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-04T03:43:59.076011Z","times_seen":256654,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":108,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-848879802\u0026l=dataLayer\u0026cx=c\u0026gtm=45He51g0v9137104487za200","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:35.287Z","timestamp":1737330995287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:36:18 GMT","end":"Mon, 03 Mar 2025 08:36:17 GMT"},"fingerprint":{"sha1":"BB:2E:7E:AD:26:E1:69:CA:59:9D:25:40:5F:20:4A:82:34:E8:D2:04","sha256":"5A:6F:35:5B:E3:09:08:2E:14:FC:4D:A7:BE:0C:A9:0A:CF:D1:DF:F0:C7:6B:B3:B6:D9:0A:7B:4E:DB:0F:92:F2"}}},"request":{"raw":"GET /gtag/js?id=AW-848879802\u0026l=dataLayer\u0026cx=c\u0026gtm=45He51g0v9137104487za200 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Jan 2025 23:56:35 GMT\r\nexpires: Sun, 19 Jan 2025 23:56:35 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 19 Jan 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"coop_reporting\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 93766\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93766,"size_decoded":261853,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2146)","md5":"34ca0dd637684d2fe00422204441e454","sha1":"b6db84069d6e4d7930e0c27893e233caea72c5b4","sha256":"5afc4e8a7169bd445a6b0db11a088a82fbc2f8e89e66735cf46a91a4b294df59","sha512":"f96c89b2f1d2a873e73581c5762dc1728d4c9bebe9a31c75aeb63372f02670a36f339d8b1df70263813eaa908f8020799db2d649f2bfd6a85c5c8f4d59a2527d","ssdeep":"3072:LSam4s8CIE/rlPbcJW00xy2igrJQomfnIK7yJGsOp05LJcwdlojmy3i8IM:GOCIEDlPb41fz8G6LJcwdlojm3M","tlshash":"634408cdb396b4669392a874507f010bb13a7d92f80cd8c4e186d8d53e74aa98277f3d","first_seen":"2025-01-19T23:57:01.567641Z","last_seen":"2025-01-19T23:57:07.28281Z","times_seen":2,"resource_available":true,"data":null}},"time_used":462,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":351,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/492/MYRIADPRO-SEMIBOLD.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:37.252Z","timestamp":1737330997252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jan 2025 09:04:05 GMT","end":"Wed, 16 Apr 2025 10:02:19 GMT"},"fingerprint":{"sha1":"01:DE:DA:C9:4A:74:99:9A:D5:6A:41:C2:81:92:CC:04:7B:2A:DF:35","sha256":"47:93:DA:4C:14:3A:C0:7F:F0:6E:F2:67:34:4E:CB:42:02:E3:43:E8:32:0A:AC:0F:07:03:1B:E6:53:DF:0C:D9"}}},"request":{"raw":"GET /s/492/MYRIADPRO-SEMIBOLD.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:35 GMT\r\ncontent-type: font/woff\r\ncontent-length: 62448\r\nlast-modified: Sat, 05 Feb 2022 02:00:51 GMT\r\netag: \"f3f0-5d73bbca4b7cf\"\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nage: 197151\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=G5Ypxn51nl24frJPwo0v2QMIg4upavf4xpC2IQnCmvAaL7yToXZbm4xVc27Uhkvr%2FQWnFx1P01JbrbRwEMBKlYGcJMd7TllHY2ZEZjQokb1LK9HVACw4D3vF9E7xg0XKoDkNV9s%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 904ac32128ec56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5621\u0026min_rtt=1460\u0026rtt_var=2698\u0026sent=120\u0026recv=13\u0026lost=0\u0026retrans=0\u0026sent_bytes=131342\u0026recv_bytes=2112\u0026delivery_rate=2897187\u0026cwnd=96000\u0026unsent_bytes=0\u0026cid=113e4ad8d0118f1d\u0026ts=767\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62448,"size_decoded":62448,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 62448, version 0.0","md5":"6fd5c55d90e96c8af1041794ab70f5f2","sha1":"be1da7322f84fd756f8437d32500bee9b5877dd7","sha256":"8f6b883d93b2767c0d04efeeeb65ac92a170c1d966fefc635586d233e5f318cc","sha512":"1895a3d60a07f6710b49246c92f5a4e335c6f2283852c441a024847bcb7284dc3b08d62c249e99e4298010ed7212870588927b59a327b0a0f1139631fff06f8d","ssdeep":"1536:Nrf70FE9eQ1b3sxXOSA0zH2OAamZgtJH4gvEYu+M+C:ND4FbSb8xXw0zHBAamOXvED","tlshash":"4f531205a1d4d7bec5034550ec21cebaa79eb41ebd1bcc84f206a917c73d69b990f4d2","first_seen":"2023-06-30T14:58:25Z","last_seen":"2026-03-16T17:31:33.018686Z","times_seen":615,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.639Z","timestamp":1737330994639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:37:20 GMT","end":"Mon, 03 Mar 2025 08:37:19 GMT"},"fingerprint":{"sha1":"0A:7E:C7:68:03:0C:7D:D9:EA:D1:64:B5:09:F0:73:23:7E:07:0A:F2","sha256":"AC:04:9D:DD:39:52:BA:31:8E:A3:C7:1B:03:53:5D:B4:B0:43:D5:68:D9:70:93:D9:E7:C1:64:4E:8A:D3:72:2B"}}},"request":{"raw":"GET /s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37828\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jan 2025 14:04:54 GMT\r\nexpires: Fri, 16 Jan 2026 14:04:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 06 Nov 2024 17:30:37 GMT\r\ncontent-type: font/woff2\r\nage: 294701\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37828,"size_decoded":37828,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37828, version 1.0","md5":"50b140b1e97d859d6d0603414f4298ee","sha1":"500e4872ee1ba9cf89f1ba626d64987b0f9ab5c9","sha256":"fdc9964050bfa24c27a3c76c6791b3674292a5f352cbc83d7a4dc49595bc3fb1","sha512":"55ef84e956a7943e3fc61a8a349e64e9f35b7dfc63402ab52b995f43a7cd4b1d2acd300126dcdd610d0b106af426848f998ccf154f712034422d242d6ad9130d","ssdeep":"768:TLreREud92B1C5buEpioxWe6O1ESHFnLQkbknuF1dcjI5djeBX:Tu68248oxWe6O19H1zwnubdk","tlshash":"a103e0d50dd6198aa53b3f7f467f0a3e1b12c429a57180f44a135fd32e169a7e910f84","first_seen":"2024-11-07T01:11:00.992427Z","last_seen":"2026-04-04T03:46:46.006755Z","times_seen":32976,"resource_available":false,"data":null}},"time_used":1146,"timings":{"blocked":400,"dns":2,"connect":20,"send":0,"wait":339,"receive":2,"ssl":297},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mortgage.quickenloans.com/lending-images/presentations/common/navapi/deviceAtlasLmb.min.js","fqdn":"cdn.mortgage.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.9.75","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.778Z","timestamp":1737330994778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mortgage.quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jan 2025 23:44:29 GMT","end":"Sun, 06 Apr 2025 00:44:28 GMT"},"fingerprint":{"sha1":"29:0B:AB:CB:E3:EF:AB:EB:C6:21:49:C3:C9:45:CF:9C:23:82:B1:2A","sha256":"71:FE:F5:FA:C6:B7:7A:7F:27:44:29:3A:9B:C0:8C:7A:D7:10:F1:32:5D:AF:52:DD:E1:E7:FA:A8:6C:7B:0B:F9"}}},"request":{"raw":"GET /lending-images/presentations/common/navapi/deviceAtlasLmb.min.js HTTP/1.1\r\nHost: cdn.mortgage.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nCookie: visitorId=6fe06897-c211-4c3f-a003-68355321c1a5; _gcl_au=1.1.1441864768.1737330994; _ga_RXLL9Z7XBK=GS1.1.1737330994.1.1.1737330994.0.0.1434330028; _ga=GA1.1.1184530112.1737330994\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ndate: Sun, 19 Jan 2025 23:56:35 GMT\r\ncontent-type: text/html\r\np3p: CP=\"NON DSP COR LAW CONi TELi OUR SAM IND CNT\"\r\nstrict-transport-security: max-age=2592000\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=2Uxl1uL35fwSZv4SEQ30arR0XqDx3xdu3NJThPbccvQ-1737330995-1.0.1.1-bvQPmtALyQugppt5BnzR2LdVm2oMzLD1pXN8DIv_DZVzfHrs7wr.P3ROFIueEQNbHzh.OIWLRTFljTAur4NyJA; path=/; expires=Mon, 20-Jan-25 00:26:35 GMT; domain=.mortgage.quickenloans.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 904ac31e6868712e-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":691,"size_decoded":691,"mime_type":"text/html","magic":"data","md5":"3d2440aad31ed05905a3eacfeaad5745","sha1":"ef9e17f7f3281bb4aa690afc8fa1870917fb2891","sha256":"eb06f3641616d0588097da48c68bab766e5f902a9af8b1c1246e65998e4438f8","sha512":"af8dab22f10c7f863b5ad6f680f3e277ddc60c757fe37505b50b5e18bb7d869946d6c467587763eb73075399138df69522bb408c3e41ac4611a7965e5cad4538","ssdeep":"","tlshash":"32014ebb2a893e10ccd76a7c9bcaa450f0f1d13935c888d10224cf97308aa9dca098d1","first_seen":"2025-01-19T23:57:07.284951Z","last_seen":"2025-01-19T23:57:07.284951Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1215,"timings":{"blocked":171,"dns":21,"connect":1,"send":0,"wait":876,"receive":0,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dl=https%3A%2F%2Frefinance.quickenloans.com%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=1267444055.1737330994\u0026dt=Refinance%20Mortgage%2C%20Refinancing%20Rates%2C%20Mortgage%20Rates\u0026auid=1441864768.1737330994\u0026navt=n\u0026npa=1\u0026gtm=45He51g0v9137104487za200\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102067555~102067808~102081485~102123607\u0026tft=1737330994273\u0026tfd=3279\u0026apve=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:35.224Z","timestamp":1737330995224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:38:06 GMT","end":"Mon, 03 Mar 2025 08:38:05 GMT"},"fingerprint":{"sha1":"A5:29:C3:F0:7E:27:39:CE:B4:61:E4:24:E5:AE:02:B7:5E:AB:5C:27","sha256":"3A:22:1A:3D:AE:2C:FC:FC:6A:DE:08:FE:B5:AC:32:D6:05:F6:F3:E5:F8:5A:E5:CD:9A:04:36:ED:DC:B8:F1:ED"}}},"request":{"raw":"POST /ccm/collect?en=page_view\u0026dl=https%3A%2F%2Frefinance.quickenloans.com%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=1267444055.1737330994\u0026dt=Refinance%20Mortgage%2C%20Refinancing%20Rates%2C%20Mortgage%20Rates\u0026auid=1441864768.1737330994\u0026navt=n\u0026npa=1\u0026gtm=45He51g0v9137104487za200\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102067555~102067808~102081485~102123607\u0026tft=1737330994273\u0026tfd=3279\u0026apve=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:35 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://refinance.quickenloans.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":937,"timings":{"blocked":746,"dns":5,"connect":32,"send":0,"wait":33,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pix.revjet.com/track/pd3876?__noscript=false\u0026__cbf=revjet.callbacks.cb1737330995398\u0026location=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_921%26pkey1%3D921%26pkey2%3D2%26pkey3%3D6aeda80d793c4e668875c6eeb310defb%26pkey%3Dbbfd82cef7884374bc46935904839e80%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D921%26_ef_transaction_id%3D6aeda80d793c4e668875c6eeb310defb%26utm_medium%3Daffiliate%26utm_source%3DJMG%2BMedia%26utm_content%3D\u0026referrer=\u0026creditProfile=\u0026firstMortgageBalance=\u0026firstMortgageInterestRate=\u0026hasFHALoan=\u0026homeValue=\u0026loanToValue=\u0026propertyCity=\u0026propertyDescription=\u0026propertyState=\u0026propertyZipCode=\u0026rateType=FIXED\u0026typeOfLoan=\u0026loanRefiPurpose=","fqdn":"pix.revjet.com","domain":"revjet.com","tld":"com"},"ip":{"addr":"37.27.142.241","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:35.413Z","timestamp":1737330995413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.revjet.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 27 Mar 2024 15:07:52 GMT","end":"Mon, 28 Apr 2025 15:07:51 GMT"},"fingerprint":{"sha1":"0E:71:7D:61:21:D7:17:24:58:A8:F0:08:54:78:24:CC:DA:BE:84:FB","sha256":"20:5E:CE:20:FA:06:A5:76:53:4F:98:D0:06:27:72:0E:52:9B:4D:6C:A7:7F:C5:11:47:02:D8:93:B3:F1:95:C8"}}},"request":{"raw":"GET /track/pd3876?__noscript=false\u0026__cbf=revjet.callbacks.cb1737330995398\u0026location=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_921%26pkey1%3D921%26pkey2%3D2%26pkey3%3D6aeda80d793c4e668875c6eeb310defb%26pkey%3Dbbfd82cef7884374bc46935904839e80%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D921%26_ef_transaction_id%3D6aeda80d793c4e668875c6eeb310defb%26utm_medium%3Daffiliate%26utm_source%3DJMG%2BMedia%26utm_content%3D\u0026referrer=\u0026creditProfile=\u0026firstMortgageBalance=\u0026firstMortgageInterestRate=\u0026hasFHALoan=\u0026homeValue=\u0026loanToValue=\u0026propertyCity=\u0026propertyDescription=\u0026propertyState=\u0026propertyZipCode=\u0026rateType=FIXED\u0026typeOfLoan=\u0026loanRefiPurpose= HTTP/1.1\r\nHost: pix.revjet.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:36 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 46\r\nset-cookie: trx=5950917588681700136; Max-Age=31536000; Expires=Mon, 19 Jan 2026 23:56:36 GMT; Path=/; Domain=revjet.com; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46,"size_decoded":46,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"33dd4b1f10d8e8252d4fae1477b4b790","sha1":"740e78a6a65e53921fa58a9f6c9a571384a42a6b","sha256":"af188a674d79ce9edf4738340e1bf36cd5491d78b857cf2125f7cb4f3ae2dc9a","sha512":"9b7006faef0801c7d9f8d13a5ed262227bd96e9f18c2413a3d9a2c6efa821a718b3477c0a14b4df3ff37bd0f8b77e4ffdd9218de8d15ce76bd28ae4b58b727dd","ssdeep":"","tlshash":"bf9004404c1154f17530d7114437471d311c4715d7340171d51c4f745d1447147c0730","first_seen":"2025-01-19T23:57:07.286638Z","last_seen":"2025-01-19T23:57:07.286638Z","times_seen":1,"resource_available":true,"data":null}},"time_used":593,"timings":{"blocked":228,"dns":177,"connect":38,"send":0,"wait":30,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pix.revjet.com/track/pd2259?__noscript=false\u0026__cbf=revjet.callbacks.cb1737330995396\u0026location=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_921%26pkey1%3D921%26pkey2%3D2%26pkey3%3D6aeda80d793c4e668875c6eeb310defb%26pkey%3Dbbfd82cef7884374bc46935904839e80%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D921%26_ef_transaction_id%3D6aeda80d793c4e668875c6eeb310defb%26utm_medium%3Daffiliate%26utm_source%3DJMG%2BMedia%26utm_content%3D\u0026referrer=\u0026creditProfile=\u0026firstMortgageBalance=\u0026firstMortgageInterestRate=\u0026hasFHALoan=\u0026homeValue=\u0026loanToValue=\u0026propertyCity=\u0026propertyDescription=\u0026propertyState=\u0026propertyZipCode=\u0026rateType=FIXED\u0026typeOfLoan=\u0026loanRefiPurpose=","fqdn":"pix.revjet.com","domain":"revjet.com","tld":"com"},"ip":{"addr":"37.27.142.241","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:35.411Z","timestamp":1737330995411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.revjet.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 27 Mar 2024 15:07:52 GMT","end":"Mon, 28 Apr 2025 15:07:51 GMT"},"fingerprint":{"sha1":"0E:71:7D:61:21:D7:17:24:58:A8:F0:08:54:78:24:CC:DA:BE:84:FB","sha256":"20:5E:CE:20:FA:06:A5:76:53:4F:98:D0:06:27:72:0E:52:9B:4D:6C:A7:7F:C5:11:47:02:D8:93:B3:F1:95:C8"}}},"request":{"raw":"GET /track/pd2259?__noscript=false\u0026__cbf=revjet.callbacks.cb1737330995396\u0026location=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_921%26pkey1%3D921%26pkey2%3D2%26pkey3%3D6aeda80d793c4e668875c6eeb310defb%26pkey%3Dbbfd82cef7884374bc46935904839e80%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D921%26_ef_transaction_id%3D6aeda80d793c4e668875c6eeb310defb%26utm_medium%3Daffiliate%26utm_source%3DJMG%2BMedia%26utm_content%3D\u0026referrer=\u0026creditProfile=\u0026firstMortgageBalance=\u0026firstMortgageInterestRate=\u0026hasFHALoan=\u0026homeValue=\u0026loanToValue=\u0026propertyCity=\u0026propertyDescription=\u0026propertyState=\u0026propertyZipCode=\u0026rateType=FIXED\u0026typeOfLoan=\u0026loanRefiPurpose= HTTP/1.1\r\nHost: pix.revjet.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:36 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 46\r\nset-cookie: trx=4842416353837003561; Max-Age=31536000; Expires=Mon, 19 Jan 2026 23:56:36 GMT; Path=/; Domain=revjet.com; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46,"size_decoded":46,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"eb4fdb17ca9227deaa4632bbe613e405","sha1":"2c5250420c67225e5ee288cb30d5448247f0c14f","sha256":"72cf7a38429157ff399bb21909501d493072de8557fd9999749c367db683bf07","sha512":"628d12686c2d00074bd7f9d15b25f6a259341ab2cfd725b870cbb3110777496b18002d6369598d29851d1dd06750c06dc9b88737c37e7b7a1e1bd3b6a95fc921","ssdeep":"","tlshash":"ba900440447154f17530d7115437471d311c431cd7340571551c4ff45d0447157d0710","first_seen":"2025-01-19T23:57:07.288078Z","last_seen":"2025-01-19T23:57:07.288078Z","times_seen":1,"resource_available":true,"data":null}},"time_used":596,"timings":{"blocked":229,"dns":178,"connect":38,"send":0,"wait":29,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.pinimg.com/ct/lib/main.7d8116bd.js","fqdn":"s.pinimg.com","domain":"pinimg.com","tld":"com"},"ip":{"addr":"96.6.16.234","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:36.221Z","timestamp":1737330996221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pinterest.com","organization":"Pinterest, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 02 Aug 2024 00:00:00 GMT","end":"Thu, 07 Aug 2025 23:59:59 GMT"},"fingerprint":{"sha1":"34:B7:F7:0E:F0:07:7D:4D:C0:6D:8A:B2:05:18:67:8E:25:DF:7B:39","sha256":"3A:FC:05:E0:AF:A1:F2:71:08:61:05:8C:4D:33:6A:B9:14:A3:9F:C1:E6:C3:A2:0D:CF:5C:11:F4:22:F3:D9:9A"}}},"request":{"raw":"GET /ct/lib/main.7d8116bd.js HTTP/1.1\r\nHost: s.pinimg.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"b7968e6e7735284fd26091b6f049515c\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=1209600\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\ncontent-length: 23467\r\nalt-svc: h3=\":443\"; ma=600\r\nquic-version: 0x00000001\r\nvary: Accept-Encoding, Origin\r\nakamai-x-true-ttl: 1209600\r\nx-cdn: akamai\r\naccess-control-max-age: 86400\r\naccess-control-expose-headers: X-CDN\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23467,"size_decoded":82915,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"43ca2ef81268626d2307cc19da6571f7","sha1":"6fb22644688507414dfdba0ac8e562da6efded3b","sha256":"fb322d9e801b20f445402380d99d144e674abdc4821c6b5d30936c0ecfe381ab","sha512":"ea6e93fa44546e3b843b5e4fa70a6e792c8e9bd4e96fbb84da2437356347713a9e1d044736b81b5a1f2fb4c20751ccebf9c1cf0f81a4a13694e71ff09c486a3c","ssdeep":"1536:jXSoCrN0AWYiVpTJU3rz5ZwcLNxsLzc0NR3:jXSoCr6AgFSz5ZPDQFN9","tlshash":"d4831a49f5d5b06503a364a1422f510bf33aaa18a84e50b4b61dd8f13cb89dfa17bf7c","first_seen":"2024-12-12T18:59:21.5695Z","last_seen":"2025-08-28T05:03:27.637911Z","times_seen":1929,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rum-http-intake.logs.datadoghq.com/v1/input/puba7383c50c7f3ca7bdbf0c5cfa256a231?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Amsql-lre-webapp%2Cversion%3A1.1.0%20undefined\u0026batch_time=1737330995000","fqdn":"rum-http-intake.logs.datadoghq.com","domain":"datadoghq.com","tld":"com"},"ip":{"addr":"3.233.158.30","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:35.281Z","timestamp":1737330995281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.logs.datadoghq.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sat, 14 Dec 2024 00:00:00 GMT","end":"Wed, 17 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"2C:EC:E2:99:9F:AB:D2:83:2C:57:3F:0A:AE:AB:85:75:D7:C5:EA:16","sha256":"13:1E:42:05:5B:C8:E2:EA:6C:79:CF:D3:77:0E:F2:56:76:00:C7:76:E9:10:A9:B0:48:43:58:F1:4B:73:26:00"}}},"request":{"raw":"POST /v1/input/puba7383c50c7f3ca7bdbf0c5cfa256a231?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Amsql-lre-webapp%2Cversion%3A1.1.0%20undefined\u0026batch_time=1737330995000 HTTP/1.1\r\nHost: rum-http-intake.logs.datadoghq.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 16019\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 2\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sun, 19 Jan 2025 23:56:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T03:45:20.024681Z","times_seen":552769,"resource_available":true,"data":null}},"time_used":500,"timings":{"blocked":98,"dns":4,"connect":101,"send":2,"wait":152,"receive":0,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rum-http-intake.logs.datadoghq.com/v1/input/puba7383c50c7f3ca7bdbf0c5cfa256a231?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Amsql-lre-webapp%2Cversion%3A1.1.0%20undefined\u0026batch_time=1737330994691","fqdn":"rum-http-intake.logs.datadoghq.com","domain":"datadoghq.com","tld":"com"},"ip":{"addr":"3.233.158.30","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.784Z","timestamp":1737330994784,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.logs.datadoghq.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sat, 14 Dec 2024 00:00:00 GMT","end":"Wed, 17 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"2C:EC:E2:99:9F:AB:D2:83:2C:57:3F:0A:AE:AB:85:75:D7:C5:EA:16","sha256":"13:1E:42:05:5B:C8:E2:EA:6C:79:CF:D3:77:0E:F2:56:76:00:C7:76:E9:10:A9:B0:48:43:58:F1:4B:73:26:00"}}},"request":{"raw":"POST /v1/input/puba7383c50c7f3ca7bdbf0c5cfa256a231?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Amsql-lre-webapp%2Cversion%3A1.1.0%20undefined\u0026batch_time=1737330994691 HTTP/1.1\r\nHost: rum-http-intake.logs.datadoghq.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 16328\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 2\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sun, 19 Jan 2025 23:56:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T03:45:20.024681Z","times_seen":552769,"resource_available":true,"data":null}},"time_used":2632,"timings":{"blocked":1197,"dns":19,"connect":141,"send":0,"wait":238,"receive":0,"ssl":1019},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser-intake-datadoghq.com/api/v2/logs?ddsource=browser\u0026ddtags=sdk_version%3A5.35.0%2Capi%3Axhr%2Cenv%3Aprod%2Cservice%3Aql\u0026dd-api-key=pub4d5c615be9e91858ed9e115fd855570c\u0026dd-evp-origin-version=5.35.0\u0026dd-evp-origin=browser\u0026dd-request-id=ef631015-a4ce-4395-910e-921d190bf7e8","fqdn":"browser-intake-datadoghq.com","domain":"browser-intake-datadoghq.com","tld":"com"},"ip":{"addr":"3.233.158.24","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:35.272Z","timestamp":1737330995272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.browser-intake-datadoghq.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 May 2024 00:00:00 GMT","end":"Sat, 17 May 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A5:35:6C:08:38:11:47:18:E3:47:D1:C3:02:96:A1:9D:F0:42:EA:64","sha256":"1B:D2:D3:0F:2B:00:C6:27:17:90:75:AD:9C:20:6D:E7:17:16:2A:74:61:A7:43:79:41:2A:3C:6B:CF:1E:C0:ED"}}},"request":{"raw":"POST /api/v2/logs?ddsource=browser\u0026ddtags=sdk_version%3A5.35.0%2Capi%3Axhr%2Cenv%3Aprod%2Cservice%3Aql\u0026dd-api-key=pub4d5c615be9e91858ed9e115fd855570c\u0026dd-evp-origin-version=5.35.0\u0026dd-evp-origin=browser\u0026dd-request-id=ef631015-a4ce-4395-910e-921d190bf7e8 HTTP/1.1\r\nHost: browser-intake-datadoghq.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 5886\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 202 Accepted\r\ncontent-type: application/json\r\ncontent-length: 53\r\ndd-request-id: ef631015-a4ce-4395-910e-921d190bf7e8\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sun, 19 Jan 2025 23:56:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":null,"data":{"size":53,"size_decoded":53,"mime_type":"application/json","magic":"JSON text data","md5":"2f88c1a967cc6c71737d24cac94f0b72","sha1":"23e20c3e4b2a9281211ea180c890f21200759d08","sha256":"beefffab4821580d0b2148f1967c32ad5b3eb689894606d3cba79820e2daddfe","sha512":"7f34b8761c62c484edbc1fd3564eac2b8f5d70fc25d69318358066fee3e3972ff04159d6e3dce5fee006876f9a963d89be98235582a9ce5ee3eaa9749a2b0cbe","ssdeep":"","tlshash":"b1900266e22414ae82dd54532620118c809c7958959562b652165586c00f2548b40184","first_seen":"2025-01-19T23:57:07.291697Z","last_seen":"2025-01-19T23:57:07.291697Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1205,"timings":{"blocked":778,"dns":21,"connect":96,"send":3,"wait":170,"receive":0,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser-intake-datadoghq.com/api/v2/logs?ddsource=browser\u0026ddtags=sdk_version%3A5.35.0%2Capi%3Axhr%2Cenv%3Aprod%2Cservice%3Aql\u0026dd-api-key=pub4d5c615be9e91858ed9e115fd855570c\u0026dd-evp-origin-version=5.35.0\u0026dd-evp-origin=browser\u0026dd-request-id=a0b4dfc1-8157-460d-83ee-6ca599bedffd","fqdn":"browser-intake-datadoghq.com","domain":"browser-intake-datadoghq.com","tld":"com"},"ip":{"addr":"3.233.158.24","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.952Z","timestamp":1737330994952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.browser-intake-datadoghq.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 May 2024 00:00:00 GMT","end":"Sat, 17 May 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A5:35:6C:08:38:11:47:18:E3:47:D1:C3:02:96:A1:9D:F0:42:EA:64","sha256":"1B:D2:D3:0F:2B:00:C6:27:17:90:75:AD:9C:20:6D:E7:17:16:2A:74:61:A7:43:79:41:2A:3C:6B:CF:1E:C0:ED"}}},"request":{"raw":"POST /api/v2/logs?ddsource=browser\u0026ddtags=sdk_version%3A5.35.0%2Capi%3Axhr%2Cenv%3Aprod%2Cservice%3Aql\u0026dd-api-key=pub4d5c615be9e91858ed9e115fd855570c\u0026dd-evp-origin-version=5.35.0\u0026dd-evp-origin=browser\u0026dd-request-id=a0b4dfc1-8157-460d-83ee-6ca599bedffd HTTP/1.1\r\nHost: browser-intake-datadoghq.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12930\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 202 Accepted\r\ncontent-type: application/json\r\ncontent-length: 53\r\ndd-request-id: a0b4dfc1-8157-460d-83ee-6ca599bedffd\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sun, 19 Jan 2025 23:56:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":null,"data":{"size":53,"size_decoded":53,"mime_type":"application/json","magic":"JSON text data","md5":"834d27e7372b06fbf487c38e5e35c94c","sha1":"28272ef2b2742c4d438bec03a1248560775dc9c6","sha256":"cf3d474a6cbc7a498cb05c85dcb76b25ecf491c4ead7b8888407ae6b04b9a242","sha512":"a870df2cee16c7f2dd4c7b1ca6d8b0af46f470fa2849ad25058b75c521886f85f0aecf0afcccea16f60ce30660da53086521a0b38e7f9e42e7842cb935a5f5fe","ssdeep":"","tlshash":"5f9002c1926104c6959114059bd551017510a52c904a50ba58405c4525248925709132","first_seen":"2025-01-19T23:57:07.293307Z","last_seen":"2025-01-19T23:57:07.293307Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2430,"timings":{"blocked":1028,"dns":12,"connect":108,"send":0,"wait":253,"receive":0,"ssl":933},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rum-http-intake.logs.datadoghq.com/v1/input/puba7383c50c7f3ca7bdbf0c5cfa256a231?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Amsql-lre-webapp%2Cversion%3A1.1.0%20undefined\u0026batch_time=1737330995605","fqdn":"rum-http-intake.logs.datadoghq.com","domain":"datadoghq.com","tld":"com"},"ip":{"addr":"3.233.158.30","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:35.610Z","timestamp":1737330995610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.logs.datadoghq.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sat, 14 Dec 2024 00:00:00 GMT","end":"Wed, 17 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"2C:EC:E2:99:9F:AB:D2:83:2C:57:3F:0A:AE:AB:85:75:D7:C5:EA:16","sha256":"13:1E:42:05:5B:C8:E2:EA:6C:79:CF:D3:77:0E:F2:56:76:00:C7:76:E9:10:A9:B0:48:43:58:F1:4B:73:26:00"}}},"request":{"raw":"POST /v1/input/puba7383c50c7f3ca7bdbf0c5cfa256a231?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Amsql-lre-webapp%2Cversion%3A1.1.0%20undefined\u0026batch_time=1737330995605 HTTP/1.1\r\nHost: rum-http-intake.logs.datadoghq.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 16319\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 2\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sun, 19 Jan 2025 23:56:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T03:45:20.024681Z","times_seen":552769,"resource_available":true,"data":null}},"time_used":660,"timings":{"blocked":31,"dns":177,"connect":105,"send":1,"wait":199,"receive":0,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser-intake-datadoghq.com/api/v2/logs?ddsource=browser\u0026ddtags=sdk_version%3A5.35.0%2Capi%3Axhr%2Cenv%3Aprod%2Cservice%3Aql\u0026dd-api-key=pub4d5c615be9e91858ed9e115fd855570c\u0026dd-evp-origin-version=5.35.0\u0026dd-evp-origin=browser\u0026dd-request-id=0b59c92b-a351-497d-9257-e72cab04420a","fqdn":"browser-intake-datadoghq.com","domain":"browser-intake-datadoghq.com","tld":"com"},"ip":{"addr":"3.233.158.24","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:35.273Z","timestamp":1737330995273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.browser-intake-datadoghq.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 14 May 2024 00:00:00 GMT","end":"Sat, 17 May 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A5:35:6C:08:38:11:47:18:E3:47:D1:C3:02:96:A1:9D:F0:42:EA:64","sha256":"1B:D2:D3:0F:2B:00:C6:27:17:90:75:AD:9C:20:6D:E7:17:16:2A:74:61:A7:43:79:41:2A:3C:6B:CF:1E:C0:ED"}}},"request":{"raw":"POST /api/v2/logs?ddsource=browser\u0026ddtags=sdk_version%3A5.35.0%2Capi%3Axhr%2Cenv%3Aprod%2Cservice%3Aql\u0026dd-api-key=pub4d5c615be9e91858ed9e115fd855570c\u0026dd-evp-origin-version=5.35.0\u0026dd-evp-origin=browser\u0026dd-request-id=0b59c92b-a351-497d-9257-e72cab04420a HTTP/1.1\r\nHost: browser-intake-datadoghq.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 39314\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 202 Accepted\r\ncontent-type: application/json\r\ncontent-length: 53\r\ndd-request-id: 0b59c92b-a351-497d-9257-e72cab04420a\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sun, 19 Jan 2025 23:56:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":null,"data":{"size":53,"size_decoded":53,"mime_type":"application/json","magic":"JSON text data","md5":"68acd53a2e741d7eb11191e8a7df336e","sha1":"4891d76888536c0d304d6a63e2289cd3d2345fad","sha256":"b12fafb0e3c242e7f35805e91ab145b3b67aa1ec870675e44890c84b9befdd40","sha512":"5c5739357a4bd6606533ff85b769da17dd33594d438676a6ebd215937300cb6843da2d3dbf97081f0a3b1c32e73cd7fac6bec4a927529d95a48e46343b220525","ssdeep":"","tlshash":"089002d18670d6cb82e0a8460e10973005455092d00c645916240154c4896518306151","first_seen":"2025-01-19T23:57:07.294922Z","last_seen":"2025-01-19T23:57:07.294922Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1294,"timings":{"blocked":784,"dns":20,"connect":101,"send":114,"wait":136,"receive":0,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rum-http-intake.logs.datadoghq.com/v1/input/puba7383c50c7f3ca7bdbf0c5cfa256a231?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Amsql-lre-webapp%2Cversion%3A1.1.0%20undefined\u0026batch_time=1737330996104","fqdn":"rum-http-intake.logs.datadoghq.com","domain":"datadoghq.com","tld":"com"},"ip":{"addr":"3.233.158.30","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:36.153Z","timestamp":1737330996153,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.logs.datadoghq.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sat, 14 Dec 2024 00:00:00 GMT","end":"Wed, 17 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"2C:EC:E2:99:9F:AB:D2:83:2C:57:3F:0A:AE:AB:85:75:D7:C5:EA:16","sha256":"13:1E:42:05:5B:C8:E2:EA:6C:79:CF:D3:77:0E:F2:56:76:00:C7:76:E9:10:A9:B0:48:43:58:F1:4B:73:26:00"}}},"request":{"raw":"POST /v1/input/puba7383c50c7f3ca7bdbf0c5cfa256a231?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Amsql-lre-webapp%2Cversion%3A1.1.0%20undefined\u0026batch_time=1737330996104 HTTP/1.1\r\nHost: rum-http-intake.logs.datadoghq.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 16249\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 2\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sun, 19 Jan 2025 23:56:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T03:45:20.024681Z","times_seen":552769,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":22,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rum-http-intake.logs.datadoghq.com/v1/input/puba7383c50c7f3ca7bdbf0c5cfa256a231?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Amsql-lre-webapp%2Cversion%3A1.1.0%20undefined\u0026batch_time=1737330994967","fqdn":"rum-http-intake.logs.datadoghq.com","domain":"datadoghq.com","tld":"com"},"ip":{"addr":"3.233.158.30","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:35.280Z","timestamp":1737330995280,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.logs.datadoghq.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sat, 14 Dec 2024 00:00:00 GMT","end":"Wed, 17 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"2C:EC:E2:99:9F:AB:D2:83:2C:57:3F:0A:AE:AB:85:75:D7:C5:EA:16","sha256":"13:1E:42:05:5B:C8:E2:EA:6C:79:CF:D3:77:0E:F2:56:76:00:C7:76:E9:10:A9:B0:48:43:58:F1:4B:73:26:00"}}},"request":{"raw":"POST /v1/input/puba7383c50c7f3ca7bdbf0c5cfa256a231?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Amsql-lre-webapp%2Cversion%3A1.1.0%20undefined\u0026batch_time=1737330994967 HTTP/1.1\r\nHost: rum-http-intake.logs.datadoghq.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 16326\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 2\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sun, 19 Jan 2025 23:56:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T03:45:20.024681Z","times_seen":552769,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":99,"dns":4,"connect":101,"send":2,"wait":249,"receive":0,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.anura.io/showads.js?562128340951","fqdn":"ads.anura.io","domain":"anura.io","tld":"io"},"ip":{"addr":"54.240.174.26","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:36.484Z","timestamp":1737330996484,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads.anura.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 29 Apr 2024 00:00:00 GMT","end":"Tue, 27 May 2025 23:59:59 GMT"},"fingerprint":{"sha1":"1D:30:09:B1:D0:2A:A6:E2:1D:B8:C7:0A:60:EB:65:48:AF:05:5E:19","sha256":"D4:72:AB:49:28:B2:E9:D4:D7:6A:35:E3:EF:31:AF:A2:4F:77:EB:A9:42:E0:4C:83:B1:E7:9B:F4:31:43:B5:18"}}},"request":{"raw":"GET /showads.js?562128340951 HTTP/1.1\r\nHost: ads.anura.io\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 19 Jan 2025 12:17:24 GMT\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 8ZsAaq4FA4QdxvQvYhvgVnoye_J-UrxrmrUyXn1M_f1fX8VYmppe6Q==\r\nage: 41952\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":491,"size_decoded":491,"mime_type":"application/javascript; charset=utf-8","magic":"gzip compressed data, max speed, from Unix","md5":"ea100b35ba28721e40329da5f6ab20a8","sha1":"c3d2e845cbbb54d842ab138125ba5ced68c17289","sha256":"e86b8615091108a66de091095a73ebad49eaeb4fe82d660d7a3d047ae1567eb1","sha512":"6fe638988fbd21b80026f68b9f72d4f4488a73dc9a98a86c3f5ec1093f287976987dac08b7c3df33e61d12ab85d99d00438bdd953026499d4fde13d0b52cc8b8","ssdeep":"","tlshash":"50f054041c644ee3dddc24300fe9e6923445638be8c099d23172d1604827eb8cb0a4ef","first_seen":"2025-01-19T22:58:52.825852Z","last_seen":"2025-01-20T03:05:00.602244Z","times_seen":6,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":1,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/s/collect?dma=1\u0026dma_cps=syphamo\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026gtm=45j91e51f1h1v9169491831z89137104487z99200500233za200zb9137104487\u0026tag_exp=102067555~102067808~102081485~102123608\u0026_gsid=RXLL9Z7XBK1Ng40wuWe9QZdWOBIHlHdg","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:36.535Z","timestamp":1737330996535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:36:18 GMT","end":"Mon, 03 Mar 2025 08:36:17 GMT"},"fingerprint":{"sha1":"BB:2E:7E:AD:26:E1:69:CA:59:9D:25:40:5F:20:4A:82:34:E8:D2:04","sha256":"5A:6F:35:5B:E3:09:08:2E:14:FC:4D:A7:BE:0C:A9:0A:CF:D1:DF:F0:C7:6B:B3:B6:D9:0A:7B:4E:DB:0F:92:F2"}}},"request":{"raw":"GET /g/s/collect?dma=1\u0026dma_cps=syphamo\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026gtm=45j91e51f1h1v9169491831z89137104487z99200500233za200zb9137104487\u0026tag_exp=102067555~102067808~102081485~102123608\u0026_gsid=RXLL9Z7XBK1Ng40wuWe9QZdWOBIHlHdg HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: *\r\ndate: Sun, 19 Jan 2025 23:56:36 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:194:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"coop_reporting\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:194:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":67,"dns":0,"connect":13,"send":0,"wait":19,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/bat.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:36.534Z","timestamp":1737330996534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 08","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 15 Dec 2024 07:52:28 GMT","end":"Fri, 13 Jun 2025 07:52:28 GMT"},"fingerprint":{"sha1":"13:F1:2D:07:A9:A1:FF:DA:2B:45:DE:92:97:EF:5E:88:78:3B:C2:28","sha256":"1D:D4:DA:12:87:B3:B3:DD:94:E7:20:50:03:94:1C:53:65:85:28:F4:2E:BC:19:3A:63:42:84:83:AF:F3:90:9B"}}},"request":{"raw":"GET /bat.js HTTP/1.1\r\nHost: bat.bing.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private,max-age=1800\r\ncontent-length: 14570\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 16 Oct 2024 22:47:44 GMT\r\naccept-ranges: bytes\r\netag: \"028e0691d20db1:0\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 834C75EBF98E4A149A73EB5A6527203E Ref B: OSL30EDGE0318 Ref C: 2025-01-19T23:56:36Z\r\ndate: Sun, 19 Jan 2025 23:56:36 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14570,"size_decoded":51385,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51384), with no line terminators","md5":"6626c1362840ebfc8f48294e8f023e18","sha1":"4ec0dfb37c3e536c1b5ec04b68c9846fdbaf9eef","sha256":"aabc88a6db8b22022f96ca88e4f0a7be426abef2b35169a71515a2d55246402a","sha512":"b037a19b52c1047198ec7f19e99066054e454964380e2354239834260d11248e617d6759b944ddf39a25b883c8f430603d8e13097396e2deda9bb6905c1cd42a","ssdeep":"768:IaOFhhRC5JFhLjfRysgLzQynDw5YyDMFW8KQ:IaOFnR2DRszQKaoWtQ","tlshash":"6333e8833390492b4aed82dc74691a03a336570e20fe709d7b8ce9f1555de0b527bb7a","first_seen":"2024-10-17T00:49:50.937136Z","last_seen":"2025-11-05T10:31:39.465059Z","times_seen":16264,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":60,"dns":139,"connect":4,"send":0,"wait":40,"receive":1,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/bat.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:36.534Z","timestamp":1737330996534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 08","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 15 Dec 2024 07:52:28 GMT","end":"Fri, 13 Jun 2025 07:52:28 GMT"},"fingerprint":{"sha1":"13:F1:2D:07:A9:A1:FF:DA:2B:45:DE:92:97:EF:5E:88:78:3B:C2:28","sha256":"1D:D4:DA:12:87:B3:B3:DD:94:E7:20:50:03:94:1C:53:65:85:28:F4:2E:BC:19:3A:63:42:84:83:AF:F3:90:9B"}}},"request":{"raw":"GET /bat.js HTTP/1.1\r\nHost: bat.bing.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private,max-age=1800\r\ncontent-length: 14570\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 16 Oct 2024 22:47:44 GMT\r\naccept-ranges: bytes\r\netag: \"028e0691d20db1:0\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: F89D73F060F6421287E2CA206911224B Ref B: OSL30EDGE0318 Ref C: 2025-01-19T23:56:36Z\r\ndate: Sun, 19 Jan 2025 23:56:36 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14570,"size_decoded":51385,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51384), with no line terminators","md5":"6626c1362840ebfc8f48294e8f023e18","sha1":"4ec0dfb37c3e536c1b5ec04b68c9846fdbaf9eef","sha256":"aabc88a6db8b22022f96ca88e4f0a7be426abef2b35169a71515a2d55246402a","sha512":"b037a19b52c1047198ec7f19e99066054e454964380e2354239834260d11248e617d6759b944ddf39a25b883c8f430603d8e13097396e2deda9bb6905c1cd42a","ssdeep":"768:IaOFhhRC5JFhLjfRysgLzQynDw5YyDMFW8KQ:IaOFnR2DRszQKaoWtQ","tlshash":"6333e8833390492b4aed82dc74691a03a336570e20fe709d7b8ce9f1555de0b527bb7a","first_seen":"2024-10-17T00:49:50.937136Z","last_seen":"2025-11-05T10:31:39.465059Z","times_seen":16264,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":60,"dns":139,"connect":4,"send":0,"wait":40,"receive":1,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/css/myriad-pro","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:35.277Z","timestamp":1737330995277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jan 2025 09:04:05 GMT","end":"Wed, 16 Apr 2025 10:02:19 GMT"},"fingerprint":{"sha1":"01:DE:DA:C9:4A:74:99:9A:D5:6A:41:C2:81:92:CC:04:7B:2A:DF:35","sha256":"47:93:DA:4C:14:3A:C0:7F:F0:6E:F2:67:34:4E:CB:42:02:E3:43:E8:32:0A:AC:0F:07:03:1B:E6:53:DF:0C:D9"}}},"request":{"raw":"GET /css/myriad-pro HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:35 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nage: 2842977\r\nlast-modified: Wed, 18 Dec 2024 02:13:38 GMT\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2htmiiK8DAtUMYasuGxIPfr6QjLqKO1PR5rvJ3CYaCHzuZaHIjGfJFTzd9%2Bs0JoBMwteoUt9vsXCudgPYboR0S57AW%2B7np3Mx4nDqK4kA9wXOSU%2BGYqzGzlJSD3lVrhnqe%2BXvrA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 904ac3212d7c1c12-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3827\u0026min_rtt=1605\u0026rtt_var=2189\u0026sent=29\u0026recv=32\u0026lost=0\u0026retrans=0\u0026sent_bytes=4981\u0026recv_bytes=2445\u0026delivery_rate=366836\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=e81a07e24a82ecda\u0026ts=2133\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":711,"size_decoded":2010,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"456f6035740cdac581a5640ea97c2eee","sha1":"59cef588939d194784fa1187126158afe0f99978","sha256":"bc7add124ed5afd83411f9840a537e63d01469b9722af42f0afebb6b748a8a74","sha512":"4f84f9241576b5033574cbe2b225098c0193a45a06b13c6523ca1ce55eb37f6b2a90788e5d088923e51cbdeb3c7369835ea9a7052dbf0a046fe78e01cf4ace75","ssdeep":"","tlshash":"af41e062a09fa65426300c8e774f35188e0e212f354ac9643ffd3d48cfe3e2a12907ac","first_seen":"2024-10-28T00:35:55.702787Z","last_seen":"2026-03-31T12:15:26.722412Z","times_seen":268,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":106,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"action.dstillery.com/orbserv/nsjs?adv=cl170983716918148\u0026ns=8486\u0026nc=Visited\u0026ncv=66\u0026dstOrderId=","fqdn":"action.dstillery.com","domain":"dstillery.com","tld":"com"},"ip":{"addr":"104.18.41.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.793Z","timestamp":1737330994793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dstillery.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 May 2024 00:00:00 GMT","end":"Tue, 06 May 2025 23:59:59 GMT"},"fingerprint":{"sha1":"73:A8:A2:38:11:2A:05:9D:09:4F:7C:AE:24:E2:B2:A0:81:FA:03:BA","sha256":"D3:E4:99:9D:AB:21:30:12:45:C4:A5:80:14:15:E2:2C:6F:3E:C8:F5:5F:46:76:AA:8A:DF:E7:70:6D:03:29:0F"}}},"request":{"raw":"GET /orbserv/nsjs?adv=cl170983716918148\u0026ns=8486\u0026nc=Visited\u0026ncv=66\u0026dstOrderId= HTTP/1.1\r\nHost: action.dstillery.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 19 Jan 2025 23:56:35 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://action.media6degrees.com/orbserv/nsjs?adv=cl170983716918148\u0026ns=8486\u0026nc=Visited\u0026ncv=66\u0026dstOrderId=\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 904ac31e6972b50b-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":777,"size_decoded":777,"mime_type":"","magic":"data","md5":"f8ab53be958d9fcbbc849e514733c6ee","sha1":"31d18653278d01c3667c92bb984a830168fee7c2","sha256":"3282bcf8c30d30150c2544f3d0f106fb353cb3f2d244190629db8ca9abf42eb2","sha512":"97f472e3d43a9efd67400284e43706793c6ab2a2fd7205a1ff53feb031e8cf37d5a5adfc19e4d37ca6d43de64ad4c03375868f5569ada74cc64d5d3452a67096","ssdeep":"","tlshash":"360175ad225a341ecf0735427c85b0c0642124b2f849ee0c7de692d0458946d05457ba","first_seen":"2025-01-19T23:57:07.299185Z","last_seen":"2025-01-19T23:57:07.299185Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1176,"timings":{"blocked":150,"dns":12,"connect":1,"send":0,"wait":873,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flask.nextdoor.com/pixel?pid=374734e7-79a9-4d15-aa90-344cee5a236b\u0026vrs=8.4\u0026ev=PAGE_VIEW\u0026pl=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_921%26pkey1%3D921%26pkey2%3D2%26pkey3%3D6aeda80d793c4e668875c6eeb310defb%26pkey%3Dbbfd82cef7884374bc46935904839e80%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D921%26_ef_transaction_id%3D6aeda80d793c4e668875c6eeb310defb%26utm_medium%3Daffiliate%26utm_source%3DJMG%2BMedia%26utm_content%3D\u0026ndclid=\u0026ndclid_src=0\u0026rf=\u0026sem=\u0026tm=Manual\u0026iid=827e5599-6508-43b8-a1ae-32d388df87e3\u0026pageid=83328327-c8da-41c7-a7bf-0e81812f1728\u0026sessionid=f1857d99-c610-479b-a795-07f053d8b39e\u0026cd=%7B%7D","fqdn":"flask.nextdoor.com","domain":"nextdoor.com","tld":"com"},"ip":{"addr":"44.239.153.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:36.488Z","timestamp":1737330996488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"nextdoor.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 14 Oct 2024 00:00:00 GMT","end":"Wed, 12 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"37:C2:68:C5:6B:A2:D7:E0:9F:00:91:9E:4F:D2:7E:BA:7B:55:84:B6","sha256":"06:9B:4C:74:2B:3B:B2:A1:5C:25:62:D1:6C:F9:57:29:2A:FF:3A:BB:1E:DB:37:9A:BA:6A:AD:D8:46:B2:27:85"}}},"request":{"raw":"GET /pixel?pid=374734e7-79a9-4d15-aa90-344cee5a236b\u0026vrs=8.4\u0026ev=PAGE_VIEW\u0026pl=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_921%26pkey1%3D921%26pkey2%3D2%26pkey3%3D6aeda80d793c4e668875c6eeb310defb%26pkey%3Dbbfd82cef7884374bc46935904839e80%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D921%26_ef_transaction_id%3D6aeda80d793c4e668875c6eeb310defb%26utm_medium%3Daffiliate%26utm_source%3DJMG%2BMedia%26utm_content%3D\u0026ndclid=\u0026ndclid_src=0\u0026rf=\u0026sem=\u0026tm=Manual\u0026iid=827e5599-6508-43b8-a1ae-32d388df87e3\u0026pageid=83328327-c8da-41c7-a7bf-0e81812f1728\u0026sessionid=f1857d99-c610-479b-a795-07f053d8b39e\u0026cd=%7B%7D HTTP/1.1\r\nHost: flask.nextdoor.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 19 Jan 2025 23:56:36 GMT\r\nserver: istio-envoy\r\ncontext-id: 6090a493-4c8b-4a52-b833-8838c1e5cd24\r\nx-envoy-upstream-service-time: 10\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/s/collect?dma=1\u0026dma_cps=syphamo\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026gtm=45j91e51f1h1v9169491831z89137104487z99200500233za200zb9137104487\u0026tag_exp=102067555~102067808~102081485~102123608\u0026_gsid=RXLL9Z7XBKInb7FW97vF33z6eiqN3UQQ","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:36.537Z","timestamp":1737330996537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:36:18 GMT","end":"Mon, 03 Mar 2025 08:36:17 GMT"},"fingerprint":{"sha1":"BB:2E:7E:AD:26:E1:69:CA:59:9D:25:40:5F:20:4A:82:34:E8:D2:04","sha256":"5A:6F:35:5B:E3:09:08:2E:14:FC:4D:A7:BE:0C:A9:0A:CF:D1:DF:F0:C7:6B:B3:B6:D9:0A:7B:4E:DB:0F:92:F2"}}},"request":{"raw":"GET /g/s/collect?dma=1\u0026dma_cps=syphamo\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026gtm=45j91e51f1h1v9169491831z89137104487z99200500233za200zb9137104487\u0026tag_exp=102067555~102067808~102081485~102123608\u0026_gsid=RXLL9Z7XBKInb7FW97vF33z6eiqN3UQQ HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: *\r\ndate: Sun, 19 Jan 2025 23:56:36 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:194:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"coop_reporting\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:194:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":1,"connect":25,"send":0,"wait":54,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ct.pinterest.com/user/?tid=2620075802369\u0026pd=%7B%22em%22%3A%22%22%7D\u0026cb=1737330996247\u0026dep=2%2CPAGE_LOAD","fqdn":"ct.pinterest.com","domain":"pinterest.com","tld":"com"},"ip":{"addr":"96.6.16.234","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:36.614Z","timestamp":1737330996614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pinterest.com","organization":"Pinterest, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 02 Aug 2024 00:00:00 GMT","end":"Thu, 07 Aug 2025 23:59:59 GMT"},"fingerprint":{"sha1":"34:B7:F7:0E:F0:07:7D:4D:C0:6D:8A:B2:05:18:67:8E:25:DF:7B:39","sha256":"3A:FC:05:E0:AF:A1:F2:71:08:61:05:8C:4D:33:6A:B9:14:A3:9F:C1:E6:C3:A2:0D:CF:5C:11:F4:22:F3:D9:9A"}}},"request":{"raw":"GET /user/?tid=2620075802369\u0026pd=%7B%22em%22%3A%22%22%7D\u0026cb=1737330996247\u0026dep=2%2CPAGE_LOAD HTTP/1.1\r\nHost: ct.pinterest.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-expose-headers: Epik,Pin-Unauth\r\npin-unauth: dWlkPVlUSXlPRE0zTUdNdFlXTmpOUzAwWmpSakxXSmpaakF0T0RjeU9UQTNNVFJrTURSbA\r\ncache-control: no-cache,no-store,must-revalidate,max-age=0\r\npragma: no-cache\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\naccess-control-allow-origin: https://refinance.quickenloans.com\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\ncontent-length: 189\r\nx-envoy-upstream-service-time: 0\r\npinterest-version: 223b9bd73eadec77a81b00fddece2f2cf67f39fb\r\nreferrer-policy: origin\r\nx-pinterest-rid: 3419119601504128\r\nx-pinterest-rid-128bit: 3dd3a75e80ab3a5b2f7327298c3a8c3e\r\ndate: Sun, 19 Jan 2025 23:56:36 GMT\r\nalt-svc: h3=\":443\"; ma=604800\r\nvary: Accept-Encoding\r\nquic-version: 0x00000001\r\nakamai-grn: 0.844f2417.1737330996.261d462e\r\nx-cdn: akamai\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains ; preload\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189,"size_decoded":326,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bbe6e8b84370e97860544a1b335827e8","sha1":"de981cbeb775c200e547e23d3ae68641ef281082","sha256":"87b710b0c2afa27f89285d4ebbb0ade7b39ec97fc16b4f5d9810fa70ffc2d5cc","sha512":"1aeb4dc60c43322dd28b182953989d9067c9694db7e4c7652e704ff53db2aa3e6a68e3a46dcfd72e5f5c57f3084d0fe011e66083c161285eb9ac5102f4ed9d9d","ssdeep":"","tlshash":"05e012592010b5f98047d438e54069d38b18dd3a3c487879ed5c084e60ef5f20c7de7b","first_seen":"2025-01-09T23:04:34.871584Z","last_seen":"2026-04-04T03:46:21.945092Z","times_seen":8117,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ct.pinterest.com/v3/?tid=2620075802369\u0026pd=%7B%22em%22%3A%22%22%7D\u0026event=init\u0026ad=%7B%22loc%22%3A%22https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_921%26pkey1%3D921%26pkey2%3D2%26pkey3%3D6aeda80d793c4e668875c6eeb310defb%26pkey%3Dbbfd82cef7884374bc46935904839e80%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D921%26_ef_transaction_id%3D6aeda80d793c4e668875c6eeb310defb%26utm_medium%3Daffiliate%26utm_source%3DJMG%2BMedia%26utm_content%3D%22%2C%22ref%22%3A%22%22%2C%22if%22%3Atrue%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%227d8116bd%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D\u0026cb=1737330996249","fqdn":"ct.pinterest.com","domain":"pinterest.com","tld":"com"},"ip":{"addr":"96.6.16.234","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:36.615Z","timestamp":1737330996615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pinterest.com","organization":"Pinterest, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 02 Aug 2024 00:00:00 GMT","end":"Thu, 07 Aug 2025 23:59:59 GMT"},"fingerprint":{"sha1":"34:B7:F7:0E:F0:07:7D:4D:C0:6D:8A:B2:05:18:67:8E:25:DF:7B:39","sha256":"3A:FC:05:E0:AF:A1:F2:71:08:61:05:8C:4D:33:6A:B9:14:A3:9F:C1:E6:C3:A2:0D:CF:5C:11:F4:22:F3:D9:9A"}}},"request":{"raw":"GET /v3/?tid=2620075802369\u0026pd=%7B%22em%22%3A%22%22%7D\u0026event=init\u0026ad=%7B%22loc%22%3A%22https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_921%26pkey1%3D921%26pkey2%3D2%26pkey3%3D6aeda80d793c4e668875c6eeb310defb%26pkey%3Dbbfd82cef7884374bc46935904839e80%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D921%26_ef_transaction_id%3D6aeda80d793c4e668875c6eeb310defb%26utm_medium%3Daffiliate%26utm_source%3DJMG%2BMedia%26utm_content%3D%22%2C%22ref%22%3A%22%22%2C%22if%22%3Atrue%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%227d8116bd%22%2C%22is_eu%22%3Atrue%2C%22ecm_enabled%22%3Afalse%7D\u0026cb=1737330996249 HTTP/1.1\r\nHost: ct.pinterest.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://refinance.quickenloans.com/\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache,no-store,must-revalidate,max-age=0\r\npragma: no-cache\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\ncontent-type: image/gif\r\ncontent-length: 35\r\naccess-control-allow-origin: https://refinance.quickenloans.com\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 2\r\npinterest-version: 223b9bd73eadec77a81b00fddece2f2cf67f39fb\r\nreferrer-policy: origin\r\nx-pinterest-rid: 1545342498078271\r\nx-pinterest-rid-128bit: d80a059c35ad1030d6759824eeb3a03f\r\ndate: Sun, 19 Jan 2025 23:56:36 GMT\r\nalt-svc: h3=\":443\"; ma=604800\r\nset-cookie: ar_debug=1; Expires=Mon, 19 Jan 2026 23:56:36 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None\r\nquic-version: 0x00000001\r\nakamai-grn: 0.844f2417.1737330996.261d462f\r\nx-cdn: akamai\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains ; preload\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35,"size_decoded":35,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"9b8d19f4310c758344e40bf17fbc7e85","sha1":"2290ef058812d5f5e398736e2316cba8cf8093cf","sha256":"37b17c5135a176a9474521af147d96dfa1fb4ca0f43f00d1400bd1885be3ab9b","sha512":"793f00c21fe332ed3cc1c1b17b4ebb115379d6468c6cc3668d6e99da0ff73c52e8e023fda8786193f8b256c7ad6e1415378969602c72ba3206da6fd46470cea7","ssdeep":"","tlshash":"5c800003c280c003c2a2e0300e28c380aba0f0208208030fb0ce2baeec3a0e20c00000","first_seen":"2023-04-05T10:21:28Z","last_seen":"2026-04-04T03:00:13.115633Z","times_seen":101984,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sgtm.quickenloans.com/g/collect?v=2\u0026tid=G-RXLL9Z7XBK\u0026gtm=45je51g0v9169491831za200zb9137104487\u0026_p=1737330993857\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102067555~102067808~102081485~102123608\u0026cid=1184530112.1737330994\u0026ecid=1434330028\u0026ul=en-us\u0026sr=1280x1024\u0026_fplc=0\u0026ur=NO-03\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEA\u0026sst.etld=google.no\u0026sst.gcsub=region1\u0026sst.tft=1737330993857\u0026sst.sp=1\u0026sst.em_event=1\u0026sst.lpc=201324589\u0026sst.navt=n\u0026sst.ude=0\u0026_s=3\u0026sid=1737330994\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_921%26pkey1%3D921%26pkey2%3D2%26pkey3%3D6aeda80d793c4e668875c6eeb310defb%26pkey%3Dbbfd82cef7884374bc46935904839e80%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D921%26_ef_transaction_id%3D6aeda80d793c4e668875c6eeb310defb%26utm_medium%3Daffiliate%26utm_source%3DJMG%2BMedia%26utm_content%3D\u0026dt=Refinance%20Mortgage%2C%20Refinancing%20Rates%2C%20Mortgage%20Rates\u0026en=scroll\u0026epn.percent_scrolled=90\u0026tfd=3838\u0026richsstsse","fqdn":"sgtm.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"216.239.32.21","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:35.268Z","timestamp":1737330995268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgtm.quickenloans.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jan 2025 03:01:04 GMT","end":"Thu, 17 Apr 2025 03:49:35 GMT"},"fingerprint":{"sha1":"A4:3B:BA:71:91:37:C1:92:66:7D:A6:C2:34:01:17:02:2F:53:B4:3B","sha256":"BC:07:C1:D6:65:9B:A0:69:0A:80:66:02:82:20:8C:BD:AA:8F:4D:C4:2A:10:43:23:06:24:B3:1B:D4:04:86:1E"}}},"request":{"raw":"GET /g/collect?v=2\u0026tid=G-RXLL9Z7XBK\u0026gtm=45je51g0v9169491831za200zb9137104487\u0026_p=1737330993857\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102067555~102067808~102081485~102123608\u0026cid=1184530112.1737330994\u0026ecid=1434330028\u0026ul=en-us\u0026sr=1280x1024\u0026_fplc=0\u0026ur=NO-03\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEA\u0026sst.etld=google.no\u0026sst.gcsub=region1\u0026sst.tft=1737330993857\u0026sst.sp=1\u0026sst.em_event=1\u0026sst.lpc=201324589\u0026sst.navt=n\u0026sst.ude=0\u0026_s=3\u0026sid=1737330994\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_921%26pkey1%3D921%26pkey2%3D2%26pkey3%3D6aeda80d793c4e668875c6eeb310defb%26pkey%3Dbbfd82cef7884374bc46935904839e80%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D921%26_ef_transaction_id%3D6aeda80d793c4e668875c6eeb310defb%26utm_medium%3Daffiliate%26utm_source%3DJMG%2BMedia%26utm_content%3D\u0026dt=Refinance%20Mortgage%2C%20Refinancing%20Rates%2C%20Mortgage%20Rates\u0026en=scroll\u0026epn.percent_scrolled=90\u0026tfd=3838\u0026richsstsse HTTP/1.1\r\nHost: sgtm.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://refinance.quickenloans.com/\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visitorId=6fe06897-c211-4c3f-a003-68355321c1a5; _gcl_au=1.1.1441864768.1737330994; _ga_RXLL9Z7XBK=GS1.1.1737330994.1.1.1737330994.0.0.1434330028; _ga=GA1.1.1184530112.1737330994; FPID=FPID2.2.2d8TxAeOLCcvz%2BCoq7PI632ayuH69bY%2B4DsVqHnOFbU%3D.1737330994; FPLC=r%2BFffad9kQXo8EhEqWp6RrHNRTamXqz%2FH4ru%2FKhMo3ajKq0VYxMw4l5YY00iKdsEx8cIP7wv6IWjQuxeVxwxNYtGpwSr8TwgTj4HvgypFvngsJK6OR12lUvKoYOc6A%3D%3D; FPAU=1.1.1441864768.1737330994; FPGSID=1.1737330994.1737330994.G-RXLL9Z7XBK.1Ng40wuWe9QZdWOBIHlHdg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: FPID=FPID2.2.2d8TxAeOLCcvz%2BCoq7PI632ayuH69bY%2B4DsVqHnOFbU%3D.1737330994; Max-Age=63072000; Domain=quickenloans.com; Path=/; Secure; HttpOnly\nFPLC=1%2B9dx%2F%2FNfmSn4dmAxz21FeL1n13kiyYVSiOBbZRJTgpHxD9Q3SczPNTtlzlEqAaO2jdDuAE%2Bd4Dsl0g20F1dxSi8DROefvdM0HToYoUs7PkDxQFsxLkdvGD4zgxZTA%3D%3D; Max-Age=72000; Domain=quickenloans.com; Path=/; Secure\r\ncache-control: no-cache\r\ncontent-type: text/plain\r\nx-content-type-options: nosniff\r\nx-accel-buffering: no\r\naccess-control-allow-origin: https://refinance.quickenloans.com\r\naccess-control-allow-credentials: true\r\ndate: Sun, 19 Jan 2025 23:56:35 GMT\r\nserver: Google Frontend\r\nexpires: Sun, 19 Jan 2025 23:56:35 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":435,"size_decoded":435,"mime_type":"text/plain","magic":"data","md5":"b44a023e102a68337355b20465a3a40b","sha1":"839f4b98b856ed7abb5cf82d2d098a73620e63a2","sha256":"f37e1f841afea73ea15c6ee02e89bd564bb3e180a3de1522f789469925499599","sha512":"2f6432f7cb38c358ba704174e51e212637a4a64b3af2680282f1ed6964b9ebd64962acdddd24bb4de69eb40a822261668dd76ca38720d851c6f200773933a0ad","ssdeep":"","tlshash":"07e0f157bc158f23dbbfd8b4123f308bd67652d4426d03158aac19dc5cb4ba36406aa9","first_seen":"2025-01-19T23:57:07.302184Z","last_seen":"2025-01-19T23:57:07.302184Z","times_seen":1,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026dma=1\u0026dma_cps=syphamo\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026tid=G-RXLL9Z7XBK\u0026cid=1184530112.1737330994\u0026gtm=45j91e51f1h1v9169491831z99200500233za200zb9137104487\u0026tag_exp=102067555~102067808~102081485~102123608\u0026aip=1\u0026z=1255816998","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:36.539Z","timestamp":1737330996539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:39:06 GMT","end":"Mon, 03 Mar 2025 08:39:05 GMT"},"fingerprint":{"sha1":"86:4E:B8:82:D3:0D:73:EE:82:65:DF:68:AB:29:6F:6C:2C:97:D2:F1","sha256":"79:30:07:29:C8:F4:30:69:5A:75:18:B3:17:7B:FF:84:4A:B5:F4:7F:65:AD:C6:CF:6B:46:E9:0F:EE:6E:25:1C"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026dma=1\u0026dma_cps=syphamo\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026tid=G-RXLL9Z7XBK\u0026cid=1184530112.1737330994\u0026gtm=45j91e51f1h1v9169491831z99200500233za200zb9137104487\u0026tag_exp=102067555~102067808~102081485~102123608\u0026aip=1\u0026z=1255816998 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 19 Jan 2025 23:56:36 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":42,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:45:10.728141Z","times_seen":761519,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":35,"receive":0,"ssl":285},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026dma=1\u0026dma_cps=syphamo\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026tid=G-RXLL9Z7XBK\u0026cid=1184530112.1737330994\u0026gtm=45j91e51f1h1v9169491831z89137104487z99200500233za200zb9137104487\u0026tag_exp=102067555~102067808~102081485~102123608\u0026aip=1\u0026z=1398016917","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:36.536Z","timestamp":1737330996536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:39:06 GMT","end":"Mon, 03 Mar 2025 08:39:05 GMT"},"fingerprint":{"sha1":"86:4E:B8:82:D3:0D:73:EE:82:65:DF:68:AB:29:6F:6C:2C:97:D2:F1","sha256":"79:30:07:29:C8:F4:30:69:5A:75:18:B3:17:7B:FF:84:4A:B5:F4:7F:65:AD:C6:CF:6B:46:E9:0F:EE:6E:25:1C"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026dma=1\u0026dma_cps=syphamo\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026tid=G-RXLL9Z7XBK\u0026cid=1184530112.1737330994\u0026gtm=45j91e51f1h1v9169491831z89137104487z99200500233za200zb9137104487\u0026tag_exp=102067555~102067808~102081485~102123608\u0026aip=1\u0026z=1398016917 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 19 Jan 2025 23:56:36 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":42,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:45:10.728141Z","times_seen":761519,"resource_available":true,"data":null}},"time_used":656,"timings":{"blocked":310,"dns":2,"connect":26,"send":0,"wait":34,"receive":0,"ssl":275},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026dma=1\u0026dma_cps=syphamo\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026tid=G-RXLL9Z7XBK\u0026cid=1184530112.1737330994\u0026gtm=45j91e51f1h1v9169491831z89137104487z99200500233za200zb9137104487\u0026tag_exp=102067555~102067808~102081485~102123608\u0026aip=1\u0026z=1368125499","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:36.538Z","timestamp":1737330996538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:39:06 GMT","end":"Mon, 03 Mar 2025 08:39:05 GMT"},"fingerprint":{"sha1":"86:4E:B8:82:D3:0D:73:EE:82:65:DF:68:AB:29:6F:6C:2C:97:D2:F1","sha256":"79:30:07:29:C8:F4:30:69:5A:75:18:B3:17:7B:FF:84:4A:B5:F4:7F:65:AD:C6:CF:6B:46:E9:0F:EE:6E:25:1C"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026dma=1\u0026dma_cps=syphamo\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026tid=G-RXLL9Z7XBK\u0026cid=1184530112.1737330994\u0026gtm=45j91e51f1h1v9169491831z89137104487z99200500233za200zb9137104487\u0026tag_exp=102067555~102067808~102081485~102123608\u0026aip=1\u0026z=1368125499 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 19 Jan 2025 23:56:36 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":42,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:45:10.728141Z","times_seen":761519,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":25,"send":0,"wait":36,"receive":1,"ssl":274},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ct.pinterest.com/ct.html","fqdn":"ct.pinterest.com","domain":"pinterest.com","tld":"com"},"ip":{"addr":"96.6.16.234","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:37.018Z","timestamp":1737330997018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pinterest.com","organization":"Pinterest, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 02 Aug 2024 00:00:00 GMT","end":"Thu, 07 Aug 2025 23:59:59 GMT"},"fingerprint":{"sha1":"34:B7:F7:0E:F0:07:7D:4D:C0:6D:8A:B2:05:18:67:8E:25:DF:7B:39","sha256":"3A:FC:05:E0:AF:A1:F2:71:08:61:05:8C:4D:33:6A:B9:14:A3:9F:C1:E6:C3:A2:0D:CF:5C:11:F4:22:F3:D9:9A"}}},"request":{"raw":"GET /ct.html HTTP/1.1\r\nHost: ct.pinterest.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: max-age=86400\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\ncontent-length: 323\r\nx-envoy-upstream-service-time: 0\r\npinterest-version: 223b9bd73eadec77a81b00fddece2f2cf67f39fb\r\nreferrer-policy: origin\r\nx-pinterest-rid: 1068994654762585\r\nx-pinterest-rid-128bit: aa0e754053367aa20ed5d4f987ea4dee\r\ndate: Sun, 19 Jan 2025 23:56:37 GMT\r\nalt-svc: h3=\":443\"; ma=604800\r\nvary: Accept-Encoding\r\nquic-version: 0x00000001\r\nakamai-grn: 0.844f2417.1737330996.261d46c2\r\nx-cdn: akamai\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains ; preload\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":323,"size_decoded":565,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (565), with no line terminators","md5":"433cbac690542626f503b4269a8da12a","sha1":"3e810bc4abaccf42ac5e4b0b939d63c03711bbd9","sha256":"f83b1a3ea61ad62e47fad82de5495a2547e2f12e591ad8108050538c566ae1e3","sha512":"569b3d704f2a979d16624064abd3b97f38eea3c9a5f3f09d31c9b83d62c360717f6f66ee44a6b53686760421a57d7eb4abd54904556b105b05aa81d5850f34b9","ssdeep":"","tlshash":"66f0e15ee505093c518410c93be53605b83bc2c4e18896c071880e9872c0f6fd7997c0","first_seen":"2023-04-05T03:29:14Z","last_seen":"2026-04-04T03:00:13.162447Z","times_seen":89735,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.mgid.com/1x1.gif?id=608665\u0026type=c\u0026tg=\u0026r=\u0026nv=0\u0026clid=\u0026d=1737330996748","fqdn":"a.mgid.com","domain":"mgid.com","tld":"com"},"ip":{"addr":"104.17.198.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:37.009Z","timestamp":1737330997009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgid.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Dec 2024 01:44:24 GMT","end":"Mon, 31 Mar 2025 02:44:16 GMT"},"fingerprint":{"sha1":"F4:2F:61:43:C7:6A:E9:6E:F6:FF:4E:B7:FD:7E:B4:EC:DB:3B:F8:36","sha256":"26:75:8F:F0:FE:C8:C9:26:77:61:1C:CD:4C:AC:0A:84:11:5C:AA:6A:57:2B:03:F5:06:68:8E:BF:3A:E6:73:B3"}}},"request":{"raw":"GET /1x1.gif?id=608665\u0026type=c\u0026tg=\u0026r=\u0026nv=0\u0026clid=\u0026d=1737330996748 HTTP/1.1\r\nHost: a.mgid.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:37 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 904ac32acdfa0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":43,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"57f187c7a868faeac558007a8eb6cb2e","sha1":"11ab10ab109fdb53d91d444ac781101f5a6360c6","sha256":"aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22","sha512":"3844065e1dd778a05e8cc39901fbf3191ded380d594359df137901ec56ca52e03d57eb60acc2421a0ee74f0733bbb5d781b7744685c26fb013a236f49b02fed3","ssdeep":"","tlshash":"5f900407c1500051c151c4310444cf1017407570010d030d50dc1055dc1715d0d01100","first_seen":"2023-04-07T09:22:11Z","last_seen":"2026-04-04T03:45:49.858084Z","times_seen":55981,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lmbahsj2.com/sdk/click?effp=f240e0e766e280fa19a5a0972126103e\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026oid=165\u0026affid=921\u0026__cc=\u0026async=json\u0026__qp=moid%7Csourceid%7Cpkey1%7Cpkey2%7Cpkey3%7Cpkey%7Csid%7Ccmpid%7Ccrtid%7Coid%7Caffid%7C_ef_transaction_id%7Cutm_medium%7Cutm_source%7Cutm_content\u0026__rf=\u0026__efckuq=94","fqdn":"www.lmbahsj2.com","domain":"lmbahsj2.com","tld":"com"},"ip":{"addr":"35.201.76.131","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:37.033Z","timestamp":1737330997033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmbahsj2.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 14 Mar 2024 13:49:10 GMT","end":"Tue, 15 Apr 2025 13:49:10 GMT"},"fingerprint":{"sha1":"A1:7A:C4:FC:AC:8D:B7:8D:5A:15:64:81:79:E7:87:53:DB:D0:A2:1B","sha256":"91:3C:DE:7D:4F:80:B0:C2:C0:3C:9E:D6:92:D6:04:02:C4:19:28:56:2C:5D:FD:3F:A7:94:D4:CD:34:99:69:79"}}},"request":{"raw":"GET /sdk/click?effp=f240e0e766e280fa19a5a0972126103e\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026oid=165\u0026affid=921\u0026__cc=\u0026async=json\u0026__qp=moid%7Csourceid%7Cpkey1%7Cpkey2%7Cpkey3%7Cpkey%7Csid%7Ccmpid%7Ccrtid%7Coid%7Caffid%7C_ef_transaction_id%7Cutm_medium%7Cutm_source%7Cutm_content\u0026__rf=\u0026__efckuq=94 HTTP/1.1\r\nHost: www.lmbahsj2.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://refinance.quickenloans.com/\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Jan 2025 23:56:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 87\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://refinance.quickenloans.com\r\nset-cookie: uniqueClick=e0524084-1df8-4257-ba10-dfb5ac4c9247:1737330997; Path=/; Expires=Mon, 20 Jan 2025 23:56:37 GMT; Secure; SameSite=None\ntransaction_id=6aeda80d793c4e668875c6eeb310defb; Path=/; Expires=Sat, 19 Apr 2025 23:56:37 GMT; Secure; SameSite=None\r\nvary: Origin\r\nx-eflow-request-id: fc4cbb1a-61e0-4dec-9b0c-77c998f62b0c\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87,"size_decoded":87,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"84a4e9207e47b65e922dabc1caa2e5ff","sha1":"72f11564790ed98a007ed94cc6915ecdad96a153","sha256":"03dcb7e72874281114dd532c46b92a9b2c05edcb56e416a65e887201e21acc43","sha512":"ea97ece23b5d8487875fe174427657fedfc2db78f4d00d6efd20c079913ecff2fdfbc0c6b74046153d0fd3f43b04c3d2e53ce0fe1c20b21b8c7731cd151e358c","ssdeep":"","tlshash":"05b0244010ff04c50d0d50c104cd1011007dcdf34c30131751c5c7170f1d10c0343000","first_seen":"2025-01-19T23:57:07.306246Z","last_seen":"2025-01-19T23:57:07.306246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rum-http-intake.logs.datadoghq.com/v1/input/puba7383c50c7f3ca7bdbf0c5cfa256a231?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Amsql-lre-webapp%2Cversion%3A1.1.0%20undefined\u0026batch_time=1737330996966","fqdn":"rum-http-intake.logs.datadoghq.com","domain":"datadoghq.com","tld":"com"},"ip":{"addr":"3.233.158.30","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:37.035Z","timestamp":1737330997035,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.logs.datadoghq.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sat, 14 Dec 2024 00:00:00 GMT","end":"Wed, 17 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"2C:EC:E2:99:9F:AB:D2:83:2C:57:3F:0A:AE:AB:85:75:D7:C5:EA:16","sha256":"13:1E:42:05:5B:C8:E2:EA:6C:79:CF:D3:77:0E:F2:56:76:00:C7:76:E9:10:A9:B0:48:43:58:F1:4B:73:26:00"}}},"request":{"raw":"POST /v1/input/puba7383c50c7f3ca7bdbf0c5cfa256a231?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Amsql-lre-webapp%2Cversion%3A1.1.0%20undefined\u0026batch_time=1737330996966 HTTP/1.1\r\nHost: rum-http-intake.logs.datadoghq.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 16282\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 2\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sun, 19 Jan 2025 23:56:36 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T03:45:20.024681Z","times_seen":552769,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/p/action/247005605.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:37.172Z","timestamp":1737330997172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 08","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 15 Dec 2024 07:52:28 GMT","end":"Fri, 13 Jun 2025 07:52:28 GMT"},"fingerprint":{"sha1":"13:F1:2D:07:A9:A1:FF:DA:2B:45:DE:92:97:EF:5E:88:78:3B:C2:28","sha256":"1D:D4:DA:12:87:B3:B3:DD:94:E7:20:50:03:94:1C:53:65:85:28:F4:2E:BC:19:3A:63:42:84:83:AF:F3:90:9B"}}},"request":{"raw":"GET /p/action/247005605.js HTTP/1.1\r\nHost: bat.bing.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private,max-age=1800\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: FE4891AF3D0A477F8D312924FC4C17A8 Ref B: OSL30EDGE0318 Ref C: 2025-01-19T23:56:37Z\r\ndate: Sun, 19 Jan 2025 23:56:37 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":242,"size_decoded":364,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"45100ddbe4fb816ca7ba9f16f494964a","sha1":"b7a62a6e65e6cbf915b895ce14952250387295d9","sha256":"cce2184ec089babc70ded47b8474c543f6a5ff013e4bfd9dbae8689489bb13ba","sha512":"08d730db7ff2e5ee9bef496cac3341ecdec96d579fd034087813fc9cbc87008824ee9577409bcb6002815fd441a7a05ef1b860a6340e59afef5181cb2665d674","ssdeep":"","tlshash":"11e0261a20d16039d817ec2d922b869c2fe2534bc284ed00f96cc5667fd51381c00f4c","first_seen":"2024-10-30T19:34:42.438991Z","last_seen":"2025-03-03T19:56:21.603369Z","times_seen":7907,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script.anura.io/response.json?74079533650","fqdn":"script.anura.io","domain":"anura.io","tld":"io"},"ip":{"addr":"18.132.34.251","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:37.022Z","timestamp":1737330997022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script.anura.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 15 Sep 2024 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"CC:B4:48:82:BF:CC:04:FB:C7:35:8F:3F:D3:69:3F:10:96:9A:EF:C8","sha256":"3E:61:7E:69:03:E5:91:70:F0:A4:74:33:2C:72:68:4F:62:6E:75:4C:6A:B9:74:FA:4E:DA:32:67:90:0A:96:59"}}},"request":{"raw":"POST /response.json?74079533650 HTTP/1.1\r\nHost: script.anura.io\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 6193\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: nginx\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST\r\nexpires: Sun, 28 Dec 1980 18:57:00 EST\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60195,"size_decoded":60195,"mime_type":"application/json; charset=utf-8","magic":"gzip compressed data, max speed, from Unix","md5":"e86d55375712825cdb5702546a676f51","sha1":"34967226177b8ea3f38b766140b38faca06f6232","sha256":"18802d9725676552a9ede2a56b0848bf66f487b25f20a61bbbbcb3395436dc09","sha512":"e5eacc1097e616bff256c83f9b06301e7a760e47a4a5755279135c91a1b41984caa0199501cb3a8d75686329a1024e8408ab15fb597578727c0c16225ff1e7f7","ssdeep":"1536:ynOescHkglqCYXQWgnWgZPROD93nzgnvqjdz:isdg1WgWiODpnHdz","tlshash":"0643020e088e90ea4d2295b83894f35dd9fde9ff932ec5110b0aa55ff616f583a01c95","first_seen":"2025-01-19T23:57:07.308675Z","last_seen":"2025-01-19T23:57:07.308675Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":48,"dns":0,"connect":25,"send":0,"wait":84,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/492/MYRIADPRO-BOLD.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:37.249Z","timestamp":1737330997249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jan 2025 09:04:05 GMT","end":"Wed, 16 Apr 2025 10:02:19 GMT"},"fingerprint":{"sha1":"01:DE:DA:C9:4A:74:99:9A:D5:6A:41:C2:81:92:CC:04:7B:2A:DF:35","sha256":"47:93:DA:4C:14:3A:C0:7F:F0:6E:F2:67:34:4E:CB:42:02:E3:43:E8:32:0A:AC:0F:07:03:1B:E6:53:DF:0C:D9"}}},"request":{"raw":"GET /s/492/MYRIADPRO-BOLD.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:37 GMT\r\ncontent-type: font/woff\r\ncontent-length: 62676\r\nlast-modified: Sat, 05 Feb 2022 02:00:51 GMT\r\netag: \"f4d4-5d73bbca4afff\"\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nage: 648837\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8g43ZCPw0lswRUxUHSbJT5mmbzmfrh6sf4tkwcE3aslhNjEw5CskvyFVMFToX%2B%2BPqQB6gzmx6kbWJtoku1hm3j%2BibcoOGkyTGoeGQCbs0rrmlBddhxG9x87Z5pZxX6ZKewMaRNM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 904ac32cc89656c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=23061\u0026min_rtt=1460\u0026rtt_var=36903\u0026sent=196\u0026recv=19\u0026lost=0\u0026retrans=5\u0026sent_bytes=214246\u0026recv_bytes=3288\u0026delivery_rate=165033\u0026cwnd=96000\u0026unsent_bytes=0\u0026cid=113e4ad8d0118f1d\u0026ts=2633\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62676,"size_decoded":62676,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 62676, version 0.0","md5":"d6bee12c7e838e84074faeb7c131c988","sha1":"a1b31f5a9d369ae3597e427fc47d6a5d89d28cbd","sha256":"962f8da44a5e7f4416402f6bc4a7165ab26cef621f6c24cb74f5e8db5fdc5f9e","sha512":"a32fdc7839096a19812f27446cc3a5d050e93766dc5e6697ecede07e320e377ce2f89d3adab75034b937a0890ce0cc02fccacec84367786e4044d31be8b37c90","ssdeep":"1536:UydXXmsNrW3EMLhnG9Jp5SN/yh6ongk4MymBtWysU:3JXrrW3Z1sJpQw/g7KtWysU","tlshash":"b453020e77bbb9d47f975cb491dfa913397603dcaa4e420600512a5274e87c0af3ae17","first_seen":"2023-06-30T14:58:25Z","last_seen":"2026-03-28T01:36:55.708401Z","times_seen":773,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/492/MYRIADPRO-SEMIBOLD.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:37.252Z","timestamp":1737330997252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jan 2025 09:04:05 GMT","end":"Wed, 16 Apr 2025 10:02:19 GMT"},"fingerprint":{"sha1":"01:DE:DA:C9:4A:74:99:9A:D5:6A:41:C2:81:92:CC:04:7B:2A:DF:35","sha256":"47:93:DA:4C:14:3A:C0:7F:F0:6E:F2:67:34:4E:CB:42:02:E3:43:E8:32:0A:AC:0F:07:03:1B:E6:53:DF:0C:D9"}}},"request":{"raw":"GET /s/492/MYRIADPRO-SEMIBOLD.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:37 GMT\r\ncontent-type: font/woff\r\ncontent-length: 62448\r\nlast-modified: Sat, 05 Feb 2022 02:00:51 GMT\r\netag: \"f3f0-5d73bbca4b7cf\"\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nage: 197153\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=juKvL0QQkGMxVU1FpczxR8TCYu6E7YNr%2BMrqac5Dsuj1b3Cx%2FFZGT%2BMKUkGxrkGhE0b2uPWXBE4WTv3KZ3e88SclqmBNMcxxnmHmtzYzGW6akq3nj9vDpo0ZWINPkv7UsVWJxCo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 904ac32cd89d56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=23061\u0026min_rtt=1460\u0026rtt_var=36903\u0026sent=267\u0026recv=19\u0026lost=0\u0026retrans=5\u0026sent_bytes=298246\u0026recv_bytes=3288\u0026delivery_rate=165033\u0026cwnd=96000\u0026unsent_bytes=0\u0026cid=113e4ad8d0118f1d\u0026ts=2636\u0026x=1\", cfExtPri, cfHdrFlush;dur=3\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62448,"size_decoded":62448,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 62448, version 0.0","md5":"6fd5c55d90e96c8af1041794ab70f5f2","sha1":"be1da7322f84fd756f8437d32500bee9b5877dd7","sha256":"8f6b883d93b2767c0d04efeeeb65ac92a170c1d966fefc635586d233e5f318cc","sha512":"1895a3d60a07f6710b49246c92f5a4e335c6f2283852c441a024847bcb7284dc3b08d62c249e99e4298010ed7212870588927b59a327b0a0f1139631fff06f8d","ssdeep":"1536:Nrf70FE9eQ1b3sxXOSA0zH2OAamZgtJH4gvEYu+M+C:ND4FbSb8xXw0zHBAamOXvED","tlshash":"4f531205a1d4d7bec5034550ec21cebaa79eb41ebd1bcc84f206a917c73d69b990f4d2","first_seen":"2023-06-30T14:58:25Z","last_seen":"2026-03-16T17:31:33.018686Z","times_seen":615,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lmbahsj2.com/scripts/sdk/everflow.js","fqdn":"www.lmbahsj2.com","domain":"lmbahsj2.com","tld":"com"},"ip":{"addr":"35.201.76.131","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.947Z","timestamp":1737330994947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmbahsj2.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 14 Mar 2024 13:49:10 GMT","end":"Tue, 15 Apr 2025 13:49:10 GMT"},"fingerprint":{"sha1":"A1:7A:C4:FC:AC:8D:B7:8D:5A:15:64:81:79:E7:87:53:DB:D0:A2:1B","sha256":"91:3C:DE:7D:4F:80:B0:C2:C0:3C:9E:D6:92:D6:04:02:C4:19:28:56:2C:5D:FD:3F:A7:94:D4:CD:34:99:69:79"}}},"request":{"raw":"GET /scripts/sdk/everflow.js HTTP/1.1\r\nHost: www.lmbahsj2.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Jan 2025 23:56:35 GMT\r\ncontent-type: text/javascript\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model\r\ncache-control: max-age=14400\r\nvary: Origin\r\nx-eflow-request-id: 1ba9c4b7-83df-4bca-8d8b-18c2a38433b3\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19226,"size_decoded":61548,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61541)","md5":"f5fd9f15e022b5f18e83cff4510503ff","sha1":"950e89496aa490e9048c94aac10fce42fbfd759c","sha256":"1a6435ec41848bb2da51f6c469d1168e15993000f11a96638cbd488b06ba3ad4","sha512":"1331fb5d13ca7f5b742a6a192863eb19588b3e7ec1f1b9273a164c8df72ffb70aeeff89dc98f2d562a2db31c1204a5c69ab54cff3c6b7b5772c94be9c444fddc","ssdeep":"768:BAuXnhgPw1AuCIOTQpzEeIHV7xk65nTBt0haRAY/2bVZYRMU3qnjcs3nATAruf6n:RgPw1AuCITEeIHto6dpsXjuf6Eq6w","tlshash":"be53184c3296703503a371b0213fa40ab2ba9d95744c8854fa76ccd46dbce5ea277fb8","first_seen":"2024-05-14T19:52:45Z","last_seen":"2025-07-01T02:25:15.160247Z","times_seen":510,"resource_available":true,"data":null}},"time_used":1143,"timings":{"blocked":-1,"dns":2,"connect":20,"send":0,"wait":128,"receive":0,"ssl":983},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/p/action/283017207.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:37.171Z","timestamp":1737330997171,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 08","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 15 Dec 2024 07:52:28 GMT","end":"Fri, 13 Jun 2025 07:52:28 GMT"},"fingerprint":{"sha1":"13:F1:2D:07:A9:A1:FF:DA:2B:45:DE:92:97:EF:5E:88:78:3B:C2:28","sha256":"1D:D4:DA:12:87:B3:B3:DD:94:E7:20:50:03:94:1C:53:65:85:28:F4:2E:BC:19:3A:63:42:84:83:AF:F3:90:9B"}}},"request":{"raw":"GET /p/action/283017207.js HTTP/1.1\r\nHost: bat.bing.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private,max-age=1800\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: A8098DC2C40C44F591281D31AED696F1 Ref B: OSL30EDGE0318 Ref C: 2025-01-19T23:56:37Z\r\ndate: Sun, 19 Jan 2025 23:56:37 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":688,"size_decoded":364,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"45100ddbe4fb816ca7ba9f16f494964a","sha1":"b7a62a6e65e6cbf915b895ce14952250387295d9","sha256":"cce2184ec089babc70ded47b8474c543f6a5ff013e4bfd9dbae8689489bb13ba","sha512":"08d730db7ff2e5ee9bef496cac3341ecdec96d579fd034087813fc9cbc87008824ee9577409bcb6002815fd441a7a05ef1b860a6340e59afef5181cb2665d674","ssdeep":"","tlshash":"11e0261a20d16039d817ec2d922b869c2fe2534bc284ed00f96cc5667fd51381c00f4c","first_seen":"2024-10-30T19:34:42.438991Z","last_seen":"2025-03-03T19:56:21.603369Z","times_seen":7907,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rum-http-intake.logs.datadoghq.com/v1/input/puba7383c50c7f3ca7bdbf0c5cfa256a231?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Amsql-lre-webapp%2Cversion%3A1.1.0%20undefined\u0026batch_time=1737331000090","fqdn":"rum-http-intake.logs.datadoghq.com","domain":"datadoghq.com","tld":"com"},"ip":{"addr":"3.233.158.30","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:40.097Z","timestamp":1737331000097,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.logs.datadoghq.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sat, 14 Dec 2024 00:00:00 GMT","end":"Wed, 17 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"2C:EC:E2:99:9F:AB:D2:83:2C:57:3F:0A:AE:AB:85:75:D7:C5:EA:16","sha256":"13:1E:42:05:5B:C8:E2:EA:6C:79:CF:D3:77:0E:F2:56:76:00:C7:76:E9:10:A9:B0:48:43:58:F1:4B:73:26:00"}}},"request":{"raw":"POST /v1/input/puba7383c50c7f3ca7bdbf0c5cfa256a231?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Amsql-lre-webapp%2Cversion%3A1.1.0%20undefined\u0026batch_time=1737331000090 HTTP/1.1\r\nHost: rum-http-intake.logs.datadoghq.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 16146\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 2\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sun, 19 Jan 2025 23:56:39 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T03:45:20.024681Z","times_seen":552769,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-msql-prod.refinance.quickenloans.com/main.bf7600f7f2427f73dfea.js","fqdn":"static-msql-prod.refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:33.663Z","timestamp":1737330993663,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"refinance.quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Dec 2024 23:31:14 GMT","end":"Tue, 18 Mar 2025 00:31:12 GMT"},"fingerprint":{"sha1":"D5:B9:5B:F3:73:A5:16:58:B2:9E:98:16:66:90:7F:C8:B6:19:B4:CC","sha256":"1C:E0:0B:77:90:A5:65:AB:B2:F0:6B:3D:B8:56:88:CC:BE:BE:8E:B9:DE:C3:5E:E1:C0:72:74:F0:9C:68:D7:5C"}}},"request":{"raw":"GET /main.bf7600f7f2427f73dfea.js HTTP/1.1\r\nHost: static-msql-prod.refinance.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nCookie: visitorId=6fe06897-c211-4c3f-a003-68355321c1a5; __cf_bm=z_Ecw8895AezetC.tRDhIO282Cn_tuThOBQE5pkWp34-1737330992-1.0.1.1-2b7xIuFXo5ebz5G3Ggz3IJSwTtmPN4Tfn7fA0aKRzTW8ReqwoIiWHuvpCf.RXA6rdiekgmcuhXEWsPyTP0YLHQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:33 GMT\r\ncontent-type: application/javascript\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Fri, 10 Jan 2025 11:57:14 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: LuH1C4weYJqrGsnvOGU1fBupi.tlI2MU\r\netag: W/\"e26aa8ba820ab0dc294d3354d6f6805a\"\r\nvary: accept-encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 e240913a5e90e18bd637baa6899f2280.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: FRA56-P12\r\nx-amz-cf-id: Ze_8H0NiuzxxGxUWHmWmFd1-465VdewOOqsYdH-EJ52mbjXXNRTYpw==\r\ncf-cache-status: HIT\r\nage: 4669\r\nexpires: Mon, 20 Jan 2025 03:56:33 GMT\r\ncache-control: public, max-age=14400\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 904ac3166c32568e-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1225045,"size_decoded":1225045,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/css/stack-ssi","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:33.195Z","timestamp":1737330993195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jan 2025 09:04:05 GMT","end":"Wed, 16 Apr 2025 10:02:19 GMT"},"fingerprint":{"sha1":"01:DE:DA:C9:4A:74:99:9A:D5:6A:41:C2:81:92:CC:04:7B:2A:DF:35","sha256":"47:93:DA:4C:14:3A:C0:7F:F0:6E:F2:67:34:4E:CB:42:02:E3:43:E8:32:0A:AC:0F:07:03:1B:E6:53:DF:0C:D9"}}},"request":{"raw":"GET /css/stack-ssi HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static-msql-prod.refinance.quickenloans.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:33 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nage: 2907846\r\nlast-modified: Tue, 17 Dec 2024 08:12:27 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5jM8hRQINdryYAlSNqWupOTEsMDbtfX3V4JCmlgYrrjK03G9shN9UrQpKoCVvVWUe6v0iIUi2MrIwAt22k564PEip3UHRZtAxM5ao4hO6KVAYz8NqihgVmmrxk6dHEoyHeCQZ8k%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 904ac313bef37130-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=644\u0026min_rtt=385\u0026rtt_var=433\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3276\u0026recv_bytes=1223\u0026delivery_rate=8258555\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=f7569815dd4177cb\u0026ts=58\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1385,"size_decoded":1385,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1429), with no line terminators","md5":"511790887779062a7c2ec32eb81fe001","sha1":"7e2137a949f04451ceb5b4ef5d92e2aa69f5e5aa","sha256":"6757c06f55f8cca96f0648432bdcf714cac2f00a593f1bf332d87763c806ab2d","sha512":"469bc972282d6b21f40fc5e25be91ef8b4f03894f1b83f23387113e782b341137e722c4934c3d368d066e0fa84924c796695561732c6cf768bdac8249131295f","ssdeep":"","tlshash":"a6218456555a7578e5210ecab3af36160e0b347b20258256bfbe5d068eeb42c03b2f9c","first_seen":"2023-07-01T19:27:36Z","last_seen":"2025-03-26T03:39:34.896968Z","times_seen":300,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":14,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.nextdoor.com/public/pixel/ndp.js","fqdn":"ads.nextdoor.com","domain":"nextdoor.com","tld":"com"},"ip":{"addr":"44.239.153.77","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.785Z","timestamp":1737330994785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"nextdoor.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 14 Oct 2024 00:00:00 GMT","end":"Wed, 12 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"37:C2:68:C5:6B:A2:D7:E0:9F:00:91:9E:4F:D2:7E:BA:7B:55:84:B6","sha256":"06:9B:4C:74:2B:3B:B2:A1:5C:25:62:D1:6C:F9:57:29:2A:FF:3A:BB:1E:DB:37:9A:BA:6A:AD:D8:46:B2:27:85"}}},"request":{"raw":"GET /public/pixel/ndp.js HTTP/1.1\r\nHost: ads.nextdoor.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:36 GMT\r\ncontent-type: application/javascript\r\nserver: istio-envoy\r\nlast-modified: Tue, 07 Jan 2025 17:47:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677d68ba-1d89\"\r\ncontent-security-policy: frame-ancestors 'self' *.lightning.force.com nextdoor.com *.nextdoor.com nextdoor-test.com *.nextdoor-test.com;\r\ncontent-encoding: gzip\r\nx-envoy-upstream-service-time: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7561,"size_decoded":7561,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7729), with no line terminators","md5":"da1440967d52d61f04805ca190ec503d","sha1":"afb90cec883e14649937d310186c007fffdc32bc","sha256":"45afa1a73b6cabfbd5f3d5e7b70665b0892c918bddf396e941697c779a8e196b","sha512":"906700d0b13d232985e080e3000491a2f40270751241bbee814bf1efd3f98ee4a80f7fce2ed943457b957e14fc4fcb2042350ff66dbb8ae2eb7c2c3721c63fa4","ssdeep":"192:UbVEFxmacUHn9IBDkpfm7vkdIE/IjjbA2U292Nk:U+xcY9IBDkpfm7vJE/Gwl2YNk","tlshash":"8ef1b4dcb6cef04153db6464503f680ab2b66a1460ad4860e109d6d53db8a7f8337fea","first_seen":"2024-07-13T06:00:11Z","last_seen":"2025-03-11T18:27:16.685826Z","times_seen":621,"resource_available":false,"data":null}},"time_used":2604,"timings":{"blocked":1213,"dns":20,"connect":572,"send":0,"wait":176,"receive":0,"ssl":360},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026dma=1\u0026dma_cps=syphamo\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026tid=G-RXLL9Z7XBK\u0026cid=1184530112.1737330994\u0026gtm=45j91e51f1h1v9169491831z89137104487z99200500233za200zb9137104487\u0026tag_exp=102067555~102067808~102081485~102123608\u0026aip=1\u0026z=492038628","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:36.539Z","timestamp":1737330996539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:39:06 GMT","end":"Mon, 03 Mar 2025 08:39:05 GMT"},"fingerprint":{"sha1":"86:4E:B8:82:D3:0D:73:EE:82:65:DF:68:AB:29:6F:6C:2C:97:D2:F1","sha256":"79:30:07:29:C8:F4:30:69:5A:75:18:B3:17:7B:FF:84:4A:B5:F4:7F:65:AD:C6:CF:6B:46:E9:0F:EE:6E:25:1C"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026dma=1\u0026dma_cps=syphamo\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026tid=G-RXLL9Z7XBK\u0026cid=1184530112.1737330994\u0026gtm=45j91e51f1h1v9169491831z89137104487z99200500233za200zb9137104487\u0026tag_exp=102067555~102067808~102081485~102123608\u0026aip=1\u0026z=492038628 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 19 Jan 2025 23:56:36 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":42,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:45:10.728141Z","times_seen":761519,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":25,"send":0,"wait":34,"receive":0,"ssl":265},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refinance.quickenloans.com/favicon.ico","fqdn":"refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.133Z","timestamp":1737330994133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"refinance.quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jan 2025 23:31:57 GMT","end":"Sat, 19 Apr 2025 00:31:53 GMT"},"fingerprint":{"sha1":"CA:DC:00:08:E4:E8:98:30:E3:29:4F:78:62:53:16:CD:4B:C2:E9:A4","sha256":"53:BC:5E:71:5F:CF:07:58:BC:A4:31:9B:F5:92:34:34:69:D9:28:90:0F:B5:E5:A3:D1:1B:9E:BB:F2:F6:37:D7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: refinance.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=\r\nCookie: AWSALBTG=81eaj/auj3I+x3GBkebnxQKES17tB2O/EENcP7WHylU20GJz28KoDmsDNZV3nVIWUIttH/IsYnGPRHvi6TCMOrtCdfkvc7LUHR7uOigenSgt1CEg1c6zynZgfbI7M0aHQJlXHNWiIOplnPahaK0GSOW2f2k/7LoNBmWAmuThPfajwCqp5Bg=; AWSALBTGCORS=81eaj/auj3I+x3GBkebnxQKES17tB2O/EENcP7WHylU20GJz28KoDmsDNZV3nVIWUIttH/IsYnGPRHvi6TCMOrtCdfkvc7LUHR7uOigenSgt1CEg1c6zynZgfbI7M0aHQJlXHNWiIOplnPahaK0GSOW2f2k/7LoNBmWAmuThPfajwCqp5Bg=; visitorId=6fe06897-c211-4c3f-a003-68355321c1a5; visitorId=6fe06897-c211-4c3f-a003-68355321c1a5; contentTarget=%7B%22moid%22%3A%22322646%22%2C%22sourceId%22%3A%22affl_everflow_ql-lre_165_921%22%7D; __cf_bm=z_Ecw8895AezetC.tRDhIO282Cn_tuThOBQE5pkWp34-1737330992-1.0.1.1-2b7xIuFXo5ebz5G3Ggz3IJSwTtmPN4Tfn7fA0aKRzTW8ReqwoIiWHuvpCf.RXA6rdiekgmcuhXEWsPyTP0YLHQ; _dd_s=rum=1\u0026id=5846c323-9573-490f-ad0c-619c3dbb651a\u0026created=1737330993959\u0026expire=1737331893959\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\ncf-cache-status: HIT\r\nage: 5\r\nexpires: Mon, 20 Jan 2025 03:56:34 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 904ac3195eda0b41-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":116984,"size_decoded":116984,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.mgid.com/mgsensor.js?d=1737330994753","fqdn":"a.mgid.com","domain":"mgid.com","tld":"com"},"ip":{"addr":"104.17.198.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:35.125Z","timestamp":1737330995125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mgid.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Dec 2024 01:44:24 GMT","end":"Mon, 31 Mar 2025 02:44:16 GMT"},"fingerprint":{"sha1":"F4:2F:61:43:C7:6A:E9:6E:F6:FF:4E:B7:FD:7E:B4:EC:DB:3B:F8:36","sha256":"26:75:8F:F0:FE:C8:C9:26:77:61:1C:CD:4C:AC:0A:84:11:5C:AA:6A:57:2B:03:F5:06:68:8E:BF:3A:E6:73:B3"}}},"request":{"raw":"GET /mgsensor.js?d=1737330994753 HTTP/1.1\r\nHost: a.mgid.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:35 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-mg-request-uuid: eb730d6d-aa71-4fcf-8700-6fd09cfa7c89\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 904ac3242b4b56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17067,"size_decoded":17067,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17067), with no line terminators","md5":"0ce70f3ba285bdc7ed99d95a5c60af1d","sha1":"0212d85a8640d127b903fea703208beeb4daed07","sha256":"50717873101f479c7173074a285d6d1037bb55493e044b26f079a723bcfb425f","sha512":"7b349e7af6b9f3a10248818e045c4c43dfaaf6ab62a313fba6b2b898316d2b98d5a24f6b7b5a45d6c6688e537ebb8a2af4ea5b7637992fa1c487a788e9c347e7","ssdeep":"192:22zVfz/9UJfRykpXbf/OFON6b5v1a/yYi/1g4GT2bpziHJfrDF1Lgiuk9S3TnZU:8JQuPo5vcy7Nb8gkonW","tlshash":"0b727389b6c4b15103e3617d493fb20ab3326579689a84a06571c4d07cba74fb2a3ff9","first_seen":"2024-12-18T14:25:59.416487Z","last_seen":"2025-08-05T10:11:29.444304Z","times_seen":1164,"resource_available":true,"data":null}},"time_used":1691,"timings":{"blocked":737,"dns":8,"connect":339,"send":0,"wait":122,"receive":0,"ssl":230},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-700319321","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.749Z","timestamp":1737330994749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:36:18 GMT","end":"Mon, 03 Mar 2025 08:36:17 GMT"},"fingerprint":{"sha1":"BB:2E:7E:AD:26:E1:69:CA:59:9D:25:40:5F:20:4A:82:34:E8:D2:04","sha256":"5A:6F:35:5B:E3:09:08:2E:14:FC:4D:A7:BE:0C:A9:0A:CF:D1:DF:F0:C7:6B:B3:B6:D9:0A:7B:4E:DB:0F:92:F2"}}},"request":{"raw":"GET /gtag/js?id=AW-700319321 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\nexpires: Sun, 19 Jan 2025 23:56:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 19 Jan 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"coop_reporting\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 96394\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":272799,"size_decoded":272799,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5268)","md5":"88eabf0e512777140c39e326e6c7f5c5","sha1":"ec304c4eb56d7697d5355c87d8358b64e98bc242","sha256":"9718ff866f33a597243aa7ed66e648320741fd39a50c8a88519ef3397d607351","sha512":"cdc005fe4ab6bfb0de902262be6cac756fa75384e93c26c4d15b6d74f75f921c19973bdc83915036635e727e82c4ae48b0a91ba6996a56d76ee5d91d082ad019","ssdeep":"3072:p5am4s8CIE/rNPfXJW00Dy2igrJQomfnIZ7yJGsOp05LJcwdlojUy3VCIM:fOCIEDNPft1fA8G6LJcwdlojUKM","tlshash":"a84419cdb3c6b4669393a474507f010bb13a6da2f84cd8c4e186d8e52e74aa94277f3d","first_seen":"2025-01-19T23:57:07.313733Z","last_seen":"2025-01-19T23:57:07.313733Z","times_seen":1,"resource_available":true,"data":null}},"time_used":861,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":52,"receive":764,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026dma=1\u0026dma_cps=syphamo\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026tid=G-RXLL9Z7XBK\u0026cid=1184530112.1737330994\u0026gtm=45j91e51f1h1v9169491831z89137104487z99200500233za200zb9137104487\u0026tag_exp=102067555~102067808~102081485~102123608\u0026aip=1\u0026z=474999588","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:40.050Z","timestamp":1737331000050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:39:06 GMT","end":"Mon, 03 Mar 2025 08:39:05 GMT"},"fingerprint":{"sha1":"86:4E:B8:82:D3:0D:73:EE:82:65:DF:68:AB:29:6F:6C:2C:97:D2:F1","sha256":"79:30:07:29:C8:F4:30:69:5A:75:18:B3:17:7B:FF:84:4A:B5:F4:7F:65:AD:C6:CF:6B:46:E9:0F:EE:6E:25:1C"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026dma=1\u0026dma_cps=syphamo\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026tid=G-RXLL9Z7XBK\u0026cid=1184530112.1737330994\u0026gtm=45j91e51f1h1v9169491831z89137104487z99200500233za200zb9137104487\u0026tag_exp=102067555~102067808~102081485~102123608\u0026aip=1\u0026z=474999588 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 19 Jan 2025 23:56:40 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":42,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T03:45:10.728141Z","times_seen":761519,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.pmsrv.co/v2/conversion/src?a=01c6d627-6102-4850-a756-2978545ac884\u0026event=land\u0026dnt=true","fqdn":"c.pmsrv.co","domain":"pmsrv.co","tld":"co"},"ip":{"addr":"34.144.246.130","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.824Z","timestamp":1737330994824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c.pmsrv.co","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jan 2025 11:10:44 GMT","end":"Wed, 16 Apr 2025 12:04:38 GMT"},"fingerprint":{"sha1":"27:E9:F3:D2:34:68:BD:71:26:0D:5A:11:E4:40:16:E2:82:8C:7F:7D","sha256":"A7:81:B2:AA:A8:76:02:E7:07:45:B8:40:65:79:D6:58:2D:C4:5E:A4:6F:F5:CA:22:2F:4C:30:5B:DB:F5:6C:BB"}}},"request":{"raw":"GET /v2/conversion/src?a=01c6d627-6102-4850-a756-2978545ac884\u0026event=land\u0026dnt=true HTTP/1.1\r\nHost: c.pmsrv.co\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: Express\r\nset-cookie: _pmedia_opt-out=1; Max-Age=7884000; Domain=.pmsrv.co; Path=/; Expires=Mon, 21 Apr 2025 05:56:35 GMT; Secure; SameSite=None\r\ncache-control: private, no-cache, no-store, must-revalidate\r\nexpires: -1\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-type: text/javascript; charset=utf-8\r\netag: W/\"d6b-5FvrY9MCXV5zpCr/QL4U12UJSL0\"\r\ndate: Sun, 19 Jan 2025 23:56:35 GMT\r\nx-envoy-upstream-service-time: 1\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nserver: istio-envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3435,"size_decoded":3435,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3596), with no line terminators","md5":"600552c7e0bfd72a53fe9b8090bde77a","sha1":"df75f538bd3c16439d7548917512041755f423f2","sha256":"cdb8b0329cc751f85354b7d2764dd2c358f4e9b9bf2007826e3bcfc44bed9530","sha512":"34ee7aefb7bd428b90f8e57acb518fb59a5331fafae4a0524909478ba32971c1c136726479bf25e91f57a783550f4cb3cba11491a94518ba446f4dc463e299ab","ssdeep":"","tlshash":"877182e71966ed390ac5062e233fae39a0bf1c223d1e0406a549d7381f28f7127d7e91","first_seen":"2024-07-25T18:41:19Z","last_seen":"2025-03-26T03:39:34.911306Z","times_seen":391,"resource_available":false,"data":null}},"time_used":1168,"timings":{"blocked":-1,"dns":4,"connect":24,"send":0,"wait":141,"receive":0,"ssl":989},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/action/0?ti=283017207\u0026Ver=2\u0026mid=76568034-443d-474e-8588-649cd0bab0f2\u0026bo=1\u0026sid=04f74f80d6c111ef98721368d52eb43a\u0026vid=04f753c0d6c111ef8e0d55864cd1556e\u0026vids=1\u0026msclkid=N\u0026pi=918639831\u0026lg=en-US\u0026sw=1280\u0026sh=1024\u0026sc=24\u0026tl=Calculate%20New%20Payment%20-%20Start%20Here%20%7C%20Quicken%20Loans\u0026kw=refinance,%20mortgage,%20mortgages,%20refinancing,%20mortgage%20rates,%20refinance%20mortgage,%20refinance%20rates,%20refinancing%20rates,%20refinancing%20home,%20home%20loan,%20home%20loans,%20equity%20loans,%20home%20equity%20loans,%20home%20equity%20loan,%20second%20mortgage,%20home%20equity%20loan%20rates,%20credit%20card%20consolidation,%20debt%20loans,%20credit%20card%20debt%20consolidation,%20bad%20credit%20loans,%20debt%20free,%20bad%20credit,%20debt%20help,%20debt%20solutions,%20money%20management,%20credit%20card%20debt,%20personal%20loan,%20bad%20credit%20mortgage,%20mortgage%20calculator\u0026p=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_921%26pkey1%3D921%26pkey2%3D2%26pkey3%3D6aeda80d793c4e668875c6eeb310defb%26pkey%3Dbbfd82cef7884374bc46935904839e80%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D921%26_ef_transaction_id%3D6aeda80d793c4e668875c6eeb310defb%26utm_medium%3Daffiliate%26utm_source%3DJMG%2BMedia%26utm_content%3D\u0026r=\u0026lt=3253\u0026evt=pageLoad\u0026sv=1\u0026cdb=AQAQ\u0026rn=656604","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:37.219Z","timestamp":1737330997219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 08","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 15 Dec 2024 07:52:28 GMT","end":"Fri, 13 Jun 2025 07:52:28 GMT"},"fingerprint":{"sha1":"13:F1:2D:07:A9:A1:FF:DA:2B:45:DE:92:97:EF:5E:88:78:3B:C2:28","sha256":"1D:D4:DA:12:87:B3:B3:DD:94:E7:20:50:03:94:1C:53:65:85:28:F4:2E:BC:19:3A:63:42:84:83:AF:F3:90:9B"}}},"request":{"raw":"GET /action/0?ti=283017207\u0026Ver=2\u0026mid=76568034-443d-474e-8588-649cd0bab0f2\u0026bo=1\u0026sid=04f74f80d6c111ef98721368d52eb43a\u0026vid=04f753c0d6c111ef8e0d55864cd1556e\u0026vids=1\u0026msclkid=N\u0026pi=918639831\u0026lg=en-US\u0026sw=1280\u0026sh=1024\u0026sc=24\u0026tl=Calculate%20New%20Payment%20-%20Start%20Here%20%7C%20Quicken%20Loans\u0026kw=refinance,%20mortgage,%20mortgages,%20refinancing,%20mortgage%20rates,%20refinance%20mortgage,%20refinance%20rates,%20refinancing%20rates,%20refinancing%20home,%20home%20loan,%20home%20loans,%20equity%20loans,%20home%20equity%20loans,%20home%20equity%20loan,%20second%20mortgage,%20home%20equity%20loan%20rates,%20credit%20card%20consolidation,%20debt%20loans,%20credit%20card%20debt%20consolidation,%20bad%20credit%20loans,%20debt%20free,%20bad%20credit,%20debt%20help,%20debt%20solutions,%20money%20management,%20credit%20card%20debt,%20personal%20loan,%20bad%20credit%20mortgage,%20mortgage%20calculator\u0026p=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_921%26pkey1%3D921%26pkey2%3D2%26pkey3%3D6aeda80d793c4e668875c6eeb310defb%26pkey%3Dbbfd82cef7884374bc46935904839e80%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D921%26_ef_transaction_id%3D6aeda80d793c4e668875c6eeb310defb%26utm_medium%3Daffiliate%26utm_source%3DJMG%2BMedia%26utm_content%3D\u0026r=\u0026lt=3253\u0026evt=pageLoad\u0026sv=1\u0026cdb=AQAQ\u0026rn=656604 HTTP/1.1\r\nHost: bat.bing.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ncache-control: no-cache, must-revalidate\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nset-cookie: MUID=3063265B7A7F6849325033227B286993; domain=.bing.com; expires=Fri, 13-Feb-2026 23:56:37 GMT; path=/; SameSite=None; Secure; Priority=High;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 9EAFAA1A3406422CBC884D585FDFE289 Ref B: OSL30EDGE0318 Ref C: 2025-01-19T23:56:37Z\r\ndate: Sun, 19 Jan 2025 23:56:37 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","fqdn":"refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-01-19T23:56:31.758Z","timestamp":1737330991758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"refinance.quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jan 2025 23:31:57 GMT","end":"Sat, 19 Apr 2025 00:31:53 GMT"},"fingerprint":{"sha1":"CA:DC:00:08:E4:E8:98:30:E3:29:4F:78:62:53:16:CD:4B:C2:E9:A4","sha256":"53:BC:5E:71:5F:CF:07:58:BC:A4:31:9B:F5:92:34:34:69:D9:28:90:0F:B5:E5:A3:D1:1B:9E:BB:F2:F6:37:D7"}}},"request":{"raw":"GET /?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content= HTTP/1.1\r\nHost: refinance.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:32 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\ncf-cache-status: DYNAMIC\r\nset-cookie: AWSALBTG=81eaj/auj3I+x3GBkebnxQKES17tB2O/EENcP7WHylU20GJz28KoDmsDNZV3nVIWUIttH/IsYnGPRHvi6TCMOrtCdfkvc7LUHR7uOigenSgt1CEg1c6zynZgfbI7M0aHQJlXHNWiIOplnPahaK0GSOW2f2k/7LoNBmWAmuThPfajwCqp5Bg=; Expires=Sun, 26 Jan 2025 23:56:32 GMT; Path=/\nAWSALBTGCORS=81eaj/auj3I+x3GBkebnxQKES17tB2O/EENcP7WHylU20GJz28KoDmsDNZV3nVIWUIttH/IsYnGPRHvi6TCMOrtCdfkvc7LUHR7uOigenSgt1CEg1c6zynZgfbI7M0aHQJlXHNWiIOplnPahaK0GSOW2f2k/7LoNBmWAmuThPfajwCqp5Bg=; Expires=Sun, 26 Jan 2025 23:56:32 GMT; Path=/; SameSite=None; Secure\nvisitorId=6fe06897-c211-4c3f-a003-68355321c1a5; Domain=.quickenloans.com; Path=/; Expires=Mon, 19 Jan 2026 23:56:32 GMT\nvisitorId=6fe06897-c211-4c3f-a003-68355321c1a5; Path=/; Expires=Mon, 19 Jan 2026 23:56:32 GMT\ncontentTarget=%7B%22moid%22%3A%22322646%22%2C%22sourceId%22%3A%22affl_everflow_ql-lre_165_921%22%7D; Path=/; Expires=Sun, 26 Jan 2025 23:56:32 GMT\n__cf_bm=z_Ecw8895AezetC.tRDhIO282Cn_tuThOBQE5pkWp34-1737330992-1.0.1.1-2b7xIuFXo5ebz5G3Ggz3IJSwTtmPN4Tfn7fA0aKRzTW8ReqwoIiWHuvpCf.RXA6rdiekgmcuhXEWsPyTP0YLHQ; path=/; expires=Mon, 20-Jan-25 00:26:32 GMT; domain=.refinance.quickenloans.com; HttpOnly; Secure; SameSite=None\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\"\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 904ac30a9f8f0b41-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117579,"size_decoded":117579,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":1050,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":1006,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackpixel.refinance.quickenloans.com/msql-lre/pixel.js","fqdn":"trackpixel.refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:33.034Z","timestamp":1737330993034,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"refinance.quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Dec 2024 23:31:14 GMT","end":"Tue, 18 Mar 2025 00:31:12 GMT"},"fingerprint":{"sha1":"D5:B9:5B:F3:73:A5:16:58:B2:9E:98:16:66:90:7F:C8:B6:19:B4:CC","sha256":"1C:E0:0B:77:90:A5:65:AB:B2:F0:6B:3D:B8:56:88:CC:BE:BE:8E:B9:DE:C3:5E:E1:C0:72:74:F0:9C:68:D7:5C"}}},"request":{"raw":"GET /msql-lre/pixel.js HTTP/1.1\r\nHost: trackpixel.refinance.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nCookie: visitorId=6fe06897-c211-4c3f-a003-68355321c1a5; __cf_bm=z_Ecw8895AezetC.tRDhIO282Cn_tuThOBQE5pkWp34-1737330992-1.0.1.1-2b7xIuFXo5ebz5G3Ggz3IJSwTtmPN4Tfn7fA0aKRzTW8ReqwoIiWHuvpCf.RXA6rdiekgmcuhXEWsPyTP0YLHQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:33 GMT\r\ncontent-type: application/javascript\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Fri, 13 Dec 2024 18:50:47 GMT\r\netag: W/\"a335369f8c20f2d323213029892b43d0\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-website-redirect-location: /msql-lre/pixel-a4430dafe2716675c1f5.js\r\nx-amz-version-id: 2Qx8BacLFnc91Q48XWhop2jkShzDjva7\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 96a0de993ee2fd445cf370379abafd8e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ZRH55-P2\r\nx-amz-cf-id: Dh2Rfz1IOA5ofnUDgJwEH0XeS0AT_Hl0vsA7E9X9d9MOS_PdBmYj1g==\r\ncf-cache-status: HIT\r\nage: 4670\r\nexpires: Mon, 20 Jan 2025 03:56:33 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 904ac3129a3d568e-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":411,"size_decoded":411,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (429), with no line terminators","md5":"2738266c8b6269aacd955e1b7a3f9d6c","sha1":"bce6679be0b2d3c41723e3d978eb3e45d8ac1c10","sha256":"30fe536cb79088ea78b399453cf1ac42764ba2b90a45b9bbc1d2026a00a48ae3","sha512":"6b8956da1bcc09e2c10581d474de588338648e34e3eda0149dc0339cbdbd5b07d1da2f52fe4708b771cae8ee8f5dcf0debdf720d4eb1e1788aaf8c7ff75a2dde","ssdeep":"","tlshash":"70e0a30b2d19fc3045565fb945f0e184257127386e31d3207c4c80135b90fda18a0cf4","first_seen":"2024-11-30T19:27:53.056442Z","last_seen":"2025-02-23T20:24:47.72051Z","times_seen":146,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":20,"dns":3,"connect":1,"send":0,"wait":24,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sgtm.quickenloans.com/g/collect?v=2\u0026tid=G-RXLL9Z7XBK\u0026gtm=45je51g0v9169491831z89137104487za200zb9137104487\u0026_p=1737330993857\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102067555~102067808~102081485~102123608\u0026cid=1184530112.1737330994\u0026ecid=1434330028\u0026ul=en-us\u0026sr=1280x1024\u0026_fplc=0\u0026ur=NO-03\u0026frm=0\u0026pscdl=noapi\u0026sst.etld=google.no\u0026sst.gcsub=region1\u0026sst.tft=1737330993857\u0026sst.lpc=201324589\u0026sst.navt=n\u0026sst.ude=0\u0026_s=1\u0026sid=1737330994\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_921%26pkey1%3D921%26pkey2%3D2%26pkey3%3D6aeda80d793c4e668875c6eeb310defb%26pkey%3Dbbfd82cef7884374bc46935904839e80%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D921%26_ef_transaction_id%3D6aeda80d793c4e668875c6eeb310defb%26utm_medium%3Daffiliate%26utm_source%3DJMG%2BMedia%26utm_content%3D\u0026dt=Refinance%20Mortgage%2C%20Refinancing%20Rates%2C%20Mortgage%20Rates\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=3536\u0026richsstsse","fqdn":"sgtm.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"216.239.32.21","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.537Z","timestamp":1737330994537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgtm.quickenloans.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jan 2025 03:01:04 GMT","end":"Thu, 17 Apr 2025 03:49:35 GMT"},"fingerprint":{"sha1":"A4:3B:BA:71:91:37:C1:92:66:7D:A6:C2:34:01:17:02:2F:53:B4:3B","sha256":"BC:07:C1:D6:65:9B:A0:69:0A:80:66:02:82:20:8C:BD:AA:8F:4D:C4:2A:10:43:23:06:24:B3:1B:D4:04:86:1E"}}},"request":{"raw":"GET /g/collect?v=2\u0026tid=G-RXLL9Z7XBK\u0026gtm=45je51g0v9169491831z89137104487za200zb9137104487\u0026_p=1737330993857\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102067555~102067808~102081485~102123608\u0026cid=1184530112.1737330994\u0026ecid=1434330028\u0026ul=en-us\u0026sr=1280x1024\u0026_fplc=0\u0026ur=NO-03\u0026frm=0\u0026pscdl=noapi\u0026sst.etld=google.no\u0026sst.gcsub=region1\u0026sst.tft=1737330993857\u0026sst.lpc=201324589\u0026sst.navt=n\u0026sst.ude=0\u0026_s=1\u0026sid=1737330994\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_921%26pkey1%3D921%26pkey2%3D2%26pkey3%3D6aeda80d793c4e668875c6eeb310defb%26pkey%3Dbbfd82cef7884374bc46935904839e80%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D921%26_ef_transaction_id%3D6aeda80d793c4e668875c6eeb310defb%26utm_medium%3Daffiliate%26utm_source%3DJMG%2BMedia%26utm_content%3D\u0026dt=Refinance%20Mortgage%2C%20Refinancing%20Rates%2C%20Mortgage%20Rates\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=3536\u0026richsstsse HTTP/1.1\r\nHost: sgtm.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://refinance.quickenloans.com/\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visitorId=6fe06897-c211-4c3f-a003-68355321c1a5; _gcl_au=1.1.1441864768.1737330994; _ga_RXLL9Z7XBK=GS1.1.1737330994.1.0.1737330994.0.0.1434330028; _ga=GA1.1.1184530112.1737330994\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: FPID=FPID2.2.2d8TxAeOLCcvz%2BCoq7PI632ayuH69bY%2B4DsVqHnOFbU%3D.1737330994; Max-Age=63072000; Domain=quickenloans.com; Path=/; Secure; HttpOnly\nFPLC=r%2BFffad9kQXo8EhEqWp6RrHNRTamXqz%2FH4ru%2FKhMo3ajKq0VYxMw4l5YY00iKdsEx8cIP7wv6IWjQuxeVxwxNYtGpwSr8TwgTj4HvgypFvngsJK6OR12lUvKoYOc6A%3D%3D; Max-Age=72000; Domain=quickenloans.com; Path=/; Secure\nFPAU=1.1.1441864768.1737330994; Max-Age=7775999; Domain=quickenloans.com; Path=/; Secure\nFPGSID=1.1737330994.1737330994.G-RXLL9Z7XBK.1Ng40wuWe9QZdWOBIHlHdg; Max-Age=1800; Domain=quickenloans.com; Path=/; SameSite=strict; Secure\r\ncache-control: no-cache\r\ncontent-type: text/plain\r\nx-content-type-options: nosniff\r\nx-accel-buffering: no\r\naccess-control-allow-origin: https://refinance.quickenloans.com\r\naccess-control-allow-credentials: true\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\nserver: Google Frontend\r\nexpires: Sun, 19 Jan 2025 23:56:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1020,"size_decoded":1020,"mime_type":"text/plain","magic":"ASCII text, with very long lines (1058), with no line terminators","md5":"ce365e09b89a45fa125b37840862f588","sha1":"9520a05daf78e2e800d8536b70272019a422457f","sha256":"28f09b9ed4045cc157d17b8df0f9b3e65821ee4105fc2cc8e7dc370febff4e6a","sha512":"7417966f0f204fd57d9be5cf2553e64b3f3d89db0366e2483231402fdae5b358cb34424498be63ee16097724b571dc74f042979aad1322a34eb5f3150e753bcb","ssdeep":"","tlshash":"f9111f97bc034b2ba6ff505001be3cba9a7a3ba50111411c9a981fcc49009d7b24ebe9","first_seen":"2025-01-19T23:57:07.316882Z","last_seen":"2025-01-19T23:57:07.316882Z","times_seen":1,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":115,"dns":1,"connect":8,"send":0,"wait":181,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackpixel.refinance.quickenloans.com/msql-lre/pixel-a4430dafe2716675c1f5.js","fqdn":"trackpixel.refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:33.671Z","timestamp":1737330993671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"refinance.quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Dec 2024 23:31:14 GMT","end":"Tue, 18 Mar 2025 00:31:12 GMT"},"fingerprint":{"sha1":"D5:B9:5B:F3:73:A5:16:58:B2:9E:98:16:66:90:7F:C8:B6:19:B4:CC","sha256":"1C:E0:0B:77:90:A5:65:AB:B2:F0:6B:3D:B8:56:88:CC:BE:BE:8E:B9:DE:C3:5E:E1:C0:72:74:F0:9C:68:D7:5C"}}},"request":{"raw":"GET /msql-lre/pixel-a4430dafe2716675c1f5.js HTTP/1.1\r\nHost: trackpixel.refinance.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nCookie: visitorId=6fe06897-c211-4c3f-a003-68355321c1a5; __cf_bm=z_Ecw8895AezetC.tRDhIO282Cn_tuThOBQE5pkWp34-1737330992-1.0.1.1-2b7xIuFXo5ebz5G3Ggz3IJSwTtmPN4Tfn7fA0aKRzTW8ReqwoIiWHuvpCf.RXA6rdiekgmcuhXEWsPyTP0YLHQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:33 GMT\r\ncontent-type: application/javascript\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 09 Jan 2025 12:35:44 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: NQ.psh45nZLOM3.2jelyBxtUe0xfmxq9\r\netag: W/\"e39ef9df180cf8eb9d8d28deb76708be\"\r\nvary: accept-encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 ad3a844607df41a7152eab5ebe6e4056.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: FRA56-P9\r\nx-amz-cf-id: 09ryxxY6bTc7JRr2KB47q3y4qwYmjXdvK8DI7xjPaTYo4Ewl5KtmFA==\r\ncf-cache-status: HIT\r\nage: 4669\r\nexpires: Mon, 20 Jan 2025 03:56:33 GMT\r\ncache-control: public, max-age=14400\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 904ac3166c3c568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":207501,"size_decoded":207501,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65452)","md5":"e39ef9df180cf8eb9d8d28deb76708be","sha1":"179ec7c00e3b9c08f4f12be668eca8cfafc94b49","sha256":"b10c96a3927d805e28126c77c2c23197605b143f9f285a727f320f2d23f80eae","sha512":"daac72982e2f61835fb5e18381c6d0a5c62687bc4e5409f4a851687e38c5cee1569b981a70bb73d2974836fb2fdf75b2e223555d96e81bb6b75a91fe96498927","ssdeep":"1536:4V5u7V4BYGgDyotdTR/bzuJhEoxbZDFSiqi1YNEsSGug+IUZrEEJXUezExMng9Mc:4V5G4ZgFzKt3afsIUTg8eTGvWt","tlshash":"d414b76877d5f9f98d8231e4703fe606f12e35116020d084e8ecd499ad76dd788a3bba","first_seen":"2024-11-30T19:27:53.077854Z","last_seen":"2025-02-24T01:52:09.132675Z","times_seen":307,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sgtm.quickenloans.com/g/collect?v=2\u0026tid=G-RXLL9Z7XBK\u0026gtm=45je51g0v9169491831z89137104487za200zb9137104487\u0026_p=1737330993857\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102067555~102067808~102081485~102123608\u0026cid=1184530112.1737330994\u0026ecid=1434330028\u0026ul=en-us\u0026sr=1280x1024\u0026_fplc=0\u0026ur=NO-03\u0026frm=0\u0026pscdl=noapi\u0026sst.etld=google.no\u0026sst.gcsub=region1\u0026sst.tft=1737330993857\u0026sst.lpc=201324589\u0026sst.navt=n\u0026sst.ude=0\u0026_s=4\u0026dl=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_921%26pkey1%3D921%26pkey2%3D2%26pkey3%3D6aeda80d793c4e668875c6eeb310defb%26pkey%3Dbbfd82cef7884374bc46935904839e80%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D921%26_ef_transaction_id%3D6aeda80d793c4e668875c6eeb310defb%26utm_medium%3Daffiliate%26utm_source%3DJMG%2BMedia%26utm_content%3D\u0026sid=1737330994\u0026sct=1\u0026seg=1\u0026dt=Refinance%20Mortgage%2C%20Refinancing%20Rates%2C%20Mortgage%20Rates\u0026en=cdm-visitor\u0026ep.visitorid=6fe06897-c211-4c3f-a003-68355321c1a5\u0026ep.clickid=e598c9a0-61c6-5038-bcb9-b901393cb55e\u0026ep.ga_user_id=1184530112.1737330994\u0026tfd=8842\u0026richsstsse","fqdn":"sgtm.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"216.239.32.21","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:39.845Z","timestamp":1737330999845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgtm.quickenloans.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jan 2025 03:01:04 GMT","end":"Thu, 17 Apr 2025 03:49:35 GMT"},"fingerprint":{"sha1":"A4:3B:BA:71:91:37:C1:92:66:7D:A6:C2:34:01:17:02:2F:53:B4:3B","sha256":"BC:07:C1:D6:65:9B:A0:69:0A:80:66:02:82:20:8C:BD:AA:8F:4D:C4:2A:10:43:23:06:24:B3:1B:D4:04:86:1E"}}},"request":{"raw":"GET /g/collect?v=2\u0026tid=G-RXLL9Z7XBK\u0026gtm=45je51g0v9169491831z89137104487za200zb9137104487\u0026_p=1737330993857\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102067555~102067808~102081485~102123608\u0026cid=1184530112.1737330994\u0026ecid=1434330028\u0026ul=en-us\u0026sr=1280x1024\u0026_fplc=0\u0026ur=NO-03\u0026frm=0\u0026pscdl=noapi\u0026sst.etld=google.no\u0026sst.gcsub=region1\u0026sst.tft=1737330993857\u0026sst.lpc=201324589\u0026sst.navt=n\u0026sst.ude=0\u0026_s=4\u0026dl=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_921%26pkey1%3D921%26pkey2%3D2%26pkey3%3D6aeda80d793c4e668875c6eeb310defb%26pkey%3Dbbfd82cef7884374bc46935904839e80%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D921%26_ef_transaction_id%3D6aeda80d793c4e668875c6eeb310defb%26utm_medium%3Daffiliate%26utm_source%3DJMG%2BMedia%26utm_content%3D\u0026sid=1737330994\u0026sct=1\u0026seg=1\u0026dt=Refinance%20Mortgage%2C%20Refinancing%20Rates%2C%20Mortgage%20Rates\u0026en=cdm-visitor\u0026ep.visitorid=6fe06897-c211-4c3f-a003-68355321c1a5\u0026ep.clickid=e598c9a0-61c6-5038-bcb9-b901393cb55e\u0026ep.ga_user_id=1184530112.1737330994\u0026tfd=8842\u0026richsstsse HTTP/1.1\r\nHost: sgtm.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://refinance.quickenloans.com/\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visitorId=6fe06897-c211-4c3f-a003-68355321c1a5; _gcl_au=1.1.1441864768.1737330994; _ga_RXLL9Z7XBK=GS1.1.1737330994.1.1.1737330994.0.0.1434330028; _ga=GA1.1.1184530112.1737330994; FPID=FPID2.2.2d8TxAeOLCcvz%2BCoq7PI632ayuH69bY%2B4DsVqHnOFbU%3D.1737330994; FPLC=1%2B9dx%2F%2FNfmSn4dmAxz21FeL1n13kiyYVSiOBbZRJTgpHxD9Q3SczPNTtlzlEqAaO2jdDuAE%2Bd4Dsl0g20F1dxSi8DROefvdM0HToYoUs7PkDxQFsxLkdvGD4zgxZTA%3D%3D; FPAU=1.1.1441864768.1737330994; FPGSID=1.1737330994.1737330994.G-RXLL9Z7XBK.Inb7FW97vF33z6eiqN3UQQ; _scid=3stgwjBPMH2xtW8R6Tx2Tv7QLE7NfLOj; _scid_r=3stgwjBPMH2xtW8R6Tx2Tv7QLE7NfLOj; ndp_session_id=f1857d99-c610-479b-a795-07f053d8b39e; ef_witness=1; ef_affid=921; ef_tid_c_o_165=6aeda80d793c4e668875c6eeb310defb; ef_tid_c_a_1=6aeda80d793c4e668875c6eeb310defb; _uetsid=04f74f80d6c111ef98721368d52eb43a; _uetvid=04f753c0d6c111ef8e0d55864cd1556e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: FPID=FPID2.2.2d8TxAeOLCcvz%2BCoq7PI632ayuH69bY%2B4DsVqHnOFbU%3D.1737330994; Max-Age=63072000; Domain=quickenloans.com; Path=/; Secure; HttpOnly\nFPLC=M5hEprJJW8lwXYOlu2l8AVs5rNJy2vDhL5c3RNaopgwiuXxJfxBOmRHwt%2BUZzI8Aw0txHfEQTV2Y6kkLVnJvvf4uA1w1OLoVGWPn%2FcLozOblR8laD0nQGohMcANemw%3D%3D; Max-Age=72000; Domain=quickenloans.com; Path=/; Secure\r\ncache-control: no-cache\r\ncontent-type: text/plain\r\nx-content-type-options: nosniff\r\nx-accel-buffering: no\r\naccess-control-allow-origin: https://refinance.quickenloans.com\r\naccess-control-allow-credentials: true\r\ndate: Sun, 19 Jan 2025 23:56:39 GMT\r\nserver: Google Frontend\r\nexpires: Sun, 19 Jan 2025 23:56:39 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":404,"size_decoded":404,"mime_type":"text/plain","magic":"ASCII text, with very long lines (424), with no line terminators","md5":"5856b1eebb20b1b83909f74bdf619f26","sha1":"dd9a4f7ba646c97d4144745f81256d71ba249712","sha256":"960ff1ef9f32e2beb05124fc804f0580b50d81d33684b0da0b2f326a56609851","sha512":"3d9249a4f77d5c354f5fcf7bd976ff124ade90746efe07c8ee7e76798cf708db0b3d4567035dbf38742f065240c423742470b6b1a871fa45c807896fea8a3e21","ssdeep":"","tlshash":"b7e0a3876c034e076aff84a5107d7866e9b677644251010489e81fcc19004d2b2096d5","first_seen":"2025-01-19T23:57:07.319424Z","last_seen":"2025-01-19T23:57:07.319424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script.anura.io/request.js?instance=3439535758\u0026exid=e598c9a0-61c6-5038-bcb9-b901393cb55e\u0026source=affl_everflow_ql-lre_165_921\u0026campaign=2\u0026708909439396","fqdn":"script.anura.io","domain":"anura.io","tld":"io"},"ip":{"addr":"18.132.34.251","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:35.275Z","timestamp":1737330995275,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script.anura.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 15 Sep 2024 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"CC:B4:48:82:BF:CC:04:FB:C7:35:8F:3F:D3:69:3F:10:96:9A:EF:C8","sha256":"3E:61:7E:69:03:E5:91:70:F0:A4:74:33:2C:72:68:4F:62:6E:75:4C:6A:B9:74:FA:4E:DA:32:67:90:0A:96:59"}}},"request":{"raw":"GET /request.js?instance=3439535758\u0026exid=e598c9a0-61c6-5038-bcb9-b901393cb55e\u0026source=affl_everflow_ql-lre_165_921\u0026campaign=2\u0026708909439396 HTTP/1.1\r\nHost: script.anura.io\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nvary: Accept-Encoding\r\nexpires: Sun, 28 Dec 1980 18:57:00 EST\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77295,"size_decoded":77295,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2089)","md5":"a853082932bb804df1fc84a72058623b","sha1":"03aaddf41d3e5bb85338ad16c1247f0fbac4d955","sha256":"f7148146abdefb162dd8cbd0d8c17857add0ba6eeba8006e827430b4234aa2f3","sha512":"705f4da5ac96246ce3efde6c9de5a201a4fe089ffb63c78e2c7944d60be84223364d10a552ac350df0b79251784985bd407400ac9c0cfa4eab9c1b509aceb197","ssdeep":"1536:ILa67Z2Ttj43Xkb0+GMwzGEVUCb1O5nzr4zLAADC2eAWpyW:ILaOZcC3kL5Fd","tlshash":"dc73f8da7622f01109a221e8627f060ff37a1b74799c5450d7a5ccf428b4d8f8a3af9d","first_seen":"2025-01-19T23:57:07.321023Z","last_seen":"2025-01-19T23:57:07.321023Z","times_seen":1,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":104,"dns":4,"connect":33,"send":0,"wait":60,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/action/0?ti=247005605\u0026Ver=2\u0026mid=313ff291-086a-4f74-803e-5e1d454d0b46\u0026bo=1\u0026sid=04f74f80d6c111ef98721368d52eb43a\u0026vid=04f753c0d6c111ef8e0d55864cd1556e\u0026vids=0\u0026msclkid=N\u0026pi=918639831\u0026lg=en-US\u0026sw=1280\u0026sh=1024\u0026sc=24\u0026tl=Calculate%20New%20Payment%20-%20Start%20Here%20%7C%20Quicken%20Loans\u0026kw=refinance,%20mortgage,%20mortgages,%20refinancing,%20mortgage%20rates,%20refinance%20mortgage,%20refinance%20rates,%20refinancing%20rates,%20refinancing%20home,%20home%20loan,%20home%20loans,%20equity%20loans,%20home%20equity%20loans,%20home%20equity%20loan,%20second%20mortgage,%20home%20equity%20loan%20rates,%20credit%20card%20consolidation,%20debt%20loans,%20credit%20card%20debt%20consolidation,%20bad%20credit%20loans,%20debt%20free,%20bad%20credit,%20debt%20help,%20debt%20solutions,%20money%20management,%20credit%20card%20debt,%20personal%20loan,%20bad%20credit%20mortgage,%20mortgage%20calculator\u0026p=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_921%26pkey1%3D921%26pkey2%3D2%26pkey3%3D6aeda80d793c4e668875c6eeb310defb%26pkey%3Dbbfd82cef7884374bc46935904839e80%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D921%26_ef_transaction_id%3D6aeda80d793c4e668875c6eeb310defb%26utm_medium%3Daffiliate%26utm_source%3DJMG%2BMedia%26utm_content%3D\u0026r=\u0026lt=3253\u0026evt=pageLoad\u0026sv=1\u0026cdb=AQAQ\u0026rn=820456","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:37.226Z","timestamp":1737330997226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 08","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 15 Dec 2024 07:52:28 GMT","end":"Fri, 13 Jun 2025 07:52:28 GMT"},"fingerprint":{"sha1":"13:F1:2D:07:A9:A1:FF:DA:2B:45:DE:92:97:EF:5E:88:78:3B:C2:28","sha256":"1D:D4:DA:12:87:B3:B3:DD:94:E7:20:50:03:94:1C:53:65:85:28:F4:2E:BC:19:3A:63:42:84:83:AF:F3:90:9B"}}},"request":{"raw":"GET /action/0?ti=247005605\u0026Ver=2\u0026mid=313ff291-086a-4f74-803e-5e1d454d0b46\u0026bo=1\u0026sid=04f74f80d6c111ef98721368d52eb43a\u0026vid=04f753c0d6c111ef8e0d55864cd1556e\u0026vids=0\u0026msclkid=N\u0026pi=918639831\u0026lg=en-US\u0026sw=1280\u0026sh=1024\u0026sc=24\u0026tl=Calculate%20New%20Payment%20-%20Start%20Here%20%7C%20Quicken%20Loans\u0026kw=refinance,%20mortgage,%20mortgages,%20refinancing,%20mortgage%20rates,%20refinance%20mortgage,%20refinance%20rates,%20refinancing%20rates,%20refinancing%20home,%20home%20loan,%20home%20loans,%20equity%20loans,%20home%20equity%20loans,%20home%20equity%20loan,%20second%20mortgage,%20home%20equity%20loan%20rates,%20credit%20card%20consolidation,%20debt%20loans,%20credit%20card%20debt%20consolidation,%20bad%20credit%20loans,%20debt%20free,%20bad%20credit,%20debt%20help,%20debt%20solutions,%20money%20management,%20credit%20card%20debt,%20personal%20loan,%20bad%20credit%20mortgage,%20mortgage%20calculator\u0026p=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_921%26pkey1%3D921%26pkey2%3D2%26pkey3%3D6aeda80d793c4e668875c6eeb310defb%26pkey%3Dbbfd82cef7884374bc46935904839e80%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D921%26_ef_transaction_id%3D6aeda80d793c4e668875c6eeb310defb%26utm_medium%3Daffiliate%26utm_source%3DJMG%2BMedia%26utm_content%3D\u0026r=\u0026lt=3253\u0026evt=pageLoad\u0026sv=1\u0026cdb=AQAQ\u0026rn=820456 HTTP/1.1\r\nHost: bat.bing.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ncache-control: no-cache, must-revalidate\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nset-cookie: MUID=037842FEC5D863B73D555787C48F6273; domain=.bing.com; expires=Fri, 13-Feb-2026 23:56:37 GMT; path=/; SameSite=None; Secure; Priority=High;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: A1E03A68DBD24305AF11D8E25FE323A5 Ref B: OSL30EDGE0318 Ref C: 2025-01-19T23:56:37Z\r\ndate: Sun, 19 Jan 2025 23:56:37 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-msql-prod.refinance.quickenloans.com/main.bf7600f7f2427f73dfea.css","fqdn":"static-msql-prod.refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:33.030Z","timestamp":1737330993030,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"refinance.quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Dec 2024 23:31:14 GMT","end":"Tue, 18 Mar 2025 00:31:12 GMT"},"fingerprint":{"sha1":"D5:B9:5B:F3:73:A5:16:58:B2:9E:98:16:66:90:7F:C8:B6:19:B4:CC","sha256":"1C:E0:0B:77:90:A5:65:AB:B2:F0:6B:3D:B8:56:88:CC:BE:BE:8E:B9:DE:C3:5E:E1:C0:72:74:F0:9C:68:D7:5C"}}},"request":{"raw":"GET /main.bf7600f7f2427f73dfea.css HTTP/1.1\r\nHost: static-msql-prod.refinance.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nCookie: visitorId=6fe06897-c211-4c3f-a003-68355321c1a5; __cf_bm=z_Ecw8895AezetC.tRDhIO282Cn_tuThOBQE5pkWp34-1737330992-1.0.1.1-2b7xIuFXo5ebz5G3Ggz3IJSwTtmPN4Tfn7fA0aKRzTW8ReqwoIiWHuvpCf.RXA6rdiekgmcuhXEWsPyTP0YLHQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:33 GMT\r\ncontent-type: text/css\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Fri, 10 Jan 2025 11:57:14 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ItJ.PXFW06n0JBUSVNXLJ2LeZ1wOAW.8\r\netag: W/\"2036fd8adec819b8fd14de8881bad803\"\r\nvary: accept-encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 8576ee57c8a84a61190d4c1b31b69a90.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: FRA56-P12\r\nx-amz-cf-id: cvMil46b2bJBlWEyjS1zD3UZAuWDVuU-xmdXYXQnmpgBqwujiy5UCA==\r\ncf-cache-status: HIT\r\nage: 4670\r\nexpires: Mon, 20 Jan 2025 03:56:33 GMT\r\ncache-control: public, max-age=14400\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 904ac3128a35568e-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":451367,"size_decoded":451367,"mime_type":"text/css","magic":"ASCII text, with very long lines (306)","md5":"2036fd8adec819b8fd14de8881bad803","sha1":"79de5fde74732173eba670539e1917e3832afb69","sha256":"c902fa813d08889b6526f8c54a2efecfb2c8907c602e67e15da1c821d1e96bf2","sha512":"ffbaed81c36cd18cbbbc3665963cb11b01d2a87af838c0e9277801414ac9819d81797b95ac6f3e25053ca6fb40c92d058f50f4b38ce67fd8848e80f831ead412","ssdeep":"12288:F6qBSGPWEUPFXdaFgRt8D6JWqqoaWGPWEUPFXdaowk8xnvzHnqZWN8+l9UP6KQsk:aEUPFXdawEUPFXdarxnCWlfb","tlshash":"39a483976f660264b4aa88ac7a629b443b19d003a50ecdf9bfe1f42ccfc51d95533b4c","first_seen":"2025-01-17T20:04:25.245256Z","last_seen":"2025-02-12T04:57:24.075604Z","times_seen":27,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":30,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.refinance.quickenloans.com/msql/Testimonial_Stars_-_LMB_LRE_FNL_00015.png","fqdn":"content.refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.12.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.608Z","timestamp":1737330994608,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"refinance.quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Dec 2024 23:31:14 GMT","end":"Tue, 18 Mar 2025 00:31:12 GMT"},"fingerprint":{"sha1":"D5:B9:5B:F3:73:A5:16:58:B2:9E:98:16:66:90:7F:C8:B6:19:B4:CC","sha256":"1C:E0:0B:77:90:A5:65:AB:B2:F0:6B:3D:B8:56:88:CC:BE:BE:8E:B9:DE:C3:5E:E1:C0:72:74:F0:9C:68:D7:5C"}}},"request":{"raw":"GET /msql/Testimonial_Stars_-_LMB_LRE_FNL_00015.png HTTP/1.1\r\nHost: content.refinance.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nCookie: visitorId=6fe06897-c211-4c3f-a003-68355321c1a5; __cf_bm=z_Ecw8895AezetC.tRDhIO282Cn_tuThOBQE5pkWp34-1737330992-1.0.1.1-2b7xIuFXo5ebz5G3Ggz3IJSwTtmPN4Tfn7fA0aKRzTW8ReqwoIiWHuvpCf.RXA6rdiekgmcuhXEWsPyTP0YLHQ; _gcl_au=1.1.1441864768.1737330994; _ga_RXLL9Z7XBK=GS1.1.1737330994.1.1.1737330994.0.0.1434330028; _ga=GA1.1.1184530112.1737330994\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 551\r\nlast-modified: Tue, 19 Nov 2024 19:24:45 GMT\r\netag: \"90732fd581b4624530c995d70d3f17a8\"\r\nx-amz-server-side-encryption: AES256\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b9405133020ea1cce14956974a60b428.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: HEL51-P5\r\nx-amz-cf-id: oWnUtO0VwFPXpj31eWCzMddzze57KOyeBtyAlVHT7lyCKrMQ7sDf8g==\r\ncf-cache-status: HIT\r\nage: 4669\r\nexpires: Mon, 20 Jan 2025 03:56:34 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 904ac31c4f58568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":551,"size_decoded":551,"mime_type":"image/png","magic":"PNG image data, 100 x 20, 8-bit/color RGBA, non-interlaced","md5":"90732fd581b4624530c995d70d3f17a8","sha1":"6704549936ece70f840129dcca57a5e56ff0cac5","sha256":"8bda4c30752b1529c25cf00cc9049534a89ad2428ed35c5000038ea81a08be6a","sha512":"19ceeedea5ca7ad8aec33b01982ff41400e2a12728a590f0c766d61947634b570c844ed2d7548c20622e7de4c56e3f05b8ed4f9833e96bf34e1036ef9b1a2a96","ssdeep":"","tlshash":"41f026b6ba1525d9d5114db2f385b83641788e53f71537c01638e137445e15f16c31ce","first_seen":"2023-04-11T15:03:55Z","last_seen":"2026-03-28T09:26:00.978986Z","times_seen":729,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.datadoghq-browser-agent.com/datadog-rum-v3.js","fqdn":"www.datadoghq-browser-agent.com","domain":"datadoghq-browser-agent.com","tld":"com"},"ip":{"addr":"54.230.219.234","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:33.873Z","timestamp":1737330993873,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.datadoghq-browser-agent.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 30 Jul 2024 00:00:00 GMT","end":"Sun, 03 Aug 2025 23:59:59 GMT"},"fingerprint":{"sha1":"9E:40:A3:B8:F8:5F:43:15:5B:BB:AF:99:5C:07:D1:39:23:59:1F:51","sha256":"9E:94:B0:43:B8:3D:8C:25:A2:10:33:68:AF:90:3F:45:99:72:69:6F:DE:40:C6:CE:5A:EF:F7:19:08:2C:EE:6E"}}},"request":{"raw":"GET /datadog-rum-v3.js HTTP/1.1\r\nHost: www.datadoghq-browser-agent.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Jan 2022 16:36:14 GMT\r\ncontent-encoding: br\r\nserver: AmazonS3\r\ndate: Sun, 19 Jan 2025 23:56:28 GMT\r\ncache-control: max-age=14400, s-maxage=60\r\netag: W/\"647fda9a4d3d74344732d76cf1fff47c\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 1lUnfqiW4SLpp4JHxyHf-oiuBuQNmXehku1IIAGBmGYcSlZe3wVf6w==\r\nage: 34\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117677,"size_decoded":117677,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"647fda9a4d3d74344732d76cf1fff47c","sha1":"01720d421ce3373f1a1958a1d85edfae5ab5f442","sha256":"4375ebb4771e6dbb66555214b78781f96a3f6fc43f26b6e9acc4a4751551706b","sha512":"7a3c35cb75c6387a8c4f4359287cdad42c5722b7c1362c8189f8ef3d36f1f7642453ca830bf7b315f79947b384034d216e165b5b8b4f79a7596db760ceb86cad","ssdeep":"1536:yHOG/ZzSpabEJ1No/5612iRFDQ+0WVN83fIXDVeAr0tRoBAb3KrFgQn:wPIswXDVeA5Ab6rrn","tlshash":"2bb3e5dcf6c2b07517e33475516f260ab33a2954784a80a4e27ad1d53cb868ea237f7c","first_seen":"2023-03-07T13:55:13Z","last_seen":"2026-04-03T21:22:30.140755Z","times_seen":1525,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":6,"dns":0,"connect":1,"send":0,"wait":3,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.revjet.com/analytics?acu=3394","fqdn":"ads.revjet.com","domain":"revjet.com","tld":"com"},"ip":{"addr":"95.217.226.37","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.700Z","timestamp":1737330994700,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.revjet.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 27 Mar 2024 15:07:52 GMT","end":"Mon, 28 Apr 2025 15:07:51 GMT"},"fingerprint":{"sha1":"0E:71:7D:61:21:D7:17:24:58:A8:F0:08:54:78:24:CC:DA:BE:84:FB","sha256":"20:5E:CE:20:FA:06:A5:76:53:4F:98:D0:06:27:72:0E:52:9B:4D:6C:A7:7F:C5:11:47:02:D8:93:B3:F1:95:C8"}}},"request":{"raw":"GET /analytics?acu=3394 HTTP/1.1\r\nHost: ads.revjet.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 26 Nov 2024 10:35:25 GMT\r\netag: W/\"6745a46d-4c14\"\r\nexpires: Mon, 20 Jan 2025 00:06:34 GMT\r\ncache-control: max-age=600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19476,"size_decoded":19476,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1311)","md5":"26ec352468322f70910e03feb9b8b8fb","sha1":"18878e8adcd809ad7a4850c8698efd24b22c04e5","sha256":"2d84cdbfaf9b2bc0ba30bc5f67e45d03b265b52c3cfe24353e09175b1fb0fdfb","sha512":"9b0d180ab85748c8e16701d2ab1603c9be6aaef8e481574d3b35152f9f134e66c07a4620101e23044c1a07c458b7aa02cfac1474089e44ba262eec85283aa0bc","ssdeep":"384:S7NAWyKtqOLyN59yqK+VDSvNjHwAcOOStnW/np:S5w0sq9+5S1LwARFmp","tlshash":"d892d68cba65b426876330b1617f560f723ba46fb884c8a4a184d8e17c7496d427bf6c","first_seen":"2023-03-12T09:30:56Z","last_seen":"2025-11-04T04:39:00.128265Z","times_seen":729,"resource_available":true,"data":null}},"time_used":593,"timings":{"blocked":243,"dns":24,"connect":86,"send":0,"wait":91,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto+Slab:wght@100;200;300;400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:33.204Z","timestamp":1737330993204,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:37:20 GMT","end":"Mon, 03 Mar 2025 08:37:19 GMT"},"fingerprint":{"sha1":"40:E7:4C:FA:6D:23:B6:A9:19:0C:67:77:3A:43:22:D0:A4:CE:49:24","sha256":"06:52:12:65:60:CA:7F:5D:E6:72:0C:26:3B:A8:C5:A9:51:68:4D:2C:E4:2D:0C:4E:F7:63:D2:99:8C:AE:D8:06"}}},"request":{"raw":"GET /css2?family=Roboto+Slab:wght@100;200;300;400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static-msql-prod.refinance.quickenloans.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 19 Jan 2025 23:56:33 GMT\r\ndate: Sun, 19 Jan 2025 23:56:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12425,"size_decoded":12425,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7e76491e9165e2e4a3dbc190117e816c","sha1":"894246ee69ad53dddce689dda1ba6c93915b79e3","sha256":"305ea8bcdee088efc02545406b8df136974e40b4fd992a3761ce23633e28793d","sha512":"934513cef37bfdae0a10b21026d683aa2a05d06d8c4d184335afc836eda468a45f0c6188e5275bb74b2beaca03912690712388c220eacad15b5cd9caa77062b5","ssdeep":"384:bv0LvAvFv2wvJvYvR0a/U2PQHC0JQT2g/4f0Ix+2Bi5w0Xid2yxK2:bvyvAvFv5vJvYvRR/UgQHCCQTP/4ffxZ","tlshash":"c442add6486ba445ab870cc163dfbfa1ad9e1151a081c4becbfd2ca86cdad32137075d","first_seen":"2024-10-16T15:48:30.28834Z","last_seen":"2025-03-26T03:39:34.937938Z","times_seen":260,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":3,"connect":18,"send":0,"wait":21,"receive":0,"ssl":160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.datadoghq-browser-agent.com/us1/v5/datadog-logs.js","fqdn":"www.datadoghq-browser-agent.com","domain":"datadoghq-browser-agent.com","tld":"com"},"ip":{"addr":"54.230.219.234","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.296Z","timestamp":1737330994296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.datadoghq-browser-agent.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 30 Jul 2024 00:00:00 GMT","end":"Sun, 03 Aug 2025 23:59:59 GMT"},"fingerprint":{"sha1":"9E:40:A3:B8:F8:5F:43:15:5B:BB:AF:99:5C:07:D1:39:23:59:1F:51","sha256":"9E:94:B0:43:B8:3D:8C:25:A2:10:33:68:AF:90:3F:45:99:72:69:6F:DE:40:C6:CE:5A:EF:F7:19:08:2C:EE:6E"}}},"request":{"raw":"GET /us1/v5/datadog-logs.js HTTP/1.1\r\nHost: www.datadoghq-browser-agent.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 07 Jan 2025 16:38:05 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\ncache-control: max-age=14400, s-maxage=60\r\netag: W/\"e75663f032e0bd3e7de52b417f22cb78\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: cGzjMAf4XsRjTMnhPDuYR95YN-7ITn3bo2ZUUk-DiYjxQltvttXm6g==\r\nage: 5\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":57534,"size_decoded":57534,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (57534), with no line terminators","md5":"e75663f032e0bd3e7de52b417f22cb78","sha1":"899d8e0bc68712afc2e04796cedf4915333e3e59","sha256":"85698fb5db78f05d951fc0501f2d4a824b8d264a2239eddf37dcdfd02de43bec","sha512":"3f541d660b1f0003afb170c514953e3340d631188114ac64cec1f09656afa49b89c374a306b5b0e959e0b0d91d32052565c570ec0b42fb6b6a95d9ac0f9f22dc","ssdeep":"768:osGeLUpZ3YH4xWNMsTx0TujWlUPLc7xWDcFiTXGwudUp6K:osps3H8isTiUPLM9iMUUK","tlshash":"fe43b6ccb686b02113977172517f260ab33f2e55781e8420e267e2c47db865e9633f6d","first_seen":"2025-01-07T23:10:06.070692Z","last_seen":"2025-02-12T04:57:24.054103Z","times_seen":76,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sgtm.quickenloans.com/g/collect?v=2\u0026tid=G-RXLL9Z7XBK\u0026gtm=45je51g0v9169491831z89137104487za200zb9137104487\u0026_p=1737330993857\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102067555~102067808~102081485~102123608\u0026cid=1184530112.1737330994\u0026ecid=1434330028\u0026ul=en-us\u0026sr=1280x1024\u0026_fplc=0\u0026ur=NO-03\u0026frm=0\u0026pscdl=noapi\u0026sst.etld=google.no\u0026sst.gcsub=region1\u0026sst.tft=1737330993857\u0026sst.lpc=201324589\u0026sst.navt=n\u0026sst.ude=0\u0026sid=1737330994\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_921%26pkey1%3D921%26pkey2%3D2%26pkey3%3D6aeda80d793c4e668875c6eeb310defb%26pkey%3Dbbfd82cef7884374bc46935904839e80%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D921%26_ef_transaction_id%3D6aeda80d793c4e668875c6eeb310defb%26utm_medium%3Daffiliate%26utm_source%3DJMG%2BMedia%26utm_content%3D\u0026dt=Refinance%20Mortgage%2C%20Refinancing%20Rates%2C%20Mortgage%20Rates\u0026_s=2\u0026tfd=3595\u0026richsstsse","fqdn":"sgtm.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"216.239.32.21","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.602Z","timestamp":1737330994602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgtm.quickenloans.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jan 2025 03:01:04 GMT","end":"Thu, 17 Apr 2025 03:49:35 GMT"},"fingerprint":{"sha1":"A4:3B:BA:71:91:37:C1:92:66:7D:A6:C2:34:01:17:02:2F:53:B4:3B","sha256":"BC:07:C1:D6:65:9B:A0:69:0A:80:66:02:82:20:8C:BD:AA:8F:4D:C4:2A:10:43:23:06:24:B3:1B:D4:04:86:1E"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-RXLL9Z7XBK\u0026gtm=45je51g0v9169491831z89137104487za200zb9137104487\u0026_p=1737330993857\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102067555~102067808~102081485~102123608\u0026cid=1184530112.1737330994\u0026ecid=1434330028\u0026ul=en-us\u0026sr=1280x1024\u0026_fplc=0\u0026ur=NO-03\u0026frm=0\u0026pscdl=noapi\u0026sst.etld=google.no\u0026sst.gcsub=region1\u0026sst.tft=1737330993857\u0026sst.lpc=201324589\u0026sst.navt=n\u0026sst.ude=0\u0026sid=1737330994\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Frefinance.quickenloans.com%2F%3Fmoid%3D322646%26sourceid%3Daffl_everflow_ql-lre_165_921%26pkey1%3D921%26pkey2%3D2%26pkey3%3D6aeda80d793c4e668875c6eeb310defb%26pkey%3Dbbfd82cef7884374bc46935904839e80%26sid%3D165%26cmpid%3D165%26crtid%3D%26oid%3D165%26affid%3D921%26_ef_transaction_id%3D6aeda80d793c4e668875c6eeb310defb%26utm_medium%3Daffiliate%26utm_source%3DJMG%2BMedia%26utm_content%3D\u0026dt=Refinance%20Mortgage%2C%20Refinancing%20Rates%2C%20Mortgage%20Rates\u0026_s=2\u0026tfd=3595\u0026richsstsse HTTP/1.1\r\nHost: sgtm.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://refinance.quickenloans.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 69\r\nOrigin: https://refinance.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visitorId=6fe06897-c211-4c3f-a003-68355321c1a5; _gcl_au=1.1.1441864768.1737330994; _ga_RXLL9Z7XBK=GS1.1.1737330994.1.1.1737330994.0.0.1434330028; _ga=GA1.1.1184530112.1737330994\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: FPID=FPID2.2.2d8TxAeOLCcvz%2BCoq7PI632ayuH69bY%2B4DsVqHnOFbU%3D.1737330994; Max-Age=63072000; Domain=quickenloans.com; Path=/; Secure; HttpOnly\nFPLC=zhzU6Ln9d6n0pXAQa6EQqS%2F9rvi3Mqe75QUiSw3LlVzPpFD%2F0P2gy8sIRO78q3OK3v7CcM%2BPBiALh5KYdJZy%2B5HslS9DCimf9oNsmdYesRWFDXpfJBfRSBe2URNWZA%3D%3D; Max-Age=72000; Domain=quickenloans.com; Path=/; Secure\nFPAU=1.1.1441864768.1737330994; Max-Age=7775999; Domain=quickenloans.com; Path=/; Secure\nFPGSID=1.1737330994.1737330994.G-RXLL9Z7XBK.Inb7FW97vF33z6eiqN3UQQ; Max-Age=1800; Domain=quickenloans.com; Path=/; SameSite=strict; Secure\r\ncache-control: no-cache\r\ncontent-type: text/plain\r\nx-content-type-options: nosniff\r\nx-accel-buffering: no\r\naccess-control-allow-origin: https://refinance.quickenloans.com\r\naccess-control-allow-credentials: true\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\nserver: Google Frontend\r\nexpires: Sun, 19 Jan 2025 23:56:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1048,"size_decoded":1048,"mime_type":"text/plain","magic":"ASCII text, with very long lines (1086), with no line terminators","md5":"2a416314490c9d637ae4865d9a712eae","sha1":"a2d7f536c423c2e0723bec37162724d21d965f6f","sha256":"846d5ec7ed323079e44f6d943fe909fb190f581a9561d4924a0b07f6eadbc7fb","sha512":"3dd8cd44ecfe9e41253785388a0a39b6f59fb5aa536794c108ce9afc8f649249d9c0ef3edd1d7cdd6b0c27fd48f88abf61c8bde5e466a9e2064c5ad1768ec3fb","ssdeep":"","tlshash":"7c11e247bc034f0ba6ffc46511be78aeeb7677a5065142188aa81fdc1d409d3b20ebe5","first_seen":"2025-01-19T23:57:07.327681Z","last_seen":"2025-01-19T23:57:07.327681Z","times_seen":1,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":104,"dns":1,"connect":21,"send":0,"wait":184,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-813495030","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refinance.quickenloans.com/?moid=322646\u0026sourceid=affl_everflow_ql-lre_165_921\u0026pkey1=921\u0026pkey2=2\u0026pkey3=6aeda80d793c4e668875c6eeb310defb\u0026pkey=bbfd82cef7884374bc46935904839e80\u0026sid=165\u0026cmpid=165\u0026crtid=\u0026oid=165\u0026affid=921\u0026_ef_transaction_id=6aeda80d793c4e668875c6eeb310defb\u0026utm_medium=affiliate\u0026utm_source=JMG+Media\u0026utm_content=","date":"2025-01-19T23:56:34.756Z","timestamp":1737330994756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Dec 2024 08:36:18 GMT","end":"Mon, 03 Mar 2025 08:36:17 GMT"},"fingerprint":{"sha1":"BB:2E:7E:AD:26:E1:69:CA:59:9D:25:40:5F:20:4A:82:34:E8:D2:04","sha256":"5A:6F:35:5B:E3:09:08:2E:14:FC:4D:A7:BE:0C:A9:0A:CF:D1:DF:F0:C7:6B:B3:B6:D9:0A:7B:4E:DB:0F:92:F2"}}},"request":{"raw":"GET /gtag/js?id=AW-813495030 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refinance.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 19 Jan 2025 23:56:34 GMT\r\nexpires: Sun, 19 Jan 2025 23:56:34 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 19 Jan 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"coop_reporting\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 96474\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":272570,"size_decoded":272570,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5268)","md5":"6657d7b1fdca1d07e93fb1b3d76cab96","sha1":"524209daa58b448866a97ce5e37a09fa7da5e75e","sha256":"83368a5a9b2d4d66fe9a74df37e0bccfdb4241360e8664918e5f2d015a49241c","sha512":"05d8816ccd0237d2880055bf87d43c22be78be716ffefbafeb0002b8f2eb4db637f12a5bf8c8276eda8421d4231423ae8654f80b0596b689fdab033440cff633","ssdeep":"3072:yjam4s8CIE/rNPbLJW00Oy2igrJQomfnIK7yJGsOp05LJcwdlojUy3VCIM:EOCIEDNPb+1fz8G6LJcwdlojUKM","tlshash":"d24419cdb3c6b4669393a474507f010bb13a6da2f84cd8c4e185d8e52e74aaa4277f3d","first_seen":"2025-01-19T23:57:07.329198Z","last_seen":"2025-01-19T23:57:07.329198Z","times_seen":1,"resource_available":true,"data":null}},"time_used":618,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":52,"receive":527,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}