{"report_id":"9a73c8fa-529f-45c0-a70a-69b6beaacc04","version":6,"status":"done","tags":[],"date":"2023-12-07T19:08:34Z","url":{"schema":"http","addr":"www.lmbahsj2.com/29PD1BG/83KB7S/?source_id=143\u0026sub1=2\u0026sub2=6608d798eb0b49089aa75baddb8f143c","fqdn":"www.lmbahsj2.com","domain":"lmbahsj2.com","tld":"com"},"ip":{"addr":"35.201.76.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","fqdn":"money.quickencompare.com","domain":"quickencompare.com","tld":"com"},"title":"QuickenCompare Money - QUESTIONS"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T08:38:31Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"pix.revjet.com","ip":{"addr":"95.217.105.250","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2008-09-14","domain_rank":4646,"first_seen":"2015-09-01 17:11:50","last_seen":"2023-11-18 10:18:58","alert_count":0,"request_count":1,"received_data":314,"sent_data":1033,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.quickencompare.com","ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-01-21","domain_rank":0,"first_seen":"2022-07-11 01:11:04","last_seen":"2023-11-15 09:18:27","alert_count":0,"request_count":2,"received_data":14256,"sent_data":2134,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn-refinance.enhancedrefinow.com","ip":{"addr":"104.18.4.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-11-14","domain_rank":0,"first_seen":"2022-07-21 16:57:28","last_seen":"2023-11-17 22:09:56","alert_count":0,"request_count":1,"received_data":154841,"sent_data":460,"comment":"","tags":null,"fingerprints":null},{"fqdn":"p.typekit.net","ip":{"addr":"184.51.252.189","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"domain_registered":"2010-08-02","domain_rank":620,"first_seen":"2012-05-23 16:28:57","last_seen":"2023-12-07 05:10:32","alert_count":0,"request_count":1,"received_data":340,"sent_data":490,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ads.revjet.com","ip":{"addr":"65.21.20.219","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2008-09-14","domain_rank":2924,"first_seen":"2015-08-11 20:59:57","last_seen":"2023-12-05 21:11:59","alert_count":0,"request_count":1,"received_data":19798,"sent_data":430,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.lmbahsj2.com","ip":{"addr":"35.201.76.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2021-09-21","domain_rank":0,"first_seen":"2022-05-13 17:11:55","last_seen":"2023-12-05 14:01:25","alert_count":0,"request_count":3,"received_data":63640,"sent_data":1592,"comment":"","tags":null,"fingerprints":null},{"fqdn":"content.quickencompare.com","ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-01-21","domain_rank":0,"first_seen":"2022-08-17 22:48:03","last_seen":"2023-11-17 22:09:56","alert_count":0,"request_count":4,"received_data":142445,"sent_data":3525,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cs-cdn.deviceatlas.com","ip":{"addr":"52.58.191.183","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2007-11-29","domain_rank":0,"first_seen":"2019-07-10 14:47:14","last_seen":"2023-11-18 16:00:31","alert_count":0,"request_count":1,"received_data":22883,"sent_data":425,"comment":"","tags":null,"fingerprints":null},{"fqdn":"a44325.actonservice.com","ip":{"addr":"207.189.124.43","port":443,"asn":13649,"as":"ASN-VINS","country":"United States","country_code":"US"},"domain_registered":"2006-08-04","domain_rank":0,"first_seen":"2023-05-11 17:31:22","last_seen":"2023-11-17 22:09:59","alert_count":0,"request_count":2,"received_data":5833,"sent_data":1352,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10 13:11:19","last_seen":"2023-11-19 18:48:38","alert_count":0,"request_count":1,"received_data":1506,"sent_data":1115,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-09-09 02:40:21","last_seen":"2023-12-07 07:59:33","alert_count":0,"request_count":1,"received_data":33925,"sent_data":549,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.redditstatic.com","ip":{"addr":"151.101.193.140","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2011-11-09","domain_rank":1440,"first_seen":"2012-06-30 14:33:28","last_seen":"2023-12-07 18:17:19","alert_count":0,"request_count":1,"received_data":8420,"sent_data":428,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rum-http-intake.logs.datadoghq.com","ip":{"addr":"3.233.153.123","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2010-07-09","domain_rank":3196,"first_seen":"2019-08-02 12:28:45","last_seen":"2023-12-05 07:26:41","alert_count":0,"request_count":3,"received_data":921,"sent_data":2062,"comment":"","tags":null,"fingerprints":null},{"fqdn":"money.quickencompare.com","ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-01-21","domain_rank":0,"first_seen":"2023-02-10 04:00:13","last_seen":"2023-11-20 15:48:43","alert_count":0,"request_count":4,"received_data":28603,"sent_data":7209,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsp.starfieldtech.com","ip":{"addr":"192.124.249.41","port":0,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"domain_registered":"2003-03-06","domain_rank":6616,"first_seen":"2012-06-22 20:08:50","last_seen":"2023-12-07 05:10:23","alert_count":0,"request_count":3,"received_data":7971,"sent_data":1038,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2013-05-22 04:07:37","last_seen":"2023-12-07 08:07:58","alert_count":0,"request_count":5,"received_data":386164,"sent_data":2273,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.250.74.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":25607,"first_seen":"2016-04-05 21:50:59","last_seen":"2023-12-07 07:13:36","alert_count":0,"request_count":1,"received_data":758,"sent_data":1120,"comment":"","tags":null,"fingerprints":null},{"fqdn":"use.typekit.net","ip":{"addr":"23.36.76.122","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-08-02","domain_rank":494,"first_seen":"2012-07-05 03:42:39","last_seen":"2023-12-07 05:10:31","alert_count":0,"request_count":4,"received_data":34085,"sent_data":2283,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ads.anura.io","ip":{"addr":"54.230.111.16","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2016-03-22","domain_rank":75730,"first_seen":"2016-10-30 01:38:15","last_seen":"2023-12-07 18:41:14","alert_count":0,"request_count":1,"received_data":482,"sent_data":469,"comment":"","tags":null,"fingerprints":null},{"fqdn":"content.refinance.quickenloans.com","ip":{"addr":"104.18.13.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-07-24","domain_rank":0,"first_seen":"2022-03-18 19:21:56","last_seen":"2023-11-13 09:22:54","alert_count":0,"request_count":1,"received_data":1744,"sent_data":497,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2013-06-10 22:14:26","last_seen":"2023-12-07 07:16:25","alert_count":0,"request_count":1,"received_data":11745,"sent_data":482,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s.yimg.com","ip":{"addr":"87.248.119.252","port":443,"asn":203220,"as":"Yahoo! UK Services Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"1997-05-14","domain_rank":375,"first_seen":"2012-05-21 00:45:00","last_seen":"2023-12-06 18:13:51","alert_count":0,"request_count":2,"received_data":8278,"sent_data":882,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static-lre.refinance.enhancedrefinow.com","ip":{"addr":"104.18.4.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-11-14","domain_rank":0,"first_seen":"2022-02-28 22:33:07","last_seen":"2023-11-17 22:09:56","alert_count":0,"request_count":4,"received_data":524241,"sent_data":1879,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bat.bing.com","ip":{"addr":"13.107.21.200","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1996-01-29","domain_rank":387,"first_seen":"2014-04-08 11:23:16","last_seen":"2023-12-07 05:14:24","alert_count":0,"request_count":3,"received_data":15124,"sent_data":1904,"comment":"","tags":null,"fingerprints":null},{"fqdn":"script.anura.io","ip":{"addr":"3.10.186.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"domain_registered":"2016-03-22","domain_rank":43801,"first_seen":"2017-05-19 21:00:19","last_seen":"2023-12-05 09:21:23","alert_count":0,"request_count":2,"received_data":56815,"sent_data":1081,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.datadoghq-browser-agent.com","ip":{"addr":"54.230.111.221","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-03-26","domain_rank":3490,"first_seen":"2019-04-26 18:31:20","last_seen":"2023-12-06 20:36:34","alert_count":0,"request_count":1,"received_data":118214,"sent_data":446,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2023-12-07T19:08:27Z","timestamp":1701976107,"ip_dst":{"addr":"18.159.105.57","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"Client IP","port":36855,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard Low Port)","source":"{\"timestamp\":\"2023-12-07T19:08:27.951590+0000\",\"flow_id\":2144496903750950,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.58\",\"src_port\":36855,\"dest_ip\":\"18.159.105.57\",\"dest_port\":443,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033077,\"rev\":2,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard Low Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_06_03\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2023-12-07T19:08:27.951590+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-07T19:08:29Z","timestamp":1701976109,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":46898,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2023-12-07T19:08:29.080628+0000\",\"flow_id\":518439461098978,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.58\",\"src_port\":46898,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_15\"]}},\"http\":{\"hostname\":\"libnacxrsa.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":469,\"bytes_toclient\":116,\"start\":\"2023-12-07T19:07:22.431586+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-07T19:08:34Z","timestamp":1701976114,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":46166,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2023-12-07T19:08:34.441298+0000\",\"flow_id\":662402466306440,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.58\",\"src_port\":46166,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_15\"]}},\"http\":{\"hostname\":\"www.24gvrewvgrew3.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":476,\"bytes_toclient\":116,\"start\":\"2023-12-07T19:06:27.317832+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-07T19:08:36Z","timestamp":1701976116,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":60550,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2023-12-07T19:08:36.425131+0000\",\"flow_id\":100285740554417,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.58\",\"src_port\":60550,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_15\"]}},\"http\":{\"hostname\":\"libnacxrsa.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":589,\"bytes_toclient\":116,\"start\":\"2023-12-07T19:07:29.923825+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f373025d049c1b35741d7d875ddc6b0","sha1":"a486f147997b72143ddb50c3e889b62b843802fa","sha256":"c10f0e610812f22aa3cf23610f64b0cf2c2efee9fccdf794435aaa47f4549093","sha512":"30c8bffb530f8750af29aac1338cb158cbedc9fe6193f5d94b0f366fa9e9c1a80d873c880776b51cc52b3c99da02ae9d366632a6fd81b42a820f812472cc0fe8","ssdeep":"","tlshash":"59c080907884f772f5f44f6c2e6735e775027021d1501f3953f917d419eb047615055a","size":165,"data":"","first_seen":"2023-03-26T13:16:58Z","last_seen":"2024-09-19T20:13:27.561463Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-11411986938","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"102f9a2a3775a8772ef8b1519157928d","sha1":"d6aa31f8b606f05ae5155f38e52b5a51e71ef290","sha256":"373ea88cef3e3f9c706127d4b908f9e35c71df87cbffe6e440469042027a5a28","sha512":"113c7f541e17e8cc459996de69b3079c6b08fb864c1cdd611c09b84b3d989938e12fb2116f38931d3dae720feb3e88f9ea1a8b815ae1849f46b9f9ac81adad3d","ssdeep":"3072:ajdZAlCIWYyUyO1j2MypDDMv0MWXdXzhoO7DfFWkrtk4X:8fIHyUy4L3WtDhoO7DfYOtn","tlshash":"e03418d973c3706682a7b4b4503f020ba17b6da6f84ccc94e189c5d52eb8a99417bf7c","size":233611,"data":"","first_seen":"2023-12-07T20:08:35Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4b9aa4bd1158d2a90b163079af10fce","sha1":"f7555ee73aea2afd73b1e3a62e0b830060409efb","sha256":"1e10c7052444bdadef594f3cbc761f53daaea5e2ebd3cf803626f2339136eb88","sha512":"711c3abf1973a7cab42f81db97bd4f6c535cb387c8012aba1536bc6ccaa85b216664c2457cbf6c202c848ae8d97df897342494ca22f512a919d1a67c2f840028","ssdeep":"","tlshash":"1ce02201db526ef2460012fb787bc37a80efb189b16b8099a9c420835f5feacb000728","size":410,"data":"","first_seen":"2023-03-07T16:25:40Z","last_seen":"2026-05-07T14:49:59.769151Z","times_seen":763,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lmbahsj2.com/scripts/sdk/everflow.js","fqdn":"www.lmbahsj2.com","domain":"lmbahsj2.com","tld":"com"},"ip":{"addr":"35.201.76.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a636b6eebf5b8e8d86fd79ce19d28fd","sha1":"1639511a82c32d506d65d737ea4c6c2d0033907d","sha256":"00bfb9da74d6c2c325c27e60fc9aea44f272cba1b072ad7b2ba4a805c3e8d555","sha512":"62609831fcc51ad6525150ff8c4a9bac7712d51b1653930deb86bc380fc905a3adfcf6d3312ab936716a8b75e90ebed8fb6cc9366b5bf68569a1cfe9d39a83bd","ssdeep":"768:BAuXnhgP01Au2IOTQpzEeIHV7xk6/NTBt0haRAe12bV/YRp3qnjcs3nATAruCf6w:RgP01Au2ITEeIHtYyxpsXjuCf6w","tlshash":"9053185c3296303643a370b0213fa50ab2ba9d95744c8454fa75cce46dbce5e9277fb8","size":61234,"data":"","first_seen":"2023-11-15T15:41:45Z","last_seen":"2024-08-20T19:28:13.020223Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/bat.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"13.107.21.200","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f75f159026f3a2c8cccda487b43157b","sha1":"021cf5c854db063cd79bf0394c24eb994e095640","sha256":"5e319852607809336b2534ffeb96f6933f26994dd040f535302c84f59cc0a214","sha512":"88276152ee25891d16e7b3b28a9b42cbd48d97e1a7d94c1bf5354612603868d5d537d2ba01a4e2f184e6dc6a492b67619d6a7c02da992ad604f7d0abef27a7a1","ssdeep":"768:OaOFhhRDUHahpROfRys3LzQRo4TYYyDMFWPKQ:OaOFnRrRURtzQy4ISWiQ","tlshash":"b923e7833350492a49ed86dc74692a03a336530e20fe309d7b8ce9f25559e0f527bb7e","size":46104,"data":"","first_seen":"2023-11-10T23:20:50Z","last_seen":"2026-01-03T14:17:01.401373Z","times_seen":11869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/p/action/146000783.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"13.107.21.200","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T01:57:31.651154Z","times_seen":14815976,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-lre.refinance.enhancedrefinow.com/manifest.d7f9016d0e5da5649c5f.js","fqdn":"static-lre.refinance.enhancedrefinow.com","domain":"enhancedrefinow.com","tld":"com"},"ip":{"addr":"104.18.4.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab05865229c4be0e25398c314b00a787","sha1":"ffabd971a1d77d782aec1370f52e8f1d83769c82","sha256":"a261d93839339ffe4e77dead49be5380abb6b61fdbd67d735e01ccd17bae918f","sha512":"b3880bd9c6fa94e0e6345668dcb60f3976847aa894b7822fdb3193b2ecc3717bb90c4e981aafd82164efafa1f1ff235363802fb0f12410a752b1e2eedd76d652","ssdeep":"384:VkpQ49wHRasQ0JiPocrIkRTBymqHr2ntjw:WpQ49QTxwPocrbimqHrstjw","tlshash":"1f42d8eeb76c71b302a724e8883f5552e1732516000d84a0d611d2e6acbdbc9d57bff8","size":12636,"data":"","first_seen":"2023-11-15T15:41:45Z","last_seen":"2023-12-10T17:57:27Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","fqdn":"money.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"280e199c65ca1e2edebe9be82aa0d129","sha1":"0705c43fc9e588d9d39fcc5a93aa84bd5370eb37","sha256":"4eb2645c75b71ee7ffc414de8d2d0891c100ab1ee521f4abe230de015cc43fa4","sha512":"a371a74490d3ecc80973eb628755cf3c7778427d6a4eb1e1327bbff26ea1b93ecd49b017dbd4806b1ac5ebb7cf3c324844a47fea13210026ace6e398606d741a","ssdeep":"","tlshash":"8cd0a7391da6c0351f77064f287bdf5c6d985458dd54e14640b8dd088d60f9508a55ec","size":239,"data":"","first_seen":"2023-03-26T13:16:58Z","last_seen":"2024-09-19T20:13:27.556698Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ca2d5159edcf9d277c901fc61767337","sha1":"324ae4f0e4d6e89adbb0d38ccf6e1304fe3eece2","sha256":"5cd314022e7dfc4f88f29e1e9749888925460c8d37cfa9379ca161cfbbe37aeb","sha512":"8cc4e1abe2f3d7573e04a76ea8551cb0cc8fb9528097f824b134279a2aa8d5062e16b72f0e1a34185357250065e197b42578d49818e8631d4cc046d572d10170","ssdeep":"","tlshash":"75f0e2c6e84be1d308694e03662cec3547eeaf30757b71826a1cf21d06be5a907814f5","size":458,"data":"","first_seen":"2023-05-11T17:31:45Z","last_seen":"2024-09-19T20:13:27.5678Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-319191520","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"03fdcd9a9aae042005e5f53e183330fe","sha1":"4870732f63ef1ee84320cdb44eaaa3614140af93","sha256":"4bb54c594893757b8558eb72a645dfaf1963440c5194a4f3963e71b72134f8f2","sha512":"2046ced5c0cdacaad19a759d55b6338639fd04e4bd4ebf4674f6aa5297edb974f7dd5985fa4a4fbd9200939d3375dd4d2b5c0dd9b5a68f716394c0b02b02d961","ssdeep":"3072:qcdZAlCIWYVUyO1j0OypDDMv0MWXdXAhA9DfFWkY4X:3fIHVUy4v3WtwhA9DfYq","tlshash":"b724f7d9b383b46a83a3b474503f010bb1bb6d96f84ccc94e189c5d52eb8699417bf6c","size":211177,"data":"","first_seen":"2023-12-07T20:08:35Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-10865694633","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"27bdf417ab917b5252ee1e23b2efeec9","sha1":"2974a9e918d306820eadc1855b084aea313d8d44","sha256":"47f7bb6ad52a0578f746525d79246e664c5c269f8c80c0305c5c8e46c46920e5","sha512":"d8241031c832e11fe70538455caec2a2a46620f49dbe0296ce49dee0f36cb1bf28716a26d89628c376b76a91bfef311436ddd53aa1c9546c9f1301792ebef743","ssdeep":"3072:eHdZAlCIWYVUyO1jrjypDDMv0MWXdXAhA9DfFWkY4X:CfIHVUy4D3WtwhA9DfYq","tlshash":"f324f7d9b383b46a83a3b474503f010bb17b6d96f84ccc94e189c5d52eb8a99417bf6c","size":210678,"data":"","first_seen":"2023-12-07T20:08:35Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script.anura.io/request.js?instance=3439535758\u0026exid=493ea870-6517-5fd7-a943-13c4f47e7245\u0026source=affl_everflow_qc-mon_143_809\u0026campaign=2\u0026645838960587","fqdn":"script.anura.io","domain":"anura.io","tld":"io"},"ip":{"addr":"3.10.186.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"15f51890083306fc58cac543b29621b9","sha1":"b9ce10a3cf27103c2fcc5ce505ae14abd0bbef0f","sha256":"afae8a486b0ddb0b77ce3b46da9798cb7a924b0c4181be14db485909a57f07a6","sha512":"3936bc2c39ebd47ba9be184d5bba89a1084f1b2266d25515256b3b8325777f4b5e8a36e1c8133ac4bc38507a5db3697a0c9d76fe6fad194f2e5ad8bb31449695","ssdeep":"768:GknpbSzHCwvS0X37WBk2zwXrVglGwnqa6MQzGEVUCb8CohAWen3i:GubSLNWeQorO5nqa6MQzGEVUCbGAHS","tlshash":"1643d88b7662f001196211e9257f050ff3ba1ab9985c1080d7f5e4f5bcb1a5f8a3bb8d","size":55844,"data":"","first_seen":"2023-12-07T20:08:35Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-cdn.deviceatlas.com/dacs.js","fqdn":"cs-cdn.deviceatlas.com","domain":"deviceatlas.com","tld":"com"},"ip":{"addr":"52.58.191.183","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"610a4ab640dd5cfa6750aa2623357f51","sha1":"6f425451f0dffa8b2a418857da82c5d28e2db9e8","sha256":"fe49fc14b70cfc4f3edbc08e58087ca0f6e948a953c3eaeabdc7e78f512e5a22","sha512":"1ce2c2d9b3e89175961c1cf2798ade43e89e53cbc8c2318fdd68c96f79e162f0a81614627219b18cbd8bfe5ec2ac6af1cf5dfb5ac33daa99ff919aba139c0f25","ssdeep":"384:Fv6oZby61loUBRL0W4/y9mImAEH+T6T11+4QUbyHZKqr:Vxhy6RFowQ1+DkW","tlshash":"4fa2734871a2b89a03d322f9506f410af2bb597d246eb454c7e2dcd1be398de4133f69","size":21909,"data":"","first_seen":"2023-11-09T19:54:48Z","last_seen":"2024-08-20T20:14:31.890714Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"51f5d8192cd24bafc246831cc82d8299","sha1":"22ab7d0a33db6eb45f4aa19c8fd67704e6682a5d","sha256":"5fa0e3d2a47c1ddb28027ab5cf2c8ccbdf6d0b8d3c05fad9113817efd08afa4f","sha512":"94441ec15bf70cd082df803db29fc378f131dfb13c964e2038520d5164bf55e4d5d3d61edae74474cef79db5800117ff753dfbc094785f9a723c9f1875a99d80","ssdeep":"","tlshash":"b7e0617b284684341be929fd33b9df4a7b5a33901071c257bdcd44062365e93c654bec","size":417,"data":"","first_seen":"2023-03-26T13:16:58Z","last_seen":"2024-09-19T20:13:27.570894Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e451ef8df4c33b515475ac8cd3a74941","sha1":"61d9758731d8a5cff6ed60c4ce5983e463a9d5ca","sha256":"b2c0f15102fda61a2edcfcf5d995ee39d9b248d100eb6d06e0b92b82c4369c42","sha512":"bcf77f879b762c47481a4aae13e9f00d59ad49ce0fcb132448d2790c3e49adba38dc71de0e557d0b3815f48c2234f41fc4e60fe2d53f0acd36669d04025874e4","ssdeep":"","tlshash":"adf026dde145906593c4ac79153fcd587403305dc409dd79d14bcd0c5e6c7db40a48cd","size":543,"data":"","first_seen":"2023-03-26T13:16:58Z","last_seen":"2024-09-19T20:13:27.574772Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d07d98b97154701a99faef3fa639fb02","sha1":"1e79f33e4ac6e24c09350babd9a65a70debc7a5b","sha256":"517d26aac757304b7e1461562acad2c6b49585ed2e7be78d197e11a39763d555","sha512":"e3b06e9e2430b42088c669ef914c5013a81294aeb3efbca422adde6d06fc5dc489c0b990fe7aa706017aa1edefdc6bef1bdd34781c8fcc9021ef50d62fecf2c3","ssdeep":"","tlshash":"aea02288c002302082232bf02ccb08ec0c300030a0003080ec0880c088b030f080beec","size":64,"data":"","first_seen":"2023-03-26T08:07:59Z","last_seen":"2026-02-03T00:41:02.712261Z","times_seen":659,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.redditstatic.com/ads/pixel.js","fqdn":"www.redditstatic.com","domain":"redditstatic.com","tld":"com"},"ip":{"addr":"151.101.193.140","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"78b6c68984a6ce5b3fcac1c6a9cad00c","sha1":"02e1d366a17506cea8adfe5a15949aca89719a02","sha256":"e803e774c7b59fe74f71ed93acaa875cf9a99947ff8ed7615cd0c93c1667250f","sha512":"b58674b36271f19ca88aeccb87fb818bbd6549425904fbff63d53ae84f29ae0cab021b74abbaee6ff2f7e8b7f11e0e23b7e523f2dd394f6487a402f28dbc650e","ssdeep":"384:xJi5iukbQbBfIJXvBP2w2Ig4YWrECIFeOV0rT8AevQ97sEebOpD/u5l1XvYvHjcE:xJiiusQ1HhCIFqrTSO75eIGvi","tlshash":"9fb219c9b2e56099d78a35f4177fb04775b7b96709fc0080c49888e21ee4d8a2677b3d","size":23777,"data":"","first_seen":"2023-06-15T23:22:15Z","last_seen":"2025-07-02T08:18:27.372616Z","times_seen":4081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.revjet.com/analytics?acu=6680","fqdn":"ads.revjet.com","domain":"revjet.com","tld":"com"},"ip":{"addr":"65.21.20.219","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"26ec352468322f70910e03feb9b8b8fb","sha1":"18878e8adcd809ad7a4850c8698efd24b22c04e5","sha256":"2d84cdbfaf9b2bc0ba30bc5f67e45d03b265b52c3cfe24353e09175b1fb0fdfb","sha512":"9b0d180ab85748c8e16701d2ab1603c9be6aaef8e481574d3b35152f9f134e66c07a4620101e23044c1a07c458b7aa02cfac1474089e44ba262eec85283aa0bc","ssdeep":"384:S7NAWyKtqOLyN59yqK+VDSvNjHwAcOOStnW/np:S5w0sq9+5S1LwARFmp","tlshash":"d892d68cba65b426876330b1617f560f723ba46fb884c8a4a184d8e17c7496d427bf6c","size":19476,"data":"","first_seen":"2023-03-12T09:30:56Z","last_seen":"2025-11-04T04:39:00.128265Z","times_seen":729,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a493268deb7794088fdef0eeb2ba1de0","sha1":"c9ab54357ed4a1f96091e4859e5e11165b383e8d","sha256":"a43f8a07c89161e2d9696f0f1bbb3875fda84f47ed8ea7fedf6ec70465251572","sha512":"8532dad4e47cbfc5ef39905f1a2c87c4354fd4b82b860348353fe398223caaa36aa7455e83b47aa6a75e1d7ef0bb6796af089aa78b8e44e5fc6c2f1f9ea19c00","ssdeep":"","tlshash":"1fd0228d150a0c31d19b1f420b7fb800a25d3225a0f014302e0a33094320907da64414","size":197,"data":"","first_seen":"2023-05-11T17:31:44Z","last_seen":"2024-09-19T20:13:27.555496Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-320492720","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c80d74d2793072492a762ae5bbd99ba6","sha1":"19a8f876c8146291e11983500ae3764c98d2fd2f","sha256":"ea50c994accd65ab7fa57e1cd37a81072400e89fc32937766a1f5696c968a66a","sha512":"1e2fd8833a300255ec56a3e6750e5862d47842ee96b0b834370de60e31a1cdedbfd88789b35f04a269b41810ecb6acf699758dc24340fcbea7124ef0ee51ea91","ssdeep":"3072:kcdZAlCIWYVUyO1jU6ypDDMv0MWXdXAhA9DfFWkY4X:NfIHVUy4H3WtwhA9DfYq","tlshash":"1a24f7d9b383b46a82a3b474503f010bb1bb6d96f84ccc94e189c5d52eb8699417bf7c","size":211763,"data":"","first_seen":"2023-12-07T20:08:35Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-refinance.enhancedrefinow.com/pixel-616e834028d94a75ecaf.js","fqdn":"cdn-refinance.enhancedrefinow.com","domain":"enhancedrefinow.com","tld":"com"},"ip":{"addr":"104.18.4.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"725ec28cfe869b33faa17168c8edda5b","sha1":"be7280685ddccc0d7fd14728407f2f23e0f63cd0","sha256":"0a099c572e6793ac14cd77cb23fbcb1184f9b0e98ee11d0b8bd91f07ca5c35cb","sha512":"0c9b8894eac575d926a98154dfb17ff9e70aec7c1ea86d104145b5b6aebac30c77d403859f03051ca96a251d78465631a946258839ba6c2da83d4865a5f18ee4","ssdeep":"1536:QUaayP8kvtbA1TdHyhgHPTjJFS8R9xUHxKTEqEayEnBT3BTbGFcTE+XBT7BTsBTW:QUazPTAFDlJF5Wi5tA1o9","tlshash":"35e36458368ae5f5566370a9b03bdb10b262362038a9dd00ccded4a47d39daede21f35","size":153814,"data":"","first_seen":"2023-12-06T00:34:34Z","last_seen":"2024-08-20T16:37:43.830068Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb2ce45397d04da684bfbfc83bc8f3ad","sha1":"610a2fcbb3bc06efef2e07f11584b68568caeea5","sha256":"c6b100b14c1db0c481b7abed90f6a8cf258651bc86e32d00e5702da7a9f2d79f","sha512":"0929a681dc5dfef4581bfddbf53fe890ce53340b66407d54bf3ae4bcd9f8eb5d9e2c1a6855c63465c155221e65f7f5b81890fa4340c5bd7fcebc0fce324a15b6","ssdeep":"","tlshash":"65d0228c154a0c30c2ab1f820b7fb400a218332090f008312e0b33094320907e294924","size":197,"data":"","first_seen":"2023-05-11T17:31:45Z","last_seen":"2024-09-19T20:13:27.567203Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.datadoghq-browser-agent.com/datadog-rum-v3.js","fqdn":"www.datadoghq-browser-agent.com","domain":"datadoghq-browser-agent.com","tld":"com"},"ip":{"addr":"54.230.111.221","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"647fda9a4d3d74344732d76cf1fff47c","sha1":"01720d421ce3373f1a1958a1d85edfae5ab5f442","sha256":"4375ebb4771e6dbb66555214b78781f96a3f6fc43f26b6e9acc4a4751551706b","sha512":"7a3c35cb75c6387a8c4f4359287cdad42c5722b7c1362c8189f8ef3d36f1f7642453ca830bf7b315f79947b384034d216e165b5b8b4f79a7596db760ceb86cad","ssdeep":"1536:yHOG/ZzSpabEJ1No/5612iRFDQ+0WVN83fIXDVeAr0tRoBAb3KrFgQn:wPIswXDVeA5Ab6rrn","tlshash":"2bb3e5dcf6c2b07517e33475516f260ab33a2954784a80a4e27ad1d53cb868ea237f7c","size":117677,"data":"","first_seen":"2023-03-07T13:55:13Z","last_seen":"2026-05-07T22:56:41.129175Z","times_seen":1670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"883283af89b92923b7ce78ecaaeaaba6","sha1":"988fd393a2358008bbec5c9ffbd1e1bef17599ec","sha256":"d5a5210319d9ce7b18c12ba56bd37be8ebad434ec751a7cbf62ee6ceb456a569","sha512":"e7032dad238dd5387aff57bed6dc457728a04dbecaa0f774134215821c603782922e06453ff49b79ed5c7a737f7ab1fee1dbcacfe344ecefafea8eae8931df0d","ssdeep":"","tlshash":"1111cbd66a4788f04dc90e6f2129ab28b1183238f874e4a2728ccf2327c36a52846275","size":853,"data":"","first_seen":"2023-05-11T17:31:44Z","last_seen":"2024-09-19T20:13:27.56202Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","fqdn":"money.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"168a579b553c8fdd0bba45d0f042e4e3","sha1":"7e997ca5bef149bf034f48267b32d7a492971b87","sha256":"44adbbb1f0559b7355bc944d224ad2d4859b8cf39d478db1a5471649a1eda8d7","sha512":"f5f3665a1f27918d625b38655a3ff33de3bc7c0f235660e8d098f0c1cf03b6cb3fd5d2f2546590955fbd41208a8fd32b634ae2ba175d39ddf37f3f147a4d3c93","ssdeep":"","tlshash":"34f0786a0ca3b13245b424396ab3e22e65b3e0173425d48435ccc9087fb5ff30b25b48","size":599,"data":"","first_seen":"2024-08-20T16:26:25.684098Z","last_seen":"2024-08-20T16:26:25.684098Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","fqdn":"money.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"29a170473b2e42f3e8abc6c90005d365","sha1":"0e73b61e4a0fde52b9a80cd42115f55a489adcd8","sha256":"fdca11a7b608f08c2885713cdfac98f6db05879a753fab63e69e050d0180fe07","sha512":"4e0ea808a3041542c31a904f22b29733006a4db9b1182872ec3a493ba042cfc8e6dd784910dae6373ffa8023cfd7c2c62186ceb6f676022033c5d5b0b8312e46","ssdeep":"","tlshash":"6911cbee14de9535164366750a3f8909247b200b2caa3a91bc7c43d83f58a7d20aba88","size":1012,"data":"","first_seen":"2023-11-15T15:41:45Z","last_seen":"2024-08-20T19:28:13.024899Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"96397ea4add0bd55c9e6a8bb82dd9336","sha1":"3467535f371c39973ccd249e0a63535b7df27666","sha256":"5a0fc340c17b356e22140a5e162ae2fcd5979d64af9d99b7d15e52daafbff4ee","sha512":"c1ddcc30a21737c39b70842e862e8c86d9ae0edd623849372b2c8ee872d2cdd286d14eb73ba998d7d49a046952b8c1da152a4194bbe60f528eee4a42754731cd","ssdeep":"","tlshash":"09e061ed1c9cb0982fa51935e13fd95ab34f126650414742d646cc9c1d389674505d48","size":376,"data":"","first_seen":"2023-05-11T17:31:44Z","last_seen":"2024-08-21T08:12:54.147701Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b67dd64cff5f517bcb984779e825646a","sha1":"5859c78aceac531afac0c2e41c83075e86a22407","sha256":"e19cfc6f666ced2c792c99db05035bbd99a6b48a44bb83c848e7e910a0fde5ce","sha512":"bc2f2babb91a0f940570f44e64dfc4dccc8f3f0a61c0df26eae95895befa967d5aac6b1b23d1cc1a3c37cae63fb939ceb05eecd4b177335bb1a00f3c323c8b97","ssdeep":"","tlshash":"ebf05cadaf18a0065145982a0bafed153157704c5d03cd6a8a4fc8d85d2c777211fd8e","size":429,"data":"","first_seen":"2023-05-11T17:31:44Z","last_seen":"2024-09-19T20:13:27.557931Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8079758ba6a78d277502bd77d0d2810f","sha1":"10e90523f06ca6f3abc7781de64e8e10e907815b","sha256":"21c4c591f2f5fc722cfe3bde9f800996f9107e6ca0cc4cd813e80def50c336d8","sha512":"aa43ba5a1af6097b35dee6fa52d749a6862459eb742d70e9a3d5c1ed606f69e9ffe7d093487eb8b6b32c66abd33159256e04b779f79107513bfac841ec8332fa","ssdeep":"","tlshash":"d2e06ac135dc0270d0720575f1e34d4c3a59711cf54e1ee4df2d8084492d6d3480914c","size":380,"data":"","first_seen":"2023-05-11T17:31:45Z","last_seen":"2024-09-19T20:13:27.572031Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-320492720\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf72064265b057dbf9b1453eb7754a6e","sha1":"dcffaa782341af899a956b4701af4ba63a47ec24","sha256":"c72911770606f6fb881ce756013d5950855f9b36bcb07ce2b945234289350d11","sha512":"0856240df1a3aab85b254a1343f55cf9300c37f9812dd699ca9d8640f1b57d1a8a1a6e5e607bd9d69fd8d2668abac719715d613674b82b1b1b8414991ccc7bfd","ssdeep":"3072:kcdZAlCIWYVUyO1jUSypDDMv0MWXdXAhA9DfFWk14w:NfIHVUy4x3WtwhA9DfYO","tlshash":"4c24f7d9b383b46a82a3b474503f010bb1bb6d96f84ccc94e189c5d52eb8699417bf7c","size":211793,"data":"","first_seen":"2023-12-07T20:08:36Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/wi/ytc.js","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.252","port":443,"asn":203220,"as":"Yahoo! UK Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c6ed25dce803fd84288922b8928409e","sha1":"3ccc10546ae12f160bacac1e9e422af091ea4a41","sha256":"480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91","sha512":"fe9265d2e6ea4acb7e0a87e08bedfaf48bcbad62bb7a86e73f9ae21c8437af3334d2a9733c6bc47a12bbf54f97ec79271cb5300f90231614f407599d1b4c05e5","ssdeep":"384:s40C/Y3uOOpp9W89rzOv4m8Avx2kjEhNgyyuek:VjOOp281UsAlErPyud","tlshash":"3982c748b3d5f0a103e2a1b1613fa90b7675193d1c6e9560b212c7843c7dacb9236f7d","size":18187,"data":"","first_seen":"2023-06-26T11:33:35Z","last_seen":"2024-08-29T17:29:21.078502Z","times_seen":6264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","fqdn":"money.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2591701979e0019cd61ddf9029401dab","sha1":"6655cc987d38dad83d84d737f72e1cabf96be44d","sha256":"8a0402c16f0d25083536e21b0a45df7e79458641099af490b6b2053aafb58821","sha512":"d7d7b1e01364249695abe31d43bb54a0848ba71eed48c665590910c1b1fda71f03044f455c6aac314f8d8b73098e5f9be8d132269bcefd705dd177baec90d04b","ssdeep":"192:81evW5IyWxhLyMXaIk2ZKsx1Tq+8gR4yMFxB74AXjhhbOEkRDZeZ5:81evoWxhmMXa30QgVMFFvyEkVZeZ5","tlshash":"9312860f6e016d39475b2ba1396b6c28a438fb1bb180cd588c6f4d6d2df6af78423191","size":9444,"data":"","first_seen":"2024-08-20T16:26:25.688881Z","last_seen":"2024-08-20T16:26:25.688881Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-lre.refinance.enhancedrefinow.com/vendor.67a1d66e4ad0509192e9.js","fqdn":"static-lre.refinance.enhancedrefinow.com","domain":"enhancedrefinow.com","tld":"com"},"ip":{"addr":"104.18.4.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e80b2b8d6f895c55fb9aefe511479b6","sha1":"0384d450cbefee60914a876a238e95570aa1eb59","sha256":"e314c1e197eb15609d015265d6099200f7cfa6cb952e71af9fe891251570d67d","sha512":"b338dade93d0104b7932a05a0cb91fd254e16bda3d956f8504344e7a0791c0259a102eaf0cf13f1eb0129d642e7d16decaf44bc55393f245c7a50e8102f5404f","ssdeep":"12288:bBkPWgIESgLXkbjiagUk2HhVXneTUnny3wtIXxnGMPGTqZ0iZbsosu:1wWg5SgLUbjiagU4Uy80xn/QqSiyon","tlshash":"bed419c87292f0a143e350e6403f4406f23a6a29744e9994f3a5edd67cb994f607bf78","size":618569,"data":"","first_seen":"2023-08-24T15:19:24Z","last_seen":"2024-08-21T08:12:54.152414Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b968bb49597418ec6bf81800f25e4f5b","sha1":"68c16a530975b926e2ae34938af4068a2905e820","sha256":"eed94d8bc522fecac47a2ad784db6499b5b188041684272f1aa9e748157a1bb2","sha512":"a2e674504bda58db1f970a0fca24f561be67a0a10a3fa3ecfa7f5fc2215cff929bb63db9dfb0e4d7bd1e1dc7ef9dc32868f0292aa10df86f1721c9911788614d","ssdeep":"","tlshash":"0ac08cc9210a8e7186eb2f008b3fb100b002335094f11831090a23045120e07eb08860","size":153,"data":"","first_seen":"2023-03-26T13:16:58Z","last_seen":"2024-09-19T20:13:27.573805Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/320492720/?random=1701976106986\u0026cv=11\u0026fst=1701976106986\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be3bt0\u0026gcd=11l1l1l1l1\u0026dma_cps=sypham\u0026dma=1\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_809%26pkey1%3D809%26pkey2%3D2%26pkey3%3D3e601e8a03ad4f64ada14990f917fba6%26pkey%3D6608d798eb0b49089aa75baddb8f143c%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D809%26_ef_transaction_id%3D3e601e8a03ad4f64ada14990f917fba6\u0026label=xSwBCJum9PsCELCp6ZgB\u0026hn=www.google.com\u0026frm=0\u0026tiba=QuickenCompare%20Money%20-%20QUESTIONS\u0026gtm_ee=1\u0026auid=1520612321.1701976107\u0026data=event%3Dconversion\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026rfmt=3\u0026fmt=4","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad8b6f08655797587cdec719a94efe59","sha1":"182adf5a140796f81e930649d05654dbf22fd5b7","sha256":"77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6","sha512":"519a8ea7ce2ed8661cc72d58bc0c02e721ef8e64608f4d2e26a56a970d43ebbf21bdf579c543ee1dfd667da8f87467c60111a3e6d246d435a5c2d066ab88efa3","ssdeep":"","tlshash":"0890045d30d14535cc3fd0355105157150f501075c5f117c1430430035115434c000f3","size":43,"data":"","first_seen":"2023-03-07T01:03:30Z","last_seen":"2026-05-02T15:05:55.10961Z","times_seen":10172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-lre.refinance.enhancedrefinow.com/main.93e3cac8409e105ab51a.js","fqdn":"static-lre.refinance.enhancedrefinow.com","domain":"enhancedrefinow.com","tld":"com"},"ip":{"addr":"104.18.4.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dec41562bede99a23e8a683bb0b2c7a7","sha1":"86106751c4e52e628127241dcf062bb1b6f08403","sha256":"8695c4e2c1b44b9e56e54ae8b5a75311ed905cfd10d262e443ab9df4312a2ac2","sha512":"9a36dd3937f4ae303145c81115a3fe878a4d394b8269a8523391adbacfdc75965decbcae7acdabfc3926c27749a386df02d9e4fc04aa00d67c268ae7c1d62a68","ssdeep":"24576:dv2xqleIFB9JvpcNiF/YIDKjEqcw1I/jEPxabzJoEbUlhu/yjxYr:dvmqleIFB9JvpcNiF/YIDKjEqcw1I/jB","tlshash":"4a05d888fea6e86c01bb446b507f191af2287f0985788810e575dddc74a4bcf753ab38","size":810885,"data":"","first_seen":"2023-11-15T15:41:45Z","last_seen":"2024-08-20T19:28:13.021812Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4018d89d46acbb34fa9c74d9d001cdf","sha1":"abbd4922b4b0c42f23d2788e72a6b1560fc8e2a9","sha256":"cea6a6cdebdac3a6b465c00fd67ed575acc816184ec3df4f75115da18e9319d0","sha512":"2d0c0ba3ef387060f1119462eccf4f0b4c3e33f4eb669971c4bc9566c94808df6b371aba269092212cbdb5bce52d6c5973e69fb37b8f36e5a0b7ab91ca23eefe","ssdeep":"","tlshash":"c2e02db52c083d631ba01fb1507b930f3446220430aa9b40ddaca84032630b7802fa88","size":328,"data":"","first_seen":"2023-03-26T13:16:58Z","last_seen":"2024-09-19T20:13:27.574294Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"aed8ad1460119edd6f3ae9e3da680f06","sha1":"3a365f816045964b7a0d15fd6fa8cafe890f0cad","sha256":"6bf537957ed6e2d65646624d1b32df206e345add7b3bda73cd786204d119f777","sha512":"b5d3b9e8a564b9c29aef1abaeb6ba6171755811a3cf64764f3a5b16ee747250cf8e282cd4dbd40186609e7a1dbb62026696773eb029b026d0716a90b0c968859","ssdeep":"","tlshash":"39a012000050e45a859bdb048b001050526401c25320078b081206184248811c141b3e","size":79,"data":"","first_seen":"2023-05-11T17:31:44Z","last_seen":"2024-09-19T20:13:27.564067Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pix.revjet.com/track/pd3521?__noscript=false\u0026__cbf=revjet.callbacks.cb1701976106653\u0026location=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_809%26pkey1%3D809%26pkey2%3D2%26pkey3%3D3e601e8a03ad4f64ada14990f917fba6%26pkey%3D6608d798eb0b49089aa75baddb8f143c%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D809%26_ef_transaction_id%3D3e601e8a03ad4f64ada14990f917fba6\u0026referrer=\u0026creditProfile=\u0026firstMortgageBalance=\u0026firstMortgageInterestRate=\u0026hasFHALoan=\u0026homeValue=\u0026loanToValue=\u0026propertyCity=\u0026propertyDescription=\u0026propertyState=\u0026propertyZipCode=\u0026rateType=\u0026typeOfLoan=\u0026loanRefiPurpose=","fqdn":"pix.revjet.com","domain":"revjet.com","tld":"com"},"ip":{"addr":"95.217.105.250","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6ce8dc63925c8d5f0d57d6ce42f43e1","sha1":"a89ad2e8361ef3867b5ecee557acae6c5447b448","sha256":"bceae18f848b9d727a55d73fc08a3e83e8e2debf8e774bc60cb45b8ae4b4e481","sha512":"dd6e5be7de7a6e7bea4143f4355552184318d576f00e56ab4416e13ba38d26eb054a75bd310a71e062d9daecc838234b91f492264bcaa51b645e2139069acb5b","ssdeep":"","tlshash":"909004005557d0317d10d711541d431f110dc31cc574417575347f774d10455d7c0540","size":46,"data":"","first_seen":"2023-12-07T20:08:36Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a44325.actonservice.com/cdnr/forpci43/acton/bn/tracker/44325","fqdn":"a44325.actonservice.com","domain":"actonservice.com","tld":"com"},"ip":{"addr":"207.189.124.43","port":443,"asn":13649,"as":"ASN-VINS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d32293f4e34e7342102ca2ac51d01301","sha1":"beff67b596539668798cec2270dcea508c43b82e","sha256":"4cceda7cf27c7acc53c753e884b47d3b981448fe29d600e87748343bbf1e6ff1","sha512":"92ff0feb040f4bcf712e3bf96ef88dff1893578b98b876d599746362d12fabf74516796f229db56aafd44c9c990ea69e6af21ac88269d20f115e9eef915c234a","ssdeep":"96:quTE/nCwi7DVsJ5nzLwivnqLwIUXp5lT6:JTE//I+Dw8LIqU","tlshash":"8ba1a68c72ae0e21d1f33787bf7e8f8e7bfd229234599588d45e88d00765c61207aa71","size":4850,"data":"","first_seen":"2023-12-07T20:08:36Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a81d387d85e55dd05dbfc30cd52bc028","sha1":"06edfc684e43599690f4ca58f9f58bbb18d8f008","sha256":"94d35cc88496407b118a1e35bfe7ce15de8c8146a5a740f5ef299cd0f650b611","sha512":"e366756043e075fb53ffca4e77c1a633a999f9c63b5c544246995815f145bf9502ef0f4c57815c3b57bab531c486499c82c306902b5176a5b682250519411973","ssdeep":"","tlshash":"cbe061fd1c98b09d2fa55935e13fe95ab34b06a650414741da46cc9c1d389774505d84","size":378,"data":"","first_seen":"2023-05-11T17:31:45Z","last_seen":"2024-08-21T08:12:54.158989Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"18f6c5915df0ee9e990a9ed34e7e4c9e","sha1":"12ca6d04aca4a6c2d3c35d7bb3e0b17ee2b40eaf","sha256":"8a68328caf368d532d46b3f92810fc12cca5aa75b37860bd64de60c540ad8844","sha512":"6799e84485b804fa66b1aa37ebd1dd056dcc2693706a425419aa99ced9cbc87ba0500f2a3bf01dd5bd2fffa722f8f151b13dbebaeab8af5b46accc76aa73626d","ssdeep":"","tlshash":"a6a011888c02b0a082232ae028eae8ac08a02020a000a080e88888800aa038a0c0bea8","size":81,"data":"","first_seen":"2023-03-26T08:07:59Z","last_seen":"2026-02-03T00:41:02.728641Z","times_seen":661,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0efa13d18e21e1c280569064dccd2d9f","sha1":"0656901371cc259791bd253dc8835dc44b0575fd","sha256":"69eb3111ab6500088bcc0f5cb043f452bd7b7801bdcd7b0e478c2fc454fdba0a","sha512":"c2a8b7bd626179f2de81621b288bdcd7bce4f06a9511031f0fb9786650bcf5cb7af87539efcc195964f038788d84fc4bc77c00df6317048d38db8eb715a31210","ssdeep":"","tlshash":"1240000000000000000030c0000000000000000000000c000300000000000000000000","size":7,"data":"","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-05-08T01:24:41.508361Z","times_seen":100373,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"bc1d3a136e6f54eff73adaf5669b9be3","sha1":"1a0f53998a4dd4c3f5e9a6fbadc64d21046d1295","sha256":"9aabfd165cfb96fc5e170862e4fd9c90cfa2a5705af401617c836f152398fce1","sha512":"8ee80ff0951e9ad9d691b55512e6260db1cca513173006de59376f7efe72e57f07b231591e456ff9a25fab549e113f03af2c3cc70fed354d03cf503f4e4bbfb4","ssdeep":"","tlshash":"184000000000000000300000000000000000030000000000000000000000000c0030c0","size":6,"data":"","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-05-08T01:24:41.508957Z","times_seen":100416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a0bf95a38cb701564c34134431943259","sha1":"0187395c6d7697a45f0464905d967396748b2194","sha256":"124207d84bdc8a107cbcc04212a091e85157e09d7bf208f7afb4839498fef083","sha512":"d5060e5b2d8370e3c8ec336f5b957d73d4dfe43e55244e46bb32d1060dddb7023d1aa46bc3561ba86146035200748360eb19b7852038ef2bec925f39d3313310","ssdeep":"","tlshash":"804000000000000000300000000300c00000000000000000000000000000000c0030cc","size":7,"data":"","first_seen":"2023-03-07T12:56:09Z","last_seen":"2026-05-08T01:24:41.515536Z","times_seen":100294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"308065b5078a49f986fc3c9f9b66e5d3","sha1":"be1628c3c7d88ddfb243f216545e780b98cc4386","sha256":"fdfe0993e6e9e9917554bb95b1137af5870146fd38da5f13bea1b530ac05b296","sha512":"7c55327b79cd297b8b6984212dedc5066f88a06d4ab528bd982ea2fdb6f55468c6cd77fc9b27ab12346123b6c84aa573a8719eb4e3435bd01847fe20790a3f1c","ssdeep":"","tlshash":"214000c03000000000000c000cc00300000000000000000000c00030000030c0c00000","size":7,"data":"","first_seen":"2023-03-07T12:56:09Z","last_seen":"2026-05-08T01:24:41.509535Z","times_seen":105393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"166248a6129a1e4370d20adc2d4c23f3","sha1":"0fe0bb445f51fad57f3fc4115d7c66cf18545107","sha256":"b7d082ee12e91b756ea22e8513b8594eebcf5d39fab813da3cb55794dc888ad7","sha512":"ec7f23faf755a87ffa0e75a4cb03a07f23768e9691d7965d0fc060797aabdeaba450df5c416656b1fe6f68ec9360a43e4d3190b7059a82a77acf5b54012a4c11","ssdeep":"","tlshash":"5e4000c000000000000000000cc00000000000000000000000c0003000000000c00000","size":6,"data":"","first_seen":"2023-03-07T12:56:09Z","last_seen":"2026-05-08T01:24:41.507769Z","times_seen":105083,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"babd0daf38a8ba8a6c33c4d1d354eb56","sha1":"c64904f4f0bdb995912fdd1667d538cff4dee6e2","sha256":"ce519cccc38cf22bd82579910ddfdcb00f5726373dae5af87048b157303e8f27","sha512":"0c92e118e967aa1aa38876eb0d13f1864b4e9b6205673454ba516e6a5ef56307e8f08d74a076290c8201f35818c8b43f6dafcb7b7e8ce293e4a2166c0ee7a8d5","ssdeep":"","tlshash":"d64000030000000300000000000030000000000000000c000000000000000000000000","size":6,"data":"","first_seen":"2023-03-07T12:56:09Z","last_seen":"2026-05-08T01:24:41.510069Z","times_seen":100277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"www.lmbahsj2.com/29PD1BG/83KB7S/?source_id=143\u0026sub1=2\u0026sub2=6608d798eb0b49089aa75baddb8f143c","fqdn":"www.lmbahsj2.com","domain":"lmbahsj2.com","tld":"com"},"ip":{"addr":"35.201.76.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-07T19:08:20.778Z","timestamp":1701976100778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmbahsj2.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 28 Apr 2023 21:05:02 GMT","end":"Mon, 13 May 2024 15:10:13 GMT"},"fingerprint":{"sha1":"19:8A:1C:6D:15:5F:1E:82:A2:B6:F3:E1:A8:82:E4:C5:EE:3C:46:53","sha256":"AD:07:6F:39:EC:9D:DE:5D:01:AE:9F:A4:29:CF:11:44:D6:CD:26:E9:F1:14:4B:91:B7:6B:00:EE:F0:19:48:D4"}}},"request":{"raw":"GET /29PD1BG/83KB7S/?source_id=143\u0026sub1=2\u0026sub2=6608d798eb0b49089aa75baddb8f143c HTTP/1.1\r\nHost: www.lmbahsj2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Thu, 07 Dec 2023 19:08:15 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 340\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model\r\nlocation: https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6\r\nset-cookie: uniqueClick_83KB7S=2256fe4d-4ebf-40bd-abb1-10c297468972:1701976095; Path=/; Expires=Fri, 08 Dec 2023 19:08:15 GMT; Secure; SameSite=None\ntransaction_id=3e601e8a03ad4f64ada14990f917fba6; Path=/; Expires=Wed, 06 Mar 2024 19:08:15 GMT; Secure; SameSite=None\r\nvary: Origin\r\nx-eflow-request-id: 7a1b21de-89b0-4be4-ac4a-dd11e25a161f\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":340,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (338)","md5":"5cf0a48fa4ccad6e61b77732f152da92","sha1":"52e3ef43d919624d39acae6f0859f0187f90fc3f","sha256":"368333f4187cb81b780a775f0d3f3dead288403b5ffd94c052be9ffef21f72f8","sha512":"db1bbc1881e6538e7de685ada20e0bf05668d92e6058e6aca8ec1c6cc94cc9b23e3d4ea1f8d104bf73ed9e60e1994faf96181d1dba6efd953286961b3cc61ada","ssdeep":"","tlshash":"a9e0267b64468f15023892c0b22a98dcb58b536174abd108b3aa6f6e48907eb049283d","first_seen":"2023-12-07T20:08:36Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2279,"timings":{"blocked":1069,"dns":1,"connect":7,"send":0,"wait":137,"receive":1,"ssl":1059},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.quickencompare.com/qc/refi-images/QC-Logo.png","fqdn":"content.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:24.055Z","timestamp":1701976104055,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 20 Feb 2023 00:00:00 GMT","end":"Tue, 20 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:4F:F5:9D:CC:0B:84:6F:19:29:53:3F:57:FA:AF:13:47:78:8C:D4","sha256":"AB:B5:03:98:D9:CB:8B:0F:D6:E0:7B:F4:85:30:EE:45:1C:DE:9E:CE:18:AA:55:47:24:90:A1:18:E4:40:03:EC"}}},"request":{"raw":"GET /qc/refi-images/QC-Logo.png HTTP/1.1\r\nHost: content.quickencompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visitorId=d5a111b1-f2d5-4847-8052-a2447ec05d55; __cf_bm=6a2vUbq8X29F5ft1vNgukoHvMqkNFbBcU6g7w3n1fd4-1701976097-0-AedD0DNg3rBBM/ZoWGMg9iKYhEfDp634iq1N1lDtGMuf+pCNTb1O+DgQhXNTZkSw5sArwOFqgRiyfi3Ix3uS9mg=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Dec 2023 19:08:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 58295\r\nlast-modified: Thu, 23 Nov 2023 14:00:50 GMT\r\nx-amz-server-side-encryption: AES256\r\netag: \"521752a26258e4864b241e2d53ffe6fb\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 660625642e0df86c41275db1ce1ac922.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN54-C1\r\nx-amz-cf-id: U8pU3G3HW7WBe2VyT8NlgJNZtgvXi-MtAZmVk3BVW5dxeJihjEpY1A==\r\ncf-cache-status: HIT\r\nage: 2113\r\nexpires: Thu, 07 Dec 2023 23:08:17 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 831f0e724c5fb51d-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":58295,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1084 x 400, 8-bit/color RGBA, non-interlaced\\012- data","md5":"521752a26258e4864b241e2d53ffe6fb","sha1":"197a15424a4f1def49ad620d2e5efc5fc1629829","sha256":"c361b0d16f182441c533ead38d28a79b93c42473cfb5fbd0f5eebc2e64ea18a5","sha512":"3c702828cd5706dd43706e23fe32115bbce5a79054420bfb03fc0b75d98436e2e21dd0fbbdbcd13267304a81d9468328083b2a3a2c59daf89aa2188cc28ae66b","ssdeep":"","tlshash":"","first_seen":"2023-06-10T03:48:43Z","last_seen":"2023-12-08T15:36:20Z","times_seen":12,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":17,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.quickencompare.com/nmn/logo/qc-financial-control.png","fqdn":"content.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:24.058Z","timestamp":1701976104058,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 20 Feb 2023 00:00:00 GMT","end":"Tue, 20 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:4F:F5:9D:CC:0B:84:6F:19:29:53:3F:57:FA:AF:13:47:78:8C:D4","sha256":"AB:B5:03:98:D9:CB:8B:0F:D6:E0:7B:F4:85:30:EE:45:1C:DE:9E:CE:18:AA:55:47:24:90:A1:18:E4:40:03:EC"}}},"request":{"raw":"GET /nmn/logo/qc-financial-control.png HTTP/1.1\r\nHost: content.quickencompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visitorId=d5a111b1-f2d5-4847-8052-a2447ec05d55; __cf_bm=6a2vUbq8X29F5ft1vNgukoHvMqkNFbBcU6g7w3n1fd4-1701976097-0-AedD0DNg3rBBM/ZoWGMg9iKYhEfDp634iq1N1lDtGMuf+pCNTb1O+DgQhXNTZkSw5sArwOFqgRiyfi3Ix3uS9mg=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Dec 2023 19:08:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 12630\r\nlast-modified: Thu, 23 Nov 2023 14:00:50 GMT\r\nx-amz-server-side-encryption: AES256\r\netag: \"d9164fb30114b13fdb91bd8011b5f71b\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 7f7d86a250c539fe4431535882cf4e4e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN54-C1\r\nx-amz-cf-id: zfxTiOIo3IJzwm1cRVtMH4HPWz4K38uiW_ZFnPNXB5Nj7-eBTUyoLQ==\r\ncf-cache-status: HIT\r\nage: 2113\r\nexpires: Thu, 07 Dec 2023 23:08:17 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 831f0e724c63b51d-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12630,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 281 x 168, 8-bit/color RGBA, non-interlaced\\012- data","md5":"d9164fb30114b13fdb91bd8011b5f71b","sha1":"45307fb107b9e0ec642b98d3b2153467cb00b633","sha256":"442b0856c633c8a41e1566de5aea94873cfa27b85e74e2fb2df4c92b55ab5608","sha512":"3d8cace0608ee48a4b21e3311988aaaac71637cddc8d60b607488b44f47bcf8e17a677954c12e36315f06f32151f1f32706e97839a0d5f8ed366869975066aa4","ssdeep":"384:aw8GzUBaH/MppKTmz+r8qOTauDy1EIXWHEi:L82UBBpKy69OOuDlB","tlshash":"c442c03d602391a71852954be04f024e7d9c3dc00866de93603cfad9d754b37de8a42f","first_seen":"2023-05-11T17:31:45Z","last_seen":"2025-10-23T19:43:06.15733Z","times_seen":128,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":31,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.starfieldtech.com/","fqdn":"ocsp.starfieldtech.com","domain":"starfieldtech.com","tld":"com"},"ip":{"addr":"192.124.249.41","port":0,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-12-07T19:08:24.17126384Z","timestamp":1701976104171,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.starfieldtech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 76\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Sucuri/Cloudproxy\r\nDate: Thu, 07 Dec 2023 19:08:17 GMT\r\nContent-Type: application/ocsp-response\r\nContent-Length: 2149\r\nConnection: keep-alive\r\nX-Sucuri-ID: 19041\r\nContent-Transfer-Encoding: Binary\r\nCache-Control: public, no-transform, must-revalidate\r\nLast-Modified: Thu, 07 Dec 2023 07:56:09 GMT\r\nExpires: Fri, 08 Dec 2023 07:56:09 GMT\r\nETag: \"32956a1ad35804a56d5263848065be8bc4baeac3\"\r\nP3P: CP=\"IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA\"\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":2149,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"4f63e20e6c85c3420ae4d0084f77231b","sha1":"32956a1ad35804a56d5263848065be8bc4baeac3","sha256":"4f6b22b39482307757a9cb879219b6104bb277c1ee487f3a19dfb55bb96e8c0f","sha512":"5b5a30f87ab79f01c97e79c885f0ff6ae89e826ceff1a3df82fec2666636dae147a2b1435fd09e59533eee29ce7dfd4ccb61d8fef8089ffb4e2c858824709ff5","ssdeep":"","tlshash":"cd41e7e56a91b651fb932e802be8c73e4db421a385780d1094a2c121b8b237b0dcd55d","first_seen":"2023-12-07T20:08:36Z","last_seen":"2023-12-07T21:17:59Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/msd8xng.css","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.76.122","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:24.054Z","timestamp":1701976104054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 21 Sep 2023 00:00:00 GMT","end":"Mon, 21 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"42:82:CA:A5:EA:30:8F:60:60:37:2D:24:17:3D:52:62:54:D7:03:5B","sha256":"EF:DB:6C:82:0F:DB:74:FB:4D:DD:04:C5:A2:FF:1B:28:A6:BE:61:EE:CF:AF:10:A2:F7:9F:30:8F:71:44:61:29"}}},"request":{"raw":"GET /msd8xng.css HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css;charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\ncache-control: private, max-age=600, stale-while-revalidate=604800\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\ncontent-length: 680\r\ndate: Thu, 07 Dec 2023 19:08:17 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":680,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (516)","md5":"20203a97a8fb7c1ce2353ecc67ea540d","sha1":"69dd242bcc9927260938d83c99e59453871ebba4","sha256":"56af1865c3c674da77191c0c3f9c9a01789e64b2851675d878cb03b5bc57a353","sha512":"5ecc2c7f8983c2286d7ae2d84a8ef698c84fe7689939d12ca81e1f4a46aad15ca1758f8d3d42a47bf7de515eb426ec4786d57d7322d0fc2672aba7efb02d3118","ssdeep":"","tlshash":"df51afb181458ca3c4d01a72348eb3e4d52e755a36f0d9a64521c8b28c79ef7b311f7a","first_seen":"2023-05-11T17:31:45Z","last_seen":"2024-08-21T08:12:54.094891Z","times_seen":110,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":122,"dns":34,"connect":2,"send":0,"wait":30,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-lre.refinance.enhancedrefinow.com/vendor.67a1d66e4ad0509192e9.js","fqdn":"static-lre.refinance.enhancedrefinow.com","domain":"enhancedrefinow.com","tld":"com"},"ip":{"addr":"104.18.4.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:24.095Z","timestamp":1701976104095,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"enhancedrefinow.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 03 Mar 2023 00:00:00 GMT","end":"Fri, 01 Mar 2024 23:59:59 GMT"},"fingerprint":{"sha1":"CC:38:9A:93:4C:BD:74:FE:30:18:77:1F:80:24:AF:9E:02:FA:AB:56","sha256":"13:EE:41:7B:75:D4:1E:7D:00:43:FB:5F:7A:4F:92:8A:15:67:F5:DE:3C:88:12:3A:5F:B3:2C:4C:1B:9F:50:E3"}}},"request":{"raw":"GET /vendor.67a1d66e4ad0509192e9.js HTTP/1.1\r\nHost: static-lre.refinance.enhancedrefinow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Dec 2023 19:08:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Nov 2023 10:47:04 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\netag: W/\"0e80b2b8d6f895c55fb9aefe511479b6\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5a96272b81254403ef5ef083d36ce62a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN54-C1\r\nx-amz-cf-id: VEL_ZSoR_Lsi5mfBiIbZUYwyJ8gM1-0s3fly79AqbuPeB9p5H3tAVA==\r\ncf-cache-status: HIT\r\nage: 2113\r\nexpires: Thu, 07 Dec 2023 23:08:17 GMT\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=J8I58jEdE723DWoM9yJPwOESdNpGkCXDKFM3d7d54Jo-1701976097-0-ATcG9ZWxPaOA9wKLtBmE1n0n/FvXprnx2Nw0luaWpn7lS7NlOPKM9vb+3nBY1QHEofN3312pQWIcmh6T+9/ceEM=; path=/; expires=Thu, 07-Dec-23 19:38:17 GMT; domain=.enhancedrefinow.com; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 831f0e72a85d0b61-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":197803,"size_decoded":0,"mime_type":"application/javascript","magic":"gzip compressed data, from Unix\\012- data","md5":"ca318eae9ebc93537a732a02e7480171","sha1":"5e1d79ca2ab46dbe389da59faacfed537f20be8f","sha256":"6e1b68716a442691cbddf674a27da4c627a52f33242f144c662872d3cd94a36f","sha512":"986769f2b7b3fcfc48047f961803dbbcce954313b86de89844e9898cf71b42c5f693d6b0934609ada7c79edade2f0f5a09402b968fc35341a8730bf37f70b903","ssdeep":"6144:awCBSMUsfn+P+EX1Et2VEBvIHbeydr0JI1UNs:fCsg2TX1m2mvvPJwt","tlshash":"38141396ba7706a60b2aeb990c683d94d8d9fc610d36e3fb5e2858295f0008bf5dc075","first_seen":"2023-12-07T20:08:36Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":100,"dns":1,"connect":28,"send":0,"wait":13,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-lre.refinance.enhancedrefinow.com/manifest.d7f9016d0e5da5649c5f.js","fqdn":"static-lre.refinance.enhancedrefinow.com","domain":"enhancedrefinow.com","tld":"com"},"ip":{"addr":"104.18.4.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:24.092Z","timestamp":1701976104092,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"enhancedrefinow.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 03 Mar 2023 00:00:00 GMT","end":"Fri, 01 Mar 2024 23:59:59 GMT"},"fingerprint":{"sha1":"CC:38:9A:93:4C:BD:74:FE:30:18:77:1F:80:24:AF:9E:02:FA:AB:56","sha256":"13:EE:41:7B:75:D4:1E:7D:00:43:FB:5F:7A:4F:92:8A:15:67:F5:DE:3C:88:12:3A:5F:B3:2C:4C:1B:9F:50:E3"}}},"request":{"raw":"GET /manifest.d7f9016d0e5da5649c5f.js HTTP/1.1\r\nHost: static-lre.refinance.enhancedrefinow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Dec 2023 19:08:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 13 Nov 2023 19:49:34 GMT\r\netag: W/\"ab05865229c4be0e25398c314b00a787\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: j6xQDrVNaIhrWO44n7p_cS7sPJVO2HTWlWu5NqGBxiq0BcirAWMkGA==\r\ncf-cache-status: HIT\r\nage: 2113\r\nexpires: Thu, 07 Dec 2023 23:08:17 GMT\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=rOXw1A0odcAxVV7b8xvQTMc.9EixAVYuz0.5I8mOwC4-1701976097-0-AZWaIwnFDzZOvck1gea9xPjW0Gt5L0HdeRh24Q3UbOwJa4gd2ZzNeDVHXBWWxCAEuPO7+VIjzCbQ65TWYLg8VHM=; path=/; expires=Thu, 07-Dec-23 19:38:17 GMT; domain=.enhancedrefinow.com; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 831f0e7288420b61-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6886,"size_decoded":0,"mime_type":"application/javascript","magic":"gzip compressed data, from Unix\\012- data","md5":"185ae165419f988556e8f161a8af651e","sha1":"41c9a599d8a852da9f32059bec561e90d1deec42","sha256":"f8be0b0780a89d38c6d43ae2e85f4a75bd8bf7b9850bde0769f57b0831260c1b","sha512":"78f4e133bdd5158f9eb4be22301cad147e1794c944f605fe75dd5d9c1819e61b7f5a3636f5bbfc11191ad201a9efbc15ef18b90b5a7fb12e76fb42f80c910a4e","ssdeep":"96:zTRLYK34LPjGr2Ng5vo21BPa+BNrI7BJW/b+tsbBxRnqTHIcMN7aHrfbXQRyPck+:z1Mw43iP3BcBY/b+tAR6HIFl0XSaw","tlshash":"ece18faee76563d9fc41b6f47d7ac0320e770171639c8b689476e1e1a6f03e322b8944","first_seen":"2023-12-07T20:08:36Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":84,"dns":0,"connect":2,"send":0,"wait":20,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-lre.refinance.enhancedrefinow.com/main.93e3cac8409e105ab51a.js","fqdn":"static-lre.refinance.enhancedrefinow.com","domain":"enhancedrefinow.com","tld":"com"},"ip":{"addr":"104.18.4.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:24.091Z","timestamp":1701976104091,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"enhancedrefinow.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 03 Mar 2023 00:00:00 GMT","end":"Fri, 01 Mar 2024 23:59:59 GMT"},"fingerprint":{"sha1":"CC:38:9A:93:4C:BD:74:FE:30:18:77:1F:80:24:AF:9E:02:FA:AB:56","sha256":"13:EE:41:7B:75:D4:1E:7D:00:43:FB:5F:7A:4F:92:8A:15:67:F5:DE:3C:88:12:3A:5F:B3:2C:4C:1B:9F:50:E3"}}},"request":{"raw":"GET /main.93e3cac8409e105ab51a.js HTTP/1.1\r\nHost: static-lre.refinance.enhancedrefinow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Dec 2023 19:08:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 13 Nov 2023 19:49:34 GMT\r\netag: W/\"dec41562bede99a23e8a683bb0b2c7a7\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: EJy6PytxORPNYh-TGOTN6W-_ThcOjbKUjHTMw5tSApe4obskrYLi1A==\r\ncf-cache-status: HIT\r\nage: 2113\r\nexpires: Thu, 07 Dec 2023 23:08:17 GMT\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=8N5lKNPUpNM0nYnsMsaQRO_8ZSD.eZt8kTpSc.3XlbE-1701976097-0-AUaw5moRl3efQH4oRiU5vL3YLwyOz0w5CJosJse3jXl2Q8njLCeTOJ6SMdv9Y0j1pnQq9q28qdP9B664YWGBnP0=; path=/; expires=Thu, 07-Dec-23 19:38:17 GMT; domain=.enhancedrefinow.com; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 831f0e72a85c0b61-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":139279,"size_decoded":0,"mime_type":"application/javascript","magic":"gzip compressed data, from Unix\\012- data","md5":"39afe8697e97e95c6dab844a01ffeae9","sha1":"a5904d12c3c6efd15013c943f2b307742ba10788","sha256":"1a90d9bfe52144bb482a9a0e95dee857632d6aaa5780906bb435fd4e2f99aec7","sha512":"63990ae87b1e40552ce19d449ed9ac9f4bc83b5ad16a3c0e01e929ab311aca70458d36211e9ec899399ed177a0cac51eb500f1a32691a6ebe5ccd38f2b849910","ssdeep":"3072:94EvfsPMmhTBmHYABKClYO1uWu08NbRQrp:9rcP4Y2KiX1ufKrp","tlshash":"e9d313b73b43db94914b107f8289153a9cbf1b5cbdcdbb89c2dd44b2c45e5a8a7d2088","first_seen":"2023-12-07T20:08:36Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":103,"dns":4,"connect":0,"send":0,"wait":16,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-cdn.deviceatlas.com/dacs.js","fqdn":"cs-cdn.deviceatlas.com","domain":"deviceatlas.com","tld":"com"},"ip":{"addr":"52.58.191.183","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:24.051Z","timestamp":1701976104051,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.deviceatlas.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 04 Mar 2023 07:26:21 GMT","end":"Thu, 04 Apr 2024 07:26:21 GMT"},"fingerprint":{"sha1":"24:8E:6E:64:30:97:51:E1:A5:07:DB:42:13:5B:15:27:BA:6F:10:C2","sha256":"B6:21:D9:9E:00:D9:34:1E:FF:B5:02:F1:FB:0F:18:CD:DF:28:34:C6:B2:E3:66:0E:C1:AE:0A:FB:2E:B7:25:02"}}},"request":{"raw":"GET /dacs.js HTTP/1.1\r\nHost: cs-cdn.deviceatlas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.17.9\r\ndate: Thu, 07 Dec 2023 19:08:18 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 21909\r\nlast-modified: Thu, 09 Nov 2023 13:50:26 GMT\r\netag: \"610a4ab640dd5cfa6750aa2623357f51\"\r\nexpires: Thu, 07 Dec 2023 19:08:17 GMT\r\ncache-control: no-cache\r\nx-cache: HIT\r\naccept-ch: DPR,Width,Viewport-Width,Viewport-Height,Device-Memory,RTT,Downlink,ECT,Lang,Sec-CH-DPR,Sec-CH-Width,Sec-CH-Viewport-Width,Sec-CH-Viewport-Height,Sec-CH-Device-Memory,Sec-CH-RTT,Sec-CH-Downlink,Sec-CH-ECT,Sec-CH-Lang,Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Bitness,Sec-CH-UA-WoW64,Sec-CH-Prefers-Reduced-Motion,Sec-CH-Prefers-Reduced-Transparency,Sec-CH-Prefers-Contrast,Sec-CH-Forced-Colors,Sec-CH-Prefers-Color-Scheme,Sec-CH-Prefers-Reduced-Data\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21909,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (21816)","md5":"610a4ab640dd5cfa6750aa2623357f51","sha1":"6f425451f0dffa8b2a418857da82c5d28e2db9e8","sha256":"fe49fc14b70cfc4f3edbc08e58087ca0f6e948a953c3eaeabdc7e78f512e5a22","sha512":"1ce2c2d9b3e89175961c1cf2798ade43e89e53cbc8c2318fdd68c96f79e162f0a81614627219b18cbd8bfe5ec2ac6af1cf5dfb5ac33daa99ff919aba139c0f25","ssdeep":"384:Fv6oZby61loUBRL0W4/y9mImAEH+T6T11+4QUbyHZKqr:Vxhy6RFowQ1+DkW","tlshash":"4fa2734871a2b89a03d322f9506f410af2bb597d246eb454c7e2dcd1be398de4133f69","first_seen":"2023-11-09T19:54:48Z","last_seen":"2024-08-20T20:14:31.890714Z","times_seen":38,"resource_available":true,"data":null}},"time_used":1121,"timings":{"blocked":542,"dns":63,"connect":38,"send":0,"wait":55,"receive":1,"ssl":414},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.refinance.quickenloans.com/msql/Testimonial_Stars_-_LMB_LRE_FNL_00015.png","fqdn":"content.refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.13.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:24.057Z","timestamp":1701976104057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"refinance.quickenloans.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 20 Nov 2023 00:00:00 GMT","end":"Tue, 19 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"1C:BA:47:A1:B9:5E:06:39:AC:47:A6:A8:49:17:24:B4:31:E4:F0:75","sha256":"75:C6:28:5D:01:29:B5:C7:7D:AA:CF:40:BB:D8:D9:85:2F:F5:FA:F2:30:2E:C3:70:CD:A1:58:86:C7:85:37:1E"}}},"request":{"raw":"GET /msql/Testimonial_Stars_-_LMB_LRE_FNL_00015.png HTTP/1.1\r\nHost: content.refinance.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Dec 2023 19:08:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 551\r\nlast-modified: Fri, 17 Nov 2023 05:34:25 GMT\r\nx-amz-server-side-encryption: AES256\r\netag: \"90732fd581b4624530c995d70d3f17a8\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a52c33748955378f279062b7fc7ef91e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN54-C1\r\nx-amz-cf-id: bs_FMuQrXpr4E6RFzDrM-xp7z-EnND8iJht3e1YQEgYSxE7PQx6mdQ==\r\ncf-cache-status: HIT\r\nage: 3828\r\nexpires: Thu, 07 Dec 2023 23:08:18 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=v4VuCF.Cm6JfOIUnYn1UeyAyNU8Fv.2GTpmHWJ_gPjk-1701976098-0-AeLXczbmEcSnpIOX5yz6JuDaCjoW340FAj5GQsh09klHlKryEsY8eB4u8+ZFw2+yMMz7HtVY1t3FGS61rUU2DmE=; path=/; expires=Thu, 07-Dec-23 19:38:18 GMT; domain=.refinance.quickenloans.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 831f0e773cd1b4f9-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 20, 8-bit/color RGBA, non-interlaced\\012- data","md5":"90732fd581b4624530c995d70d3f17a8","sha1":"6704549936ece70f840129dcca57a5e56ff0cac5","sha256":"8bda4c30752b1529c25cf00cc9049534a89ad2428ed35c5000038ea81a08be6a","sha512":"19ceeedea5ca7ad8aec33b01982ff41400e2a12728a590f0c766d61947634b570c844ed2d7548c20622e7de4c56e3f05b8ed4f9833e96bf34e1036ef9b1a2a96","ssdeep":"","tlshash":"41f026b6ba1525d9d5114db2f385b83641788e53f71537c01638e137445e15f16c31ce","first_seen":"2023-04-11T15:03:55Z","last_seen":"2026-05-03T04:09:17.511896Z","times_seen":731,"resource_available":false,"data":null}},"time_used":895,"timings":{"blocked":593,"dns":0,"connect":253,"send":0,"wait":13,"receive":12,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.starfieldtech.com/","fqdn":"ocsp.starfieldtech.com","domain":"starfieldtech.com","tld":"com"},"ip":{"addr":"192.124.249.24","port":0,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-12-07T19:08:25.055389616Z","timestamp":1701976105055,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.starfieldtech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 76\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Sucuri/Cloudproxy\r\nDate: Thu, 07 Dec 2023 19:08:18 GMT\r\nContent-Type: application/ocsp-response\r\nContent-Length: 2149\r\nConnection: keep-alive\r\nX-Sucuri-ID: 19024\r\nContent-Transfer-Encoding: Binary\r\nCache-Control: public, no-transform, must-revalidate\r\nLast-Modified: Thu, 07 Dec 2023 07:56:09 GMT\r\nExpires: Fri, 08 Dec 2023 07:56:09 GMT\r\nETag: \"32956a1ad35804a56d5263848065be8bc4baeac3\"\r\nP3P: CP=\"IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA\"\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":2149,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"4f63e20e6c85c3420ae4d0084f77231b","sha1":"32956a1ad35804a56d5263848065be8bc4baeac3","sha256":"4f6b22b39482307757a9cb879219b6104bb277c1ee487f3a19dfb55bb96e8c0f","sha512":"5b5a30f87ab79f01c97e79c885f0ff6ae89e826ceff1a3df82fec2666636dae147a2b1435fd09e59533eee29ce7dfd4ccb61d8fef8089ffb4e2c858824709ff5","ssdeep":"","tlshash":"cd41e7e56a91b651fb932e802be8c73e4db421a385780d1094a2c121b8b237b0dcd55d","first_seen":"2023-12-07T20:08:36Z","last_seen":"2023-12-07T21:17:59Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.quickencompare.com/qc/refi-images/BG-BLUE-ICON-WHITE.png","fqdn":"content.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:25.780Z","timestamp":1701976105780,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 20 Feb 2023 00:00:00 GMT","end":"Tue, 20 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:4F:F5:9D:CC:0B:84:6F:19:29:53:3F:57:FA:AF:13:47:78:8C:D4","sha256":"AB:B5:03:98:D9:CB:8B:0F:D6:E0:7B:F4:85:30:EE:45:1C:DE:9E:CE:18:AA:55:47:24:90:A1:18:E4:40:03:EC"}}},"request":{"raw":"GET /qc/refi-images/BG-BLUE-ICON-WHITE.png HTTP/1.1\r\nHost: content.quickencompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static-lre.refinance.enhancedrefinow.com/\r\nCookie: visitorId=d5a111b1-f2d5-4847-8052-a2447ec05d55; __cf_bm=6a2vUbq8X29F5ft1vNgukoHvMqkNFbBcU6g7w3n1fd4-1701976097-0-AedD0DNg3rBBM/ZoWGMg9iKYhEfDp634iq1N1lDtGMuf+pCNTb1O+DgQhXNTZkSw5sArwOFqgRiyfi3Ix3uS9mg=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Dec 2023 19:08:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 60242\r\nlast-modified: Mon, 27 Nov 2023 15:34:00 GMT\r\nx-amz-server-side-encryption: AES256\r\netag: \"0b525d003df460ee3ef27bb82defdb43\"\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 f6020f10d519a41b0c116dad7dcb2798.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN54-C1\r\nx-amz-cf-id: Z0TvvSdbNGuv03uzzFkfV90xM-LN3oC_ofnT5p9t4TKs4kTK_5WgiA==\r\ncf-cache-status: HIT\r\nage: 2112\r\nexpires: Thu, 07 Dec 2023 23:08:19 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 831f0e7c8994b51d-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60242,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2980 x 820, 8-bit/color RGBA, non-interlaced\\012- data","md5":"0b525d003df460ee3ef27bb82defdb43","sha1":"0e1f1b12bc01d745e847d91f64727e1bde0cf019","sha256":"78f6112cc353f90b0f71f3b1c2a5571b1b620290dd2048dc073eb91217c590e7","sha512":"c56569ca865d5069a27b0b0f95c16fca710f17d973712d43e9bae44b3d9a5560221c760563092c33caf53f9beab93dbfa2344de767c1ae64d0844c329cc99744","ssdeep":"1536:B3FIKUCy+F09WFfaszAkiS11D1DnWVppVlMNAvuZic/Kj:5FIKnZY/sz1i4FtWpVlMOvBc/2","tlshash":"5343ae7b2e0c99eec8144ff554b06ec67bb2657a182a43468f64b20b00a35a73fc75f1","first_seen":"2023-05-11T17:31:45Z","last_seen":"2025-10-23T19:43:06.138848Z","times_seen":126,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:24.053Z","timestamp":1701976104053,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"CC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42","sha256":"9A:90:D4:1D:0C:D1:CA:9D:4D:19:37:44:C4:E6:E4:28:27:C0:F5:0A:9C:B4:56:89:C4:D1:8A:63:A7:01:28:54"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 07 Dec 2023 19:08:17 GMT\r\ndate: Thu, 07 Dec 2023 19:08:17 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11115,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"gzip compressed data, max compression\\012- data","md5":"e0b9be691de9c162efddaaaf9512e38c","sha1":"24a21824b2bfb11779d4e36ec5ede41ab47a4f12","sha256":"4ae2326c367c47a854f2ab361c4a7f55dc7b561c554b6a8a561d0027fb57c5d0","sha512":"5702b8fb96c5175bc88341d7cdf64023960a1dfd68ad3caf503f6cce37bd9c36d44f353d00ebffef4894fb3fd18a208109e9097f6ae2b7a10c79da110a061855","ssdeep":"192:jgVA1dTm3812fFPkSTAmC8jaPqepKXcA/VV7KWnCPrhp0Z702fkJ4sd86:P7TS/smjjfyAcANV+ySPa702ZsF","tlshash":"a532bfa2e2a3c254dd13eab90805073b0d5215fa3fe965937d3cdcae5f121a9209ed1a","first_seen":"2023-12-07T20:08:36Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":144,"dns":0,"connect":7,"send":0,"wait":32,"receive":0,"ssl":146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/af/5066eb/00000000000000007735fdbb/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191\u0026fvd=n7\u0026v=3","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.76.122","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:25.814Z","timestamp":1701976105814,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 21 Sep 2023 00:00:00 GMT","end":"Mon, 21 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"42:82:CA:A5:EA:30:8F:60:60:37:2D:24:17:3D:52:62:54:D7:03:5B","sha256":"EF:DB:6C:82:0F:DB:74:FB:4D:DD:04:C5:A2:FF:1B:28:A6:BE:61:EE:CF:AF:10:A2:F7:9F:30:8F:71:44:61:29"}}},"request":{"raw":"GET /af/5066eb/00000000000000007735fdbb/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191\u0026fvd=n7\u0026v=3 HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.typekit.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/font-woff2\r\ncontent-length: 10552\r\netag: \"3ffc31f2c2e0e0a0bd3e7a4f831f835ccfabcbde\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000\r\ndate: Thu, 07 Dec 2023 19:08:19 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10552,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10552, version 1.0\\012- data","md5":"dfd4158df5a1e052abac4fbd93e09fb1","sha1":"9db6d016f4c8b240634f9334ec8c11b27a8926fd","sha256":"d3a3bb6d91875a850f5ab1dd85446084933aefde6a0c183689ce585e568f4ee3","sha512":"cb4ce36e0b6794a951140a38fc53b4e437a592380bdfbed42ae6dab6b11eac1f6e793cd698594d37e938b09d9c5867db438c182a7fd7b1b05b68cf99b21d11f3","ssdeep":"192:N4x/o7CCRPCHJnkaehoS7SvoZBeuFkzvuS/peVuSWRbiqL7uU6Tg:6xg7C0inkt7KIe0kzvu/VulZL7uvTg","tlshash":"b522bfe0ccf9052e1916d8beac100b795fefad4be960a353549c34763fe210eae60525","first_seen":"2023-04-05T14:55:04Z","last_seen":"2026-05-06T11:42:11.450046Z","times_seen":263,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":78,"dns":33,"connect":7,"send":0,"wait":17,"receive":4,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/af/070c63/00000000000000007735fdb6/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191\u0026fvd=n3\u0026v=3","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.76.122","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:25.792Z","timestamp":1701976105792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 21 Sep 2023 00:00:00 GMT","end":"Mon, 21 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"42:82:CA:A5:EA:30:8F:60:60:37:2D:24:17:3D:52:62:54:D7:03:5B","sha256":"EF:DB:6C:82:0F:DB:74:FB:4D:DD:04:C5:A2:FF:1B:28:A6:BE:61:EE:CF:AF:10:A2:F7:9F:30:8F:71:44:61:29"}}},"request":{"raw":"GET /af/070c63/00000000000000007735fdb6/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191\u0026fvd=n3\u0026v=3 HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.typekit.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/font-woff2\r\ncontent-length: 10888\r\netag: \"b7140404e35689beadfbc7c2c96a907cf5aaa352\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000\r\ndate: Thu, 07 Dec 2023 19:08:19 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10888,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10888, version 1.0\\012- data","md5":"865a9070be41e8b5d8258be1bf57cab1","sha1":"2f7e1a72d4897a263394a4f07892c9389b954212","sha256":"eaa07ae8e4a20bddf808a50bb9e635664a986e2878e458899442b156c7a49e50","sha512":"37eb2caaaad497fcfc70c83ebd0dd59955172ffd95d76deb8a83ba50d2ef08fe6ad63de2db46c1e9976e1189cae8075f3be84248044aa2e87704e555aa618d2f","ssdeep":"192:In/AE7PDf1AO+v2OMDGSaIYCi7ycIYi0YV3au7Uuva0JM/xdXCW0tr/u2vMqJOun:ORPDdl+5MSZIYCiW9QufvRJCCW0U2vX","tlshash":"0122bf008b337634d3f41e36b09ed22fc36c596e34d1aeff5892756ed44492a4568a73","first_seen":"2023-05-11T17:31:45Z","last_seen":"2026-05-05T00:54:47.182073Z","times_seen":58,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":100,"dns":34,"connect":9,"send":0,"wait":25,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:25.784Z","timestamp":1701976105784,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"E5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD","sha256":"EF:BD:DB:F8:2A:77:8C:C2:9E:F9:E0:B2:26:39:CB:EC:63:F1:80:36:F6:06:6E:F5:E1:6C:45:66:A4:D1:A6:C8"}}},"request":{"raw":"GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33092\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Nov 2023 23:21:56 GMT\r\nexpires: Fri, 29 Nov 2024 23:21:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 589583\r\nlast-modified: Wed, 13 Sep 2023 22:51:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33092,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33092, version 1.0\\012- data","md5":"057478083c1d55ea0c2182b24f6dd72f","sha1":"caf557cd276a76992084efc4c8857b66791a6b7f","sha256":"bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b","sha512":"98ff4416db333e5a5a8f8f299c393dd1a50f574a2c1c601a0724a8ea7fb652f6ec0ba2267390327185ebea55f5c5049ab486d88b4c5fc1585a6a975238507a15","ssdeep":"768:c+2lFKscxQAuDJ5m/xiYEQNMJjFaf0TteqKt:cZlhcxJuDa/xiMMJhaItzKt","tlshash":"3ce2f14a8cf7c02e72c5e22015d577c0d0a266e87ace9d4670af4478af50b47b33f9a9","first_seen":"2023-09-15T00:36:29Z","last_seen":"2026-05-08T01:02:40.39382Z","times_seen":47417,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":170,"dns":16,"connect":12,"send":0,"wait":8,"receive":13,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.redditstatic.com/ads/pixel.js","fqdn":"www.redditstatic.com","domain":"redditstatic.com","tld":"com"},"ip":{"addr":"151.101.193.140","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:26.403Z","timestamp":1701976106403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.redditstatic.com","organization":"REDDIT, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Aug 2023 00:00:00 GMT","end":"Wed, 21 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5B:10:93:15:D0:06:B8:27:DD:C8:15:7C:8A:49:4B:AD:06:D3:8E:15","sha256":"31:90:FA:DE:AB:61:7A:69:0B:98:8B:9A:E0:B0:AF:55:06:8D:FC:AC:6B:46:D5:05:1A:E1:5E:46:6F:37:98:99"}}},"request":{"raw":"GET /ads/pixel.js HTTP/1.1\r\nHost: www.redditstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 15 Jun 2023 20:49:59 GMT\r\netag: \"4a205643a240cb95fa82289d62b5af7e\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=60\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Thu, 07 Dec 2023 19:08:19 GMT\r\nvary: Accept-Encoding,Origin\r\nserver: snooserv\r\nreport-to: {\"group\": \"w3-reporting-nel\", \"max_age\": 14400, \"include_subdomains\": true,  \"endpoints\": [{ \"url\": \"https://w3-reporting-nel.reddit.com/reports\" }]}, {\"group\": \"w3-reporting\", \"max_age\": 14400, \"include_subdomains\": true, \"endpoints\": [{ \"url\": \"https://w3-reporting.reddit.com/reports\" }]}, {\"group\": \"w3-reporting-csp\", \"max_age\": 14400, \"include_subdomains\": true, \"endpoints\": [{ \"url\": \"https://w3-reporting-csp.reddit.com/reports\" }]}\r\nnel: {\"report_to\": \"w3-reporting-nel\", \"max_age\": 14400, \"include_subdomains\": false, \"success_fraction\": 0.02, \"failure_fraction\": 0.02}\r\ncontent-length: 7409\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7409,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23776)","md5":"78b6c68984a6ce5b3fcac1c6a9cad00c","sha1":"02e1d366a17506cea8adfe5a15949aca89719a02","sha256":"e803e774c7b59fe74f71ed93acaa875cf9a99947ff8ed7615cd0c93c1667250f","sha512":"b58674b36271f19ca88aeccb87fb818bbd6549425904fbff63d53ae84f29ae0cab021b74abbaee6ff2f7e8b7f11e0e23b7e523f2dd394f6487a402f28dbc650e","ssdeep":"384:xJi5iukbQbBfIJXvBP2w2Ig4YWrECIFeOV0rT8AevQ97sEebOpD/u5l1XvYvHjcE:xJiiusQ1HhCIFqrTSO75eIGvi","tlshash":"9fb219c9b2e56099d78a35f4177fb04775b7b96709fc0080c49888e21ee4d8a2677b3d","first_seen":"2023-06-15T23:22:15Z","last_seen":"2025-07-02T08:18:27.372616Z","times_seen":4081,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":58,"dns":23,"connect":12,"send":0,"wait":10,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-319191520","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:26.395Z","timestamp":1701976106395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:19 GMT","end":"Mon, 15 Jan 2024 11:18:18 GMT"},"fingerprint":{"sha1":"37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34","sha256":"11:4C:25:F9:AD:55:F4:E8:94:2E:64:99:7D:15:71:51:3E:11:44:0E:06:0D:EC:15:C3:6D:41:81:4B:0C:30:3D"}}},"request":{"raw":"GET /gtag/js?id=AW-319191520 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 07 Dec 2023 19:08:20 GMT\r\nexpires: Thu, 07 Dec 2023 19:08:20 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 07 Dec 2023 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 75422\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75422,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (4179)","md5":"03fdcd9a9aae042005e5f53e183330fe","sha1":"4870732f63ef1ee84320cdb44eaaa3614140af93","sha256":"4bb54c594893757b8558eb72a645dfaf1963440c5194a4f3963e71b72134f8f2","sha512":"2046ced5c0cdacaad19a759d55b6338639fd04e4bd4ebf4674f6aa5297edb974f7dd5985fa4a4fbd9200939d3375dd4d2b5c0dd9b5a68f716394c0b02b02d961","ssdeep":"3072:qcdZAlCIWYVUyO1j0OypDDMv0MWXdXAhA9DfFWkY4X:3fIHVUy4v3WtwhA9DfYq","tlshash":"b724f7d9b383b46a83a3b474503f010bb1bb6d96f84ccc94e189c5d52eb8699417bf6c","first_seen":"2023-12-07T20:08:35Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":133,"dns":1,"connect":10,"send":0,"wait":47,"receive":32,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-10865694633","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:26.454Z","timestamp":1701976106454,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:19 GMT","end":"Mon, 15 Jan 2024 11:18:18 GMT"},"fingerprint":{"sha1":"37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34","sha256":"11:4C:25:F9:AD:55:F4:E8:94:2E:64:99:7D:15:71:51:3E:11:44:0E:06:0D:EC:15:C3:6D:41:81:4B:0C:30:3D"}}},"request":{"raw":"GET /gtag/js?id=AW-10865694633 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 07 Dec 2023 19:08:20 GMT\r\nexpires: Thu, 07 Dec 2023 19:08:20 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 07 Dec 2023 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 75388\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75388,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (4179)","md5":"27bdf417ab917b5252ee1e23b2efeec9","sha1":"2974a9e918d306820eadc1855b084aea313d8d44","sha256":"47f7bb6ad52a0578f746525d79246e664c5c269f8c80c0305c5c8e46c46920e5","sha512":"d8241031c832e11fe70538455caec2a2a46620f49dbe0296ce49dee0f36cb1bf28716a26d89628c376b76a91bfef311436ddd53aa1c9546c9f1301792ebef743","ssdeep":"3072:eHdZAlCIWYVUyO1jrjypDDMv0MWXdXAhA9DfFWkY4X:CfIHVUy4D3WtwhA9DfYq","tlshash":"f324f7d9b383b46a83a3b474503f010bb17b6d96f84ccc94e189c5d52eb8a99417bf6c","first_seen":"2023-12-07T20:08:35Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":80,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-11411986938","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:26.417Z","timestamp":1701976106417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:19 GMT","end":"Mon, 15 Jan 2024 11:18:18 GMT"},"fingerprint":{"sha1":"37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34","sha256":"11:4C:25:F9:AD:55:F4:E8:94:2E:64:99:7D:15:71:51:3E:11:44:0E:06:0D:EC:15:C3:6D:41:81:4B:0C:30:3D"}}},"request":{"raw":"GET /gtag/js?id=AW-11411986938 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 07 Dec 2023 19:08:20 GMT\r\nexpires: Thu, 07 Dec 2023 19:08:20 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 07 Dec 2023 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 80987\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80987,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (4179)","md5":"102f9a2a3775a8772ef8b1519157928d","sha1":"d6aa31f8b606f05ae5155f38e52b5a51e71ef290","sha256":"373ea88cef3e3f9c706127d4b908f9e35c71df87cbffe6e440469042027a5a28","sha512":"113c7f541e17e8cc459996de69b3079c6b08fb864c1cdd611c09b84b3d989938e12fb2116f38931d3dae720feb3e88f9ea1a8b815ae1849f46b9f9ac81adad3d","ssdeep":"3072:ajdZAlCIWYyUyO1j2MypDDMv0MWXdXzhoO7DfFWkrtk4X:8fIHyUy4L3WtDhoO7DfYOtn","tlshash":"e03418d973c3706682a7b4b4503f020ba17b6da6f84ccc94e189c5d52eb8a99417bf7c","first_seen":"2023-12-07T20:08:35Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"resource_available":true,"data":null}},"time_used":585,"timings":{"blocked":256,"dns":2,"connect":10,"send":0,"wait":45,"receive":22,"ssl":246},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-320492720\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:26.749Z","timestamp":1701976106749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:19 GMT","end":"Mon, 15 Jan 2024 11:18:18 GMT"},"fingerprint":{"sha1":"37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34","sha256":"11:4C:25:F9:AD:55:F4:E8:94:2E:64:99:7D:15:71:51:3E:11:44:0E:06:0D:EC:15:C3:6D:41:81:4B:0C:30:3D"}}},"request":{"raw":"GET /gtag/destination?id=AW-320492720\u0026l=dataLayer\u0026cx=c HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 07 Dec 2023 19:08:20 GMT\r\nexpires: Thu, 07 Dec 2023 19:08:20 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 07 Dec 2023 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 75627\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75627,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (4179)","md5":"bf72064265b057dbf9b1453eb7754a6e","sha1":"dcffaa782341af899a956b4701af4ba63a47ec24","sha256":"c72911770606f6fb881ce756013d5950855f9b36bcb07ce2b945234289350d11","sha512":"0856240df1a3aab85b254a1343f55cf9300c37f9812dd699ca9d8640f1b57d1a8a1a6e5e607bd9d69fd8d2668abac719715d613674b82b1b1b8414991ccc7bfd","ssdeep":"3072:kcdZAlCIWYVUyO1jUSypDDMv0MWXdXAhA9DfFWk14w:NfIHVUy4x3WtwhA9DfYO","tlshash":"4c24f7d9b383b46a82a3b474503f010bb1bb6d96f84ccc94e189c5d52eb8699417bf7c","first_seen":"2023-12-07T20:08:36Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-320492720","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:26.422Z","timestamp":1701976106422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:19 GMT","end":"Mon, 15 Jan 2024 11:18:18 GMT"},"fingerprint":{"sha1":"37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34","sha256":"11:4C:25:F9:AD:55:F4:E8:94:2E:64:99:7D:15:71:51:3E:11:44:0E:06:0D:EC:15:C3:6D:41:81:4B:0C:30:3D"}}},"request":{"raw":"GET /gtag/js?id=AW-320492720 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 07 Dec 2023 19:08:20 GMT\r\nexpires: Thu, 07 Dec 2023 19:08:20 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 07 Dec 2023 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 75545\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75545,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (4179)","md5":"c80d74d2793072492a762ae5bbd99ba6","sha1":"19a8f876c8146291e11983500ae3764c98d2fd2f","sha256":"ea50c994accd65ab7fa57e1cd37a81072400e89fc32937766a1f5696c968a66a","sha512":"1e2fd8833a300255ec56a3e6750e5862d47842ee96b0b834370de60e31a1cdedbfd88789b35f04a269b41810ecb6acf699758dc24340fcbea7124ef0ee51ea91","ssdeep":"3072:kcdZAlCIWYVUyO1jU6ypDDMv0MWXdXAhA9DfFWkY4X:NfIHVUy4H3WtwhA9DfYq","tlshash":"1a24f7d9b383b46a82a3b474503f010bb1bb6d96f84ccc94e189c5d52eb8699417bf7c","first_seen":"2023-12-07T20:08:35Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"resource_available":true,"data":null}},"time_used":738,"timings":{"blocked":330,"dns":2,"connect":14,"send":0,"wait":27,"receive":40,"ssl":320},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.starfieldtech.com/","fqdn":"ocsp.starfieldtech.com","domain":"starfieldtech.com","tld":"com"},"ip":{"addr":"192.124.249.24","port":0,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-12-07T19:08:26.86308786Z","timestamp":1701976106863,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.starfieldtech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 76\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Sucuri/Cloudproxy\r\nDate: Thu, 07 Dec 2023 19:08:20 GMT\r\nContent-Type: application/ocsp-response\r\nContent-Length: 2149\r\nConnection: keep-alive\r\nX-Sucuri-ID: 19024\r\nContent-Transfer-Encoding: Binary\r\nCache-Control: public, no-transform, must-revalidate\r\nLast-Modified: Thu, 07 Dec 2023 07:56:09 GMT\r\nExpires: Fri, 08 Dec 2023 07:56:09 GMT\r\nETag: \"32956a1ad35804a56d5263848065be8bc4baeac3\"\r\nP3P: CP=\"IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA\"\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":2149,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"4f63e20e6c85c3420ae4d0084f77231b","sha1":"32956a1ad35804a56d5263848065be8bc4baeac3","sha256":"4f6b22b39482307757a9cb879219b6104bb277c1ee487f3a19dfb55bb96e8c0f","sha512":"5b5a30f87ab79f01c97e79c885f0ff6ae89e826ceff1a3df82fec2666636dae147a2b1435fd09e59533eee29ce7dfd4ccb61d8fef8089ffb4e2c858824709ff5","ssdeep":"","tlshash":"cd41e7e56a91b651fb932e802be8c73e4db421a385780d1094a2c121b8b237b0dcd55d","first_seen":"2023-12-07T20:08:36Z","last_seen":"2023-12-07T21:17:59Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pix.revjet.com/track/pd3521?__noscript=false\u0026__cbf=revjet.callbacks.cb1701976106653\u0026location=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_809%26pkey1%3D809%26pkey2%3D2%26pkey3%3D3e601e8a03ad4f64ada14990f917fba6%26pkey%3D6608d798eb0b49089aa75baddb8f143c%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D809%26_ef_transaction_id%3D3e601e8a03ad4f64ada14990f917fba6\u0026referrer=\u0026creditProfile=\u0026firstMortgageBalance=\u0026firstMortgageInterestRate=\u0026hasFHALoan=\u0026homeValue=\u0026loanToValue=\u0026propertyCity=\u0026propertyDescription=\u0026propertyState=\u0026propertyZipCode=\u0026rateType=\u0026typeOfLoan=\u0026loanRefiPurpose=","fqdn":"pix.revjet.com","domain":"revjet.com","tld":"com"},"ip":{"addr":"95.217.105.250","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:26.702Z","timestamp":1701976106702,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.revjet.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Mar 2023 00:00:00 GMT","end":"Thu, 11 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"03:20:65:55:CD:08:1C:F0:68:28:E7:A4:5F:21:09:76:87:BF:9D:81","sha256":"AB:35:5A:BB:4C:BC:1E:79:31:77:DF:B2:5D:B9:14:82:26:40:71:97:7A:75:FC:34:01:DF:DA:3B:DC:B6:87:7A"}}},"request":{"raw":"GET /track/pd3521?__noscript=false\u0026__cbf=revjet.callbacks.cb1701976106653\u0026location=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_809%26pkey1%3D809%26pkey2%3D2%26pkey3%3D3e601e8a03ad4f64ada14990f917fba6%26pkey%3D6608d798eb0b49089aa75baddb8f143c%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D809%26_ef_transaction_id%3D3e601e8a03ad4f64ada14990f917fba6\u0026referrer=\u0026creditProfile=\u0026firstMortgageBalance=\u0026firstMortgageInterestRate=\u0026hasFHALoan=\u0026homeValue=\u0026loanToValue=\u0026propertyCity=\u0026propertyDescription=\u0026propertyState=\u0026propertyZipCode=\u0026rateType=\u0026typeOfLoan=\u0026loanRefiPurpose= HTTP/1.1\r\nHost: pix.revjet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Dec 2023 19:08:20 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 46\r\nset-cookie: trx=4777369244942618106; Max-Age=63072000; Expires=Sat, 06 Dec 2025 19:08:20 GMT; Path=/; Domain=.revjet.com; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"f6ce8dc63925c8d5f0d57d6ce42f43e1","sha1":"a89ad2e8361ef3867b5ecee557acae6c5447b448","sha256":"bceae18f848b9d727a55d73fc08a3e83e8e2debf8e774bc60cb45b8ae4b4e481","sha512":"dd6e5be7de7a6e7bea4143f4355552184318d576f00e56ab4416e13ba38d26eb054a75bd310a71e062d9daecc838234b91f492264bcaa51b645e2139069acb5b","ssdeep":"","tlshash":"909004005557d0317d10d711541d431f110dc31cc574417575347f774d10455d7c0540","first_seen":"2023-12-07T20:08:36Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":126,"dns":54,"connect":14,"send":0,"wait":15,"receive":19,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rum-http-intake.logs.datadoghq.com/v1/input/pub6a529f19365581f6a44df4d3740084c6?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Alre-ern-webapp%2Cversion%3A1.0.3%20d-ASOUKJC12\u0026batch_time=1701976106300","fqdn":"rum-http-intake.logs.datadoghq.com","domain":"datadoghq.com","tld":"com"},"ip":{"addr":"3.233.153.123","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:26.305Z","timestamp":1701976106305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.logs.datadoghq.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 22 Mar 2023 00:00:00 GMT","end":"Fri, 22 Mar 2024 23:59:59 GMT"},"fingerprint":{"sha1":"29:24:46:A8:06:E2:F4:15:BE:A6:74:80:B3:36:D5:3D:E7:D5:15:99","sha256":"88:6A:77:71:F0:65:04:B6:A3:21:CF:5E:7C:85:F7:85:44:42:12:D1:A3:62:5E:91:BD:B3:CD:56:BC:D4:93:96"}}},"request":{"raw":"POST /v1/input/pub6a529f19365581f6a44df4d3740084c6?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Alre-ern-webapp%2Cversion%3A1.0.3%20d-ASOUKJC12\u0026batch_time=1701976106300 HTTP/1.1\r\nHost: rum-http-intake.logs.datadoghq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 15826\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Dec 2023 19:08:20 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text, with no line terminators","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-05-08T01:55:09.381891Z","times_seen":628606,"resource_available":true,"data":null}},"time_used":1455,"timings":{"blocked":621,"dns":48,"connect":352,"send":0,"wait":211,"receive":1,"ssl":214},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rum-http-intake.logs.datadoghq.com/v1/input/pub6a529f19365581f6a44df4d3740084c6?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Alre-ern-webapp%2Cversion%3A1.0.3%20d-ASOUKJC12\u0026batch_time=1701976106914","fqdn":"rum-http-intake.logs.datadoghq.com","domain":"datadoghq.com","tld":"com"},"ip":{"addr":"3.233.153.123","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:26.922Z","timestamp":1701976106922,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.logs.datadoghq.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 22 Mar 2023 00:00:00 GMT","end":"Fri, 22 Mar 2024 23:59:59 GMT"},"fingerprint":{"sha1":"29:24:46:A8:06:E2:F4:15:BE:A6:74:80:B3:36:D5:3D:E7:D5:15:99","sha256":"88:6A:77:71:F0:65:04:B6:A3:21:CF:5E:7C:85:F7:85:44:42:12:D1:A3:62:5E:91:BD:B3:CD:56:BC:D4:93:96"}}},"request":{"raw":"POST /v1/input/pub6a529f19365581f6a44df4d3740084c6?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Alre-ern-webapp%2Cversion%3A1.0.3%20d-ASOUKJC12\u0026batch_time=1701976106914 HTTP/1.1\r\nHost: rum-http-intake.logs.datadoghq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 14052\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Dec 2023 19:08:20 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text, with no line terminators","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-05-08T01:55:09.381891Z","times_seen":628606,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":5,"dns":0,"connect":0,"send":1,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a44325.actonservice.com/cdnr/forpci43/acton/bn/tracker/44325","fqdn":"a44325.actonservice.com","domain":"actonservice.com","tld":"com"},"ip":{"addr":"207.189.124.43","port":443,"asn":13649,"as":"ASN-VINS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:26.467Z","timestamp":1701976106467,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.actonservice.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 May 2023 00:00:00 GMT","end":"Sat, 29 Jun 2024 23:59:59 GMT"},"fingerprint":{"sha1":"EE:F0:2F:E8:AA:FB:08:13:5C:9C:84:FB:04:6E:60:5B:4D:EB:B0:2E","sha256":"1F:A4:DA:74:E0:8D:00:64:E1:4F:81:1D:F9:DE:CE:90:20:2A:10:87:96:24:56:3B:98:D2:32:42:9B:24:3B:C7"}}},"request":{"raw":"GET /cdnr/forpci43/acton/bn/tracker/44325 HTTP/1.1\r\nHost: a44325.actonservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nP3P: CP=\"Act-On does not have a P3P policy. Learn why here: https://act-on.com/p3p-policy/\"\r\nSet-Cookie: wp44325=\"XXWVYDDDDDDAXKYKMBZ-KXAZ-XMMT-HMUC-ZMLKMMLZKBYTDgNssDDD\"; Path=/; Max-Age=31536000; Domain=.actonservice.com; SameSite=None; Secure; Version=1\r\nContent-Type: application/javascript;charset=utf-8\r\nContent-Length: 4850\r\nDate: Thu, 07 Dec 2023 19:08:20 GMT\r\nX-Cnection: close\r\nStrict-Transport-Security: max-age=16070400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":4850,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"d32293f4e34e7342102ca2ac51d01301","sha1":"beff67b596539668798cec2270dcea508c43b82e","sha256":"4cceda7cf27c7acc53c753e884b47d3b981448fe29d600e87748343bbf1e6ff1","sha512":"92ff0feb040f4bcf712e3bf96ef88dff1893578b98b876d599746362d12fabf74516796f229db56aafd44c9c990ea69e6af21ac88269d20f115e9eef915c234a","ssdeep":"96:quTE/nCwi7DVsJ5nzLwivnqLwIUXp5lT6:JTE//I+Dw8LIqU","tlshash":"8ba1a68c72ae0e21d1f33787bf7e8f8e7bfd229234599588d45e88d00765c61207aa71","first_seen":"2023-12-07T20:08:36Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1642,"timings":{"blocked":734,"dns":34,"connect":178,"send":0,"wait":167,"receive":1,"ssl":523},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/bat.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"13.107.21.200","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:27.399Z","timestamp":1701976107399,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure TLS Issuing CA 01","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 24 Oct 2023 07:42:22 GMT","end":"Sun, 21 Apr 2024 07:42:22 GMT"},"fingerprint":{"sha1":"A5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD","sha256":"06:59:26:26:34:3D:BB:CB:40:56:0E:F2:BF:23:29:1D:C6:E4:C1:7D:4D:E6:72:6A:C5:15:AF:F0:1F:D6:A7:AC"}}},"request":{"raw":"GET /bat.js HTTP/1.1\r\nHost: bat.bing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private,max-age=1800\r\ncontent-length: 13175\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 10 Nov 2023 20:09:55 GMT\r\naccept-ranges: bytes\r\netag: \"80abcdf1114da1:0\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 0E02E86D14B44D749518F442F0D57DB3 Ref B: OSL30EDGE0308 Ref C: 2023-12-07T19:08:20Z\r\ndate: Thu, 07 Dec 2023 19:08:20 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13175,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (46103), with no line terminators","md5":"7f75f159026f3a2c8cccda487b43157b","sha1":"021cf5c854db063cd79bf0394c24eb994e095640","sha256":"5e319852607809336b2534ffeb96f6933f26994dd040f535302c84f59cc0a214","sha512":"88276152ee25891d16e7b3b28a9b42cbd48d97e1a7d94c1bf5354612603868d5d537d2ba01a4e2f184e6dc6a492b67619d6a7c02da992ad604f7d0abef27a7a1","ssdeep":"768:OaOFhhRDUHahpROfRys3LzQRo4TYYyDMFWPKQ:OaOFnRrRURtzQy4ISWiQ","tlshash":"b923e7833350492a49ed86dc74692a03a336530e20fe309d7b8ce9f25559e0f527bb7e","first_seen":"2023-11-10T23:20:50Z","last_seen":"2026-01-03T14:17:01.401373Z","times_seen":11869,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":41,"dns":14,"connect":4,"send":0,"wait":42,"receive":14,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/320492720/?random=1701976106986\u0026cv=11\u0026fst=1701976106986\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be3bt0\u0026gcd=11l1l1l1l1\u0026dma_cps=sypham\u0026dma=1\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_809%26pkey1%3D809%26pkey2%3D2%26pkey3%3D3e601e8a03ad4f64ada14990f917fba6%26pkey%3D6608d798eb0b49089aa75baddb8f143c%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D809%26_ef_transaction_id%3D3e601e8a03ad4f64ada14990f917fba6\u0026label=xSwBCJum9PsCELCp6ZgB\u0026hn=www.google.com\u0026frm=0\u0026tiba=QuickenCompare%20Money%20-%20QUESTIONS\u0026gtm_ee=1\u0026auid=1520612321.1701976107\u0026data=event%3Dconversion\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026rfmt=3\u0026fmt=4","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:27.401Z","timestamp":1701976107401,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:57 GMT","end":"Mon, 15 Jan 2024 11:24:56 GMT"},"fingerprint":{"sha1":"B0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1","sha256":"8E:7A:F4:2A:73:D7:C2:C9:1E:EC:59:1E:76:11:A4:E4:8D:03:F6:64:60:A2:8A:86:33:52:6B:1D:FE:19:FA:8D"}}},"request":{"raw":"GET /pagead/1p-conversion/320492720/?random=1701976106986\u0026cv=11\u0026fst=1701976106986\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be3bt0\u0026gcd=11l1l1l1l1\u0026dma_cps=sypham\u0026dma=1\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_809%26pkey1%3D809%26pkey2%3D2%26pkey3%3D3e601e8a03ad4f64ada14990f917fba6%26pkey%3D6608d798eb0b49089aa75baddb8f143c%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D809%26_ef_transaction_id%3D3e601e8a03ad4f64ada14990f917fba6\u0026label=xSwBCJum9PsCELCp6ZgB\u0026hn=www.google.com\u0026frm=0\u0026tiba=QuickenCompare%20Money%20-%20QUESTIONS\u0026gtm_ee=1\u0026auid=1520612321.1701976107\u0026data=event%3Dconversion\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026rfmt=3\u0026fmt=4 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Thu, 07 Dec 2023 19:08:20 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/320492720/?random=1701976106986\u0026cv=11\u0026fst=1701976106986\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be3bt0\u0026gcd=11l1l1l1l1\u0026dma_cps=sypham\u0026dma=1\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_809%26pkey1%3D809%26pkey2%3D2%26pkey3%3D3e601e8a03ad4f64ada14990f917fba6%26pkey%3D6608d798eb0b49089aa75baddb8f143c%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D809%26_ef_transaction_id%3D3e601e8a03ad4f64ada14990f917fba6\u0026label=xSwBCJum9PsCELCp6ZgB\u0026hn=www.google.com\u0026frm=0\u0026tiba=QuickenCompare%20Money%20-%20QUESTIONS\u0026gtm_ee=1\u0026auid=1520612321.1701976107\u0026data=event%3Dconversion\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026rfmt=3\u0026fmt=4\u0026ipr=y\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: gzip\r\nserver: cafe\r\ncontent-length: 63\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":63,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"ad8b6f08655797587cdec719a94efe59","sha1":"182adf5a140796f81e930649d05654dbf22fd5b7","sha256":"77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6","sha512":"519a8ea7ce2ed8661cc72d58bc0c02e721ef8e64608f4d2e26a56a970d43ebbf21bdf579c543ee1dfd667da8f87467c60111a3e6d246d435a5c2d066ab88efa3","ssdeep":"","tlshash":"0890045d30d14535cc3fd0355105157150f501075c5f117c1430430035115434c000f3","first_seen":"2023-03-07T01:03:30Z","last_seen":"2026-05-02T15:05:55.10961Z","times_seen":10172,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":57,"dns":0,"connect":8,"send":0,"wait":39,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickencompare.com/wp-content/uploads/2022/05/cropped-QC_Icotype_Circle_Red-192x192.png","fqdn":"www.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:27.407Z","timestamp":1701976107407,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 20 Feb 2023 00:00:00 GMT","end":"Tue, 20 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:4F:F5:9D:CC:0B:84:6F:19:29:53:3F:57:FA:AF:13:47:78:8C:D4","sha256":"AB:B5:03:98:D9:CB:8B:0F:D6:E0:7B:F4:85:30:EE:45:1C:DE:9E:CE:18:AA:55:47:24:90:A1:18:E4:40:03:EC"}}},"request":{"raw":"GET /wp-content/uploads/2022/05/cropped-QC_Icotype_Circle_Red-192x192.png HTTP/1.1\r\nHost: www.quickencompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visitorId=d5a111b1-f2d5-4847-8052-a2447ec05d55; __cf_bm=6a2vUbq8X29F5ft1vNgukoHvMqkNFbBcU6g7w3n1fd4-1701976097-0-AedD0DNg3rBBM/ZoWGMg9iKYhEfDp634iq1N1lDtGMuf+pCNTb1O+DgQhXNTZkSw5sArwOFqgRiyfi3Ix3uS9mg=; _rdt_uuid=1701976106531.5152ea6e-3782-48d8-8ac9-ae0b9bcfc8eb; _gcl_au=1.1.1520612321.1701976107\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Dec 2023 19:08:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 10913\r\ncache-control: public, max-age=31622400\r\netag: \"646f8388-2aa1\"\r\nexpires: Sat, 07 Dec 2024 19:08:20 GMT\r\nlast-modified: Thu, 25 May 2023 15:49:28 GMT\r\nstrict-transport-security: max-age=2592000\r\nx-pantheon-styx-hostname: styx-fe1-a-685d4d5969-p4htw\r\nx-styx-req-id: 32d64d26-67a0-11ee-8ab1-a68b0bac51fb\r\nx-served-by: cache-chi-kigq8000146-CHI, cache-bma1675-BMA\r\nx-cache: HIT, MISS\r\nx-cache-hits: 1, 0\r\nx-timer: S1701973987.519388,VS0,VE126\r\nvia: 1.1 varnish, 1.1 varnish\r\ncf-cache-status: HIT\r\nage: 2114\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 831f0e871e6eb51d-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10913,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\\012- data","md5":"33459eb6a3bd646afe5d2b592d70a184","sha1":"3dbe306f999a2d9d3ac37fcbd664100e3dc9e4dd","sha256":"a3cbfe4e63c8a005a557d34d2bf2041a470c86c629429b4ec9d695a59c951fce","sha512":"c8de3bc39a7ebf0575fb10c0549b45be402880fdd8724b91537992f4fb510bc9e7ad422d7ca863621654672122d5bad778349b12771760b4a3c4302d85a07caf","ssdeep":"","tlshash":"","first_seen":"2023-05-04T23:59:24Z","last_seen":"2023-12-08T15:36:21Z","times_seen":13,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":63,"connect":2,"send":0,"wait":32,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickencompare.com/wp-content/uploads/2022/05/cropped-QC_Icotype_Circle_Red-32x32.png","fqdn":"www.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:27.408Z","timestamp":1701976107408,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 20 Feb 2023 00:00:00 GMT","end":"Tue, 20 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:4F:F5:9D:CC:0B:84:6F:19:29:53:3F:57:FA:AF:13:47:78:8C:D4","sha256":"AB:B5:03:98:D9:CB:8B:0F:D6:E0:7B:F4:85:30:EE:45:1C:DE:9E:CE:18:AA:55:47:24:90:A1:18:E4:40:03:EC"}}},"request":{"raw":"GET /wp-content/uploads/2022/05/cropped-QC_Icotype_Circle_Red-32x32.png HTTP/1.1\r\nHost: www.quickencompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visitorId=d5a111b1-f2d5-4847-8052-a2447ec05d55; __cf_bm=6a2vUbq8X29F5ft1vNgukoHvMqkNFbBcU6g7w3n1fd4-1701976097-0-AedD0DNg3rBBM/ZoWGMg9iKYhEfDp634iq1N1lDtGMuf+pCNTb1O+DgQhXNTZkSw5sArwOFqgRiyfi3Ix3uS9mg=; _rdt_uuid=1701976106531.5152ea6e-3782-48d8-8ac9-ae0b9bcfc8eb; _gcl_au=1.1.1520612321.1701976107\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Dec 2023 19:08:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 1462\r\ncache-control: public, max-age=31622400\r\netag: \"646f8388-5b6\"\r\nexpires: Sat, 07 Dec 2024 19:08:20 GMT\r\nlast-modified: Thu, 25 May 2023 15:49:28 GMT\r\nstrict-transport-security: max-age=2592000\r\nx-pantheon-styx-hostname: styx-fe1-a-b8448654b-5nhpm\r\nx-styx-req-id: fcf64b0f-565f-11ee-9089-d2e2ed9d6f4f\r\nx-served-by: cache-chi-klot8100095-CHI, cache-bma1667-BMA\r\nx-cache: HIT, MISS\r\nx-cache-hits: 1, 0\r\nx-timer: S1701701162.825696,VS0,VE131\r\nvia: 1.1 varnish, 1.1 varnish\r\ncf-cache-status: HIT\r\nage: 194281\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 831f0e871e6fb51d-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\\012- data","md5":"08c465daeab64895569e93e51c762db7","sha1":"06d83a5d5da54777459439485a5a410776f22375","sha256":"1bf8b66be3259665a6d9791e0dfbd82bd2f574a01bad981e3d4e66d71f137e78","sha512":"1e08815a17b0318a7033bc1de18764b47e9eb188d33240a41da2181b2ca16218aef29c20656ad55a7ed715f7b9ace10a685664a8fdf54ff38de37964dd648056","ssdeep":"","tlshash":"","first_seen":"2023-05-04T23:59:24Z","last_seen":"2023-12-08T15:36:21Z","times_seen":13,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":63,"connect":7,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/wi/ytc.js","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.252","port":443,"asn":203220,"as":"Yahoo! UK Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:27.465Z","timestamp":1701976107465,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.api.fantasysports.yahoo.com","organization":"Oath Holdings Inc."},"issuer":{"commonName":"DigiCert SHA2 High Assurance Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Nov 2023 00:00:00 GMT","end":"Wed, 27 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6","sha256":"0A:DC:8A:FB:63:56:2D:8D:E2:CE:B6:4F:F0:A6:8B:C9:F8:BB:A1:BE:16:48:D2:6A:5F:C7:40:28:7F:DB:02:3B"}}},"request":{"raw":"GET /wi/ytc.js HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: ZWM3zDv3YQ6iPPRWFaQnqI7NYPwouttY2RBEAet5A6wasIQ0VR5ZEpFfcB6Ld+V2QZiVFwrDnGo=\r\nx-amz-request-id: 8KHWBP3S1MHRYCTC\r\ndate: Thu, 07 Dec 2023 18:26:03 GMT\r\nlast-modified: Mon, 26 Jun 2023 09:26:35 GMT\r\nx-amz-expiration: expiry-date=\"Wed, 31 Jul 2024 00:00:00 GMT\", rule-id=\"oath-standard-lifecycle\"\r\netag: \"5c6ed25dce803fd84288922b8928409e-df\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public,max-age=3600\r\nx-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\nserver: ATS\r\nreferrer-policy: no-referrer-when-downgrade\r\nvary: Origin, Accept-Encoding\r\nage: 2539\r\ncontent-encoding: gzip\r\ncontent-length: 6262\r\nstrict-transport-security: max-age=31536000\r\nexpect-ct: max-age=31536000, report-uri=\"http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nats-carp-promotion: 1, 1\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6262,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (18187), with no line terminators","md5":"5c6ed25dce803fd84288922b8928409e","sha1":"3ccc10546ae12f160bacac1e9e422af091ea4a41","sha256":"480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91","sha512":"fe9265d2e6ea4acb7e0a87e08bedfaf48bcbad62bb7a86e73f9ae21c8437af3334d2a9733c6bc47a12bbf54f97ec79271cb5300f90231614f407599d1b4c05e5","ssdeep":"384:s40C/Y3uOOpp9W89rzOv4m8Avx2kjEhNgyyuek:VjOOp281UsAlErPyud","tlshash":"3982c748b3d5f0a103e2a1b1613fa90b7675193d1c6e9560b212c7843c7dacb9236f7d","first_seen":"2023-06-26T11:33:35Z","last_seen":"2024-08-29T17:29:21.078502Z","times_seen":6264,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":103,"dns":40,"connect":50,"send":0,"wait":35,"receive":2,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a44325.actonservice.com/acton/bn/44325?target=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_809%26pkey1%3D809%26pkey2%3D2%26pkey3%3D3e601e8a03ad4f64ada14990f917fba6%26pkey%3D6608d798eb0b49089aa75baddb8f143c%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D809%26_ef_transaction_id%3D3e601e8a03ad4f64ada14990f917fba6\u0026ref=\u0026v=2\u0026ts=1701976106402\u0026nc=0","fqdn":"a44325.actonservice.com","domain":"actonservice.com","tld":"com"},"ip":{"addr":"207.189.124.43","port":443,"asn":13649,"as":"ASN-VINS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:27.719Z","timestamp":1701976107719,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.actonservice.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 May 2023 00:00:00 GMT","end":"Sat, 29 Jun 2024 23:59:59 GMT"},"fingerprint":{"sha1":"EE:F0:2F:E8:AA:FB:08:13:5C:9C:84:FB:04:6E:60:5B:4D:EB:B0:2E","sha256":"1F:A4:DA:74:E0:8D:00:64:E1:4F:81:1D:F9:DE:CE:90:20:2A:10:87:96:24:56:3B:98:D2:32:42:9B:24:3B:C7"}}},"request":{"raw":"GET /acton/bn/44325?target=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_809%26pkey1%3D809%26pkey2%3D2%26pkey3%3D3e601e8a03ad4f64ada14990f917fba6%26pkey%3D6608d798eb0b49089aa75baddb8f143c%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D809%26_ef_transaction_id%3D3e601e8a03ad4f64ada14990f917fba6\u0026ref=\u0026v=2\u0026ts=1701976106402\u0026nc=0 HTTP/1.1\r\nHost: a44325.actonservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nCookie: wp44325=\"XXWVYDDDDDDAXKYKMBZ-KXAZ-XMMT-HMUC-ZMLKMMLZKBYTDgNssDDD\"\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nSet-Cookie: wp44325=\"XXWVYDDDDDDAXKYKMBZ-KXAZ-XMMT-HMUC-ZMLKMMLZKBYTDYAYCBVHU-YCIW-XTII-CLBI-MXHAMVITJWLBDjNpJrLgJhtiHkL_JhtDD\"; Path=/; Max-Age=31536000; Domain=.actonservice.com; SameSite=None; Secure; Version=1\r\nP3P: CP=\"Act-On does not have a P3P policy. Learn why here: https://act-on.com/p3p-policy/\"\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nDate: Thu, 07 Dec 2023 19:08:21 GMT\r\nX-Cnection: close\r\nStrict-Transport-Security: max-age=16070400\r\nVary: Accept-Encoding\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1\\012- data","md5":"f7f26805de1a1f270e665bf7873d7e19","sha1":"c32085898c6e36d361d4b8017087de90e1b8465c","sha256":"2188414d64d2930eb54f4731b6eb9a931358ba625d1cd7535a889409218609d2","sha512":"6755bed154762d44a97d836c1201a518b98c7df673c42fc125de88d5e8c73a43a08883280954c92cac7f62cc6ce31ce2e2208000c6be31c5f132446cddf702c0","ssdeep":"","tlshash":"d0900403f7c04007c171d030071503505344d01005440705404d715cdc551510c03010","first_seen":"2023-04-19T20:18:37Z","last_seen":"2026-05-08T00:47:30.719313Z","times_seen":1993,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/wi/config/10194306.json","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.252","port":443,"asn":203220,"as":"Yahoo! UK Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:27.764Z","timestamp":1701976107764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.api.fantasysports.yahoo.com","organization":"Oath Holdings Inc."},"issuer":{"commonName":"DigiCert SHA2 High Assurance Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Nov 2023 00:00:00 GMT","end":"Wed, 27 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6","sha256":"0A:DC:8A:FB:63:56:2D:8D:E2:CE:B6:4F:F0:A6:8B:C9:F8:BB:A1:BE:16:48:D2:6A:5F:C7:40:28:7F:DB:02:3B"}}},"request":{"raw":"GET /wi/config/10194306.json HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: hiTsyAV/NmuI6ml6nk1lHxs2jQwneURY8C/ohUouQ9S1nxFa1zfc4Sg+s4JvwAEF4grXvPVEoJQ=\r\nx-amz-request-id: H9CRNQ6SXXB2Q7T2\r\ndate: Thu, 07 Dec 2023 18:58:22 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nlast-modified: Thu, 07 Dec 2023 17:43:45 GMT\r\nx-amz-expiration: expiry-date=\"Sat, 11 Jan 2025 00:00:00 GMT\", rule-id=\"oath-standard-lifecycle\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: dO8Tl50koPrsXhalRV1v86FHib.3Gug1\r\naccept-ranges: bytes\r\ncontent-type: application/json\r\nserver: ATS\r\ncontent-length: 46\r\nreferrer-policy: no-referrer-when-downgrade\r\netag: \"87d7a3e6ca5844729c849e28a1fdffda\"\r\nage: 600\r\nats-carp-promotion: 1\r\nstrict-transport-security: max-age=31536000\r\nexpect-ct: max-age=31536000, report-uri=\"http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text, with no line terminators","md5":"87d7a3e6ca5844729c849e28a1fdffda","sha1":"cf1c60dd594971896ff423177ad4991403928429","sha256":"e8a12726ee07f3a17f43d5715b0f1c49c2548baf3ce450d2880701034c75700b","sha512":"a2952b298d60cc652f5911b0157d957b858121ef21e94116cc26962ad48465b96abca46079019f3f58b8599e25fd7bb91e791d8d9b54fb527d0b34b8a8f40bdf","ssdeep":"","tlshash":"919002061454609a510543a155906ed21011043455906550181827109854c6a2862082","first_seen":"2023-05-11T17:31:45Z","last_seen":"2024-09-19T20:13:27.530396Z","times_seen":82,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":92,"dns":2,"connect":35,"send":0,"wait":36,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/p/action/146000783.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"13.107.21.200","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:27.909Z","timestamp":1701976107909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure TLS Issuing CA 01","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 24 Oct 2023 07:42:22 GMT","end":"Sun, 21 Apr 2024 07:42:22 GMT"},"fingerprint":{"sha1":"A5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD","sha256":"06:59:26:26:34:3D:BB:CB:40:56:0E:F2:BF:23:29:1D:C6:E4:C1:7D:4D:E6:72:6A:C5:15:AF:F0:1F:D6:A7:AC"}}},"request":{"raw":"GET /p/action/146000783.js HTTP/1.1\r\nHost: bat.bing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ncache-control: private,max-age=1800\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: A8F092F876504A5F97CC4E0535D4CC0E Ref B: OSL30EDGE0308 Ref C: 2023-12-07T19:08:21Z\r\ndate: Thu, 07 Dec 2023 19:08:20 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/x-javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T01:57:31.651154Z","times_seen":14815976,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.anura.io/showads.js?670681914326","fqdn":"ads.anura.io","domain":"anura.io","tld":"io"},"ip":{"addr":"54.230.111.16","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:27.611Z","timestamp":1701976107611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads.anura.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 30 May 2023 00:00:00 GMT","end":"Thu, 27 Jun 2024 23:59:59 GMT"},"fingerprint":{"sha1":"69:66:FA:26:E2:E4:89:00:9A:F7:DE:2C:F6:5A:C2:B9:58:04:5D:E6","sha256":"C2:BE:0D:1A:88:8A:A7:C8:1C:31:AE:74:D8:05:8D:2E:83:3E:9F:3A:8D:5D:05:E0:AB:44:A6:E6:43:13:50:9C"}}},"request":{"raw":"GET /showads.js?670681914326 HTTP/1.1\r\nHost: ads.anura.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 06 Dec 2023 19:40:27 GMT\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 5dtk_CkloKHn-R2sY-c5iLDNoqHGqyfCSZSIZzZMsp7Q_JiKrEfAKg==\r\nage: 84474\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"gzip compressed data, max speed, from Unix\\012- data","md5":"a4745abc5e7fdb89cc6df3069f3c6e69","sha1":"74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed","sha256":"d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf","sha512":"849461cb54ecde577246aad993d1ecabb879913e353ae322561c7c57605f571e23210fe12bdcef49faa99b5b003611976ff64348f620968271e38bba1c7d7f62","ssdeep":"","tlshash":"ce70000000003c30cc000030000fc000000c30003000c00300000030000300300c003f","first_seen":"2023-04-08T01:36:47Z","last_seen":"2025-03-02T02:51:47.01042Z","times_seen":42040,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":224,"dns":71,"connect":1,"send":0,"wait":14,"receive":0,"ssl":156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/320492720/?random=1701976106986\u0026cv=11\u0026fst=1701976106986\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be3bt0\u0026gcd=11l1l1l1l1\u0026dma_cps=sypham\u0026dma=1\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_809%26pkey1%3D809%26pkey2%3D2%26pkey3%3D3e601e8a03ad4f64ada14990f917fba6%26pkey%3D6608d798eb0b49089aa75baddb8f143c%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D809%26_ef_transaction_id%3D3e601e8a03ad4f64ada14990f917fba6\u0026label=xSwBCJum9PsCELCp6ZgB\u0026hn=www.google.com\u0026frm=0\u0026tiba=QuickenCompare%20Money%20-%20QUESTIONS\u0026gtm_ee=1\u0026auid=1520612321.1701976107\u0026data=event%3Dconversion\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026rfmt=3\u0026fmt=4\u0026ipr=y","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.74.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:27.914Z","timestamp":1701976107914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:27:27 GMT","end":"Mon, 15 Jan 2024 11:27:26 GMT"},"fingerprint":{"sha1":"6E:E4:BC:4A:67:5E:46:6A:B3:E4:CA:61:A7:C0:97:AB:14:F0:34:32","sha256":"6C:19:7E:D8:B6:4C:33:23:BE:69:B4:D7:78:7F:28:0F:20:6A:60:11:77:95:4F:1A:79:F9:9A:62:80:70:DD:13"}}},"request":{"raw":"GET /pagead/1p-conversion/320492720/?random=1701976106986\u0026cv=11\u0026fst=1701976106986\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be3bt0\u0026gcd=11l1l1l1l1\u0026dma_cps=sypham\u0026dma=1\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_809%26pkey1%3D809%26pkey2%3D2%26pkey3%3D3e601e8a03ad4f64ada14990f917fba6%26pkey%3D6608d798eb0b49089aa75baddb8f143c%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D809%26_ef_transaction_id%3D3e601e8a03ad4f64ada14990f917fba6\u0026label=xSwBCJum9PsCELCp6ZgB\u0026hn=www.google.com\u0026frm=0\u0026tiba=QuickenCompare%20Money%20-%20QUESTIONS\u0026gtm_ee=1\u0026auid=1520612321.1701976107\u0026data=event%3Dconversion\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026rfmt=3\u0026fmt=4\u0026ipr=y HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Thu, 07 Dec 2023 19:08:21 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: gzip\r\nserver: cafe\r\ncontent-length: 63\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"ad8b6f08655797587cdec719a94efe59","sha1":"182adf5a140796f81e930649d05654dbf22fd5b7","sha256":"77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6","sha512":"519a8ea7ce2ed8661cc72d58bc0c02e721ef8e64608f4d2e26a56a970d43ebbf21bdf579c543ee1dfd667da8f87467c60111a3e6d246d435a5c2d066ab88efa3","ssdeep":"","tlshash":"0890045d30d14535cc3fd0355105157150f501075c5f117c1430430035115434c000f3","first_seen":"2023-03-07T01:03:30Z","last_seen":"2026-05-02T15:05:55.10961Z","times_seen":10172,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":52,"dns":1,"connect":7,"send":0,"wait":28,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lmbahsj2.com/sdk/click?effp=725a9a464860515bcdb576360962c546\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6\u0026oid=143\u0026affid=809\u0026__cc=\u0026async=json","fqdn":"www.lmbahsj2.com","domain":"lmbahsj2.com","tld":"com"},"ip":{"addr":"35.201.76.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:28.069Z","timestamp":1701976108069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmbahsj2.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 28 Apr 2023 21:05:02 GMT","end":"Mon, 13 May 2024 15:10:13 GMT"},"fingerprint":{"sha1":"19:8A:1C:6D:15:5F:1E:82:A2:B6:F3:E1:A8:82:E4:C5:EE:3C:46:53","sha256":"AD:07:6F:39:EC:9D:DE:5D:01:AE:9F:A4:29:CF:11:44:D6:CD:26:E9:F1:14:4B:91:B7:6B:00:EE:F0:19:48:D4"}}},"request":{"raw":"GET /sdk/click?effp=725a9a464860515bcdb576360962c546\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6\u0026oid=143\u0026affid=809\u0026__cc=\u0026async=json HTTP/1.1\r\nHost: www.lmbahsj2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Dec 2023 19:08:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 87\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://money.quickencompare.com\r\nset-cookie: uniqueClick=448725a3-572a-4f5d-ade4-5eea9f673d2d:1701976101; Path=/; Expires=Fri, 08 Dec 2023 19:08:21 GMT; Secure; SameSite=None\ntransaction_id=3e601e8a03ad4f64ada14990f917fba6; Path=/; Expires=Wed, 06 Mar 2024 19:08:21 GMT; Secure; SameSite=None\r\nvary: Origin\r\nx-eflow-request-id: 0148111d-ec0b-4e04-84d0-dcbefe351c35\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON data\\012- , ASCII text","md5":"86571f1a7627d9de2e3b56e039d9a262","sha1":"95f7811f34a0a7fb692cc7efdb3b502bbd0bbd33","sha256":"bfea8c5323b0c6b9ed1fa94004c7b44583bfc13e67af2c043b43d0a84c588084","sha512":"436f409033a7e01beb6d0683d774b01ededba1455dfd97092392d1612022babcd36fbceb9d50f529b92f4835b755f285227b40e8a29404377252ef13f056f9d8","ssdeep":"","tlshash":"0cb012808c8d1b01020e0042108b8404009e87718d2763147561970513001080583008","first_seen":"2023-12-07T20:08:36Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rum-http-intake.logs.datadoghq.com/v1/input/pub6a529f19365581f6a44df4d3740084c6?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Alre-ern-webapp%2Cversion%3A1.0.3%20d-ASOUKJC12\u0026batch_time=1701976108032","fqdn":"rum-http-intake.logs.datadoghq.com","domain":"datadoghq.com","tld":"com"},"ip":{"addr":"3.233.153.123","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:28.074Z","timestamp":1701976108074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.logs.datadoghq.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 22 Mar 2023 00:00:00 GMT","end":"Fri, 22 Mar 2024 23:59:59 GMT"},"fingerprint":{"sha1":"29:24:46:A8:06:E2:F4:15:BE:A6:74:80:B3:36:D5:3D:E7:D5:15:99","sha256":"88:6A:77:71:F0:65:04:B6:A3:21:CF:5E:7C:85:F7:85:44:42:12:D1:A3:62:5E:91:BD:B3:CD:56:BC:D4:93:96"}}},"request":{"raw":"POST /v1/input/pub6a529f19365581f6a44df4d3740084c6?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Alre-ern-webapp%2Cversion%3A1.0.3%20d-ASOUKJC12\u0026batch_time=1701976108032 HTTP/1.1\r\nHost: rum-http-intake.logs.datadoghq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 15051\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Dec 2023 19:08:21 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text, with no line terminators","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-05-08T01:55:09.381891Z","times_seen":628606,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script.anura.io/request.js?instance=3439535758\u0026exid=493ea870-6517-5fd7-a943-13c4f47e7245\u0026source=affl_everflow_qc-mon_143_809\u0026campaign=2\u0026645838960587","fqdn":"script.anura.io","domain":"anura.io","tld":"io"},"ip":{"addr":"3.10.186.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:27.075Z","timestamp":1701976107075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script.anura.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 16 Oct 2023 00:00:00 GMT","end":"Wed, 13 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"83:CF:23:67:0B:B9:DB:BB:65:3F:31:44:AD:06:8B:B2:7E:B4:E1:20","sha256":"22:8A:B7:8D:F7:07:94:DE:BE:71:80:9B:A2:B1:3F:EA:42:3F:00:92:31:15:44:8C:50:D7:C4:4C:B1:2C:09:41"}}},"request":{"raw":"GET /request.js?instance=3439535758\u0026exid=493ea870-6517-5fd7-a943-13c4f47e7245\u0026source=affl_everflow_qc-mon_143_809\u0026campaign=2\u0026645838960587 HTTP/1.1\r\nHost: script.anura.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Dec 2023 19:08:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nvary: Accept-Encoding\r\nexpires: Sun, 28 Dec 1980 18:57:00 EST\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55844,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1912)","md5":"15f51890083306fc58cac543b29621b9","sha1":"b9ce10a3cf27103c2fcc5ce505ae14abd0bbef0f","sha256":"afae8a486b0ddb0b77ce3b46da9798cb7a924b0c4181be14db485909a57f07a6","sha512":"3936bc2c39ebd47ba9be184d5bba89a1084f1b2266d25515256b3b8325777f4b5e8a36e1c8133ac4bc38507a5db3697a0c9d76fe6fad194f2e5ad8bb31449695","ssdeep":"768:GknpbSzHCwvS0X37WBk2zwXrVglGwnqa6MQzGEVUCb8CohAWen3i:GubSLNWeQorO5nqa6MQzGEVUCbGAHS","tlshash":"1643d88b7662f001196211e9257f050ff3ba1ab9985c1080d7f5e4f5bcb1a5f8a3bb8d","first_seen":"2023-12-07T20:08:35Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"resource_available":true,"data":null}},"time_used":411,"timings":{"blocked":160,"dns":33,"connect":31,"send":0,"wait":90,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/af/bf384f/00000000000000007735fdb7/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191\u0026fvd=n5\u0026v=3","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.76.122","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:25.787Z","timestamp":1701976105787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 21 Sep 2023 00:00:00 GMT","end":"Mon, 21 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"42:82:CA:A5:EA:30:8F:60:60:37:2D:24:17:3D:52:62:54:D7:03:5B","sha256":"EF:DB:6C:82:0F:DB:74:FB:4D:DD:04:C5:A2:FF:1B:28:A6:BE:61:EE:CF:AF:10:A2:F7:9F:30:8F:71:44:61:29"}}},"request":{"raw":"GET /af/bf384f/00000000000000007735fdb7/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191\u0026fvd=n5\u0026v=3 HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.typekit.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/font-woff2\r\ncontent-length: 10520\r\netag: \"2be4f5725e5a1282789d7f7270687fcf4d372bef\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000\r\ndate: Thu, 07 Dec 2023 19:08:19 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10520,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10520, version 1.0\\012- data","md5":"9c062dccf131a3086c8150e06794fe67","sha1":"0030407cafb86d8e591e93904d1c070c3b9c08ae","sha256":"19aefb2c51bd12339798e6877c1317ca2edd1ccf827b9cddb622dc094031a8f0","sha512":"601d6096ddeeea04e2b9c9924ec14cff59e75ca20779c201ee7d31c948da7f641c5966fd5a944d1d0391a6d02cc556aa12ba88be216f6f405c79c28e631b19eb","ssdeep":"192:zVA1dTm3812fFPkSTAmC8jaPqepKXcA/VV7KWnCPrhp0Z702fkJ4sd86:y7TS/smjjfyAcANV+ySPa702ZsF","tlshash":"7622d0a1e293c354dd53dab94806073b0d6218fb3ff896837d3cec6a9b011a9308f916","first_seen":"2023-05-11T17:31:45Z","last_seen":"2026-05-03T04:17:18.124251Z","times_seen":138,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":91,"dns":14,"connect":3,"send":0,"wait":16,"receive":1,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.quickencompare.com/visitor","fqdn":"money.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:26.073Z","timestamp":1701976106073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 20 Feb 2023 00:00:00 GMT","end":"Tue, 20 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:4F:F5:9D:CC:0B:84:6F:19:29:53:3F:57:FA:AF:13:47:78:8C:D4","sha256":"AB:B5:03:98:D9:CB:8B:0F:D6:E0:7B:F4:85:30:EE:45:1C:DE:9E:CE:18:AA:55:47:24:90:A1:18:E4:40:03:EC"}}},"request":{"raw":"POST /visitor HTTP/1.1\r\nHost: money.quickencompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6\r\nContent-Type: application/json\r\nContent-Length: 1520\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visitorId=d5a111b1-f2d5-4847-8052-a2447ec05d55; sourceId=affl_everflow_qc-mon_143_809; connect.sid=s%3AfSu5ILVUcbfaH4AKdQlQwaEUwUawSm7I.l8eskAabiOVw1nN1zesOBlc9L%2FDdzbQIUmUtlsMhf3U; BIGipServerpl.prod-lreernwapp-lnd=!5PtaEC5j85/X7SJYWO5LSMyMNc4rDyboWDTLzvEU/Y4gR3nbyfkGzRNyA2NHrEi2L3GOcTyZXevwoaE=; __cf_bm=6a2vUbq8X29F5ft1vNgukoHvMqkNFbBcU6g7w3n1fd4-1701976097-0-AedD0DNg3rBBM/ZoWGMg9iKYhEfDp634iq1N1lDtGMuf+pCNTb1O+DgQhXNTZkSw5sArwOFqgRiyfi3Ix3uS9mg=; DAPROPS=\"bS:0|scsVersion:2.4.5|bcookieSupport:1|bcss.animations:1|bcss.columns:1|bcss.transforms:1|bcss.transitions:1|sdeviceAspectRatio:1280/1024|sdevicePixelRatio:1|idisplayColorDepth:24|bflashCapable:0|bhtml.audio.ogg:1|bhtml.audio.mp3:1|bhtml.audio.wav:1|bhtml.audio.m4a:1|bhtml.canvas:1|bhtml.inlinesvg:1|bhtml.svg:1|bhtml.video.ap4x:0|bhtml.video.av1:1|bhtml.video.ogg:1|bhtml.video.h264:1|bhtml.video.webm:1|bjs.accessDom:1|bjs.applicationCache:0|bjs.deviceMotion:1|bjs.geoLocation:1|bjs.indexedDB:1|bjs.json:1|bjs.localStorage:1|bjs.modifyCss:1|bjs.modifyDom:1|bjs.querySelector:1|bjs.sessionStorage:1|bjs.supportBasicJavaScript:1|bjs.supportConsoleLog:1|bjs.supportEventListener:1|bjs.supportEvents:1|bjs.webGl:1|bjs.webSockets:1|bjs.webSqlDatabase:0|bjs.webWorkers:1|bjs.xhr:1|srendererRef:02919241789|sscreenWidthHeight:1280/1024|stimeZone:UTC|buserMedia:1bE:0\"\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Dec 2023 19:08:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-dns-prefetch-control: off\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nreferrer-policy: same-origin\r\ncache-control: no-store\r\netag: W/\"e7-E94HlkUBYr5bJCf3eiJzP+KGCyc\"\r\ncf-cache-status: DYNAMIC\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 831f0e7e6bc0b51d-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":231,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"6a151c831d874e450fc3e7e79dcd56ac","sha1":"412cdb2fc8ae0e18847d6edccd55c9c2a826ba77","sha256":"fd987f3ef7fdc8c302e760f4fe48c5bb1a158fe178feb1ab228489776099048b","sha512":"782c49a04e61508754f86c970549341da001c9feec1944f3cccd443b8898cc8a4c9c6873a06ca140e51b60dbf8bbb013d68ce211af47fe82f35b7ab71972a63f","ssdeep":"","tlshash":"7dd0a767e45df468f68d9e8c153a0c58c6a5aa7022c1c08c844fe51a655fff44694a24","first_seen":"2023-12-07T20:08:36Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.quickencompare.com/app-configuration/?path=/lendingLeadGen/fraud/anura/enabled","fqdn":"money.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:26.245Z","timestamp":1701976106245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 20 Feb 2023 00:00:00 GMT","end":"Tue, 20 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:4F:F5:9D:CC:0B:84:6F:19:29:53:3F:57:FA:AF:13:47:78:8C:D4","sha256":"AB:B5:03:98:D9:CB:8B:0F:D6:E0:7B:F4:85:30:EE:45:1C:DE:9E:CE:18:AA:55:47:24:90:A1:18:E4:40:03:EC"}}},"request":{"raw":"GET /app-configuration/?path=/lendingLeadGen/fraud/anura/enabled HTTP/1.1\r\nHost: money.quickencompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visitorId=d5a111b1-f2d5-4847-8052-a2447ec05d55; sourceId=affl_everflow_qc-mon_143_809; connect.sid=s%3AfSu5ILVUcbfaH4AKdQlQwaEUwUawSm7I.l8eskAabiOVw1nN1zesOBlc9L%2FDdzbQIUmUtlsMhf3U; BIGipServerpl.prod-lreernwapp-lnd=!5PtaEC5j85/X7SJYWO5LSMyMNc4rDyboWDTLzvEU/Y4gR3nbyfkGzRNyA2NHrEi2L3GOcTyZXevwoaE=; __cf_bm=6a2vUbq8X29F5ft1vNgukoHvMqkNFbBcU6g7w3n1fd4-1701976097-0-AedD0DNg3rBBM/ZoWGMg9iKYhEfDp634iq1N1lDtGMuf+pCNTb1O+DgQhXNTZkSw5sArwOFqgRiyfi3Ix3uS9mg=; DAPROPS=\"bS:0|scsVersion:2.4.5|bcookieSupport:1|bcss.animations:1|bcss.columns:1|bcss.transforms:1|bcss.transitions:1|sdeviceAspectRatio:1280/1024|sdevicePixelRatio:1|idisplayColorDepth:24|bflashCapable:0|bhtml.audio.ogg:1|bhtml.audio.mp3:1|bhtml.audio.wav:1|bhtml.audio.m4a:1|bhtml.canvas:1|bhtml.inlinesvg:1|bhtml.svg:1|bhtml.video.ap4x:0|bhtml.video.av1:1|bhtml.video.ogg:1|bhtml.video.h264:1|bhtml.video.webm:1|bjs.accessDom:1|bjs.applicationCache:0|bjs.deviceMotion:1|bjs.geoLocation:1|bjs.indexedDB:1|bjs.json:1|bjs.localStorage:1|bjs.modifyCss:1|bjs.modifyDom:1|bjs.querySelector:1|bjs.sessionStorage:1|bjs.supportBasicJavaScript:1|bjs.supportConsoleLog:1|bjs.supportEventListener:1|bjs.supportEvents:1|bjs.webGl:1|bjs.webSockets:1|bjs.webSqlDatabase:0|bjs.webWorkers:1|bjs.xhr:1|srendererRef:02919241789|sscreenWidthHeight:1280/1024|stimeZone:UTC|buserMedia:1|saudioRef:25450949bE:0\"\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Dec 2023 19:08:20 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-dns-prefetch-control: off\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nreferrer-policy: same-origin\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 831f0e7f7d27b51d-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-05-08T01:56:15.411431Z","times_seen":382402,"resource_available":true,"data":null}},"time_used":798,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":798,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","fqdn":"money.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-07T19:08:21.991Z","timestamp":1701976101991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 20 Feb 2023 00:00:00 GMT","end":"Tue, 20 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:4F:F5:9D:CC:0B:84:6F:19:29:53:3F:57:FA:AF:13:47:78:8C:D4","sha256":"AB:B5:03:98:D9:CB:8B:0F:D6:E0:7B:F4:85:30:EE:45:1C:DE:9E:CE:18:AA:55:47:24:90:A1:18:E4:40:03:EC"}}},"request":{"raw":"GET /?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6 HTTP/1.1\r\nHost: money.quickencompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Dec 2023 19:08:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-dns-prefetch-control: off\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nreferrer-policy: same-origin\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nset-cookie: visitorId=d5a111b1-f2d5-4847-8052-a2447ec05d55; Domain=.quickencompare.com; Path=/; Expires=Fri, 06 Dec 2024 19:08:16 GMT\nsourceId=affl_everflow_qc-mon_143_809; Path=/; Expires=Thu, 14 Dec 2023 19:08:16 GMT\nconnect.sid=s%3AfSu5ILVUcbfaH4AKdQlQwaEUwUawSm7I.l8eskAabiOVw1nN1zesOBlc9L%2FDdzbQIUmUtlsMhf3U; Path=/; Expires=Thu, 14 Dec 2023 19:08:17 GMT; HttpOnly\nBIGipServerpl.prod-lreernwapp-lnd=!5PtaEC5j85/X7SJYWO5LSMyMNc4rDyboWDTLzvEU/Y4gR3nbyfkGzRNyA2NHrEi2L3GOcTyZXevwoaE=; path=/; Httponly; Secure\n__cf_bm=6a2vUbq8X29F5ft1vNgukoHvMqkNFbBcU6g7w3n1fd4-1701976097-0-AedD0DNg3rBBM/ZoWGMg9iKYhEfDp634iq1N1lDtGMuf+pCNTb1O+DgQhXNTZkSw5sArwOFqgRiyfi3Ix3uS9mg=; path=/; expires=Thu, 07-Dec-23 19:38:17 GMT; domain=.quickencompare.com; HttpOnly; Secure; SameSite=None\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 831f0e657cd5b51d-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24882,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T01:57:31.651154Z","times_seen":14815976,"resource_available":true,"data":null}},"time_used":1783,"timings":{"blocked":92,"dns":70,"connect":7,"send":0,"wait":1599,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-lre.refinance.enhancedrefinow.com/main.93e3cac8409e105ab51a.css","fqdn":"static-lre.refinance.enhancedrefinow.com","domain":"enhancedrefinow.com","tld":"com"},"ip":{"addr":"104.18.4.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:24.047Z","timestamp":1701976104047,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"enhancedrefinow.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 03 Mar 2023 00:00:00 GMT","end":"Fri, 01 Mar 2024 23:59:59 GMT"},"fingerprint":{"sha1":"CC:38:9A:93:4C:BD:74:FE:30:18:77:1F:80:24:AF:9E:02:FA:AB:56","sha256":"13:EE:41:7B:75:D4:1E:7D:00:43:FB:5F:7A:4F:92:8A:15:67:F5:DE:3C:88:12:3A:5F:B3:2C:4C:1B:9F:50:E3"}}},"request":{"raw":"GET /main.93e3cac8409e105ab51a.css HTTP/1.1\r\nHost: static-lre.refinance.enhancedrefinow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Dec 2023 19:08:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 13 Nov 2023 19:49:34 GMT\r\netag: W/\"51281ef41f6e2e58b368816515b69b7b\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: cQWHkrqEyqhTeJXjNNmvwKJQWJN5-Z9Ogl1iTx76tVdfXcT0CRjncw==\r\ncf-cache-status: HIT\r\nage: 2113\r\nexpires: Thu, 07 Dec 2023 23:08:17 GMT\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=gm0jkAuMBoxJhRMXqqCiZTYjjCBY_h6x2Ci0NYZcfsA-1701976097-0-AQZW2QUWkz9JwAvT12MQOoTiG8G7D8qv53zMcWw1YThtH31Y4aYuYwt8U8qw/GvNbJBuHTJgPhBuu5mQy5rFw6E=; path=/; expires=Thu, 07-Dec-23 19:38:17 GMT; domain=.enhancedrefinow.com; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 831f0e72984b0b61-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":175557,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (45544)","md5":"51281ef41f6e2e58b368816515b69b7b","sha1":"0c82a25d8cc39e108175154e244bcb2490b18b0d","sha256":"64cc6c3ae44025a0b21f96431acbdc5fe1601b19e27cfd4dfa0651dbb6776f33","sha512":"9efc5519e7820b85cdfb337ed6fa9f47f9e124e8ab707a5e9761a849485aa2f00dfaf555f889f128fa38398e1df6c789b21f429bb7d7c0974a891448359c8c48","ssdeep":"768:mMCSolXTXjzINgA9XkME+QXoxvdkzjujxAgTgzqjihRjcMInJIH4BITsMkmvHrTA:YzcgukskpJ/vB8CIzzre30AwClja","tlshash":"7d049532a520a1acb077c8eab681b6583115d517ea5b86f6fd61dd78c6c71b32f2330c","first_seen":"2023-10-31T16:36:34Z","last_seen":"2023-12-10T17:57:27Z","times_seen":30,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":136,"dns":49,"connect":1,"send":0,"wait":19,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.quickencompare.com/track","fqdn":"money.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:26.472Z","timestamp":1701976106472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 20 Feb 2023 00:00:00 GMT","end":"Tue, 20 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:4F:F5:9D:CC:0B:84:6F:19:29:53:3F:57:FA:AF:13:47:78:8C:D4","sha256":"AB:B5:03:98:D9:CB:8B:0F:D6:E0:7B:F4:85:30:EE:45:1C:DE:9E:CE:18:AA:55:47:24:90:A1:18:E4:40:03:EC"}}},"request":{"raw":"POST /track HTTP/1.1\r\nHost: money.quickencompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6\r\nContent-Type: application/json\r\nContent-Length: 464\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visitorId=d5a111b1-f2d5-4847-8052-a2447ec05d55; sourceId=affl_everflow_qc-mon_143_809; connect.sid=s%3AfSu5ILVUcbfaH4AKdQlQwaEUwUawSm7I.l8eskAabiOVw1nN1zesOBlc9L%2FDdzbQIUmUtlsMhf3U; BIGipServerpl.prod-lreernwapp-lnd=!5PtaEC5j85/X7SJYWO5LSMyMNc4rDyboWDTLzvEU/Y4gR3nbyfkGzRNyA2NHrEi2L3GOcTyZXevwoaE=; __cf_bm=6a2vUbq8X29F5ft1vNgukoHvMqkNFbBcU6g7w3n1fd4-1701976097-0-AedD0DNg3rBBM/ZoWGMg9iKYhEfDp634iq1N1lDtGMuf+pCNTb1O+DgQhXNTZkSw5sArwOFqgRiyfi3Ix3uS9mg=; DAPROPS=\"bS:0|scsVersion:2.4.5|bcookieSupport:1|bcss.animations:1|bcss.columns:1|bcss.transforms:1|bcss.transitions:1|sdeviceAspectRatio:1280/1024|sdevicePixelRatio:1|idisplayColorDepth:24|bflashCapable:0|bhtml.audio.ogg:1|bhtml.audio.mp3:1|bhtml.audio.wav:1|bhtml.audio.m4a:1|bhtml.canvas:1|bhtml.inlinesvg:1|bhtml.svg:1|bhtml.video.ap4x:0|bhtml.video.av1:1|bhtml.video.ogg:1|bhtml.video.h264:1|bhtml.video.webm:1|bjs.accessDom:1|bjs.applicationCache:0|bjs.deviceMotion:1|bjs.geoLocation:1|bjs.indexedDB:1|bjs.json:1|bjs.localStorage:1|bjs.modifyCss:1|bjs.modifyDom:1|bjs.querySelector:1|bjs.sessionStorage:1|bjs.supportBasicJavaScript:1|bjs.supportConsoleLog:1|bjs.supportEventListener:1|bjs.supportEvents:1|bjs.webGl:1|bjs.webSockets:1|bjs.webSqlDatabase:0|bjs.webWorkers:1|bjs.xhr:1|srendererRef:02919241789|sscreenWidthHeight:1280/1024|stimeZone:UTC|buserMedia:1|saudioRef:25450949bE:0\"; _dd_s=rum=1\u0026id=ffa29c93-ef4d-488c-83f9-5f68a2682363\u0026created=1701976106283\u0026expire=1701977006283\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Dec 2023 19:08:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-dns-prefetch-control: off\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nreferrer-policy: same-origin\r\ncache-control: no-store\r\netag: W/\"f6-qawp2eBhBBvM1cK1I6LinEzILnU\"\r\ncf-cache-status: DYNAMIC\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 831f0e80deceb51d-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":246,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"0494e98f9be9e0a834195389f2971083","sha1":"fd490abaffef02693d551998f374c21a5722e9ba","sha256":"0ca341bb8e9a9e7b0d37825a3fbde328f49960128a066f7d12c07d2096d702c4","sha512":"c37e10b98322d8bee405b05a2362e1c80a81af03bc2d6c5125daa226ec6e0b2b123da8957192435d4f1ac9a256fa364b0afa34d62c424116a8530c03d5f3d6c2","ssdeep":"","tlshash":"50d02b108215f850e8c80d1e3a3f1d3742a1d1e121e54488466deb04414d8b84bc9245","first_seen":"2023-12-07T20:08:36Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.typekit.net/p.css?s=1\u0026k=msd8xng\u0026ht=tk\u0026f=37513.37518.37522\u0026a=121980931\u0026app=typekit\u0026e=css","fqdn":"p.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"184.51.252.189","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:24.549Z","timestamp":1701976104549,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 21 Sep 2023 00:00:00 GMT","end":"Mon, 21 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"42:82:CA:A5:EA:30:8F:60:60:37:2D:24:17:3D:52:62:54:D7:03:5B","sha256":"EF:DB:6C:82:0F:DB:74:FB:4D:DD:04:C5:A2:FF:1B:28:A6:BE:61:EE:CF:AF:10:A2:F7:9F:30:8F:71:44:61:29"}}},"request":{"raw":"GET /p.css?s=1\u0026k=msd8xng\u0026ht=tk\u0026f=37513.37518.37522\u0026a=121980931\u0026app=typekit\u0026e=css HTTP/1.1\r\nHost: p.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.typekit.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css\r\ncontent-length: 5\r\nlast-modified: Fri, 14 Jul 2023 12:45:58 GMT\r\netag: \"64b14386-5\"\r\ncache-control: public, max-age=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\ndate: Thu, 07 Dec 2023 19:08:18 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"825e67eeb6b4bfac7536fc639a56ec43","sha1":"574a45385ae62544c7424e6f06417f0370b1a532","sha256":"c10ff60fd741e3b2b97479f16f45e5fa57449629f4d032f647fd23041a6ad7b1","sha512":"cdb6cde1fd1b32346cf34e75ae5b41646b947dc392ccd677d9b61fe32be80793f36362f58ba7b925336faa30f47fdc85105cadf460abde5d77fcf802caa30552","ssdeep":"","tlshash":"4540000000000300000000000330000000003000000000000300300000000000000000","first_seen":"2023-04-05T06:39:09Z","last_seen":"2025-04-06T19:07:10.877111Z","times_seen":6448,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":46,"dns":1,"connect":8,"send":0,"wait":11,"receive":4,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script.anura.io/response.json","fqdn":"script.anura.io","domain":"anura.io","tld":"io"},"ip":{"addr":"3.10.186.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:28.167Z","timestamp":1701976108167,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script.anura.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 16 Oct 2023 00:00:00 GMT","end":"Wed, 13 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"83:CF:23:67:0B:B9:DB:BB:65:3F:31:44:AD:06:8B:B2:7E:B4:E1:20","sha256":"22:8A:B7:8D:F7:07:94:DE:BE:71:80:9B:A2:B1:3F:EA:42:3F:00:92:31:15:44:8C:50:D7:C4:4C:B1:2C:09:41"}}},"request":{"raw":"POST /response.json HTTP/1.1\r\nHost: script.anura.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 5448\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Dec 2023 19:08:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: nginx\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST\r\nexpires: Sun, 28 Dec 1980 18:57:00 EST\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":151,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"d3b5e25c2421b935df7b14a3a4d9f37c","sha1":"a6904fa92cce1333021c2003ad2b123e44c20c12","sha256":"982615e86e13940fe146f83ecc30dc050cd2bb72651d1b4c6a4fd3b131612c7b","sha512":"ab645b1a1348ebe4521cd8ee61b8e0060b5d853adcc34f264f7ca628b586f67a38323d803fdb148a3be9f7305dbe512758dea0f0910d363a8205cb747a914280","ssdeep":"","tlshash":"2ec080074506f081eec04d9e27361c73549490d31287014dc15bdb0b09de4f14ae3145","first_seen":"2023-12-07T20:08:36Z","last_seen":"2023-12-07T20:08:36Z","times_seen":1,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":79,"dns":1,"connect":29,"send":0,"wait":131,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.quickencompare.com/nmn/logo/dollar-money-icon-small.svg","fqdn":"content.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:24.056Z","timestamp":1701976104056,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 20 Feb 2023 00:00:00 GMT","end":"Tue, 20 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:4F:F5:9D:CC:0B:84:6F:19:29:53:3F:57:FA:AF:13:47:78:8C:D4","sha256":"AB:B5:03:98:D9:CB:8B:0F:D6:E0:7B:F4:85:30:EE:45:1C:DE:9E:CE:18:AA:55:47:24:90:A1:18:E4:40:03:EC"}}},"request":{"raw":"GET /nmn/logo/dollar-money-icon-small.svg HTTP/1.1\r\nHost: content.quickencompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visitorId=d5a111b1-f2d5-4847-8052-a2447ec05d55; __cf_bm=6a2vUbq8X29F5ft1vNgukoHvMqkNFbBcU6g7w3n1fd4-1701976097-0-AedD0DNg3rBBM/ZoWGMg9iKYhEfDp634iq1N1lDtGMuf+pCNTb1O+DgQhXNTZkSw5sArwOFqgRiyfi3Ix3uS9mg=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Dec 2023 19:08:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 23 Nov 2023 14:00:50 GMT\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"3b280fb1b5f603b076383e1ca6ea531f\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6528f10684ec39317f94ed2a540d88b4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN54-C1\r\nx-amz-cf-id: Ani-paQksdVynqIW9BXjlj0Gx7_MvsMOT21oA0uKpKBIop_r2N12Ew==\r\ncf-cache-status: HIT\r\nage: 2113\r\nexpires: Thu, 07 Dec 2023 23:08:17 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 831f0e724c61b51d-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7628,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with very long lines (7675), with no line terminators","md5":"9c7fa5ca9ac7adf457a83b5aed9fe269","sha1":"d527d4db3df8b0adb6af6408d9ab45c3ec67dc02","sha256":"f647b5bacc626969604abca8928075eb34accf47048b1ffa58e2cc56c08b0d3a","sha512":"b82b24c4b59211de9d17a3b49b10c6a02a44bbb609446f110f7126c52431f419c96f29afc7f9a39b91dfd7019d89b003cfadc00ef5638679844fed237ef90773","ssdeep":"96:M8DOyUb8luS7tivhhDEz55KXkBAYl98WHxUsNvrf1WWE+M51v5mFMMf2B0n2ceb:tDOSluSefEz3FltHWyR9E+M5x52MMeb","tlshash":"86f14cb8ad3b976eb8865e9f8c5ac34c6c35f42b176490074d89afa3b1d68b020d4533","first_seen":"2023-06-02T22:01:07Z","last_seen":"2025-01-03T15:16:34.307587Z","times_seen":102,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.datadoghq-browser-agent.com/datadog-rum-v3.js","fqdn":"www.datadoghq-browser-agent.com","domain":"datadoghq-browser-agent.com","tld":"com"},"ip":{"addr":"54.230.111.221","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:25.744Z","timestamp":1701976105744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.datadoghq-browser-agent.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sat, 14 Jan 2023 00:00:00 GMT","end":"Tue, 16 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"FC:83:1B:FF:12:98:28:60:E5:F1:DC:73:0D:BC:6F:81:22:A7:F1:6D","sha256":"BF:90:E5:1B:7F:EB:5E:B6:0D:04:9C:89:BE:2F:4A:0D:AB:72:51:55:78:D7:96:34:11:26:6F:69:38:2E:17:B5"}}},"request":{"raw":"GET /datadog-rum-v3.js HTTP/1.1\r\nHost: www.datadoghq-browser-agent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Jan 2022 16:36:14 GMT\r\nserver: AmazonS3\r\ncontent-encoding: br\r\ndate: Thu, 07 Dec 2023 19:08:19 GMT\r\ncache-control: max-age=14400, s-maxage=60\r\netag: W/\"647fda9a4d3d74344732d76cf1fff47c\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: fR7DFeTmQJYPzGzx6spPk13ZO7Lk7P7ppg67PemW6cs_vIagqJtpUw==\r\nage: 28\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117677,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"647fda9a4d3d74344732d76cf1fff47c","sha1":"01720d421ce3373f1a1958a1d85edfae5ab5f442","sha256":"4375ebb4771e6dbb66555214b78781f96a3f6fc43f26b6e9acc4a4751551706b","sha512":"7a3c35cb75c6387a8c4f4359287cdad42c5722b7c1362c8189f8ef3d36f1f7642453ca830bf7b315f79947b384034d216e165b5b8b4f79a7596db760ceb86cad","ssdeep":"1536:yHOG/ZzSpabEJ1No/5612iRFDQ+0WVN83fIXDVeAr0tRoBAb3KrFgQn:wPIswXDVeA5Ab6rrn","tlshash":"2bb3e5dcf6c2b07517e33475516f260ab33a2954784a80a4e27ad1d53cb868ea237f7c","first_seen":"2023-03-07T13:55:13Z","last_seen":"2026-05-07T22:56:41.129175Z","times_seen":1670,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":136,"dns":86,"connect":2,"send":0,"wait":5,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lmbahsj2.com/scripts/sdk/everflow.js","fqdn":"www.lmbahsj2.com","domain":"lmbahsj2.com","tld":"com"},"ip":{"addr":"35.201.76.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:26.406Z","timestamp":1701976106406,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmbahsj2.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 28 Apr 2023 21:05:02 GMT","end":"Mon, 13 May 2024 15:10:13 GMT"},"fingerprint":{"sha1":"19:8A:1C:6D:15:5F:1E:82:A2:B6:F3:E1:A8:82:E4:C5:EE:3C:46:53","sha256":"AD:07:6F:39:EC:9D:DE:5D:01:AE:9F:A4:29:CF:11:44:D6:CD:26:E9:F1:14:4B:91:B7:6B:00:EE:F0:19:48:D4"}}},"request":{"raw":"GET /scripts/sdk/everflow.js HTTP/1.1\r\nHost: www.lmbahsj2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Dec 2023 19:08:20 GMT\r\ncontent-type: text/javascript\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model\r\ncache-control: max-age=14400\r\nvary: Origin\r\nx-eflow-request-id: bb68e999-0ef3-4017-9c1c-24e37d7642c8\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61234,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T01:57:31.651154Z","times_seen":14815976,"resource_available":true,"data":null}},"time_used":990,"timings":{"blocked":428,"dns":1,"connect":318,"send":0,"wait":126,"receive":0,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/action/0?ti=146000783\u0026Ver=2\u0026mid=e74912df-5519-4638-945f-f7c6655562a8\u0026sid=00a7dad0953411eebed2418615a2d4b9\u0026vid=00a7d190953411ee986bff2091246d9d\u0026vids=1\u0026msclkid=N\u0026pi=918639831\u0026lg=en-US\u0026sw=1280\u0026sh=1024\u0026sc=24\u0026tl=QuickenCompare%20Money%20-%20QUESTIONS\u0026p=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_809%26pkey1%3D809%26pkey2%3D2%26pkey3%3D3e601e8a03ad4f64ada14990f917fba6%26pkey%3D6608d798eb0b49089aa75baddb8f143c%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D809%26_ef_transaction_id%3D3e601e8a03ad4f64ada14990f917fba6\u0026r=\u0026lt=5675\u0026evt=pageLoad\u0026sv=1\u0026rn=195118","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"13.107.21.200","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:27.910Z","timestamp":1701976107910,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure TLS Issuing CA 01","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 24 Oct 2023 07:42:22 GMT","end":"Sun, 21 Apr 2024 07:42:22 GMT"},"fingerprint":{"sha1":"A5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD","sha256":"06:59:26:26:34:3D:BB:CB:40:56:0E:F2:BF:23:29:1D:C6:E4:C1:7D:4D:E6:72:6A:C5:15:AF:F0:1F:D6:A7:AC"}}},"request":{"raw":"GET /action/0?ti=146000783\u0026Ver=2\u0026mid=e74912df-5519-4638-945f-f7c6655562a8\u0026sid=00a7dad0953411eebed2418615a2d4b9\u0026vid=00a7d190953411ee986bff2091246d9d\u0026vids=1\u0026msclkid=N\u0026pi=918639831\u0026lg=en-US\u0026sw=1280\u0026sh=1024\u0026sc=24\u0026tl=QuickenCompare%20Money%20-%20QUESTIONS\u0026p=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_809%26pkey1%3D809%26pkey2%3D2%26pkey3%3D3e601e8a03ad4f64ada14990f917fba6%26pkey%3D6608d798eb0b49089aa75baddb8f143c%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D809%26_ef_transaction_id%3D3e601e8a03ad4f64ada14990f917fba6\u0026r=\u0026lt=5675\u0026evt=pageLoad\u0026sv=1\u0026rn=195118 HTTP/1.1\r\nHost: bat.bing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ncache-control: no-cache, must-revalidate\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nset-cookie: MUID=3E9C6BBF5A8A69AE0476785F5BDD68C1; domain=.bing.com; expires=Tue, 31-Dec-2024 19:08:21 GMT; path=/; SameSite=None; Secure; Priority=High;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: B2AF329BC7C14732A177592DD9C1F636 Ref B: OSL30EDGE0308 Ref C: 2023-12-07T19:08:21Z\r\ndate: Thu, 07 Dec 2023 19:08:20 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T01:57:31.651154Z","times_seen":14815976,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.revjet.com/analytics?acu=6680","fqdn":"ads.revjet.com","domain":"revjet.com","tld":"com"},"ip":{"addr":"65.21.20.219","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:26.462Z","timestamp":1701976106462,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.revjet.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Mar 2023 00:00:00 GMT","end":"Thu, 11 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"03:20:65:55:CD:08:1C:F0:68:28:E7:A4:5F:21:09:76:87:BF:9D:81","sha256":"AB:35:5A:BB:4C:BC:1E:79:31:77:DF:B2:5D:B9:14:82:26:40:71:97:7A:75:FC:34:01:DF:DA:3B:DC:B6:87:7A"}}},"request":{"raw":"GET /analytics?acu=6680 HTTP/1.1\r\nHost: ads.revjet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Dec 2023 19:08:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 05 Sep 2023 20:38:57 GMT\r\netag: W/\"64f791e1-4c14\"\r\nexpires: Thu, 07 Dec 2023 19:18:20 GMT\r\ncache-control: max-age=600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19476,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1311)","md5":"26ec352468322f70910e03feb9b8b8fb","sha1":"18878e8adcd809ad7a4850c8698efd24b22c04e5","sha256":"2d84cdbfaf9b2bc0ba30bc5f67e45d03b265b52c3cfe24353e09175b1fb0fdfb","sha512":"9b0d180ab85748c8e16701d2ab1603c9be6aaef8e481574d3b35152f9f134e66c07a4620101e23044c1a07c458b7aa02cfac1474089e44ba262eec85283aa0bc","ssdeep":"384:S7NAWyKtqOLyN59yqK+VDSvNjHwAcOOStnW/np:S5w0sq9+5S1LwARFmp","tlshash":"d892d68cba65b426876330b1617f560f723ba46fb884c8a4a184d8e17c7496d427bf6c","first_seen":"2023-03-12T09:30:56Z","last_seen":"2025-11-04T04:39:00.128265Z","times_seen":729,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":103,"dns":59,"connect":16,"send":0,"wait":17,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-refinance.enhancedrefinow.com/pixel-616e834028d94a75ecaf.js","fqdn":"cdn-refinance.enhancedrefinow.com","domain":"enhancedrefinow.com","tld":"com"},"ip":{"addr":"104.18.4.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_809\u0026pkey1=809\u0026pkey2=2\u0026pkey3=3e601e8a03ad4f64ada14990f917fba6\u0026pkey=6608d798eb0b49089aa75baddb8f143c\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=809\u0026_ef_transaction_id=3e601e8a03ad4f64ada14990f917fba6","date":"2023-12-07T19:08:24.050Z","timestamp":1701976104050,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"enhancedrefinow.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 03 Mar 2023 00:00:00 GMT","end":"Fri, 01 Mar 2024 23:59:59 GMT"},"fingerprint":{"sha1":"CC:38:9A:93:4C:BD:74:FE:30:18:77:1F:80:24:AF:9E:02:FA:AB:56","sha256":"13:EE:41:7B:75:D4:1E:7D:00:43:FB:5F:7A:4F:92:8A:15:67:F5:DE:3C:88:12:3A:5F:B3:2C:4C:1B:9F:50:E3"}}},"request":{"raw":"GET /pixel-616e834028d94a75ecaf.js HTTP/1.1\r\nHost: cdn-refinance.enhancedrefinow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Dec 2023 19:08:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-dns-prefetch-control: off\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nreferrer-policy: same-origin\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 05 Dec 2023 23:29:25 GMT\r\netag: W/\"258d6-18c3c509e09\"\r\ncf-cache-status: MISS\r\nexpires: Thu, 07 Dec 2023 23:08:18 GMT\r\nset-cookie: __cf_bm=ZjMm1TQsQ1tWp4ZWi0KhaCuHn95OlSYgWGa_nuLg3Iw-1701976098-0-Aarl6Oaq+3TWa0TlRT5FS1XG7BZ0AVjRb6epm5V99yepyF1N6lZ5T6FT8yKGfE9WhZZ/IpobQhJ9xOTbov/MPp4=; path=/; expires=Thu, 07-Dec-23 19:38:18 GMT; domain=.enhancedrefinow.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 831f0e7298500b61-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":153814,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T01:57:31.651154Z","times_seen":14815976,"resource_available":true,"data":null}},"time_used":1691,"timings":{"blocked":134,"dns":56,"connect":1,"send":0,"wait":1410,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}