{"report_id":"4ba78e90-8022-4329-801e-299d8e7d24f7","version":6,"status":"done","tags":[],"date":"2025-10-09T15:06:00Z","url":{"schema":"http","addr":"url.avanan.click/v2/r01/___https:/wqmcr8si.r.us-west-2.awstrack.me/L0/https:/www.bill.com*2Flegal*2Fspend-expense-terms-of-service/1/01010199c97d3d13-87bb4fc2-9fb9-42c6-8d05-e536f4cbefb4-000000/Q0bp3qCpfxJrVOXEZlC-ZIdB9U0=448___.YXAzOmF0bGFzaHA6YTpvOjcyODBmY2E5ZDI4MjFiMjk5Yjk1OTc1Y2ZjNzc3NzFjOjc6ZWUwYjo3MzlhM2M5NzA0YWI5NGRlNjNkYWE4NmMwMjA1OGI0YzFjODdmNGJlNDljYzdhYjIwNDhjZTNjOTEzMGEzYTk2Omg6VDpO","fqdn":"url.avanan.click","domain":"avanan.click","tld":"click"},"ip":{"addr":"108.156.22.64","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"title":"BILL Spend \u0026 Expense Terms of Service | BILL"},"submit":{"url":{"schema":"http","addr":"url.avanan.click/v2/r01/___https:/wqmcr8si.r.us-west-2.awstrack.me/L0/https:/www.bill.com*2Flegal*2Fspend-expense-terms-of-service/1/01010199c97d3d13-87bb4fc2-9fb9-42c6-8d05-e536f4cbefb4-000000/Q0bp3qCpfxJrVOXEZlC-ZIdB9U0=448___.YXAzOmF0bGFzaHA6YTpvOjcyODBmY2E5ZDI4MjFiMjk5Yjk1OTc1Y2ZjNzc3NzFjOjc6ZWUwYjo3MzlhM2M5NzA0YWI5NGRlNjNkYWE4NmMwMjA1OGI0YzFjODdmNGJlNDljYzdhYjIwNDhjZTNjOTEzMGEzYTk2Omg6VDpO","fqdn":"url.avanan.click","domain":"avanan.click","tld":"click"},"ip":{"addr":"108.156.22.64","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-13T15:06:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-09T15:05:37Z","timestamp":1760022337,"ip_dst":{"addr":"3.167.2.40","port":80,"asn":0,"as":"","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.19","port":49490,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.click domain","source":"{\"timestamp\":\"2025-10-09T15:05:37.143062+0000\",\"flow_id\":1488656321800608,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":49490,\"dest_ip\":\"3.167.2.40\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858675,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.click domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"url.avanan.click\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":553,\"bytes_toclient\":637,\"start\":\"2025-10-09T15:05:36.911776+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-09T15:05:42Z","timestamp":1760022342,"ip_dst":{"addr":"3.167.2.40","port":80,"asn":0,"as":"","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.19","port":41838,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.click domain","source":"{\"timestamp\":\"2025-10-09T15:05:42.886443+0000\",\"flow_id\":1632404582252189,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":41838,\"dest_ip\":\"3.167.2.40\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858675,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.click domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"url.avanan.click\",\"url\":\"/v2/r01/___https:/wqmcr8si.r.us-west-2.awstrack.me/L0/https:/www.bill.com*2Flegal*2Fspend-expense-terms-of-service/1/01010199c97d3d13-87bb4fc2-9fb9-42c6-8d05-e536f4cbefb4-000000/Q0bp3qCpfxJrVOXEZlC-ZIdB9U0=448___.YXAzOmF0bGFzaHA6YTpvOjcyODBmY2E5ZDI4MjFiMjk5Yjk1OTc1Y2ZjNzc3NzFjOjc6ZWUwYjo3MzlhM2M5NzA0YWI5NGRlNjNkYWE4NmMwMjA1OGI0YzFjODdmNGJlNDljYzdhYjIwNDhjZTNjOTEzMGEzYTk2Omg6VDpO\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://wqmcr8si.r.us-west-2.awstrack.me/L0/https://www.bill.com%2Flegal%2Fspend-expense-terms-of-service/1/01010199c97d3d13-87bb4fc2-9fb9-42c6-8d05-e536f4cbefb4-000000/Q0bp3qCpfxJrVOXEZlC-ZIdB9U0=448\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":1053,\"bytes_toclient\":880,\"start\":\"2025-10-09T15:05:37.474781+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"geolocation.onetrust.com","ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-01-12","domain_rank":4022,"first_seen":"2018-02-07T11:23:41Z","last_seen":"2025-10-05T22:35:40.398172Z","alert_count":0,"request_count":1,"received_data":461,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"epsilon.6sense.com","ip":{"addr":"75.2.108.141","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1998-07-17","domain_rank":59988,"first_seen":"2018-10-10T06:21:10Z","last_seen":"2025-10-07T00:30:13.802089Z","alert_count":0,"request_count":2,"received_data":1523,"sent_data":1120,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.prod.website-files.com","ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-01-23","domain_rank":20159,"first_seen":"2023-11-01T22:05:38Z","last_seen":"2025-10-05T23:37:58.377794Z","alert_count":0,"request_count":12,"received_data":3222976,"sent_data":5900,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.bill.com","ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"1994-11-03","domain_rank":399264,"first_seen":"2014-07-03T22:10:07Z","last_seen":"2025-10-02T00:05:11.388905Z","alert_count":0,"request_count":3,"received_data":618197,"sent_data":1441,"comment":"","tags":null,"fingerprints":[{"name":"OneTrust","description":"OneTrust is a cloud-based data privacy management compliance platform.","website":"https://www.onetrust.com","common_platform_enumeration":"","icon":"OneTrust.svg","categories":["Cookie compliance"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"extend.vimeocdn.com","ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2010-04-21","domain_rank":80308,"first_seen":"2015-04-13T15:08:21Z","last_seen":"2025-10-06T19:27:33.992396Z","alert_count":0,"request_count":1,"received_data":17520,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-10-05T22:12:06.955348Z","alert_count":0,"request_count":2,"received_data":981,"sent_data":1966,"comment":"","tags":null,"fingerprints":null},{"fqdn":"x.clearbitjs.com","ip":{"addr":"3.127.196.46","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-07-09","domain_rank":192438,"first_seen":"2019-06-12T07:36:03Z","last_seen":"2025-10-06T21:58:06.166801Z","alert_count":0,"request_count":1,"received_data":1031,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"reveal.clearbit.com","ip":{"addr":"18.158.205.16","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2003-07-04","domain_rank":269772,"first_seen":"2017-01-30T07:37:32Z","last_seen":"2025-10-07T18:49:39.039546Z","alert_count":0,"request_count":1,"received_data":621,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"d34r8q7sht0t9k.cloudfront.net","ip":{"addr":"3.167.7.137","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2022-11-09T17:04:41Z","last_seen":"2025-10-06T16:36:36.284087Z","alert_count":0,"request_count":1,"received_data":11456,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"api.omappapi.com","ip":{"addr":"104.18.3.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-03-16","domain_rank":47869,"first_seen":"2020-03-20T16:43:56Z","last_seen":"2025-10-06T02:59:14.339201Z","alert_count":0,"request_count":1,"received_data":74819,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"url.avanan.click","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2021-03-16","domain_rank":385685,"first_seen":"2021-11-17T19:20:09Z","last_seen":"2025-10-07T22:35:50.325963Z","alert_count":2,"request_count":2,"received_data":224951,"sent_data":1646,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"tag.clearbitscripts.com","ip":{"addr":"54.240.174.102","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-08-10","domain_rank":151800,"first_seen":"2021-08-26T10:01:47Z","last_seen":"2025-10-07T12:47:29.94417Z","alert_count":0,"request_count":1,"received_data":3314,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-05T22:12:07.052692Z","alert_count":0,"request_count":1,"received_data":658583,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"c.6sc.co","ip":{"addr":"2.22.225.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2014-12-12","domain_rank":51900,"first_seen":"2017-01-29T23:27:07Z","last_seen":"2025-10-06T05:46:36.049813Z","alert_count":0,"request_count":1,"received_data":320,"sent_data":420,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ipv6.6sc.co","ip":{"addr":"2.22.225.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2014-12-12","domain_rank":45442,"first_seen":"2022-05-05T12:08:31Z","last_seen":"2025-10-06T03:24:20.546708Z","alert_count":0,"request_count":1,"received_data":423,"sent_data":423,"comment":"","tags":null,"fingerprints":null},{"fqdn":"q.quora.com","ip":{"addr":"162.159.152.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-03-29","domain_rank":39022,"first_seen":"2017-05-08T19:06:57Z","last_seen":"2025-10-06T21:47:50.794139Z","alert_count":0,"request_count":1,"received_data":505,"sent_data":553,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pixels.spotify.com","ip":{"addr":"35.186.224.24","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2006-04-23","domain_rank":20732,"first_seen":"2024-06-25T14:53:51Z","last_seen":"2025-10-06T00:22:16.513182Z","alert_count":0,"request_count":3,"received_data":1551,"sent_data":1517,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"wt.inflection.io","ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2018-12-12","domain_rank":648809,"first_seen":"2024-07-16T18:12:36Z","last_seen":"2025-10-09T13:52:18.061729Z","alert_count":0,"request_count":2,"received_data":17288,"sent_data":934,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"wqmcr8si.r.us-west-2.awstrack.me","ip":{"addr":"35.82.65.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-07-18","domain_rank":2247705,"first_seen":"2025-10-09T15:06:06.266817Z","last_seen":"2025-10-09T15:06:06.266817Z","alert_count":0,"request_count":1,"received_data":224448,"sent_data":660,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.pdst.fm","ip":{"addr":"35.244.142.80","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":36260,"first_seen":"2019-01-23T14:37:22Z","last_seen":"2025-10-06T13:25:11.355256Z","alert_count":0,"request_count":1,"received_data":42458,"sent_data":408,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"j.6sc.co","ip":{"addr":"2.22.225.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2014-12-12","domain_rank":45531,"first_seen":"2015-12-10T09:37:16Z","last_seen":"2025-10-06T01:50:11.003741Z","alert_count":0,"request_count":2,"received_data":75817,"sent_data":839,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"verifi.podscribe.com","ip":{"addr":"54.221.109.14","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-08-27","domain_rank":27424,"first_seen":"2022-04-11T18:03:07Z","last_seen":"2025-10-06T18:09:40.263188Z","alert_count":0,"request_count":1,"received_data":296,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"browser-intake-datadoghq.com","ip":{"addr":"3.233.158.25","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2020-08-06","domain_rank":795,"first_seen":"2023-01-14T12:08:31Z","last_seen":"2025-10-06T03:53:37.655968Z","alert_count":0,"request_count":6,"received_data":2784,"sent_data":4740,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"a.omappapi.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2020-03-16","domain_rank":46803,"first_seen":"2020-03-20T20:01:36Z","last_seen":"2025-10-06T02:59:14.02522Z","alert_count":0,"request_count":26,"received_data":480319,"sent_data":11883,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"pixel.byspotify.com","ip":{"addr":"34.117.162.98","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2018-10-12","domain_rank":29892,"first_seen":"2023-06-27T15:09:54Z","last_seen":"2025-10-06T06:46:39.582459Z","alert_count":0,"request_count":1,"received_data":42398,"sent_data":416,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"s3.amazonaws.com","ip":{"addr":"16.15.177.200","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":1245,"first_seen":"2020-05-13T22:53:44Z","last_seen":"2025-10-06T00:13:27.638841Z","alert_count":0,"request_count":1,"received_data":2365,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdn.segment.com","ip":{"addr":"3.167.6.134","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"1998-07-06","domain_rank":9348,"first_seen":"2014-04-11T12:30:48Z","last_seen":"2025-10-06T00:35:46.273956Z","alert_count":0,"request_count":1,"received_data":2267,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-10-05T22:13:51.058913Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":524,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"d3e54v103j8qbb.cloudfront.net","ip":{"addr":"54.230.245.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2016-03-11T23:08:14Z","last_seen":"2025-10-05T22:52:44.469879Z","alert_count":0,"request_count":1,"received_data":90095,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"ipv4.podscribe.com","ip":{"addr":"54.211.233.37","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-08-27","domain_rank":39956,"first_seen":"2024-03-31T14:31:13Z","last_seen":"2025-10-06T18:09:40.05276Z","alert_count":0,"request_count":1,"received_data":283,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"258-fem-750.mktoweb.com","ip":{"addr":"104.16.96.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2008-10-31","domain_rank":900148,"first_seen":"2021-10-07T12:01:12Z","last_seen":"2025-10-02T00:05:10.758654Z","alert_count":0,"request_count":7,"received_data":431727,"sent_data":4633,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"cdn.cookielaw.org","ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-06-20","domain_rank":2972,"first_seen":"2013-12-28T13:20:36Z","last_seen":"2025-10-05T22:27:54.442014Z","alert_count":0,"request_count":12,"received_data":1175699,"sent_data":5737,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"trkn.us","ip":{"addr":"95.100.107.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"domain_registered":"2014-10-01","domain_rank":6675,"first_seen":"2015-04-07T00:37:43Z","last_seen":"2025-10-06T05:53:09.1836Z","alert_count":0,"request_count":5,"received_data":2579,"sent_data":2563,"comment":"","tags":null,"fingerprints":null},{"fqdn":"b.6sc.co","ip":{"addr":"2.22.225.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2014-12-12","domain_rank":26047,"first_seen":"2015-12-15T19:22:13Z","last_seen":"2025-10-06T03:24:20.516671Z","alert_count":0,"request_count":9,"received_data":2889,"sent_data":15676,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-09T15:05:37Z","timestamp":1760022337,"ip_dst":{"addr":"3.167.2.40","port":80,"asn":0,"as":"","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.19","port":49490,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.click domain","source":"{\"timestamp\":\"2025-10-09T15:05:37.143062+0000\",\"flow_id\":1488656321800608,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":49490,\"dest_ip\":\"3.167.2.40\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858675,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.click domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"url.avanan.click\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":553,\"bytes_toclient\":637,\"start\":\"2025-10-09T15:05:36.911776+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-09T15:05:42Z","timestamp":1760022342,"ip_dst":{"addr":"3.167.2.40","port":80,"asn":0,"as":"","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.19","port":41838,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.click domain","source":"{\"timestamp\":\"2025-10-09T15:05:42.886443+0000\",\"flow_id\":1632404582252189,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":41838,\"dest_ip\":\"3.167.2.40\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858675,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.click domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"url.avanan.click\",\"url\":\"/v2/r01/___https:/wqmcr8si.r.us-west-2.awstrack.me/L0/https:/www.bill.com*2Flegal*2Fspend-expense-terms-of-service/1/01010199c97d3d13-87bb4fc2-9fb9-42c6-8d05-e536f4cbefb4-000000/Q0bp3qCpfxJrVOXEZlC-ZIdB9U0=448___.YXAzOmF0bGFzaHA6YTpvOjcyODBmY2E5ZDI4MjFiMjk5Yjk1OTc1Y2ZjNzc3NzFjOjc6ZWUwYjo3MzlhM2M5NzA0YWI5NGRlNjNkYWE4NmMwMjA1OGI0YzFjODdmNGJlNDljYzdhYjIwNDhjZTNjOTEzMGEzYTk2Omg6VDpO\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://wqmcr8si.r.us-west-2.awstrack.me/L0/https://www.bill.com%2Flegal%2Fspend-expense-terms-of-service/1/01010199c97d3d13-87bb4fc2-9fb9-42c6-8d05-e536f4cbefb4-000000/Q0bp3qCpfxJrVOXEZlC-ZIdB9U0=448\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":1053,\"bytes_toclient\":880,\"start\":\"2025-10-09T15:05:37.474781+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"a.omappapi.com/app/js/18.5c2054c5.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"565cbc1af28bea4031dfa85e554b8e54","sha1":"efa5e8813539cd4d66999836d2bac463f61c5f9b","sha256":"aeeada1f49f3e3cdf8988f10f56303e66b3484d44611469d844e6fbdfcbdb0ed","sha512":"40c2dc24e4614543b4b560d16416aeeac5f5c1c339d1f7eff13e3daa9eb4b52ad0d711234050c4a077d51090d8e958d3cba7b85600d84e3ef6412e35e192cda3","ssdeep":"","tlshash":"ef81c796aae1f07307b840f492688754d6462a1a7797c1ed34ecddf32e48f857422bbc","size":3830,"data":"","first_seen":"2025-09-30T03:27:48.796582Z","last_seen":"2026-02-10T19:12:33.159736Z","times_seen":1973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/static/js/common.js","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"325b7045af005ba690e81b5132288c4b","sha1":"7adcc46d3f54751dc821b22ca5fc7de091d4e1f1","sha256":"bd24627eb0324b5f6fd99e5d16401bf2688f98774afc8510e6037fdefbedc167","sha512":"d0ae83349125522fc1d375597f27d5de042d625b5d9e76b714cfc7d9c9473c5abe956eda883a710af2dd3a5329fbf225a655197ad9e2004804b31af21812f6ca","ssdeep":"6144:Pbc35Y+Cacg+QOIqO3j/T54yjEH2zhr8jf+V5gJS:Pm5Y+CacgROIHZj9r8a1","tlshash":"0b84e7ccb6d6b06143a3a4b5803f160bf33a7859684d8524f266d5da3cb894e8273f7d","size":391636,"data":"","first_seen":"2025-10-02T17:20:22.58743Z","last_seen":"2025-10-22T15:16:50.071958Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a14f2b0ee7578ebbe2823c69cded8e1","sha1":"f3280a7fbffb6336d0f74cc63645ca157a1fcbcf","sha256":"89f5f8b261422f6e05788afa2a105ee9c421df762657b3c0ae6f0a3c26507b9c","sha512":"a85388ca4ec0cfb5a8de8554dac64bc59f3dcd7c73cc097938b070a93909291cfc608846f92d77a01802822e940ba1cab811cdbe953d4595e36eee093fc8c4e1","ssdeep":"","tlshash":"45e0a31d1c2eb46127f81958f677851a34d5130225411665c787c4543d70dc568c5f4c","size":423,"data":"","first_seen":"2023-09-07T04:20:36Z","last_seen":"2026-04-03T19:43:47.695874Z","times_seen":181,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d72f52a19f419dda06ca21094a87a846","sha1":"67b70e6e8e221f0243201275f74600f41bcbb3ee","sha256":"e1e64bebf9395ee3249f1cdb0625853575ecf5b5831554a0ca821160fa71565d","sha512":"61dd6d20b992ec1bc831cff7aa59e21bc033c3588c223f3bf26a5b609a42bcf443dc1221f7a6f6d6a12bf13cef4b0421713d2f5a7038e3e41ef666296eda0299","ssdeep":"","tlshash":"32016b3ff2ec013e15eaa687307cd38e15866daf3b50b11e22790d98ad420b28213795","size":812,"data":"","first_seen":"2025-06-26T00:51:21.905494Z","last_seen":"2026-03-24T22:16:29.467713Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1e6e429682e7e478e32a5c61ed0c3539","sha1":"f4d023dad276b3fee53b569b032151e6fd3e8204","sha256":"3b5738dd27b03907aef07dd28d5edc6ec7a642e6523f80bd8a6cb612a3a7b8ae","sha512":"1e7f3f8af322f26ea25e45b3e77ee6a2c70b2729a41c26e6fd47dc30f012948664086b8ea53b843a01944f9eab5d732223f37f603caad32c4be66b8207f2fe3e","ssdeep":"","tlshash":"3e016b3ff3e8013e15eaa647303cd3ce16c629af3b40b55e23690998ad420b28213799","size":817,"data":"","first_seen":"2025-10-09T15:06:12.464661Z","last_seen":"2026-03-07T23:04:24.371396Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"258-fem-750.mktoweb.com/index.php/form/getForm?munchkinId=258-FEM-750\u0026form=1557\u0026url=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026callback=jQuery371037242557370262297_1760022345570\u0026_=1760022345571","fqdn":"258-fem-750.mktoweb.com","domain":"mktoweb.com","tld":"com"},"ip":{"addr":"104.16.96.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7884f18b5dce10f228fb65a648e3d923","sha1":"de9ca5369868f3c1a2625282ed09394e9b643daf","sha256":"74132b8561fe9c55e5aa146e7ae4c57f108c15ca21ed50112e4f0fa6172cb258","sha512":"4c30734ca9a35b98c2681ed821e04e2178f8c0132250fd60c3f6c188aefb4d1de12064328a8629ae15aceaf68de5d06cddf770e764ab630ba315d78c9f16da64","ssdeep":"","tlshash":"5251b6b0c1591022b20ef8e5be77b6969fd548ba99415ebee4e7bef480c26c40435203","size":2712,"data":"","first_seen":"2025-10-09T15:06:12.39314Z","last_seen":"2025-10-09T15:06:12.39314Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"68ad7043168a8bd433ae403426c8dbfa","sha1":"4c5052bdc0778ed5466758e81e25815c7b6a0944","sha256":"391982906de96ccccefdf36e4af5de8ead6695bedab4a213c03877dba10b41aa","sha512":"a45561842d214c3ae3d5556f8eb57bebed8f577b2b882c21ac39be6b0728eb06bc4b3e1b01a367958240a694bdf586542711d22d969753736e664c1a871eab38","ssdeep":"","tlshash":"20016b3ff2ec013e15eaa647347cd38e15876daf3b50b11e23a90d98ad460b28223795","size":812,"data":"","first_seen":"2023-09-07T04:20:36Z","last_seen":"2025-12-04T21:10:33.432493Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"22b8d5ac1fd992291c2a0d74b0f6f9f4","sha1":"8646274282a1ca3bea092638a7dc3858c60c4b02","sha256":"4df6c5e840de96d2fb520b4a5a48c8f43db935b04e9d306e1e442bd23ab796bd","sha512":"a255f2be7a1d063a4864266445bdedb585e82c76eb7cf23ab843e987e70e3d444eab178b4417d78d2c9fe499b41e17ee2b33d6bc3be259d590f04c5f1cf0db85","ssdeep":"","tlshash":"deb0120daa4977321316dc02531f831be25e0c1002090109e4c6445076669498184f0e","size":91,"data":"","first_seen":"2025-01-04T16:31:46.859671Z","last_seen":"2026-04-03T19:43:47.618093Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"22b8d5ac1fd992291c2a0d74b0f6f9f4","sha1":"8646274282a1ca3bea092638a7dc3858c60c4b02","sha256":"4df6c5e840de96d2fb520b4a5a48c8f43db935b04e9d306e1e442bd23ab796bd","sha512":"a255f2be7a1d063a4864266445bdedb585e82c76eb7cf23ab843e987e70e3d444eab178b4417d78d2c9fe499b41e17ee2b33d6bc3be259d590f04c5f1cf0db85","ssdeep":"","tlshash":"deb0120daa4977321316dc02531f831be25e0c1002090109e4c6445076669498184f0e","size":91,"data":"","first_seen":"2025-01-04T16:31:46.859671Z","last_seen":"2026-04-03T19:43:47.618093Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/63e3da3df35cd62f54751985/js/bill-com.schunk.91595d100182d499.js","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"147b0359df5dd47244026f100781cd0e","sha1":"d16ae3646e249e86f59ca0f7023f6d6904a5f2b6","sha256":"354368c632830361b3fd19819b70c8051cf587be8d0ebd6bd47ec56750088f7f","sha512":"15b6b3668bbbdceaa3fe2d3233434af15d8e7210f7770500ea89fe225544bd1d283742b5295ded93bb6abdd2df22ba2a0af17effe63382b12dc2818e71ba4a96","ssdeep":"24576:3qVfwhoX7lXkJ9irEIZ1iHirftfwlZlm9V9xuOunu1ukuGuVuOugByBNs+sPZjZg:3qVfwhoX7lXkJ9ioIZt","tlshash":"5595548371e5b57b015f062ee8a60001a6fc66dbc487c2b49865dfed1c3d6e98bc7326","size":1891111,"data":"","first_seen":"2025-10-09T15:06:12.469331Z","last_seen":"2025-10-09T15:06:12.469331Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-04T15:48:13.019905Z","times_seen":330208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tag.clearbitscripts.com/v1/pk_3de6fd69451431022e5de23a6e215265/tags.js","fqdn":"tag.clearbitscripts.com","domain":"clearbitscripts.com","tld":"com"},"ip":{"addr":"54.240.174.102","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7295421fd9b3f045b7bb3cc474b66bd","sha1":"f1417ce7ff58f7e30784cd53e50dead74c88d947","sha256":"14f4fa10fd1dc26fd798f50d3117094754cdae5215009a061f790e576fa1e671","sha512":"6089df0d5d9502db00b6844807e6681900dbafb0ff9c5e8b2280700514778d1a97d133dacb6a199efb2e12262f101cef21effaa119f254889abf4fda32ae19d9","ssdeep":"","tlshash":"7f51cb3b7cfa183839734469322ec209769c506b190fd890fe6dd2b85f99e1d4875bac","size":2712,"data":"","first_seen":"2025-03-02T05:53:10.738001Z","last_seen":"2025-11-13T00:31:59.722471Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/1.599c5014.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f639e29efa70b60ba81ea923ad70859","sha1":"8e6aaec131716ab1e79a63a9a299476c2fa02a20","sha256":"655a636851b88b19e22ff9218716ae9674740df9eada81b7944bb33a97a09374","sha512":"e500429651160041d55c4443b3cf4aa62be0bfb5988ab91fa01002a87101dc19f51ed187338ba58fd254f0e18fc7d929a42a1171b4c5da1583471ca084e6ad66","ssdeep":"96:EH6zkljHEr7NL99mHMvHvEDv7vBvxcAvIvSvcyBuvm896Qi82aVHT3RhsdHYbX23:EazQI+vgy5yHhfbmXlUfmvJx","tlshash":"ebd10f6976c3f43904efc362a2364634d734130632c6e1fd79689ee9a606fc560926b9","size":6616,"data":"","first_seen":"2025-09-30T03:27:48.923752Z","last_seen":"2026-02-10T19:12:33.041403Z","times_seen":1973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.quora.com/qevents.js","fqdn":"a.quora.com","domain":"quora.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"213a2084d90a782e0ad733a5aa1e3202","sha1":"30b7403a051fcf5b513e6da073bc9a92be41d027","sha256":"a3b9afdd92edf30d72dd52262c76b75781740b1cb885772194a47529eb1052df","sha512":"386887275ab7eb19187da2858b798c4ccb20d0a2a998852ff548cc54102ecd31cc499055221b14dcd8ecaba907daccd4fbc553ca3c593af52edea24f090e0dde","ssdeep":"768:1keY2FL4rhrGfV8Cj7szizyzMzKNSu3eq9zdlN:qe/+hrGfVXFu5XN","tlshash":"36131984ba90a0b642e765d1013fa547f23b696a304844a4f7a1ccd2ecf4e9f506fe7c","size":41678,"data":"","first_seen":"2024-10-29T03:42:35.27635Z","last_seen":"2026-04-04T15:50:34.562577Z","times_seen":12880,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"22b8d5ac1fd992291c2a0d74b0f6f9f4","sha1":"8646274282a1ca3bea092638a7dc3858c60c4b02","sha256":"4df6c5e840de96d2fb520b4a5a48c8f43db935b04e9d306e1e442bd23ab796bd","sha512":"a255f2be7a1d063a4864266445bdedb585e82c76eb7cf23ab843e987e70e3d444eab178b4417d78d2c9fe499b41e17ee2b33d6bc3be259d590f04c5f1cf0db85","ssdeep":"","tlshash":"deb0120daa4977321316dc02531f831be25e0c1002090109e4c6445076669498184f0e","size":91,"data":"","first_seen":"2025-01-04T16:31:46.859671Z","last_seen":"2026-04-03T19:43:47.618093Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e9e3ad57abeefde87342864450cc232","sha1":"4dc8676bf3417d597053d5f253fce034007f63da","sha256":"9a37601d1f5a5f2fba3b000694d4bf5e035c606d5485dd94e2997cbe2efe5c26","sha512":"b2d8e0e883fc8af91de120565298502b6e5b0f6e20275ecd2974de3e768a19a443f7facc2127201df66725c20451b924a69eaab78224073e385f14a5431c3a6c","ssdeep":"","tlshash":"34c0123621525559045b3d04a66ba14a758791b2a9025401dc7ee5a0311bc9aad0255e","size":181,"data":"","first_seen":"2023-03-07T01:17:43Z","last_seen":"2026-04-04T15:15:52.263436Z","times_seen":45278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"127a1dc9a66f0569ccd9a1baf38ab80c","sha1":"2d05b11495103b5507d7afb8e2f9c2d81d6502da","sha256":"5b54bb5e9dbcde17d95c14093ec6be51356ac51ee952c7921c10cbf5f4e72be5","sha512":"d4c2bd7907bae542906539430b0ea1311efecefb060e3cb5b4bb1cc5939d60ef0f26f7406d252297f5d410123d97078e3a98cab38baad8de30a961b751b6c4bd","ssdeep":"","tlshash":"dc41739f70c1b92a47c6243215bf631eb6390e864d199404b87086f9eb38d97f813ad9","size":2215,"data":"","first_seen":"2024-08-19T17:11:27.265613Z","last_seen":"2026-02-19T19:00:08.179233Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d14ca642d3b516a6911211fa5fbff8b7","sha1":"60549e42c83aa38254d4ea86021ebd776bd3bfb3","sha256":"ed1baf7c4129c0ea1edccd2d1638d6a65655bda6ee9559be5a108223453a9660","sha512":"82a2c0438c6180670d27e5d2304cce46bc6fbf8ad192068ab87efc98519bca93661a6f4754cc0b88ffd15dae2450a620451473e7a8a636101f8a4841acc26321","ssdeep":"","tlshash":"9fb0124ff3f420b21b576107a2b68651609709ee2d000048567798d826476ed02d4ff7","size":110,"data":"","first_seen":"2025-10-02T00:05:19.762714Z","last_seen":"2026-02-10T19:12:33.30312Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6e5b2a93f41a2f8e2bca078c342d0d00","sha1":"018919638d2c7d124132dfd8708c360b7850ab6e","sha256":"27e6b5bde2bf52d1fbe5bc4cfa4c229ffab05956fa068046fad93c46f02a7d6e","sha512":"a5bbfa50bc1f2b7dbca473348cb570e5e1412a6165b39fd84290d2d469c238e08ab1c3c2531953b232b0d63ad28e0955b4a4c137ccf5fe6af3518cd760435a9f","ssdeep":"","tlshash":"c1b0120ff3f420f51f1b7107e2a68652609709ee2d140048563788d866476dd02d4bb6","size":110,"data":"","first_seen":"2023-09-07T04:20:36Z","last_seen":"2025-12-04T21:09:09.951198Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad25b312c12af74ff4e3a76fb0955568","sha1":"c1831232b039ad945fdbef97bdd50518078f33de","sha256":"a86a46b9f7c81ae4fab66bfa2b16a5cf97181bbadf43f107ec7fa013f3055f25","sha512":"3394320da3b62e799a342a0b2373b2764dc4cd3ff181876a164f3953d70a84b06c1113422d29feb26eb695bfdb51f2ff085656e4e0e6e885d76f68524acad572","ssdeep":"","tlshash":"7ee068e638a11949c6db24b622bf720e741122592c940d21891fc1f9293cd87881190c","size":381,"data":"","first_seen":"2024-03-22T09:30:15Z","last_seen":"2026-04-03T19:43:47.659302Z","times_seen":177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/25.f56ea0b0.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c74566729c5d173bff547d5c6754e75a","sha1":"1340410c1be1c0925e0e8759c0ab65709d1775f2","sha256":"cf4f569428167ef4258dce91e9f3b2eaee4d589fde8228b241a1e657dbec2cb9","sha512":"7b1e6edee087b0b736254969caf2c66aab13756ddd46ef3a7ae4f7f5eaa9c573d63ac291898d27e28d676bb712aa73663291af07dda1750af6ad8d5a896e35c6","ssdeep":"","tlshash":"9821b13c30816dac48acd8a617b7bf0170b4803d570547ac2d2e94687f9d9c78e0b5eb","size":1249,"data":"","first_seen":"2025-09-30T03:27:48.912281Z","last_seen":"2026-02-10T19:12:33.149599Z","times_seen":1973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/gsap/3.13.0/ScrollTrigger.min.js","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00a3e5c78a5bfc5e47677f5c8cdb9030","sha1":"ecd3242f5dac796b8d205d4084d877d0663e040f","sha256":"308219390e5e3b84cda0c481e70caa9820883ae10bda44e6e9a149a81aac4b3f","sha512":"3f62036197ea4b08dc4a35f404a78d8704541fccd13c69607169799fa8012f3762e18e7fd0ee33697aed3b82bd4d92ba1e7d417a76292a8c2e09abcd6a774446","ssdeep":"768:As+yeuMOl6ACOIyAU2sjVKI3G4rNN2AvZHu6B:qm4FOIyAhS3GG2WXB","tlshash":"421309c93244b062679f63b6a42f060a733654dd290e4055f376e4e83cbd9b9873be6c","size":44157,"data":"","first_seen":"2025-05-20T13:32:29.633767Z","last_seen":"2026-04-04T14:28:48.249396Z","times_seen":1522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cc5f95015d2cc9962e5a4e0ff6469b0d","sha1":"88843695a57af6c02499ae4d7943da92d3e7ed98","sha256":"55877b7bf26c29d69a46b1a9ae20c87f0598e8a26d2b86de845d25a3089bab32","sha512":"efadb9b33c79e59f2c9817b7c41669308eee0c694b0f131904a5c90215d593f2bd451eee193acea9fcc6b6ff10f8cdba42d260a0ed111dc81ae64cb787e1e468","ssdeep":"","tlshash":"a8b0120ff3f820b11b17610ba3aa8a5161970aee2d000049563788d836476dd12d4bb6","size":110,"data":"","first_seen":"2025-02-05T12:04:11.873756Z","last_seen":"2026-04-03T19:43:47.714962Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pdst.fm/ping.min.js","fqdn":"cdn.pdst.fm","domain":"cdn.pdst.fm","tld":""},"ip":{"addr":"35.244.142.80","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"147cf2f285dbed672b785764d4d022b2","sha1":"c77d75d160d2698f35a8156a7923770b30177537","sha256":"6dcc4835d26916b2a8801700d2d42f32369f66fbdf76a28cf8c1fde689b36bb2","sha512":"0c84f75aaa543bb414bae90097a2d9f90082490e632314d7ca256b6724d7d93615dd82a026ffe3a64b3130b1e1dd245aac69df9e0a1be75f8ec1ce78a42695fb","ssdeep":"768:XMZqt1vkPU95O9oBivYrf/9HkhA3moiOQnZA7B:8E9/zPHdrYA7B","tlshash":"f413b7c8f9e2f0a053bb64b4412f9007f73fa919b41d95a0d255e9d23db890a9263f3d","size":41639,"data":"","first_seen":"2025-09-02T21:13:52.876517Z","last_seen":"2025-11-15T08:45:45.501717Z","times_seen":1069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/5.feeadc62.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d09e87814b1dfc9efef44879aeae55f","sha1":"b6df4810dc1144679c8eb43a806f5fee366308ab","sha256":"f0d7d0ae2095f09937897fedb309c05f66444b5be46c875b50e1b5b5537d1910","sha512":"ccc0b4af34ea582f6546dca11f54127b4203e75fb4c161b86cf10524187b2eabad693663b2efa558f9d959f0a32183e588b0a96c7f984d5e7441e34096834e3f","ssdeep":"384:HiD+uB//R/lSbxz2QwMXpMRvrc0+iJ+QJ/01tBVBFri1VdWKXh3oXNyZzq:HiD+uB3RNSbxz2QwMXpMRv1L/+tBVLiG","tlshash":"6e42a3fb3422f9345de90061a7362750e022143e7946e05c7a6cdce4e909ddfaa226fe","size":12697,"data":"","first_seen":"2025-08-29T23:50:34.844108Z","last_seen":"2026-02-10T19:12:33.232999Z","times_seen":4390,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reveal.clearbit.com/v1/companies/reveal?authorization=pk_3de6fd69451431022e5de23a6e215265\u0026callback=revealCallback","fqdn":"reveal.clearbit.com","domain":"clearbit.com","tld":"com"},"ip":{"addr":"18.158.205.16","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b47432faa3b0d5f7e0281f219ae2551","sha1":"25b01edd0d4907ed9037f14354824ae17f8bfecf","sha256":"7b21afec666a13965b2c1e60d6e40a8bae13c8edce584631fa6e1abcd0938463","sha512":"676da1f25a532536de8e61c71c9932e164c47fc4117cc6d6f67675ba030d0a3f0f7c813b1f66ca7999b6c1619c8fd84f2ece457c9a4279c14e91d6f35c90499a","ssdeep":"","tlshash":"2cd0a72910341e18ada9c78c614e7b7206be1323c34955606ccbaf2080f06ec3114066","size":218,"data":"","first_seen":"2025-10-09T15:06:12.245033Z","last_seen":"2025-10-31T16:28:58.66647Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/63e3da3df35cd62f54751985/js/bill-com.7bde6a7d.6df124800cf39396.js","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f01ce412e93c12b946d19546acd90eb","sha1":"94fe9f6482b3ac8a8e04cebf8614c528076e15d8","sha256":"e465e79c03564f53f4dd1a0fb5873cea69ef8124c20d5ba8f46e092ac2bdba2e","sha512":"28f0e6976187a1e23918f078750c0ccda500e5f9f74f66b125f3a27e64804db68ec6799dc35402eb94c3040f1d4ff6eb71de98c9beb174444ed92d040ac2183f","ssdeep":"","tlshash":"6341ca183554f4ee276a54840a3f9086f2156832603ef8f1f322c9f56455ad54163fb2","size":1886,"data":"","first_seen":"2025-10-09T15:06:12.389023Z","last_seen":"2025-10-09T15:06:12.389023Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/gsap/3.13.0/SplitText.min.js","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"253d65596b33a46683005584f91daf39","sha1":"f59793f6360fb3912661cec6ca72125f9e9ff0c5","sha256":"5e519ea2470faa15ca4d4f27e9263e5906c07c034a9b4771164dee108136563a","sha512":"c0e7840bef6a1110338658b00453c36fab7c4e2145c5dc46f2f84afd882ced3b82e386e983ca60fd7dbf53fbbed17e1f2b4e706fd89dd44222a67174dbe08543","ssdeep":"192:EUOVuA4+EtZZQipaevY1EGPNFR3Z/VxQqXnG9jy72qtH6GFZ9a42S7:EBrHEtTQi4z1EGFFR3Z/5GO6Gbr","tlshash":"19e1e9727318197393d4519a45db9284f22008b95c0a6ca9f4acddee2169dc530fffb6","size":7247,"data":"","first_seen":"2025-06-12T16:01:08.835004Z","last_seen":"2026-04-04T14:28:48.251156Z","times_seen":580,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"258-fem-750.mktoweb.com/js/forms2/js/forms2.min.js","fqdn":"258-fem-750.mktoweb.com","domain":"mktoweb.com","tld":"com"},"ip":{"addr":"104.16.96.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3fb33f57fc419c3291161a4d145929c","sha1":"b5144d68b89e67f5072403f77beaf557e17f465c","sha256":"1d8f29fefcf1c3c78ed278f87273b54e272722c4672bbcfd903092881e0fd3ff","sha512":"234ed9cf59eda8c096fd9666fdd8c7591f8cddd8cc66f594279227a5ed4a6d6e61637bc385d9595215116916c414a8f014e8a966f7f2fdd0c3a6c4c83f5ee2f6","ssdeep":"3072:l/i/bncR4dc8joJjjTgEp8kSUR1G8OldwwqL2R3DDU8CuBjeMtI:l67DJjITpedUcCgR3DDU8CuBjep","tlshash":"8014f8c87692b052826734b541bf410bb17aa9e9b40ccca4f194d8e47ebce9d517bf2c","size":204629,"data":"","first_seen":"2025-07-09T03:41:10.306837Z","last_seen":"2026-04-02T19:44:35.713484Z","times_seen":3319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"28e049696404460712ee0d3532ad6f6a","sha1":"2d1fcfef8bb9078d9aa3b71df087639124637e91","sha256":"8653e94588f4c34b12e3ae26bce5fc37e05cae2b0a420fb253d23614620828c8","sha512":"871452eba55f52a067fc95c0422fecc4e5259e6bfb3c90b23bd67cb57cda35865cab5e8efda60884679cef100d038fa8c9d9c32f90cf5d24bb775ea109394c46","ssdeep":"","tlshash":"1121911e7131b96c63d23ba5caefb3d733b115bd41040de98925941036a8f8f50b6f45","size":1397,"data":"","first_seen":"2023-03-10T14:18:18Z","last_seen":"2026-04-03T19:43:47.726276Z","times_seen":197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"22b8d5ac1fd992291c2a0d74b0f6f9f4","sha1":"8646274282a1ca3bea092638a7dc3858c60c4b02","sha256":"4df6c5e840de96d2fb520b4a5a48c8f43db935b04e9d306e1e442bd23ab796bd","sha512":"a255f2be7a1d063a4864266445bdedb585e82c76eb7cf23ab843e987e70e3d444eab178b4417d78d2c9fe499b41e17ee2b33d6bc3be259d590f04c5f1cf0db85","ssdeep":"","tlshash":"deb0120daa4977321316dc02531f831be25e0c1002090109e4c6445076669498184f0e","size":91,"data":"","first_seen":"2025-01-04T16:31:46.859671Z","last_seen":"2026-04-03T19:43:47.618093Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j.6sc.co/j/adbd7400-c99d-4a74-ae9b-5d9e50e0a46c.js","fqdn":"j.6sc.co","domain":"6sc.co","tld":"co"},"ip":{"addr":"2.22.225.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe2ce87962408c97aaca7e154e7be035","sha1":"d55f23159e965db04f5a8c09bc4fb5cf89443df4","sha256":"2d07ea78e33a13d7fe70994b730ab0d4587e6ab025fda862a16e0b023e477066","sha512":"de675b0c8334e9a688bd58ee6c57853f4b1485c140329ced4308c5e14bf0014a857769c10e3ffeef7063cdd8a9e839e4a4d58c5fbc3fdc45639c5e34f9fb4a4e","ssdeep":"96:0bH16xguNSwHALLjOCcPZLWyZ0X7nLLAIg:mV6xJNJk3fdXzg","tlshash":"d5a1005e163c941d70b1a09d3f2f3afe35a07769e5c4e56829c27c242112f8bb278b94","size":4805,"data":"","first_seen":"2025-06-20T20:17:42.34725Z","last_seen":"2026-01-23T19:28:35.077676Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/26.564270cb.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1493464e38672b0446c90fb07852aef","sha1":"41063df0704dd5113074208bbe5edfc23b68d1b4","sha256":"4f3fb08f335545b79fd33b14875b6db5418a01d639a0551ed34028a782c4c2cf","sha512":"ba900e5e40d143f7d85b886e432e05588ec86aadac258ab0c3e80f2996ef8b5375fd354e4b2f24f046af308f5180be2609f9d263c90aad1044c691472dc31705","ssdeep":"96:Hf33dffCCVuudi7p57f61ZT94T+koc412ujkEPYupEQ7YXpwZNv3IFphfxbfxM:/33df6CVwpZf67Z4T+koc412ujNPYupN","tlshash":"29c1112433c0e9f554cac15ae0a083485d3aab44b7d6a4aeba6dccfb6571dd00527ff8","size":5967,"data":"","first_seen":"2025-09-30T03:27:49.00268Z","last_seen":"2026-02-10T19:12:33.119564Z","times_seen":1973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/8.d971824c.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8c6958b551916ed063740a3a8bb2835","sha1":"e616c7aeac4b1f6507164de5a28cda45ead134ff","sha256":"cda01d87c4571f57a42e49658afbae2eb61fd26685f2a51700cd6cd5bd828080","sha512":"dd3ab1890ab74ca95285d194f9a04adf30936d63c221f5713b94c115fb3750896323ae92fa6221d629bcb21f1fadce2cb77c8df1f66db57b13479b43b912ff94","ssdeep":"","tlshash":"c43153e0f170a87d92975386d490458550fa34c3bca9229d7f6aaef2ec65b09310b7fc","size":1585,"data":"","first_seen":"2025-09-30T03:27:48.812174Z","last_seen":"2026-02-10T19:12:33.095758Z","times_seen":1973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c1067488cbe4240ef1d52c6799eeb7f6","sha1":"b7068265b2c568dd589cc6ff4e7e6715cf190dea","sha256":"a184adee0f201c7f816ba754b6df2dce920e03693057b4449287ca460922082d","sha512":"01a21ce6924ab67df058adefb3b81f8ef88f63b990eafb0a82602c10ee4c0bbcbe97ed01387b60653bd06e6d94a204305e5d6ef18a7b09ffcee5d4bd8962e639","ssdeep":"","tlshash":"d0016f3ff2ec013e55eba647303cd38e15c629af3b50751e23790998ad420b28223795","size":817,"data":"","first_seen":"2025-06-26T00:51:21.888908Z","last_seen":"2025-12-04T21:10:33.337251Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.clearbitjs.com/v2/pk_3de6fd69451431022e5de23a6e215265/destinations.min.js","fqdn":"x.clearbitjs.com","domain":"clearbitjs.com","tld":"com"},"ip":{"addr":"3.127.196.46","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfd3505ca2ee8bc3e0de5dcba8dad67b","sha1":"6c484b3352f67b4987b306ce13419be96dfa4021","sha256":"718980255bc575b535d821ea6ba2f9a638f83c5149e3ace6544dcffdf1af30a0","sha512":"ee007a512c1f616b0d5a75055570baf8934cbe79edcdb82253e06874af0afa41d0f7e340ebe51e1292668589c190eff4132d7c4d741a4204f63546e348cf5af0","ssdeep":"","tlshash":"36019e7432a57c3a817bf1a13eaf73077931b0172045a9d1768d96505f9082701bd989","size":670,"data":"","first_seen":"2025-08-21T11:13:22.639376Z","last_seen":"2025-12-27T08:34:26.186178Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/otSDKStub.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f266bedfac21857dedcec1f66506eb67","sha1":"9b0f6bb138b3b96c6c285aa22f0292c262d057a0","sha256":"d266cebe579de643751bf3548d09af1b3bb2120cbb0aa64b59c8a84871cd8768","sha512":"92818623cef9d937577921b4a1ad7b353b12962086e8705ebe87fb5f085189826a9cda7e9c9efcbc01ebd69e8ca30281190ecfa78b5d96892d74265f2a11a2c2","ssdeep":"384:8Tg8XNbpLx6jhA5SNYbGr1Uci0FPvfC5mC1X2cqKpQinGHKJxEV88y:agKFLxUhA5SNGsUci0tDCZqgyy","tlshash":"cfc2f8ddb140fe3446d3a19c5a3be25a723b746d34869064b8a4ece0247cc4f6533bb6","size":25886,"data":"","first_seen":"2025-10-06T04:17:24.407426Z","last_seen":"2026-04-01T06:47:16.882391Z","times_seen":11500,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"22b8d5ac1fd992291c2a0d74b0f6f9f4","sha1":"8646274282a1ca3bea092638a7dc3858c60c4b02","sha256":"4df6c5e840de96d2fb520b4a5a48c8f43db935b04e9d306e1e442bd23ab796bd","sha512":"a255f2be7a1d063a4864266445bdedb585e82c76eb7cf23ab843e987e70e3d444eab178b4417d78d2c9fe499b41e17ee2b33d6bc3be259d590f04c5f1cf0db85","ssdeep":"","tlshash":"deb0120daa4977321316dc02531f831be25e0c1002090109e4c6445076669498184f0e","size":91,"data":"","first_seen":"2025-01-04T16:31:46.859671Z","last_seen":"2026-04-03T19:43:47.618093Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a2daa4489b40a3183a971f7594d2593","sha1":"89ed8694ddfbcd41f348c3438ffe7f12d48b9b77","sha256":"0c643b76c9f7cb371fd58497e57da86921dc96082324c2dfeb97fa35f1c8a3a8","sha512":"fbd46952b7019cdf65e1f8a054df8a722e474830060b6cbcccd63f827cc39a2f1cb0391880611e881abd03c8e0ec8bd80c3fa4876fec6dc8c74c939856a0d365","ssdeep":"","tlshash":"1ad0a7442988365039b11dbca2d1875934e130962055986394ebcac05d1cb96442d2af","size":231,"data":"","first_seen":"2023-09-07T04:20:36Z","last_seen":"2026-04-03T19:43:47.700557Z","times_seen":181,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/32.1dfbe809.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"21b4fab0eab3664ed619e2f0475ca183","sha1":"55efa24c4980bce1f57a8ebdf06e037cc4f715db","sha256":"37eb41c7ff52de47bf054723d1d1ae9a82909d6f8ec5dec29075fb2b332cc7ff","sha512":"36609e6f59ed11575db6708878deabffed3de648e99666cc48f25f84cb8fe767b1bcf3ee2032be956ec9da3775b55ed6334df32b204e82c0a4bceb2850b362e6","ssdeep":"768:pp3yL9POhwxHTuUMEytXJlGVZ+1MECElJE6sgY9:eLx/uaINE66","tlshash":"7bf245a872c7f0b547526194483f380aa33b5e5c280ea554fbe9cc81bd7958f8137f6a","size":34747,"data":"","first_seen":"2025-05-01T13:06:48.344454Z","last_seen":"2026-02-10T19:12:33.133313Z","times_seen":3032,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=63e3da3df35cd62f54751985","fqdn":"d3e54v103j8qbb.cloudfront.net","domain":"d3e54v103j8qbb.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-04T15:27:33.816485Z","times_seen":217646,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"258-fem-750.mktoweb.com/index.php/form/XDFrame","fqdn":"258-fem-750.mktoweb.com","domain":"mktoweb.com","tld":"com"},"ip":{"addr":"104.16.96.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4116c7a58c884adc9e7d9795d4b84d2e","sha1":"b74f7fdd1e5c587ad6f4b795c2ebce286b520664","sha256":"71e7ec8bf35015b528686f6d2c7c7516c457238b487653a34689ff39f2f5f493","sha512":"a1b0db786bde2cdbebe68b563b5e6340620f5d7e98e368f85d183d8da0ed4d79c650130bf8b47957b7e965946500ea81378dd6567eb785d1d7e2842605e4ae8c","ssdeep":"","tlshash":"d431be0eadb5185c54931195ff6fbe003532912bb218ec21fd9ca9a09f29a9ba5113cc","size":1476,"data":"","first_seen":"2025-03-03T02:25:24.259117Z","last_seen":"2026-04-04T02:51:18.946697Z","times_seen":3089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7108da6f9cec21cee6f69614c86acdae","sha1":"47e26156de343c53521b6e13a252e9cf3df34c05","sha256":"dd9690512225ba909bb5e572f695ce204f9c324c05ddc14db43bc80d02e0fdf3","sha512":"4462e84ec834ba6cedd0c155d9751132c19f4cab25e75b617c0ad7b481fd97397bc998d463b7c9066904db2d85ad7024ebf32fc2860057fa3b04cd9c5194fdbf","ssdeep":"","tlshash":"cab0121ff3f420b11b176107a2a68652619709ee3d000048663788d926476dd02e9bb6","size":110,"data":"","first_seen":"2025-02-05T12:04:11.871107Z","last_seen":"2026-04-03T19:43:47.612773Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/9.f7e78b11.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a121cb50462a2a1baded2277e9ac1be0","sha1":"086c70a82b9c6eaff5d6714ade0132c9a9e96183","sha256":"682674826c251f0490a94a4e979d92dcb1e48470a1acff3004c5c16527defa71","sha512":"05936afcfa50e839322079ea2acc1da7efe252edbbd34914189e099f81d152cd7b91c8ad1d5ad9d24bde7506c3f21feccc244ac1739af923d663e82535363d08","ssdeep":"768:Y5hz3J0u6u8ofYvIsixIqdly7FQlTo3Z60fZdA1Sc2qnVx6bOk+ieMl1GvJ:khz3J03ofYvIJxIsQTX98L","tlshash":"77e2548cb2c3f015539b24e8803e0247b32e5fa539596044fa6d6dd27c35a5a52bbfbc","size":31744,"data":"","first_seen":"2025-08-29T23:50:34.828174Z","last_seen":"2025-12-17T22:13:32.534821Z","times_seen":649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WG5S2V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f583efe528dc5f3bedeb36975c17a2a5","sha1":"bcb78fbd8e1af3505c1241caaaf943c8e0eefe01","sha256":"e5083624adb07fea1a72f6a9a8e8cadc800b7a5a4d4009ee3acb0b3d0fc23a0e","sha512":"00a8be0f1dbb6c57e6324dc46432abea68bdf36ad1fd8c238d69c1f83e52b7075c78a52fb4b6a7f9576ff20177cd0f13619ac806d2258f65bb90e9c7a88471c4","ssdeep":"6144:rMhhJJsIty2Q51wcpjJ/0njCnfgGn6XV4rvoB6zcYGbIfAtTdb:SIIty2Q3Xcnj1G3owjcZb","tlshash":"92e43bcdb6c5b476c396a464943f014e693e24f2b14c9894f0d9cce41e74aba2163fbe","size":657977,"data":"","first_seen":"2025-10-09T15:06:12.190436Z","last_seen":"2025-10-09T15:06:12.190436Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"22b8d5ac1fd992291c2a0d74b0f6f9f4","sha1":"8646274282a1ca3bea092638a7dc3858c60c4b02","sha256":"4df6c5e840de96d2fb520b4a5a48c8f43db935b04e9d306e1e442bd23ab796bd","sha512":"a255f2be7a1d063a4864266445bdedb585e82c76eb7cf23ab843e987e70e3d444eab178b4417d78d2c9fe499b41e17ee2b33d6bc3be259d590f04c5f1cf0db85","ssdeep":"","tlshash":"deb0120daa4977321316dc02531f831be25e0c1002090109e4c6445076669498184f0e","size":91,"data":"","first_seen":"2025-01-04T16:31:46.859671Z","last_seen":"2026-04-03T19:43:47.618093Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"29180cf952b4f20dbe028c8382833480","sha1":"37409caaa3d2f34a2d4f5ec9cf46a62e82bde933","sha256":"2e9442fc940e4dcefcee3bfe77c7bbfaa7af5a600a1a782493231a990108f892","sha512":"42a91a33090b101aa77a3c45f0845a184dba7d5b6999aedeb57f650450896350a429d936f993726e7a7ca896b081855272269df6dbc7ee1cc53f920808c7fa91","ssdeep":"","tlshash":"d6b0120ff3f820b11b27b107a6a68651609709fe2d000048563788d9264b6ed02e9bb6","size":110,"data":"","first_seen":"2025-10-02T00:05:19.805854Z","last_seen":"2026-02-10T19:12:33.315062Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"31e159a285528e28c174bc262f002e14","sha1":"8f829896410c8b1cf32c0656289648f4f18dd0b1","sha256":"d1e99bfd41b64db2d665b6acf61fc5a0e23eebb1eb00c9a8b4bbffaa7562bbb2","sha512":"8409cec182b85e35f58eb0357d99cd369c3d9a0dddde24b7a2aaf8d29dfc630376813c41e4880fa68cbcf9963effb16ad005c7bfffa9c334222aa582cc43d7fe","ssdeep":"","tlshash":"12b0121ff7f420b11b1b7107b2aeca51619705fe3d000049663788d83a476dd42d8fb6","size":111,"data":"","first_seen":"2025-06-26T00:51:21.873082Z","last_seen":"2025-12-04T21:10:33.427898Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7608f46477d4f3181417631d41e22a44","sha1":"c3ec33f5d437f651a12cf111aec6b54453b47d74","sha256":"f5545ccd1703ea752e96e54ec346f67f21907ddbce037d4aaa4be31ab87549e4","sha512":"713c3060a38995216e8ac2652864f49c7c76ba7f2a6ee7901123c81d0a409fe9860b9e9b85467ee0ed6fe64e50b52f764b76e00a935933bd4fbcf586f9ddec7d","ssdeep":"","tlshash":"8fb0125ff7f420b11b577107a2aa8691619705ee3d000048663788d82a476dd42d8fb6","size":111,"data":"","first_seen":"2025-06-26T00:51:21.898885Z","last_seen":"2025-12-04T21:10:33.43363Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202506.1.0/otBannerSdk.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78999bec8c06fc9064e0275821760e6e","sha1":"3b2e2f5601507fb791f5a0d0d499928a95ababc7","sha256":"3e7b131e0f59a19e2d648db2fa7e362a7321e8b2c0bf64741da4d7b1068c817b","sha512":"ce3358ff0a04d23b08e9fdc50efed856d0f451e5bd1f8e452d5bded945db202fccb29d5ff71a2ea7e41b562a119ccc34507f88ca42c83f6a8659c42f95e39138","ssdeep":"6144:Xbr1G+Z5xrXcE7q15M99ZZsUEbbFutco++KpO6c1SHoYVGC:XjxrXcE7q1AcoKckn","tlshash":"acb4298e7590753587e752b8c02b414ab63574acac85806cb45cc5f90bf9f821ea3fbb","size":508412,"data":"","first_seen":"2025-07-01T17:38:20.864701Z","last_seen":"2026-04-04T14:52:21.515593Z","times_seen":2114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"258-fem-750.mktoweb.com/js/forms2/js/forms2.min.js","fqdn":"258-fem-750.mktoweb.com","domain":"mktoweb.com","tld":"com"},"ip":{"addr":"104.16.96.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3fb33f57fc419c3291161a4d145929c","sha1":"b5144d68b89e67f5072403f77beaf557e17f465c","sha256":"1d8f29fefcf1c3c78ed278f87273b54e272722c4672bbcfd903092881e0fd3ff","sha512":"234ed9cf59eda8c096fd9666fdd8c7591f8cddd8cc66f594279227a5ed4a6d6e61637bc385d9595215116916c414a8f014e8a966f7f2fdd0c3a6c4c83f5ee2f6","ssdeep":"3072:l/i/bncR4dc8joJjjTgEp8kSUR1G8OldwwqL2R3DDU8CuBjeMtI:l67DJjITpedUcCgR3DDU8CuBjep","tlshash":"8014f8c87692b052826734b541bf410bb17aa9e9b40ccca4f194d8e47ebce9d517bf2c","size":204629,"data":"","first_seen":"2025-07-09T03:41:10.306837Z","last_seen":"2026-04-02T19:44:35.713484Z","times_seen":3319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"67e6a1a8fb8e207bc621ef1438910fe3","sha1":"ef83bbb53b921e1ff54d555a300b1266159f31d0","sha256":"95609cfabb3ec31470b534a4136ec4682539c40392f8adf73319e0d50a48cc89","sha512":"598a2fc114c61d5c065db7ee9df18ff0f4578fe17c9cc430c8b6fd5d33e26455dee57a2c1080b6d8c7c1ef3718f6666966d499b71efeb6c73c9d1af214de1ca9","ssdeep":"","tlshash":"46018e3ff2e9013e15eaa647307cd7ce15862daf3b40b11e13a90e99ad420b2d213799","size":812,"data":"","first_seen":"2025-10-02T00:05:19.659015Z","last_seen":"2025-12-04T21:10:33.369205Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3efb8b3243129fd9468e21876ac4656c","sha1":"eefaf0a087438abec85b27085026390dc3d3b2de","sha256":"ba934ccb7c7fed7521ef5291c93576c0788d26316d8955a8b8eadade6732159e","sha512":"b94d8f6c5f123abf65ba32467c7b48d7752600feaa48a864d8adb6f8b2da1c7347ac02820f7deb9355e6c67821d00bc8cc80dcd548a29497ff1dae5b2181db19","ssdeep":"","tlshash":"06b0121ff3f420f21b17610ba2a68755619705ee3d040048ae37d8d826476dd02d8bb6","size":111,"data":"","first_seen":"2025-10-09T15:06:12.484808Z","last_seen":"2026-03-07T23:04:24.426993Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3e728d1733603d3e981fdaa2de6a2935","sha1":"c244e3822dff6107b76a3d3d0b86a1c5825b0067","sha256":"28dba1f21f62a29d4ee443935c1c04cbde5d1289f6f26d40a0a78477d85e7102","sha512":"a869c9d820074d4bea375f01f92732a876e5ba45132fe381393e6df0f6b3fb42e0c819816c55410e400cd3c34ac39f73af26a16a1776c8501dd985a4bba8ad3a","ssdeep":"","tlshash":"08016b3ff2e8023e15eab647307cd38e15862daf3b50b51e126d0d98ad420b28213799","size":812,"data":"","first_seen":"2025-10-02T00:05:19.827919Z","last_seen":"2026-04-03T19:43:47.687857Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f062ea772f0f8153e5fbfb878dea245","sha1":"87dcb16af118df9eefb849217645d872e69cfb3b","sha256":"881186abfdd417a41adaff6754eb7394f84c9ef5db3e5d54f09dfa22b66f8b58","sha512":"7de2587163c58f940c60e537445842510fbb95110e8e1a0d040997a67f18d66ae60dc6462d5d4d586e258a6fc3a64758f9bdb5f6a1cbb26a470640ec569e13b2","ssdeep":"","tlshash":"f5f0abff70141eb769aa01f9b3f0e528b8133218581b1c72edf9cc18241a98b8c3b598","size":442,"data":"","first_seen":"2023-09-07T04:20:36Z","last_seen":"2026-04-03T19:43:47.653785Z","times_seen":185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"22b8d5ac1fd992291c2a0d74b0f6f9f4","sha1":"8646274282a1ca3bea092638a7dc3858c60c4b02","sha256":"4df6c5e840de96d2fb520b4a5a48c8f43db935b04e9d306e1e442bd23ab796bd","sha512":"a255f2be7a1d063a4864266445bdedb585e82c76eb7cf23ab843e987e70e3d444eab178b4417d78d2c9fe499b41e17ee2b33d6bc3be259d590f04c5f1cf0db85","ssdeep":"","tlshash":"deb0120daa4977321316dc02531f831be25e0c1002090109e4c6445076669498184f0e","size":91,"data":"","first_seen":"2025-01-04T16:31:46.859671Z","last_seen":"2026-04-03T19:43:47.618093Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2ee2f76fd93deb976045dae5c79c8e1f","sha1":"fd20add7005f4916608768ca3495923dd37d9f2f","sha256":"d0ddd4e1620fb41e41e22e0685e5f5a6a3a80125fa93e5cd97b7feb91a100fad","sha512":"93a7f1f1b00c6fcc6c4833b382b2dfa722cb11289fcb37e71f71a354bd693fd804ad8d8e464a0335dac46461aa13e42ea891293c99438d6c640ddab0a451c057","ssdeep":"","tlshash":"79b0120ff7f820b11b176147e2a78a5160d709ef6d004148563b88d826476de02d4bb6","size":110,"data":"","first_seen":"2025-06-26T00:51:21.878664Z","last_seen":"2026-03-24T22:16:29.485931Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f94316bcc87c6de3e06fca86ec63416","sha1":"8247fa479a592842748ad1a790efbe00c7a84993","sha256":"5ba866bcffa17305ae3ac870b68e2c30b921f5b97634378599b0afc589bffeef","sha512":"b5959a960790445ffc923cc4e2cb8f9edb5c90b23bbdeac96e566ee94f5a69f1ffd1b15f7ef8e6abc2727b61f6abb3d9ba0fcb8a991d4cc8ef183a7e52afbeae","ssdeep":"","tlshash":"201114aa24a85179056351790b3fa6042977100f5c967eb4b8be83843f2c72f35772c4","size":990,"data":"","first_seen":"2023-09-07T04:20:36Z","last_seen":"2026-04-03T19:43:47.685017Z","times_seen":184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b2afe585957d3666b3eb716832a3f167","sha1":"3bcfc87482b54de7f8100aa926bfd74734dd287e","sha256":"b75b85955ad163b332b4263797b74a31607139feb7783dba8a2800f6b769f9e3","sha512":"8f76c7aadc46110de34ad168a0a5ab3a33bcf5dca61378de2d337b05121c6ad40e194cd2aab2161da528a39d9e9dfe4294eb249beede8c4839f8e8d8c3b8e720","ssdeep":"","tlshash":"83016f3ff2e8013e15e5a647307cd38e15c62daf3b50711e22690d98ad420b29213795","size":812,"data":"","first_seen":"2025-02-05T12:04:11.849051Z","last_seen":"2026-04-03T19:43:47.656998Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"996616a479b58d919d74bb7d2562a26a","sha1":"fe2132b285ae93389ed37dcdf7ced7f98f0df401","sha256":"4cf8b96bc161c9fdd59bd6dac78b5c72c76b6e1fd46872d66f7cf8cc4c84ca6e","sha512":"26dfcd8b5cc4adde33e835085811f21f3ac958b98fe8d639ac858d676fbd4f6a5cdfbda3ad18e53db9d185eb3f96799d0664580fe4a68bb13fb409095c49285b","ssdeep":"","tlshash":"6d016f3ff2e8113e15e5a647307cd38e15862daf3b40751e126a0d98ad420b2c2137e7","size":812,"data":"","first_seen":"2025-10-02T00:05:19.719103Z","last_seen":"2026-02-10T19:12:33.26305Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/20.72c5dfe3.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"325972102d014fe6208cd42b0e97ed42","sha1":"49c140179e6f756a2c9be10c2d3c8905abc9c324","sha256":"4cc9e39c894dc1d13c4f0db38cbfc8084f11e872b067eda77b947809ada95919","sha512":"e557de3e120337fbb319f2b6f87f315d6398d9a9976fc72b0d8b89893d26dfb6297887f0ded32de123e543592c5068bc3729bed856625960802b081bfa9b5a04","ssdeep":"","tlshash":"2c31401a12def978b153d02cc3e8aa05eaa85e542fc140cdb89cfdeb9430c95a5347f8","size":1704,"data":"","first_seen":"2025-09-12T18:58:57.65894Z","last_seen":"2026-02-10T19:12:33.235068Z","times_seen":2171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j.6sc.co/6si.min.js","fqdn":"j.6sc.co","domain":"6sc.co","tld":"co"},"ip":{"addr":"2.22.225.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc32411fd6fa348d8203d2f26dd9866d","sha1":"f4abdc1b3c92857e9d3079cc7b3f08ab85c3b00b","sha256":"91c20c70d36b608cf919e894b0ac9e32298d6b3ac3ca59c45a85e7c44161d170","sha512":"3bfa45408f26750653ccc855ebec2f717aa89129884874b852838ccecbcb9cb3f74c799c9a32a07c142d307f542d31e718d752a5f3844e12d3c28494f48ef183","ssdeep":"1536:r9iySoTpyw2Ziv1EZv5nDpcP4omgI4AZuync4eZAnnCyX16oMmYtYiGGGZGu/:xORk+RKbCdZZ","tlshash":"cd63c78df792b07913a7d0a1853f121bb339392864454968f25ec8e22e79e4e6137f7c","size":69903,"data":"","first_seen":"2024-12-19T10:18:10.884849Z","last_seen":"2026-04-04T13:30:49.930354Z","times_seen":7424,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d34r8q7sht0t9k.cloudfront.net/tag.js","fqdn":"d34r8q7sht0t9k.cloudfront.net","domain":"d34r8q7sht0t9k.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.137","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"089bb752d04ec345f0b4372d02af537b","sha1":"a7a0c312daec252b9d66ea29ff1c9c44f122db44","sha256":"42ab32f03487ec45973400d51c4b6f39d51cddaf3f754ebad1d0373fc3e6a60d","sha512":"d59f3312fbc1b75077b3a90dcd358eafdbd18d81dfe7b5ec0ea544209ddd70623df20e06744ace4e97b2d74130cdaa3a504746ea5d4ca24f0bbe265d279d89d1","ssdeep":"192:PiVk89Osdq8Mn2qkIR1mmpLr9ozkg1x2Ryl66/jSt7GAg+QyYWI7qDBaS0q:Pj8kx8M2qkIR1mmpnGz3xok/jStFg+QE","tlshash":"473262325be8fc3477f8852467e7c9b87827b50874123cd79cc913695190a837aab78e","size":10954,"data":"","first_seen":"2025-09-26T11:57:24.875013Z","last_seen":"2026-01-18T12:25:23.676102Z","times_seen":854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6192384616c6b32264bef97b4ea5a6f7","sha1":"74a97200f8ddb483f0672d230e5f689c5e169fd7","sha256":"30c1aa018c5bf2d9ca99696561a8024ea84d2bdc18c0ce260807d880d0c87481","sha512":"de4d131da202fc2f30e3b06d4f905572e004bcd1c65b9f8e62b704eecaee38bb87d50b68559071eca400e9df2e6e4b233c2c58360ffcb94b9916c79698f95711","ssdeep":"","tlshash":"3b016b3ff2ec013e15faa647383cd38e55862daf3b50b55e136909d8ad460b28213795","size":812,"data":"","first_seen":"2025-10-02T00:05:19.723194Z","last_seen":"2026-02-10T19:12:33.325975Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b797167fe5c1cab0a6403fea044000c4","sha1":"3dc3213ca8935e72c98ac1db4b0fdeba2a4e7693","sha256":"3c4ec12c1d76c55f601de801433d2793f68bd066f6b91cb69947401ae28a4d99","sha512":"ca00f4a9bcd74c830102827698ee7bd57d26171e8b42db01b1b5c29ae8cc125153e62c75e23ade93287bd7468c6d9865cb50124d0774e7284d37ac090b4830e7","ssdeep":"","tlshash":"79e0c06f2962284a1ff77c7d12ef930a2c2621b63cc007a18517d3e01a3ce430806b1c","size":373,"data":"","first_seen":"2023-09-07T04:20:36Z","last_seen":"2026-04-03T19:43:47.678751Z","times_seen":177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"22b8d5ac1fd992291c2a0d74b0f6f9f4","sha1":"8646274282a1ca3bea092638a7dc3858c60c4b02","sha256":"4df6c5e840de96d2fb520b4a5a48c8f43db935b04e9d306e1e442bd23ab796bd","sha512":"a255f2be7a1d063a4864266445bdedb585e82c76eb7cf23ab843e987e70e3d444eab178b4417d78d2c9fe499b41e17ee2b33d6bc3be259d590f04c5f1cf0db85","ssdeep":"","tlshash":"deb0120daa4977321316dc02531f831be25e0c1002090109e4c6445076669498184f0e","size":91,"data":"","first_seen":"2025-01-04T16:31:46.859671Z","last_seen":"2026-04-03T19:43:47.618093Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"22b8d5ac1fd992291c2a0d74b0f6f9f4","sha1":"8646274282a1ca3bea092638a7dc3858c60c4b02","sha256":"4df6c5e840de96d2fb520b4a5a48c8f43db935b04e9d306e1e442bd23ab796bd","sha512":"a255f2be7a1d063a4864266445bdedb585e82c76eb7cf23ab843e987e70e3d444eab178b4417d78d2c9fe499b41e17ee2b33d6bc3be259d590f04c5f1cf0db85","ssdeep":"","tlshash":"deb0120daa4977321316dc02531f831be25e0c1002090109e4c6445076669498184f0e","size":91,"data":"","first_seen":"2025-01-04T16:31:46.859671Z","last_seen":"2026-04-03T19:43:47.618093Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5563e472195c9d7f9f8f06f97042addf","sha1":"0f2e3b4d98743488ec2b9a25609bf58431b19cc7","sha256":"8508b2d50c72d5b26255115229e98a5163287e2b837997e1cb31a637c8fadcdd","sha512":"2b8875d9ad63c90556ad91d7bd3769ca726cd465c8316a2eced1017124a5be88ac5c6495e7f793b9a2ad05b2f45b29ce18f697fb53bdea6042a654bf8175c2d4","ssdeep":"","tlshash":"f9016f3ff6e8013e15e5b647307cd38d558629af3b50751e33690d98ad420b2c257795","size":817,"data":"","first_seen":"2025-06-26T00:51:21.869727Z","last_seen":"2025-12-04T21:10:33.369884Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/api.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2e7481759188b7514637cf2c8d2febe","sha1":"4130cf88496184951ce54e43f31608a439529862","sha256":"c27f38e80126b1110b0d811887404d5d58e15f550272204ade9d2db51e90072d","sha512":"f0ced9df2af7c6349ab635cd36116b85be22de241e2bc22627c16e7c44a2cc31b2038c7f0f653094941051e552824cdd9e6162ee61dd3c2e84e2576d70e1e268","ssdeep":"768:8PDo7tYY1TMqvI1/CQfoRAmRUh8lDtZm1vEWPyetWGz+hHtjstEMMdEUeFmUOXSA:MbYRMfJ82hmDtZmyhQESMJ7","tlshash":"3703c788b1c2f0a10bee1065543f531af23a6dd5385d8054f268acd67d34aab9273fbd","size":40953,"data":"","first_seen":"2025-09-30T03:27:48.998415Z","last_seen":"2026-03-25T23:07:10.922281Z","times_seen":685,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/19.0cf9cbf0.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"18c31ee6fa620280984a5602366d53f0","sha1":"6cb9a3257c305a0b7bda719455ac2ddb1dff3c22","sha256":"352f07d0c7e109df6177e7cb48efdfac32f773533b7baa313afe16d7c2bdac96","sha512":"ebecb766dec2e88c6506f5a9a5aa50e7d85915e9aedbc9830df76147bdacee96c3f74d190cbc29cbba69cf1691d28e34e3dc5959f517b56479764d296565733b","ssdeep":"","tlshash":"6a512f6572d1fa775ce8c4eeb0905b406a65bb259ac3192c3e2cdccb684efc434346b9","size":3146,"data":"","first_seen":"2025-09-30T03:27:48.987484Z","last_seen":"2026-02-10T19:12:33.178203Z","times_seen":1666,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/4.93f793c4.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e09bd2129d913982c2b57f472ee5a5e4","sha1":"adeacfbcbdf546eb90cb3eb70c84c3cf1a99ac87","sha256":"0f040a4f4ec505d507c6670c2ddf56c1625651289cc230a78287f4f6d6d92a31","sha512":"73e3aef05020b4541901637a1409f8555125e04428df35a48399501275456b48460f01875cf6af19561eec9a6bd2c53f814334638322e12ae53a5787c5235161","ssdeep":"768:Jky8iFsPECNAHvqrSw9KszQTv3yrO/APYJCMVa296rejMBlP6XGOJFXdJIaa3FJl:VkSHc5K/jJCPrXC/mC8y99zc","tlshash":"a713198272e3f47a05eac0f2e1584251e6116e0a79c2917c743cdeeb264aed931e17fd","size":45445,"data":"","first_seen":"2025-09-30T03:27:48.810154Z","last_seen":"2026-01-27T18:30:25.739261Z","times_seen":1858,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wt.inflection.io/scripts/wt-script.js","fqdn":"wt.inflection.io","domain":"inflection.io","tld":"io"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13922be67f0a2ab449c2fcc779c0483","sha1":"939bcabc410a8cd913e560ee819a016f0e295e69","sha256":"ab80fc6d6599f20e45f2566914b1c614a91f1ddc7ada2575eedf947ca407b144","sha512":"5c255b85ba896ebc512c548a13bb17a622853c25a9ceb87997529c94ee6b8f8a771100ed07fba159df7abf804c360115a6119b90b5877fc0fd0788d09bedbf35","ssdeep":"384:ZD0BcbWgAbxCihiUOhqn4Sm571TI/KnqpI:ZPbWVCihB+/d1TIyqpI","tlshash":"c062c6d836d1b0fa42b311b151bfa60bf33a1a61746d9150e026e4d13cb8e8f8267f79","size":15719,"data":"","first_seen":"2024-11-27T21:53:42.463045Z","last_seen":"2026-04-03T19:43:47.349165Z","times_seen":286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45338f031437711e2f4a8472d09b3688","sha1":"6c37760183b6995134876d3cae9a52a9f74fc615","sha256":"6ecbe5b78e18074abc82ff772713a22cfdc57bb677208f613177607fcd8cbadf","sha512":"76214ee721eabd3d9a94b3ae90243d2d268488e9efb23abad4413f167dc3497daab64a5ed884db534d634abdf91f99a78ef352562314e87da0b7fe88a93b1558","ssdeep":"","tlshash":"52900259824485125b9d51f5947a198d631a118451214058836d24881d4245a8810130","size":45,"data":"","first_seen":"2025-06-20T20:17:42.470908Z","last_seen":"2026-04-03T19:43:47.699728Z","times_seen":285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cdb466b0e4f3dd8110df26ab9729fa07","sha1":"4b6f2d6fcdcdd1c0f32794b02f74661e11439b42","sha256":"5007814583be7a65fd267f25ac654ec2f89dc652e6575fcd2db146116dc986dd","sha512":"40e5ebb0be27fb3d5962b841e39326e13fbaeea16d6e3d7fa2396478a284a87e02a412afd3ab76664c05384afc817ed3531fa64e3e4c44121d5de5beb45a5619","ssdeep":"","tlshash":"0f016f3ff2e8013e15e6a647303cd38e15862daf3b50711e23690998ad830b28213795","size":812,"data":"","first_seen":"2025-10-02T00:05:19.803629Z","last_seen":"2025-12-04T21:10:33.435022Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2d1ecab52f3dddbb579f1aae0392b4c","sha1":"1a1b9bc908b533a1c9c4b00459997011d40fa272","sha256":"785279c962d31a30a5310ff38944651078a444e57e592e011bcd3b2eed4333fe","sha512":"3c4dce016f5779c9c7b20e0a612b847d96956d2fbaebb5ceec1024b926405dbeddaccf46844770800b024e015f21ca13c1c1f509ee182d465f38a2bd7f5c05a5","ssdeep":"","tlshash":"cbe026b73c8288b929f8209d23bf875ab6b630467614a89050dec814247cea78415798","size":337,"data":"","first_seen":"2023-10-17T11:06:05Z","last_seen":"2026-04-03T19:43:47.717455Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/27.8fd4488d.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9657526c2686812d3be6423bb81f7ef","sha1":"11cc965a04df09b828b7907f0bc5a3885d108103","sha256":"800d569227aae400cd9985ec2246192f279fb00f051eb870752cb2eaa7ff84c4","sha512":"e4c7d8ca31642ac09539b8930e756d26a93bfb49cc116f1d0d59adb945ca7b7bad94dda1b6133f5f4a59984e974b01bead2fc8a387004f0ebfcb8f420f513b18","ssdeep":"","tlshash":"6551eabba0d29c39aff941a9746d4311413921271e829c8c365ceec3d514e4f229bfbc","size":2865,"data":"","first_seen":"2025-09-30T03:27:48.999452Z","last_seen":"2026-02-10T19:12:33.148642Z","times_seen":1973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/gsap/3.13.0/gsap.min.js","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e6e6cba1d2eabb40740bdc12f736a3c","sha1":"fa1aeabcead11241607d9249ff20c8bcbbac2012","sha256":"96c01b81f44a3290e2b4532f55e2c9534b2adc43273a19f3756b2cb41f0fd0b6","sha512":"35c65db6b4fbedb26be124dc9ac180112af4e8160613cc2865d49d120aa7a72a9a73bb2e80d3be4ebe1b1b0185dccb2712418a854d8a2f6c61e8473e06ab1a1c","ssdeep":"1536:8ha1HvGRpXaDTX+Iq2CpsvO3dyL4NZEkcIRy5ybx:71Heaujpc5EKjI+yl","tlshash":"f863e8dd3292f423039751a1447f094bb337e998640f0918f269e4ce7e2c99d42bbe7a","size":72435,"data":"","first_seen":"2025-05-20T13:32:29.657679Z","last_seen":"2026-04-04T14:28:48.17577Z","times_seen":1920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"22b8d5ac1fd992291c2a0d74b0f6f9f4","sha1":"8646274282a1ca3bea092638a7dc3858c60c4b02","sha256":"4df6c5e840de96d2fb520b4a5a48c8f43db935b04e9d306e1e442bd23ab796bd","sha512":"a255f2be7a1d063a4864266445bdedb585e82c76eb7cf23ab843e987e70e3d444eab178b4417d78d2c9fe499b41e17ee2b33d6bc3be259d590f04c5f1cf0db85","ssdeep":"","tlshash":"deb0120daa4977321316dc02531f831be25e0c1002090109e4c6445076669498184f0e","size":91,"data":"","first_seen":"2025-01-04T16:31:46.859671Z","last_seen":"2026-04-03T19:43:47.618093Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d13121d7a7070a3ef275f6c88aa6e0c","sha1":"0c0f4c6219411ca107c3091ec00728b026937fb3","sha256":"a1a85076b4e779a0a7311ea7d0801997185be24db6e04731505e1dad286112fd","sha512":"8c2fbf2cf83fabe1554e8cc4aef467e54cfc047c526d8e312e2fa171935c2e42b446d0f204b59971325be416c62e10865de36064a456b5bc96935cf79f72c026","ssdeep":"","tlshash":"21e072ab19ae81344dca054a243fd228b6f3003d7825ec82c0c8cc69ab38fc40126ee8","size":302,"data":"","first_seen":"2023-03-12T15:19:29Z","last_seen":"2026-04-03T19:43:47.682247Z","times_seen":168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"518a68f65ef4e8adb40acd41ba28fa76","sha1":"f7c893f0daf2d8ff1176d0ff27fd18468b733ab0","sha256":"254569205e8f295ca75c7f0befc305e189735cb5963bc23b34f5609a94d1cd43","sha512":"4cd12e26ecdaf8312652cf8002b6f05d6db3287287d0d1b61addfed1ccde5f8d23daa2e33b8556edfbed750d507a0072540f5e9b0a90810505cd79ec0251a96e","ssdeep":"","tlshash":"ab016f3ff2ec013e15e5a687307cd38e15862daf3b40b11e12790d98ad420b2c213795","size":813,"data":"","first_seen":"2025-06-26T00:51:21.874625Z","last_seen":"2025-12-04T21:10:33.373268Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.amazonaws.com/beehiiv-adnetwork-production/pixel-support.js","fqdn":"s3.amazonaws.com","domain":"s3.amazonaws.com","tld":""},"ip":{"addr":"16.15.177.200","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fcfe35cada10d74dabae25ce3925243","sha1":"a14b0b0752e6100beaf049ab7d003494e31ac911","sha256":"5acc7e6ade3d8731ed59fd6014d19a842eab8726df017e3f0f23d8843f74e918","sha512":"48677f4527ab0ad475da06c90b7e61a9cf6878d5a045090d4a811f22347f447183c081efe06e30514cf1bd13a7d9091eabfd225d6534eadfde98cfaebc53723a","ssdeep":"","tlshash":"3941d02d13b1457196bf213c8b6f6615282340cb350b9b117fcc9b805fa221ec27c6cd","size":1880,"data":"","first_seen":"2025-06-10T16:08:51.701359Z","last_seen":"2026-04-03T19:43:47.321678Z","times_seen":250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fe10767c86ff30267287c64a170ac2ae","sha1":"fa3ead6b67f71e568b9b3d707876556102a90e4b","sha256":"4b6c4d39469fe65c284d984f0be74bc894549a1d62230fde00bdeb350ad2846b","sha512":"d1493519061e1b94d4a45f9df6fb2037051aa6fd8272d2f0a800d1f0b176a4ce7f7df2885edfb8c2a7fa7b40863d88293be7295339adcb19921d4fd214202ebe","ssdeep":"","tlshash":"08b0122ff3f820b15b176107b2a68652719715ee3d00004c663788d836476dd02e9bb7","size":111,"data":"","first_seen":"2025-06-26T00:51:21.901759Z","last_seen":"2025-12-04T21:10:33.376509Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/0.bc80f3cc.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"079a0fd4528f1a49418ef250d62eff77","sha1":"e6930abd46c18db944e6d7f214d5ac4d3ca21b75","sha256":"977ba8945143351ce85ad82aa45085a9691357b6d86a158ef82048279e141deb","sha512":"78a80b7471689db93c08e640ae342d5feaabe33fd42a1a1fe3c968fe73337567a3c927c2f9b19790c32a895f9802f1140d3df898ce61d50f452dc05c89bc939e","ssdeep":"192:xRr1cxSUlxS0btQaC2c8pnFmq2PDCmrIkrpqeZC2Hre5+blRRQ:x11cAgxfbtQaBbpncq2LBsktqWBHK+5g","tlshash":"8fe13114b2c3f63128f7809aa3960298063192142a82d1bdb47ddffb5d2df5970977f9","size":6944,"data":"","first_seen":"2025-09-30T03:27:48.922007Z","last_seen":"2025-12-17T22:13:32.545253Z","times_seen":1451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"22b8d5ac1fd992291c2a0d74b0f6f9f4","sha1":"8646274282a1ca3bea092638a7dc3858c60c4b02","sha256":"4df6c5e840de96d2fb520b4a5a48c8f43db935b04e9d306e1e442bd23ab796bd","sha512":"a255f2be7a1d063a4864266445bdedb585e82c76eb7cf23ab843e987e70e3d444eab178b4417d78d2c9fe499b41e17ee2b33d6bc3be259d590f04c5f1cf0db85","ssdeep":"","tlshash":"deb0120daa4977321316dc02531f831be25e0c1002090109e4c6445076669498184f0e","size":91,"data":"","first_seen":"2025-01-04T16:31:46.859671Z","last_seen":"2026-04-03T19:43:47.618093Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/10.3df31ec4.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"da6f0853c9122702b72f6944821537f3","sha1":"f1befd164333938cc251d30129fa358be8d9559f","sha256":"af9e7ab135be36d85f97f922f277f00219696911925f3789d73a7a54dc0e1255","sha512":"5ade20b3611767b8c8053face9d0e8c8ce7a14546c0296d6d2bdcddb99a40362a599c40d4158cf00548d7ae8313ae4e82feb587376ad2b3d5deedbc971dd2ea4","ssdeep":"","tlshash":"783124ee717278f44da1587cc1fe9735605785162c4f422cf11caeab24adc8f0187ea8","size":1621,"data":"","first_seen":"2025-09-30T03:27:48.975924Z","last_seen":"2026-02-10T19:12:33.233717Z","times_seen":1973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"22b8d5ac1fd992291c2a0d74b0f6f9f4","sha1":"8646274282a1ca3bea092638a7dc3858c60c4b02","sha256":"4df6c5e840de96d2fb520b4a5a48c8f43db935b04e9d306e1e442bd23ab796bd","sha512":"a255f2be7a1d063a4864266445bdedb585e82c76eb7cf23ab843e987e70e3d444eab178b4417d78d2c9fe499b41e17ee2b33d6bc3be259d590f04c5f1cf0db85","ssdeep":"","tlshash":"deb0120daa4977321316dc02531f831be25e0c1002090109e4c6445076669498184f0e","size":91,"data":"","first_seen":"2025-01-04T16:31:46.859671Z","last_seen":"2026-04-03T19:43:47.618093Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/consent/e00a365a-4519-4e49-bc2a-ed5bba62ed06/OtAutoBlock.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f817ea2e7acf200cfc3f0b9717b14953","sha1":"a3e57a5be44057d49471b0861d0bfcfcc8d6d617","sha256":"5cfbf512351939c9253a647642420ff57a3a9f73e217347d186e861c5b5bf11c","sha512":"19bf3f8f7718fb8481ab90bcd269e90263f334bcf698fd323eb4d7995c17619751304f5d9fa51431a1ca967279bf9b9ce3ce241d67fe5cfae7bd802f8c5d95fa","ssdeep":"1536:H+KVDKqYzvz6/tPRY6dvjpLMR1SHMrRJ1qlydaORkUgueO5eLi8bMQ8PRDbafjMy:YvmNMrSLi6WflBx6NQWV","tlshash":"1284629b43ec1caa9f091f51a4d6fa0e8ddbb6cb4fc3ac95d0b4cf584b950b9801891d","size":389238,"data":"","first_seen":"2025-07-08T15:24:26.555802Z","last_seen":"2026-01-23T19:28:35.06992Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/15.933b9be1.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7e91de33929fa676dfcfa4a9fd3611d","sha1":"cd170c572e5a11459ae3ed7a38ff4c504cba8477","sha256":"38dd544d5700f089ddf09602dce088bc4c614d471c3e4a827e77b5e630038f66","sha512":"0d3528a381925d72049018a639164e158834899ed49105f449794bf2a11db07edd05e4ddd1d439ddff9b6e84d0c39e68128b29b8731e04e78a1e536ec0ea3bb2","ssdeep":"","tlshash":"69011eb73282b572299a04e2c5c04a88f840376d7541143dbafdece1680ec841251fbc","size":830,"data":"","first_seen":"2025-09-30T03:27:48.948585Z","last_seen":"2026-02-10T19:12:33.234382Z","times_seen":1973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.byspotify.com/ping.min.js","fqdn":"pixel.byspotify.com","domain":"byspotify.com","tld":"com"},"ip":{"addr":"34.117.162.98","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"147cf2f285dbed672b785764d4d022b2","sha1":"c77d75d160d2698f35a8156a7923770b30177537","sha256":"6dcc4835d26916b2a8801700d2d42f32369f66fbdf76a28cf8c1fde689b36bb2","sha512":"0c84f75aaa543bb414bae90097a2d9f90082490e632314d7ca256b6724d7d93615dd82a026ffe3a64b3130b1e1dd245aac69df9e0a1be75f8ec1ce78a42695fb","ssdeep":"768:XMZqt1vkPU95O9oBivYrf/9HkhA3moiOQnZA7B:8E9/zPHdrYA7B","tlshash":"f413b7c8f9e2f0a053bb64b4412f9007f73fa919b41d95a0d255e9d23db890a9263f3d","size":41639,"data":"","first_seen":"2025-09-02T21:13:52.876517Z","last_seen":"2025-11-15T08:45:45.501717Z","times_seen":1069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extend.vimeocdn.com/ga/26845909.js","fqdn":"extend.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"377b77886b8f14f7c30f202b4afedde9","sha1":"d8ffa187f74c7b4295240038349937f7b57c2b42","sha256":"6c649cc3d4aee7683250622541a6045ad4ac3beb93df1fcdd3ec1f7f12a1ff44","sha512":"b920a8e5f73ec074d6c15ee159cc99d89be98cabb46285bcddb1e2b07217224edbb0ac9d3cf21a754a56dfae45d9efdc7c4f135f57fbfb27c9bb9ccb0e52a67f","ssdeep":"384:mPqNtjavijNPlkRLwodDm5uLglUYZlreeQ:tfZPl84LZlqeQ","tlshash":"8f72b59e769170b443aba1b1813f160ff275997a240d4464f210d8f67cbd84f9627f6c","size":16926,"data":"","first_seen":"2023-03-07T01:10:49Z","last_seen":"2026-04-04T06:03:26.321259Z","times_seen":2762,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3090ea64680e41b6c80d377e7b352d7b","sha1":"fbe54fd5edfa14e8f115c8742ca1b3778794fbc8","sha256":"c9a9b5226e6c7604efc61761286c78fd88f880609128c14e92a5078bbdb2e6bb","sha512":"a07b1172b60634fd81846ab9e07e4c073e0db83cdd4e754113b0792ccc8c256358aa5691eaa45fab05146332a13675d282a8a3bcb5e3cb68393b622f9591a207","ssdeep":"","tlshash":"fee026b63c8688b929f8209d23bf8769b6b63046b614a89050dec824247cea78425798","size":337,"data":"","first_seen":"2023-10-17T11:06:05Z","last_seen":"2026-04-03T19:43:47.704175Z","times_seen":169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"02a2c6cba55887dd8f78fac016922fe4","sha1":"32cadabbd9262e2c65e464500d86ac2333c7105a","sha256":"e1cfcb77c5c719b3958a0024cb4dacd8170561644cb386b9d27d92756ea6fee5","sha512":"9b2fb7fc5cbecb44b72069722a113db594c83c33ebc1a45ad709ddb33c0c86549abdcebfd41a51890bd8fecbf2f7bab62b78f44af37040996ba736c6cf7bb91d","ssdeep":"","tlshash":"22b0120ff7f520b11b176107a2e6865560d709ee2d00004c567b89e926476ed02d4bb6","size":110,"data":"","first_seen":"2025-10-02T00:05:19.724809Z","last_seen":"2025-12-04T17:45:35.427866Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f4204124ba2c23acae1550cda48c23e","sha1":"5d11ebfc4184607ada5c67b312e4b6603be8d5cb","sha256":"7abec5de61438680241ea266acc6b09e3b30a9e5f8790fd14a289ad00fea7dc3","sha512":"af60c4e740c40523aa3f55c14122ff23e20090b3a4a8392c9d9ed332670479ad4f9e0bc422efa69635b77e7cf24787487b00632c0aee0b0b37fedf901162614d","ssdeep":"","tlshash":"bec04c74628037d9fcb794c0ad229542d7b4c2bed0ba8cf8026807dd0d2ea646e57e79","size":145,"data":"","first_seen":"2025-06-20T20:17:42.476629Z","last_seen":"2026-04-03T19:43:47.701192Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"989a3ff72dfb8af07c703855ffc928b3","sha1":"3def3d9f93cd6a8861a876464297c15d58e4a897","sha256":"96f3fa4444dc0024e6988fe988c88193fc009bd50d30c3628639701e4c30f235","sha512":"1c239d5909426a027f508b125ddb06df8499a7fa5b1826844347ff194cb7939d6c3e753f14c5ed534968afcf32933620fc047a9c6f9b79e56b0197fa07c6321e","ssdeep":"","tlshash":"ebd0a75a9e46c5668d4609dde4afc73940b3b1349de5c48580f4cc692f1cee5049a129","size":246,"data":"","first_seen":"2023-12-18T22:10:30Z","last_seen":"2026-04-03T19:43:47.720551Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"536586ec871c3163b4c69d6e25700c13","sha1":"0469bcdbb89917926d91d10f8bf5b7911b2a0115","sha256":"6b42dc16ce7f1ec12d803bd2797fa68b5990487260081a847b4f516c202090d6","sha512":"3f513aa526220205e35767ed56c039ba0f64e2a82466813cc3c32ae813e6f71362b8b953c444f55f2ba735606e9c9f0edd25ed7949831846999aa8f303435b73","ssdeep":"","tlshash":"82016b3ff2e8013e15eaa647303cd38e16c62daf3b50b51e23690998ad420b28213795","size":812,"data":"","first_seen":"2025-02-05T12:04:11.853006Z","last_seen":"2026-04-03T19:43:47.643183Z","times_seen":174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6346a065f4a41a03ad1c052eb6781f46","sha1":"a3198ae1bbdb2ca5ce651ff636629626305eb210","sha256":"2bedf0b90fd5ddfe8fdef1363a1fd3496c73fd2a2df6b2d2703906527bd145c5","sha512":"0cb068389eb7652e137274a75cdc526eec25feaef9ff8e622c0a4648021d2ef732f397de53c91967f088128ba3c04955dc9aa3e98e77f9f4988b32b21b28dbd0","ssdeep":"","tlshash":"00c080dbf181257043f21c141af1915565784509df0cd871d044c432ccbdd4841f7d48","size":174,"data":"","first_seen":"2023-09-07T07:29:16Z","last_seen":"2026-04-03T19:43:47.604111Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9cf3620f7b3a967339fcfea6a5d862a5","sha1":"7f8231678740736dd9a2f909e12d5f32eaf44a4b","sha256":"e0e913728319a6f5c0d2fccc0e1392c3be2abbc7c6bbcbb7c0daf64e55137be8","sha512":"138352462480b7ad72c06d5952453bd389f42ccadbdcd523c1d15766dc1fd4e07c6a17241258816ace87376b283dc3573e9dbce6c5a152c5ae904b8cd3117148","ssdeep":"","tlshash":"b6016f3ff2f8423e15e5a647307cd38d15867daf3b50b51e22690d98ad460b29213795","size":807,"data":"","first_seen":"2025-02-05T12:04:11.848135Z","last_seen":"2026-04-03T19:43:47.705908Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4ccdd3367fb54967f3a27b05d4bd03f1","sha1":"fe2afce510b1efb43c7c45c464ffa3aaca16083e","sha256":"b6d96529f1a2eca5b104d1c1e8539093bebaa0e80e4f6eb40433bdb06dca32ad","sha512":"7889f2a0d5b3ddf9e1c649cf8807a2c5598a8d1e1ab16af6d47a88c414259a27e57eea22484f65eecb3346bca1750d7f21254ea4712548614664cafd4c45f2f9","ssdeep":"","tlshash":"7cb0120ff3f820b11b676107a2a68651a09725ef3d100048563788d826476dd02d4bb6","size":109,"data":"","first_seen":"2025-02-05T12:04:11.858796Z","last_seen":"2026-04-03T19:43:47.733367Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"22b8d5ac1fd992291c2a0d74b0f6f9f4","sha1":"8646274282a1ca3bea092638a7dc3858c60c4b02","sha256":"4df6c5e840de96d2fb520b4a5a48c8f43db935b04e9d306e1e442bd23ab796bd","sha512":"a255f2be7a1d063a4864266445bdedb585e82c76eb7cf23ab843e987e70e3d444eab178b4417d78d2c9fe499b41e17ee2b33d6bc3be259d590f04c5f1cf0db85","ssdeep":"","tlshash":"deb0120daa4977321316dc02531f831be25e0c1002090109e4c6445076669498184f0e","size":91,"data":"","first_seen":"2025-01-04T16:31:46.859671Z","last_seen":"2026-04-03T19:43:47.618093Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7e474b9aa202aa571b248b322c6d6e3e","sha1":"b673d518839806ed2ac836737fa346ee3e59adb9","sha256":"d00d1e17f26cf7b590be4017ff15d4f95a057ada660c5a572934801137f855ad","sha512":"bdbbffa65eb68c7744150f8854c672939f779d3ed1a0bfdbb30225227d1382dce7fad46dc6af921dc639bdf3e7cd64143c58874647483e04e94f9bf0bb1a41ec","ssdeep":"","tlshash":"caa01208b0c090f5537e20570655c78560aa092a958100650046444029148000295a16","size":86,"data":"","first_seen":"2025-06-20T20:17:42.431057Z","last_seen":"2026-04-03T19:43:47.61186Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/63e3da3df35cd62f54751985/js/bill-com.schunk.36b8fb49256177c8.js","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d1d67fe2715f25c2fd98a9011d8ea67","sha1":"fd1ce2d8e0999d8279b32211977bddeb04aed0d5","sha256":"8b7d0de9f3df9103d70ed000c17b348240623ac4e4053d56fa0d5cfd8d74d79d","sha512":"f6c9f1147f527cf9e787075eac748e04606872ff4220feeb65cff21672c42dcd2905b2bd31ced2e80c2d249b5a32a69023867b43712561b01f700f6b57e30ddf","ssdeep":"768:g4DiJdpMNsppahKJpE8c32YpIx6qh215vgS9AoS9I1hh00:g4DiJ/1HasJmoYpI1k179AK1o0","tlshash":"be13228dfac1f0914363e966822f941bf27a6a59b04fd4d4926ad1e0dc7c58f8027e2d","size":41429,"data":"","first_seen":"2025-05-14T07:45:58.253137Z","last_seen":"2026-04-04T15:15:52.241436Z","times_seen":10358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WG5S2V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:45.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:44 GMT","end":"Mon, 15 Dec 2025 08:40:43 GMT"},"fingerprint":{"sha1":"02:50:AA:DF:C5:16:76:73:9E:ED:AD:C4:E5:98:EB:E7:2D:B9:C3:33","sha256":"6C:68:2F:0A:C2:03:62:A1:8E:7B:3B:BB:D6:6D:96:A7:78:6C:78:0F:1D:F0:EB:77:84:A5:4A:DD:07:44:9B:DD"}}},"request":{"raw":"GET /gtm.js?id=GTM-WG5S2V HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Thu, 09 Oct 2025 15:05:46 GMT\r\nexpires: Thu, 09 Oct 2025 15:05:46 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 178507\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":657977,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (45391)","md5":"f583efe528dc5f3bedeb36975c17a2a5","sha1":"bcb78fbd8e1af3505c1241caaaf943c8e0eefe01","sha256":"e5083624adb07fea1a72f6a9a8e8cadc800b7a5a4d4009ee3acb0b3d0fc23a0e","sha512":"00a8be0f1dbb6c57e6324dc46432abea68bdf36ad1fd8c238d69c1f83e52b7075c78a52fb4b6a7f9576ff20177cd0f13619ac806d2258f65bb90e9c7a88471c4","ssdeep":"6144:rMhhJJsIty2Q51wcpjJ/0njCnfgGn6XV4rvoB6zcYGbIfAtTdb:SIIty2Q3Xcnj1G3owjcZb","tlshash":"92e43bcdb6c5b476c396a464943f014e693e24f2b14c9894f0d9cce41e74aba2163fbe","first_seen":"2025-10-09T15:06:12.190436Z","last_seen":"2025-10-09T15:06:12.190436Z","times_seen":1,"resource_available":true,"data":null}},"time_used":401,"timings":{"blocked":103,"dns":2,"connect":28,"send":0,"wait":106,"receive":87,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"258-fem-750.mktoweb.com/cdn-cgi/rum?","fqdn":"258-fem-750.mktoweb.com","domain":"mktoweb.com","tld":"com"},"ip":{"addr":"104.16.96.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://258-fem-750.mktoweb.com/index.php/form/XDFrame","date":"2025-10-09T15:05:46.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"258-fem-750.mktoweb.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 15:51:40 GMT","end":"Sat, 22 Nov 2025 15:51:39 GMT"},"fingerprint":{"sha1":"D6:0D:2A:35:93:4C:E9:03:C9:FD:46:C2:ED:10:78:69:0C:33:10:95","sha256":"1F:AE:21:33:B4:4E:8A:64:73:CF:01:A2:9C:23:DD:E0:92:54:98:8F:FF:85:8C:85:39:7B:A1:D0:AB:1A:62:76"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: 258-fem-750.mktoweb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1069\r\nOrigin: https://258-fem-750.mktoweb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://258-fem-750.mktoweb.com/index.php/form/XDFrame\r\nCookie: __cf_bm=Ey4IQwZYYTRvSGik3_vktD4kyojcwfBb9txLZyG7teA-1760022345-1.0.1.1-9OiZBoPTVq16IOGL3fs.kzwPACvbLbyxqA7hx3eIyAWwuNhw04rFKH9cXYobr7L.YonxoL8u0TVC_PIBg9JPUiFcbH.thTlPs5XGqayarBw\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 09 Oct 2025 15:05:46 GMT\r\naccess-control-allow-origin: https://258-fem-750.mktoweb.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nserver: cloudflare\r\ncf-ray: 98bec730afe33181-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reveal.clearbit.com/v1/companies/reveal?authorization=pk_3de6fd69451431022e5de23a6e215265\u0026callback=revealCallback","fqdn":"reveal.clearbit.com","domain":"clearbit.com","tld":"com"},"ip":{"addr":"18.158.205.16","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearbit.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 16 Jan 2025 00:00:00 GMT","end":"Sun, 15 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E6:97:6A:EB:C2:2F:03:0D:FC:35:FF:AA:95:D0:0A:E6:39:05:F6:EE","sha256":"B4:8D:69:00:68:49:35:5C:3B:D1:9D:8F:1F:69:46:4E:FE:50:65:B0:A2:F0:83:A0:34:57:2F:44:31:3C:A7:96"}}},"request":{"raw":"GET /v1/companies/reveal?authorization=pk_3de6fd69451431022e5de23a6e215265\u0026callback=revealCallback HTTP/1.1\r\nHost: reveal.clearbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bill.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript;charset=utf-8\r\nx-api-version: 2018-03-28\r\nx-account-id: 58f0b949-bc6e-45bf-9731-71f5a38c4b33\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\nx-envoy-response-flags: -\r\nserver: Clearbit\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":218,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"0b47432faa3b0d5f7e0281f219ae2551","sha1":"25b01edd0d4907ed9037f14354824ae17f8bfecf","sha256":"7b21afec666a13965b2c1e60d6e40a8bae13c8edce584631fa6e1abcd0938463","sha512":"676da1f25a532536de8e61c71c9932e164c47fc4117cc6d6f67675ba030d0a3f0f7c813b1f66ca7999b6c1619c8fd84f2ece457c9a4279c14e91d6f35c90499a","ssdeep":"","tlshash":"2cd0a72910341e18ada9c78c614e7b7206be1323c34955606ccbaf2080f06ec3114066","first_seen":"2025-10-09T15:06:12.245033Z","last_seen":"2025-10-31T16:28:58.66647Z","times_seen":21,"resource_available":true,"data":null}},"time_used":690,"timings":{"blocked":235,"dns":38,"connect":25,"send":0,"wait":215,"receive":0,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/63e3da3df35cd62f54751985/css/bill-com.shared.5560cfb11.css","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:44.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 17:30:56 GMT","end":"Mon, 10 Nov 2025 18:30:53 GMT"},"fingerprint":{"sha1":"4E:8C:AA:A3:52:1E:AC:1D:1D:23:4D:AC:0D:48:D5:BB:F9:04:B2:8F","sha256":"9F:CB:1D:9B:6C:0D:B9:B3:80:11:A4:E0:06:8D:F6:2A:5A:F8:2B:36:D0:55:D7:9D:F2:31:72:29:4F:B0:6F:A7"}}},"request":{"raw":"GET /63e3da3df35cd62f54751985/css/bill-com.shared.5560cfb11.css HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:44 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\nx-amz-id-2: xYKvZV8TeM4Tpf/xR2MfKLFpzY2aYmPjxHVGOSv8xBCqhEx897RJKq8TDc8TTdRedwsyGUq/b8o=\r\nx-amz-request-id: 21D2S0Q12AMZFPCY\r\nlast-modified: Wed, 08 Oct 2025 22:37:55 GMT\r\netag: W/\"5560cfb11e0a17f8fafaae0e379bdc04\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: 4bfMtIQS1Il1IWEaZmCwtsM8kQ3l9dDp\r\ncf-cache-status: HIT\r\nage: 57840\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 98bec724593d712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1094235,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2587)","md5":"14e392eb16daf8d99d4bc698ba440ca8","sha1":"c94020ac1c1900bd57320fff79f1efc866c78038","sha256":"ad59b020e833cc0b897bc987465e1780b3ae7f83eade0b340a0eb53c73f2c121","sha512":"da5edd9af9ddbb8f100128c010a79e5ca274b05aa2fc8490ee5982bf22c2fb099e2efcc336cb09944c215cd153cd4783bc359506d075fc7429e73b90184890fb","ssdeep":"12288:1M4cPyfhJLnTDQD0DFZ0QlPWWH5pKu4R05AuaYqbcRrhQTrTAuPWuzkPJDoJxrT:PTDx5pKu4R05AyqbcRrhar0uPWuzJ1","tlshash":"e625c7082ab864543a5f54fdd9e9abd0b21d8043cf8eced475d19099dfc829838b6f9c","first_seen":"2025-10-09T15:06:12.255025Z","last_seen":"2025-10-09T15:06:12.255025Z","times_seen":1,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":198,"dns":0,"connect":1,"send":0,"wait":16,"receive":0,"ssl":204},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser-intake-datadoghq.com/api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A5.28.0%2Capi%3Axhr%2Cenv%3Aprod%2Cservice%3Abill-marketing-site\u0026dd-api-key=pub44ba4f0880bc7722e3f2653d3d00ee1c\u0026dd-evp-origin-version=5.28.0\u0026dd-evp-origin=browser\u0026dd-request-id=7e8fbbf5-99dc-48b6-833d-4005fd29f687\u0026batch_time=1760022346810","fqdn":"browser-intake-datadoghq.com","domain":"browser-intake-datadoghq.com","tld":"com"},"ip":{"addr":"3.233.158.25","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:46.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.browser-intake-datadoghq.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 13 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:3C:F6:6E:27:57:0E:5A:16:C1:A7:43:09:EC:A4:BD:94:B4:7F:F7","sha256":"3F:54:11:62:56:D3:18:55:98:79:B6:94:47:3A:A5:4B:9C:EE:6A:05:3B:C7:90:C1:A5:BE:52:2C:89:0B:A7:9F"}}},"request":{"raw":"POST /api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A5.28.0%2Capi%3Axhr%2Cenv%3Aprod%2Cservice%3Abill-marketing-site\u0026dd-api-key=pub44ba4f0880bc7722e3f2653d3d00ee1c\u0026dd-evp-origin-version=5.28.0\u0026dd-evp-origin=browser\u0026dd-request-id=7e8fbbf5-99dc-48b6-833d-4005fd29f687\u0026batch_time=1760022346810 HTTP/1.1\r\nHost: browser-intake-datadoghq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 16208\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 202 Accepted\r\ncontent-type: application/json\r\ncontent-length: 53\r\ndd-request-id: 7e8fbbf5-99dc-48b6-833d-4005fd29f687\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\naccept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Thu, 09 Oct 2025 15:05:46 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9aa87e20ef6dd7b97f5b9530b14a582d","sha1":"88a6f75eb4869ca72818014e5724e361448f90f2","sha256":"dd5c4088b1875c40d989501bbdc2f4f6e60bdd0cc03042cb3a933f51e80227a6","sha512":"6677ee757f41a95fe6767e59ad1e1a84352be1b80f809be0659af59924b1f5313c63db75f0112a40956ae743beeee15c685e4ef14ad30ec18ada4f36a28da062","ssdeep":"","tlshash":"9390025aa4e424d5cb58c5424c145d0160ba7150dc4d905946955b445115040d750405","first_seen":"2025-10-09T15:06:12.258496Z","last_seen":"2025-10-09T15:06:12.258496Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trkn.us/pixel/conv/ppt=19990;g=site_visit_sxm;gid=46731;?ord=1032149161;ip=91.90.42.154;cuidchk=1","fqdn":"trkn.us","domain":"trkn.us","tld":"us"},"ip":{"addr":"95.100.107.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:46.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cert1-prod.aut.a24365.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 05:44:22 GMT","end":"Wed, 31 Dec 2025 05:44:21 GMT"},"fingerprint":{"sha1":"D3:C4:51:27:62:7B:F8:3E:E8:30:41:24:17:27:08:2C:55:25:B6:A3","sha256":"BC:47:68:BB:C6:53:12:EA:BF:8F:D0:BA:38:5C:31:26:30:78:49:DD:88:80:DC:F3:F5:2B:06:3F:3E:2E:5A:A2"}}},"request":{"raw":"GET /pixel/conv/ppt=19990;g=site_visit_sxm;gid=46731;?ord=1032149161;ip=91.90.42.154;cuidchk=1 HTTP/1.1\r\nHost: trkn.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bill.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: barometric[cuid]=cuid_68e7cf4a-8b6a-4645-af1b-a96d61ceed1a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 42\r\nContent-Type: image/gif\r\nPragma: no-cache\r\nDate: Thu, 09 Oct 2025 15:05:46 GMT\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nExpires: Sun, 9 Nov 1980 12:58:00 GMT\r\nCache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate\r\nSet-Cookie: barometric[cuid]=cuid_68e7cf4a-8b6a-4645-af1b-a96d61ceed1a; expires=Fri, 09-Oct-2026 15:05:46 GMT; Max-Age=31536000; path=/; SameSite=None;  Secure; domain=.trkn.us;\nbarometric[idfa]=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; SameSite=None; Secure; domain=.trkn.us\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T15:48:44.454201Z","times_seen":763472,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d34r8q7sht0t9k.cloudfront.net/tag.js","fqdn":"d34r8q7sht0t9k.cloudfront.net","domain":"d34r8q7sht0t9k.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.137","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /tag.js HTTP/1.1\r\nHost: d34r8q7sht0t9k.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\ncontent-length: 10954\r\nlast-modified: Fri, 26 Sep 2025 08:27:47 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Thu, 09 Oct 2025 04:35:10 GMT\r\netag: \"089bb752d04ec345f0b4372d02af537b\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 70oRHOcyVyM9ya2w-CT90sd2P0Hfy81IQYEQPivNB_HYmT16eSpW_g==\r\nage: 37844\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10954,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10954), with no line terminators","md5":"089bb752d04ec345f0b4372d02af537b","sha1":"a7a0c312daec252b9d66ea29ff1c9c44f122db44","sha256":"42ab32f03487ec45973400d51c4b6f39d51cddaf3f754ebad1d0373fc3e6a60d","sha512":"d59f3312fbc1b75077b3a90dcd358eafdbd18d81dfe7b5ec0ea544209ddd70623df20e06744ace4e97b2d74130cdaa3a504746ea5d4ca24f0bbe265d279d89d1","ssdeep":"192:PiVk89Osdq8Mn2qkIR1mmpLr9ozkg1x2Ryl66/jSt7GAg+QyYWI7qDBaS0q:Pj8kx8M2qkIR1mmpnGz3xok/jStFg+QE","tlshash":"473262325be8fc3477f8852467e7c9b87827b50874123cd79cc913695190a837aab78e","first_seen":"2025-09-26T11:57:24.875013Z","last_seen":"2026-01-18T12:25:23.676102Z","times_seen":854,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":10,"dns":25,"connect":1,"send":0,"wait":2,"receive":1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.6sc.co/","fqdn":"c.6sc.co","domain":"6sc.co","tld":"co"},"ip":{"addr":"2.22.225.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6sc.co","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:02:21 GMT","end":"Wed, 05 Nov 2025 09:02:20 GMT"},"fingerprint":{"sha1":"27:4B:B8:AE:07:40:BE:A6:37:5A:53:A4:94:03:EE:07:A8:96:58:80","sha256":"79:86:0D:15:68:5C:19:D9:33:E2:5A:25:FA:02:A2:2D:7D:F6:D8:13:3B:07:79:D4:9E:EE:56:52:94:1F:9A:EA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: c.6sc.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 7\r\ndate: Thu, 09 Oct 2025 15:05:46 GMT\r\naccess-control-allow-origin: https://www.bill.com\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"d97623d172f087d9640da9acd38830ff","sha1":"515bd358bb7d990930f0e2b3de399db1787a2567","sha256":"fe04a9dc88d3f3be8d4f6bc63a9a80f45a4c6d8460e7551dab849457c091920a","sha512":"ce6a1969f698a616663f1a19ccfa12a37a4f6d782432d8a08aeb7879efd3e2becf168422ea66bc47e74f6ba865efaae6eabe3c4faba280d7a21f3a94d7c55da1","ssdeep":"","tlshash":"f0400000000000000000000000300000000000000003000c000000c0c0000000300000","first_seen":"2023-03-12T20:41:17Z","last_seen":"2026-03-22T11:28:15.856987Z","times_seen":9176,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/8.d971824c.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /app/js/8.d971824c.min.js HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"b8c6958b551916ed063740a3a8bb2835\"\r\nlast-modified: Fri, 26 Sep 2025 23:44:02 GMT\r\ncdn-storagebalancer: SE-904\r\nperma-cache: MISS\r\nx-amz-id-2: yqLttXJx6pFRsqHT5c4hP0Bl6rg4ZYlCB5linHMUcJeocuI5TUQGr0xt7j9tqUe0Dz+OcszcwLA=\r\nx-amz-request-id: 10X3VW1NAC2EN6SY\r\nx-amz-server-side-encryption: AES256\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/30/2025 00:57:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: db80e7db0b128632a9629d31fdfeba65\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1585,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1535)","md5":"b8c6958b551916ed063740a3a8bb2835","sha1":"e616c7aeac4b1f6507164de5a28cda45ead134ff","sha256":"cda01d87c4571f57a42e49658afbae2eb61fd26685f2a51700cd6cd5bd828080","sha512":"dd3ab1890ab74ca95285d194f9a04adf30936d63c221f5713b94c115fb3750896323ae92fa6221d629bcb21f1fadce2cb77c8df1f66db57b13479b43b912ff94","ssdeep":"","tlshash":"c43153e0f170a87d92975386d490458550fa34c3bca9229d7f6aaef2ec65b09310b7fc","first_seen":"2025-09-30T03:27:48.812174Z","last_seen":"2026-02-10T19:12:33.095758Z","times_seen":1973,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/1.599c5014.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /app/js/1.599c5014.min.js HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"9f639e29efa70b60ba81ea923ad70859\"\r\nlast-modified: Fri, 26 Sep 2025 23:44:01 GMT\r\ncdn-storagebalancer: SE-583\r\nperma-cache: MISS\r\nx-amz-id-2: xPw8At0IsKA2rbKSIirOupf9uRNalQZPnMyuvU4ig7R3RPdgepnoU/7xlVKFKFxGMBQnyI5fVgQ=\r\nx-amz-request-id: 10X33Y16HAPRG3TH\r\nx-amz-server-side-encryption: AES256\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/30/2025 00:57:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: fff47d5e240b3106b24757d4be1a9f59\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":6616,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6567)","md5":"9f639e29efa70b60ba81ea923ad70859","sha1":"8e6aaec131716ab1e79a63a9a299476c2fa02a20","sha256":"655a636851b88b19e22ff9218716ae9674740df9eada81b7944bb33a97a09374","sha512":"e500429651160041d55c4443b3cf4aa62be0bfb5988ab91fa01002a87101dc19f51ed187338ba58fd254f0e18fc7d929a42a1171b4c5da1583471ca084e6ad66","ssdeep":"96:EH6zkljHEr7NL99mHMvHvEDv7vBvxcAvIvSvcyBuvm896Qi82aVHT3RhsdHYbX23:EazQI+vgy5yHhfbmXlUfmvJx","tlshash":"ebd10f6976c3f43904efc362a2364634d734130632c6e1fd79689ee9a606fc560926b9","first_seen":"2025-09-30T03:27:48.923752Z","last_seen":"2026-02-10T19:12:33.041403Z","times_seen":1973,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.6sc.co/v1/beacon/img.gif?token=e9735ec6609f6c485a6878c46aaf6f14\u0026svisitor=null\u0026visitor=a29605cd-1300-47ca-826b-86c62e8be6d6\u0026session=2f6fcf52-fb5b-4aae-8fee-54e00d83df83\u0026event=active_time_track\u0026q=%7B%22currentTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A47%20GMT%22%2C%22lastTrackTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%22%2C%22timeSpent%22%3A%221001%22%2C%22totalTimeSpent%22%3A%221001%22%7D\u0026isIframe=false\u0026m=%7B%22description%22%3A%22Please%20read%20the%20following%20to%20learn%20the%20rules%20and%20restrictions%20that%20govern%20your%20use%20of%20our%20website(s)%20and%20mobile%20application(s)%20(%E2%80%9Cour%20Services%E2%80%9D).%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22BILL%20Spend%20%26amp%3B%20Expense%20Terms%20of%20Service%20%7C%20BILL%22%7D\u0026cb=\u0026r=\u0026thirdParty=%7B%7D\u0026v2=1\u0026pageURL=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026pageViewId=94f1c5eb-0cf3-4193-8406-3f8bb343e9bc\u0026an_uid=-1\u0026webTagId=adbd7400-c99d-4a74-ae9b-5d9e50e0a46c\u0026v=1.1.31","fqdn":"b.6sc.co","domain":"6sc.co","tld":"co"},"ip":{"addr":"2.22.225.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6sc.co","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:02:21 GMT","end":"Wed, 05 Nov 2025 09:02:20 GMT"},"fingerprint":{"sha1":"27:4B:B8:AE:07:40:BE:A6:37:5A:53:A4:94:03:EE:07:A8:96:58:80","sha256":"79:86:0D:15:68:5C:19:D9:33:E2:5A:25:FA:02:A2:2D:7D:F6:D8:13:3B:07:79:D4:9E:EE:56:52:94:1F:9A:EA"}}},"request":{"raw":"GET /v1/beacon/img.gif?token=e9735ec6609f6c485a6878c46aaf6f14\u0026svisitor=null\u0026visitor=a29605cd-1300-47ca-826b-86c62e8be6d6\u0026session=2f6fcf52-fb5b-4aae-8fee-54e00d83df83\u0026event=active_time_track\u0026q=%7B%22currentTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A47%20GMT%22%2C%22lastTrackTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%22%2C%22timeSpent%22%3A%221001%22%2C%22totalTimeSpent%22%3A%221001%22%7D\u0026isIframe=false\u0026m=%7B%22description%22%3A%22Please%20read%20the%20following%20to%20learn%20the%20rules%20and%20restrictions%20that%20govern%20your%20use%20of%20our%20website(s)%20and%20mobile%20application(s)%20(%E2%80%9Cour%20Services%E2%80%9D).%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22BILL%20Spend%20%26amp%3B%20Expense%20Terms%20of%20Service%20%7C%20BILL%22%7D\u0026cb=\u0026r=\u0026thirdParty=%7B%7D\u0026v2=1\u0026pageURL=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026pageViewId=94f1c5eb-0cf3-4193-8406-3f8bb343e9bc\u0026an_uid=-1\u0026webTagId=adbd7400-c99d-4a74-ae9b-5d9e50e0a46c\u0026v=1.1.31 HTTP/1.1\r\nHost: b.6sc.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nexpires: Thu, 09 Oct 2025 15:05:48 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Thu, 09 Oct 2025 15:05:48 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"f837aa60b6fe83458f790db60d529fc9","sha1":"14af87ccec7f81bb28d53c84da2fd5a9d5925cda","sha256":"dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b","sha512":"a85e09c3b5dbb560f4e03ba880047dbc8b4999a64c1f54fbfbca17ee0bcbed3bc6708d699190b56668e464a59358d6b534c3963a1329ba01db21075ef5bedace","ssdeep":"","tlshash":"30900403c540c003d155f0310d14c7401354f130417c030f70fd575ddc751514c11000","first_seen":"2023-04-05T09:52:32Z","last_seen":"2026-04-04T14:22:01.287851Z","times_seen":32230,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.6sc.co/v1/beacon/img.gif?token=e9735ec6609f6c485a6878c46aaf6f14\u0026svisitor=null\u0026visitor=a29605cd-1300-47ca-826b-86c62e8be6d6\u0026session=2f6fcf52-fb5b-4aae-8fee-54e00d83df83\u0026event=active_time_track\u0026q=%7B%22currentTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A51%20GMT%22%2C%22lastTrackTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A50%20GMT%22%2C%22timeSpent%22%3A%221001%22%2C%22totalTimeSpent%22%3A%225009%22%7D\u0026isIframe=false\u0026m=%7B%22description%22%3A%22Please%20read%20the%20following%20to%20learn%20the%20rules%20and%20restrictions%20that%20govern%20your%20use%20of%20our%20website(s)%20and%20mobile%20application(s)%20(%E2%80%9Cour%20Services%E2%80%9D).%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22BILL%20Spend%20%26amp%3B%20Expense%20Terms%20of%20Service%20%7C%20BILL%22%7D\u0026cb=\u0026r=\u0026thirdParty=%7B%7D\u0026v2=1\u0026pageURL=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026pageViewId=94f1c5eb-0cf3-4193-8406-3f8bb343e9bc\u0026an_uid=-1\u0026webTagId=adbd7400-c99d-4a74-ae9b-5d9e50e0a46c\u0026v=1.1.31","fqdn":"b.6sc.co","domain":"6sc.co","tld":"co"},"ip":{"addr":"2.22.225.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:51.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6sc.co","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:02:21 GMT","end":"Wed, 05 Nov 2025 09:02:20 GMT"},"fingerprint":{"sha1":"27:4B:B8:AE:07:40:BE:A6:37:5A:53:A4:94:03:EE:07:A8:96:58:80","sha256":"79:86:0D:15:68:5C:19:D9:33:E2:5A:25:FA:02:A2:2D:7D:F6:D8:13:3B:07:79:D4:9E:EE:56:52:94:1F:9A:EA"}}},"request":{"raw":"GET /v1/beacon/img.gif?token=e9735ec6609f6c485a6878c46aaf6f14\u0026svisitor=null\u0026visitor=a29605cd-1300-47ca-826b-86c62e8be6d6\u0026session=2f6fcf52-fb5b-4aae-8fee-54e00d83df83\u0026event=active_time_track\u0026q=%7B%22currentTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A51%20GMT%22%2C%22lastTrackTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A50%20GMT%22%2C%22timeSpent%22%3A%221001%22%2C%22totalTimeSpent%22%3A%225009%22%7D\u0026isIframe=false\u0026m=%7B%22description%22%3A%22Please%20read%20the%20following%20to%20learn%20the%20rules%20and%20restrictions%20that%20govern%20your%20use%20of%20our%20website(s)%20and%20mobile%20application(s)%20(%E2%80%9Cour%20Services%E2%80%9D).%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22BILL%20Spend%20%26amp%3B%20Expense%20Terms%20of%20Service%20%7C%20BILL%22%7D\u0026cb=\u0026r=\u0026thirdParty=%7B%7D\u0026v2=1\u0026pageURL=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026pageViewId=94f1c5eb-0cf3-4193-8406-3f8bb343e9bc\u0026an_uid=-1\u0026webTagId=adbd7400-c99d-4a74-ae9b-5d9e50e0a46c\u0026v=1.1.31 HTTP/1.1\r\nHost: b.6sc.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nexpires: Thu, 09 Oct 2025 15:05:52 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Thu, 09 Oct 2025 15:05:52 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"f837aa60b6fe83458f790db60d529fc9","sha1":"14af87ccec7f81bb28d53c84da2fd5a9d5925cda","sha256":"dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b","sha512":"a85e09c3b5dbb560f4e03ba880047dbc8b4999a64c1f54fbfbca17ee0bcbed3bc6708d699190b56668e464a59358d6b534c3963a1329ba01db21075ef5bedace","ssdeep":"","tlshash":"30900403c540c003d155f0310d14c7401354f130417c030f70fd575ddc751514c11000","first_seen":"2023-04-05T09:52:32Z","last_seen":"2026-04-04T14:22:01.287851Z","times_seen":32230,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.segment.com/v1/projects/b7SQxIgzchmkwydmWraoO2NRdwi0dRyq/settings","fqdn":"cdn.segment.com","domain":"segment.com","tld":"com"},"ip":{"addr":"3.167.6.134","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:45.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.segment.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 16 Sep 2025 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"90:3F:7C:B8:04:2E:CD:A4:E1:F1:8C:5D:DB:17:18:85:E6:C0:E9:98","sha256":"18:9C:5C:43:17:4C:C1:EA:72:5A:8E:DD:37:64:4C:DF:83:99:F4:51:8E:85:20:61:7F:A0:40:01:DC:6F:65:43"}}},"request":{"raw":"GET /v1/projects/b7SQxIgzchmkwydmWraoO2NRdwi0dRyq/settings HTTP/1.1\r\nHost: cdn.segment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bill.com/\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nx-amz-replication-status: PENDING\r\nlast-modified: Wed, 08 Oct 2025 17:02:43 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: X1NDqTJZ.VXD1URdg5sS_8cTGngkzK8E\r\ncontent-encoding: br\r\ndate: Thu, 09 Oct 2025 15:05:45 GMT\r\ncache-control: public, max-age=10800\r\netag: W/\"e94a252ae3f848ef2c73343d4585b308\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 16015e09e0d70f7cc17ec5c4f52b310e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 0iVgZssTIyPKaQChN0cVM8fEj2pGJrO2fCXUTDLuTYpB3m0Kjrukzg==\r\nage: 3641\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1520,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e94a252ae3f848ef2c73343d4585b308","sha1":"f21e0960fd06a289659a7172ce927c7f41d0c1fb","sha256":"b33f942a5f62e9c21ed2110a98f4a8517f29b02b5a3912f71471627265393c39","sha512":"a305e8faca148e63de5955bd129ccf4910f1c5bcd97f45a3ca84aecfa1efd19610cde36bf88c4a7d7137f9f40b647bfec7857819ac6368968f6bc1cdc54fa77a","ssdeep":"","tlshash":"26312453285030f689d6ca5ac77d3f235ab5cc36068b3430626e622cc9bfbbd0795963","first_seen":"2025-10-09T15:06:12.280129Z","last_seen":"2025-10-09T15:06:12.280129Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":96,"dns":87,"connect":1,"send":0,"wait":24,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser-intake-datadoghq.com/api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A5.28.0%2Capi%3Axhr%2Cenv%3Aprod%2Cservice%3Abill-marketing-site\u0026dd-api-key=pub44ba4f0880bc7722e3f2653d3d00ee1c\u0026dd-evp-origin-version=5.28.0\u0026dd-evp-origin=browser\u0026dd-request-id=68fca036-155c-48ba-a05b-d957830d4746\u0026batch_time=1760022345484","fqdn":"browser-intake-datadoghq.com","domain":"browser-intake-datadoghq.com","tld":"com"},"ip":{"addr":"3.233.158.25","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:45.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.browser-intake-datadoghq.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 13 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:3C:F6:6E:27:57:0E:5A:16:C1:A7:43:09:EC:A4:BD:94:B4:7F:F7","sha256":"3F:54:11:62:56:D3:18:55:98:79:B6:94:47:3A:A5:4B:9C:EE:6A:05:3B:C7:90:C1:A5:BE:52:2C:89:0B:A7:9F"}}},"request":{"raw":"POST /api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A5.28.0%2Capi%3Axhr%2Cenv%3Aprod%2Cservice%3Abill-marketing-site\u0026dd-api-key=pub44ba4f0880bc7722e3f2653d3d00ee1c\u0026dd-evp-origin-version=5.28.0\u0026dd-evp-origin=browser\u0026dd-request-id=68fca036-155c-48ba-a05b-d957830d4746\u0026batch_time=1760022345484 HTTP/1.1\r\nHost: browser-intake-datadoghq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 15628\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 202 Accepted\r\ncontent-type: application/json\r\ncontent-length: 53\r\ndd-request-id: 68fca036-155c-48ba-a05b-d957830d4746\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\naccept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Thu, 09 Oct 2025 15:05:45 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"54854cac185e2e61c6fd1a3c87406874","sha1":"844d7f5ebe86bc7af73acee276df6418abec1df7","sha256":"8ecadabe5b254c59fc0f22e12914379c6eea67d8923706bea094a4e521249141","sha512":"9fccc67c93cecf36968cc290b10b0f5e9595786c071587fbdf1bd03be6b3dcfc0a5d09552e16177f7c0ca40464d0b10ae20a98598cf08ec02f149b34454cfcfb","ssdeep":"","tlshash":"239002a1d62520d1488469490c413e3401285151b8725229067541dd81051855201011","first_seen":"2025-10-09T15:06:12.283702Z","last_seen":"2025-10-09T15:06:12.283702Z","times_seen":1,"resource_available":false,"data":null}},"time_used":754,"timings":{"blocked":244,"dns":28,"connect":95,"send":0,"wait":264,"receive":0,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/63e3da3df35cd62f54751985/649488c838360d22ac08b864_bill-logo.svg","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:44.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 17:30:56 GMT","end":"Mon, 10 Nov 2025 18:30:53 GMT"},"fingerprint":{"sha1":"4E:8C:AA:A3:52:1E:AC:1D:1D:23:4D:AC:0D:48:D5:BB:F9:04:B2:8F","sha256":"9F:CB:1D:9B:6C:0D:B9:B3:80:11:A4:E0:06:8D:F6:2A:5A:F8:2B:36:D0:55:D7:9D:F2:31:72:29:4F:B0:6F:A7"}}},"request":{"raw":"GET /63e3da3df35cd62f54751985/649488c838360d22ac08b864_bill-logo.svg HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\nx-amz-id-2: 65ghHSDSx4+Zdk3tr4f7x9ajMfzrDI2vqL5INNrlr+oqmSgfWoI32RbZ76ujCPXlXCYNYUx+4dg=\r\nx-amz-request-id: CTHF3AKPQRBC9J9H\r\nlast-modified: Thu, 22 Jun 2023 17:45:45 GMT\r\netag: W/\"fefd3960d85ad8df011bedfcfa294708\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: 1n3VanOMhiKo_GmuZIMXrZlJJBwXtzdA\r\nage: 57840\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 98bec723e8d6712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":908,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fefd3960d85ad8df011bedfcfa294708","sha1":"c19f5bcbb1087f4b3771f87301d1a1d78842cbc5","sha256":"54b75c85055158146a27680b54a28d61f6634c461c7fa12d04cc144516033599","sha512":"c96238ea66597feaff51870d5b180c913b42aade539f60b0f8c01480652d03d2e650fb8f2b20793543aedb1b65bab09e56677a2b469d0049b1cc39017838cc8d","ssdeep":"","tlshash":"d011dc1aa2cdae10c4358b34684e60b7e5226ccd7316035020e06e4daba24bf8ec4df4","first_seen":"2023-09-07T04:20:36Z","last_seen":"2026-04-03T19:43:47.399226Z","times_seen":159,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":115,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://258-fem-750.mktoweb.com/index.php/form/XDFrame","date":"2025-10-09T15:05:46.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://258-fem-750.mktoweb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://258-fem-750.mktoweb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:46 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98bec7303d8375ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-04T15:48:13.019905Z","times_seen":330208,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":51,"dns":0,"connect":1,"send":0,"wait":16,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pdst.fm/ping.min.js","fqdn":"cdn.pdst.fm","domain":"cdn.pdst.fm","tld":""},"ip":{"addr":"35.244.142.80","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:46.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.pdst.fm","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 15:44:40 GMT","end":"Wed, 03 Dec 2025 16:38:34 GMT"},"fingerprint":{"sha1":"C3:EE:3E:DE:80:B0:26:AB:10:C9:68:F8:23:C1:FE:DE:E2:24:1E:81","sha256":"15:2D:BF:7B:34:90:5E:FB:A0:2D:96:F1:7A:AB:0A:93:60:BC:0F:C0:C3:22:F4:3D:4B:4C:05:D4:50:CA:F8:F2"}}},"request":{"raw":"GET /ping.min.js HTTP/1.1\r\nHost: cdn.pdst.fm\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3LlZW-eTDBCrboL4yUoX6dewQEB_IV3rW7TZHEXNDCy3THXg1iEPsz5wjefX1k2YJomgR2Aw00\r\nx-goog-generation: 1756836866133036\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 41639\r\nx-goog-hash: crc32c=RLJ11g==, md5=FHzy8oXb7WcreFdk1NAisg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 41639\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type\r\nserver: UploadServer\r\ndate: Thu, 09 Oct 2025 14:47:49 GMT\r\nexpires: Thu, 09 Oct 2025 15:47:49 GMT\r\ncache-control: public, max-age=3600\r\nage: 1077\r\nlast-modified: Tue, 02 Sep 2025 18:14:26 GMT\r\netag: \"147cf2f285dbed672b785764d4d022b2\"\r\ncontent-type: text/javascript\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":41639,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (41639), with no line terminators","md5":"147cf2f285dbed672b785764d4d022b2","sha1":"c77d75d160d2698f35a8156a7923770b30177537","sha256":"6dcc4835d26916b2a8801700d2d42f32369f66fbdf76a28cf8c1fde689b36bb2","sha512":"0c84f75aaa543bb414bae90097a2d9f90082490e632314d7ca256b6724d7d93615dd82a026ffe3a64b3130b1e1dd245aac69df9e0a1be75f8ec1ce78a42695fb","ssdeep":"768:XMZqt1vkPU95O9oBivYrf/9HkhA3moiOQnZA7B:8E9/zPHdrYA7B","tlshash":"f413b7c8f9e2f0a053bb64b4412f9007f73fa919b41d95a0d255e9d23db890a9263f3d","first_seen":"2025-09-02T21:13:52.876517Z","last_seen":"2025-11-15T08:45:45.501717Z","times_seen":1069,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":207,"dns":14,"connect":25,"send":0,"wait":26,"receive":31,"ssl":165},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser-intake-datadoghq.com/api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A5.28.0%2Capi%3Axhr%2Cenv%3Aprod%2Cservice%3Abill-marketing-site\u0026dd-api-key=pub44ba4f0880bc7722e3f2653d3d00ee1c\u0026dd-evp-origin-version=5.28.0\u0026dd-evp-origin=browser\u0026dd-request-id=54218cf5-75db-4d4f-80c4-012afad870d0\u0026batch_time=1760022347118","fqdn":"browser-intake-datadoghq.com","domain":"browser-intake-datadoghq.com","tld":"com"},"ip":{"addr":"3.233.158.25","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.browser-intake-datadoghq.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 13 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:3C:F6:6E:27:57:0E:5A:16:C1:A7:43:09:EC:A4:BD:94:B4:7F:F7","sha256":"3F:54:11:62:56:D3:18:55:98:79:B6:94:47:3A:A5:4B:9C:EE:6A:05:3B:C7:90:C1:A5:BE:52:2C:89:0B:A7:9F"}}},"request":{"raw":"POST /api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A5.28.0%2Capi%3Axhr%2Cenv%3Aprod%2Cservice%3Abill-marketing-site\u0026dd-api-key=pub44ba4f0880bc7722e3f2653d3d00ee1c\u0026dd-evp-origin-version=5.28.0\u0026dd-evp-origin=browser\u0026dd-request-id=54218cf5-75db-4d4f-80c4-012afad870d0\u0026batch_time=1760022347118 HTTP/1.1\r\nHost: browser-intake-datadoghq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 16281\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 202 Accepted\r\ncontent-type: application/json\r\ncontent-length: 53\r\ndd-request-id: 54218cf5-75db-4d4f-80c4-012afad870d0\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\naccept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Thu, 09 Oct 2025 15:05:46 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ccc2f4e35d74613a2713d2a00fc8bfe4","sha1":"91273e161e464411981c8f69d57a3735749d2832","sha256":"ed096d5b129ca38e96a8dd4becb133da732bf08be80fe5363f2bb54806545dad","sha512":"ebecbb2cb39570b19b27048e2a0e349e5f9d70d2b8d81fe8884c20dcf60013270b52de9a941c969be7ec04d296b44526b5d9252d3a0bdd0acfb7105e8cac4cea","ssdeep":"","tlshash":"729002c1856491db88c0471509c0570551109b649189d12a0983209b4045110c640a18","first_seen":"2025-10-09T15:06:12.307363Z","last_seen":"2025-10-09T15:06:12.307363Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/logos/static/ot_guard_logo.svg","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:45.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /logos/static/ot_guard_logo.svg HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bill.com/\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:45 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-md5: tXyZydHjxQshFMbbBT1/8A==\r\nlast-modified: Wed, 08 Oct 2025 06:36:12 GMT\r\nx-ms-request-id: 317463ce-e01e-0049-14cc-38a0ea000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nage: 30640\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\ncf-ray: 98bec72e2e3f56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":497,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b57c99c9d1e3c50b2114c6db053d7ff0","sha1":"ada8abfed92ba8a545bbd9d299d74d5972cc4ae8","sha256":"691dcdb24853a0f5ce4e6597e5713dea66799b57ffe2c2a10f28f98e0b569b19","sha512":"0dab6d06f386d922fb28f70f2590d4f9c361e7f4e5d5e581b98e59aac12b266cba596ffccd87203b4330673ee4ec1d459a1abdfc4b066d243a43b2bf7909f0ee","ssdeep":"","tlshash":"2ef0d4d91906a6adb6822e7cdd3c56e04c2c7ce274dc22c894cce094d4489bc9705855","first_seen":"2023-05-07T20:46:54Z","last_seen":"2026-04-04T15:26:47.297063Z","times_seen":115935,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipv6.6sc.co/","fqdn":"ipv6.6sc.co","domain":"6sc.co","tld":"co"},"ip":{"addr":"2.22.225.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6sc.co","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:02:21 GMT","end":"Wed, 05 Nov 2025 09:02:20 GMT"},"fingerprint":{"sha1":"27:4B:B8:AE:07:40:BE:A6:37:5A:53:A4:94:03:EE:07:A8:96:58:80","sha256":"79:86:0D:15:68:5C:19:D9:33:E2:5A:25:FA:02:A2:2D:7D:F6:D8:13:3B:07:79:D4:9E:EE:56:52:94:1F:9A:EA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ipv6.6sc.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 4\r\nexpires: Thu, 09 Oct 2025 15:05:47 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1760022346996_35053862_51985557_25_758_0_12_21\";dur=1\r\n6si-ipv6: null\r\naccess-control-allow-origin: https://www.bill.com\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"37a6259cc0c1dae299a7866489dff0bd","sha1":"2be88ca4242c76e8253ac62474851065032d6833","sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","sha512":"04f8ff2682604862e405bf88de102ed7710ac45c1205957625e4ee3e5f5a2241e453614acc451345b91bafc88f38804019c7492444595674e94e8cf4be53817f","ssdeep":"","tlshash":"b9300000000000000000000000000000000300000000000000000000000c0000000000","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-04-04T15:49:29.468833Z","times_seen":207036,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":1,"dns":0,"connect":5,"send":0,"wait":2,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/63e3da3df35cd62f54751985/63efaae11991984d7d4d021a_Logo-Mark-Color%201.png","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:45.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 17:30:56 GMT","end":"Mon, 10 Nov 2025 18:30:53 GMT"},"fingerprint":{"sha1":"4E:8C:AA:A3:52:1E:AC:1D:1D:23:4D:AC:0D:48:D5:BB:F9:04:B2:8F","sha256":"9F:CB:1D:9B:6C:0D:B9:B3:80:11:A4:E0:06:8D:F6:2A:5A:F8:2B:36:D0:55:D7:9D:F2:31:72:29:4F:B0:6F:A7"}}},"request":{"raw":"GET /63e3da3df35cd62f54751985/63efaae11991984d7d4d021a_Logo-Mark-Color%201.png HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 3308\r\ncf-ray: 98bec729dd6d723c-OSL\r\nx-amz-id-2: BpYorJiEYEswPygZhennl751Fy8SOcAd3/9JtiJglAmpL/cXBjlh4AiBgzRXAACdWuwEYcN/2jcBbYS6BozGuPNc5sSXmefq63obFkxtUDw=\r\nx-amz-request-id: SAPJGVNBS2PJN1KQ\r\nlast-modified: Fri, 17 Feb 2023 16:27:15 GMT\r\netag: \"8f6856f942496fb1edc1897a69fa6b6b\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: uwg95n3FeHvAdDtGEH46T_y2EaybNTbj\r\naccept-ranges: bytes\r\nage: 26313\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3308,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"8f6856f942496fb1edc1897a69fa6b6b","sha1":"549416abca8197e76d417b2b3e714d0b6121f1c0","sha256":"6099aef008d48cc3ab8530229b52056e4099d7600bae11b5c2f71227a7e08e72","sha512":"5640921594d9356ff20a8b7a3c2c0acc5aff465763dc30641fc2bd20c2d15a65b2903529fafc47015b666dbd85afe7d14267c0a9b545a1535620763167f30fa0","ssdeep":"","tlshash":"5e616dd1decf46eff6a4283606db1cac1e675c2da330f2ab53a90e24036393a590d465","first_seen":"2023-09-07T04:20:36Z","last_seen":"2026-04-03T19:43:47.57647Z","times_seen":192,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/users/9df7ffe78a4b/images/50000bd31aa71707462114-Rectangle-338.png?width=530","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /users/9df7ffe78a4b/images/50000bd31aa71707462114-Rectangle-338.png?width=530 HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28784\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"68db2c6c-7070\"\r\nlast-modified: Tue, 30 Sep 2025 01:03:40 GMT\r\ncdn-storageserver: SE-583\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 385\r\nperma-cache: HIT\r\ncdn-proxyver: 1.37\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/06/2025 14:00:39\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 757173f8889b94c3d85b5415845227fe\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":28784,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 530x601, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e3bbfbf5404ef1fa9ea89200bae6477a","sha1":"97050553ac179a097b59d584ce7d0278e8126197","sha256":"fd3de659df9ca8b67bfe56e0957474f75cc0325e4b545635ac83ea4dc7d361c2","sha512":"7d07090d4582d94c671e2c9df63f54de40a0d046cc8ff7fb0647736f807474a9e85c1957ca1d9482c9aacbb20a612e6d27b94587496ef7aba9807ddb18a53a95","ssdeep":"768:684pm/D60BWwrBnvClE67BHWkcSSrPl3RU:hD/DfBrx67JWkcSSblBU","tlshash":"3fd2f14145d9daaf7d9e0f43699488b148b47b0b7c8cc6a8eb4ee48b31e0963f5701b9","first_seen":"2025-10-02T00:09:17.083618Z","last_seen":"2026-03-07T23:04:24.291943Z","times_seen":51,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geolocation.onetrust.com/cookieconsentpub/v1/geo/location","fqdn":"geolocation.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:45.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geolocation.onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 20:44:08 GMT","end":"Mon, 29 Dec 2025 21:44:04 GMT"},"fingerprint":{"sha1":"8B:1F:BE:C3:41:B7:13:B4:FB:C2:88:AF:57:B5:54:E7:1D:EB:57:D3","sha256":"E0:2A:67:58:A8:54:95:48:0D:DC:50:DD:D2:DB:A0:19:5D:03:D3:89:A2:CD:41:C6:CB:7D:F3:4A:1C:B7:25:50"}}},"request":{"raw":"GET /cookieconsentpub/v1/geo/location HTTP/1.1\r\nHost: geolocation.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:45 GMT\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, OPTIONS\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 98bec72bcd2eb517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8d896eded71ee5fc863cf1ec1485da75","sha1":"b36c99cd02aa88e94a55b028381d9c5cb61cbbef","sha256":"3dddf5b1f3c0e76d359e7fe585b61f721980981a612e17d7ebfedfc3e6fc3b3d","sha512":"a216a2ec987ed8aa509d4bf88075844374819f15767190c2f9fc1b7dc05436cb33ac0fa3466bd207bd3104e455cd3c72fb8622dd0759ab64f197ac216850382e","ssdeep":"","tlshash":"3da0025864599d1d9dfd824a530e726a1244a309828751c6c6c9ed75c5812c9b05c480","first_seen":"2025-06-02T14:25:58.002399Z","last_seen":"2026-04-04T15:26:47.316808Z","times_seen":104209,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":26,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/legal/spend-expense-terms-of-service","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-09T15:05:43.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bill.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 06 May 2025 00:00:00 GMT","end":"Fri, 05 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:35:CB:CA:BD:8B:FD:14:FC:34:90:F2:98:D2:D9:89:C8:EC:B9:9C","sha256":"C2:98:CA:FF:52:BB:22:E6:44:D1:4F:11:4D:D0:29:52:AB:E7:EF:02:AE:FC:55:0A:6A:C3:C8:F9:8E:B6:02:73"}}},"request":{"raw":"GET /legal/spend-expense-terms-of-service HTTP/1.1\r\nHost: www.bill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nserver: CloudFront\r\ncf-cache-status: HIT\r\ncf-ray: 98be1cb0e99e5e95-MXP\r\ndate: Thu, 09 Oct 2025 13:09:22 GMT\r\nlast-modified: Wed, 08 Oct 2025 23:27:04 GMT\r\nset-cookie: _cfuvid=VIX7WZ4eXhmdoDfTMle5sRKWx6QJIQtluL_d8Ry62Gk-1760015362724-0.0.1.1-604800000; path=/; domain=.cdn.webflow.com; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000\r\nsurrogate-control: max-age=432000\r\nsurrogate-key: prod1.marketing.billdot.io 63e3da3df35cd62f54751985 pageId:65429f4d44e4ab1912669090 65429f4d44e4ab1912668e9e 65aeddc661bb1d12637959d3 65429f4d44e4ab1912668f4a\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 485b6c89886d646bf4c92b32182787ea.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: qs1s-UttnVUPd5-obA8YjfIxxxGNCz3xMwT5QISe9NZGSwCmayp3wg==\r\nage: 55096\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OneTrust","description":"OneTrust is a cloud-based data privacy management compliance platform.","website":"https://www.onetrust.com","common_platform_enumeration":"","icon":"OneTrust.svg","categories":["Cookie compliance"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":224277,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2511)","md5":"064424db63acc5db3ee3688bf73a6748","sha1":"38df3755d4c5d637cd28d3fc028b87e65030f4ff","sha256":"14c87c39ff5f1e853dbdd7987ecd7c5e44ed38c3c5bca292ca6cc758fb1de012","sha512":"518c07f40514e3a4aa1faa6f849d8d0176a9e1bdc7adf1793609dd371b1236e0a9a9ade47e9df476a49656f9d533cc61fad6a08e693b34bbc945cde7d528865a","ssdeep":"1536:OGSSpJSzOifijpyO0jW752QlPmxy+Uw1SiKQGgIEJUPHIJagMO9GB8SWN5kPwR1u:OXVn6WaHGJGBtWN5k4R1hmSVZ5W","tlshash":"f424eaf2f28012b152030bd5f737fb79f2eb90b99b934894d1a48304abc2d99dd19d99","first_seen":"2025-10-09T15:06:12.327471Z","last_seen":"2025-10-09T15:06:12.327471Z","times_seen":1,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":178,"dns":28,"connect":1,"send":0,"wait":26,"receive":0,"ssl":146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/63e3da3df35cd62f54751985/js/bill-com.schunk.91595d100182d499.js","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:44.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 17:30:56 GMT","end":"Mon, 10 Nov 2025 18:30:53 GMT"},"fingerprint":{"sha1":"4E:8C:AA:A3:52:1E:AC:1D:1D:23:4D:AC:0D:48:D5:BB:F9:04:B2:8F","sha256":"9F:CB:1D:9B:6C:0D:B9:B3:80:11:A4:E0:06:8D:F6:2A:5A:F8:2B:36:D0:55:D7:9D:F2:31:72:29:4F:B0:6F:A7"}}},"request":{"raw":"GET /63e3da3df35cd62f54751985/js/bill-com.schunk.91595d100182d499.js HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:44 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\nx-amz-id-2: 8vnu8ltGriS7FI5YtVxMI8g8ZsV5k5jiQ8Rq6D9P3TyGAD0XTpv+GgDbq8Jf32GX4pyMxqLsq/w=\r\nx-amz-request-id: JFFJ3VGGG76H95JD\r\nlast-modified: Wed, 08 Oct 2025 19:35:38 GMT\r\netag: W/\"147b0359df5dd47244026f100781cd0e\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: sSqPLQPTf_uIlhlWi6fTeL_BxBmYRwI_\r\ncf-cache-status: HIT\r\nage: 57840\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 98bec723f8e4712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1891111,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ed297a1858ba24c63a6c37fe01eef2b6","sha1":"fa67428a80e685770eb885d68d25f2ebc4807817","sha256":"38dd001414c3ccaadfbcd59e4b2d3ee04a176785c5829d7261f193dd8ff7275b","sha512":"9f177b09a3e28af9a568223ee071a2a89184b42b79b17426229ca20ba8a12a9c48a5e0ad3e1b7592e9141c62eb5dffac87c94a950b67f5fef7693a3d950a90c0","ssdeep":"12288:QBhQqVfwhoX7lXkJ9irEIZ0BzBSg3grgkgh:3qVfwhoX7lXkJ9irEIZO","tlshash":"5e25658771a6b57b019f062dd8a60001a2fd76dbc487c6b4a865cfed1c3d6d98bc2336","first_seen":"2025-10-09T15:06:12.338776Z","last_seen":"2025-10-09T15:06:12.338776Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":113,"dns":5,"connect":5,"send":0,"wait":27,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"258-fem-750.mktoweb.com/js/forms2/js/forms2.min.js","fqdn":"258-fem-750.mktoweb.com","domain":"mktoweb.com","tld":"com"},"ip":{"addr":"104.16.96.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://258-fem-750.mktoweb.com/index.php/form/XDFrame","date":"2025-10-09T15:05:46.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"258-fem-750.mktoweb.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 15:51:40 GMT","end":"Sat, 22 Nov 2025 15:51:39 GMT"},"fingerprint":{"sha1":"D6:0D:2A:35:93:4C:E9:03:C9:FD:46:C2:ED:10:78:69:0C:33:10:95","sha256":"1F:AE:21:33:B4:4E:8A:64:73:CF:01:A2:9C:23:DD:E0:92:54:98:8F:FF:85:8C:85:39:7B:A1:D0:AB:1A:62:76"}}},"request":{"raw":"GET /js/forms2/js/forms2.min.js HTTP/1.1\r\nHost: 258-fem-750.mktoweb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://258-fem-750.mktoweb.com/index.php/form/XDFrame\r\nCookie: __cf_bm=Ey4IQwZYYTRvSGik3_vktD4kyojcwfBb9txLZyG7teA-1760022345-1.0.1.1-9OiZBoPTVq16IOGL3fs.kzwPACvbLbyxqA7hx3eIyAWwuNhw04rFKH9cXYobr7L.YonxoL8u0TVC_PIBg9JPUiFcbH.thTlPs5XGqayarBw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:46 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: 98bec72fee353181-OSL\r\nlast-modified: Thu, 25 Sep 2025 21:24:42 GMT\r\netag: \"1d40ada-31f55-63fa6cc1f7a80\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=14400\r\nage: 5372\r\nexpires: Thu, 09 Oct 2025 19:05:46 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204629,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32006)","md5":"c3fb33f57fc419c3291161a4d145929c","sha1":"b5144d68b89e67f5072403f77beaf557e17f465c","sha256":"1d8f29fefcf1c3c78ed278f87273b54e272722c4672bbcfd903092881e0fd3ff","sha512":"234ed9cf59eda8c096fd9666fdd8c7591f8cddd8cc66f594279227a5ed4a6d6e61637bc385d9595215116916c414a8f014e8a966f7f2fdd0c3a6c4c83f5ee2f6","ssdeep":"3072:l/i/bncR4dc8joJjjTgEp8kSUR1G8OldwwqL2R3DDU8CuBjeMtI:l67DJjITpedUcCgR3DDU8CuBjep","tlshash":"8014f8c87692b052826734b541bf410bb17aa9e9b40ccca4f194d8e47ebce9d517bf2c","first_seen":"2025-07-09T03:41:10.306837Z","last_seen":"2026-04-02T19:44:35.713484Z","times_seen":3319,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trkn.us/pixel/conv/ppt=19990;g=site_visit_sxm;gid=46731;?ord=1032149161","fqdn":"trkn.us","domain":"trkn.us","tld":"us"},"ip":{"addr":"95.100.107.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:46.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cert1-prod.aut.a24365.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 05:44:22 GMT","end":"Wed, 31 Dec 2025 05:44:21 GMT"},"fingerprint":{"sha1":"D3:C4:51:27:62:7B:F8:3E:E8:30:41:24:17:27:08:2C:55:25:B6:A3","sha256":"BC:47:68:BB:C6:53:12:EA:BF:8F:D0:BA:38:5C:31:26:30:78:49:DD:88:80:DC:F3:F5:2B:06:3F:3E:2E:5A:A2"}}},"request":{"raw":"GET /pixel/conv/ppt=19990;g=site_visit_sxm;gid=46731;?ord=1032149161 HTTP/1.1\r\nHost: trkn.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nLocation: /pixel/conv/ppt=19990;g=site_visit_sxm;gid=46731;?ord=1032149161;ip=91.90.42.154;cuidchk=1\r\nDate: Thu, 09 Oct 2025 15:05:46 GMT\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nSet-Cookie: barometric[cuid]=cuid_68e7cf4a-8b6a-4645-af1b-a96d61ceed1a; expires=Fri, 09-Oct-2026 15:05:46 GMT; Max-Age=31536000; path=/; SameSite=None;  Secure; domain=.trkn.us;\r\nContent-Length: 0\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":44,"dns":17,"connect":11,"send":0,"wait":10,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.byspotify.com/ping.min.js","fqdn":"pixel.byspotify.com","domain":"byspotify.com","tld":"com"},"ip":{"addr":"34.117.162.98","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:46.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pixel.byspotify.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Sep 2025 17:53:09 GMT","end":"Tue, 23 Dec 2025 18:45:43 GMT"},"fingerprint":{"sha1":"13:9E:E8:C2:D5:47:E5:63:46:31:57:04:C7:4C:4C:68:85:1E:42:D8","sha256":"C3:E9:1F:AF:40:67:54:32:E4:6F:75:1C:C9:1F:A6:E2:F0:8E:3B:5D:D1:D8:24:11:ED:7C:3F:EA:ED:4D:77:5E"}}},"request":{"raw":"GET /ping.min.js HTTP/1.1\r\nHost: pixel.byspotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3IKtfB8aO_Ml4H17tNFnCL7HLFJR1ltlQ428RGSlQEuvqxvhnJdaKcJnV5Vhgfwfi_svzYMCuc\r\nx-goog-generation: 1756836888857688\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 41639\r\nx-goog-hash: crc32c=RLJ11g==, md5=FHzy8oXb7WcreFdk1NAisg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 41639\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Thu, 09 Oct 2025 14:13:01 GMT\r\nexpires: Thu, 09 Oct 2025 15:13:01 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Tue, 02 Sep 2025 18:14:48 GMT\r\netag: \"147cf2f285dbed672b785764d4d022b2\"\r\ncontent-type: text/javascript\r\nage: 3165\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":41639,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (41639), with no line terminators","md5":"147cf2f285dbed672b785764d4d022b2","sha1":"c77d75d160d2698f35a8156a7923770b30177537","sha256":"6dcc4835d26916b2a8801700d2d42f32369f66fbdf76a28cf8c1fde689b36bb2","sha512":"0c84f75aaa543bb414bae90097a2d9f90082490e632314d7ca256b6724d7d93615dd82a026ffe3a64b3130b1e1dd245aac69df9e0a1be75f8ec1ce78a42695fb","ssdeep":"768:XMZqt1vkPU95O9oBivYrf/9HkhA3moiOQnZA7B:8E9/zPHdrYA7B","tlshash":"f413b7c8f9e2f0a053bb64b4412f9007f73fa919b41d95a0d255e9d23db890a9263f3d","first_seen":"2025-09-02T21:13:52.876517Z","last_seen":"2025-11-15T08:45:45.501717Z","times_seen":1069,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":115,"dns":13,"connect":13,"send":0,"wait":13,"receive":15,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/static/css/common.css","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:44.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bill.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 06 May 2025 00:00:00 GMT","end":"Fri, 05 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:35:CB:CA:BD:8B:FD:14:FC:34:90:F2:98:D2:D9:89:C8:EC:B9:9C","sha256":"C2:98:CA:FF:52:BB:22:E6:44:D1:4F:11:4D:D0:29:52:AB:E7:EF:02:AE:FC:55:0A:6A:C3:C8:F9:8E:B6:02:73"}}},"request":{"raw":"GET /static/css/common.css HTTP/1.1\r\nHost: www.bill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/legal/spend-expense-terms-of-service\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 319\r\nlast-modified: Thu, 02 Oct 2025 16:55:13 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Thu, 09 Oct 2025 15:05:27 GMT\r\ncache-control: max-age=120\r\netag: \"fd08207d32370e77cf844d503d8c7037\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 485b6c89886d646bf4c92b32182787ea.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: cIUMyO0JibxeiuweKle4upAm_5l-DZg5C6bXEr3ygHfDUuJRY-1DiQ==\r\nage: 18\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":319,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"fd08207d32370e77cf844d503d8c7037","sha1":"83b7f64c41314716d291a61c0e7f96fe1b9c0d3a","sha256":"7c801c6f9f0badceceb569b3d7421bd8ebbc8d9d4b5489a979b19ab882f79c89","sha512":"4c31253010f7f788e584bef027553ead63e70886c200d6df2e24056f5faf68b3be6995cd57b5be44e6eba69b549e4ff6a940ce1422567418d771ce82fa62dbed","ssdeep":"","tlshash":"63e0cd2558f53db9a4fd8a6621c1f45680b5a734949205ceb1152fb40ec0da7c731ddd","first_seen":"2025-06-20T20:17:42.319589Z","last_seen":"2026-04-03T19:43:47.601229Z","times_seen":172,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"q.quora.com/_/ad/938cf29859554007ba856cd771482492/pixel?tag=ViewContent\u0026i=gtm\u0026u=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service","fqdn":"q.quora.com","domain":"quora.com","tld":"com"},"ip":{"addr":"162.159.152.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:46.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"quora.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 05:48:27 GMT","end":"Fri, 26 Dec 2025 05:48:26 GMT"},"fingerprint":{"sha1":"1A:01:F0:A8:62:36:A6:E7:07:DE:7C:B9:C2:DA:DC:CF:61:CB:06:CD","sha256":"8A:82:1C:63:79:38:C1:70:F5:CE:79:E1:81:A4:5E:C1:5A:EB:69:D1:5F:3B:02:54:BF:67:BB:31:B3:28:35:FF"}}},"request":{"raw":"GET /_/ad/938cf29859554007ba856cd771482492/pixel?tag=ViewContent\u0026i=gtm\u0026u=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service HTTP/1.1\r\nHost: q.quora.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:46 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ncf-ray: 98bec733db5a56c1-OSL\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-q-stat: ,69c1d6a2ac1b71ae2c525b5794cd9acb,10.0.0.59,4008,91.90.42.154,,527956318449,1,1760022346.922,0.002,,.,0,0,0.000,0.000,-,0,0,203,246,123,10,26847,,,,,,-,\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-04-04T15:23:04.420637Z","times_seen":91650,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":5,"dns":1,"connect":4,"send":0,"wait":119,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extend.vimeocdn.com/ga/26845909.js","fqdn":"extend.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:46.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2024 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 14 Nov 2024 16:58:25 GMT","end":"Tue, 16 Dec 2025 16:58:24 GMT"},"fingerprint":{"sha1":"47:C3:9E:43:09:F0:68:64:2D:09:CF:B4:D8:1B:A4:B5:86:C6:5E:DB","sha256":"24:E5:91:6D:27:6C:18:84:34:C7:5A:5B:05:30:AF:8F:06:91:EB:FF:78:AB:6D:61:F7:2B:8F:32:2C:A3:3C:D0"}}},"request":{"raw":"GET /ga/26845909.js HTTP/1.1\r\nHost: extend.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Apache\r\nlast-modified: Mon, 08 Sep 2025 22:50:02 GMT\r\netag: \"421e-63e5201ff1a80-gzip\"\r\nexpires: Fri, 07 Sep 2035 01:27:50 GMT\r\ncontent-encoding: gzip\r\nx-bapp-server: assets-846bc5dc4-mdj9m\r\nx-vimeo-dc: ge\r\ntiming-allow-origin: *\r\ncontent-type: text/javascript; charset=utf-8\r\naccept-ranges: bytes\r\ndate: Thu, 09 Oct 2025 15:05:46 GMT\r\nvia: 1.1 varnish\r\nage: 2641077\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 68466\r\nx-timer: S1760022347.989819,VS0,VE0\r\nvary: Accept-Encoding\r\ncache-control: max-age=86400\r\ncontent-length: 5579\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16926,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16858)","md5":"377b77886b8f14f7c30f202b4afedde9","sha1":"d8ffa187f74c7b4295240038349937f7b57c2b42","sha256":"6c649cc3d4aee7683250622541a6045ad4ac3beb93df1fcdd3ec1f7f12a1ff44","sha512":"b920a8e5f73ec074d6c15ee159cc99d89be98cabb46285bcddb1e2b07217224edbb0ac9d3cf21a754a56dfae45d9efdc7c4f135f57fbfb27c9bb9ccb0e52a67f","ssdeep":"384:mPqNtjavijNPlkRLwodDm5uLglUYZlreeQ:tfZPl84LZlqeQ","tlshash":"8f72b59e769170b443aba1b1813f160ff275997a240d4464f210d8f67cbd84f9627f6c","first_seen":"2023-03-07T01:10:49Z","last_seen":"2026-04-04T06:03:26.321259Z","times_seen":2762,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":115,"dns":39,"connect":29,"send":0,"wait":31,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.omappapi.com/v2/embed/134765?d=bill.com","fqdn":"api.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"104.18.3.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:46.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"omappapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 20:16:25 GMT","end":"Wed, 31 Dec 2025 21:08:22 GMT"},"fingerprint":{"sha1":"9B:B9:40:82:ED:AA:AB:E7:2C:D6:80:E4:8F:D8:35:8E:D2:AF:07:22","sha256":"5A:9D:9B:45:C2:BA:C6:07:A6:71:C8:9F:C4:AF:9F:A5:19:0A:30:D6:8A:AE:17:9C:DC:E3:D7:F4:C8:24:DA:08"}}},"request":{"raw":"GET /v2/embed/134765?d=bill.com HTTP/1.1\r\nHost: api.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: application/json\r\ncf-ray: 98bec7346ad80731-OSL\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding, User-Agent\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-CSRF-Token\r\nexpires: Thu, 09 Oct 2025 14:48:03 GMT\r\ncache-control: public, max-age=30, stale-while-revalidate=1800\r\nlast-modified: Wed, 01 Oct 2025 17:40:35 GMT\r\netag: W/\"ef08095a8c996bcd365aeef3d4b9d16e\"\r\nx-optinmonster-account: 147378\r\naccess-control-expose-headers: X-OptinMonster-Account, X-User-Agent\r\nx-user-agent: standard--\r\nx-cache-config: 0 0\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9d9ba9f70894996841d6d164314d8f54.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: HEL51-P5\r\nx-amz-cf-id: 1VxRG7zTdsTU45gZtgFyYDWjvL-pl8aodp3HKrUsoybCtv_4Mm3nEg==\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73942,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9e6c8e060eedbb63a4bd57e3dc4d03c5","sha1":"b5b2d9fa6818fccea2a0165327c712003fb1ab4d","sha256":"c416eddc6054a33960b8f983ac25f646e74f01235b386b7e98981fecc3f8e5a3","sha512":"5b2a34a7a96374f6afa981b1e56e04345b6bbaab8e7fcfb58af8ee79db1ba39e90d3186bfb4b0311d6cb8cb9f27d02703a2a31d05baa724e7e208456e03fc540","ssdeep":"1536:iqYLNqRXLNEf8aI+FQ5z4N2jXblKEOLM49Dd4s0NwwINM1x5K0aU0aEcDh6rofj:hYLohLy0aDFSs8DZ5e+ZCTGT5pf0W9Hr","tlshash":"d473c93123c46abbc78412c7ee6f3e65c5289056ddce8d8dc66c9b94ae7561c03098fb","first_seen":"2025-10-02T00:05:19.579108Z","last_seen":"2025-12-04T21:10:33.251454Z","times_seen":86,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":26,"dns":19,"connect":1,"send":0,"wait":165,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/users/9df7ffe78a4b/images/21cb8f0306251699570195-g2-11-23.svg","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /users/9df7ffe78a4b/images/21cb8f0306251699570195-g2-11-23.svg HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"68db2ab7-ad72\"\r\nlast-modified: Tue, 30 Sep 2025 00:56:23 GMT\r\ncdn-storageserver: SE-583\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 385\r\nperma-cache: HIT\r\ncdn-proxyver: 1.37\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/06/2025 16:12:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 064b653dd869cc824599e1487532418f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":44402,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ae141b242259d41cf80e2920c6a78484","sha1":"0a5197278572d746c0d201f1dc7429c1063bcb54","sha256":"848b0e2eabea8e8ec86062ca484cb53ae7c316029eb54ee726cbac0da1043e20","sha512":"3a567b73ba319ea934041c10b498bdf0e66f6c7547508fc6032936fac736cea04221defdcbf4693e71f04c2010b3b0eff0a197ae32040eeccedac6322d2df6e0","ssdeep":"768:GF1ZmYEqb6xp/h7y1kFp42e+gRcryEfkswF2eAIT14Rj8bPw1t3dFaY5iS3HpVpw:GF1kqb6xp/h7YkFpe+VryESF2s4j8bIG","tlshash":"b3139dd96f390ffdb5c162fed006580d7c83ece92e824e66d3848d4aa09a058dd42ed7","first_seen":"2023-12-18T22:10:31Z","last_seen":"2026-04-03T19:43:47.596233Z","times_seen":174,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/otSDKStub.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:44.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /scripttemplates/otSDKStub.js HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:44 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 8536\r\ncf-ray: 98bec7237b0a56aa-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: LZaNdI/OX6E45KR6gstApA==\r\nlast-modified: Wed, 08 Oct 2025 06:36:06 GMT\r\netag: 0x8DE0634F5BBDBCA\r\nx-ms-request-id: 30e896d7-c01e-00dd-41c7-38c024000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nage: 38994\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25886,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25885)","md5":"f266bedfac21857dedcec1f66506eb67","sha1":"9b0f6bb138b3b96c6c285aa22f0292c262d057a0","sha256":"d266cebe579de643751bf3548d09af1b3bb2120cbb0aa64b59c8a84871cd8768","sha512":"92818623cef9d937577921b4a1ad7b353b12962086e8705ebe87fb5f085189826a9cda7e9c9efcbc01ebd69e8ca30281190ecfa78b5d96892d74265f2a11a2c2","ssdeep":"384:8Tg8XNbpLx6jhA5SNYbGr1Uci0FPvfC5mC1X2cqKpQinGHKJxEV88y:agKFLxUhA5SNGsUci0tDCZqgyy","tlshash":"cfc2f8ddb140fe3446d3a19c5a3be25a723b746d34869064b8a4ece0247cc4f6533bb6","first_seen":"2025-10-06T04:17:24.407426Z","last_seen":"2026-04-01T06:47:16.882391Z","times_seen":11500,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":46,"dns":0,"connect":5,"send":0,"wait":31,"receive":1,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"258-fem-750.mktoweb.com/js/forms2/js/forms2.min.js","fqdn":"258-fem-750.mktoweb.com","domain":"mktoweb.com","tld":"com"},"ip":{"addr":"104.16.96.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:45.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"258-fem-750.mktoweb.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 15:51:40 GMT","end":"Sat, 22 Nov 2025 15:51:39 GMT"},"fingerprint":{"sha1":"D6:0D:2A:35:93:4C:E9:03:C9:FD:46:C2:ED:10:78:69:0C:33:10:95","sha256":"1F:AE:21:33:B4:4E:8A:64:73:CF:01:A2:9C:23:DD:E0:92:54:98:8F:FF:85:8C:85:39:7B:A1:D0:AB:1A:62:76"}}},"request":{"raw":"GET /js/forms2/js/forms2.min.js HTTP/1.1\r\nHost: 258-fem-750.mktoweb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:45 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: 98bec72aeaae3181-OSL\r\nlast-modified: Thu, 25 Sep 2025 21:24:42 GMT\r\netag: \"1d40ada-31f55-63fa6cc1f7a80\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=14400\r\nage: 5371\r\nexpires: Thu, 09 Oct 2025 19:05:45 GMT\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=Ey4IQwZYYTRvSGik3_vktD4kyojcwfBb9txLZyG7teA-1760022345-1.0.1.1-9OiZBoPTVq16IOGL3fs.kzwPACvbLbyxqA7hx3eIyAWwuNhw04rFKH9cXYobr7L.YonxoL8u0TVC_PIBg9JPUiFcbH.thTlPs5XGqayarBw; path=/; expires=Thu, 09-Oct-25 15:35:45 GMT; domain=.258-fem-750.mktoweb.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":204629,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32006)","md5":"c3fb33f57fc419c3291161a4d145929c","sha1":"b5144d68b89e67f5072403f77beaf557e17f465c","sha256":"1d8f29fefcf1c3c78ed278f87273b54e272722c4672bbcfd903092881e0fd3ff","sha512":"234ed9cf59eda8c096fd9666fdd8c7591f8cddd8cc66f594279227a5ed4a6d6e61637bc385d9595215116916c414a8f014e8a966f7f2fdd0c3a6c4c83f5ee2f6","ssdeep":"3072:l/i/bncR4dc8joJjjTgEp8kSUR1G8OldwwqL2R3DDU8CuBjeMtI:l67DJjITpedUcCgR3DDU8CuBjep","tlshash":"8014f8c87692b052826734b541bf410bb17aa9e9b40ccca4f194d8e47ebce9d517bf2c","first_seen":"2025-07-09T03:41:10.306837Z","last_seen":"2026-04-02T19:44:35.713484Z","times_seen":3319,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":159,"dns":140,"connect":1,"send":0,"wait":17,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j.6sc.co/6si.min.js","fqdn":"j.6sc.co","domain":"6sc.co","tld":"co"},"ip":{"addr":"2.22.225.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:46.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6sc.co","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:02:21 GMT","end":"Wed, 05 Nov 2025 09:02:20 GMT"},"fingerprint":{"sha1":"27:4B:B8:AE:07:40:BE:A6:37:5A:53:A4:94:03:EE:07:A8:96:58:80","sha256":"79:86:0D:15:68:5C:19:D9:33:E2:5A:25:FA:02:A2:2D:7D:F6:D8:13:3B:07:79:D4:9E:EE:56:52:94:1F:9A:EA"}}},"request":{"raw":"GET /6si.min.js HTTP/1.1\r\nHost: j.6sc.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 19 Feb 2025 12:59:27 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: P3wU2zsFsU_YKU_VzrjthagDfojxxkBN\r\netag: W/\"bc32411fd6fa348d8203d2f26dd9866d\"\r\nvary: accept-encoding\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: YxcZdCzJeK_9414NNSAOCiMYVoqA2RsI_jtaj02f7ooGGzXhRY4K1g==\r\ncontent-length: 18919\r\ncache-control: private, max-age=10800\r\nexpires: Thu, 09 Oct 2025 18:05:46 GMT\r\ndate: Thu, 09 Oct 2025 15:05:46 GMT\r\ncontent-type: application/javascript\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":69903,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31995)","md5":"bc32411fd6fa348d8203d2f26dd9866d","sha1":"f4abdc1b3c92857e9d3079cc7b3f08ab85c3b00b","sha256":"91c20c70d36b608cf919e894b0ac9e32298d6b3ac3ca59c45a85e7c44161d170","sha512":"3bfa45408f26750653ccc855ebec2f717aa89129884874b852838ccecbcb9cb3f74c799c9a32a07c142d307f542d31e718d752a5f3844e12d3c28494f48ef183","ssdeep":"1536:r9iySoTpyw2Ziv1EZv5nDpcP4omgI4AZuync4eZAnnCyX16oMmYtYiGGGZGu/:xORk+RKbCdZZ","tlshash":"cd63c78df792b07913a7d0a1853f121bb339392864454968f25ec8e22e79e4e6137f7c","first_seen":"2024-12-19T10:18:10.884849Z","last_seen":"2026-04-04T13:30:49.930354Z","times_seen":7424,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"url.avanan.click/v2/r01/___https:/wqmcr8si.r.us-west-2.awstrack.me/L0/https:/www.bill.com*2Flegal*2Fspend-expense-terms-of-service/1/01010199c97d3d13-87bb4fc2-9fb9-42c6-8d05-e536f4cbefb4-000000/Q0bp3qCpfxJrVOXEZlC-ZIdB9U0=448___.YXAzOmF0bGFzaHA6YTpvOjcyODBmY2E5ZDI4MjFiMjk5Yjk1OTc1Y2ZjNzc3NzFjOjc6ZWUwYjo3MzlhM2M5NzA0YWI5NGRlNjNkYWE4NmMwMjA1OGI0YzFjODdmNGJlNDljYzdhYjIwNDhjZTNjOTEzMGEzYTk2Omg6VDpO","fqdn":"url.avanan.click","domain":"avanan.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-09T15:05:33.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.avanan.click","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 14 Nov 2024 00:00:00 GMT","end":"Sat, 13 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"E5:B4:EB:B3:6F:9D:67:20:14:36:82:D3:86:89:5C:74:F0:9A:6E:35","sha256":"AD:92:A1:EE:2F:1E:D0:A0:61:8F:62:DB:BE:AA:CD:96:85:75:0E:71:E3:14:4B:D1:EA:A1:3B:1B:5A:EB:BA:D1"}}},"request":{"raw":"GET /v2/r01/___https:/wqmcr8si.r.us-west-2.awstrack.me/L0/https:/www.bill.com*2Flegal*2Fspend-expense-terms-of-service/1/01010199c97d3d13-87bb4fc2-9fb9-42c6-8d05-e536f4cbefb4-000000/Q0bp3qCpfxJrVOXEZlC-ZIdB9U0=448___.YXAzOmF0bGFzaHA6YTpvOjcyODBmY2E5ZDI4MjFiMjk5Yjk1OTc1Y2ZjNzc3NzFjOjc6ZWUwYjo3MzlhM2M5NzA0YWI5NGRlNjNkYWE4NmMwMjA1OGI0YzFjODdmNGJlNDljYzdhYjIwNDhjZTNjOTEzMGEzYTk2Omg6VDpO HTTP/1.1\r\nHost: url.avanan.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":501,"timings":{"blocked":250,"dns":56,"connect":1,"send":0,"wait":0,"receive":0,"ssl":191},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-09T15:05:42Z","timestamp":1760022342,"ip_dst":{"addr":"3.167.2.40","port":80,"asn":0,"as":"","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.19","port":41838,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.click domain","source":"{\"timestamp\":\"2025-10-09T15:05:42.886443+0000\",\"flow_id\":1632404582252189,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":41838,\"dest_ip\":\"3.167.2.40\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858675,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.click domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"url.avanan.click\",\"url\":\"/v2/r01/___https:/wqmcr8si.r.us-west-2.awstrack.me/L0/https:/www.bill.com*2Flegal*2Fspend-expense-terms-of-service/1/01010199c97d3d13-87bb4fc2-9fb9-42c6-8d05-e536f4cbefb4-000000/Q0bp3qCpfxJrVOXEZlC-ZIdB9U0=448___.YXAzOmF0bGFzaHA6YTpvOjcyODBmY2E5ZDI4MjFiMjk5Yjk1OTc1Y2ZjNzc3NzFjOjc6ZWUwYjo3MzlhM2M5NzA0YWI5NGRlNjNkYWE4NmMwMjA1OGI0YzFjODdmNGJlNDljYzdhYjIwNDhjZTNjOTEzMGEzYTk2Omg6VDpO\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://wqmcr8si.r.us-west-2.awstrack.me/L0/https://www.bill.com%2Flegal%2Fspend-expense-terms-of-service/1/01010199c97d3d13-87bb4fc2-9fb9-42c6-8d05-e536f4cbefb4-000000/Q0bp3qCpfxJrVOXEZlC-ZIdB9U0=448\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":1053,\"bytes_toclient\":880,\"start\":\"2025-10-09T15:05:37.474781+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/63e3da3df35cd62f54751985/681cf1136edc173010b34957_So%CC%88hne%20Font.woff2","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:44.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 17:30:56 GMT","end":"Mon, 10 Nov 2025 18:30:53 GMT"},"fingerprint":{"sha1":"4E:8C:AA:A3:52:1E:AC:1D:1D:23:4D:AC:0D:48:D5:BB:F9:04:B2:8F","sha256":"9F:CB:1D:9B:6C:0D:B9:B3:80:11:A4:E0:06:8D:F6:2A:5A:F8:2B:36:D0:55:D7:9D:F2:31:72:29:4F:B0:6F:A7"}}},"request":{"raw":"GET /63e3da3df35cd62f54751985/681cf1136edc173010b34957_So%CC%88hne%20Font.woff2 HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.prod.website-files.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:44 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21900\r\ncf-ray: 98bec726cdf375ab-OSL\r\nx-amz-id-2: viUldNMrqkEhBKZ8Xky8Ze3mUym2i9VGj2bm2pxah4fKzjln2b8wFUAxOGXCs8k60Ed6YFlkNBTyC2Qd4cMTzZJTLF8ySJB0\r\nx-amz-request-id: 4XMWGSDKA668K407\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Thu, 08 May 2025 17:59:48 GMT\r\netag: \"45bd695da40b9c5e01ddbc23d098087a\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: oy0t7vRWgO573lzbvh5BQGyx4qbU4VRd\r\naccept-ranges: bytes\r\nage: 942242\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21900,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21900, version 1.0","md5":"45bd695da40b9c5e01ddbc23d098087a","sha1":"d8b6cb2c1e2fe0ffa4556b5c783004f9d9a95aaa","sha256":"04d1cc1e694f970e157ea1d79924db2545983ed7dfcadf5aef21bcfbe793130b","sha512":"977082cb24cd0705364b06d344d73b2d16eed588040cf34fd6db2f2559859ed6a1c4ce4070839880b4fa1e7edaf521dc2d076e5bee101303ac0672d54c741fe0","ssdeep":"384:2W7bECfW0rjVVdxiAOfCEGAtHX2B0VA415oxtktkfpxqRBD9AGyQMzhSoS/5Q:2W7DWIjNxiZV2BYP5ox7s7D9AGy7Yx/O","tlshash":"3ba2d1a36050b1b66e737d3401e79fcb59eb38961a34427ff2e0d38b99268a6d05b710","first_seen":"2025-06-20T20:17:42.364102Z","last_seen":"2026-04-03T19:43:47.333837Z","times_seen":173,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202506.1.0/assets/otCommonStyles.css","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:45.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /scripttemplates/202506.1.0/assets/otCommonStyles.css HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bill.com/\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:45 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\ncontent-md5: dIH5shy27L66mhu4/gDB5Q==\r\nlast-modified: Mon, 21 Jul 2025 06:33:39 GMT\r\nx-ms-request-id: 6f5d66f8-201e-00ba-620b-287383000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nage: 85861\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\ncf-ray: 98bec72d8db956aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25850,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (25850), with no line terminators","md5":"7481f9b21cb6ecbeba9a1bb8fe00c1e5","sha1":"cc10879f24612ba6cdbe4c6440ebb11a9a301ca1","sha256":"a7989213aebcaf40b964d7f6682ab30514a2eca187b9cdd101739903676b2fde","sha512":"02f0eb0e00379df2eecbdc73d7c62bbac3a38d3a0f4566348cd7944f7036ee9bbc7894d3d84fc3fab1dd58a94a533926ae86c778913a84c1167de90cad8e5597","ssdeep":"384:WI8ChnGo09YNHDouelCt7FGAVsqLnwGfg4xqsQMPNE:CYhp6J","tlshash":"f8c2459b38512b1ae7d7c719992139827d11aceffd739ceee005a3784adc3e24c1464a","first_seen":"2025-04-10T07:53:09.727568Z","last_seen":"2026-04-04T14:52:21.588578Z","times_seen":23279,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"epsilon.6sense.com/v3/company/details","fqdn":"epsilon.6sense.com","domain":"6sense.com","tld":"com"},"ip":{"addr":"75.2.108.141","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"epsilon.6sense.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"49:BB:C5:79:30:52:CA:7D:E6:B9:EB:0B:D9:D3:ED:AE:13:EB:C4:C9","sha256":"49:09:6B:6B:E6:23:C0:C9:90:6A:51:BB:50:2D:45:A9:CA:63:9C:88:6D:74:F4:27:2F:A6:77:2D:62:03:AD:08"}}},"request":{"raw":"GET /v3/company/details HTTP/1.1\r\nHost: epsilon.6sense.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: Token 911df01f026672e1f01d68122f5a1bdfcc2dc47c\r\nX-6s-CustomID: WebTag adbd7400-c99d-4a74-ae9b-5d9e50e0a46c\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: application/json\r\ncontent-length: 387\r\ntiming-allow-origin: https://6sense.com\r\nx-6si-region: \r\naccess-control-expose-headers: X-6si-Region\r\naccess-control-allow-origin: https://www.bill.com\r\naccess-control-allow-credentials: true\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":730,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ad6221afb794886c0776e9accb2a514a","sha1":"79a71a8aaac3ec9412dba6d45707af18929607f7","sha256":"35783b75b4255e9b5446410b8f747923affa9290eaaa8a44a45fa548d1679ad7","sha512":"a3bfb24417208a98781fb898eaa4a5b0d74f950baecf14ebc4644c0eedd6c93a40b6bca07a3adee36e69c58e25d76b017a96022a1b19d4c1f7919065faf07531","ssdeep":"","tlshash":"5f01f46d35356c2c4abac3cd660fa5232ef823a4c18ce661dccf9d0841c57e52b64e21","first_seen":"2024-10-17T18:30:41.213014Z","last_seen":"2026-04-04T15:05:44.269762Z","times_seen":5190,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":27,"connect":1,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/users/9df7ffe78a4b/images/77f3529ca1661707461853-gettyimages-1289906406-170667a-1.png?width=530","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /users/9df7ffe78a4b/images/77f3529ca1661707461853-gettyimages-1289906406-170667a-1.png?width=530 HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24992\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"68db2ab7-61a0\"\r\nlast-modified: Tue, 30 Sep 2025 00:56:23 GMT\r\ncdn-storageserver: SE-583\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 585\r\nperma-cache: HIT\r\ncdn-proxyver: 1.37\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/05/2025 13:05:46\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 440df1c1ccbe222631bdc8c67d278d64\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":24992,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 530x606, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"605e016dc5271aedbaa2c8040fae6237","sha1":"be49e019887183de3c82e4ef3e1976d171d90e10","sha256":"065ae638929787dd6198aeae72a06413952306f92c147a05f15efd7d8430dd39","sha512":"bbf4ff7e8cae809feb0c244ba360a05625006e3c9f02f49d65e632a79029ebf55ad71f3cc1891299642c73c3d0c9b02a3ff0cfa720375ee4e181aeb5f8b99ffb","ssdeep":"768:G8nrOEycu5rKdLf0LIEzJtgEVvNDKPayGn:G4bY5u1H9SNePM","tlshash":"73b2e09bd39c7b1f0cd6ad8d8c382367c6da117515ef9882c49acc6b33472a0c9d8867","first_seen":"2025-10-02T00:05:19.447611Z","last_seen":"2026-03-05T19:35:22.609029Z","times_seen":95,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dl=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=1155441603.1760022346\u0026dt=BILL%20Spend%20%26%20Expense%20Terms%20of%20Service%20%7C%20BILL\u0026auid=1209031368.1760022346\u0026navt=n\u0026npa=1\u0026gtm=45He5a71v71730231za200zd71730231xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104573694~104684208~104684211~104948813~105391253~115480710~115616985~115834636~115834638\u0026tft=1760022346429\u0026tfd=9078\u0026apve=1\u0026apvf=f\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:47 GMT","end":"Mon, 15 Dec 2025 08:40:46 GMT"},"fingerprint":{"sha1":"89:EB:BC:DD:20:C6:D5:83:67:D1:C5:47:B8:9C:34:D0:CB:EB:F5:0F","sha256":"CA:94:18:CF:3D:99:B2:50:17:2E:EC:63:BD:BE:46:03:4A:EC:AB:BC:CC:15:73:A2:87:A3:21:CE:8C:8C:C7:C6"}}},"request":{"raw":"GET /ccm/collect?en=page_view\u0026dl=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=1155441603.1760022346\u0026dt=BILL%20Spend%20%26%20Expense%20Terms%20of%20Service%20%7C%20BILL\u0026auid=1209031368.1760022346\u0026navt=n\u0026npa=1\u0026gtm=45He5a71v71730231za200zd71730231xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104573694~104684208~104684211~104948813~105391253~115480710~115616985~115834636~115834638\u0026tft=1760022346429\u0026tfd=9078\u0026apve=1\u0026apvf=f\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.6sc.co/v1/beacon/img.gif?token=e9735ec6609f6c485a6878c46aaf6f14\u0026svisitor=null\u0026visitor=a29605cd-1300-47ca-826b-86c62e8be6d6\u0026session=2f6fcf52-fb5b-4aae-8fee-54e00d83df83\u0026event=active_time_track\u0026q=%7B%22currentTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A48%20GMT%22%2C%22lastTrackTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A47%20GMT%22%2C%22timeSpent%22%3A%221003%22%2C%22totalTimeSpent%22%3A%222004%22%7D\u0026isIframe=false\u0026m=%7B%22description%22%3A%22Please%20read%20the%20following%20to%20learn%20the%20rules%20and%20restrictions%20that%20govern%20your%20use%20of%20our%20website(s)%20and%20mobile%20application(s)%20(%E2%80%9Cour%20Services%E2%80%9D).%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22BILL%20Spend%20%26amp%3B%20Expense%20Terms%20of%20Service%20%7C%20BILL%22%7D\u0026cb=\u0026r=\u0026thirdParty=%7B%7D\u0026v2=1\u0026pageURL=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026pageViewId=94f1c5eb-0cf3-4193-8406-3f8bb343e9bc\u0026an_uid=-1\u0026webTagId=adbd7400-c99d-4a74-ae9b-5d9e50e0a46c\u0026v=1.1.31","fqdn":"b.6sc.co","domain":"6sc.co","tld":"co"},"ip":{"addr":"2.22.225.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:48.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6sc.co","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:02:21 GMT","end":"Wed, 05 Nov 2025 09:02:20 GMT"},"fingerprint":{"sha1":"27:4B:B8:AE:07:40:BE:A6:37:5A:53:A4:94:03:EE:07:A8:96:58:80","sha256":"79:86:0D:15:68:5C:19:D9:33:E2:5A:25:FA:02:A2:2D:7D:F6:D8:13:3B:07:79:D4:9E:EE:56:52:94:1F:9A:EA"}}},"request":{"raw":"GET /v1/beacon/img.gif?token=e9735ec6609f6c485a6878c46aaf6f14\u0026svisitor=null\u0026visitor=a29605cd-1300-47ca-826b-86c62e8be6d6\u0026session=2f6fcf52-fb5b-4aae-8fee-54e00d83df83\u0026event=active_time_track\u0026q=%7B%22currentTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A48%20GMT%22%2C%22lastTrackTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A47%20GMT%22%2C%22timeSpent%22%3A%221003%22%2C%22totalTimeSpent%22%3A%222004%22%7D\u0026isIframe=false\u0026m=%7B%22description%22%3A%22Please%20read%20the%20following%20to%20learn%20the%20rules%20and%20restrictions%20that%20govern%20your%20use%20of%20our%20website(s)%20and%20mobile%20application(s)%20(%E2%80%9Cour%20Services%E2%80%9D).%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22BILL%20Spend%20%26amp%3B%20Expense%20Terms%20of%20Service%20%7C%20BILL%22%7D\u0026cb=\u0026r=\u0026thirdParty=%7B%7D\u0026v2=1\u0026pageURL=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026pageViewId=94f1c5eb-0cf3-4193-8406-3f8bb343e9bc\u0026an_uid=-1\u0026webTagId=adbd7400-c99d-4a74-ae9b-5d9e50e0a46c\u0026v=1.1.31 HTTP/1.1\r\nHost: b.6sc.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nexpires: Thu, 09 Oct 2025 15:05:49 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Thu, 09 Oct 2025 15:05:49 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"f837aa60b6fe83458f790db60d529fc9","sha1":"14af87ccec7f81bb28d53c84da2fd5a9d5925cda","sha256":"dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b","sha512":"a85e09c3b5dbb560f4e03ba880047dbc8b4999a64c1f54fbfbca17ee0bcbed3bc6708d699190b56668e464a59358d6b534c3963a1329ba01db21075ef5bedace","ssdeep":"","tlshash":"30900403c540c003d155f0310d14c7401354f130417c030f70fd575ddc751514c11000","first_seen":"2023-04-05T09:52:32Z","last_seen":"2026-04-04T14:22:01.287851Z","times_seen":32230,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"epsilon.6sense.com/v3/company/details","fqdn":"epsilon.6sense.com","domain":"6sense.com","tld":"com"},"ip":{"addr":"75.2.108.141","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"epsilon.6sense.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Sep 2025 00:00:00 GMT","end":"Thu, 01 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"49:BB:C5:79:30:52:CA:7D:E6:B9:EB:0B:D9:D3:ED:AE:13:EB:C4:C9","sha256":"49:09:6B:6B:E6:23:C0:C9:90:6A:51:BB:50:2D:45:A9:CA:63:9C:88:6D:74:F4:27:2F:A6:77:2D:62:03:AD:08"}}},"request":{"raw":"OPTIONS /v3/company/details HTTP/1.1\r\nHost: epsilon.6sense.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,x-6s-customid\r\nReferer: https://www.bill.com/\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-length: 0\r\ntiming-allow-origin: https://6sense.com\r\nx-6si-region: \r\naccess-control-expose-headers: X-6si-Region\r\naccess-control-allow-origin: https://www.bill.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: OPTIONS,GET\r\naccess-control-allow-headers: authorization,x-6s-customid\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":111,"dns":21,"connect":1,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/5.feeadc62.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /app/js/5.feeadc62.min.js HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"2d09e87814b1dfc9efef44879aeae55f\"\r\nlast-modified: Fri, 26 Sep 2025 23:44:02 GMT\r\ncdn-storagebalancer: SE-583\r\nperma-cache: MISS\r\nx-amz-id-2: ClPS61wSDDEaK7k0E9fedNwNCykNFB+Sxj0iUZ5cIcOmGinyhtTRgSZHiESp5sJkU577uesEi/8iLRJt+XK71UdNyIuGK9SB\r\nx-amz-request-id: 991DCVN7EPT9MST1\r\nx-amz-server-side-encryption: AES256\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/30/2025 00:57:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7da7b0220915cde3352732ffa8c72b95\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":12697,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12648)","md5":"2d09e87814b1dfc9efef44879aeae55f","sha1":"b6df4810dc1144679c8eb43a806f5fee366308ab","sha256":"f0d7d0ae2095f09937897fedb309c05f66444b5be46c875b50e1b5b5537d1910","sha512":"ccc0b4af34ea582f6546dca11f54127b4203e75fb4c161b86cf10524187b2eabad693663b2efa558f9d959f0a32183e588b0a96c7f984d5e7441e34096834e3f","ssdeep":"384:HiD+uB//R/lSbxz2QwMXpMRvrc0+iJ+QJ/01tBVBFri1VdWKXh3oXNyZzq:HiD+uB3RNSbxz2QwMXpMRv1L/+tBVLiG","tlshash":"6e42a3fb3422f9345de90061a7362750e022143e7946e05c7a6cdce4e909ddfaa226fe","first_seen":"2025-08-29T23:50:34.844108Z","last_seen":"2026-02-10T19:12:33.232999Z","times_seen":4390,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/0.bc80f3cc.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /app/js/0.bc80f3cc.min.js HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"68db2ab4-1b20\"\r\nlast-modified: Tue, 30 Sep 2025 00:56:20 GMT\r\ncdn-storageserver: SE-583\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 385\r\nperma-cache: HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/30/2025 00:57:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 291b7a63823cb21bd2d73a6f0363b16d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":6944,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6897)","md5":"079a0fd4528f1a49418ef250d62eff77","sha1":"e6930abd46c18db944e6d7f214d5ac4d3ca21b75","sha256":"977ba8945143351ce85ad82aa45085a9691357b6d86a158ef82048279e141deb","sha512":"78a80b7471689db93c08e640ae342d5feaabe33fd42a1a1fe3c968fe73337567a3c927c2f9b19790c32a895f9802f1140d3df898ce61d50f452dc05c89bc939e","ssdeep":"192:xRr1cxSUlxS0btQaC2c8pnFmq2PDCmrIkrpqeZC2Hre5+blRRQ:x11cAgxfbtQaBbpncq2LBsktqWBHK+5g","tlshash":"8fe13114b2c3f63128f7809aa3960298063192142a82d1bdb47ddffb5d2df5970977f9","first_seen":"2025-09-30T03:27:48.922007Z","last_seen":"2025-12-17T22:13:32.545253Z","times_seen":1451,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/consent/e00a365a-4519-4e49-bc2a-ed5bba62ed06/OtAutoBlock.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:44.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /consent/e00a365a-4519-4e49-bc2a-ed5bba62ed06/OtAutoBlock.js HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncf-ray: 98bec723ab4756aa-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\netag: 0x8DDBDB23B64BA31\r\nexpires: Fri, 10 Oct 2025 15:05:44 GMT\r\nlast-modified: Mon, 07 Jul 2025 23:58:55 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding, X-OneTrust-IsBot\r\ncontent-md5: 5L3LKv+NdET82sBuRduX0w==\r\ncross-origin-resource-policy: cross-origin, cross-origin\r\nx-content-type-options: nosniff\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: 0cd2a2b3-001e-008f-0c27-39ddd6000000\r\nx-ms-version: 2009-09-19\r\nx-onetrust-isbot: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":389238,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63504)","md5":"f817ea2e7acf200cfc3f0b9717b14953","sha1":"a3e57a5be44057d49471b0861d0bfcfcc8d6d617","sha256":"5cfbf512351939c9253a647642420ff57a3a9f73e217347d186e861c5b5bf11c","sha512":"19bf3f8f7718fb8481ab90bcd269e90263f334bcf698fd323eb4d7995c17619751304f5d9fa51431a1ca967279bf9b9ce3ce241d67fe5cfae7bd802f8c5d95fa","ssdeep":"1536:H+KVDKqYzvz6/tPRY6dvjpLMR1SHMrRJ1qlydaORkUgueO5eLi8bMQ8PRDbafjMy:YvmNMrSLi6WflBx6NQWV","tlshash":"1284629b43ec1caa9f091f51a4d6fa0e8ddbb6cb4fc3ac95d0b4cf584b950b9801891d","first_seen":"2025-07-08T15:24:26.555802Z","last_seen":"2026-01-23T19:28:35.06992Z","times_seen":125,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":78,"dns":4,"connect":1,"send":0,"wait":79,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202506.1.0/assets/otFloatingRoundedCorner.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:45.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /scripttemplates/202506.1.0/assets/otFloatingRoundedCorner.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bill.com/\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:45 GMT\r\ncontent-type: application/json\r\ncontent-length: 2698\r\ncf-ray: 98bec72d7db056aa-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: FObyRqcV6Y0+qEt/3CcTcg==\r\nlast-modified: Mon, 21 Jul 2025 06:33:30 GMT\r\netag: 0x8DDC82082254B9B\r\nx-ms-request-id: 634d6b13-001e-0043-0eb5-fab963000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nage: 85861\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10785,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"144636780cdd8e564f510e4ad5384347","sha1":"ac4fcbed6a0cc3faec3586575797965d703e3592","sha256":"7d51bfe589cb2388e92f5dcdd3ce798e9c338d78c8cf6cce426914b523c24dcc","sha512":"34949eeadacf16e20e4ac705440d42afdd4f73d21abbddd9ab172ba6d0a502d6d0e945a8f75b99b433a87aeb372753ef0284134d51172870ae7e67509097be61","ssdeep":"192:jm2Kj6MyWH08DRXzBIHi3uxLi/DFtwfJpF3fMYtOJYw/c3ODM4xRw+QOQEip54fm:jm28XVc7K1aaWOIfOB0","tlshash":"372276157d100b3cf1ebcbae498279c935226c8bfd3399dda25da77482ad2f60d66700","first_seen":"2025-06-02T03:00:09.983056Z","last_seen":"2026-04-03T16:46:21.643023Z","times_seen":1874,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.6sc.co/v1/beacon/img.gif?token=e9735ec6609f6c485a6878c46aaf6f14\u0026svisitor=null\u0026visitor=a29605cd-1300-47ca-826b-86c62e8be6d6\u0026session=2f6fcf52-fb5b-4aae-8fee-54e00d83df83\u0026event=a_pageload\u0026q=%7B%22pageLoadTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%22%7D\u0026isIframe=false\u0026m=%7B%22description%22%3A%22Please%20read%20the%20following%20to%20learn%20the%20rules%20and%20restrictions%20that%20govern%20your%20use%20of%20our%20website(s)%20and%20mobile%20application(s)%20(%E2%80%9Cour%20Services%E2%80%9D).%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22BILL%20Spend%20%26amp%3B%20Expense%20Terms%20of%20Service%20%7C%20BILL%22%7D\u0026cb=\u0026r=\u0026thirdParty=%7B%7D\u0026v2=1\u0026pageURL=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026pageViewId=94f1c5eb-0cf3-4193-8406-3f8bb343e9bc\u0026an_uid=-1\u0026webTagId=adbd7400-c99d-4a74-ae9b-5d9e50e0a46c\u0026v=1.1.31","fqdn":"b.6sc.co","domain":"6sc.co","tld":"co"},"ip":{"addr":"2.22.225.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6sc.co","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:02:21 GMT","end":"Wed, 05 Nov 2025 09:02:20 GMT"},"fingerprint":{"sha1":"27:4B:B8:AE:07:40:BE:A6:37:5A:53:A4:94:03:EE:07:A8:96:58:80","sha256":"79:86:0D:15:68:5C:19:D9:33:E2:5A:25:FA:02:A2:2D:7D:F6:D8:13:3B:07:79:D4:9E:EE:56:52:94:1F:9A:EA"}}},"request":{"raw":"GET /v1/beacon/img.gif?token=e9735ec6609f6c485a6878c46aaf6f14\u0026svisitor=null\u0026visitor=a29605cd-1300-47ca-826b-86c62e8be6d6\u0026session=2f6fcf52-fb5b-4aae-8fee-54e00d83df83\u0026event=a_pageload\u0026q=%7B%22pageLoadTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%22%7D\u0026isIframe=false\u0026m=%7B%22description%22%3A%22Please%20read%20the%20following%20to%20learn%20the%20rules%20and%20restrictions%20that%20govern%20your%20use%20of%20our%20website(s)%20and%20mobile%20application(s)%20(%E2%80%9Cour%20Services%E2%80%9D).%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22BILL%20Spend%20%26amp%3B%20Expense%20Terms%20of%20Service%20%7C%20BILL%22%7D\u0026cb=\u0026r=\u0026thirdParty=%7B%7D\u0026v2=1\u0026pageURL=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026pageViewId=94f1c5eb-0cf3-4193-8406-3f8bb343e9bc\u0026an_uid=-1\u0026webTagId=adbd7400-c99d-4a74-ae9b-5d9e50e0a46c\u0026v=1.1.31 HTTP/1.1\r\nHost: b.6sc.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nexpires: Thu, 09 Oct 2025 15:05:47 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"f837aa60b6fe83458f790db60d529fc9","sha1":"14af87ccec7f81bb28d53c84da2fd5a9d5925cda","sha256":"dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b","sha512":"a85e09c3b5dbb560f4e03ba880047dbc8b4999a64c1f54fbfbca17ee0bcbed3bc6708d699190b56668e464a59358d6b534c3963a1329ba01db21075ef5bedace","ssdeep":"","tlshash":"30900403c540c003d155f0310d14c7401354f130417c030f70fd575ddc751514c11000","first_seen":"2023-04-05T09:52:32Z","last_seen":"2026-04-04T14:22:01.287851Z","times_seen":32230,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/users/9df7ffe78a4b/images/db77e3cb078c1707494503-651c34a04a6ee15fcc0074c5_2904-The-future-of-finance-LP-ebook-with-Rocket-p-1080.jpg?width=1060","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /users/9df7ffe78a4b/images/db77e3cb078c1707494503-651c34a04a6ee15fcc0074c5_2904-The-future-of-finance-LP-ebook-with-Rocket-p-1080.jpg?width=1060 HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trkn.us/pixel/c?ppt=19965\u0026g=sitewide\u0026gid=46667\u0026gtmcb=568099972","fqdn":"trkn.us","domain":"trkn.us","tld":"us"},"ip":{"addr":"95.100.107.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:46.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cert1-prod.aut.a24365.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 05:44:22 GMT","end":"Wed, 31 Dec 2025 05:44:21 GMT"},"fingerprint":{"sha1":"D3:C4:51:27:62:7B:F8:3E:E8:30:41:24:17:27:08:2C:55:25:B6:A3","sha256":"BC:47:68:BB:C6:53:12:EA:BF:8F:D0:BA:38:5C:31:26:30:78:49:DD:88:80:DC:F3:F5:2B:06:3F:3E:2E:5A:A2"}}},"request":{"raw":"GET /pixel/c?ppt=19965\u0026g=sitewide\u0026gid=46667\u0026gtmcb=568099972 HTTP/1.1\r\nHost: trkn.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nLocation: /pixel/c?ppt=19965\u0026g=sitewide\u0026gid=46667\u0026gtmcb=568099972\u0026ip=91.90.42.154\u0026cuidchk=1\r\nDate: Thu, 09 Oct 2025 15:05:46 GMT\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nSet-Cookie: barometric[cuid]=cuid_68e7cf4a-a76a-4645-9fc0-f829f0edc693; expires=Fri, 09-Oct-2026 15:05:46 GMT; Max-Age=31536000; path=/; SameSite=None;  Secure; domain=.trkn.us;\r\nContent-Length: 0\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":44,"dns":21,"connect":8,"send":0,"wait":13,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/10.3df31ec4.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /app/js/10.3df31ec4.min.js HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"68db2ab5-655\"\r\nlast-modified: Tue, 30 Sep 2025 00:56:21 GMT\r\ncdn-storageserver: SE-583\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 585\r\nperma-cache: HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/30/2025 00:57:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b5e51e0afa15322dfccdb4e471d30a5f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1621,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1578)","md5":"da6f0853c9122702b72f6944821537f3","sha1":"f1befd164333938cc251d30129fa358be8d9559f","sha256":"af9e7ab135be36d85f97f922f277f00219696911925f3789d73a7a54dc0e1255","sha512":"5ade20b3611767b8c8053face9d0e8c8ce7a14546c0296d6d2bdcddb99a40362a599c40d4158cf00548d7ae8313ae4e82feb587376ad2b3d5deedbc971dd2ea4","ssdeep":"","tlshash":"783124ee717278f44da1587cc1fe9735605785162c4f422cf11caeab24adc8f0187ea8","first_seen":"2025-09-30T03:27:48.975924Z","last_seen":"2026-02-10T19:12:33.233717Z","times_seen":1973,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/users/9df7ffe78a4b/images/4afbdef9488a1707462958-649388a95d39870d2527a97c_Frame-3628.webp?width=488","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /users/9df7ffe78a4b/images/4afbdef9488a1707462958-649388a95d39870d2527a97c_Frame-3628.webp?width=488 HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35260\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"68db2c76-89bc\"\r\nlast-modified: Tue, 30 Sep 2025 01:03:50 GMT\r\ncdn-storageserver: SE-582\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 385\r\nperma-cache: HIT\r\ncdn-proxyver: 1.37\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/05/2025 13:05:46\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8e3970b903ca77503e8aa3b1bca08d78\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":35260,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"96ab5cf1145b357bca8e44a3940dd89d","sha1":"6e81954db891cce1bbe7141ef439e38a8ff7e776","sha256":"3f39ce8148b41c90752a9459f1d9d5cc816d5790f86a2daaf13ecf5275c039a4","sha512":"4ba769b04aa1b962c5de70aafea6f811f823037ef7051a65dca9ba0977bdf10ba49e758a0b4f7a8a81d1075f5e6205ccb45aa28d75eadb2a9aa649cd8d30e26c","ssdeep":"768:IcDN9wKr3PstdUKilhAwHYOwWw/UTQmOhJFFOea6DQPbPCUHkg:FDN9weKi8w4O6sIdVQzPCUHkg","tlshash":"83f2f1dab5733207e15d89c131acf18e6b1eeee6f93318828cf11228d965f1a1f155e1","first_seen":"2025-10-02T00:05:19.511244Z","last_seen":"2026-04-03T19:43:47.47572Z","times_seen":152,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trkn.us/pixel/conv/ppt=22737;g=site-wide;gid=53627;ord=[uniqueid]height=%220%22","fqdn":"trkn.us","domain":"trkn.us","tld":"us"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:46.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cert1-prod.aut.a24365.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 05:44:22 GMT","end":"Wed, 31 Dec 2025 05:44:21 GMT"},"fingerprint":{"sha1":"D3:C4:51:27:62:7B:F8:3E:E8:30:41:24:17:27:08:2C:55:25:B6:A3","sha256":"BC:47:68:BB:C6:53:12:EA:BF:8F:D0:BA:38:5C:31:26:30:78:49:DD:88:80:DC:F3:F5:2B:06:3F:3E:2E:5A:A2"}}},"request":{"raw":"GET /pixel/conv/ppt=22737;g=site-wide;gid=53627;ord=[uniqueid]height=%220%22 HTTP/1.1\r\nHost: trkn.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":51,"dns":1,"connect":21,"send":0,"wait":0,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=63e3da3df35cd62f54751985","fqdn":"d3e54v103j8qbb.cloudfront.net","domain":"d3e54v103j8qbb.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:44.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=63e3da3df35cd62f54751985 HTTP/1.1\r\nHost: d3e54v103j8qbb.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 20 Jul 2020 17:53:02 GMT\r\nserver: AmazonS3\r\ncontent-encoding: gzip\r\ndate: Wed, 08 Oct 2025 23:44:47 GMT\r\ncache-control: max-age=84600, must-revalidate\r\netag: W/\"dc5e7f18c8d36ac1d3d4753a87c98d0a\"\r\nvary: accept-encoding\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nage: 55258\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: eaAIFCmI01nr2oH790EP3TYWDHAVT8ANSToPPDCGhZGZohPy8-beJA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-04T15:27:33.816485Z","times_seen":217646,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":122,"dns":43,"connect":5,"send":0,"wait":2,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/63e3da3df35cd62f54751985/js/bill-com.7bde6a7d.6df124800cf39396.js","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:44.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 17:30:56 GMT","end":"Mon, 10 Nov 2025 18:30:53 GMT"},"fingerprint":{"sha1":"4E:8C:AA:A3:52:1E:AC:1D:1D:23:4D:AC:0D:48:D5:BB:F9:04:B2:8F","sha256":"9F:CB:1D:9B:6C:0D:B9:B3:80:11:A4:E0:06:8D:F6:2A:5A:F8:2B:36:D0:55:D7:9D:F2:31:72:29:4F:B0:6F:A7"}}},"request":{"raw":"GET /63e3da3df35cd62f54751985/js/bill-com.7bde6a7d.6df124800cf39396.js HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:44 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\nx-amz-id-2: g4ra8pZezQhgch7loHs19mqOj+V43x1Adn4kybqKosGtivABEpOCsJEucA0iRNh6e5Z5c7JNxN8EDgJKlOAT6g==\r\nx-amz-request-id: TBQ6KZQEC9Y1GBGG\r\nlast-modified: Wed, 08 Oct 2025 19:35:38 GMT\r\netag: W/\"2f01ce412e93c12b946d19546acd90eb\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: VRUuWyUsPS6kSPwCDzDaluKbZOA5JgXC\r\nage: 57839\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 98bec723f8dc712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1886,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1886), with no line terminators","md5":"2f01ce412e93c12b946d19546acd90eb","sha1":"94fe9f6482b3ac8a8e04cebf8614c528076e15d8","sha256":"e465e79c03564f53f4dd1a0fb5873cea69ef8124c20d5ba8f46e092ac2bdba2e","sha512":"28f0e6976187a1e23918f078750c0ccda500e5f9f74f66b125f3a27e64804db68ec6799dc35402eb94c3040f1d4ff6eb71de98c9beb174444ed92d040ac2183f","ssdeep":"","tlshash":"6341ca183554f4ee276a54840a3f9086f2156832603ef8f1f322c9f56455ad54163fb2","first_seen":"2025-10-09T15:06:12.389023Z","last_seen":"2025-10-09T15:06:12.389023Z","times_seen":1,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":108,"dns":5,"connect":5,"send":0,"wait":14,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x.clearbitjs.com/v2/pk_3de6fd69451431022e5de23a6e215265/destinations.min.js","fqdn":"x.clearbitjs.com","domain":"clearbitjs.com","tld":"com"},"ip":{"addr":"3.127.196.46","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearbitjs.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 16 Jan 2025 00:00:00 GMT","end":"Sun, 15 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:8E:A1:FC:14:13:FC:74:7E:55:CF:FF:A7:E3:E5:F6:F4:7C:C0:E8","sha256":"11:E8:4F:D5:7B:22:28:47:87:40:58:26:BA:DF:FF:42:D6:B7:A6:D5:58:52:7D:1E:84:8B:B6:A2:0D:C8:5B:FB"}}},"request":{"raw":"GET /v2/pk_3de6fd69451431022e5de23a6e215265/destinations.min.js HTTP/1.1\r\nHost: x.clearbitjs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bill.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private, max-age=600\r\ncontent-type: application/javascript;charset=utf-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\nx-envoy-response-flags: -\r\nserver: Clearbit\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":670,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"bfd3505ca2ee8bc3e0de5dcba8dad67b","sha1":"6c484b3352f67b4987b306ce13419be96dfa4021","sha256":"718980255bc575b535d821ea6ba2f9a638f83c5149e3ace6544dcffdf1af30a0","sha512":"ee007a512c1f616b0d5a75055570baf8934cbe79edcdb82253e06874af0afa41d0f7e340ebe51e1292668589c190eff4132d7c4d741a4204f63546e348cf5af0","ssdeep":"","tlshash":"36019e7432a57c3a817bf1a13eaf73077931b0172045a9d1768d96505f9082701bd989","first_seen":"2025-08-21T11:13:22.639376Z","last_seen":"2025-12-27T08:34:26.186178Z","times_seen":52,"resource_available":true,"data":null}},"time_used":474,"timings":{"blocked":136,"dns":38,"connect":21,"send":0,"wait":196,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/25.f56ea0b0.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /app/js/25.f56ea0b0.min.js HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"c74566729c5d173bff547d5c6754e75a\"\r\nlast-modified: Fri, 26 Sep 2025 23:44:02 GMT\r\ncdn-storagebalancer: SE-583\r\nperma-cache: MISS\r\nx-amz-id-2: g6jOF+KYy7Fp0hOCa6a7wSdk7Dqwqnw8yxNWkjXSTqXAqVvWdqe4Gk3HmtqV+tLTxpN3gcZ9B4c=\r\nx-amz-request-id: 10X3NS2F0PQ8WG9G\r\nx-amz-server-side-encryption: AES256\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/30/2025 00:57:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c491644c5347cc92b54478cb738ffb12\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1249,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1197)","md5":"c74566729c5d173bff547d5c6754e75a","sha1":"1340410c1be1c0925e0e8759c0ab65709d1775f2","sha256":"cf4f569428167ef4258dce91e9f3b2eaee4d589fde8228b241a1e657dbec2cb9","sha512":"7b1e6edee087b0b736254969caf2c66aab13756ddd46ef3a7ae4f7f5eaa9c573d63ac291898d27e28d676bb712aa73663291af07dda1750af6ad8d5a896e35c6","ssdeep":"","tlshash":"9821b13c30816dac48acd8a617b7bf0170b4803d570547ac2d2e94687f9d9c78e0b5eb","first_seen":"2025-09-30T03:27:48.912281Z","last_seen":"2026-02-10T19:12:33.149599Z","times_seen":1973,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/20.72c5dfe3.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /app/js/20.72c5dfe3.min.js HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"68db2ab4-6a8\"\r\nlast-modified: Tue, 30 Sep 2025 00:56:20 GMT\r\ncdn-storageserver: SE-583\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 585\r\nperma-cache: HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/30/2025 00:57:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d09b65ed980b72946e50c787a56a4259\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1704,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1655)","md5":"325972102d014fe6208cd42b0e97ed42","sha1":"49c140179e6f756a2c9be10c2d3c8905abc9c324","sha256":"4cc9e39c894dc1d13c4f0db38cbfc8084f11e872b067eda77b947809ada95919","sha512":"e557de3e120337fbb319f2b6f87f315d6398d9a9976fc72b0d8b89893d26dfb6297887f0ded32de123e543592c5068bc3729bed856625960802b081bfa9b5a04","ssdeep":"","tlshash":"2c31401a12def978b153d02cc3e8aa05eaa85e542fc140cdb89cfdeb9430c95a5347f8","first_seen":"2025-09-12T18:58:57.65894Z","last_seen":"2026-02-10T19:12:33.235068Z","times_seen":2171,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"258-fem-750.mktoweb.com/index.php/form/getForm?munchkinId=258-FEM-750\u0026form=1557\u0026url=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026callback=jQuery371037242557370262297_1760022345570\u0026_=1760022345571","fqdn":"258-fem-750.mktoweb.com","domain":"mktoweb.com","tld":"com"},"ip":{"addr":"104.16.96.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:45.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"258-fem-750.mktoweb.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 15:51:40 GMT","end":"Sat, 22 Nov 2025 15:51:39 GMT"},"fingerprint":{"sha1":"D6:0D:2A:35:93:4C:E9:03:C9:FD:46:C2:ED:10:78:69:0C:33:10:95","sha256":"1F:AE:21:33:B4:4E:8A:64:73:CF:01:A2:9C:23:DD:E0:92:54:98:8F:FF:85:8C:85:39:7B:A1:D0:AB:1A:62:76"}}},"request":{"raw":"GET /index.php/form/getForm?munchkinId=258-FEM-750\u0026form=1557\u0026url=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026callback=jQuery371037242557370262297_1760022345570\u0026_=1760022345571 HTTP/1.1\r\nHost: 258-fem-750.mktoweb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nCookie: __cf_bm=Ey4IQwZYYTRvSGik3_vktD4kyojcwfBb9txLZyG7teA-1760022345-1.0.1.1-9OiZBoPTVq16IOGL3fs.kzwPACvbLbyxqA7hx3eIyAWwuNhw04rFKH9cXYobr7L.YonxoL8u0TVC_PIBg9JPUiFcbH.thTlPs5XGqayarBw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncached: true\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98bec72bed1f3181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2712,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2712), with no line terminators","md5":"7884f18b5dce10f228fb65a648e3d923","sha1":"de9ca5369868f3c1a2625282ed09394e9b643daf","sha256":"74132b8561fe9c55e5aa146e7ae4c57f108c15ca21ed50112e4f0fa6172cb258","sha512":"4c30734ca9a35b98c2681ed821e04e2178f8c0132250fd60c3f6c188aefb4d1de12064328a8629ae15aceaf68de5d06cddf770e764ab630ba315d78c9f16da64","ssdeep":"","tlshash":"5251b6b0c1591022b20ef8e5be77b6969fd548ba99415ebee4e7bef480c26c40435203","first_seen":"2025-10-09T15:06:12.39314Z","last_seen":"2025-10-09T15:06:12.39314Z","times_seen":1,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j.6sc.co/j/adbd7400-c99d-4a74-ae9b-5d9e50e0a46c.js","fqdn":"j.6sc.co","domain":"6sc.co","tld":"co"},"ip":{"addr":"2.22.225.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:46.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6sc.co","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:02:21 GMT","end":"Wed, 05 Nov 2025 09:02:20 GMT"},"fingerprint":{"sha1":"27:4B:B8:AE:07:40:BE:A6:37:5A:53:A4:94:03:EE:07:A8:96:58:80","sha256":"79:86:0D:15:68:5C:19:D9:33:E2:5A:25:FA:02:A2:2D:7D:F6:D8:13:3B:07:79:D4:9E:EE:56:52:94:1F:9A:EA"}}},"request":{"raw":"GET /j/adbd7400-c99d-4a74-ae9b-5d9e50e0a46c.js HTTP/1.1\r\nHost: j.6sc.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 4805\r\nlast-modified: Wed, 26 Mar 2025 18:19:41 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-content-type: application/json\r\nx-amz-version-id: wJjHxk7HcNAi9XR0bJHliwJL_6tAHLJp\r\naccept-ranges: bytes\r\netag: \"fe2ce87962408c97aaca7e154e7be035\"\r\nvary: accept-encoding\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: DSwKcxDe78XdGQ3_vu4rNi7TyQ4-rnLgKywvc6FV4N34ilz34xpPRw==\r\ncache-control: private, max-age=1800\r\nexpires: Thu, 09 Oct 2025 15:35:46 GMT\r\ndate: Thu, 09 Oct 2025 15:05:46 GMT\r\ncontent-type: application/javascript\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":4805,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (4805), with no line terminators","md5":"fe2ce87962408c97aaca7e154e7be035","sha1":"d55f23159e965db04f5a8c09bc4fb5cf89443df4","sha256":"2d07ea78e33a13d7fe70994b730ab0d4587e6ab025fda862a16e0b023e477066","sha512":"de675b0c8334e9a688bd58ee6c57853f4b1485c140329ced4308c5e14bf0014a857769c10e3ffeef7063cdd8a9e839e4a4d58c5fbc3fdc45639c5e34f9fb4a4e","ssdeep":"96:0bH16xguNSwHALLjOCcPZLWyZ0X7nLLAIg:mV6xJNJk3fdXzg","tlshash":"d5a1005e163c941d70b1a09d3f2f3afe35a07769e5c4e56829c27c242112f8bb278b94","first_seen":"2025-06-20T20:17:42.34725Z","last_seen":"2026-01-23T19:28:35.077676Z","times_seen":108,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":327,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixels.spotify.com/v1/ingest","fqdn":"pixels.spotify.com","domain":"spotify.com","tld":"com"},"ip":{"addr":"35.186.224.24","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:46.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotify.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Jan 2025 00:00:00 GMT","end":"Tue, 06 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3A:50:28:5C:64:6A:CC:5B:A8:2D:0A:7F:32:C7:74:3D:5D:98:46:C1","sha256":"A9:52:76:A7:E5:2D:4C:7D:77:21:C9:63:E6:0A:45:73:56:83:4A:95:56:B7:EE:3F:85:DA:4B:D6:02:8D:89:8D"}}},"request":{"raw":"OPTIONS /v1/ingest HTTP/1.1\r\nHost: pixels.spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.bill.com/\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://www.bill.com\r\naccess-control-allow-headers: content-type\r\nvary: Accept-Encoding\r\ndate: Thu, 09 Oct 2025 15:05:46 GMT\r\nserver: envoy\r\ncontent-length: 0\r\nvia: HTTP/2 edgeproxy, 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":128,"dns":18,"connect":12,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipv4.podscribe.com/","fqdn":"ipv4.podscribe.com","domain":"podscribe.com","tld":"com"},"ip":{"addr":"54.211.233.37","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipv4.podscribe.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 27 Feb 2025 00:00:00 GMT","end":"Sun, 29 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:01:FE:10:19:EC:CC:97:25:4B:16:3C:A4:B2:10:92:E1:D6:CB:36","sha256":"91:57:F8:7E:FB:7F:69:88:F5:83:00:20:5E:B4:75:94:08:95:63:04:49:8A:E6:36:B5:93:85:25:BC:1C:81:6C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ipv4.podscribe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bill.com/\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: awselb/2.0\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: application/json\r\ncontent-length: 22\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: OPTIONS, GET, POST\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":22,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"24ff18ba5858c07886d628757038fff4","sha1":"ed169dd31d89a0fdd49153725836d7c85692392d","sha256":"61d47704852fa0e7a3e8703dbf545eabae0a225e5100235282bca57eb9e27f53","sha512":"550dbb294a46b6cc62382a6c68e425fca2155c3c207a451abc066bad614c254809627b1b42d3e990336796e57f44f3de5247dc9e58d7635072e4149dbfec3298","ssdeep":"","tlshash":"c570002220000032888c802eca0a03222380080aca8a80028c800b0208a0b300202032","first_seen":"2023-04-06T16:44:22Z","last_seen":"2026-04-04T14:48:01.931627Z","times_seen":2107,"resource_available":true,"data":null}},"time_used":582,"timings":{"blocked":232,"dns":14,"connect":93,"send":0,"wait":117,"receive":0,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"258-fem-750.mktoweb.com/js/forms2/css/forms2-theme-simple.css","fqdn":"258-fem-750.mktoweb.com","domain":"mktoweb.com","tld":"com"},"ip":{"addr":"104.16.96.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:45.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"258-fem-750.mktoweb.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 15:51:40 GMT","end":"Sat, 22 Nov 2025 15:51:39 GMT"},"fingerprint":{"sha1":"D6:0D:2A:35:93:4C:E9:03:C9:FD:46:C2:ED:10:78:69:0C:33:10:95","sha256":"1F:AE:21:33:B4:4E:8A:64:73:CF:01:A2:9C:23:DD:E0:92:54:98:8F:FF:85:8C:85:39:7B:A1:D0:AB:1A:62:76"}}},"request":{"raw":"GET /js/forms2/css/forms2-theme-simple.css HTTP/1.1\r\nHost: 258-fem-750.mktoweb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nCookie: __cf_bm=Ey4IQwZYYTRvSGik3_vktD4kyojcwfBb9txLZyG7teA-1760022345-1.0.1.1-9OiZBoPTVq16IOGL3fs.kzwPACvbLbyxqA7hx3eIyAWwuNhw04rFKH9cXYobr7L.YonxoL8u0TVC_PIBg9JPUiFcbH.thTlPs5XGqayarBw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:45 GMT\r\ncontent-type: text/css\r\ncontent-length: 242\r\ncf-ray: 98bec72c5e173181-OSL\r\nlast-modified: Thu, 25 Sep 2025 21:24:42 GMT\r\netag: \"1b81753-33a-63fa6cc1f7a80\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nage: 5371\r\nexpires: Thu, 09 Oct 2025 19:05:45 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":826,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2b284fdd03dfa5cc9998dec2320c6626","sha1":"7066b6cfc1db11ca2a58bcd1d91a77ea4aedda98","sha256":"14c8c62dc692fd8faa04434e3fed25e7c23d596b732f9db88f6e9f9ff5dfa61c","sha512":"ba8a97e95a40b984df9f57abebbafc6b9706fc156a603e6d94005bb2f09d3e7ba513e2194c0ef0ae767a56752ebb4e431cadb37a7b31a4f8ae63fe82731ce4b8","ssdeep":"","tlshash":"b8019208c559d54308a30779ff951897e31f223d452f6386593b00bd8b2535eaa3bbdd","first_seen":"2023-04-05T14:04:35Z","last_seen":"2026-04-04T02:51:18.749155Z","times_seen":3228,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser-intake-datadoghq.com/api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A5.28.0%2Capi%3Axhr%2Cenv%3Aprod%2Cservice%3Abill-marketing-site\u0026dd-api-key=pub44ba4f0880bc7722e3f2653d3d00ee1c\u0026dd-evp-origin-version=5.28.0\u0026dd-evp-origin=browser\u0026dd-request-id=a8cf09dc-e189-4327-b061-8416b2cd9002\u0026batch_time=1760022352031","fqdn":"browser-intake-datadoghq.com","domain":"browser-intake-datadoghq.com","tld":"com"},"ip":{"addr":"3.233.158.25","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:52.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.browser-intake-datadoghq.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 13 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:3C:F6:6E:27:57:0E:5A:16:C1:A7:43:09:EC:A4:BD:94:B4:7F:F7","sha256":"3F:54:11:62:56:D3:18:55:98:79:B6:94:47:3A:A5:4B:9C:EE:6A:05:3B:C7:90:C1:A5:BE:52:2C:89:0B:A7:9F"}}},"request":{"raw":"POST /api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A5.28.0%2Capi%3Axhr%2Cenv%3Aprod%2Cservice%3Abill-marketing-site\u0026dd-api-key=pub44ba4f0880bc7722e3f2653d3d00ee1c\u0026dd-evp-origin-version=5.28.0\u0026dd-evp-origin=browser\u0026dd-request-id=a8cf09dc-e189-4327-b061-8416b2cd9002\u0026batch_time=1760022352031 HTTP/1.1\r\nHost: browser-intake-datadoghq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 15317\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 202 Accepted\r\ncontent-type: application/json\r\ncontent-length: 53\r\ndd-request-id: a8cf09dc-e189-4327-b061-8416b2cd9002\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\naccept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Thu, 09 Oct 2025 15:05:52 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f6523560af86cfd6c7df1be6332806e9","sha1":"4e901590f26fc61d0b9b020d379af77d376a4df2","sha256":"988b3a9653284b0fde6499bdfc0d710a12ac2bd6777dc8109689160e9b3ebb8e","sha512":"b04e0c35200404689a54e91323ff5c7615f2cbd34396a7e9425250ad86f8092090935369475a970b784fdb20496f1f090f0e6242271d7c4bcc73f2bfb0631810","ssdeep":"","tlshash":"56900245b53a0085b58552c65964ba11508959459130555b8518494c940751893028f2","first_seen":"2025-10-09T15:06:12.396565Z","last_seen":"2025-10-09T15:06:12.396565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/27.8fd4488d.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /app/js/27.8fd4488d.min.js HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"68db2ab5-b31\"\r\nlast-modified: Tue, 30 Sep 2025 00:56:21 GMT\r\ncdn-storageserver: SE-904\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 585\r\nperma-cache: HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/30/2025 00:57:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 33659dbf0bbeb2978f655d32d31ab6f2\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2865,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2821)","md5":"e9657526c2686812d3be6423bb81f7ef","sha1":"11cc965a04df09b828b7907f0bc5a3885d108103","sha256":"800d569227aae400cd9985ec2246192f279fb00f051eb870752cb2eaa7ff84c4","sha512":"e4c7d8ca31642ac09539b8930e756d26a93bfb49cc116f1d0d59adb945ca7b7bad94dda1b6133f5f4a59984e974b01bead2fc8a387004f0ebfcb8f420f513b18","ssdeep":"","tlshash":"6551eabba0d29c39aff941a9746d4311413921271e829c8c365ceec3d514e4f229bfbc","first_seen":"2025-09-30T03:27:48.999452Z","last_seen":"2026-02-10T19:12:33.148642Z","times_seen":1973,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/logos/6a449584-b4db-4667-851b-55c74c89c455/de8618f3-7249-425d-8349-7641e58430ba/14107eba-da8b-4bd6-892c-8ad696c2c555/bdc-logo.png","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:45.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /logos/6a449584-b4db-4667-851b-55c74c89c455/de8618f3-7249-425d-8349-7641e58430ba/14107eba-da8b-4bd6-892c-8ad696c2c555/bdc-logo.png HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 2393\r\ncf-ray: 98bec72e1e2e56aa-OSL\r\ncontent-md5: fdQwLO9dkca1JqPjAQM+4g==\r\nlast-modified: Wed, 19 Oct 2022 16:44:33 GMT\r\netag: 0x8DAB1F13345E25F\r\nx-ms-request-id: 5f9bdc29-e01e-0067-1bd1-9bf2ce000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nage: 66169\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2393,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 122 x 82, 8-bit/color RGBA, non-interlaced","md5":"7dd4302cef5d91c6b526a3e301033ee2","sha1":"e5e07f797c38581c7095292eb18d1f59ae4a7d2a","sha256":"4d311136caf0992a2b3c76687d72c57f529a033330dd7ca1069164bafa6d6920","sha512":"9c5bb925f9f283d15baa680dc800c3c633a2f5a31ad67415c763d732a4566ff1c243e66013b136bb4331462af7a91e3d2663c389379660d8038fbdf20d992a91","ssdeep":"","tlshash":"6c410ab2de44e257ca890a733693108ef6369c42a244c445b3dc54730f1af41ae5a74c","first_seen":"2023-05-05T00:33:16Z","last_seen":"2026-04-03T19:43:47.41127Z","times_seen":226,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/logos/static/powered_by_logo.svg","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:45.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /logos/static/powered_by_logo.svg HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:45 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-md5: Y+c301RBZNK39PvKQWrIBw==\r\nlast-modified: Tue, 07 Oct 2025 02:46:47 GMT\r\nx-ms-request-id: 745fd62d-901e-0002-1046-379170000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nage: 53345\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\ncf-ray: 98bec72e1e3156aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5194,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63e737d3544164d2b7f4fbca416ac807","sha1":"030370aa38715e4c41589633f69d0bfe8255d46c","sha256":"5fa00d047acd959697b9d7772c31dcd37bec33c70c6fbf80ab8316205d1d286d","sha512":"31ee1bb536c0e50f5568a415ea3308367bfcfd11d2a6f7dff1c8e3a982f7be790c240a603cd4c6e187672824b8e5d07646049a28c6a88a7b001eb9a0142f312b","ssdeep":"96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV","tlshash":"93b1a9f5aa45d29c391e8984ce37a964551fb4eb7bfe83d06192d332e40ede0f900c18","first_seen":"2023-05-04T19:47:29Z","last_seen":"2026-04-04T15:26:47.287836Z","times_seen":117101,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bill.com/static/js/common.js","fqdn":"www.bill.com","domain":"bill.com","tld":"com"},"ip":{"addr":"3.167.2.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:44.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bill.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 06 May 2025 00:00:00 GMT","end":"Fri, 05 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:35:CB:CA:BD:8B:FD:14:FC:34:90:F2:98:D2:D9:89:C8:EC:B9:9C","sha256":"C2:98:CA:FF:52:BB:22:E6:44:D1:4F:11:4D:D0:29:52:AB:E7:EF:02:AE:FC:55:0A:6A:C3:C8:F9:8E:B6:02:73"}}},"request":{"raw":"GET /static/js/common.js HTTP/1.1\r\nHost: www.bill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/legal/spend-expense-terms-of-service\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 02 Oct 2025 16:55:13 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ndate: Thu, 09 Oct 2025 15:05:44 GMT\r\ncache-control: max-age=120\r\netag: W/\"325b7045af005ba690e81b5132288c4b\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 485b6c89886d646bf4c92b32182787ea.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: jMxq3JDz4Fff42AOrye09iEPlrstKWiRX0hkYP8Ebz8LyOPFAheAng==\r\nage: 69\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":391636,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38494)","md5":"325b7045af005ba690e81b5132288c4b","sha1":"7adcc46d3f54751dc821b22ca5fc7de091d4e1f1","sha256":"bd24627eb0324b5f6fd99e5d16401bf2688f98774afc8510e6037fdefbedc167","sha512":"d0ae83349125522fc1d375597f27d5de042d625b5d9e76b714cfc7d9c9473c5abe956eda883a710af2dd3a5329fbf225a655197ad9e2004804b31af21812f6ca","ssdeep":"6144:Pbc35Y+Cacg+QOIqO3j/T54yjEH2zhr8jf+V5gJS:Pm5Y+CacgROIHZj9r8a1","tlshash":"0b84e7ccb6d6b06143a3a4b5803f160bf33a7859684d8524f266d5da3cb894e8273f7d","first_seen":"2025-10-02T17:20:22.58743Z","last_seen":"2025-10-22T15:16:50.071958Z","times_seen":15,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/63e3da3df35cd62f54751985/6514a00b01212c142f428f37_soehne-kraftig.woff2","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:44.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 17:30:56 GMT","end":"Mon, 10 Nov 2025 18:30:53 GMT"},"fingerprint":{"sha1":"4E:8C:AA:A3:52:1E:AC:1D:1D:23:4D:AC:0D:48:D5:BB:F9:04:B2:8F","sha256":"9F:CB:1D:9B:6C:0D:B9:B3:80:11:A4:E0:06:8D:F6:2A:5A:F8:2B:36:D0:55:D7:9D:F2:31:72:29:4F:B0:6F:A7"}}},"request":{"raw":"GET /63e3da3df35cd62f54751985/6514a00b01212c142f428f37_soehne-kraftig.woff2 HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.prod.website-files.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:44 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 35746\r\ncf-ray: 98bec726cdf475ab-OSL\r\nx-amz-id-2: ejDzaipE++udDDXypFM+jVxCvCH1j0q5uXhzva+jGKWdCqYs00LA+pKUkLdLq93HWxfrMrFuVso=\r\nx-amz-request-id: 8BMYCVRRCDH40CS2\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Wed, 01 Nov 2023 23:38:46 GMT\r\netag: \"2631203386a402c742d02b57e9dffa77\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: CIUUE8ESHrdBv2LBgABi8pkspkdGVeHc\r\ncf-cache-status: HIT\r\nage: 8501752\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35746,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 35746, version 1.7143","md5":"2631203386a402c742d02b57e9dffa77","sha1":"cd840725b9845b44747a981976864e32df6440f8","sha256":"976e42af41e53c8b3dc526ff2e2156bce74b08e5bceaf6eecfb5b9b4c33cc76f","sha512":"6b8ed1db545e46e36a2e013aaa980250a35dd3673b15497e3f91b5d0d67059a11b02b59859b9c0816f92e75f13ae8cdabf45553f29173ee0e99f6f55f76dc8f5","ssdeep":"768:OnZzgZ/GTzWAWF1SJeha86ix3X5jxqbXCwnmaTNUK:cN0GnaHIegI5jxqbXCwnms","tlshash":"21f2f1dec2f3980684f742d18bbad151070f2e3a9bd64ca8babe044964e25dc58717cb","first_seen":"2023-05-05T00:33:16Z","last_seen":"2026-04-03T19:43:47.523871Z","times_seen":169,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/63e3da3df35cd62f54751985/63efaab0e1f2b2b227e1725b_bill-logo-favicon-color%201.png","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:45.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 17:30:56 GMT","end":"Mon, 10 Nov 2025 18:30:53 GMT"},"fingerprint":{"sha1":"4E:8C:AA:A3:52:1E:AC:1D:1D:23:4D:AC:0D:48:D5:BB:F9:04:B2:8F","sha256":"9F:CB:1D:9B:6C:0D:B9:B3:80:11:A4:E0:06:8D:F6:2A:5A:F8:2B:36:D0:55:D7:9D:F2:31:72:29:4F:B0:6F:A7"}}},"request":{"raw":"GET /63e3da3df35cd62f54751985/63efaab0e1f2b2b227e1725b_bill-logo-favicon-color%201.png HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 351\r\ncf-ray: 98bec729dd73723c-OSL\r\nx-amz-id-2: af0pjs9VFRpL1Wn1eMXkjkSrIsPLwJD9BNEjJ9T6MV5wMYKayj9K6IGfVL3VaVv7G7EN4UOlPtM=\r\nx-amz-request-id: 1NHC5H9PP35KYJ7J\r\nlast-modified: Fri, 17 Feb 2023 16:26:25 GMT\r\netag: \"373ecf41a42a914d8cfa309917963c81\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: 1X2zPOOXldbIqDkwMwKPHbSj8r0EQyxx\r\naccept-ranges: bytes\r\nage: 1859369\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":351,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"373ecf41a42a914d8cfa309917963c81","sha1":"73e38b26a1f0d7a8c563a0b10e04f6be2b2b82d2","sha256":"7574c1d2b436d9e5d25c527945af4389a8d84f00212f4666967e593a6a161d1b","sha512":"10eda89c18863e0c87adc433d22ebb33735cbb2b15f0435d94b23b42e348eaacf509d7d0986c38e73393f138021cc9a6d4fc430b5178014b40983594dcd2d43b","ssdeep":"","tlshash":"c4e0c0cb96194cb971b80c39d74501f07cff344718714548e9112c76823d4cc27437b0","first_seen":"2023-09-07T04:20:36Z","last_seen":"2026-04-03T19:43:47.586997Z","times_seen":193,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202506.1.0/assets/v2/otPcTab.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:45.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /scripttemplates/202506.1.0/assets/v2/otPcTab.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bill.com/\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:45 GMT\r\ncontent-type: application/json\r\ncontent-length: 13748\r\ncf-ray: 98bec72d8db556aa-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: 5d88muz1FEOfQ9E+hL6O/w==\r\nlast-modified: Mon, 21 Jul 2025 06:33:31 GMT\r\netag: 0x8DDC82082B63A78\r\nx-ms-request-id: a4d3820c-401e-000b-2ffb-1c8bfe000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nvary: accept-encoding\r\nage: 85861\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67236,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"22c77d7a7186a42ab3e5bb34901d6d37","sha1":"e0196bd5a3b1968bc3b755f8298d79709c1a7429","sha256":"77c9b6e942b79e643017e824688bbdf01fff51283d650987ad8f7a0c68a4326e","sha512":"0a7318c4afd0101c6a18701b8a7f52ba7ad94aa8eda433720349cd174ca4b00b625ba21ea9b2f1b929497a2f293fa46b0dffb42b6762033abbe9be421e0b9d73","ssdeep":"768:7ox3MaO7HuEmhGhshpZAc2q3CsdLPO2m5xqi:W+H/62y3jdi2mHZ","tlshash":"9c63da9b7ea1130afee38b19eb926de97124c81fbc335dedf1024678868d3e18d51509","first_seen":"2025-07-06T08:06:36.901643Z","last_seen":"2026-04-04T14:52:21.519957Z","times_seen":2223,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/consent/e00a365a-4519-4e49-bc2a-ed5bba62ed06/0197b32f-97b9-74eb-bf70-66f0e21e417a/en.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:45.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /consent/e00a365a-4519-4e49-bc2a-ed5bba62ed06/0197b32f-97b9-74eb-bf70-66f0e21e417a/en.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bill.com/\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:45 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncf-ray: 98bec72d1d2656aa-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 85861\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\netag: 0x8DDBDB23B7632CB\r\nexpires: Fri, 10 Oct 2025 15:05:45 GMT\r\nlast-modified: Mon, 07 Jul 2025 23:58:55 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding, X-OneTrust-IsBot\r\ncontent-md5: XL/cYy7U0RF3CIAyV9pSlQ==\r\ncross-origin-resource-policy: cross-origin, cross-origin\r\nx-content-type-options: nosniff\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: 672db0a9-301e-0087-1dc2-f2c6a5000000\r\nx-ms-version: 2009-09-19\r\nx-onetrust-isbot: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122749,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"feccb80b6f2a62caf9ba38695f0e90e9","sha1":"40753973fcc9dfae933b38efe3f880b1f375c4ca","sha256":"6cb21c26d1fd8090620e5a9353f0a3acb8e28b478df273230fd837a0619521b0","sha512":"f30ac34d0c91a1b75a77c3fffc8ec5e25829b72780baff14c96ba12bab73b047bc01874646674301f544f7f3f4df9e449427c6e770a83a05293b49ba0608b9bc","ssdeep":"1536:AG0dCVtlb1r+SknkFknkPknkQcGiuSlYRjzK+S7B:F0dCZdknkFknkPknkQsYhmR7B","tlshash":"a4c3d9068b6858f94b0f038118a5bf8ee33c0696eb64de5dec4c4e3981937f5597728b","first_seen":"2025-07-08T15:24:26.498745Z","last_seen":"2026-01-23T19:28:35.025101Z","times_seen":125,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tag.clearbitscripts.com/v1/pk_3de6fd69451431022e5de23a6e215265/tags.js","fqdn":"tag.clearbitscripts.com","domain":"clearbitscripts.com","tld":"com"},"ip":{"addr":"54.240.174.102","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:46.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clearbitscripts.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 10 Apr 2025 00:00:00 GMT","end":"Sat, 09 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B8:82:E0:B3:47:D3:64:8B:DA:4E:E9:22:6C:F5:07:67:19:A7:2F:67","sha256":"83:76:95:01:FE:E2:E1:32:1E:44:18:98:BA:F3:55:65:65:36:5B:19:9E:6A:AE:63:93:3E:C3:48:23:7D:84:2E"}}},"request":{"raw":"GET /v1/pk_3de6fd69451431022e5de23a6e215265/tags.js HTTP/1.1\r\nHost: tag.clearbitscripts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript;charset=utf-8\r\ncache-control: private, max-age=600\r\netag: W/\"02322613981a56c6668a2ea9d9edf11a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Thu, 09 Oct 2025 15:05:46 GMT\r\nx-envoy-response-flags: -\r\nserver: Clearbit\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 3JyZ-K4eVFJz7rPXza-I-kpEJ-GSgLKRmJsgBwPC6PLJ5E1kvk6Zpg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2712,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"e7295421fd9b3f045b7bb3cc474b66bd","sha1":"f1417ce7ff58f7e30784cd53e50dead74c88d947","sha256":"14f4fa10fd1dc26fd798f50d3117094754cdae5215009a061f790e576fa1e671","sha512":"6089df0d5d9502db00b6844807e6681900dbafb0ff9c5e8b2280700514778d1a97d133dacb6a199efb2e12262f101cef21effaa119f254889abf4fda32ae19d9","ssdeep":"","tlshash":"7f51cb3b7cfa183839734469322ec209769c506b190fd890fe6dd2b85f99e1d4875bac","first_seen":"2025-03-02T05:53:10.738001Z","last_seen":"2025-11-13T00:31:59.722471Z","times_seen":67,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":48,"dns":36,"connect":1,"send":0,"wait":332,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.6sc.co/v1/beacon/img.gif?token=e9735ec6609f6c485a6878c46aaf6f14\u0026svisitor=null\u0026visitor=a29605cd-1300-47ca-826b-86c62e8be6d6\u0026session=2f6fcf52-fb5b-4aae-8fee-54e00d83df83\u0026event=ni%3AasyncSettingsAudit\u0026q=%7B%22settings%22%3A%22%5B%7B%5C%22name%5C%22%3A%5C%22setToken%5C%22%2C%5C%22value%5C%22%3A%5C%22e9735ec6609f6c485a6878c46aaf6f14%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22disableCookies%5C%22%2C%5C%22value%5C%22%3A%5C%22false%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setEpsilonKey%5C%22%2C%5C%22value%5C%22%3A%5C%22911df01f026672e1f01d68122f5a1bdfcc2dc47c%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableIPv6Ping%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableIgnorePageUrlHash%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableRetargeting%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setWhiteListFields%5C%22%2C%5C%22value%5C%22%3A%5C%22%5B%5D%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setCustomMetatags%5C%22%2C%5C%22value%5C%22%3A%5C%22%5B%5D%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22storeTagId%5C%22%2C%5C%22value%5C%22%3A%5C%22adbd7400-c99d-4a74-ae9b-5d9e50e0a46c%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableEventTracking%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setCompanyDetailsExpiration%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableMapCookieCapture%5C%22%2C%5C%22value%5C%22%3A%5C%22false%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableTimeTracking%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableCompanyDetails%5C%22%2C%5C%22value%5C%22%3A%5C%22%5Btrue%2Cnull%2C3%5D%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%5D%22%7D\u0026isIframe=false\u0026m=%7B%22description%22%3A%22Please%20read%20the%20following%20to%20learn%20the%20rules%20and%20restrictions%20that%20govern%20your%20use%20of%20our%20website(s)%20and%20mobile%20application(s)%20(%E2%80%9Cour%20Services%E2%80%9D).%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22BILL%20Spend%20%26amp%3B%20Expense%20Terms%20of%20Service%20%7C%20BILL%22%7D\u0026cb=\u0026r=\u0026thirdParty=%7B%7D\u0026v2=1\u0026pageURL=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026pageViewId=94f1c5eb-0cf3-4193-8406-3f8bb343e9bc\u0026an_uid=-1\u0026webTagId=adbd7400-c99d-4a74-ae9b-5d9e50e0a46c\u0026v=1.1.31","fqdn":"b.6sc.co","domain":"6sc.co","tld":"co"},"ip":{"addr":"2.22.225.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6sc.co","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:02:21 GMT","end":"Wed, 05 Nov 2025 09:02:20 GMT"},"fingerprint":{"sha1":"27:4B:B8:AE:07:40:BE:A6:37:5A:53:A4:94:03:EE:07:A8:96:58:80","sha256":"79:86:0D:15:68:5C:19:D9:33:E2:5A:25:FA:02:A2:2D:7D:F6:D8:13:3B:07:79:D4:9E:EE:56:52:94:1F:9A:EA"}}},"request":{"raw":"GET /v1/beacon/img.gif?token=e9735ec6609f6c485a6878c46aaf6f14\u0026svisitor=null\u0026visitor=a29605cd-1300-47ca-826b-86c62e8be6d6\u0026session=2f6fcf52-fb5b-4aae-8fee-54e00d83df83\u0026event=ni%3AasyncSettingsAudit\u0026q=%7B%22settings%22%3A%22%5B%7B%5C%22name%5C%22%3A%5C%22setToken%5C%22%2C%5C%22value%5C%22%3A%5C%22e9735ec6609f6c485a6878c46aaf6f14%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22disableCookies%5C%22%2C%5C%22value%5C%22%3A%5C%22false%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setEpsilonKey%5C%22%2C%5C%22value%5C%22%3A%5C%22911df01f026672e1f01d68122f5a1bdfcc2dc47c%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableIPv6Ping%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableIgnorePageUrlHash%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableRetargeting%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setWhiteListFields%5C%22%2C%5C%22value%5C%22%3A%5C%22%5B%5D%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setCustomMetatags%5C%22%2C%5C%22value%5C%22%3A%5C%22%5B%5D%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22storeTagId%5C%22%2C%5C%22value%5C%22%3A%5C%22adbd7400-c99d-4a74-ae9b-5d9e50e0a46c%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableEventTracking%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setCompanyDetailsExpiration%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableMapCookieCapture%5C%22%2C%5C%22value%5C%22%3A%5C%22false%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableTimeTracking%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableCompanyDetails%5C%22%2C%5C%22value%5C%22%3A%5C%22%5Btrue%2Cnull%2C3%5D%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Thu%2C%2009%20Oct%202025%2015%3A05%3A46%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%5D%22%7D\u0026isIframe=false\u0026m=%7B%22description%22%3A%22Please%20read%20the%20following%20to%20learn%20the%20rules%20and%20restrictions%20that%20govern%20your%20use%20of%20our%20website(s)%20and%20mobile%20application(s)%20(%E2%80%9Cour%20Services%E2%80%9D).%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22BILL%20Spend%20%26amp%3B%20Expense%20Terms%20of%20Service%20%7C%20BILL%22%7D\u0026cb=\u0026r=\u0026thirdParty=%7B%7D\u0026v2=1\u0026pageURL=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026pageViewId=94f1c5eb-0cf3-4193-8406-3f8bb343e9bc\u0026an_uid=-1\u0026webTagId=adbd7400-c99d-4a74-ae9b-5d9e50e0a46c\u0026v=1.1.31 HTTP/1.1\r\nHost: b.6sc.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nexpires: Thu, 09 Oct 2025 15:05:47 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"f837aa60b6fe83458f790db60d529fc9","sha1":"14af87ccec7f81bb28d53c84da2fd5a9d5925cda","sha256":"dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b","sha512":"a85e09c3b5dbb560f4e03ba880047dbc8b4999a64c1f54fbfbca17ee0bcbed3bc6708d699190b56668e464a59358d6b534c3963a1329ba01db21075ef5bedace","ssdeep":"","tlshash":"30900403c540c003d155f0310d14c7401354f130417c030f70fd575ddc751514c11000","first_seen":"2023-04-05T09:52:32Z","last_seen":"2026-04-04T14:22:01.287851Z","times_seen":32230,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.6sc.co/v1/beacon/img.gif?token=e9735ec6609f6c485a6878c46aaf6f14\u0026svisitor=null\u0026visitor=a29605cd-1300-47ca-826b-86c62e8be6d6\u0026session=2f6fcf52-fb5b-4aae-8fee-54e00d83df83\u0026event=active_time_track\u0026q=%7B%22currentTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A50%20GMT%22%2C%22lastTrackTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A49%20GMT%22%2C%22timeSpent%22%3A%221002%22%2C%22totalTimeSpent%22%3A%224008%22%7D\u0026isIframe=false\u0026m=%7B%22description%22%3A%22Please%20read%20the%20following%20to%20learn%20the%20rules%20and%20restrictions%20that%20govern%20your%20use%20of%20our%20website(s)%20and%20mobile%20application(s)%20(%E2%80%9Cour%20Services%E2%80%9D).%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22BILL%20Spend%20%26amp%3B%20Expense%20Terms%20of%20Service%20%7C%20BILL%22%7D\u0026cb=\u0026r=\u0026thirdParty=%7B%7D\u0026v2=1\u0026pageURL=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026pageViewId=94f1c5eb-0cf3-4193-8406-3f8bb343e9bc\u0026an_uid=-1\u0026webTagId=adbd7400-c99d-4a74-ae9b-5d9e50e0a46c\u0026v=1.1.31","fqdn":"b.6sc.co","domain":"6sc.co","tld":"co"},"ip":{"addr":"2.22.225.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:50.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6sc.co","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:02:21 GMT","end":"Wed, 05 Nov 2025 09:02:20 GMT"},"fingerprint":{"sha1":"27:4B:B8:AE:07:40:BE:A6:37:5A:53:A4:94:03:EE:07:A8:96:58:80","sha256":"79:86:0D:15:68:5C:19:D9:33:E2:5A:25:FA:02:A2:2D:7D:F6:D8:13:3B:07:79:D4:9E:EE:56:52:94:1F:9A:EA"}}},"request":{"raw":"GET /v1/beacon/img.gif?token=e9735ec6609f6c485a6878c46aaf6f14\u0026svisitor=null\u0026visitor=a29605cd-1300-47ca-826b-86c62e8be6d6\u0026session=2f6fcf52-fb5b-4aae-8fee-54e00d83df83\u0026event=active_time_track\u0026q=%7B%22currentTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A50%20GMT%22%2C%22lastTrackTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A49%20GMT%22%2C%22timeSpent%22%3A%221002%22%2C%22totalTimeSpent%22%3A%224008%22%7D\u0026isIframe=false\u0026m=%7B%22description%22%3A%22Please%20read%20the%20following%20to%20learn%20the%20rules%20and%20restrictions%20that%20govern%20your%20use%20of%20our%20website(s)%20and%20mobile%20application(s)%20(%E2%80%9Cour%20Services%E2%80%9D).%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22BILL%20Spend%20%26amp%3B%20Expense%20Terms%20of%20Service%20%7C%20BILL%22%7D\u0026cb=\u0026r=\u0026thirdParty=%7B%7D\u0026v2=1\u0026pageURL=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026pageViewId=94f1c5eb-0cf3-4193-8406-3f8bb343e9bc\u0026an_uid=-1\u0026webTagId=adbd7400-c99d-4a74-ae9b-5d9e50e0a46c\u0026v=1.1.31 HTTP/1.1\r\nHost: b.6sc.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nexpires: Thu, 09 Oct 2025 15:05:51 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Thu, 09 Oct 2025 15:05:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"f837aa60b6fe83458f790db60d529fc9","sha1":"14af87ccec7f81bb28d53c84da2fd5a9d5925cda","sha256":"dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b","sha512":"a85e09c3b5dbb560f4e03ba880047dbc8b4999a64c1f54fbfbca17ee0bcbed3bc6708d699190b56668e464a59358d6b534c3963a1329ba01db21075ef5bedace","ssdeep":"","tlshash":"30900403c540c003d155f0310d14c7401354f130417c030f70fd575ddc751514c11000","first_seen":"2023-04-05T09:52:32Z","last_seen":"2026-04-04T14:22:01.287851Z","times_seen":32230,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser-intake-datadoghq.com/api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A5.28.0%2Capi%3Axhr%2Cenv%3Aprod%2Cservice%3Abill-marketing-site\u0026dd-api-key=pub44ba4f0880bc7722e3f2653d3d00ee1c\u0026dd-evp-origin-version=5.28.0\u0026dd-evp-origin=browser\u0026dd-request-id=68a7f539-885b-4652-8fde-4e6d6648c785\u0026batch_time=1760022347400","fqdn":"browser-intake-datadoghq.com","domain":"browser-intake-datadoghq.com","tld":"com"},"ip":{"addr":"3.233.158.25","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.browser-intake-datadoghq.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 13 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:3C:F6:6E:27:57:0E:5A:16:C1:A7:43:09:EC:A4:BD:94:B4:7F:F7","sha256":"3F:54:11:62:56:D3:18:55:98:79:B6:94:47:3A:A5:4B:9C:EE:6A:05:3B:C7:90:C1:A5:BE:52:2C:89:0B:A7:9F"}}},"request":{"raw":"POST /api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A5.28.0%2Capi%3Axhr%2Cenv%3Aprod%2Cservice%3Abill-marketing-site\u0026dd-api-key=pub44ba4f0880bc7722e3f2653d3d00ee1c\u0026dd-evp-origin-version=5.28.0\u0026dd-evp-origin=browser\u0026dd-request-id=68a7f539-885b-4652-8fde-4e6d6648c785\u0026batch_time=1760022347400 HTTP/1.1\r\nHost: browser-intake-datadoghq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 16248\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 202 Accepted\r\ncontent-type: application/json\r\ncontent-length: 53\r\ndd-request-id: 68a7f539-885b-4652-8fde-4e6d6648c785\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\naccept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f1f3d919bd3bd8d1cd7ad3b05408d61e","sha1":"48c3ef48f3c1ed980ecab31ca2bf84a070b520fe","sha256":"71437f1aee4d02c19e6f94e32712350ba338cdc238b2f85d261e7bde97ae6134","sha512":"a67a6d57b2e23a0d6367e0ff125d4d346d45e2f69244f0d9f7dc650f873061cb26b883cf6d72283c8bf3380484b64bf1d86fbe88d7a6c6b3d6b03a863e6c8eb8","ssdeep":"","tlshash":"7990029a496a9196c05a38059d661614470451529844601d659382d816a4619d706416","first_seen":"2025-10-09T15:06:12.404228Z","last_seen":"2025-10-09T15:06:12.404228Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser-intake-datadoghq.com/api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A5.28.0%2Capi%3Axhr%2Cenv%3Aprod%2Cservice%3Abill-marketing-site\u0026dd-api-key=pub44ba4f0880bc7722e3f2653d3d00ee1c\u0026dd-evp-origin-version=5.28.0\u0026dd-evp-origin=browser\u0026dd-request-id=68583a7a-7f50-4b61-ac75-5cfdc0407b5b\u0026batch_time=1760022347624","fqdn":"browser-intake-datadoghq.com","domain":"browser-intake-datadoghq.com","tld":"com"},"ip":{"addr":"3.233.158.25","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.browser-intake-datadoghq.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 13 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:3C:F6:6E:27:57:0E:5A:16:C1:A7:43:09:EC:A4:BD:94:B4:7F:F7","sha256":"3F:54:11:62:56:D3:18:55:98:79:B6:94:47:3A:A5:4B:9C:EE:6A:05:3B:C7:90:C1:A5:BE:52:2C:89:0B:A7:9F"}}},"request":{"raw":"POST /api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A5.28.0%2Capi%3Axhr%2Cenv%3Aprod%2Cservice%3Abill-marketing-site\u0026dd-api-key=pub44ba4f0880bc7722e3f2653d3d00ee1c\u0026dd-evp-origin-version=5.28.0\u0026dd-evp-origin=browser\u0026dd-request-id=68583a7a-7f50-4b61-ac75-5cfdc0407b5b\u0026batch_time=1760022347624 HTTP/1.1\r\nHost: browser-intake-datadoghq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 15668\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 202 Accepted\r\ncontent-type: application/json\r\ncontent-length: 53\r\ndd-request-id: 68583a7a-7f50-4b61-ac75-5cfdc0407b5b\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\naccept-encoding: identity,gzip,x-gzip,deflate,x-deflate,zstd\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b7a63358cce14ec34d8e608a97e225f7","sha1":"a9769bff455a372785aff7819657cee72bcd340e","sha256":"905607ccd5e4ede7964f7485dd13330142876b281c5138243c9cdf39225e0419","sha512":"fa539308ae076fff15354ed6e07742bb9e89fb6ed9b9a5d5bed9a2c48cee81fc7ae0ea66745ad6a59bb50a547c6c5f4bacbee02e6287027848720b11389cac99","ssdeep":"","tlshash":"479002d1f17022e2868224615c600910404861796188615b58629b5518658964a40115","first_seen":"2025-10-09T15:06:12.41199Z","last_seen":"2025-10-09T15:06:12.41199Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.6sc.co/v1/beacon/img.gif?token=e9735ec6609f6c485a6878c46aaf6f14\u0026svisitor=null\u0026visitor=a29605cd-1300-47ca-826b-86c62e8be6d6\u0026session=2f6fcf52-fb5b-4aae-8fee-54e00d83df83\u0026event=active_time_track\u0026q=%7B%22currentTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A52%20GMT%22%2C%22lastTrackTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A51%20GMT%22%2C%22timeSpent%22%3A%221002%22%2C%22totalTimeSpent%22%3A%226011%22%7D\u0026isIframe=false\u0026m=%7B%22description%22%3A%22Please%20read%20the%20following%20to%20learn%20the%20rules%20and%20restrictions%20that%20govern%20your%20use%20of%20our%20website(s)%20and%20mobile%20application(s)%20(%E2%80%9Cour%20Services%E2%80%9D).%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22BILL%20Spend%20%26amp%3B%20Expense%20Terms%20of%20Service%20%7C%20BILL%22%7D\u0026cb=\u0026r=\u0026thirdParty=%7B%7D\u0026v2=1\u0026pageURL=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026pageViewId=94f1c5eb-0cf3-4193-8406-3f8bb343e9bc\u0026an_uid=-1\u0026webTagId=adbd7400-c99d-4a74-ae9b-5d9e50e0a46c\u0026v=1.1.31","fqdn":"b.6sc.co","domain":"6sc.co","tld":"co"},"ip":{"addr":"2.22.225.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:52.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6sc.co","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:02:21 GMT","end":"Wed, 05 Nov 2025 09:02:20 GMT"},"fingerprint":{"sha1":"27:4B:B8:AE:07:40:BE:A6:37:5A:53:A4:94:03:EE:07:A8:96:58:80","sha256":"79:86:0D:15:68:5C:19:D9:33:E2:5A:25:FA:02:A2:2D:7D:F6:D8:13:3B:07:79:D4:9E:EE:56:52:94:1F:9A:EA"}}},"request":{"raw":"GET /v1/beacon/img.gif?token=e9735ec6609f6c485a6878c46aaf6f14\u0026svisitor=null\u0026visitor=a29605cd-1300-47ca-826b-86c62e8be6d6\u0026session=2f6fcf52-fb5b-4aae-8fee-54e00d83df83\u0026event=active_time_track\u0026q=%7B%22currentTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A52%20GMT%22%2C%22lastTrackTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A51%20GMT%22%2C%22timeSpent%22%3A%221002%22%2C%22totalTimeSpent%22%3A%226011%22%7D\u0026isIframe=false\u0026m=%7B%22description%22%3A%22Please%20read%20the%20following%20to%20learn%20the%20rules%20and%20restrictions%20that%20govern%20your%20use%20of%20our%20website(s)%20and%20mobile%20application(s)%20(%E2%80%9Cour%20Services%E2%80%9D).%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22BILL%20Spend%20%26amp%3B%20Expense%20Terms%20of%20Service%20%7C%20BILL%22%7D\u0026cb=\u0026r=\u0026thirdParty=%7B%7D\u0026v2=1\u0026pageURL=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026pageViewId=94f1c5eb-0cf3-4193-8406-3f8bb343e9bc\u0026an_uid=-1\u0026webTagId=adbd7400-c99d-4a74-ae9b-5d9e50e0a46c\u0026v=1.1.31 HTTP/1.1\r\nHost: b.6sc.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nexpires: Thu, 09 Oct 2025 15:05:53 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Thu, 09 Oct 2025 15:05:53 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"f837aa60b6fe83458f790db60d529fc9","sha1":"14af87ccec7f81bb28d53c84da2fd5a9d5925cda","sha256":"dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b","sha512":"a85e09c3b5dbb560f4e03ba880047dbc8b4999a64c1f54fbfbca17ee0bcbed3bc6708d699190b56668e464a59358d6b534c3963a1329ba01db21075ef5bedace","ssdeep":"","tlshash":"30900403c540c003d155f0310d14c7401354f130417c030f70fd575ddc751514c11000","first_seen":"2023-04-05T09:52:32Z","last_seen":"2026-04-04T14:22:01.287851Z","times_seen":32230,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trkn.us/pixel/c?ppt=19965\u0026g=sitewide\u0026gid=46667\u0026gtmcb=568099972\u0026ip=91.90.42.154\u0026cuidchk=1","fqdn":"trkn.us","domain":"trkn.us","tld":"us"},"ip":{"addr":"95.100.107.139","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:46.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cert1-prod.aut.a24365.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 05:44:22 GMT","end":"Wed, 31 Dec 2025 05:44:21 GMT"},"fingerprint":{"sha1":"D3:C4:51:27:62:7B:F8:3E:E8:30:41:24:17:27:08:2C:55:25:B6:A3","sha256":"BC:47:68:BB:C6:53:12:EA:BF:8F:D0:BA:38:5C:31:26:30:78:49:DD:88:80:DC:F3:F5:2B:06:3F:3E:2E:5A:A2"}}},"request":{"raw":"GET /pixel/c?ppt=19965\u0026g=sitewide\u0026gid=46667\u0026gtmcb=568099972\u0026ip=91.90.42.154\u0026cuidchk=1 HTTP/1.1\r\nHost: trkn.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bill.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: barometric[cuid]=cuid_68e7cf4a-8b6a-4645-af1b-a96d61ceed1a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 42\r\nContent-Type: image/gif\r\nPragma: no-cache\r\nDate: Thu, 09 Oct 2025 15:05:46 GMT\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nExpires: Sun, 9 Nov 1980 12:58:00 GMT\r\nCache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate\r\nSet-Cookie: barometric[cuid]=cuid_68e7cf4a-8b6a-4645-af1b-a96d61ceed1a; expires=Fri, 09-Oct-2026 15:05:46 GMT; Max-Age=31536000; path=/; SameSite=None;  Secure; domain=.trkn.us;\nbarometric[idfa]=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; SameSite=None; Secure; domain=.trkn.us\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T15:48:44.454201Z","times_seen":763472,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/18.5c2054c5.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /app/js/18.5c2054c5.min.js HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"565cbc1af28bea4031dfa85e554b8e54\"\r\nlast-modified: Fri, 26 Sep 2025 23:44:01 GMT\r\ncdn-storagebalancer: SE-904\r\nperma-cache: MISS\r\nx-amz-id-2: 81sipWvniE29li9WI9vetH+stLFB62xv8ywO8O/IcP3d6qSK7qlehruWXjEhOpGq/ya7JEVL6uQ=\r\nx-amz-request-id: 10X4C57TQ506AN0X\r\nx-amz-server-side-encryption: AES256\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/30/2025 00:57:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0dee13a9c7b73f7d5cdfc25e9609f6a7\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3830,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3785)","md5":"565cbc1af28bea4031dfa85e554b8e54","sha1":"efa5e8813539cd4d66999836d2bac463f61c5f9b","sha256":"aeeada1f49f3e3cdf8988f10f56303e66b3484d44611469d844e6fbdfcbdb0ed","sha512":"40c2dc24e4614543b4b560d16416aeeac5f5c1c339d1f7eff13e3daa9eb4b52ad0d711234050c4a077d51090d8e958d3cba7b85600d84e3ef6412e35e192cda3","ssdeep":"","tlshash":"ef81c796aae1f07307b840f492688754d6462a1a7797c1ed34ecddf32e48f857422bbc","first_seen":"2025-09-30T03:27:48.796582Z","last_seen":"2026-02-10T19:12:33.159736Z","times_seen":1973,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/9.f7e78b11.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /app/js/9.f7e78b11.min.js HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"a121cb50462a2a1baded2277e9ac1be0\"\r\nlast-modified: Fri, 26 Sep 2025 23:44:02 GMT\r\ncdn-storagebalancer: SE-582\r\nperma-cache: MISS\r\nx-amz-id-2: V5xPkzNIsMmyKEkglhfx02sEhqPwvgGVLNLBIiCNvUy38KTt9pSo8E6212gBmwYLYtVNoJHcdVY=\r\nx-amz-request-id: 10X8RB4F19G7DBZR\r\nx-amz-server-side-encryption: AES256\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/30/2025 00:57:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 20843bf57192d12e4e14142e66352a42\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":31744,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31292)","md5":"a121cb50462a2a1baded2277e9ac1be0","sha1":"086c70a82b9c6eaff5d6714ade0132c9a9e96183","sha256":"682674826c251f0490a94a4e979d92dcb1e48470a1acff3004c5c16527defa71","sha512":"05936afcfa50e839322079ea2acc1da7efe252edbbd34914189e099f81d152cd7b91c8ad1d5ad9d24bde7506c3f21feccc244ac1739af923d663e82535363d08","ssdeep":"768:Y5hz3J0u6u8ofYvIsixIqdly7FQlTo3Z60fZdA1Sc2qnVx6bOk+ieMl1GvJ:khz3J03ofYvIJxIsQTX98L","tlshash":"77e2548cb2c3f015539b24e8803e0247b32e5fa539596044fa6d6dd27c35a5a52bbfbc","first_seen":"2025-08-29T23:50:34.828174Z","last_seen":"2025-12-17T22:13:32.534821Z","times_seen":649,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verifi.podscribe.com/tag?action=view\u0026user_id=5001cc37-3f20-4e8b-9b9d-fc0dc04967a4\u0026advertiser=bill\u0026referrer=_\u0026session_referrer=_\u0026session_landing_url=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026device_id=pscrb_e63949d3-a3fc-4f7f-90b5-1310f8fc1652\u0026first_visited_at=1760022347645\u0026stid=\u0026ipv4=91.90.42.154\u0026url=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026event_url=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026source=js-tag+v1.0.8\u0026cachebust=1760022348022","fqdn":"verifi.podscribe.com","domain":"podscribe.com","tld":"com"},"ip":{"addr":"54.221.109.14","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:48.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.podscribe.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 26 Apr 2025 00:00:00 GMT","end":"Tue, 26 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"20:59:A6:10:00:6F:B6:4F:42:77:60:B9:BE:3D:6D:15:CB:0B:C6:AC","sha256":"68:D5:C2:38:69:57:D5:1C:D5:75:BC:E4:E6:93:80:D9:72:B9:D0:13:20:24:FE:24:B4:80:96:B0:03:B9:AC:A9"}}},"request":{"raw":"GET /tag?action=view\u0026user_id=5001cc37-3f20-4e8b-9b9d-fc0dc04967a4\u0026advertiser=bill\u0026referrer=_\u0026session_referrer=_\u0026session_landing_url=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026device_id=pscrb_e63949d3-a3fc-4f7f-90b5-1310f8fc1652\u0026first_visited_at=1760022347645\u0026stid=\u0026ipv4=91.90.42.154\u0026url=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026event_url=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026source=js-tag+v1.0.8\u0026cachebust=1760022348022 HTTP/1.1\r\nHost: verifi.podscribe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: awselb/2.0\r\ndate: Thu, 09 Oct 2025 15:05:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 42\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: OPTIONS, GET, POST\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon ELB","description":"AWS ELB is a network load balancer service provided by Amazon Web Services for distributing traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T15:48:44.454201Z","times_seen":763472,"resource_available":true,"data":null}},"time_used":726,"timings":{"blocked":304,"dns":15,"connect":94,"send":0,"wait":117,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"url.avanan.click/v2/r01/___https:/wqmcr8si.r.us-west-2.awstrack.me/L0/https:/www.bill.com*2Flegal*2Fspend-expense-terms-of-service/1/01010199c97d3d13-87bb4fc2-9fb9-42c6-8d05-e536f4cbefb4-000000/Q0bp3qCpfxJrVOXEZlC-ZIdB9U0=448___.YXAzOmF0bGFzaHA6YTpvOjcyODBmY2E5ZDI4MjFiMjk5Yjk1OTc1Y2ZjNzc3NzFjOjc6ZWUwYjo3MzlhM2M5NzA0YWI5NGRlNjNkYWE4NmMwMjA1OGI0YzFjODdmNGJlNDljYzdhYjIwNDhjZTNjOTEzMGEzYTk2Omg6VDpO","fqdn":"url.avanan.click","domain":"avanan.click","tld":"click"},"ip":{"addr":"3.167.2.40","port":80,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-09T15:05:37.474Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /v2/r01/___https:/wqmcr8si.r.us-west-2.awstrack.me/L0/https:/www.bill.com*2Flegal*2Fspend-expense-terms-of-service/1/01010199c97d3d13-87bb4fc2-9fb9-42c6-8d05-e536f4cbefb4-000000/Q0bp3qCpfxJrVOXEZlC-ZIdB9U0=448___.YXAzOmF0bGFzaHA6YTpvOjcyODBmY2E5ZDI4MjFiMjk5Yjk1OTc1Y2ZjNzc3NzFjOjc6ZWUwYjo3MzlhM2M5NzA0YWI5NGRlNjNkYWE4NmMwMjA1OGI0YzFjODdmNGJlNDljYzdhYjIwNDhjZTNjOTEzMGEzYTk2Omg6VDpO HTTP/1.1\r\nHost: url.avanan.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Thu, 09 Oct 2025 15:05:42 GMT\r\nset-cookie: x-cloud-sec-ctp = 86a535e3-3505-45b3-9621-797caba04e39; Secure; HttpOnly; path=/; expires=09-Oct-2026 15:05:42 GMT\r\nlocation: https://wqmcr8si.r.us-west-2.awstrack.me/L0/https://www.bill.com%2Flegal%2Fspend-expense-terms-of-service/1/01010199c97d3d13-87bb4fc2-9fb9-42c6-8d05-e536f4cbefb4-000000/Q0bp3qCpfxJrVOXEZlC-ZIdB9U0=448\r\nApigw-Requestid: SL1SViGbIAMEMuA=\r\nX-Cache: Miss from cloudfront\r\nVia: 1.1 0091ee978574700d165730d7f2557c34.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: OSL50-P2\r\nX-Amz-Cf-Id: Afl8KhzL5n5q2lVWXWYjkl7gCyhiQSS090lVsXIg6H7O2GEAFNKRbg==\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":224277,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":5414,"timings":{"blocked":2,"dns":0,"connect":1,"send":0,"wait":5411,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-09T15:05:42Z","timestamp":1760022342,"ip_dst":{"addr":"3.167.2.40","port":80,"asn":0,"as":"","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.19","port":41838,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.click domain","source":"{\"timestamp\":\"2025-10-09T15:05:42.886443+0000\",\"flow_id\":1632404582252189,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":41838,\"dest_ip\":\"3.167.2.40\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858675,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.click domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"url.avanan.click\",\"url\":\"/v2/r01/___https:/wqmcr8si.r.us-west-2.awstrack.me/L0/https:/www.bill.com*2Flegal*2Fspend-expense-terms-of-service/1/01010199c97d3d13-87bb4fc2-9fb9-42c6-8d05-e536f4cbefb4-000000/Q0bp3qCpfxJrVOXEZlC-ZIdB9U0=448___.YXAzOmF0bGFzaHA6YTpvOjcyODBmY2E5ZDI4MjFiMjk5Yjk1OTc1Y2ZjNzc3NzFjOjc6ZWUwYjo3MzlhM2M5NzA0YWI5NGRlNjNkYWE4NmMwMjA1OGI0YzFjODdmNGJlNDljYzdhYjIwNDhjZTNjOTEzMGEzYTk2Omg6VDpO\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://wqmcr8si.r.us-west-2.awstrack.me/L0/https://www.bill.com%2Flegal%2Fspend-expense-terms-of-service/1/01010199c97d3d13-87bb4fc2-9fb9-42c6-8d05-e536f4cbefb4-000000/Q0bp3qCpfxJrVOXEZlC-ZIdB9U0=448\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":1053,\"bytes_toclient\":880,\"start\":\"2025-10-09T15:05:37.474781+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/consent/e00a365a-4519-4e49-bc2a-ed5bba62ed06/e00a365a-4519-4e49-bc2a-ed5bba62ed06.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:44.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /consent/e00a365a-4519-4e49-bc2a-ed5bba62ed06/e00a365a-4519-4e49-bc2a-ed5bba62ed06.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncf-ray: 98bec7265de056aa-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 30641\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\netag: 0x8DDBDB23AC6E12E\r\nexpires: Fri, 10 Oct 2025 15:05:44 GMT\r\nlast-modified: Mon, 07 Jul 2025 23:58:54 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding, X-OneTrust-IsBot\r\ncontent-md5: iguxb3MXuViqybmOopb+pg==\r\ncross-origin-resource-policy: cross-origin, cross-origin\r\nx-content-type-options: nosniff\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: 9c7a3d8a-b01e-00d2-069b-ef2dd2000000\r\nx-ms-version: 2009-09-19\r\nx-onetrust-isbot: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5684,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4382d5fd1a5a84402221ace84a32b0bf","sha1":"42f39a487245d0b66658a8d818e5b3fc1a2fbdf4","sha256":"929f95cb1f99cf3025166a99aef31ecb9139dd8722cc9da88f7efe0f50554724","sha512":"b2cf54ea579ca4a74af1427d1ab32eace9aa6f27a0892e048bb917a71409ab7ae38eb47ab39bfc2c963ed24fd865d7f992fbc7d3b90d07f16a14db2e7444eecc","ssdeep":"96:nWyIy40wowzOD6uGhpfEHxYa6Aym+o9jVjejzjFZU0T2w887I:K1o+fdhpM6vm+oldKnjd7I","tlshash":"a7c1601eb60c947dcb8d83d9d41dbd0e8bed682312897814d44f0d1c5bab7f328a6a67","first_seen":"2025-07-08T15:24:26.563583Z","last_seen":"2026-01-23T19:28:35.000885Z","times_seen":125,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/logos/static/ot_close.svg","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:45.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /logos/static/ot_close.svg HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:45 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-md5: pcXWFGpuVeSg/jVnYCseRg==\r\nlast-modified: Wed, 08 Oct 2025 06:36:13 GMT\r\nx-ms-request-id: ffeaa922-e01e-0042-4f21-38b89e000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nage: 48829\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\ncf-ray: 98bec72dee0956aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":651,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a5c5d6146a6e55e4a0fe3567602b1e46","sha1":"c75ff1b713378aec779fb248e22daa513aca725b","sha256":"901bb0e03b8c3c0a1cf4c487a177417328bb7d8c94106ecefceedd7d7f6c4ddc","sha512":"d21d979974542243a4d70036f87bfc0549b6793b809ed09044946be2a25c47811a99e20fdb1f3044082a5509664101d4bca241a1ca7b09fe80084ceafa092368","ssdeep":"","tlshash":"a3f0f9ea9b7464f56a6987f8f7250d823477886868198764c83d171eb4c384c6d1ce06","first_seen":"2023-05-04T08:49:37Z","last_seen":"2026-04-04T15:21:02.308086Z","times_seen":30730,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/api.min.css","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:46.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /app/js/api.min.css HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:46 GMT\r\ncontent-type: text/css\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"68db3869-2644\"\r\nlast-modified: Tue, 30 Sep 2025 01:54:49 GMT\r\ncdn-storageserver: SE-904\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 584\r\nperma-cache: HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/30/2025 01:54:50\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9964dc72ae4421143b753c4e3e28ca23\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":9796,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9752)","md5":"6d3de340b0c4a151bdb9cf9f2dfae6a2","sha1":"d8afaca2f7f41a41488331855b22feba2262cf18","sha256":"39e09b8df4781f32869c8d5e48132abcf8f5ab7723182826294667ffb1858885","sha512":"115c7021890e2ac2f537dd1e0c4863bbc1ed0d640d8dd15931c801d59009b151506581af37c1aebcbb5396647b49633873282241641fce8075ff3d79969b4b99","ssdeep":"96:LZxk3ZiB06lqPEe1Zhl46dN16mlK6HXbz2FeJ7sG0KepMLsOZA:txXBYRki26fepmG","tlshash":"2b129f8c4aa000464193c37bcac54e74877ec9a365761cdf3356684f8f8aa9c93fe667","first_seen":"2025-09-30T03:27:48.886424Z","last_seen":"2025-12-17T22:13:32.541738Z","times_seen":697,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wt.inflection.io/error?error=%7B%22type%22%3A%22info%22%2C%22desc%22%3A%22can%20track%20turned%20off%22%7D","fqdn":"wt.inflection.io","domain":"inflection.io","tld":"io"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wt.inflection.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 04:38:04 GMT","end":"Tue, 25 Nov 2025 04:38:03 GMT"},"fingerprint":{"sha1":"16:E9:16:9F:52:80:EE:A1:07:68:90:25:7D:92:93:57:B2:31:EE:3B","sha256":"06:BF:63:6F:42:F1:0C:E4:6E:EC:21:63:14:66:55:5A:CC:33:15:49:8E:2F:FB:4F:0E:20:C9:94:AF:E8:19:A6"}}},"request":{"raw":"GET /error?error=%7B%22type%22%3A%22info%22%2C%22desc%22%3A%22can%20track%20turned%20off%22%7D HTTP/1.1\r\nHost: wt.inflection.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Varnish\r\nretry-after: 0\r\ncontent-type: image/jpeg\r\naccept-ranges: bytes\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1760022347.156385,VS0,VE0\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=300\r\ncontent-length: 631\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":631,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1x1, components 3","md5":"137bfd4864f4b4267fcd40e42c9d781e","sha1":"8b84b82b130972fa74b3c3dbbf196fb5438ed0d6","sha256":"9dacf9b93ef343cb1b10d45dcd84959c4448a68d0859d818cc3decfb7dbf619f","sha512":"106b9f842e3642dcaaf20d425bed8d3ce5ae0aecb1abeef610b0fe07899b026a03d7f3af1d5255367cb054178681a8b3a02383c6f38e3d71f67abea295bd1de4","ssdeep":"","tlshash":"42f0e11a9b175250df1385fa15162273e1ca89823d647b3529b186a5c520cf4c44864c","first_seen":"2023-06-04T00:05:46Z","last_seen":"2026-04-03T19:43:47.374065Z","times_seen":375,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/users/9df7ffe78a4b/images/db77e3cb078c1707494503-651c34a04a6ee15fcc0074c5_2904-The-future-of-finance-LP-ebook-with-Rocket-p-1080.jpg?width=530","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /users/9df7ffe78a4b/images/db77e3cb078c1707494503-651c34a04a6ee15fcc0074c5_2904-The-future-of-finance-LP-ebook-with-Rocket-p-1080.jpg?width=530 HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 52170\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"68db2c87-cbca\"\r\nlast-modified: Tue, 30 Sep 2025 01:04:07 GMT\r\ncdn-storageserver: SE-583\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 585\r\nperma-cache: HIT\r\ncdn-proxyver: 1.37\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/05/2025 13:05:46\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8028f573fa55c012e49b7ca94e77aaea\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":52170,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 530x353, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"13d13bd1e5c218b1bd4a18e25e8802b3","sha1":"eaa5e6dd4568ee7ddce49b5f510487c694f42645","sha256":"f85d5eb99270ae1716be241a802632e711eb590747a0b3ba73ce80d787856107","sha512":"1dd42dacf9c6eb8230802b75fcc5ae2553f1ee3aeed6b028cdd191dbf3570a011d268fa0180e05eb732ba2fbc549d3a2f802f55bb31a41e7ae04e254e05e1360","ssdeep":"1536:vHgCvUU8pMsJp2l3/hsoikWGc3GGluTKZBpJSX7dJ+W:vACMRpM8Iluo3WGhzTKZAZ","tlshash":"253302ee15b1d2fe314a12af3c0db21a2a41ff13575107a6b36eba91d200f271ddad21","first_seen":"2025-10-02T00:05:19.47475Z","last_seen":"2026-04-03T19:43:47.377442Z","times_seen":152,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/users/9df7ffe78a4b/images/b3ccc33d535a1707462499-4167-Ultimate-Guide-to-Spend-Expense-Management-LP.png?width=530","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /users/9df7ffe78a4b/images/b3ccc33d535a1707462499-4167-Ultimate-Guide-to-Spend-Expense-Management-LP.png?width=530 HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30242\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"68db2c86-7622\"\r\nlast-modified: Tue, 30 Sep 2025 01:04:06 GMT\r\ncdn-storageserver: SE-582\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 584\r\nperma-cache: HIT\r\ncdn-proxyver: 1.37\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/05/2025 13:05:46\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5f6fc4b4db83527a1c104fdb656eaea3\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":30242,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 530x393, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b9d22173f53d98d3ce3dd3837a762257","sha1":"50cb97405b86d10bf4f8fc2133648e6559aefe0b","sha256":"9ed27ce5a4bfa798aba663df131e7d4763a926cf5618518aac9b14e46b616365","sha512":"bfe146600ea66d7516c75fe32f34cd31509de7dfe34ce528d5b8351e50f115873d3efb4e9b80bc6f2d3e8597ab90adc7ed9a8c9d078556356a011069eada95b6","ssdeep":"384:/7HgHpRzw4KhzTgLoFiOuU2U4GDJuMVQjWfaQm/dlSEciG6kF6t/O2vdik3aFM/M:/rwl+h/DYlU4OZxVmSEkqYLtM/Re","tlshash":"2fd2f1db0a7a0d7f46ec43f029f29d446520a4e7575c61e22e823de3e24dcbc40a916c","first_seen":"2025-10-02T00:05:19.556166Z","last_seen":"2026-01-23T19:28:35.01355Z","times_seen":88,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wqmcr8si.r.us-west-2.awstrack.me/L0/https://www.bill.com%2Flegal%2Fspend-expense-terms-of-service/1/01010199c97d3d13-87bb4fc2-9fb9-42c6-8d05-e536f4cbefb4-000000/Q0bp3qCpfxJrVOXEZlC-ZIdB9U0=448","fqdn":"wqmcr8si.r.us-west-2.awstrack.me","domain":"awstrack.me","tld":"me"},"ip":{"addr":"35.82.65.104","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-09T15:05:42.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"r.us-west-2.awstrack.me","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Tue, 06 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7E:7B:28:D2:05:23:C5:91:11:F6:44:7E:16:CD:E2:8D:8E:C6:FE:76","sha256":"F5:84:21:61:58:55:C0:84:81:49:16:33:62:C7:CA:8E:A2:A6:90:D2:3C:84:9F:E8:5B:AA:20:3E:89:A5:7C:3F"}}},"request":{"raw":"GET /L0/https://www.bill.com%2Flegal%2Fspend-expense-terms-of-service/1/01010199c97d3d13-87bb4fc2-9fb9-42c6-8d05-e536f4cbefb4-000000/Q0bp3qCpfxJrVOXEZlC-ZIdB9U0=448 HTTP/1.1\r\nHost: wqmcr8si.r.us-west-2.awstrack.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Thu, 09 Oct 2025 15:05:43 GMT\r\nLocation: https://www.bill.com/legal/spend-expense-terms-of-service\r\nContent-Length: 0\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":224277,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":1561,"timings":{"blocked":694,"dns":175,"connect":170,"send":0,"wait":173,"receive":0,"ssl":347},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dl=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=1155441603.1760022346\u0026dt=BILL%20Spend%20%26%20Expense%20Terms%20of%20Service%20%7C%20BILL\u0026auid=1209031368.1760022346\u0026navt=n\u0026npa=1\u0026gtm=45He5a71v71730231za200zd71730231xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104573694~104684208~104684211~104948813~105391253~115480710~115616985~115834636~115834638\u0026tft=1760022346429\u0026tfd=9078\u0026apve=1\u0026apvf=f","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:46.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:47 GMT","end":"Mon, 15 Dec 2025 08:42:46 GMT"},"fingerprint":{"sha1":"F8:E4:C1:2B:65:50:BA:A4:DA:7D:D7:25:67:C1:48:C6:5D:7D:7C:B7","sha256":"51:79:09:EA:9B:E1:44:D0:D2:B2:5F:3D:09:55:17:56:60:41:AF:0B:B4:1C:55:0B:A1:E2:FE:69:51:21:A9:29"}}},"request":{"raw":"POST /ccm/collect?en=page_view\u0026dl=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=1155441603.1760022346\u0026dt=BILL%20Spend%20%26%20Expense%20Terms%20of%20Service%20%7C%20BILL\u0026auid=1209031368.1760022346\u0026navt=n\u0026npa=1\u0026gtm=45He5a71v71730231za200zd71730231xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104573694~104684208~104684211~104948813~105391253~115480710~115616985~115834636~115834638\u0026tft=1760022346429\u0026tfd=9078\u0026apve=1\u0026apvf=f HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bill.com/\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Thu, 09 Oct 2025 15:05:46 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.bill.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":107,"dns":0,"connect":27,"send":0,"wait":44,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixels.spotify.com/v1/ingest","fqdn":"pixels.spotify.com","domain":"spotify.com","tld":"com"},"ip":{"addr":"35.186.224.24","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotify.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Jan 2025 00:00:00 GMT","end":"Tue, 06 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3A:50:28:5C:64:6A:CC:5B:A8:2D:0A:7F:32:C7:74:3D:5D:98:46:C1","sha256":"A9:52:76:A7:E5:2D:4C:7D:77:21:C9:63:E6:0A:45:73:56:83:4A:95:56:B7:EE:3F:85:DA:4B:D6:02:8D:89:8D"}}},"request":{"raw":"POST /v1/ingest HTTP/1.1\r\nHost: pixels.spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bill.com/\r\nContent-Type: application/json\r\nContent-Length: 767\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ngrpc-encoding: identity\r\ngrpc-accept-encoding: gzip,x-snappy-framed\r\nx-envoy-upstream-service-time: 1\r\ngrpc-status: 0\r\ndate: Thu, 09 Oct 2025 15:05:46 GMT\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://www.bill.com\r\nvia: HTTP/2 edgeproxy, 1.1 google\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d8649d31a41e53293fd4ecc761ffc53c","sha1":"cf9ae2fd71986f35ffcbacb573d3bf1504560111","sha256":"d1abb85725037ca96cf489e96db802dd02baeaa05c763f53697865838295e247","sha512":"0ffc5c84ae04cfb96294377077212eac3a1ccfa27121af9363ecea74b1c13168eefafc37cfc5554519ee07a701f23596c76df7c84e29cca79ced89547bbdf770","ssdeep":"","tlshash":"ed9002e008481d17120940556845265016041b504250550a2d645e526953965d8a1102","first_seen":"2025-06-20T20:17:42.408063Z","last_seen":"2025-12-04T21:10:33.286355Z","times_seen":99,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/4.93f793c4.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /app/js/4.93f793c4.min.js HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"e09bd2129d913982c2b57f472ee5a5e4\"\r\nlast-modified: Fri, 26 Sep 2025 23:44:02 GMT\r\ncdn-storagebalancer: SE-904\r\nperma-cache: MISS\r\nx-amz-id-2: B0fG5nZCy1hFT6o/PCwXWMNkf8IRAAGTK/qC/aP43JCpulAfsg2gzm0HQIYpc5WS+ieJP4L62x0=\r\nx-amz-request-id: 9914FZE0DMGWET7M\r\nx-amz-server-side-encryption: AES256\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/30/2025 00:57:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 30ea4599bd493692fe7fa226c517bb6b\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":45445,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (45397)","md5":"e09bd2129d913982c2b57f472ee5a5e4","sha1":"adeacfbcbdf546eb90cb3eb70c84c3cf1a99ac87","sha256":"0f040a4f4ec505d507c6670c2ddf56c1625651289cc230a78287f4f6d6d92a31","sha512":"73e3aef05020b4541901637a1409f8555125e04428df35a48399501275456b48460f01875cf6af19561eec9a6bd2c53f814334638322e12ae53a5787c5235161","ssdeep":"768:Jky8iFsPECNAHvqrSw9KszQTv3yrO/APYJCMVa296rejMBlP6XGOJFXdJIaa3FJl:VkSHc5K/jJCPrXC/mC8y99zc","tlshash":"a713198272e3f47a05eac0f2e1584251e6116e0a79c2917c743cdeeb264aed931e17fd","first_seen":"2025-09-30T03:27:48.810154Z","last_seen":"2026-01-27T18:30:25.739261Z","times_seen":1858,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/users/9df7ffe78a4b/images/d7dddea6fb5a1756912780-sop.webp?width=530","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /users/9df7ffe78a4b/images/d7dddea6fb5a1756912780-sop.webp?width=530 HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9694\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"68db2c6c-25de\"\r\nlast-modified: Tue, 30 Sep 2025 01:03:40 GMT\r\ncdn-storageserver: SE-583\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 385\r\nperma-cache: HIT\r\ncdn-proxyver: 1.37\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/05/2025 14:04:33\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 397d5a65a0da470fe9b5ba12a1e41d55\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":9694,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"944426ab65c5a227e7a3589916b622ff","sha1":"ba5b5712b5f40dd6d553c14baa866383413eb58e","sha256":"5b98fc788ed5b0a7d8e3a2451a2b7f47525f8c31e4fa8ecf0f5ab6be78e50822","sha512":"2406020f6bba789bff0d4c483c4f4e05265476751d117bd8bb22f2f07ec65b968a6d3718bb6c08ed68259087028f9b8fc5f4c87be33866dbe51b2d1126e67e8d","ssdeep":"192:ewwR4WTf7mVQuIolj3QVHAXMa2xWwXpD+EMxjVxZ7BLNGsRe:ewa4KfF0jwUj2xWwXpD+EMxjVX75Yn","tlshash":"fa12bfa07762a702e85e2efc7bc1df0115726a229fc6c70cf058e611fb111ba081e15f","first_seen":"2025-10-02T00:05:19.458591Z","last_seen":"2025-12-04T21:10:33.291054Z","times_seen":44,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/users/9df7ffe78a4b/images/945cab4acce41700153208-popimg-card-phone.png?width=504","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /users/9df7ffe78a4b/images/945cab4acce41700153208-popimg-card-phone.png?width=504 HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15958\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"68db2c6c-3e56\"\r\nlast-modified: Tue, 30 Sep 2025 01:03:40 GMT\r\ncdn-storageserver: SE-582\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 385\r\nperma-cache: HIT\r\ncdn-proxyver: 1.37\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/05/2025 13:05:46\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 6dd666e464b776b485cd08ad5eca6916\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":15958,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 504x464, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f5e51d06ee5f089c9dc371444fcf2497","sha1":"53d6894dc8b32b43abd6e702f30452289ad55721","sha256":"5618cb9859b8e029e387152c7ca5318992bb93cc5f79002db61cf1480f48dac9","sha512":"ff71b64558f6b2476f517b70a91ae31e8c0366ee84d382961ec31faf9001632b3c04550c2561d599ea32f5aadee3fbe3afdd6392652163b55efa553e1563d686","ssdeep":"384:qN1eLi8LDOmrJCnn2D+2Dr1T94xww1WpfUqZqzsmlpf7A/:weL6m4nJ21Jgd1WOqSzDA/","tlshash":"4062e1a3fc43dadef3c82a5687f6691c58094eac682be08a2d31f571952d921f1dc34d","first_seen":"2025-10-02T00:05:19.48046Z","last_seen":"2026-04-03T19:43:47.370717Z","times_seen":152,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.6sc.co/v1/beacon/img.gif?token=e9735ec6609f6c485a6878c46aaf6f14\u0026svisitor=null\u0026visitor=a29605cd-1300-47ca-826b-86c62e8be6d6\u0026session=2f6fcf52-fb5b-4aae-8fee-54e00d83df83\u0026event=active_time_track\u0026q=%7B%22currentTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A53%20GMT%22%2C%22lastTrackTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A52%20GMT%22%2C%22timeSpent%22%3A%221001%22%2C%22totalTimeSpent%22%3A%227012%22%7D\u0026isIframe=false\u0026m=%7B%22description%22%3A%22Please%20read%20the%20following%20to%20learn%20the%20rules%20and%20restrictions%20that%20govern%20your%20use%20of%20our%20website(s)%20and%20mobile%20application(s)%20(%E2%80%9Cour%20Services%E2%80%9D).%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22BILL%20Spend%20%26amp%3B%20Expense%20Terms%20of%20Service%20%7C%20BILL%22%7D\u0026cb=\u0026r=\u0026thirdParty=%7B%7D\u0026v2=1\u0026pageURL=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026pageViewId=94f1c5eb-0cf3-4193-8406-3f8bb343e9bc\u0026an_uid=-1\u0026webTagId=adbd7400-c99d-4a74-ae9b-5d9e50e0a46c\u0026v=1.1.31","fqdn":"b.6sc.co","domain":"6sc.co","tld":"co"},"ip":{"addr":"2.22.225.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:53.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6sc.co","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:02:21 GMT","end":"Wed, 05 Nov 2025 09:02:20 GMT"},"fingerprint":{"sha1":"27:4B:B8:AE:07:40:BE:A6:37:5A:53:A4:94:03:EE:07:A8:96:58:80","sha256":"79:86:0D:15:68:5C:19:D9:33:E2:5A:25:FA:02:A2:2D:7D:F6:D8:13:3B:07:79:D4:9E:EE:56:52:94:1F:9A:EA"}}},"request":{"raw":"GET /v1/beacon/img.gif?token=e9735ec6609f6c485a6878c46aaf6f14\u0026svisitor=null\u0026visitor=a29605cd-1300-47ca-826b-86c62e8be6d6\u0026session=2f6fcf52-fb5b-4aae-8fee-54e00d83df83\u0026event=active_time_track\u0026q=%7B%22currentTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A53%20GMT%22%2C%22lastTrackTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A52%20GMT%22%2C%22timeSpent%22%3A%221001%22%2C%22totalTimeSpent%22%3A%227012%22%7D\u0026isIframe=false\u0026m=%7B%22description%22%3A%22Please%20read%20the%20following%20to%20learn%20the%20rules%20and%20restrictions%20that%20govern%20your%20use%20of%20our%20website(s)%20and%20mobile%20application(s)%20(%E2%80%9Cour%20Services%E2%80%9D).%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22BILL%20Spend%20%26amp%3B%20Expense%20Terms%20of%20Service%20%7C%20BILL%22%7D\u0026cb=\u0026r=\u0026thirdParty=%7B%7D\u0026v2=1\u0026pageURL=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026pageViewId=94f1c5eb-0cf3-4193-8406-3f8bb343e9bc\u0026an_uid=-1\u0026webTagId=adbd7400-c99d-4a74-ae9b-5d9e50e0a46c\u0026v=1.1.31 HTTP/1.1\r\nHost: b.6sc.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nexpires: Thu, 09 Oct 2025 15:05:54 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Thu, 09 Oct 2025 15:05:54 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"f837aa60b6fe83458f790db60d529fc9","sha1":"14af87ccec7f81bb28d53c84da2fd5a9d5925cda","sha256":"dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b","sha512":"a85e09c3b5dbb560f4e03ba880047dbc8b4999a64c1f54fbfbca17ee0bcbed3bc6708d699190b56668e464a59358d6b534c3963a1329ba01db21075ef5bedace","ssdeep":"","tlshash":"30900403c540c003d155f0310d14c7401354f130417c030f70fd575ddc751514c11000","first_seen":"2023-04-05T09:52:32Z","last_seen":"2026-04-04T14:22:01.287851Z","times_seen":32230,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/gsap/3.13.0/gsap.min.js","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:44.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 17:30:56 GMT","end":"Mon, 10 Nov 2025 18:30:53 GMT"},"fingerprint":{"sha1":"4E:8C:AA:A3:52:1E:AC:1D:1D:23:4D:AC:0D:48:D5:BB:F9:04:B2:8F","sha256":"9F:CB:1D:9B:6C:0D:B9:B3:80:11:A4:E0:06:8D:F6:2A:5A:F8:2B:36:D0:55:D7:9D:F2:31:72:29:4F:B0:6F:A7"}}},"request":{"raw":"GET /gsap/3.13.0/gsap.min.js HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:44 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nx-amz-id-2: vnsCdvYL1qL1ejlrmQiIsQzMeykRD5ptCzoQgy3Ex5mAne7T7m1ORjPbmSgXFawI7hIGEkKgBI0=\r\nx-amz-request-id: Y4TGKA4D25QR49AT\r\nlast-modified: Tue, 29 Apr 2025 20:23:13 GMT\r\netag: W/\"5e6e6cba1d2eabb40740bdc12f736a3c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: luH8OxiCAcg2SklLZsNYccW56aVN_pqk\r\ncf-cache-status: HIT\r\nage: 3927\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 98bec72408f7712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72435,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65323)","md5":"5e6e6cba1d2eabb40740bdc12f736a3c","sha1":"fa1aeabcead11241607d9249ff20c8bcbbac2012","sha256":"96c01b81f44a3290e2b4532f55e2c9534b2adc43273a19f3756b2cb41f0fd0b6","sha512":"35c65db6b4fbedb26be124dc9ac180112af4e8160613cc2865d49d120aa7a72a9a73bb2e80d3be4ebe1b1b0185dccb2712418a854d8a2f6c61e8473e06ab1a1c","ssdeep":"1536:8ha1HvGRpXaDTX+Iq2CpsvO3dyL4NZEkcIRy5ybx:71Heaujpc5EKjI+yl","tlshash":"f863e8dd3292f423039751a1447f094bb337e998640f0918f269e4ce7e2c99d42bbe7a","first_seen":"2025-05-20T13:32:29.657679Z","last_seen":"2026-04-04T14:28:48.17577Z","times_seen":1920,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":120,"dns":4,"connect":19,"send":0,"wait":17,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/32.1dfbe809.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /app/js/32.1dfbe809.min.js HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"21b4fab0eab3664ed619e2f0475ca183\"\r\nlast-modified: Fri, 26 Sep 2025 23:44:02 GMT\r\ncdn-storagebalancer: SE-582\r\nperma-cache: MISS\r\nx-amz-id-2: mhFi6+x4O0S0K0qIntexU1N6RAJGuXd1kIfdQQN+MBFaMUBMVwatKPH8CPBUeP4GTRR17fMPVEQ=\r\nx-amz-request-id: 10X0AF3T11X6Y6N6\r\nx-amz-server-side-encryption: AES256\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/30/2025 00:57:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3deafa940b21d1a94d2ac0a4b50fe0fc\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":34747,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34683)","md5":"21b4fab0eab3664ed619e2f0475ca183","sha1":"55efa24c4980bce1f57a8ebdf06e037cc4f715db","sha256":"37eb41c7ff52de47bf054723d1d1ae9a82909d6f8ec5dec29075fb2b332cc7ff","sha512":"36609e6f59ed11575db6708878deabffed3de648e99666cc48f25f84cb8fe767b1bcf3ee2032be956ec9da3775b55ed6334df32b204e82c0a4bceb2850b362e6","ssdeep":"768:pp3yL9POhwxHTuUMEytXJlGVZ+1MECElJE6sgY9:eLx/uaINE66","tlshash":"7bf245a872c7f0b547526194483f380aa33b5e5c280ea554fbe9cc81bd7958f8137f6a","first_seen":"2025-05-01T13:06:48.344454Z","last_seen":"2026-02-10T19:12:33.133313Z","times_seen":3032,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.amazonaws.com/beehiiv-adnetwork-production/pixel-support.js","fqdn":"s3.amazonaws.com","domain":"s3.amazonaws.com","tld":""},"ip":{"addr":"16.15.177.200","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:46.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 20 Jul 2025 00:00:00 GMT","end":"Thu, 25 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"16:D2:7A:E0:6B:B2:6D:C0:8F:8C:4E:E5:2B:1F:47:F3:EF:60:7F:68","sha256":"EF:42:24:62:84:5D:EF:F9:AE:18:7F:85:D7:C7:56:73:2D:8B:30:D2:CD:83:77:3B:45:EF:24:B2:93:43:99:33"}}},"request":{"raw":"GET /beehiiv-adnetwork-production/pixel-support.js HTTP/1.1\r\nHost: s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ldmsfgIa+SpC/Bx8LsgM6pkP4IFIUn3v+lmAy4OrcGdad8nDNFjA1UGzWtHCQXDA6WZxHk8BPXLyWp+3r/LEL69m1ED8DcgzJJrn7yk8WGs=\r\nx-amz-request-id: JD98PB03EJXJ7DPX\r\nDate: Thu, 09 Oct 2025 15:05:48 GMT\r\nLast-Modified: Mon, 09 Jun 2025 16:18:06 GMT\r\nETag: \"2fcfe35cada10d74dabae25ce3925243\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: vnPkiB98NSaOZPsGpB5XY69DR7QZQknw\r\nAccept-Ranges: bytes\r\nContent-Type: text/javascript\r\nContent-Length: 1880\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1880,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"2fcfe35cada10d74dabae25ce3925243","sha1":"a14b0b0752e6100beaf049ab7d003494e31ac911","sha256":"5acc7e6ade3d8731ed59fd6014d19a842eab8726df017e3f0f23d8843f74e918","sha512":"48677f4527ab0ad475da06c90b7e61a9cf6878d5a045090d4a811f22347f447183c081efe06e30514cf1bd13a7d9091eabfd225d6534eadfde98cfaebc53723a","ssdeep":"","tlshash":"3941d02d13b1457196bf213c8b6f6615282340cb350b9b117fcc9b805fa221ec27c6cd","first_seen":"2025-06-10T16:08:51.701359Z","last_seen":"2026-04-03T19:43:47.321678Z","times_seen":250,"resource_available":true,"data":null}},"time_used":817,"timings":{"blocked":353,"dns":15,"connect":94,"send":0,"wait":110,"receive":0,"ssl":241},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wt.inflection.io/scripts/wt-script.js","fqdn":"wt.inflection.io","domain":"inflection.io","tld":"io"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:46.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wt.inflection.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 04:38:04 GMT","end":"Tue, 25 Nov 2025 04:38:03 GMT"},"fingerprint":{"sha1":"16:E9:16:9F:52:80:EE:A1:07:68:90:25:7D:92:93:57:B2:31:EE:3B","sha256":"06:BF:63:6F:42:F1:0C:E4:6E:EC:21:63:14:66:55:5A:CC:33:15:49:8E:2F:FB:4F:0E:20:C9:94:AF:E8:19:A6"}}},"request":{"raw":"GET /scripts/wt-script.js HTTP/1.1\r\nHost: wt.inflection.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 19 Nov 2024 11:44:18 GMT\r\netag: \"d13922be67f0a2ab449c2fcc779c0483\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-type: text/javascript\r\nserver: AmazonS3\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nage: 1408\r\ndate: Thu, 09 Oct 2025 15:05:46 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1760022347.910855,VS0,VE1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=300\r\ncontent-length: 6029\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":15719,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15719), with no line terminators","md5":"d13922be67f0a2ab449c2fcc779c0483","sha1":"939bcabc410a8cd913e560ee819a016f0e295e69","sha256":"ab80fc6d6599f20e45f2566914b1c614a91f1ddc7ada2575eedf947ca407b144","sha512":"5c255b85ba896ebc512c548a13bb17a622853c25a9ceb87997529c94ee6b8f8a771100ed07fba159df7abf804c360115a6119b90b5877fc0fd0788d09bedbf35","ssdeep":"384:ZD0BcbWgAbxCihiUOhqn4Sm571TI/KnqpI:ZPbWVCihB+/d1TIyqpI","tlshash":"c062c6d836d1b0fa42b311b151bfa60bf33a1a61746d9150e026e4d13cb8e8f8267f79","first_seen":"2024-11-27T21:53:42.463045Z","last_seen":"2026-04-03T19:43:47.349165Z","times_seen":286,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":39,"dns":12,"connect":15,"send":0,"wait":17,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/19.0cf9cbf0.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /app/js/19.0cf9cbf0.min.js HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"68db2ab4-c4a\"\r\nlast-modified: Tue, 30 Sep 2025 00:56:20 GMT\r\ncdn-storageserver: SE-583\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 585\r\nperma-cache: HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/30/2025 00:57:20\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 27bc34f089eaa7c34398e5a0396148ed\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3146,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3101)","md5":"18c31ee6fa620280984a5602366d53f0","sha1":"6cb9a3257c305a0b7bda719455ac2ddb1dff3c22","sha256":"352f07d0c7e109df6177e7cb48efdfac32f773533b7baa313afe16d7c2bdac96","sha512":"ebecb766dec2e88c6506f5a9a5aa50e7d85915e9aedbc9830df76147bdacee96c3f74d190cbc29cbba69cf1691d28e34e3dc5959f517b56479764d296565733b","ssdeep":"","tlshash":"6a512f6572d1fa775ce8c4eeb0905b406a65bb259ac3192c3e2cdccb684efc434346b9","first_seen":"2025-09-30T03:27:48.987484Z","last_seen":"2026-02-10T19:12:33.178203Z","times_seen":1666,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202506.1.0/otBannerSdk.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.87.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:45.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 21:16:24 GMT","end":"Mon, 29 Dec 2025 22:16:20 GMT"},"fingerprint":{"sha1":"0F:29:1D:2D:FF:DA:06:D4:D1:39:8A:8D:DB:F3:55:16:EC:C1:E8:75","sha256":"67:B1:B0:E5:DF:D9:A3:99:56:DC:1D:00:CC:B0:C2:64:C9:84:BC:B7:9B:40:B3:44:88:90:80:86:CC:B8:F6:6E"}}},"request":{"raw":"GET /scripttemplates/202506.1.0/otBannerSdk.js HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 122399\r\ncf-ray: 98bec72c4c5d56aa-OSL\r\ncontent-encoding: gzip\r\ncontent-md5: JjltGcMAZFWll2AmM593KQ==\r\nlast-modified: Mon, 21 Jul 2025 06:33:34 GMT\r\netag: 0x8DDC82084D31198\r\nx-ms-request-id: 91a90da5-601e-00bd-5778-fa8506000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nage: 53571\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":508412,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"78999bec8c06fc9064e0275821760e6e","sha1":"3b2e2f5601507fb791f5a0d0d499928a95ababc7","sha256":"3e7b131e0f59a19e2d648db2fa7e362a7321e8b2c0bf64741da4d7b1068c817b","sha512":"ce3358ff0a04d23b08e9fdc50efed856d0f451e5bd1f8e452d5bded945db202fccb29d5ff71a2ea7e41b562a119ccc34507f88ca42c83f6a8659c42f95e39138","ssdeep":"6144:Xbr1G+Z5xrXcE7q15M99ZZsUEbbFutco++KpO6c1SHoYVGC:XjxrXcE7q1AcoKckn","tlshash":"acb4298e7590753587e752b8c02b414ab63574acac85806cb45cc5f90bf9f821ea3fbb","first_seen":"2025-07-01T17:38:20.864701Z","last_seen":"2026-04-04T14:52:21.515593Z","times_seen":2114,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"258-fem-750.mktoweb.com/js/forms2/css/forms2.css","fqdn":"258-fem-750.mktoweb.com","domain":"mktoweb.com","tld":"com"},"ip":{"addr":"104.16.96.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:45.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"258-fem-750.mktoweb.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 15:51:40 GMT","end":"Sat, 22 Nov 2025 15:51:39 GMT"},"fingerprint":{"sha1":"D6:0D:2A:35:93:4C:E9:03:C9:FD:46:C2:ED:10:78:69:0C:33:10:95","sha256":"1F:AE:21:33:B4:4E:8A:64:73:CF:01:A2:9C:23:DD:E0:92:54:98:8F:FF:85:8C:85:39:7B:A1:D0:AB:1A:62:76"}}},"request":{"raw":"GET /js/forms2/css/forms2.css HTTP/1.1\r\nHost: 258-fem-750.mktoweb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nCookie: __cf_bm=Ey4IQwZYYTRvSGik3_vktD4kyojcwfBb9txLZyG7teA-1760022345-1.0.1.1-9OiZBoPTVq16IOGL3fs.kzwPACvbLbyxqA7hx3eIyAWwuNhw04rFKH9cXYobr7L.YonxoL8u0TVC_PIBg9JPUiFcbH.thTlPs5XGqayarBw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:45 GMT\r\ncontent-type: text/css\r\ncontent-length: 2623\r\ncf-ray: 98bec72c5e123181-OSL\r\nlast-modified: Thu, 25 Sep 2025 21:24:42 GMT\r\netag: \"1d40ade-3437-63fa6cc1f7a80\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nage: 5371\r\nexpires: Thu, 09 Oct 2025 19:05:45 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13367,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"56655da87943d0e5ef98e742ae6ee3d2","sha1":"aa87802906516962a3ec0f444031f7154b70f0af","sha256":"256e42104f48a5fa80b031da12dc56acde224fba3f9810f8f8192b39136d365a","sha512":"0478226bada3ba5cd80a70265b37b723f56804c35f94632cd0255f35776c93294c9ee799b3787ebcb43b1328212cb828b06addcd5e9fd33ffe639e9b3e5999a6","ssdeep":"192:1maFFZjROLUFKza7EIU6hUFRuKt3FLrOamnFvr2S1:13FZjROwFKzB6hUFRNFLiaeFvaS1","tlshash":"e5525455d66cc20075179ab5dde11752e32e403ea41efc6b6be32838af4e39d0c75398","first_seen":"2023-04-05T07:49:39Z","last_seen":"2026-03-19T19:14:05.620132Z","times_seen":5637,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixels.spotify.com/v1/config/955c69760d594d8e939322fbb359df0d","fqdn":"pixels.spotify.com","domain":"spotify.com","tld":"com"},"ip":{"addr":"35.186.224.24","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:46.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spotify.com","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Jan 2025 00:00:00 GMT","end":"Tue, 06 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3A:50:28:5C:64:6A:CC:5B:A8:2D:0A:7F:32:C7:74:3D:5D:98:46:C1","sha256":"A9:52:76:A7:E5:2D:4C:7D:77:21:C9:63:E6:0A:45:73:56:83:4A:95:56:B7:EE:3F:85:DA:4B:D6:02:8D:89:8D"}}},"request":{"raw":"GET /v1/config/955c69760d594d8e939322fbb359df0d HTTP/1.1\r\nHost: pixels.spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bill.com/\r\nOrigin: https://www.bill.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ngrpc-encoding: identity\r\ngrpc-accept-encoding: gzip,x-snappy-framed\r\nx-envoy-upstream-service-time: 1\r\ngrpc-status: 0\r\ndate: Thu, 09 Oct 2025 15:05:46 GMT\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000, h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://www.bill.com\r\nvia: HTTP/2 edgeproxy, 1.1 google\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":69,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"61eb881147ef085a0344638602429220","sha1":"8898c4b4ccba798988a090721f6639ffcaabe2ff","sha256":"be53e30720400d7d7cc8c2c364ae4a1866386ae69f18706b130980dffd208599","sha512":"925ffc3115282dfffa1d9d3af22324b2a7a05577a677b9a48a3601397cd34b56c10b1a50210be7900dd0f297dd8bd0b721f99251bf5d19d364a33d968486dba5","ssdeep":"","tlshash":"c9a022f0003cac0a00cc80280c80208033082bb002202000aef82f233303c33f830000","first_seen":"2025-10-02T00:05:19.429829Z","last_seen":"2025-12-04T21:10:33.305782Z","times_seen":79,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":145,"dns":28,"connect":25,"send":0,"wait":45,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/15.933b9be1.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /app/js/15.933b9be1.min.js HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"f7e91de33929fa676dfcfa4a9fd3611d\"\r\nlast-modified: Fri, 26 Sep 2025 23:44:01 GMT\r\ncdn-storagebalancer: SE-583\r\nperma-cache: MISS\r\nx-amz-id-2: 7iWwBQlCbV/sJkdoDZWbQ8wJqwWTMVWaKAmD+O4cxvdHdtRvAc+PueOWj2rjwN4UeGnVNuhf4n8=\r\nx-amz-request-id: 10XFNZDET6YNEB3C\r\nx-amz-server-side-encryption: AES256\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/30/2025 00:57:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 508e1a19b8f445f8c9a1c7d1e281b9a0\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":830,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (783)","md5":"f7e91de33929fa676dfcfa4a9fd3611d","sha1":"cd170c572e5a11459ae3ed7a38ff4c504cba8477","sha256":"38dd544d5700f089ddf09602dce088bc4c614d471c3e4a827e77b5e630038f66","sha512":"0d3528a381925d72049018a639164e158834899ed49105f449794bf2a11db07edd05e4ddd1d439ddff9b6e84d0c39e68128b29b8731e04e78a1e536ec0ea3bb2","ssdeep":"","tlshash":"69011eb73282b572299a04e2c5c04a88f840376d7541143dbafdece1680ec841251fbc","first_seen":"2025-09-30T03:27:48.948585Z","last_seen":"2026-02-10T19:12:33.234382Z","times_seen":1973,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/63e3da3df35cd62f54751985/js/bill-com.schunk.36b8fb49256177c8.js","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:44.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 17:30:56 GMT","end":"Mon, 10 Nov 2025 18:30:53 GMT"},"fingerprint":{"sha1":"4E:8C:AA:A3:52:1E:AC:1D:1D:23:4D:AC:0D:48:D5:BB:F9:04:B2:8F","sha256":"9F:CB:1D:9B:6C:0D:B9:B3:80:11:A4:E0:06:8D:F6:2A:5A:F8:2B:36:D0:55:D7:9D:F2:31:72:29:4F:B0:6F:A7"}}},"request":{"raw":"GET /63e3da3df35cd62f54751985/js/bill-com.schunk.36b8fb49256177c8.js HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:44 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: br\r\nx-amz-id-2: jrdT+lauOkwhXv6t9LBlvSLAAWdIqMkuFmtH86b51TKSOqAFqqCS1BKYt8FdWCJvu2xzI5M/W6kq3NdxcP5/CvlqwSzE0iFXyU+MjrAZU9Q=\r\nx-amz-request-id: ZKZ3QWVZ2YJ51WFQ\r\nlast-modified: Mon, 28 Jul 2025 16:42:33 GMT\r\netag: W/\"6d1d67fe2715f25c2fd98a9011d8ea67\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: rF6N.4MYUWie7.gpNqish7aMYUZ7e5p4\r\ncf-cache-status: HIT\r\nage: 3684333\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 98bec723e8cb712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41429,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (41429), with no line terminators","md5":"6d1d67fe2715f25c2fd98a9011d8ea67","sha1":"fd1ce2d8e0999d8279b32211977bddeb04aed0d5","sha256":"8b7d0de9f3df9103d70ed000c17b348240623ac4e4053d56fa0d5cfd8d74d79d","sha512":"f6c9f1147f527cf9e787075eac748e04606872ff4220feeb65cff21672c42dcd2905b2bd31ced2e80c2d249b5a32a69023867b43712561b01f700f6b57e30ddf","ssdeep":"768:g4DiJdpMNsppahKJpE8c32YpIx6qh215vgS9AoS9I1hh00:g4DiJ/1HasJmoYpI1k179AK1o0","tlshash":"be13228dfac1f0914363e966822f941bf27a6a59b04fd4d4926ad1e0dc7c58f8027e2d","first_seen":"2025-05-14T07:45:58.253137Z","last_seen":"2026-04-04T15:15:52.241436Z","times_seen":10358,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":108,"dns":4,"connect":2,"send":0,"wait":16,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/api.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:46.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /app/js/api.min.js HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:46 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"68db386d-9ff9\"\r\nlast-modified: Tue, 30 Sep 2025 01:54:53 GMT\r\ncdn-storageserver: SE-582\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 385\r\nperma-cache: HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/30/2025 01:54:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: eeaeffdb0639633d877bb8d4b82b64fd\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":40953,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40953), with no line terminators","md5":"a2e7481759188b7514637cf2c8d2febe","sha1":"4130cf88496184951ce54e43f31608a439529862","sha256":"c27f38e80126b1110b0d811887404d5d58e15f550272204ade9d2db51e90072d","sha512":"f0ced9df2af7c6349ab635cd36116b85be22de241e2bc22627c16e7c44a2cc31b2038c7f0f653094941051e552824cdd9e6162ee61dd3c2e84e2576d70e1e268","ssdeep":"768:8PDo7tYY1TMqvI1/CQfoRAmRUh8lDtZm1vEWPyetWGz+hHtjstEMMdEUeFmUOXSA:MbYRMfJ82hmDtZmyhQESMJ7","tlshash":"3703c788b1c2f0a10bee1065543f531af23a6dd5385d8054f268acd67d34aab9273fbd","first_seen":"2025-09-30T03:27:48.998415Z","last_seen":"2026-03-25T23:07:10.922281Z","times_seen":685,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":71,"dns":56,"connect":3,"send":0,"wait":3,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/gsap/3.13.0/SplitText.min.js","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:44.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 17:30:56 GMT","end":"Mon, 10 Nov 2025 18:30:53 GMT"},"fingerprint":{"sha1":"4E:8C:AA:A3:52:1E:AC:1D:1D:23:4D:AC:0D:48:D5:BB:F9:04:B2:8F","sha256":"9F:CB:1D:9B:6C:0D:B9:B3:80:11:A4:E0:06:8D:F6:2A:5A:F8:2B:36:D0:55:D7:9D:F2:31:72:29:4F:B0:6F:A7"}}},"request":{"raw":"GET /gsap/3.13.0/SplitText.min.js HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:44 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nx-amz-id-2: 7ada4yudZMeOxpF7cPGvha/zeggKn2BV2GHBgmvpo3nNC8rdAZC20w425TQRPwCBRfyULXhfIN+1uQZe6oKgPQ==\r\nx-amz-request-id: 929V6N2956407WVA\r\nlast-modified: Tue, 29 Apr 2025 20:23:16 GMT\r\netag: W/\"253d65596b33a46683005584f91daf39\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: uEk.r.DxnEpd50AB8ZL1Dvmvw0BNG3mj\r\ncf-cache-status: HIT\r\nage: 6942\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 98bec723e8d0712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7247,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4451)","md5":"253d65596b33a46683005584f91daf39","sha1":"f59793f6360fb3912661cec6ca72125f9e9ff0c5","sha256":"5e519ea2470faa15ca4d4f27e9263e5906c07c034a9b4771164dee108136563a","sha512":"c0e7840bef6a1110338658b00453c36fab7c4e2145c5dc46f2f84afd882ced3b82e386e983ca60fd7dbf53fbbed17e1f2b4e706fd89dd44222a67174dbe08543","ssdeep":"192:EUOVuA4+EtZZQipaevY1EGPNFR3Z/VxQqXnG9jy72qtH6GFZ9a42S7:EBrHEtTQi4z1EGFFR3Z/5GO6Gbr","tlshash":"19e1e9727318197393d4519a45db9284f22008b95c0a6ca9f4acddee2169dc530fffb6","first_seen":"2025-06-12T16:01:08.835004Z","last_seen":"2026-04-04T14:28:48.251156Z","times_seen":580,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/gsap/3.13.0/ScrollTrigger.min.js","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:44.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 17:30:56 GMT","end":"Mon, 10 Nov 2025 18:30:53 GMT"},"fingerprint":{"sha1":"4E:8C:AA:A3:52:1E:AC:1D:1D:23:4D:AC:0D:48:D5:BB:F9:04:B2:8F","sha256":"9F:CB:1D:9B:6C:0D:B9:B3:80:11:A4:E0:06:8D:F6:2A:5A:F8:2B:36:D0:55:D7:9D:F2:31:72:29:4F:B0:6F:A7"}}},"request":{"raw":"GET /gsap/3.13.0/ScrollTrigger.min.js HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:44 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nx-amz-id-2: FBUtk3udX5pGzcrXYDLL6q6e9llk9xykKW9/PIkSfumZMAqiNOh5zM5Owv2JytwTkVa2dy1reI4=\r\nx-amz-request-id: Y4TVFH32P8BB1PFW\r\nlast-modified: Tue, 29 Apr 2025 20:23:15 GMT\r\netag: W/\"00a3e5c78a5bfc5e47677f5c8cdb9030\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 7Brhd6uX4wtVxdPXOJx1NBduyYOTnnr2\r\ncf-cache-status: HIT\r\nage: 1860\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 98bec723f8ee712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44157,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43933)","md5":"00a3e5c78a5bfc5e47677f5c8cdb9030","sha1":"ecd3242f5dac796b8d205d4084d877d0663e040f","sha256":"308219390e5e3b84cda0c481e70caa9820883ae10bda44e6e9a149a81aac4b3f","sha512":"3f62036197ea4b08dc4a35f404a78d8704541fccd13c69607169799fa8012f3762e18e7fd0ee33697aed3b82bd4d92ba1e7d417a76292a8c2e09abcd6a774446","ssdeep":"768:As+yeuMOl6ACOIyAU2sjVKI3G4rNN2AvZHu6B:qm4FOIyAhS3GG2WXB","tlshash":"421309c93244b062679f63b6a42f060a733654dd290e4055f376e4e83cbd9b9873be6c","first_seen":"2025-05-20T13:32:29.633767Z","last_seen":"2026-04-04T14:28:48.249396Z","times_seen":1522,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":112,"dns":19,"connect":7,"send":0,"wait":15,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"258-fem-750.mktoweb.com/index.php/form/XDFrame","fqdn":"258-fem-750.mktoweb.com","domain":"mktoweb.com","tld":"com"},"ip":{"addr":"104.16.96.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:45.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"258-fem-750.mktoweb.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 15:51:40 GMT","end":"Sat, 22 Nov 2025 15:51:39 GMT"},"fingerprint":{"sha1":"D6:0D:2A:35:93:4C:E9:03:C9:FD:46:C2:ED:10:78:69:0C:33:10:95","sha256":"1F:AE:21:33:B4:4E:8A:64:73:CF:01:A2:9C:23:DD:E0:92:54:98:8F:FF:85:8C:85:39:7B:A1:D0:AB:1A:62:76"}}},"request":{"raw":"GET /index.php/form/XDFrame HTTP/1.1\r\nHost: 258-fem-750.mktoweb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nCookie: __cf_bm=Ey4IQwZYYTRvSGik3_vktD4kyojcwfBb9txLZyG7teA-1760022345-1.0.1.1-9OiZBoPTVq16IOGL3fs.kzwPACvbLbyxqA7hx3eIyAWwuNhw04rFKH9cXYobr7L.YonxoL8u0TVC_PIBg9JPUiFcbH.thTlPs5XGqayarBw\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: max-age=3600\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nset-cookie: BIGipServersj38web-nginx-app_https=!ScKAhmUEzhNiI/pjEitMakGAswTrMgg9i7TiWva8MQgTWaOI4ndvZzgjcC20P3f7UwCyJSf9is/89R0=; Path=/; Version=1; Secure; Httponly\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfOrigin;dur=2,cfEdge;dur=370\r\nserver: cloudflare\r\ncf-ray: 98bec72cef3f3181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2298,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (497)","md5":"6b22cc546c49e95de7f997e29f75edf5","sha1":"41df862ee8eb65766a1e5a19158fcf8a66e6b4ea","sha256":"dbc20bbe83a700b91089c5118d8a4bf78756bcae8eb7159a8a7258524814c3aa","sha512":"2cb1f86ef67e9c150af6a4d61e0c03e2aa5cf382b89d83d29345461c7ce2a1fe179fc1b5c8b85865e75c1ae5dfc2f7b00bc7ed72c2d28a27447a0c321661c329","ssdeep":"","tlshash":"1741744facb05468915311857abfff003a35e23fb158ec61be8da5b04f6469b98127cd","first_seen":"2025-10-09T15:06:12.450673Z","last_seen":"2025-10-09T15:06:12.450673Z","times_seen":1,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.omappapi.com/app/js/26.564270cb.min.js","fqdn":"a.omappapi.com","domain":"omappapi.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:47.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a.omappapi.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 16:13:47 GMT","end":"Sat, 13 Dec 2025 16:13:46 GMT"},"fingerprint":{"sha1":"62:AF:63:AC:DB:FA:95:3B:41:82:FA:22:A6:C6:B8:BF:B9:71:05:44","sha256":"E8:A2:57:4C:76:AE:4D:FC:F3:E6:B5:B7:2F:19:F7:B9:DD:3A:A5:7C:2B:28:5D:92:58:08:7B:E2:39:66:22:0B"}}},"request":{"raw":"GET /app/js/26.564270cb.min.js HTTP/1.1\r\nHost: a.omappapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 15:05:47 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 293267\r\ncdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"c1493464e38672b0446c90fb07852aef\"\r\nlast-modified: Fri, 26 Sep 2025 23:44:02 GMT\r\ncdn-storagebalancer: SE-582\r\nperma-cache: MISS\r\nx-amz-id-2: w50N5G6pBwa9Qgpv8E5kmwEuhk0zStffD45Okh6/ik+mqlpti2vyWhYGJEEnmir79RSN3ZZb5zx4bd4sGRFREcPEhXu8Q2Y9\r\nx-amz-request-id: 10XDVYT8Y4FEQ651\r\nx-amz-server-side-encryption: AES256\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/30/2025 00:57:17\r\ncdn-edgestorageid: 830\r\ncdn-requestid: fedf8c1cf4c3a06acba56863692797ed\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5967,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5921)","md5":"c1493464e38672b0446c90fb07852aef","sha1":"41063df0704dd5113074208bbe5edfc23b68d1b4","sha256":"4f3fb08f335545b79fd33b14875b6db5418a01d639a0551ed34028a782c4c2cf","sha512":"ba900e5e40d143f7d85b886e432e05588ec86aadac258ab0c3e80f2996ef8b5375fd354e4b2f24f046af308f5180be2609f9d263c90aad1044c691472dc31705","ssdeep":"96:Hf33dffCCVuudi7p57f61ZT94T+koc412ujkEPYupEQ7YXpwZNv3IFphfxbfxM:/33df6CVwpZf67Z4T+koc412ujNPYupN","tlshash":"29c1112433c0e9f554cac15ae0a083485d3aab44b7d6a4aeba6dccfb6571dd00527ff8","first_seen":"2025-09-30T03:27:49.00268Z","last_seen":"2026-02-10T19:12:33.119564Z","times_seen":1973,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b.6sc.co/v1/beacon/img.gif?token=e9735ec6609f6c485a6878c46aaf6f14\u0026svisitor=null\u0026visitor=a29605cd-1300-47ca-826b-86c62e8be6d6\u0026session=2f6fcf52-fb5b-4aae-8fee-54e00d83df83\u0026event=active_time_track\u0026q=%7B%22currentTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A49%20GMT%22%2C%22lastTrackTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A48%20GMT%22%2C%22timeSpent%22%3A%221002%22%2C%22totalTimeSpent%22%3A%223006%22%7D\u0026isIframe=false\u0026m=%7B%22description%22%3A%22Please%20read%20the%20following%20to%20learn%20the%20rules%20and%20restrictions%20that%20govern%20your%20use%20of%20our%20website(s)%20and%20mobile%20application(s)%20(%E2%80%9Cour%20Services%E2%80%9D).%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22BILL%20Spend%20%26amp%3B%20Expense%20Terms%20of%20Service%20%7C%20BILL%22%7D\u0026cb=\u0026r=\u0026thirdParty=%7B%7D\u0026v2=1\u0026pageURL=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026pageViewId=94f1c5eb-0cf3-4193-8406-3f8bb343e9bc\u0026an_uid=-1\u0026webTagId=adbd7400-c99d-4a74-ae9b-5d9e50e0a46c\u0026v=1.1.31","fqdn":"b.6sc.co","domain":"6sc.co","tld":"co"},"ip":{"addr":"2.22.225.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bill.com/legal/spend-expense-terms-of-service","date":"2025-10-09T15:05:49.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"6sc.co","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 Aug 2025 09:02:21 GMT","end":"Wed, 05 Nov 2025 09:02:20 GMT"},"fingerprint":{"sha1":"27:4B:B8:AE:07:40:BE:A6:37:5A:53:A4:94:03:EE:07:A8:96:58:80","sha256":"79:86:0D:15:68:5C:19:D9:33:E2:5A:25:FA:02:A2:2D:7D:F6:D8:13:3B:07:79:D4:9E:EE:56:52:94:1F:9A:EA"}}},"request":{"raw":"GET /v1/beacon/img.gif?token=e9735ec6609f6c485a6878c46aaf6f14\u0026svisitor=null\u0026visitor=a29605cd-1300-47ca-826b-86c62e8be6d6\u0026session=2f6fcf52-fb5b-4aae-8fee-54e00d83df83\u0026event=active_time_track\u0026q=%7B%22currentTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A49%20GMT%22%2C%22lastTrackTime%22%3A%22Thu%2C%2009%20Oct%202025%2015%3A05%3A48%20GMT%22%2C%22timeSpent%22%3A%221002%22%2C%22totalTimeSpent%22%3A%223006%22%7D\u0026isIframe=false\u0026m=%7B%22description%22%3A%22Please%20read%20the%20following%20to%20learn%20the%20rules%20and%20restrictions%20that%20govern%20your%20use%20of%20our%20website(s)%20and%20mobile%20application(s)%20(%E2%80%9Cour%20Services%E2%80%9D).%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22BILL%20Spend%20%26amp%3B%20Expense%20Terms%20of%20Service%20%7C%20BILL%22%7D\u0026cb=\u0026r=\u0026thirdParty=%7B%7D\u0026v2=1\u0026pageURL=https%3A%2F%2Fwww.bill.com%2Flegal%2Fspend-expense-terms-of-service\u0026pageViewId=94f1c5eb-0cf3-4193-8406-3f8bb343e9bc\u0026an_uid=-1\u0026webTagId=adbd7400-c99d-4a74-ae9b-5d9e50e0a46c\u0026v=1.1.31 HTTP/1.1\r\nHost: b.6sc.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bill.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nexpires: Thu, 09 Oct 2025 15:05:50 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Thu, 09 Oct 2025 15:05:50 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"f837aa60b6fe83458f790db60d529fc9","sha1":"14af87ccec7f81bb28d53c84da2fd5a9d5925cda","sha256":"dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b","sha512":"a85e09c3b5dbb560f4e03ba880047dbc8b4999a64c1f54fbfbca17ee0bcbed3bc6708d699190b56668e464a59358d6b534c3963a1329ba01db21075ef5bedace","ssdeep":"","tlshash":"30900403c540c003d155f0310d14c7401354f130417c030f70fd575ddc751514c11000","first_seen":"2023-04-05T09:52:32Z","last_seen":"2026-04-04T14:22:01.287851Z","times_seen":32230,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}