{"report_id":"daa5b34e-b5bb-4f30-80a8-ae5a5a0d60e2","version":6,"status":"done","tags":[],"date":"2026-05-30T13:07:50Z","url":{"schema":"https","addr":"maxvpr.com/wn","fqdn":"maxvpr.com","domain":"maxvpr.com","tld":"com"},"ip":{"addr":"52.72.49.79","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.quickenloans.com/","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"title":"Quicken Loans | A Quicker Path To Financial Freedom","dom":{"size":121016,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (36943)","md5":"d7671d6cc61409902d3ba0a8a69af856","sha1":"bc3ae803d25263b9cbd8531026fec2932613faa7","sha256":"7e816bcdf44fae571bacbe5f969cdc6565f57cd576f98798c5a896547882590d","sha512":"4ed5f5ee1740377ebaf35e2b2dc120dbff871f1fc6a0e562ade870ebb90c824352305607160e7bc528991463e4adabe7eabbdb7f31a275e35a3139462811bbd9","ssdeep":"768:xr3u1GuNwWCd2PjzQyudtrUp4BaKzir4G5:x2zQy+y4QKo4e","tlshash":"07c373b1b39cfabe0d0386a24d6973966d5321adf50109c5bbffa2d847dbcc6c846448","dom_hash":"domhashb1018bc6dc2172169cae498cc8b42ae3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"maxvpr.com/wn","fqdn":"maxvpr.com","domain":"maxvpr.com","tld":"com"},"ip":{"addr":"52.72.49.79","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-04T13:07:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"kelesort-norchure.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sgtm.quickenloans.com","ip":{"addr":"216.239.34.21","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1998-07-24","domain_rank":3753446,"first_seen":"2024-12-03T14:07:06.786394Z","last_seen":"2026-05-27T18:23:44.097927Z","alert_count":0,"request_count":3,"received_data":5710,"sent_data":4370,"comment":"","tags":null,"fingerprints":null},{"fqdn":"shared-bff.quickenloans.com","ip":{"addr":"104.18.26.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-07-24","domain_rank":5130968,"first_seen":"2025-03-14T21:58:48.33177Z","last_seen":"2026-05-27T18:23:45.26285Z","alert_count":0,"request_count":18,"received_data":48645,"sent_data":19805,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-05-24T22:48:41.874191Z","alert_count":0,"request_count":1,"received_data":33601,"sent_data":518,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.1.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-05-24T22:26:02.229202Z","alert_count":0,"request_count":5,"received_data":2242856,"sent_data":2283,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bat.bing.net","ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1997-09-03","domain_rank":24312,"first_seen":"2023-11-04T08:19:21Z","last_seen":"2026-05-25T07:23:36.075216Z","alert_count":0,"request_count":2,"received_data":1054,"sent_data":1245,"comment":"","tags":null,"fingerprints":null},{"fqdn":"widget.trustpilot.com","ip":{"addr":"52.84.50.50","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2007-06-30","domain_rank":36063,"first_seen":"2017-02-01T19:05:34Z","last_seen":"2026-05-25T21:06:10.691822Z","alert_count":0,"request_count":5,"received_data":130579,"sent_data":3472,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"www.datadoghq-browser-agent.com","ip":{"addr":"52.222.188.176","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-03-26","domain_rank":7205,"first_seen":"2019-04-26T16:31:20Z","last_seen":"2026-05-27T19:52:17.444942Z","alert_count":0,"request_count":2,"received_data":224388,"sent_data":893,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-05-24T22:50:29.390198Z","alert_count":0,"request_count":3,"received_data":2361,"sent_data":2220,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-05-24T22:41:50.23946Z","alert_count":0,"request_count":10,"received_data":10111,"sent_data":11037,"comment":"","tags":null,"fingerprints":null},{"fqdn":"use.typekit.net","ip":{"addr":"23.36.77.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-08-02","domain_rank":4054,"first_seen":"2012-07-05T01:42:39Z","last_seen":"2026-05-25T07:31:11.603928Z","alert_count":0,"request_count":4,"received_data":87189,"sent_data":2273,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"kelesort-norchure.com","ip":{"addr":"54.240.174.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2018-06-15","domain_rank":1862938,"first_seen":"2019-01-18T13:17:27Z","last_seen":"2026-05-16T22:43:13.276622Z","alert_count":1,"request_count":1,"received_data":134009,"sent_data":526,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-05-24T22:47:05.749853Z","alert_count":0,"request_count":5,"received_data":2930,"sent_data":5543,"comment":"","tags":null,"fingerprints":null},{"fqdn":"content.quickenloans.com","ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-07-24","domain_rank":0,"first_seen":"2024-01-31T20:45:21Z","last_seen":"2026-05-27T18:23:44.110353Z","alert_count":0,"request_count":4,"received_data":34819,"sent_data":4640,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"p.typekit.net","ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-08-02","domain_rank":4638,"first_seen":"2012-05-23T14:28:57Z","last_seen":"2026-05-25T07:31:11.47072Z","alert_count":0,"request_count":1,"received_data":340,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"maxvpr.com","ip":{"addr":"52.72.49.79","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":133305,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"trackpixel.refinance.quickenloans.com","ip":{"addr":"104.18.13.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-07-24","domain_rank":0,"first_seen":"2022-07-03T23:04:36Z","last_seen":"2026-05-27T18:23:44.505816Z","alert_count":0,"request_count":1,"received_data":20315,"sent_data":664,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"www.quickenloans.com","ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-07-24","domain_rank":1940133,"first_seen":"2014-02-17T07:32:19Z","last_seen":"2026-05-16T22:21:52.049433Z","alert_count":0,"request_count":27,"received_data":4101834,"sent_data":22217,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"Gatsby:5.15.0","description":"Gatsby is a React-based open-source framework with performance, scalability and security built-in.","website":"https://www.gatsbyjs.org/","common_platform_enumeration":"","icon":"Gatsby.svg","categories":["Static site generator","JavaScript frameworks"]},{"name":"Adobe Fonts","description":"Adobe Fonts is a web-based service providing access to a vast library of high-quality fonts for web and print design.","website":"https://fonts.adobe.com","common_platform_enumeration":"","icon":"Adobe Fonts.svg","categories":["Font scripts"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Typekit","description":"Typekit is an online service which offers a subscription library of fonts.","website":"https://typekit.com","common_platform_enumeration":"","icon":"Typekit.png","categories":["Font scripts"]}]},{"fqdn":"bat.bing.com","ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1996-01-29","domain_rank":2924,"first_seen":"2014-04-08T09:23:16Z","last_seen":"2026-05-25T07:23:36.06959Z","alert_count":0,"request_count":5,"received_data":102222,"sent_data":2228,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.quickenloans.com/framework-0a7535232495ea795a62.js","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"003c366838a5dee5e52afbc9256d1928","sha1":"1788c7edb517bcc6965d95a73ae8a235f1b49718","sha256":"3503abfd332624eab1d81e36c051bae6df17cd7615173fb221c3d2efd60d3f0c","sha512":"5444ffe7a4498622e28fae89bc9729b9f510eab6a79d38c3c33478310cd500be605001921dc0d3931dfee5cba2e6834f888eca1ca3ac06ffbf2230eb4ec5178c","ssdeep":"1536:lOQ8vukW5eZ7j9fohPQdeb9H78r9m0qKCmT9i9GrQsQ0llP2qcK:z81Eb9H2ENki9IQsOK","tlshash":"cad3f6e83992f5516ab302a700ef1807733d1a1b280c49a0a615fd9e75f846eb17bfdd","size":140952,"data":"","first_seen":"2025-11-19T23:18:11.177931Z","last_seen":"2026-06-04T15:54:08.103881Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa2623b5e7e46be6ce263915542708da","sha1":"4e46a4b72526adde11fb3603e8b2049ebea43957","sha256":"8fb45f4fcdad19abd63be91dd83aa796f0b267137698ea047c981585d019b0bc","sha512":"de16ef2e71e5943aef5796f2d88e92369fac3f1470afe248ddc5e9cf5962bc97f3c6beb564dc93f09e1d32e3fac63e9c633695fe2d51136cfe3b8c0d473d531d","ssdeep":"","tlshash":"75f05cd938ad7819da556434ab7fca18709a20ad1803c2a26657cc44ae68a56001eddf","size":450,"data":"","first_seen":"2025-04-10T14:35:07.033559Z","last_seen":"2026-06-05T05:15:13.563634Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d97d5bf37251aff0f0e924fdebb256ae","sha1":"3b5ae9adebff3197d670094b72132268a967b54c","sha256":"13148e17393fd98b59138034226d911bd8cad8a321fb65247a16a3984a207c0a","sha512":"1d092bf96e2a14bd80fe259ba52011d85f60dd1e957db40a6ebbf50253e38e5f885f75f69b036f5a6845fe5344ab95cf2412d56b7e72140518a145d499a702b1","ssdeep":"","tlshash":"6f11483c2cd72818920fd7fe766fd78e10b674025d84cdd08549c09ca559e9500d177c","size":903,"data":"","first_seen":"2025-01-29T19:04:39.683607Z","last_seen":"2026-06-04T15:54:08.239408Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RXLL9Z7XBK\u0026cx=c\u0026gtm=4e65r2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.1.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e7900f1e6f35aa5e22deb97d113270c","sha1":"ad0dc9d4561812dd584ef2db7ba02522baa5526a","sha256":"64e92267190302d350ca3708dcd2e730e08e958e92e60d61433d2f1309c00b2e","sha512":"17d147f9337f501d459498053be248ffe9bacc3e31c07ddd90a2749227eeafdc37ea896fa16c457b7f3fe786e6be1ea5be33cd31ef93f15f029bec9a95c34838","ssdeep":"6144:1GORfDNalVf36lwSXbDQCtEhuX7aWCBbnr5ma5V/Qv+:k3lVf36RDQX75xw+","tlshash":"2fa4e8ceb3d674665396f478503f01cba57b28e2b44cc89ab189cce02e7469a4167f7c","size":489808,"data":"","first_seen":"2026-05-30T13:08:05.462432Z","last_seen":"2026-05-30T13:08:05.462432Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/bat.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9200f6aeb863daa8622d6d04b6439ce","sha1":"27f04243174adb38dc4297bf48df84bd6f81ee4e","sha256":"855230e1321917153b6859521e1ccfab0dce7497f88645e73d7e6db9c4bbe3b1","sha512":"8bed70ccf60061743fb71be37b2a56cdf918063cd01fb33d0d2edead3e1270b27a2c6d92735c08ceb542c71d4df4b8e2f09c84bc16a0df5a8563f0e33d155e9d","ssdeep":"768:YcMOGhicg/XNIh5HQm3mT1koLQBExf6ybGVGOjJDuOk:TMOGkcgVE34Lbxf6ybGMic","tlshash":"04430b4333509a7646f9419c786a2903a336570e30be70dc7a8cf8e6945de4b7237b7a","size":55262,"data":"","first_seen":"2026-04-02T20:43:57.836244Z","last_seen":"2026-06-07T21:57:57.848146Z","times_seen":48797,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6171324d22a40fa39ec24be0211fdb4e","sha1":"22043a585c37754f262b7ed99b839835965b2dd3","sha256":"52e65ea2b3c84d1b0a847c5ec2bb9d2ae8a3c982fe52064f55241648368501ca","sha512":"ef95b160d1f1bba64db5941be18dec84fc1e83703d6cfe8c965e8434bbd6c5fb8b791fc4cccf35c7e0d1ef51396f4c106ddb0e66da4286b3e6e8f865ff99a90a","ssdeep":"","tlshash":"c1e0c0cb78111875629a46b93271a12970531208b4091c22cefd88342a34b8788074dc","size":346,"data":"","first_seen":"2025-01-29T19:04:39.649167Z","last_seen":"2026-06-04T15:54:08.201284Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"25334c2e5258ff0806be40103e46e73a","sha1":"8f452a71b13e067592ff0e4ea9d1d672a9a62f3f","sha256":"b64cab9f6eed5e170ffd98ac12c12fcd2a84c9a97a0998904eb1d36bd8755702","sha512":"41457fba5ea14dd6cc51295fe1a94984d29e1e1b8949aef675a69a3c6fc5cf2bc6a2eafb7e23e64ef04b2ea3d7311aa986557ffb3ffb5911811d1c6105878b29","ssdeep":"","tlshash":"7bb0220ff3ce3032efc323e2082c8a88002300200800e2c8e2b83ee0002c00800bfe0f","size":119,"data":"","first_seen":"2025-01-29T19:03:44.548122Z","last_seen":"2026-06-05T05:15:13.556313Z","times_seen":238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.datadoghq-browser-agent.com/us1/v5/datadog-logs.js","fqdn":"www.datadoghq-browser-agent.com","domain":"datadoghq-browser-agent.com","tld":"com"},"ip":{"addr":"52.222.188.176","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e229238b65ffda55a248392b78704816","sha1":"df51ff61090c86fb44e3efb8be27966085ed470d","sha256":"d3880ef4d7b5da91b49bf616781458b9f9ea43b67a7214e754f0d652dca4dd5d","sha512":"89e2fb527502154263b7ffab3c6e40156f89d9a9a13a7eb61e0d108d43bc4be17452e8607b60f354c79feb205c70b1c1b9c0c90e6719f96ae61de82102916b7b","ssdeep":"768:osGeLUpZ3YHRxWNMsTx0O5jWlUPLc7xWDcFiTXGwudUpVK:osps3O8isTqUPLM9iMUHK","tlshash":"4a43b6ccb686b02113977172517f260ab33f2e55781e8420e267e2c47db865e9633f6d","size":57534,"data":"","first_seen":"2025-02-14T14:28:23.692261Z","last_seen":"2026-06-07T04:05:30.917431Z","times_seen":1028,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2dcd4fd35fd3da7f58210793629cc1fa","sha1":"26bb50f7550db0f0c7039e13ed2415c6cb494c96","sha256":"c99141044021551efe16dc7bda66ba04cc59d2c025cfb0eb2691108cceb2bdd9","sha512":"8e390997ed5f0f0d06e31e746b2c75e0481b0bd86672ee2ffe686482440b624303848ccbd64b99c68034987878218e1ee6f6bebf0caf0b9ef699ed51af085177","ssdeep":"","tlshash":"95f028b4ba3ca373298a22d6952974d0b83032bde14bc1bc24299835e11cdb32915aa6","size":609,"data":"","first_seen":"2023-03-07T12:10:27Z","last_seen":"2026-06-04T15:54:08.237646Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/webpack-runtime-f56f190d29a1eab2cf7b.js","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2a37e8b8c664fee12ec34d493b52f4b","sha1":"ecbb4bdac703b385c90f5b0e94708c979e48dec8","sha256":"822e8134198be544082cec9855e9054c86a0e1a07f7f7f9493e3d6f3e75c6b77","sha512":"104064205404b04faf7d8151750f06d084621f86c5429ba988e5eb6deb8cfe78f6789c70d95fa6ab4917d8a17d2a0f298193876f47bb16b765526b51a78c64c7","ssdeep":"96:P/hEDq8FRw0elA5LtB7Ry1TuPl+VnmVBKST/hmRRc+irc3S:PaDBFW0H5LtB7us+Mj/Ou+ZS","tlshash":"5dc11bf879a574726eb3d048153f6a82797f1473984f68a5d607d1e07cf250c4029bf6","size":5719,"data":"","first_seen":"2026-05-30T13:08:05.457102Z","last_seen":"2026-05-31T04:02:18.062481Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2dcd4fd35fd3da7f58210793629cc1fa","sha1":"26bb50f7550db0f0c7039e13ed2415c6cb494c96","sha256":"c99141044021551efe16dc7bda66ba04cc59d2c025cfb0eb2691108cceb2bdd9","sha512":"8e390997ed5f0f0d06e31e746b2c75e0481b0bd86672ee2ffe686482440b624303848ccbd64b99c68034987878218e1ee6f6bebf0caf0b9ef699ed51af085177","ssdeep":"","tlshash":"95f028b4ba3ca373298a22d6952974d0b83032bde14bc1bc24299835e11cdb32915aa6","size":609,"data":"","first_seen":"2023-03-07T12:10:27Z","last_seen":"2026-06-04T15:54:08.237646Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/396-69ff8cb14bb501dc1e26.js","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"62edfca5834f0054e1a6e7183ee5cb9c","sha1":"068b960335619530010175922351c3d71142fe4d","sha256":"39e1560b4ddefcd63d22d41d677750af63a5b6901bb594551f61902917a8eda3","sha512":"c93693057707d0d631b6717a535db5d7b318639f3a41cb81eb68003996ce2b6c11ec4d70beb77a78cb390d3dc5f0fc24650fe714a314a6ea1b65f9ff40894056","ssdeep":"","tlshash":"ba51c7ac39a9f8b6b62730e9105e185056386a99e113c054d478ecd9f83ec9d0c33f9a","size":2744,"data":"","first_seen":"2025-11-19T23:18:11.153671Z","last_seen":"2026-06-04T15:54:08.189786Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9fe479b4ae48a00e90333be1bb27bbe4","sha1":"8b5c12d1a9813d4e6c68b788996da1d69fe9ea6f","sha256":"38a97fd6467b8c9369a75c90dc320d514055a19dee391985d3342049731928da","sha512":"dd35182faf2f06bdcc62ad088f7a85f1b691afdd106a90e83c52ea9caba2621beffebe5451b7bf8ed024d1213b3ac67cc293852d344e96385e9147ed3852f803","ssdeep":"","tlshash":"7b11d0ea54da953106b3a17a0f7f660528b7104b6c563aa4fd3c42886f1c23f20b77d8","size":1063,"data":"","first_seen":"2026-05-27T18:23:51.188213Z","last_seen":"2026-06-04T15:54:08.224193Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"11c6722ca557e324fdd0f0ed79092e83","sha1":"fd9ca90c86f2c42cc93fdf893ec0ab01c5365d0c","sha256":"971cb052cda77b8fdce07279acd647c0280b3a5c5cbdf839b9e74467e19bb3ca","sha512":"83d224ada6f470f000a7cc53b98401560612380c8fd0bb90b44022828068e65790d1116e956408a753c65442519434d94cc8d8c505ee1d1bee97e6adddf2f37a","ssdeep":"","tlshash":"4621dd2b3956286a51a478dc4b2f5b29707232a3a35015bfd8355a403f3d893d7f2fa4","size":1328,"data":"","first_seen":"2025-02-14T14:28:23.766029Z","last_seen":"2026-06-05T05:15:13.570606Z","times_seen":223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5B82MZ73","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.1.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4833f5df35ae2570ef750480510e6cf","sha1":"a26ce8b7924c35f3924cb75d72d1b620d0771808","sha256":"951a1b50914bd7c1f4e171da1849fe6251048f5cfec430c61a976d46726c6540","sha512":"edd3422d336ac125c75cd04196653d53330452f5caf4a43d00834a254fea6c0f6cd54f326579f4a6fac4a6e142ee99a99eb9e7a5ce82626b521d8ae5e71c60dc","ssdeep":"6144:QC2RfDNMVf3alwSXbTFQSvtxhuX7aWCBbnIb0aoCE+:QCtVf3aRxQSiroh+","tlshash":"eca42acdb3d6746253a2b478903f018ba57a28e2f44cc895f186cce42e7469a5273f7d","size":472719,"data":"","first_seen":"2026-05-30T13:08:05.451721Z","last_seen":"2026-05-30T13:08:05.451721Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-11388547050\u0026cx=c\u0026gtm=4e65r2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.1.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d587b8f90fc2b90987cff4653d113be","sha1":"b7ce518d9c7d73edbf730753a1b4486bb9b3dcfb","sha256":"e92ef8263e26149c461dbb7fe6a646779b33941e15c068f64022465c01800598","sha512":"a79d9692362da4f9b50cac7627fe19c456951730811839645fbbd0bf007e6851e946831b3c6ccb25caadac6507a03c82be4dd837028724b18f980e68e3f7f0ba","ssdeep":"6144:OTRfDNlVf3AlwSXbTFQSvtxhuX7aWCBbnNlvaoJ+:OFVf3ARxQST8oJ+","tlshash":"7b9408cdb3d6746253a2f478503f018ba57a68e2b44cc899f189cce42e7469a4277f7c","size":427092,"data":"","first_seen":"2026-05-30T13:08:05.449065Z","last_seen":"2026-05-30T13:08:05.449065Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/p/action/247005605.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c768145ce5310ff06ee70cb2541622a3","sha1":"1dfcfa97d66711578651c284d5f0cf866589ef52","sha256":"025d3b711439bbd2c7a89851b7c78b07dac3aa29c867be5aef440ebce01abe7d","sha512":"d6ec9cf12720a6b52813c6f2538264ad2fcc8532c972fca262e83c7c503fd6e8af8f777f9025ba02cd68aeba5b4fdd448c9dfa7cc8ce851b46bc44de6cca5887","ssdeep":"","tlshash":"b141bf5f299631ba78a3643e87ff945867721207a245ec507cacc1846fa481c8764f8c","size":2124,"data":"","first_seen":"2026-02-03T00:41:02.699952Z","last_seen":"2026-06-05T05:15:13.524461Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v833ccba57c9e4d2798f2e76cebdd09a11778172276447","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ec2f610910f9dfd8e87975604e5e34c","sha1":"10d61ee41e8fe816ca08616159d7b6b8294a2011","sha256":"aca73fc574e12740e3368860b88a284d01b643456f3ed6a06322ecb47750563f","sha512":"e7b30399c71c25762d3671fe662070cc2e236f6aef815084a2460df8bfe72e598ef2b7d84ff808a56d80e7af6227fddbfb45046ac8218ee647fe66b7c08b3f11","ssdeep":"384:qVCILwCiUg1IX33sDycq+AgMXUQKxrhxIZOGNG620vbgZLTE5egwolSV0yuuokwz:AwCiUqHmcd/5xdKZdt8Z3Cer2yuuDPQB","tlshash":"6ce219e9b595713613f350b2406f220bb33a7562588e8018e22bd7c16c78eded267f6d","size":33228,"data":"","first_seen":"2026-05-07T16:46:10.96487Z","last_seen":"2026-06-08T01:29:03.256058Z","times_seen":29970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/global-styles-96d160cf0bb17ca7d449.js","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9029cf7dc2effd0454ee09f634b2b7d4","sha1":"7a00f324e9e9b0ee874194299ac748d16e1fc145","sha256":"bf6a551047c5c0fffe574eb9f3cfc002de0f9e7064ccdff9457ac6c7d123fc86","sha512":"da56530eecc92c90dcc422a4e4bf095ffcb50e3b88fec0586a0f9c4990c908955410b86d87a851f0446bc99e8c49c6b726f11ca01071eaf9c4c6f2c23027d3ae","ssdeep":"384:+jsqleouO3PmUNFh5d1qSdgyqfYcojjasQ:+gseox3PmEFh5d1qSdgyjdjjasQ","tlshash":"0d72c3ddb4e2b548066a39b5603f326ea77f9dd2189d9601827161cafcb038c9433edd","size":16493,"data":"","first_seen":"2026-05-30T13:08:05.440265Z","last_seen":"2026-05-31T04:02:18.056462Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fb1b20cd3fe84b478b7728a23b513ba","sha1":"fd54a5aa3a5141158b3ff5058aa235ae113f8ca3","sha256":"27b6b3b02a9f3440a745746a44f93b6bad4e3e1ad71e8f23760d56ef60b07684","sha512":"0cbe12111dd9dc5185c340932a7bb48080179ab1b1682e67beeb4f5041212bf7ba7e7a03b97164f8e82a98858c15e474ef9dcb448b7c7c1b22f188cb904dc1b0","ssdeep":"","tlshash":"56f0dddcb1ae677404927a7a9befd358b4753d04d1419c7201489cfe18388da2a83e89","size":645,"data":"","first_seen":"2024-06-17T00:05:15Z","last_seen":"2026-06-05T05:15:13.543869Z","times_seen":697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbe9aa0fff973cfdb2adbbb62e3c0ebe","sha1":"1abcfb3b4ff13102fad28127e5109cf55c976d2d","sha256":"6d530fff7ea3dacd7ed37c00400ed35a19ab14ecbb2e28237e8b4870ce6c8d60","sha512":"b68789da4c3fb1ad1119000332666f013e45fcc407f119ba4422e4d03702f5019ed1abe7d3826943e68880ba04faec555a740c31175a420a25393058576cb2dc","ssdeep":"","tlshash":"f101a22bfa8c203624e7b156162a6b04114759eb19f16108a3720ff4b25b10349cebed","size":669,"data":"","first_seen":"2025-08-25T21:54:10.006553Z","last_seen":"2026-06-05T05:15:13.546944Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-11380533681\u0026cx=c\u0026gtm=4e65r2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.1.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"627ced92553a0a962df543fa9f0516d8","sha1":"196c23d532205a79494a0a0445810b8198321c01","sha256":"3c503acbdeb71f6fc83704a34dc55b4c01a54630de912d8c8848fc6f2f16201e","sha512":"88270d2f7838d7acfbabddbc4c48b76ac1bcfb127432f80dfb0d7ef9182bf58ce85910f3bed2ab464738fb59c537bd6fa7f3d0f2e8eb46bb8d7be3d77e1006a3","ssdeep":"6144:OORfDNlVf3AlwSXbTFQSvtxhuX7aWCBbnNlvaoJ+:OiVf3ARxQST8oJ+","tlshash":"109408cdb3d6706253a3b478503f018ba57a68e2b44cc899f189cce42e7469a4277f7c","size":426687,"data":"","first_seen":"2026-05-30T13:08:05.450017Z","last_seen":"2026-05-30T13:08:05.450017Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/main.js","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"52.84.50.50","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bd67af4606088ca9b8ae47ddf9663f4","sha1":"df5d83b4c69262f03fd60517100f13e54331387d","sha256":"a2f0a11269660876837776417e9c7deab4b7762fe3441a4fb2f85c47ec9d075c","sha512":"4e559738a46c2939d145a07f876181c7519cd7083bdb8f708b5a22eef1f1341953adc1f673f2436881c4ee69c982e09e9e45053df1a9f8ace8579c7d80372e3d","ssdeep":"1536:lmy4UeduqQ1dBqt5fjlccsDdvXkwCn2zQy+y46wu3mP7YkRrcVXf:lzs6j","tlshash":"93333c9232c1a0b40187c7873c299684f21770acf94784ecf9fd6ed95771c8e622aeb4","size":52616,"data":"","first_seen":"2026-05-15T12:37:44.511179Z","last_seen":"2026-06-07T03:44:55.085271Z","times_seen":310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16663922781\u0026cx=c\u0026gtm=4e65r2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.1.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a0d0736735bd177f72de57b06685e41","sha1":"e4f012e41dc29311596ccbdf8898accf9dddaa73","sha256":"5dad6ae581b59372ee631eada03773538359af4ac9d0dbed246dc1139c237869","sha512":"28e62f2afad47f22282a8fcc8086e1b5d6861dce79804606b8142ef3170acf46eddb9cab5c0e86ab1c0c08cf7cd90fccbb13a7181efb18eb57521ca8710b4fb2","ssdeep":"6144:s0RfDNlVf3AlwSXbTFQSvtxhuX7aWCBbnNlvaow+:sgVf3ARxQST8ow+","tlshash":"869409cdb3d6706253a3b478503f018ba57a69e2b44cc899f14acce42e7469a4277f7c","size":423021,"data":"","first_seen":"2026-05-30T13:08:05.486297Z","last_seen":"2026-05-30T13:08:05.486297Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"52.84.50.50","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3a9a2660d6b39c094392e60a46e6c5f","sha1":"f81a65fb815ecb294c95f85c1e73d70b573e5619","sha256":"c9d8862c05ed77d6fb6871f6e72a6e41132693c86943bbcdbdab5367bc55bc01","sha512":"0fe85bcda57e369ca66b903db2debccb58bfd995fd3f9e9616900ef1a862b9e890d2bbf801cdb873afce0eaa52de812a9212ffeda82db83f73900c260246139e","ssdeep":"768:BUvI7Bt+WNX75sjAuwqU3o+bz3y2uxtFq+ZdDJvQ64YB:avI7Bt+WNlsjAg+bz3lAtFq+Zbf4M","tlshash":"8db2e5e431e2f47642c6a129543f6209b27278687985d488b57cc8f26fa0d9e3237f7d","size":24915,"data":"","first_seen":"2026-04-07T13:59:33.850722Z","last_seen":"2026-06-07T20:15:32.744034Z","times_seen":7755,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f4e6967c2d05af5a0ec29c760cb19c0","sha1":"5402b01ae5e093df8bcd8a41e31bae212f8a8175","sha256":"c0869c03f9fd91b1b92cb4fb02fd6e60bfe7f362e2ecfc6b0dd5c097539488ac","sha512":"430eb9a5fefb0f02f79ef8cd6f7a05e4a51979f1a699d7b061cadcbe58d5ad384975e56a2effed0a4d654b0449ffa9745fdf4b2612ec989db76a553bb94313c9","ssdeep":"","tlshash":"eff0d45a1c1eb47117b4287cf23786153095124221451ae9c68bc5383572cc550c294c","size":456,"data":"","first_seen":"2025-01-29T19:04:39.664069Z","last_seen":"2026-06-04T15:54:08.204737Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b91c3035149c692414d277c2a6b0c94","sha1":"16e11d1c9116b71320feb4df5b54fdcb92ec9aa2","sha256":"88f08d018a60f1dd50516e9e6016c44df4e3f1cc46f019d0614c8dcfa442159c","sha512":"0b67494b79ae79fdd20a4f88893ac9a6ead252953219179c3fa714b46ea5af0a66326bf80d163e70b0bea6b81d7b2204f57432fde12aaf087abcf7c1627b56a3","ssdeep":"","tlshash":"2f11008bbb1d213211f760500b7b6708302fb68693c19128b7f15aac6b1c543b94fddc","size":934,"data":"","first_seen":"2025-08-25T21:54:09.995986Z","last_seen":"2026-06-05T05:15:13.571542Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/component---src-containers-wp-page-container-wp-page-container-jsx-293310eecdfe9b0405f2.js","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e34e0bade4269aee8b8a97ceee220c7","sha1":"6cf1f8be44ad582423b65cfa9aec024b62bff0ba","sha256":"ce5c34e7c06924f0bbfce09c046c623db6424923fecfed4181e536ab4a1a00d5","sha512":"ce6d2393d934000f2aa92aa52854116a35693222b3b4336f7bc23c90db35860e06bd5db1e3319ea36e974697353ea7fbced73d5d53da1c6df9fbbdd69d0e07d8","ssdeep":"","tlshash":"f9614469bf72e46c71bb9cdfc0b75c19e1187f17a5709a0088839cc8709979eb216a3d","size":3353,"data":"","first_seen":"2026-05-10T18:37:53.535389Z","last_seen":"2026-06-04T15:54:08.156899Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/p/conversions/t/247005605?insights=1","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b224a9860151200b1ec19f73064e64b0","sha1":"c0ba6b755b01b7577ff2f351800869d2f2ccf8bc","sha256":"80c5266aa3f78ad66b3e3d0800663fcedd1087623fe893765ed27d520b4f6f6c","sha512":"d364e8e6347c16a77b7f70f01382384916d36c6520c42fd8e2b5305cf2f54bf05432a3102710c3fd2dd251ea9b3398d9ade08faf033bfd79fbb34eb1e863cbcb","ssdeep":"","tlshash":"6f01f135fc8db5672b62106607be4f08735d120e34148021558e4eb50a7c4cf03f76b9","size":796,"data":"","first_seen":"2026-05-30T13:08:05.4462Z","last_seen":"2026-05-30T13:08:05.4462Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/p/conversions/s/0.8.64","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"08aa236ee075c414528590dcbd829d81","sha1":"aff0fea20996f9c969b472117517a182c545a4f2","sha256":"66524a962d3a57008555a262df1eb09580891095bd26e82c858de26c1c2da8ab","sha512":"b24829c8ca8743e241169e4d38a000c0ac44ce6292dc1ad5f0692d00249d8d5b39c60fc3efe0df7cbc777610b1a53138056fff4f0fc6bfc4a3034ac299a9b3e5","ssdeep":"768:MDfRNWL2rF9veXP5jUokPukNmDbAX4OdX8hj7m7T:MDJNW6rvixlZH+D8gP","tlshash":"c00319ccb5427079837390b551bf210be2367d5678071860c536eac47d38beda2abe6e","size":40485,"data":"","first_seen":"2026-05-21T16:26:56.18179Z","last_seen":"2026-06-05T10:39:57.968569Z","times_seen":504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/gatsby-plugin-image-279a2eea236ee735eb64.js","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09472154fe98c1ee16409fc313c0f72","sha1":"757f7d56eb8c2b4fa7969da0bf6c59e9bc1eb932","sha256":"151e8944ba4a3498856c6cede2763a4584a46df2f84485b1cbf567c9260058cc","sha512":"df3b929d58b07d331e1f7a84a4d993246fda2e8b36e274b3cafd0985100549c754646e1adb2bdb8426fda9e6dc76a56c18a679a5ead8935bbf8048fc37c7818a","ssdeep":"","tlshash":"cff049c8b2e2f40d1a0b2160257f7c9aa23e98d2685d8104cf600483f9b170c8022bd9","size":544,"data":"","first_seen":"2025-11-19T23:18:11.150576Z","last_seen":"2026-06-04T15:54:08.145004Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"191d5df2a4ba594130fc7503f72d3bf9","sha1":"d28ea5177714a531bfa228bfed4c21107931e422","sha256":"7a0a5b96eaa40fc353d1b6376d6cbbada33db5120c91f5166e8ab463c2aab059","sha512":"7395cf31de3cd05fec5208e75b258a2ae76a414b7144724a79a6822e21dd29add3ab5ba9d8f53a6055221777a0045c2ac50c4fa3e5ab197944d0af6a23d3ecf0","ssdeep":"","tlshash":"0e90044c0151c0c400f00355157577115447000dcf174505050d3407f0030df43dc5f0","size":40,"data":"","first_seen":"2023-03-07T12:22:24Z","last_seen":"2026-06-07T22:02:45.597613Z","times_seen":3843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"290d6d35dadbc1193590d112a9138ffc","sha1":"4b9d15fa0b0c8f4189b03b3f40676f97744074d9","sha256":"d13075c330240516fc3407c244aeb03754736245fbafcb9cc74521ca479e1408","sha512":"c09261159a261fa1c3afa6651d7f42464b62f415c6fb7da9fb853a2e8f24f690211cec050c5743ebdfbbcff0920109853d6fd8186f15024ed23c1a3b999f199d","ssdeep":"","tlshash":"4351e5f08e5f0833f8f9920e2ab72fa64ec1de52d8825aed720696c583f7464551c5cb","size":2837,"data":"","first_seen":"2026-05-10T18:37:53.661676Z","last_seen":"2026-06-04T15:54:08.23319Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/263cdd6e4116b78ceb196cf53e39ca5112847ba9-de527397c812e2c97891.js","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"157a9abeeba8af67956bbe9e92f99f43","sha1":"062987125ed6a7ed6509a8735ca2f922a40ad52e","sha256":"1f56be83d0aac19cc8a07ee281660bbeba9ceeca1f61195bb269451ce56245f1","sha512":"2b5be668075942234d469ccf78ca924139d87d99337be8b668461082564d6cff6355a02790b168cc2a6734d14a0e3a681588c23d0f12cdab1c2fa4420c0f84a3","ssdeep":"192:BDd13cz5W+RCe/i84DM7PRUckgy/tR3W7Qy/ZgteEEXFXsOOLblErn:BDd13SnRHapA7uckgOa7ZBbnFXstLblE","tlshash":"5c221bca6695a1fa2bb7b8d580679450b577f742e000c460f96dcccb77a638ca072b7c","size":10242,"data":"","first_seen":"2026-05-10T18:37:53.653067Z","last_seen":"2026-06-04T15:54:08.166538Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/commons-ab8b8090793bf5801c87.js","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"07d4ddf9e8e5b455b622da6ad4b9b0bf","sha1":"19f7af2bafc55fda01fa22a94fff553552719db9","sha256":"eff87940461133b07766969083ceac996ea8f4d830ebef4c54ef737ecad78d03","sha512":"7dc3a81e44392a56c31f79859355b3008637b086804a33b70a5654c40925221a0c393e2eb8b05ed794fa393fa5f94ec1521f39f9fad3ebccb3f5fbda2b85a6c3","ssdeep":"12288:TGsPA13ouS8HUXKC+KjWarFWI1GxEVAfTO4T9WYKJGKvjEZFcObdc9q:TGWC3oh8HMKCLHpQO4hWYKJuZFDdIq","tlshash":"8e158e89b781b0392bf752da807f440dfa3e6609640a84a4f579dcc926b86cd6137f7c","size":934847,"data":"","first_seen":"2026-05-27T18:23:51.14684Z","last_seen":"2026-06-04T15:54:08.197645Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b9a7e78bcac6e78fe2473b80450d73c7","sha1":"cd98bf1ee1cef559e462006b3e14cc42386d0de4","sha256":"f46f584b06fc199ab777f72d777d461bf88fce9ef4906e5f51c504c059f3b32b","sha512":"2525015fd83f049ba68c7effac853fa39b3c15ab545548a02a3a2fa4a6ad72bbc4900c9a3538e2681dda3ae97aa51a3c84003591fc6d23ff3d75bc9f1dc7b5e1","ssdeep":"","tlshash":"7290220002223c2280e000800b02efa0aeb808338c02200ccc08800a8e00002c233220","size":56,"data":"","first_seen":"2026-05-30T13:08:05.496644Z","last_seen":"2026-05-31T04:02:18.151057Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.datadoghq-browser-agent.com/us1/v5/datadog-rum.js","fqdn":"www.datadoghq-browser-agent.com","domain":"datadoghq-browser-agent.com","tld":"com"},"ip":{"addr":"52.222.188.176","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e93b58e682a3aece4f0358ee1acc582f","sha1":"e30a30e74a6ae19541f97b534d86b03b0f0cdc85","sha256":"5313b7e73718a07e8cf7a803b4a1a109ec24c2123db6777273e47ddcb52bc24a","sha512":"763b7f1bbb3bfd1384ff778164cb4a2d4de29167ac31e7b364c0397854820c669f097c4125cdebe32339a0a79aa535e6146c5df11c737f613673e345d6971e53","ssdeep":"1536:s5arq26151Q0tDFMXw+/jBkYnO+0QikytI67LVelWMYPvHAFq4gzcGBjrmdy6sw9:Ri15+0tydklPdelAAg4gzjT+","tlshash":"01f3d6dcf682b03557d33036407f120ab77a2951394a85a0e2b7d6d53cb869ea233f6d","size":165703,"data":"","first_seen":"2025-02-14T15:48:31.010572Z","last_seen":"2026-06-07T05:49:16.932332Z","times_seen":12024,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/app-9a1d233e31543a306752.js","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5127f638ebb00364f2e08977d76db6b","sha1":"01bee87121c0a843508f343bfe5cea1f7b3fe1a0","sha256":"667d400bb69ffc3323933da7bfa7e194187c50327e54513fd34221c54eaa18bd","sha512":"98e18bb527930f52d03e2eec5a24c51f3b5f7cc4d88f8b2bf54b8310e2acf57a79230d05cd4a409d0a85f72b648e9d2a42814e64b5a5fad39b5a8c77785ba4d8","ssdeep":"6144:I3IQgNsU0dADgoxjl33G+eJtESIgZXHSb3Mpvnv3ha:IENQ6DjdlnKOovk","tlshash":"fa64d88db5d2f0b85be365e4802f594af17b2a68700e94d1eab6d4c2ac7494f4033f6d","size":323617,"data":"","first_seen":"2026-05-10T18:37:53.530646Z","last_seen":"2026-06-04T15:54:08.125332Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/961e4a29-113ea15946d16f71099d.js","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"07388a667b4a833fc323d80d4d4f6e65","sha1":"64e83dd8f9da4909acddd88b2c9c39cec869ca81","sha256":"8e694e98d5cb113d53ac9986f0a6a8e3fdf075b0830df6816e97263000a3381c","sha512":"76d8b58f14f4dc785d63edc6299ea8a19f689d68aa4b77cd1bf1256f13b63def2e2d424b19f51c444cf62c8b555c2205057938af9c1d73f2a8007cf8afd33430","ssdeep":"6144:0uUojnI9XRxdqafZ2nPX1nImPvdlOBWF2399bT+GnNTXaDhwxB/Yxg:DnI7vZ2nFIUdlOB6239oGNTj","tlshash":"99845dc87981f4715bb782da40af480bf33d650b780d8860f222fdd969ad499a137f6d","size":400507,"data":"","first_seen":"2025-11-19T23:18:11.185762Z","last_seen":"2026-06-04T15:54:08.156064Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackpixel.refinance.quickenloans.com/ql-ut/tracking.js","fqdn":"trackpixel.refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.13.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5284e882a2f1d2f21418af81ee19cf11","sha1":"ef1c6d3f8a0d2cf1f45445c539716bcb8db27192","sha256":"3ac6ab6235010da69d4390d790446634a230ac5badfbd61d7cd51835715a8f5d","sha512":"6f72d11aabc48bab6a85f5723b78ce58d5dcc6b6a015dad2c9b19bb2fb4dba068e7f5d131eec0177979255f8cdfd93a2a99a329d954a25d2b991c2c73ce8d19b","ssdeep":"384:6PmG/SN9dg9ufRnUvVilGkaut36MJSPHp0fznjoMBLwgR9efant1tNSX1WmMc5bt:6P1S7EWRUvVoGkautK1PHp0fznjoMBct","tlshash":"d6820aa67594643a25da21de193a430c173ba7abb8d19060f9375ce43a2de0f43f1f78","size":19036,"data":"","first_seen":"2026-04-15T23:11:24.076186Z","last_seen":"2026-06-04T15:54:08.114339Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=14\u0026frm=0\u0026auid=415580428.1780146449\u0026dt=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.quickenloans.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1645099745.1780146449\u0026navt=n\u0026npa=1\u0026gtm=45be65r2v9168885163z89137104487za20gzb9137104487zd9137104487xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~116701382~119027222~119034491~119064971\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-11380533681\u0026tid=AW-11380533681\u0026tft=1780146449527\u0026tfd=2992","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:30.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"22:23:AA:C0:3B:78:20:8C:E2:B9:B3:D2:68:3A:EA:1F:61:C4:08:DF","sha256":"16:A1:EB:63:D1:FC:CC:47:80:09:5E:C3:61:20:56:39:EC:CA:BA:D6:D2:EF:7A:A6:D6:F6:D1:75:BC:EB:9A:2C"}}},"request":{"raw":"POST /ccm/collect?rcb=14\u0026frm=0\u0026auid=415580428.1780146449\u0026dt=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.quickenloans.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1645099745.1780146449\u0026navt=n\u0026npa=1\u0026gtm=45be65r2v9168885163z89137104487za20gzb9137104487zd9137104487xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~116701382~119027222~119034491~119064971\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-11380533681\u0026tid=AW-11380533681\u0026tft=1780146449527\u0026tfd=2992 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.quickenloans.com/\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\ndate: Sat, 30 May 2026 13:07:30 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.quickenloans.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36\u0026businessunitId=4bed9e1a00006400050b9bca#testid=trust-pilot-container\u0026locale=en-US\u0026styleHeight=140px\u0026styleWidth=100%25\u0026theme=light\u0026reviewLanguages=en\u0026tags=SelectedReview","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"52.84.50.50","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:30.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36\u0026businessunitId=4bed9e1a00006400050b9bca HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 18 May 2026 14:23:50 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\ncontent-encoding: gzip\r\ndate: Sat, 30 May 2026 04:49:31 GMT\r\ncache-control: max-age=86400\r\netag: W/\"b56d61d67d5b6faf2d341dfcd961b4da\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a82071c7a558f0fabf37ee3b940ad600.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: pK5ue8LA6j3cbTgfiItVUMf0RqteVK-3nbLwN7280q3Hzzc4nUz1XQ==\r\nage: 37642\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":38966,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (36943)","md5":"b56d61d67d5b6faf2d341dfcd961b4da","sha1":"b4817de0842d6a69c7fa5ad8e383f4d9c44c277a","sha256":"c5eff6fd067e9ee691fdb5788682566e73782d451d5cf868fbe12b0e69db2827","sha512":"bac027dae757fbc08d3cef4356999d3dc707bf9049c55ab520c3450aebb659c1a7c83412eff9f83426c22ae33350c846649b6fbfb7bdf20ad6e971de72f56bce","ssdeep":"384:Wr3Ot1yowFyFGCzZX30brlbmFCfFMaGZyWbjy6iYME:Wr3u1GuNwWCd2n","tlshash":"63036941fa5cfaaa0e03846a4dd0b395ed2b366ab4950e86dff3d1d8c3df046c69521c","first_seen":"2026-05-18T19:37:05.725748Z","last_seen":"2026-06-07T03:44:55.173225Z","times_seen":248,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared-bff.quickenloans.com/api/tracking/event/v2","fqdn":"shared-bff.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.26.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:31.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"OPTIONS /api/tracking/event/v2 HTTP/1.1\r\nHost: shared-bff.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://www.quickenloans.com/\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 30 May 2026 13:07:32 GMT\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: authorization,content-type\r\ncf-cache-status: DYNAMIC\r\nset-cookie: AWSALBTG=Ci69UXdtCXxZtdYetBPNEB6M9XAXLO/zFVm8IvsdirFGzfeHhfQ+caD5+gqYcSe8IflOa4GKoSImvO9vD2EwSLn2DFmTKvFH2KWJButZvMWd1Ms9pUpA/dlj9EYmsDJCL8ULb/tMU1VZ6qfVJnh6fs0cfE7Ka29Mk7PbmjW2WwusSIng4Dc=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/\nAWSALBTGCORS=Ci69UXdtCXxZtdYetBPNEB6M9XAXLO/zFVm8IvsdirFGzfeHhfQ+caD5+gqYcSe8IflOa4GKoSImvO9vD2EwSLn2DFmTKvFH2KWJButZvMWd1Ms9pUpA/dlj9EYmsDJCL8ULb/tMU1VZ6qfVJnh6fs0cfE7Ka29Mk7PbmjW2WwusSIng4Dc=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/; SameSite=None; Secure\n__cf_bm=8ZrteuFBt59JcRucG9L1UGl8XXBziRr4EhHa5U2_zQQ-1780146451.3897994-1.0.1.1-nCpYjq0.uoukbXAC.EXFaLJkLRjGuI41uvwbXj93BMWG2e_Af5_gpbo4AVy445jqYJzAeyyGyHq0UpTdZyIyogbhJMGrnWmIisAPleSr_VDm17k.FFcRRCV.ICI9_MV5; HttpOnly; SameSite=None; Secure; Path=/; Domain=quickenloans.com; Expires=Sat, 30 May 2026 13:37:32 GMT\n__cflb=0H28vfGvKfdvn24kVcWkzcj7SojU4X6yHEyTBKNdcsN; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 31 May 2026 12:07:32 GMT\r\nserver: cloudflare\r\ncf-ray: a03df6592ab623eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":831,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared-bff.quickenloans.com/api/tracking/event/v2","fqdn":"shared-bff.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.26.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:32.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"POST /api/tracking/event/v2 HTTP/1.1\r\nHost: shared-bff.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.quickenloans.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOiIiLCJkb21haW4iOiJzaGFyZWQtYmZmLnF1aWNrZW5sb2Fucy5jb20iLCJpc0JvdCI6dHJ1ZSwiY2xpZW50SXBBZGRyZXNzIjoiOTEuOTAuNDIuMTU0IiwicHVibGlzaGVyRGV2aWNlIjoiIiwicmVzb2x1dGlvbiI6IiIsInVzZXJBZ2VudCI6Ik1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQ7IHJ2OjEzNC4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzEzNC4wIiwiYm90Ijp0cnVlLCJyZWZlcnJpbmdVcmkiOiIiLCJvcmlnaW5SZXF1ZXN0ZWRVcmkiOiJodHRwczovL3d3dy5xdWlja2VubG9hbnMuY29tLyIsImRlc3RpbmF0aW9uVXJsIjoiaHR0cHM6Ly93d3cucXVpY2tlbmxvYW5zLmNvbS8iLCJtYXJrZXRpbmdDbGlja0lkIjoiZGIxNWY5ZWEtODEyOC01NjcwLTg0MWYtOTc1OTllMzcyZTRkIiwic2Vzc2lvbklkIjoiMzc4MDY4MTgtNGQ3Yi00NWMyLWE2ZDUtNjEzZTJiOTQ3OTUzIiwidmlzaXRvcklkIjoiNmYxM2UwNTEtNWViNS00ZDY4LTgxNGEtODc5NWQ3NDNlMjUwIiwic291cmNlSWQiOiJ1bml2ZXJzYWwiLCJpc3MiOiJodHRwczovL3NoYXJlZC1iZmYucXVpY2tlbmxvYW5zLmNvbSIsImlhdCI6MTc4MDE0NjQ0OSwiZXhwIjoxODExNjgyNDQ5fQ.J5zwhxdhgkJt2Ab9_Chwx6vOWBOVhp8CGlXmAqW739L6V3kSFlxs8OU0MvpHjPTzFuNfJMUhkBUns4MD3BwiJjQyucZi7RUgxXr8PtH6uJr8A_zsMKBZQ8wRuaDRWF9ou5NC-nbggfm_BBOrUhf3fR9_uodej72VSlDiJJEZ_eAgKrVzue-zocez_R9Yz-y2bRxBakOoNEzHs6WncEuS--djwSfMSMHNoKqvGjJw6wSxnM9-BQ1Z_3v8CzGId3tVIIhSUathc2IhVbfJlQV4GCfLeVuJzVNszHnO-VUs9kCbHgfRCHh8hpY8a7t7oa2jFdLjinsLOQ3AEHreKoAh-Q\r\nContent-Length: 226\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":226,"data":"{\"eventType\":\"web_campaign\",\"visitorId\":\"6f13e051-5eb5-4d68-814a-8795d743e250\",\"marketingClickId\":\"db15f9ea-8128-5670-841f-97599e372e4d\",\"marketingOfferId\":\"\",\"destinationUrl\":\"https://www.quickenloans.com/\",\"referringUrl\":\"\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: AWSALBTG=BlFwP8F8Do+0JcLaHRQfJFfsxHy6zZigCLtUd7AURyH5hAHMZUUgUWLZ/XKaTt39CvfAe3QMsWsEUVF59BmsQ95/STyNgEkMoxBlHgqzQJXxdrstrPe0koMFkGAX9O3PLhhxYyPvwhRqR/UNWh+qL7R0mNXM7pD9Wxv8r0s0ea8hxQNQOU8=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/\nAWSALBTGCORS=BlFwP8F8Do+0JcLaHRQfJFfsxHy6zZigCLtUd7AURyH5hAHMZUUgUWLZ/XKaTt39CvfAe3QMsWsEUVF59BmsQ95/STyNgEkMoxBlHgqzQJXxdrstrPe0koMFkGAX9O3PLhhxYyPvwhRqR/UNWh+qL7R0mNXM7pD9Wxv8r0s0ea8hxQNQOU8=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/; SameSite=None; Secure\n__cf_bm=XakkKB1vaOSif5e6PuNdh3LQfUgIzb_35XnuH0bdo2M-1780146452.2610867-1.0.1.1-dOPfREEMV939ndJLd6L_xDbvkzK3.3Mg2gh0OojblSsTKGIGED9uJe9xRn2t7rK1jmAG2kVMWkEeanCNDG38KWkQjFN2cEUWpd0bURyM6v2n8KQM6c8dUcmnnkqZ3Ogn; HttpOnly; SameSite=None; Secure; Path=/; Domain=quickenloans.com; Expires=Sat, 30 May 2026 13:37:32 GMT\n__cflb=0H28vfGvKfdvn24kVcWkzcj7SojU4X6z24VejxzuHMn; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 31 May 2026 12:07:32 GMT\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\netag: W/\"74f-tQvUjvckcL2Ta1tLGqksfm7xHqU\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a03df65e981023eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1871,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe338a0a32bf0d170bc15661cb27d920","sha1":"b50bd48ef72470bd936b5b4b1aa92c7e6ef11ea5","sha256":"f156ec6a4b469cb89a1d2c95728aeffc71af136fc8d31aefe5876b238452287a","sha512":"34326c349d0144a3d72aae7c0abb93f2526c8c1a4808f9c9d8568a20cd7a18f6bd8ac6c1a0a05480f26f337f66a72f326c037db98c8fadcbf07dcd643f17a50f","ssdeep":"","tlshash":"8331d77f0b8289ac7f427281ed1def040f9d64bb38c4a4a0ddee3d84a691a9f4c24164","first_seen":"2026-05-30T13:08:05.430283Z","last_seen":"2026-05-30T13:08:05.430283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v833ccba57c9e4d2798f2e76cebdd09a11778172276447","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 18:57:25 GMT","end":"Thu, 16 Jul 2026 19:57:22 GMT"},"fingerprint":{"sha1":"AB:25:45:8F:55:B6:2B:26:B5:B1:EF:90:E0:60:64:9C:56:47:0F:B5","sha256":"47:83:31:CC:5E:02:0E:51:A7:52:AC:83:1B:8A:A8:4C:74:11:A5:F1:61:8D:C5:6D:29:3C:9D:6A:C9:29:AF:7F"}}},"request":{"raw":"GET /beacon.min.js/v833ccba57c9e4d2798f2e76cebdd09a11778172276447 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.5.0\"\r\nlast-modified: Thu, 07 May 2026 16:44:36 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a03df647495ca0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33228,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (33228), with no line terminators","md5":"3ec2f610910f9dfd8e87975604e5e34c","sha1":"10d61ee41e8fe816ca08616159d7b6b8294a2011","sha256":"aca73fc574e12740e3368860b88a284d01b643456f3ed6a06322ecb47750563f","sha512":"e7b30399c71c25762d3671fe662070cc2e236f6aef815084a2460df8bfe72e598ef2b7d84ff808a56d80e7af6227fddbfb45046ac8218ee647fe66b7c08b3f11","ssdeep":"384:qVCILwCiUg1IX33sDycq+AgMXUQKxrhxIZOGNG620vbgZLTE5egwolSV0yuuokwz:AwCiUqHmcd/5xdKZdt8Z3Cer2yuuDPQB","tlshash":"6ce219e9b595713613f350b2406f220bb33a7562588e8018e22bd7c16c78eded267f6d","first_seen":"2026-05-07T16:46:10.96487Z","last_seen":"2026-06-08T01:29:03.256058Z","times_seen":29970,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":61,"dns":1,"connect":1,"send":0,"wait":12,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/af/83a7f5/00000000000000007735d913/31/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191\u0026fvd=n3\u0026v=3","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.77.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 29 May 2026 00:00:00 GMT","end":"Sun, 13 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6D:59:E1:10:7C:04:87:2C:2B:42:9B:0B:02:BE:4A:FF:E8:09:E3:E9","sha256":"51:4C:B4:20:1D:97:45:B3:FE:50:80:99:68:E9:6C:33:8C:E3:66:B0:8E:BA:01:2F:87:14:D1:BE:86:8D:0E:73"}}},"request":{"raw":"GET /af/83a7f5/00000000000000007735d913/31/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191\u0026fvd=n3\u0026v=3 HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.typekit.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/font-woff2\r\ncontent-length: 27464\r\netag: \"30872849529b20bd3f3a53d5281ecb864a7912a3\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\nakamai-grn: 0.4d4d2417.1780146448.20a913d2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27464,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), CFF, length 27464, version 1.0","md5":"72817e69d92a71bf01083d9dc75d8e53","sha1":"a2ebb860a1a60679d52e3540cddfa1909d476e96","sha256":"902f36616f0f3f6ce8f70bbb88f475be8b397ef3aed78ac0f04c8bf1cfc341e3","sha512":"fc58157568c07e1987a249c1b9ede0877cf86c787e0eeff391afdad05b40075ac7318b231acc8dab4c8eb425d4ed3435bd5e45880134550597e34459920c58fa","ssdeep":"768:UTCa3OEy9sZ2s7bW51q4mpx+0OEsrhbosABcbP6:U2a++p01q4qx+0Ox9o/7","tlshash":"00c2d12e105c691c72914da038884bac7669ff1dd691c2235ba4cbff448ebf8c0596fe","first_seen":"2026-01-06T17:56:45.054239Z","last_seen":"2026-06-04T15:54:08.100595Z","times_seen":22,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/_gatsby/image/337cc23e09c2fd22aca6954491839702/2ed62efe666aa4f2df4508bfbb09d91b/homepage_why_QL.png?u=https%3A%2F%2Fcms.quickenloans.com%2Fwp-content%2Fuploads%2F2025%2F06%2Fhomepage_why_QL.png\u0026a=w%3D1024%26h%3D800%26fm%3Dpng%26q%3D90\u0026cd=2025-06-25T16%3A50%3A45","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /_gatsby/image/337cc23e09c2fd22aca6954491839702/2ed62efe666aa4f2df4508bfbb09d91b/homepage_why_QL.png?u=https%3A%2F%2Fcms.quickenloans.com%2Fwp-content%2Fuploads%2F2025%2F06%2Fhomepage_why_QL.png\u0026a=w%3D1024%26h%3D800%26fm%3Dpng%26q%3D90\u0026cd=2025-06-25T16%3A50%3A45 HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV; _dd_s=rum=0\u0026expire=1780147348609\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 96120\r\ncf-ray: a03df6484a5723eb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=300\r\netag: \"4937fc747dbdc888c0343ea1a1ba7b7b\"\r\nexpires: Sat, 30 May 2026 13:12:28 GMT\r\nlast-modified: Fri, 29 May 2026 21:32:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 f1bda97b4845eb7587991873d45a7e7a.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: kuzFpXjflaU9OoNzb9y-l0qm4Wfb7VrfenQqZTV_r4V_ipRA9cg-Hg==\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ACD1D63pKSj5CaS6.cKTv9c2whakGZCf\r\nx-cache: Miss from cloudfront\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96120,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 800, 8-bit colormap, non-interlaced","md5":"4937fc747dbdc888c0343ea1a1ba7b7b","sha1":"2b90e5ccd29c8a2f5f9d4c2538a4f53f03d25344","sha256":"3737315dd9d13685857e379ba94c103e97074a367a6ae43fd99b896890848acb","sha512":"0df2ef0c97f3f73a6246ef13d2ebfbccba2cde21d2012f63caa42255e120607ee17e4da83bf6e91d36676404a2245de62911b27a3867723f1237a68640bd6674","ssdeep":"1536:cXiYhSuP0ya25QK0gvNhCXGRuZLniB6HFg8VBSx/+jrXlTeazxsfaJewvhls5k8b:hYhSyJRlhCACiB6HdKxGj7lTeq/tZ8ky","tlshash":"e99302da1bcbf6fae49521fa73020cfe241e07974ecb19b40550bdac652c5f80aa4b19","first_seen":"2025-11-19T23:18:11.180603Z","last_seen":"2026-06-04T15:54:08.132945Z","times_seen":16,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/p/conversions/c/b","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:31.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 03 May 2026 03:13:55 GMT","end":"Fri, 30 Oct 2026 03:13:55 GMT"},"fingerprint":{"sha1":"8E:B0:B8:72:C4:57:AF:BC:1A:2D:BE:E8:A5:01:2A:0E:76:5A:AB:54","sha256":"F3:47:7D:87:DC:FD:DF:F7:D6:48:6C:48:E9:FF:26:B6:63:61:4F:8D:5B:7C:AF:43:D3:CA:42:09:B9:CB:84:01"}}},"request":{"raw":"POST /p/conversions/c/b HTTP/1.1\r\nHost: bat.bing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 744\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":744,"data":"{\"e\":[\"0.8.64\",1,0,127,\"r12wrim2kd\",\"1xxonq9\",\"iwr0rh\",1,0,0,0,\"https://www.quickenloans.com/\"],\"a\":[[23,8,1280,4506],[23,11,1280,1024],[23,28,1],[24,47,102,0,0],[24,47,102,0,0],[127,34,\"C_IS\",[\"9\",\"9\",\"9\"],\"_uetmid\",[\"92465190-0456-4fc6-8bed-70e42d85268b\",\"92465190-0456-4fc6-8bed-70e42d85268b\"],\"_s\",[\"conversions\"],\"_u\",[\"247005605\"]],[127,1,0,[\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"],1,[\"https://www.quickenloans.com/\"],3,[\"Quicken Loans | A Quicker Path To Financial Freedom\"],9,[\"en-US\"],15,[\"qxz8fd\"],16,[\"en\"],22,[\"Win32\"],26,[\"1\"],28,[\"0\"],29,[\"0\"],34,[\"UTC\"],35,[\"0\"],36,[\"0\",\"2\"]],[127,0,0,1780146451404,1,0,4,24,5,1,14,1280,15,1024,16,24,25,7,26,0,31,1,32,0,33,48,35,0],[127,47,102,0,0]]}"}},"response":{"raw":"HTTP/2 204 No Content\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.quickenloans.com\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nrequest-context: appId=cid-v1:a449a586-8786-487f-a449-dc1b282a2628\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 318FF2ED5DA5456C8B2CAAF8148AE5C6 Ref B: OSL231050213062 Ref C: 2026-05-30T13:07:31Z\r\ndate: Sat, 30 May 2026 13:07:30 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kelesort-norchure.com/8feefc1b-2d8f-49f0-a73b-04993ba6e651","fqdn":"kelesort-norchure.com","domain":"kelesort-norchure.com","tld":"com"},"ip":{"addr":"54.240.174.96","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-30T13:07:26.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kelesort-norchure.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 Jan 2026 00:00:00 GMT","end":"Wed, 03 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"AC:26:41:08:BF:74:CA:23:B2:7A:00:E8:89:FB:FD:8B:09:1A:85:3E","sha256":"7D:B5:57:E2:61:B2:6E:B6:67:3C:5F:59:7B:BF:85:8F:61:C0:7D:1A:C1:23:FB:4B:3A:C9:91:3D:47:2A:79:4D"}}},"request":{"raw":"GET /8feefc1b-2d8f-49f0-a73b-04993ba6e651 HTTP/1.1\r\nHost: kelesort-norchure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-length: 0\r\nlocation: https://www.quickenloans.com/\r\ndate: Sat, 30 May 2026 13:07:27 GMT\r\nserver: nginx\r\ncache-control: no-store, no-cache, pre-check=0, post-check=0\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nset-cookie: 8feefc1b-2d8f-49f0-a73b-04993ba6e651-v4=VgUaH6zostYra7_332LizEOmSCd5HbSKoyoUfGiUi7w; Max-Age=86400; Expires=Sun, 31 May 2026 13:07:27 GMT; Domain=kelesort-norchure.com; Path=/; Secure; HttpOnly; SameSite=None\ncc-v4=n8z%2BQnQYV6YpGa91kZYdNkXqcz2RXxN76XuRneYtX6QeY8TCFqSk2WkzU%2BNYNJn%2FDj6%2BBUJNkmuNPFpHqDop3vzcd%2FqfvpdIHCaDGe2CAzVmKHxb3dBi6PdOvf2WVz%2FLgcoeCyAezIfmwOsi5B2eUQ%3D%3D; Max-Age=15552000; Expires=Thu, 26 Nov 2026 13:07:27 GMT; Domain=kelesort-norchure.com; Path=/; Secure; HttpOnly; SameSite=None\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: AZ4sC6Kf1xTVGcdxpQnIguv1UW7KYzyOzaNbDTZAkuteRkPvu9XkRg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":132985,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":400,"dns":35,"connect":1,"send":0,"wait":24,"receive":0,"ssl":360},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"kelesort-norchure.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/263cdd6e4116b78ceb196cf53e39ca5112847ba9-de527397c812e2c97891.js","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /263cdd6e4116b78ceb196cf53e39ca5112847ba9-de527397c812e2c97891.js HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV; _dd_s=rum=0\u0026expire=1780147348609\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:29 GMT\r\ncontent-type: text/javascript\r\ncf-ray: a03df64a199823eb-OSL\r\ncf-cache-status: HIT\r\nx-cache: Miss from cloudfront\r\ncache-control: public, max-age=300\r\nx-amz-version-id: SZzGSrtPS5NYm7My3knMvhXCGqeaM3tP\r\nexpires: Sat, 30 May 2026 13:12:29 GMT\r\nlast-modified: Fri, 29 May 2026 21:32:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 7d758b616f5473c7b4bee1c49ecfa98a.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: yFEMGfoUow1cDo3Oe3VkVWVHjieQNwTKktY6dofo0f4_-SCVrUub4Q==\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"157a9abeeba8af67956bbe9e92f99f43\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10242,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10152)","md5":"157a9abeeba8af67956bbe9e92f99f43","sha1":"062987125ed6a7ed6509a8735ca2f922a40ad52e","sha256":"1f56be83d0aac19cc8a07ee281660bbeba9ceeca1f61195bb269451ce56245f1","sha512":"2b5be668075942234d469ccf78ca924139d87d99337be8b668461082564d6cff6355a02790b168cc2a6734d14a0e3a681588c23d0f12cdab1c2fa4420c0f84a3","ssdeep":"192:BDd13cz5W+RCe/i84DM7PRUckgy/tR3W7Qy/ZgteEEXFXsOOLblErn:BDd13SnRHapA7uckgOa7ZBbnFXstLblE","tlshash":"5c221bca6695a1fa2bb7b8d580679450b577f742e000c460f96dcccb77a638ca072b7c","first_seen":"2026-05-10T18:37:53.653067Z","last_seen":"2026-06-04T15:54:08.166538Z","times_seen":8,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/p/action/247005605.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:30.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 03 May 2026 03:13:55 GMT","end":"Fri, 30 Oct 2026 03:13:55 GMT"},"fingerprint":{"sha1":"8E:B0:B8:72:C4:57:AF:BC:1A:2D:BE:E8:A5:01:2A:0E:76:5A:AB:54","sha256":"F3:47:7D:87:DC:FD:DF:F7:D6:48:6C:48:E9:FF:26:B6:63:61:4F:8D:5B:7C:AF:43:D3:CA:42:09:B9:CB:84:01"}}},"request":{"raw":"GET /p/action/247005605.js HTTP/1.1\r\nHost: bat.bing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private,max-age=60\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 8BFA2A3F65294C849AC74301E68F4C37 Ref B: OSL231050213062 Ref C: 2026-05-30T13:07:30Z\r\ndate: Sat, 30 May 2026 13:07:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2124,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"c768145ce5310ff06ee70cb2541622a3","sha1":"1dfcfa97d66711578651c284d5f0cf866589ef52","sha256":"025d3b711439bbd2c7a89851b7c78b07dac3aa29c867be5aef440ebce01abe7d","sha512":"d6ec9cf12720a6b52813c6f2538264ad2fcc8532c972fca262e83c7c503fd6e8af8f777f9025ba02cd68aeba5b4fdd448c9dfa7cc8ce851b46bc44de6cca5887","ssdeep":"","tlshash":"b141bf5f299631ba78a3643e87ff945867721207a245ec507cacc1846fa481c8764f8c","first_seen":"2026-02-03T00:41:02.699952Z","last_seen":"2026-06-05T05:15:13.524461Z","times_seen":22,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"52.84.50.50","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:30.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /bootstrap/v5/tp.widget.bootstrap.min.js HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\ncontent-length: 7810\r\nlast-modified: Tue, 07 Apr 2026 13:47:24 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 30 May 2026 02:13:46 GMT\r\ncache-control: max-age=86400\r\netag: \"c548d8a900ee57fc4018febdcf4fc206\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a82071c7a558f0fabf37ee3b940ad600.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 6vLt0ejOi5Vz02kaKchGy0XshS4vzrQDM2jsknW7NU2Pb3TaFZY7jQ==\r\nage: 39225\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":24918,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24831)","md5":"c3a9a2660d6b39c094392e60a46e6c5f","sha1":"f81a65fb815ecb294c95f85c1e73d70b573e5619","sha256":"c9d8862c05ed77d6fb6871f6e72a6e41132693c86943bbcdbdab5367bc55bc01","sha512":"0fe85bcda57e369ca66b903db2debccb58bfd995fd3f9e9616900ef1a862b9e890d2bbf801cdb873afce0eaa52de812a9212ffeda82db83f73900c260246139e","ssdeep":"768:BUvI7Bt+WNX75sjAuwqU3o+bz3y2uxtFq+ZdDJvQ64YB:avI7Bt+WNlsjAg+bz3lAtFq+Zbf4M","tlshash":"8db2e5e431e2f47642c6a129543f6209b27278687985d488b57cc8f26fa0d9e3237f7d","first_seen":"2026-04-07T13:59:33.850722Z","last_seen":"2026-06-07T20:15:32.744034Z","times_seen":7755,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":37,"dns":28,"connect":1,"send":0,"wait":2,"receive":1,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/main.js","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"52.84.50.50","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36\u0026businessunitId=4bed9e1a00006400050b9bca#testid=trust-pilot-container\u0026locale=en-US\u0026styleHeight=140px\u0026styleWidth=100%25\u0026theme=light\u0026reviewLanguages=en\u0026tags=SelectedReview","date":"2026-05-30T13:07:30.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /trustboxes/53aa8912dec7e10d38f59f36/main.js HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36\u0026businessunitId=4bed9e1a00006400050b9bca\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 18 May 2026 14:23:53 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\ncontent-encoding: gzip\r\ndate: Sat, 30 May 2026 00:07:25 GMT\r\ncache-control: max-age=86400\r\netag: W/\"7bd67af4606088ca9b8ae47ddf9663f4\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a82071c7a558f0fabf37ee3b940ad600.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: H5SCKkyR3dAWyqy_vvH4JEj0Y-lh9qHrfhmMegeeVY1V8uxYRimWjQ==\r\nage: 46806\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52616,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52613)","md5":"7bd67af4606088ca9b8ae47ddf9663f4","sha1":"df5d83b4c69262f03fd60517100f13e54331387d","sha256":"a2f0a11269660876837776417e9c7deab4b7762fe3441a4fb2f85c47ec9d075c","sha512":"4e559738a46c2939d145a07f876181c7519cd7083bdb8f708b5a22eef1f1341953adc1f673f2436881c4ee69c982e09e9e45053df1a9f8ace8579c7d80372e3d","ssdeep":"1536:lmy4UeduqQ1dBqt5fjlccsDdvXkwCn2zQy+y46wu3mP7YkRrcVXf:lzs6j","tlshash":"93333c9232c1a0b40187c7873c299684f21770acf94784ecf9fd6ed95771c8e622aeb4","first_seen":"2026-05-15T12:37:44.511179Z","last_seen":"2026-06-07T03:44:55.085271Z","times_seen":310,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared-bff.quickenloans.com/api/tracking/event/v2","fqdn":"shared-bff.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.26.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:34.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"POST /api/tracking/event/v2 HTTP/1.1\r\nHost: shared-bff.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.quickenloans.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.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.J5zwhxdhgkJt2Ab9_Chwx6vOWBOVhp8CGlXmAqW739L6V3kSFlxs8OU0MvpHjPTzFuNfJMUhkBUns4MD3BwiJjQyucZi7RUgxXr8PtH6uJr8A_zsMKBZQ8wRuaDRWF9ou5NC-nbggfm_BBOrUhf3fR9_uodej72VSlDiJJEZ_eAgKrVzue-zocez_R9Yz-y2bRxBakOoNEzHs6WncEuS--djwSfMSMHNoKqvGjJw6wSxnM9-BQ1Z_3v8CzGId3tVIIhSUathc2IhVbfJlQV4GCfLeVuJzVNszHnO-VUs9kCbHgfRCHh8hpY8a7t7oa2jFdLjinsLOQ3AEHreKoAh-Q\r\nContent-Length: 282\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":282,"data":"{\"eventType\":\"device_info\",\"visitorId\":\"6f13e051-5eb5-4d68-814a-8795d743e250\",\"sessionId\":\"37806818-4d7b-45c2-a6d5-613e2b947953\",\"marketingClickId\":\"db15f9ea-8128-5670-841f-97599e372e4d\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: AWSALBTG=pQMLoqdECxd07vehdScdIeRtyWnhrfdt8iJKmXRPTPadDFtlez3kNiRwKPL3pDLz7PusbyRlaYPYezFTcMYUkGGkKMTm0ERFn29CmUnH2jz3ZcAtbyVBX77/8e/lzqfSzsxoiQenaY9kUo5CQEuFa9Z7wDYOHraqPOoUdwkcLsW06s+WtlQ=; Expires=Sat, 06 Jun 2026 13:07:34 GMT; Path=/\nAWSALBTGCORS=pQMLoqdECxd07vehdScdIeRtyWnhrfdt8iJKmXRPTPadDFtlez3kNiRwKPL3pDLz7PusbyRlaYPYezFTcMYUkGGkKMTm0ERFn29CmUnH2jz3ZcAtbyVBX77/8e/lzqfSzsxoiQenaY9kUo5CQEuFa9Z7wDYOHraqPOoUdwkcLsW06s+WtlQ=; Expires=Sat, 06 Jun 2026 13:07:34 GMT; Path=/; SameSite=None; Secure\n__cf_bm=_rjYjelvrXE5lujQZqnD8MTd.M83vLRc1FXxLIiEEbs-1780146454.6008708-1.0.1.1-U97slWWNkQdGnp8x1FHva5UZgiguLwI_iANLty_.E0dGrOidwRjMckNtVaGdQP55yDII2dRdjWp_vOlh1oyYLHlbnG0.JNsLqrusnhbndpRZxnubYpM2bdB7E.4Md0hP; HttpOnly; SameSite=None; Secure; Path=/; Domain=quickenloans.com; Expires=Sat, 30 May 2026 13:37:34 GMT\n__cflb=0H28vfGvKfdvn24kVcWkzcj7SojU4X71VhY3sGFScLc; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 31 May 2026 12:07:34 GMT\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\netag: W/\"74f-N7GaVWYQlc3J9BUT+UWCHyHeyus\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a03df66d396023eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1871,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3c0256199122ca6fead7c398f4134304","sha1":"37b19a55661095cdc9f41513f945821f21decaeb","sha256":"bedad13d1c5b1d5f2babdd884337fc65bf7b099178019784807095111dd5d3b3","sha512":"7c84dac6db435ca98f0af263bbe672822e689001cbe4293a75cfdc550a3b4a77b39ed3ddb2035dd0e54738655d206ca6f9e65663514cedd85dbe243a41c7a1e8","ssdeep":"","tlshash":"9b31b97f4b455aad6b123582bc1def044feda0a729c8a060cddc1dc0e690ade4914274","first_seen":"2026-05-30T13:08:05.435767Z","last_seen":"2026-05-30T13:08:05.435767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared-bff.quickenloans.com/api/tracking/event/v2","fqdn":"shared-bff.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.26.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:31.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"POST /api/tracking/event/v2 HTTP/1.1\r\nHost: shared-bff.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.quickenloans.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.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.J5zwhxdhgkJt2Ab9_Chwx6vOWBOVhp8CGlXmAqW739L6V3kSFlxs8OU0MvpHjPTzFuNfJMUhkBUns4MD3BwiJjQyucZi7RUgxXr8PtH6uJr8A_zsMKBZQ8wRuaDRWF9ou5NC-nbggfm_BBOrUhf3fR9_uodej72VSlDiJJEZ_eAgKrVzue-zocez_R9Yz-y2bRxBakOoNEzHs6WncEuS--djwSfMSMHNoKqvGjJw6wSxnM9-BQ1Z_3v8CzGId3tVIIhSUathc2IhVbfJlQV4GCfLeVuJzVNszHnO-VUs9kCbHgfRCHh8hpY8a7t7oa2jFdLjinsLOQ3AEHreKoAh-Q\r\nContent-Length: 199\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":199,"data":"{\"eventType\":\"custom\",\"marketingClickId\":\"db15f9ea-8128-5670-841f-97599e372e4d\",\"visitorId\":\"6f13e051-5eb5-4d68-814a-8795d743e250\",\"type\":\"gatsby-route-change\",\"timestamp\":\"2026-05-30T13:07:30.643Z\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: AWSALBTG=zUSFyYg2l7NIGDu4NbeStEXX/WafVpznP+wIPTmU3QgDckpMXouZYaOxQO4k1zUYGcN/LgYgXUT3XOLORlfKGQyyI5I3d1HClhZe/U0fP/VARwa53HAHN1XLPQJVmd/aiD3tOkI7cl7ibE/BEw27XQnE33ooov92+2SmTEqpN3/ntxTz0M8=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/\nAWSALBTGCORS=zUSFyYg2l7NIGDu4NbeStEXX/WafVpznP+wIPTmU3QgDckpMXouZYaOxQO4k1zUYGcN/LgYgXUT3XOLORlfKGQyyI5I3d1HClhZe/U0fP/VARwa53HAHN1XLPQJVmd/aiD3tOkI7cl7ibE/BEw27XQnE33ooov92+2SmTEqpN3/ntxTz0M8=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/; SameSite=None; Secure\n__cf_bm=U4IeNt12BSLQm8WvqMSiY6SBaxxn73Og3rqJCx7BKeE-1780146451.6182592-1.0.1.1-tv0JgzuJHZFUczbPNKtVRQgYvOHgtiJthUhI0ywOVwuOfINbcOuDcFMMzd2dfGxjHBzhUk0I5LJ_nYnUKwV5yKcjcw9Qd3zQEz.rpdv30op2gr6HBi9pH8zjAFIxilGH; HttpOnly; SameSite=None; Secure; Path=/; Domain=quickenloans.com; Expires=Sat, 30 May 2026 13:37:32 GMT\n__cflb=0H28vfGvKfdvn24kVcWkzcj7SojU4X6yHEyTBKNdcsN; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 31 May 2026 12:07:32 GMT\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\netag: W/\"74f-tQvUjvckcL2Ta1tLGqksfm7xHqU\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a03df65a9fc023eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1871,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe338a0a32bf0d170bc15661cb27d920","sha1":"b50bd48ef72470bd936b5b4b1aa92c7e6ef11ea5","sha256":"f156ec6a4b469cb89a1d2c95728aeffc71af136fc8d31aefe5876b238452287a","sha512":"34326c349d0144a3d72aae7c0abb93f2526c8c1a4808f9c9d8568a20cd7a18f6bd8ac6c1a0a05480f26f337f66a72f326c037db98c8fadcbf07dcd643f17a50f","ssdeep":"","tlshash":"8331d77f0b8289ac7f427281ed1def040f9d64bb38c4a4a0ddee3d84a691a9f4c24164","first_seen":"2026-05-30T13:08:05.430283Z","last_seen":"2026-05-30T13:08:05.430283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":855,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":855,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/bqm0hoo.css","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.77.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 29 May 2026 00:00:00 GMT","end":"Sun, 13 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6D:59:E1:10:7C:04:87:2C:2B:42:9B:0B:02:BE:4A:FF:E8:09:E3:E9","sha256":"51:4C:B4:20:1D:97:45:B3:FE:50:80:99:68:E9:6C:33:8C:E3:66:B0:8E:BA:01:2F:87:14:D1:BE:86:8D:0E:73"}}},"request":{"raw":"GET /bqm0hoo.css HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css;charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\ncache-control: private, max-age=600, stale-while-revalidate=604800\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\ncontent-length: 680\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\nakamai-grn: 0.6f4d2417.1780146448.b03bf26\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2623,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (516)","md5":"7217f444d031e7fffe568719d2d1e7bb","sha1":"ff22156e36f566cfe7d85dbbe9c115081e29b2fb","sha256":"af4e65bc4e13778e1ea44e313b39aec075da0b903d8112407075cba48c14edb2","sha512":"e1f5b918dfd65fc04035c55f0ca2b9b1654077f1713c7781ca0e4ed26a35b1a9731c3c0a028c2ee89df00ff04199c8ecaad8b9e6175378384a943cf26cda9779","ssdeep":"","tlshash":"4e51bda09045cda7c0d01ab1388eb3f4e62e395b66e498960421ccb38c75dd7b744f6e","first_seen":"2026-03-30T22:51:04.459146Z","last_seen":"2026-06-04T15:54:08.161848Z","times_seen":12,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":27,"dns":20,"connect":1,"send":0,"wait":26,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/learnassets/QuickenLoans.com/Learning%20Center%20Images/Stock-Negotiate-House-Price-AdobeStock-170590933.jpeg","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /learnassets/QuickenLoans.com/Learning%20Center%20Images/Stock-Negotiate-House-Price-AdobeStock-170590933.jpeg HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11984\r\ncf-ray: a03df646bc2c23eb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=300\r\netag: \"f98e73797311c7ad8759dd838e7f4b44\"\r\nexpires: Sat, 30 May 2026 13:12:28 GMT\r\nlast-modified: Thu, 28 Mar 2024 19:57:41 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 8e6f6d7e57b70cc43be20c132da08b18.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: 3c3Hb2j1lNJtY_ZAK7tthLpjMIzS_nIXQ0MyM4gf93k1NXMQEsZLeA==\r\nx-amz-cf-pop: AMS58-P2\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: _tzY5HUg9PocamK5GNp8sSM5CDovKIMt\r\nx-cache: Miss from cloudfront\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":11984,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 483x322, components 3","md5":"f98e73797311c7ad8759dd838e7f4b44","sha1":"17d19731310b9ab5941d9b3f9480d8842e3c3daa","sha256":"13b44a51bc1c731e141732d9e007eb60e2a09284cb59ca13fde056b7b9aaf4db","sha512":"64b94e1195082a3618998201f55c58743be92b12c6bc396035f101f29b89f540acd0f6efa114c1305fedfdd3dc7585d84b0f7df5feb8e9c06d1791cfb0057593","ssdeep":"192:OKZFMnKj5O59aqQ6XOJFEIB0g9xnWG+7CBUADunG6oFQP2audji0+hn+:OKZl5OXaqpsl0Q3BAKQPkehn+","tlshash":"9c32c0e4d126ab8a72f1f97d1171cf3480285fc6a8d18a0f5b436c378fc94e04ac499a","first_seen":"2026-05-27T18:23:51.143527Z","last_seen":"2026-05-31T04:02:18.090199Z","times_seen":3,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared-bff.quickenloans.com/api/tracking/authorize","fqdn":"shared-bff.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.26.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"OPTIONS /api/tracking/authorize HTTP/1.1\r\nHost: shared-bff.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.quickenloans.com/\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 30 May 2026 13:07:29 GMT\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\ncf-cache-status: DYNAMIC\r\nset-cookie: AWSALBTG=D2VEW7p7PwYDCFLjXennK17YY18R06C3+9/8AFItd1j9Ge27vA2T+57oFqPFoI/P31/r2rjYhs57kS96RUVgEBeqFSLTyJU6UkKzllen6N8oa0kvTeTCS8/qX85Fzshb5+9ez34jTi/3vYbJg8hCDwgrJrbSS0u4OPV8SFcne7NUi2phyrI=; Expires=Sat, 06 Jun 2026 13:07:29 GMT; Path=/\nAWSALBTGCORS=D2VEW7p7PwYDCFLjXennK17YY18R06C3+9/8AFItd1j9Ge27vA2T+57oFqPFoI/P31/r2rjYhs57kS96RUVgEBeqFSLTyJU6UkKzllen6N8oa0kvTeTCS8/qX85Fzshb5+9ez34jTi/3vYbJg8hCDwgrJrbSS0u4OPV8SFcne7NUi2phyrI=; Expires=Sat, 06 Jun 2026 13:07:29 GMT; Path=/; SameSite=None; Secure\n__cf_bm=QXrv.KNhU.N3VgBFdnNOA3mUWVx58k05zigKSOR9l.c-1780146448.744146-1.0.1.1-IXvsvme7qnW6lLHZn68El7Nn_IArLB5zudXhqmLX0CH_lCmANdcWnt6EOxLabTpw3crkesRCyVfcjGjidsUTpfdgJKZ_20vxDM9FpsElE0E4nPT9LQqoM00hoOWa.g96; HttpOnly; SameSite=None; Secure; Path=/; Domain=quickenloans.com; Expires=Sat, 30 May 2026 13:37:29 GMT\n__cflb=0H28vfGvKfdvn24kVcWkzcj7SojU4X6w4nQrVNVpdQ8; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 31 May 2026 12:07:29 GMT\r\nserver: cloudflare\r\ncf-ray: a03df648aba223eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":986,"timings":{"blocked":41,"dns":31,"connect":1,"send":0,"wait":883,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/learnassets/QuickenLoans.com/2023%20Images/Stock-Young-Woman-WIth-Keys-AdobeStock-427646976.jpeg","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /learnassets/QuickenLoans.com/2023%20Images/Stock-Young-Woman-WIth-Keys-AdobeStock-427646976.jpeg HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64165\r\ncf-ray: a03df646ac1c23eb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=300\r\netag: \"774b7c7807b295d5da4f0aae4c0eebdb\"\r\nexpires: Sat, 30 May 2026 13:12:28 GMT\r\nlast-modified: Thu, 28 Mar 2024 19:57:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 b175f9087cfd5448c6eb5fe6119c8b78.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: IupafwMbMx2Ue4AOFJ6PzJFSB2FrHZvyfhlhKILJOJ9NL1BJhnoftg==\r\nx-amz-cf-pop: FRA56-P16\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: WtkzcFK6MdLyYUlkXvu45uG2FQNeV09p\r\nx-cache: Miss from cloudfront\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64165,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, description=Crop close up of female tenant renter show praise house keys moving to first own new apartment or house, happy woman owner buy , manufacturer=FUJIFILM, model=X-T4, orientation=upper-left, xresolution=346, yresolution=354, resolutionunit=2, software=Adobe Photoshop Lightroom 6.6.1 (Macintosh), datetime=2021:04:14 12:34:44], baseline, precision 8, 483x322, components 3","md5":"774b7c7807b295d5da4f0aae4c0eebdb","sha1":"815ff4fdbec145f4a5030fb13589c89e09be2c89","sha256":"c488b0cc739cbda710c993e75ca5577fdd18db5b87474c3732c17bb98db3ff69","sha512":"ea90f47aff56998dcdf87f8d62ff09cd73a5a12e6a78dabf67c4b62913a3041f00fadf34142093066258462d4d3c39de388be19934a8259ebde86a3dd0688f63","ssdeep":"1536:Uje1Auq1m0Q200Q9J0awQw2B/GOlgMFrrfX4K:7xq40Q2Y9J0ajLDf","tlshash":"5353c008f6215422c45c3a76faed804adbb3aec89e44510fb9deda205f30ddd4dd26e6","first_seen":"2026-05-27T18:23:51.068601Z","last_seen":"2026-05-31T04:02:18.094842Z","times_seen":3,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/global-styles-96d160cf0bb17ca7d449.js","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /global-styles-96d160cf0bb17ca7d449.js HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\ncontent-type: text/javascript\r\ncf-ray: a03df646bc3d23eb-OSL\r\ncf-cache-status: HIT\r\nx-cache: Miss from cloudfront\r\ncache-control: public, max-age=300\r\nx-amz-version-id: OEGS2tUVEY3bKODZ2GJkogwI9n6md_.n\r\nexpires: Sat, 30 May 2026 13:12:28 GMT\r\nlast-modified: Fri, 29 May 2026 21:32:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 2d72fd84d4c7c03cc33e65c393b3d0de.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: bUzp5-rHq6exFyLY8cc7iLcm3tjPpshjE689PfVL4N4CjNTnAtOhAw==\r\nx-amz-cf-pop: FRA60-P12\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"9029cf7dc2effd0454ee09f634b2b7d4\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16493,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16430)","md5":"9029cf7dc2effd0454ee09f634b2b7d4","sha1":"7a00f324e9e9b0ee874194299ac748d16e1fc145","sha256":"bf6a551047c5c0fffe574eb9f3cfc002de0f9e7064ccdff9457ac6c7d123fc86","sha512":"da56530eecc92c90dcc422a4e4bf095ffcb50e3b88fec0586a0f9c4990c908955410b86d87a851f0446bc99e8c49c6b726f11ca01071eaf9c4c6f2c23027d3ae","ssdeep":"384:+jsqleouO3PmUNFh5d1qSdgyqfYcojjasQ:+gseox3PmEFh5d1qSdgyjdjjasQ","tlshash":"0d72c3ddb4e2b548066a39b5603f326ea77f9dd2189d9601827161cafcb038c9433edd","first_seen":"2026-05-30T13:08:05.440265Z","last_seen":"2026-05-31T04:02:18.056462Z","times_seen":2,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/11380533681/?random=138240940\u0026cv=11\u0026fst=1780146449506\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be65r2v9168885163z89137104487za20gzb9137104487zd9137104487xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~116701382~119027222~119034491~119064971\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fwww.quickenloans.com%2F\u0026rcb=14\u0026label=j4dCCMa_7O4YELHT1LIq\u0026frm=0\u0026tiba=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=415580428.1780146449\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=1~0~0~0\u0026em=tv.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCKG4sQIIscGxAgiwwbECCLHDsQIIisWxAgjCybECCLTGsQIIk9qxAgjb3LECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgj02rECCJfUsQIIyduxAgix4bECCLPhsQIIpt2xAgiw3rECCIDbsQI\u0026cerd=CgEA\u0026eitems=ChEI8JXq0AYQ39OXg-vY9rz_ARIdALI0U6hBkgSKOHaWwiW70k9T_7bcK2pPGdhr4cg\u0026fsk=ChEI8JXq0AYQn_OThtTn0-qAARIsAP15kqBdSpXn1JEGwwqj7ZbOQAc3g78otC64O4pzyQjtVFRTqHRF4xbKKsUaAgsu\u0026pscrd=IhMIgOC_porhlAMVSM87Ah1x6wbqOh1odHRwczovL3d3dy5xdWlja2VubG9hbnMuY29tL0JWQ2hBSThKWHEwQVlReUtyVno1eW95WmxNRWl3QWh0NTFCMWlNWTNDUEFZdWg5MGY4QnVLeVlQMjZKSVZYZDBNYVd0UGZhRlBvTHIycHVTcTZud3R3U1F6DAgJYggIABAAGAAgAA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:32.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"22:23:AA:C0:3B:78:20:8C:E2:B9:B3:D2:68:3A:EA:1F:61:C4:08:DF","sha256":"16:A1:EB:63:D1:FC:CC:47:80:09:5E:C3:61:20:56:39:EC:CA:BA:D6:D2:EF:7A:A6:D6:F6:D1:75:BC:EB:9A:2C"}}},"request":{"raw":"GET /pagead/1p-conversion/11380533681/?random=138240940\u0026cv=11\u0026fst=1780146449506\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be65r2v9168885163z89137104487za20gzb9137104487zd9137104487xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~116701382~119027222~119034491~119064971\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fwww.quickenloans.com%2F\u0026rcb=14\u0026label=j4dCCMa_7O4YELHT1LIq\u0026frm=0\u0026tiba=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=415580428.1780146449\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=1~0~0~0\u0026em=tv.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCKG4sQIIscGxAgiwwbECCLHDsQIIisWxAgjCybECCLTGsQIIk9qxAgjb3LECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgj02rECCJfUsQIIyduxAgix4bECCLPhsQIIpt2xAgiw3rECCIDbsQI\u0026cerd=CgEA\u0026eitems=ChEI8JXq0AYQ39OXg-vY9rz_ARIdALI0U6hBkgSKOHaWwiW70k9T_7bcK2pPGdhr4cg\u0026fsk=ChEI8JXq0AYQn_OThtTn0-qAARIsAP15kqBdSpXn1JEGwwqj7ZbOQAc3g78otC64O4pzyQjtVFRTqHRF4xbKKsUaAgsu\u0026pscrd=IhMIgOC_porhlAMVSM87Ah1x6wbqOh1odHRwczovL3d3dy5xdWlja2VubG9hbnMuY29tL0JWQ2hBSThKWHEwQVlReUtyVno1eW95WmxNRWl3QWh0NTFCMWlNWTNDUEFZdWg5MGY4QnVLeVlQMjZKSVZYZDBNYVd0UGZhRlBvTHIycHVTcTZud3R3U1F6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.quickenloans.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 30 May 2026 13:07:32 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/11380533681/?random=138240940\u0026cv=11\u0026fst=1780146449506\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be65r2v9168885163z89137104487za20gzb9137104487zd9137104487xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~116701382~119027222~119034491~119064971\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fwww.quickenloans.com%2F\u0026rcb=14\u0026label=j4dCCMa_7O4YELHT1LIq\u0026frm=0\u0026tiba=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=415580428.1780146449\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=1~0~0~0\u0026em=tv.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCKG4sQIIscGxAgiwwbECCLHDsQIIisWxAgjCybECCLTGsQIIk9qxAgjb3LECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgj02rECCJfUsQIIyduxAgix4bECCLPhsQIIpt2xAgiw3rECCIDbsQI\u0026cerd=CgEA\u0026eitems=ChEI8JXq0AYQ39OXg-vY9rz_ARIdALI0U6hBkgSKOHaWwiW70k9T_7bcK2pPGdhr4cg\u0026fsk=ChEI8JXq0AYQn_OThtTn0-qAARIsAP15kqBdSpXn1JEGwwqj7ZbOQAc3g78otC64O4pzyQjtVFRTqHRF4xbKKsUaAgsu\u0026ipr=y\u0026pscrd=IhMIgOC_porhlAMVSM87Ah1x6wbqOh1odHRwczovL3d3dy5xdWlja2VubG9hbnMuY29tL0JWQ2hBSThKWHEwQVlReUtyVno1eW95WmxNRWl3QWh0NTFCMWlNWTNDUEFZdWg5MGY4QnVLeVlQMjZKSVZYZDBNYVd0UGZhRlBvTHIycHVTcTZud3R3U1F6DAgJYggIABAAGAAgAA\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/trustbox-data/53aa8912dec7e10d38f59f36?businessUnitId=4bed9e1a00006400050b9bca\u0026locale=en-US\u0026reviewLanguages=en\u0026reviewTagValue=SelectedReview\u0026includeReviews=1\u0026reviewsPerPage=15","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"52.84.50.50","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36\u0026businessunitId=4bed9e1a00006400050b9bca#testid=trust-pilot-container\u0026locale=en-US\u0026styleHeight=140px\u0026styleWidth=100%25\u0026theme=light\u0026reviewLanguages=en\u0026tags=SelectedReview","date":"2026-05-30T13:07:31.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /trustbox-data/53aa8912dec7e10d38f59f36?businessUnitId=4bed9e1a00006400050b9bca\u0026locale=en-US\u0026reviewLanguages=en\u0026reviewTagValue=SelectedReview\u0026includeReviews=1\u0026reviewsPerPage=15 HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36\u0026businessunitId=4bed9e1a00006400050b9bca\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nserver: Kestrel\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ndate: Sat, 30 May 2026 12:38:14 GMT\r\ncache-control: public,max-age=1800\r\netag: \"6e3d79ab881d533afb93a9b1d4a6defb\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a82071c7a558f0fabf37ee3b940ad600.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: XohT-1Wf5hfSMe6afTWnkrJgy_hYktWJSxot9SnxZW7GsKGWeElSLg==\r\nage: 1757\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Kestrel","description":"","website":"https://docs.microsoft.com/en-us/aspnet/core/fundamentals/servers/kestrel","common_platform_enumeration":"","icon":"kestrel.svg","categories":["Web servers"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11054,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f4e7421fa47a31425cf2f48ed7c7e594","sha1":"43394674dbfcd4ccd6333dba24bbff5e499c0414","sha256":"8dd0b47bd0a1b11310504e479148162e8b1bd69c62725d963070ee6595cc58b6","sha512":"acd03f6f27a0f4cb7310fe4a72c7755aded530841550ff3fafb77f57c011cbaeffc50dc7f2e8bba207174f11b04653351da51b4d0079599666ea7a2cfbf4831b","ssdeep":"192:Igv2gvxbEYsiWBnVe1HW/2N3CqXUc1PHWrcq3Gf+tnwAKeav+o:Igv2gvxbEYsiWBnY1HWOhC2Uc1P2rcqI","tlshash":"913254770979143a2b8b56a3ec11fb8afa6ab12536c4c4d6fbcf412c813946e731711e","first_seen":"2026-05-30T13:08:05.441195Z","last_seen":"2026-05-31T04:02:18.115186Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared-bff.quickenloans.com/api/tracking/event/v2","fqdn":"shared-bff.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.26.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:32.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"POST /api/tracking/event/v2 HTTP/1.1\r\nHost: shared-bff.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.quickenloans.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.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.J5zwhxdhgkJt2Ab9_Chwx6vOWBOVhp8CGlXmAqW739L6V3kSFlxs8OU0MvpHjPTzFuNfJMUhkBUns4MD3BwiJjQyucZi7RUgxXr8PtH6uJr8A_zsMKBZQ8wRuaDRWF9ou5NC-nbggfm_BBOrUhf3fR9_uodej72VSlDiJJEZ_eAgKrVzue-zocez_R9Yz-y2bRxBakOoNEzHs6WncEuS--djwSfMSMHNoKqvGjJw6wSxnM9-BQ1Z_3v8CzGId3tVIIhSUathc2IhVbfJlQV4GCfLeVuJzVNszHnO-VUs9kCbHgfRCHh8hpY8a7t7oa2jFdLjinsLOQ3AEHreKoAh-Q\r\nContent-Length: 201\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":201,"data":"{\"eventType\":\"web_page_visit\",\"visitorId\":\"6f13e051-5eb5-4d68-814a-8795d743e250\",\"sessionId\":\"37806818-4d7b-45c2-a6d5-613e2b947953\",\"marketingClickId\":\"db15f9ea-8128-5670-841f-97599e372e4d\",\"path\":\"/\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: AWSALBTG=QiISPlUIWaxEn4TNHtkfNpTXHcMqyP89+ibiTIuWMwDdtVf4fZ5VZY5ebaWvKa/8aI6HazIoWh0kOwcGHum3wp5ga+TG+d777SMxGL/4ZH3VNCAUyvB3n5OtbcIWCef9S7qMDQ8uu2SWalc7pI4YNbtIyE7bdhz1YFPjHchh8oXhzxD27uc=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/\nAWSALBTGCORS=QiISPlUIWaxEn4TNHtkfNpTXHcMqyP89+ibiTIuWMwDdtVf4fZ5VZY5ebaWvKa/8aI6HazIoWh0kOwcGHum3wp5ga+TG+d777SMxGL/4ZH3VNCAUyvB3n5OtbcIWCef9S7qMDQ8uu2SWalc7pI4YNbtIyE7bdhz1YFPjHchh8oXhzxD27uc=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/; SameSite=None; Secure\n__cf_bm=k7gZOKdTrDw0O_8usU1z3GmF.rTKsRekHNU3oGcYyZ0-1780146452.1348534-1.0.1.1-5fSqtH2UaciCtOkL3gfzeNTXJWBRjz_ULRyMy_kp6hYYibGzGA6ZiozgSlnMCa7pUEm5Dr8d8dwP7KcN8dLrH7Iblwdc_brAMsxfs9KWNKi1juTWCjOA8BG_Be_Gxkvf; HttpOnly; SameSite=None; Secure; Path=/; Domain=quickenloans.com; Expires=Sat, 30 May 2026 13:37:32 GMT\n__cflb=0H28vfGvKfdvn24kVcWkzcj7SojU4X6z24VejxzuHMn; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 31 May 2026 12:07:32 GMT\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\netag: W/\"74f-tQvUjvckcL2Ta1tLGqksfm7xHqU\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a03df65ddd2623eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1871,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe338a0a32bf0d170bc15661cb27d920","sha1":"b50bd48ef72470bd936b5b4b1aa92c7e6ef11ea5","sha256":"f156ec6a4b469cb89a1d2c95728aeffc71af136fc8d31aefe5876b238452287a","sha512":"34326c349d0144a3d72aae7c0abb93f2526c8c1a4808f9c9d8568a20cd7a18f6bd8ac6c1a0a05480f26f337f66a72f326c037db98c8fadcbf07dcd643f17a50f","ssdeep":"","tlshash":"8331d77f0b8289ac7f427281ed1def040f9d64bb38c4a4a0ddee3d84a691a9f4c24164","first_seen":"2026-05-30T13:08:05.430283Z","last_seen":"2026-05-30T13:08:05.430283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared-bff.quickenloans.com/api/tracking/event/v2","fqdn":"shared-bff.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.26.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:32.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"POST /api/tracking/event/v2 HTTP/1.1\r\nHost: shared-bff.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.quickenloans.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.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.J5zwhxdhgkJt2Ab9_Chwx6vOWBOVhp8CGlXmAqW739L6V3kSFlxs8OU0MvpHjPTzFuNfJMUhkBUns4MD3BwiJjQyucZi7RUgxXr8PtH6uJr8A_zsMKBZQ8wRuaDRWF9ou5NC-nbggfm_BBOrUhf3fR9_uodej72VSlDiJJEZ_eAgKrVzue-zocez_R9Yz-y2bRxBakOoNEzHs6WncEuS--djwSfMSMHNoKqvGjJw6wSxnM9-BQ1Z_3v8CzGId3tVIIhSUathc2IhVbfJlQV4GCfLeVuJzVNszHnO-VUs9kCbHgfRCHh8hpY8a7t7oa2jFdLjinsLOQ3AEHreKoAh-Q\r\nContent-Length: 155\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":155,"data":"{\"eventType\":\"campaign\",\"visitorId\":\"6f13e051-5eb5-4d68-814a-8795d743e250\",\"marketingClickId\":\"db15f9ea-8128-5670-841f-97599e372e4d\",\"marketingOfferId\":\"\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: AWSALBTG=ML/eoUxQ8RM4vuqa9ueqK4ytyyH00fX64+i9xy1ov20S8hS3p8ZvzFoRUBbsxX/kH55+t9gQVQAbtdnfrTXcgDnxgeet65NaiIhQe1WkQYPtvNShU6Khy9sjFsXsDU3SjYgyrPnEnxyE+l0IwfWPvXiKmY4ckIU13N04ZiDWuM33AdmhwWA=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/\nAWSALBTGCORS=ML/eoUxQ8RM4vuqa9ueqK4ytyyH00fX64+i9xy1ov20S8hS3p8ZvzFoRUBbsxX/kH55+t9gQVQAbtdnfrTXcgDnxgeet65NaiIhQe1WkQYPtvNShU6Khy9sjFsXsDU3SjYgyrPnEnxyE+l0IwfWPvXiKmY4ckIU13N04ZiDWuM33AdmhwWA=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/; SameSite=None; Secure\n__cf_bm=ogtQ9YbCY_8c9bPsMXffltSXo6XS5gx7zXw.GEtiRGY-1780146452.1830149-1.0.1.1-MPtJG57xNTLGuLK9rz_ZS_cYsCmEo.YQwNc1E64xbVe_J8sUIsvM7h9w499suxZwTA8SSD1OHlJQkK535qjMmdywyqqPckbMj5nyVKbznObtRwbtRWgqBpNiqvBUUcQs; HttpOnly; SameSite=None; Secure; Path=/; Domain=quickenloans.com; Expires=Sat, 30 May 2026 13:37:32 GMT\n__cflb=0H28vfGvKfdvn24kVcWkzcj7SojU4X6z24VejxzuHMn; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 31 May 2026 12:07:32 GMT\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\netag: W/\"74f-tQvUjvckcL2Ta1tLGqksfm7xHqU\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a03df65e1e3a23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1871,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe338a0a32bf0d170bc15661cb27d920","sha1":"b50bd48ef72470bd936b5b4b1aa92c7e6ef11ea5","sha256":"f156ec6a4b469cb89a1d2c95728aeffc71af136fc8d31aefe5876b238452287a","sha512":"34326c349d0144a3d72aae7c0abb93f2526c8c1a4808f9c9d8568a20cd7a18f6bd8ac6c1a0a05480f26f337f66a72f326c037db98c8fadcbf07dcd643f17a50f","ssdeep":"","tlshash":"8331d77f0b8289ac7f427281ed1def040f9d64bb38c4a4a0ddee3d84a691a9f4c24164","first_seen":"2026-05-30T13:08:05.430283Z","last_seen":"2026-05-30T13:08:05.430283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.datadoghq-browser-agent.com/us1/v5/datadog-rum.js","fqdn":"www.datadoghq-browser-agent.com","domain":"datadoghq-browser-agent.com","tld":"com"},"ip":{"addr":"52.222.188.176","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.datadoghq-browser-agent.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sat, 21 Mar 2026 00:00:00 GMT","end":"Mon, 05 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"63:4B:4D:B1:2A:6E:84:21:52:79:B4:B4:D3:ED:E2:D2:98:93:6E:A9","sha256":"1F:63:3F:C8:0A:5A:7B:77:CD:95:4A:06:A2:44:EE:56:05:79:D4:2B:B8:4C:16:D3:DF:52:C8:9D:A8:AF:0F:07"}}},"request":{"raw":"GET /us1/v5/datadog-rum.js HTTP/1.1\r\nHost: www.datadoghq-browser-agent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Feb 2025 13:31:37 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\ndate: Sat, 30 May 2026 13:07:24 GMT\r\ncache-control: max-age=14400, s-maxage=60\r\netag: W/\"e93b58e682a3aece4f0358ee1acc582f\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e21c7dce7b26c6a388cc82dd5423f574.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: nMLU3cI_Rl0Zm_eKme-TBgxaccYPuP3GbsqbWXTU1S-xRpadtsqXmw==\r\nage: 11\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":165703,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"e93b58e682a3aece4f0358ee1acc582f","sha1":"e30a30e74a6ae19541f97b534d86b03b0f0cdc85","sha256":"5313b7e73718a07e8cf7a803b4a1a109ec24c2123db6777273e47ddcb52bc24a","sha512":"763b7f1bbb3bfd1384ff778164cb4a2d4de29167ac31e7b364c0397854820c669f097c4125cdebe32339a0a79aa535e6146c5df11c737f613673e345d6971e53","ssdeep":"1536:s5arq26151Q0tDFMXw+/jBkYnO+0QikytI67LVelWMYPvHAFq4gzcGBjrmdy6sw9:Ri15+0tydklPdelAAg4gzjT+","tlshash":"01f3d6dcf682b03557d33036407f120ab77a2951394a85a0e2b7d6d53cb869ea233f6d","first_seen":"2025-02-14T15:48:31.010572Z","last_seen":"2026-06-07T05:49:16.932332Z","times_seen":12024,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":42,"dns":28,"connect":1,"send":0,"wait":3,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/commons-ab8b8090793bf5801c87.js","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /commons-ab8b8090793bf5801c87.js HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV; _dd_s=rum=0\u0026expire=1780147348609\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:29 GMT\r\ncontent-type: text/javascript\r\ncf-ray: a03df64a198623eb-OSL\r\ncf-cache-status: HIT\r\nx-cache: Miss from cloudfront\r\ncache-control: public, max-age=300\r\nx-amz-version-id: jJYAQ.80s8.EJjRkgG6JD_Lj5ixGrruP\r\nexpires: Sat, 30 May 2026 13:12:29 GMT\r\nlast-modified: Fri, 29 May 2026 21:32:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 039ee779486557ccf22d128d6266e00e.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: gImwV7TDEdqhUmaX2TrXku0IyrZclBAWz8-_72sWYiOqhnPiD4DVyw==\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"07d4ddf9e8e5b455b622da6ad4b9b0bf\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":934847,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48925)","md5":"03d217dde0005058dffcc158ba8595a7","sha1":"816de0d7f532d2bfea7e348150ba191dc5034019","sha256":"fc54f54303f5c497003766f72471b18234e4e3de1c3eb4054f8be0f57f2c7df0","sha512":"ba3b78955eb0158ec6f584aec43a21342a6bc1adca3ed197130ae6e58e9a45dee53a1ec0335e878d907c1b0fc384deaf515288899c6723ef11762a8d5a2a2d78","ssdeep":"12288:TGsPA13ouS8HUXKC+KjWarFWI1GxEVAfTO4T9WYKJGKvjEZFcObdkXnz:TGWC3oh8HMKCLHpQO4hWYKJuZFDdC","tlshash":"97158d89b791b3351bfb62d5407f400dfa3e6609640a84a4f679dcc526b8a8d6233f7c","first_seen":"2026-05-30T13:08:05.442781Z","last_seen":"2026-05-30T13:08:05.442781Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=10\u0026frm=0\u0026ae=g\u0026auid=415580428.1780146449\u0026dt=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.quickenloans.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1645099745.1780146449\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He65r2v9137104487za200zd9137104487xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~116701382~117776794~119034491~119064971\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1780146449072\u0026tfd=2538","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:29.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:58 GMT","end":"Thu, 30 Jul 2026 15:53:57 GMT"},"fingerprint":{"sha1":"3D:2F:68:CA:7D:7E:91:9E:9A:F6:55:25:90:92:2C:70:DF:61:E1:AA","sha256":"17:D0:A6:F1:72:DB:CB:B5:FD:37:15:CC:95:48:17:63:D5:77:2E:57:FC:4D:6A:36:5B:D9:8A:76:6B:1B:54:5E"}}},"request":{"raw":"POST /ccm/collect?rcb=10\u0026frm=0\u0026ae=g\u0026auid=415580428.1780146449\u0026dt=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.quickenloans.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1645099745.1780146449\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He65r2v9137104487za200zd9137104487xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~116701382~117776794~119034491~119064971\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1780146449072\u0026tfd=2538 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.quickenloans.com/\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\npragma: no-cache\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Sat, 30 May 2026 13:07:29 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.quickenloans.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":161,"dns":0,"connect":21,"send":0,"wait":30,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sgtm.quickenloans.com/g/collect?v=2\u0026tid=G-RXLL9Z7XBK\u0026gtm=45je65r2v9169491831z89137104487za20gzb9137104487zd9137104487\u0026_p=1780146448462\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1307750120\u0026_eu=AAAAAGQ\u0026_fplc=0\u0026cid=1794521849.1780146450\u0026frm=0\u0026pscdl=noapi\u0026rcb=14\u0026sr=1280x1024\u0026ul=en-us\u0026ur=NO-03\u0026sst.etld=google.no\u0026sst.gcsub=region1\u0026sst.tft=1780146448462\u0026sst.lpc=230655900\u0026sst.navt=n\u0026sst.ude=0\u0026sst.sw_exp=1\u0026gaf=2\u0026_s=3\u0026tag_exp=0~115616986~115938465~115938469~118012009~119034493~119064591\u0026sid=1780146449\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Fwww.quickenloans.com%2F\u0026dt=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026_tu=DA\u0026en=CDM_data\u0026up.sourceidurl=0\u0026tfd=3153\u0026richsstsse","fqdn":"sgtm.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"216.239.34.21","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:29.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgtm.quickenloans.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 21:02:49 GMT","end":"Sat, 11 Jul 2026 21:54:41 GMT"},"fingerprint":{"sha1":"48:5B:7A:A1:D1:40:2D:AB:39:AA:BA:F3:CF:8A:8D:A0:52:A8:8A:76","sha256":"FD:A9:2F:D7:DE:5B:2A:7C:CA:23:3D:80:84:AB:32:05:DA:1F:09:5B:FB:62:97:5B:37:74:8F:07:74:A3:93:2F"}}},"request":{"raw":"GET /g/collect?v=2\u0026tid=G-RXLL9Z7XBK\u0026gtm=45je65r2v9169491831z89137104487za20gzb9137104487zd9137104487\u0026_p=1780146448462\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1307750120\u0026_eu=AAAAAGQ\u0026_fplc=0\u0026cid=1794521849.1780146450\u0026frm=0\u0026pscdl=noapi\u0026rcb=14\u0026sr=1280x1024\u0026ul=en-us\u0026ur=NO-03\u0026sst.etld=google.no\u0026sst.gcsub=region1\u0026sst.tft=1780146448462\u0026sst.lpc=230655900\u0026sst.navt=n\u0026sst.ude=0\u0026sst.sw_exp=1\u0026gaf=2\u0026_s=3\u0026tag_exp=0~115616986~115938465~115938469~118012009~119034493~119064591\u0026sid=1780146449\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Fwww.quickenloans.com%2F\u0026dt=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026_tu=DA\u0026en=CDM_data\u0026up.sourceidurl=0\u0026tfd=3153\u0026richsstsse HTTP/1.1\r\nHost: sgtm.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.quickenloans.com/\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV; _gcl_au=1.1.415580428.1780146449; _ga_RXLL9Z7XBK=GS2.1.s1780146449$o1$g1$t1780146449$j60$l0$h1307750120; _ga=GA1.1.1794521849.1780146450\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: FPID=FPID2.2.lGtLS%2FwKM1Dkjn1bgTKIebpgRE%2F8MRhUCyPYlPB4i6I%3D.1780146450; Max-Age=63072000; Domain=quickenloans.com; Path=/; Secure; HttpOnly\nFPLC=T1hpH%2FPfc6hRGuhSmpyOXOW6sJ%2BdPwLXm2ClbgO%2BfaJLVoKwDk1wIeNdFVIt9WTBKaGeU0bX876tlPgw37NASOYvmDmNDQY9fGE5990qubxtQld2eJYME57qZ7LWHw%3D%3D; Max-Age=72000; Domain=quickenloans.com; Path=/; Secure\nFPGSID=1.1780146450.1780146450.G-RXLL9Z7XBK.Vv34HdWPJwCiKoAYCr5xhw; Max-Age=1800; Domain=quickenloans.com; Path=/; SameSite=strict; Secure\r\ncache-control: no-cache\r\ncontent-type: text/plain\r\nx-content-type-options: nosniff\r\nx-accel-buffering: no\r\naccess-control-allow-origin: https://www.quickenloans.com\r\naccess-control-allow-credentials: true\r\ndate: Sat, 30 May 2026 13:07:30 GMT\r\nserver: Google Frontend\r\nexpires: Sat, 30 May 2026 13:07:30 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":912,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (424)","md5":"86e07099228113ed70d9739b52a233db","sha1":"37f5939d842426637794ec4da5f3488e30263907","sha256":"344cbfa8c2d2dd67cc49597f81e8a5d99807ee408fecd6e223b09648aad389cc","sha512":"6f453e42db0e5f06444faf4dd4021783df5d1ccbb78ec4cb6cdcbcb579d3ff8630ca01ec82631b6a79edd8a3ba062c40dacad10b84e9a3b5805e0c57615c6fa0","ssdeep":"","tlshash":"f511e35f58512f53b7a7bc8271fa1052a5726b66c0379b19c1410def5212b45701f38f","first_seen":"2026-05-30T13:08:05.44379Z","last_seen":"2026-05-30T13:08:05.44379Z","times_seen":1,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":231,"dns":1,"connect":8,"send":0,"wait":164,"receive":0,"ssl":219},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared-bff.quickenloans.com/api/tracking/event/v2","fqdn":"shared-bff.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.26.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:31.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"OPTIONS /api/tracking/event/v2 HTTP/1.1\r\nHost: shared-bff.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://www.quickenloans.com/\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 30 May 2026 13:07:32 GMT\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: authorization,content-type\r\ncf-cache-status: DYNAMIC\r\nset-cookie: AWSALBTG=hYvldooArAk1APnpDh87iBaMWY2FUT0Mxy0XqP5vSRT+1j2BhnFeZS/PiNo6SCIHt+drkAiiGR6MqXKP4Pw2KM3cHaczufsIiVlQzEMXjSwxpatz+rX3SmUqOPkAhRXSQe1V0R/7LAmPKG1Fzua2j2oQxouMmHtwe1huNOk+rZkCEN+15kU=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/\nAWSALBTGCORS=hYvldooArAk1APnpDh87iBaMWY2FUT0Mxy0XqP5vSRT+1j2BhnFeZS/PiNo6SCIHt+drkAiiGR6MqXKP4Pw2KM3cHaczufsIiVlQzEMXjSwxpatz+rX3SmUqOPkAhRXSQe1V0R/7LAmPKG1Fzua2j2oQxouMmHtwe1huNOk+rZkCEN+15kU=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/; SameSite=None; Secure\n__cf_bm=ptKugi1W9ISmnydE9cWQNVC2dPlwt0VOAPJUCjC3DRY-1780146451.3936784-1.0.1.1-L32KPQJYtMyoWyMzxpmbtyvHRKjzE5XxKV.KSnMB1NsRRI21ENW6HoyWWu9pJ5DS.itDQ6aKu2T_JeV9iImLzOy6Blpzmjritb9bkfEtfwwwaO7Oar_nxMOjKbWXG5SR; HttpOnly; SameSite=None; Secure; Path=/; Domain=quickenloans.com; Expires=Sat, 30 May 2026 13:37:32 GMT\n__cflb=0H28vfGvKfdvn24kVcWkzcj7SojU4X6yHEyTBKNdcsN; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 31 May 2026 12:07:32 GMT\r\nserver: cloudflare\r\ncf-ray: a03df6593acf23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":836,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":836,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sgtm.quickenloans.com/g/collect?v=2\u0026tid=G-RXLL9Z7XBK\u0026gtm=45je65r2v9169491831z89137104487za20gzb9137104487zd9137104487\u0026_p=1780146448462\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1307750120\u0026_eu=AAAAAGA\u0026_fplc=0\u0026cid=1794521849.1780146450\u0026frm=0\u0026pscdl=noapi\u0026rcb=14\u0026sr=1280x1024\u0026ul=en-us\u0026ur=NO-03\u0026sst.etld=google.no\u0026sst.gcsub=region1\u0026sst.tft=1780146448462\u0026sst.lpc=230655900\u0026sst.navt=n\u0026sst.ude=0\u0026sst.sw_exp=1\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115616986~115938465~115938469~118012009~119034493~119064591\u0026sid=1780146449\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.quickenloans.com%2F\u0026dt=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026_tu=BA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=3105\u0026richsstsse","fqdn":"sgtm.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"216.239.34.21","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:29.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgtm.quickenloans.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 21:02:49 GMT","end":"Sat, 11 Jul 2026 21:54:41 GMT"},"fingerprint":{"sha1":"48:5B:7A:A1:D1:40:2D:AB:39:AA:BA:F3:CF:8A:8D:A0:52:A8:8A:76","sha256":"FD:A9:2F:D7:DE:5B:2A:7C:CA:23:3D:80:84:AB:32:05:DA:1F:09:5B:FB:62:97:5B:37:74:8F:07:74:A3:93:2F"}}},"request":{"raw":"GET /g/collect?v=2\u0026tid=G-RXLL9Z7XBK\u0026gtm=45je65r2v9169491831z89137104487za20gzb9137104487zd9137104487\u0026_p=1780146448462\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1307750120\u0026_eu=AAAAAGA\u0026_fplc=0\u0026cid=1794521849.1780146450\u0026frm=0\u0026pscdl=noapi\u0026rcb=14\u0026sr=1280x1024\u0026ul=en-us\u0026ur=NO-03\u0026sst.etld=google.no\u0026sst.gcsub=region1\u0026sst.tft=1780146448462\u0026sst.lpc=230655900\u0026sst.navt=n\u0026sst.ude=0\u0026sst.sw_exp=1\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115616986~115938465~115938469~118012009~119034493~119064591\u0026sid=1780146449\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.quickenloans.com%2F\u0026dt=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026_tu=BA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=3105\u0026richsstsse HTTP/1.1\r\nHost: sgtm.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.quickenloans.com/\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV; _gcl_au=1.1.415580428.1780146449; _ga_RXLL9Z7XBK=GS2.1.s1780146449$o1$g0$t1780146449$j60$l0$h1307750120; _ga=GA1.1.1794521849.1780146450\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: FPID=FPID2.2.lGtLS%2FwKM1Dkjn1bgTKIebpgRE%2F8MRhUCyPYlPB4i6I%3D.1780146450; Max-Age=63072000; Domain=quickenloans.com; Path=/; Secure; HttpOnly\nFPLC=ABgO0UFh81x90hf91UH1V%2BG%2B3fwWCN3VnGTjg3Ch5m9xEGt3Wtm46EKbI6G1h4eARqanxTCEf%2FFL3%2FcZFowHoXLwoSTV1zHI4y1%2BV6Gt2FOepVCtGatCdZE64ed2ng%3D%3D; Max-Age=72000; Domain=quickenloans.com; Path=/; Secure\nFPAU=1.1.415580428.1780146449; Max-Age=7775999; Domain=quickenloans.com; Path=/; Secure\nFPGSID=1.1780146449.1780146449.G-RXLL9Z7XBK.9BLzg-mtI8DhkTn0802kZg; Max-Age=1800; Domain=quickenloans.com; Path=/; SameSite=strict; Secure\r\ncache-control: no-cache\r\ncontent-type: text/plain\r\nx-content-type-options: nosniff\r\nx-accel-buffering: no\r\naccess-control-allow-origin: https://www.quickenloans.com\r\naccess-control-allow-credentials: true\r\ndate: Sat, 30 May 2026 13:07:29 GMT\r\nserver: Google Frontend\r\nexpires: Sat, 30 May 2026 13:07:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1265,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (404)","md5":"e0ecea1bc78b34e14eb638079bb398d8","sha1":"aa235f193dce1aeb6c48297d007011b6a211b2a4","sha256":"4c4349da0682b404e4f41151fd988a9104ecd354cff3892d3eb1c4efc50dbf15","sha512":"b645495c4dd2ab3de962376c23faa61a06b020d90e221225ef9c45473dbff7f1a5f1c8d7f57a7b8d40089b675ec596188f6b8c3568836d0033139525ad9edd45","ssdeep":"","tlshash":"fe21ed8f58912f673ba7a8d011fa1892e5712baa806c2f24d5811ced9312b0a700f38a","first_seen":"2026-05-30T13:08:05.44476Z","last_seen":"2026-05-30T13:08:05.44476Z","times_seen":1,"resource_available":false,"data":null}},"time_used":652,"timings":{"blocked":237,"dns":31,"connect":8,"send":0,"wait":182,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/p/conversions/t/247005605?insights=1","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:30.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 03 May 2026 03:13:55 GMT","end":"Fri, 30 Oct 2026 03:13:55 GMT"},"fingerprint":{"sha1":"8E:B0:B8:72:C4:57:AF:BC:1A:2D:BE:E8:A5:01:2A:0E:76:5A:AB:54","sha256":"F3:47:7D:87:DC:FD:DF:F7:D6:48:6C:48:E9:FF:26:B6:63:61:4F:8D:5B:7C:AF:43:D3:CA:42:09:B9:CB:84:01"}}},"request":{"raw":"GET /p/conversions/t/247005605?insights=1 HTTP/1.1\r\nHost: bat.bing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store\r\ncontent-length: 796\r\ncontent-type: application/x-javascript\r\nexpires: -1\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nrequest-context: appId=cid-v1:a894a21c-0197-44e5-b203-3cbc01252c82\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 6642BB3579CE4107833B73EB201655CD Ref B: OSL231050213062 Ref C: 2026-05-30T13:07:30Z\r\ndate: Sat, 30 May 2026 13:07:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":796,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (796), with no line terminators","md5":"b224a9860151200b1ec19f73064e64b0","sha1":"c0ba6b755b01b7577ff2f351800869d2f2ccf8bc","sha256":"80c5266aa3f78ad66b3e3d0800663fcedd1087623fe893765ed27d520b4f6f6c","sha512":"d364e8e6347c16a77b7f70f01382384916d36c6520c42fd8e2b5305cf2f54bf05432a3102710c3fd2dd251ea9b3398d9ade08faf033bfd79fbb34eb1e863cbcb","ssdeep":"","tlshash":"6f01f135fc8db5672b62106607be4f08735d120e34148021558e4eb50a7c4cf03f76b9","first_seen":"2026-05-30T13:08:05.4462Z","last_seen":"2026-05-30T13:08:05.4462Z","times_seen":1,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/s/collect?dma=1\u0026dma_cps=a\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026gtm=45j91e65r0v9169491831z89137104487z99200500233za20gzb9137104487zd9137104487\u0026tag_exp=0~115616986~115938465~115938469~117384418~117384418~118012009~119034493~119064591\u0026_is_sw=f6te\u0026_tu=DA\u0026_gsid=RXLL9Z7XBKc7pwj_RtLeUzlCK7GTv5zg","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:30.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"E5:3F:1D:8A:67:60:A8:60:56:38:E4:E3:ED:A6:64:D9:7C:89:E1:E1","sha256":"39:E2:E8:B9:46:82:06:98:FA:92:0A:A2:4F:57:DF:DF:EF:00:44:4A:27:C0:C4:99:EC:A5:E3:D4:1A:A8:A5:D4"}}},"request":{"raw":"GET /g/s/collect?dma=1\u0026dma_cps=a\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026gtm=45j91e65r0v9169491831z89137104487z99200500233za20gzb9137104487zd9137104487\u0026tag_exp=0~115616986~115938465~115938469~117384418~117384418~118012009~119034493~119064591\u0026_is_sw=f6te\u0026_tu=DA\u0026_gsid=RXLL9Z7XBKc7pwj_RtLeUzlCK7GTv5zg HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: *\r\ndate: Sat, 30 May 2026 13:07:30 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:329:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:329:0\r\nreport-to: {\"group\":\"ascnsrsggc:329:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:329:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":78,"dns":0,"connect":22,"send":0,"wait":41,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/16663922781/?random=1352491435\u0026cv=11\u0026fst=1780146450579\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be65r2v9192557333z89137104487za20gzb9137104487zd9137104487xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~116701382~118228215~119034493\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fwww.quickenloans.com%2F\u0026rcb=0\u0026label=GgdBCIOh98gZEN2Q_Yk-\u0026frm=0\u0026tiba=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=415580428.1780146449\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=2~0~0~0\u0026em=tv.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCKG4sQIIscGxAgiwwbECCLHDsQIIisWxAgjCybECCLTGsQIIk9qxAgjb3LECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgj02rECCJfUsQIIyduxAgix4bECCLPhsQIIpt2xAgiw3rECCIDbsQI\u0026cerd=CgEA\u0026eitems=ChEI8JXq0AYQ39OXg-vY9rz_ARIdALI0U6huDUB2pxRip2It0odH6PXOleDuwtLN5iU\u0026fsk=ChEI8JXq0AYQn_OThtTn0-qAARIsAP15kqBCUjlO2QCn7RuY0SLa2a2lGENAzh5rXsQDWuWlVKJZCT25yI_AnfEaAnIy\u0026ipr=y\u0026pscrd=IhMIx5bdporhlAMV0VweAh374QPhOh1odHRwczovL3d3dy5xdWlja2VubG9hbnMuY29tL0JWQ2hBSThKWHEwQVlReUtyVno1eW95WmxNRWl3QWh0NTFCeW1JZHRxQ1hzOUVWTmQ2ODhCamNZd2hOSEdrMFVST1RhYWx6czhPeFhGLXg1N0ZmMzBJM2d6DAgJYggIABAAGAAgAA","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:32.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:55:19 GMT","end":"Thu, 30 Jul 2026 15:55:18 GMT"},"fingerprint":{"sha1":"0B:35:DC:89:EA:6C:6B:84:37:37:B0:28:E3:EE:28:BF:30:63:E1:98","sha256":"0D:F4:09:F4:10:6D:23:C9:1F:1A:51:B4:6C:60:CE:E0:19:D8:B6:19:C5:C4:86:1B:00:2E:EA:54:40:0A:0E:26"}}},"request":{"raw":"GET /pagead/1p-conversion/16663922781/?random=1352491435\u0026cv=11\u0026fst=1780146450579\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be65r2v9192557333z89137104487za20gzb9137104487zd9137104487xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~116701382~118228215~119034493\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fwww.quickenloans.com%2F\u0026rcb=0\u0026label=GgdBCIOh98gZEN2Q_Yk-\u0026frm=0\u0026tiba=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=415580428.1780146449\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=2~0~0~0\u0026em=tv.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCKG4sQIIscGxAgiwwbECCLHDsQIIisWxAgjCybECCLTGsQIIk9qxAgjb3LECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgj02rECCJfUsQIIyduxAgix4bECCLPhsQIIpt2xAgiw3rECCIDbsQI\u0026cerd=CgEA\u0026eitems=ChEI8JXq0AYQ39OXg-vY9rz_ARIdALI0U6huDUB2pxRip2It0odH6PXOleDuwtLN5iU\u0026fsk=ChEI8JXq0AYQn_OThtTn0-qAARIsAP15kqBCUjlO2QCn7RuY0SLa2a2lGENAzh5rXsQDWuWlVKJZCT25yI_AnfEaAnIy\u0026ipr=y\u0026pscrd=IhMIx5bdporhlAMV0VweAh374QPhOh1odHRwczovL3d3dy5xdWlja2VubG9hbnMuY29tL0JWQ2hBSThKWHEwQVlReUtyVno1eW95WmxNRWl3QWh0NTFCeW1JZHRxQ1hzOUVWTmQ2ODhCamNZd2hOSEdrMFVST1RhYWx6czhPeFhGLXg1N0ZmMzBJM2d6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.quickenloans.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 30 May 2026 13:07:32 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-30T13:07:27.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\ncontent-type: text/html\r\ncf-ray: a03df6401a6b23eb-OSL\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=20,cfOrigin;dur=0,cfWorker;dur=612\r\nlast-modified: Fri, 29 May 2026 21:32:09 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvia: 1.1 fdac35835bcf0937b6f910eeac10720e.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: THztCv0tUxUzNx9aEC7ZA45ftTF1VA93H86F3h4C8z8iuzlOcVFYJw==\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ZNEOUHxNZVzmG7G5ASb8qayl6d59Ek6L\r\nx-cache: Miss from cloudfront\r\nset-cookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV; HttpOnly; SameSite=None; Secure; Path=/; Domain=quickenloans.com; Expires=Sat, 30 May 2026 13:37:28 GMT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gatsby:5.15.0","description":"Gatsby is a React-based open-source framework with performance, scalability and security built-in.","website":"https://www.gatsbyjs.org/","common_platform_enumeration":"","icon":"Gatsby.svg","categories":["Static site generator","JavaScript frameworks"]},{"name":"Adobe Fonts","description":"Adobe Fonts is a web-based service providing access to a vast library of high-quality fonts for web and print design.","website":"https://fonts.adobe.com","common_platform_enumeration":"","icon":"Adobe Fonts.svg","categories":["Font scripts"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Typekit","description":"Typekit is an online service which offers a subscription library of fonts.","website":"https://typekit.com","common_platform_enumeration":"","icon":"Typekit.png","categories":["Font scripts"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":132985,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (59166)","md5":"b036ce0edac97c7575abed048f0cd72c","sha1":"d4fdcaa765bb8e14c50132acdb987e70daefff77","sha256":"27822f5bdc6d69f8829438fd336caee98bfaa1421d6f62b60f1551b6f50c30d0","sha512":"f27b8895914c3457a96b34fa247eb0730ed7b812899dca4f7ece1c305d6dd7309215796093fb9cb06f739936d7abad16ed763e4d4c3ed096e8c37ba8dbe85a39","ssdeep":"1536:tOo/lNF3M7hQh3kURWA7AQObZ0blTXaLb93M7pGA:tz/hM7hQh9WA7AQMZ2Jq5M7p/","tlshash":"25d32974cf12403b32fb5fed31f6bb1aa923e903c78206e6a5508532a7c9ed5495279c","first_seen":"2026-05-30T13:08:05.447095Z","last_seen":"2026-05-31T04:02:18.072246Z","times_seen":2,"resource_available":true,"data":null}},"time_used":759,"timings":{"blocked":60,"dns":36,"connect":1,"send":0,"wait":638,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/learnassets/QuickenLoans.com/2022%20Images/Stock-FHA-Condos-AdobeStock-81979368.jpeg","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /learnassets/QuickenLoans.com/2022%20Images/Stock-FHA-Condos-AdobeStock-81979368.jpeg HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 37869\r\ncf-ray: a03df646ac0a23eb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=300\r\netag: \"51b12550244f6968a4990c812482dfa8\"\r\nexpires: Sat, 30 May 2026 13:12:28 GMT\r\nlast-modified: Thu, 28 Mar 2024 19:57:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 1b9d4ba2defe07b6bebb5c25f0f192cc.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: LaRj-nFd6lnorxyIOoNKey8FkB3AjumTY-0IErZCR-caBjSDUfbl6g==\r\nx-amz-cf-pop: FRA56-P16\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ul5PK8KKaq5sW_wsDq6GrIfLcMzx.yOL\r\nx-cache: Miss from cloudfront\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":37869,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 483x322, components 3","md5":"51b12550244f6968a4990c812482dfa8","sha1":"7b3e615f918d4c06f7eb480e898d234d9fe76714","sha256":"bea1aa6528d3183a3e8ed9d7cf9dbb9266a483aa51b96491cfa6fbccde9d33c7","sha512":"2dbad603b302176cff639e31d84a92433c51e480e1684c07e66f399cdf38ab9c26248cea2cf49b564fee92ee2ccfaaa780d5089bd29184c1d3bee0788aca6c57","ssdeep":"768:owFA1undRSzGF7uyPzMr4D0BhyragTv9duK65:owFKudRSzkqyPzM8I8agb9duR","tlshash":"1603f2ba675614114601fffcd0aa8793c9ad662458606320f9a7ff58c1fcec25d81c9e","first_seen":"2026-05-30T13:08:05.44805Z","last_seen":"2026-06-04T15:54:08.193509Z","times_seen":3,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-11388547050\u0026cx=c\u0026gtm=4e65r2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.1.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:29.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:35 GMT","end":"Thu, 30 Jul 2026 15:51:34 GMT"},"fingerprint":{"sha1":"4F:F6:A0:5C:88:9C:38:C1:57:D2:C2:16:50:CD:79:E3:67:50:CC:B0","sha256":"93:D6:F4:89:DB:C5:7B:E8:C8:73:F7:36:40:1B:87:32:83:AA:3F:54:8B:26:97:45:83:DB:E6:BF:FD:F5:70:33"}}},"request":{"raw":"GET /gtag/js?id=AW-11388547050\u0026cx=c\u0026gtm=4e65r2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 30 May 2026 13:07:29 GMT\r\nexpires: Sat, 30 May 2026 13:07:29 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 30 May 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 144361\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":427092,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5930)","md5":"8d587b8f90fc2b90987cff4653d113be","sha1":"b7ce518d9c7d73edbf730753a1b4486bb9b3dcfb","sha256":"e92ef8263e26149c461dbb7fe6a646779b33941e15c068f64022465c01800598","sha512":"a79d9692362da4f9b50cac7627fe19c456951730811839645fbbd0bf007e6851e946831b3c6ccb25caadac6507a03c82be4dd837028724b18f980e68e3f7f0ba","ssdeep":"6144:OTRfDNlVf3AlwSXbTFQSvtxhuX7aWCBbnNlvaoJ+:OFVf3ARxQST8oJ+","tlshash":"7b9408cdb3d6746253a2f478503f018ba57a68e2b44cc899f189cce42e7469a4277f7c","first_seen":"2026-05-30T13:08:05.449065Z","last_seen":"2026-05-30T13:08:05.449065Z","times_seen":1,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-11380533681\u0026cx=c\u0026gtm=4e65r2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.1.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:35 GMT","end":"Thu, 30 Jul 2026 15:51:34 GMT"},"fingerprint":{"sha1":"4F:F6:A0:5C:88:9C:38:C1:57:D2:C2:16:50:CD:79:E3:67:50:CC:B0","sha256":"93:D6:F4:89:DB:C5:7B:E8:C8:73:F7:36:40:1B:87:32:83:AA:3F:54:8B:26:97:45:83:DB:E6:BF:FD:F5:70:33"}}},"request":{"raw":"GET /gtag/js?id=AW-11380533681\u0026cx=c\u0026gtm=4e65r2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 30 May 2026 13:07:29 GMT\r\nexpires: Sat, 30 May 2026 13:07:29 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 30 May 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 144434\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":426687,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5930)","md5":"627ced92553a0a962df543fa9f0516d8","sha1":"196c23d532205a79494a0a0445810b8198321c01","sha256":"3c503acbdeb71f6fc83704a34dc55b4c01a54630de912d8c8848fc6f2f16201e","sha512":"88270d2f7838d7acfbabddbc4c48b76ac1bcfb127432f80dfb0d7ef9182bf58ce85910f3bed2ab464738fb59c537bd6fa7f3d0f2e8eb46bb8d7be3d77e1006a3","ssdeep":"6144:OORfDNlVf3AlwSXbTFQSvtxhuX7aWCBbnNlvaoJ+:OiVf3ARxQST8oJ+","tlshash":"109408cdb3d6706253a3b478503f018ba57a68e2b44cc899f189cce42e7469a4277f7c","first_seen":"2026-05-30T13:08:05.450017Z","last_seen":"2026-05-30T13:08:05.450017Z","times_seen":1,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=10\u0026frm=0\u0026ae=g\u0026auid=415580428.1780146449\u0026dt=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.quickenloans.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1645099745.1780146449\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He65r2v9137104487za200zd9137104487xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~116701382~117776794~119034491~119064971\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1780146449072\u0026tfd=2538","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:30.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"22:23:AA:C0:3B:78:20:8C:E2:B9:B3:D2:68:3A:EA:1F:61:C4:08:DF","sha256":"16:A1:EB:63:D1:FC:CC:47:80:09:5E:C3:61:20:56:39:EC:CA:BA:D6:D2:EF:7A:A6:D6:F6:D1:75:BC:EB:9A:2C"}}},"request":{"raw":"GET /ccm/collect?rcb=10\u0026frm=0\u0026ae=g\u0026auid=415580428.1780146449\u0026dt=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.quickenloans.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1645099745.1780146449\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He65r2v9137104487za200zd9137104487xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~116701382~117776794~119034491~119064971\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1780146449072\u0026tfd=2538 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 May 2026 13:07:30 GMT\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/16663922781/?random=1780146450579\u0026cv=11\u0026fst=1780146450579\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be65r2v9192557333z89137104487za20gzb9137104487zd9137104487xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~116701382~118228215~119034493\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fwww.quickenloans.com%2F\u0026rcb=0\u0026label=GgdBCIOh98gZEN2Q_Yk-\u0026frm=0\u0026tiba=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=415580428.1780146449\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=2~0~0~0\u0026em=tv.1\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:30.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"22:23:AA:C0:3B:78:20:8C:E2:B9:B3:D2:68:3A:EA:1F:61:C4:08:DF","sha256":"16:A1:EB:63:D1:FC:CC:47:80:09:5E:C3:61:20:56:39:EC:CA:BA:D6:D2:EF:7A:A6:D6:F6:D1:75:BC:EB:9A:2C"}}},"request":{"raw":"POST /pagead/1p-conversion/16663922781/?random=1780146450579\u0026cv=11\u0026fst=1780146450579\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be65r2v9192557333z89137104487za20gzb9137104487zd9137104487xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~116701382~118228215~119034493\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fwww.quickenloans.com%2F\u0026rcb=0\u0026label=GgdBCIOh98gZEN2Q_Yk-\u0026frm=0\u0026tiba=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=415580428.1780146449\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=2~0~0~0\u0026em=tv.1\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.quickenloans.com/\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 30 May 2026 13:07:30 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\nlocation: https://www.google.com/pagead/1p-conversion/16663922781/?random=1352491435\u0026cv=11\u0026fst=1780146450579\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be65r2v9192557333z89137104487za20gzb9137104487zd9137104487xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~116701382~118228215~119034493\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fwww.quickenloans.com%2F\u0026rcb=0\u0026label=GgdBCIOh98gZEN2Q_Yk-\u0026frm=0\u0026tiba=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=415580428.1780146449\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=2~0~0~0\u0026em=tv.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCKG4sQIIscGxAgiwwbECCLHDsQIIisWxAgjCybECCLTGsQIIk9qxAgjb3LECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgj02rECCJfUsQIIyduxAgix4bECCLPhsQIIpt2xAgiw3rECCIDbsQI\u0026cerd=CgEA\u0026eitems=ChEI8JXq0AYQ39OXg-vY9rz_ARIdALI0U6huDUB2pxRip2It0odH6PXOleDuwtLN5iU\u0026fsk=ChEI8JXq0AYQn_OThtTn0-qAARIsAP15kqBCUjlO2QCn7RuY0SLa2a2lGENAzh5rXsQDWuWlVKJZCT25yI_AnfEaAnIy\u0026pscrd=IhMIx5bdporhlAMV0VweAh374QPhOh1odHRwczovL3d3dy5xdWlja2VubG9hbnMuY29tL0JWQ2hBSThKWHEwQVlReUtyVno1eW95WmxNRWl3QWh0NTFCeW1JZHRxQ1hzOUVWTmQ2ODhCamNZd2hOSEdrMFVST1RhYWx6czhPeFhGLXg1N0ZmMzBJM2d6DAgJYggIABAAGAAgAA\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/cdn/QuickenLoans.com/logo-quickenloans-small.svg","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /cdn/QuickenLoans.com/logo-quickenloans-small.svg HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a03df645afb123eb-OSL\r\ncf-cache-status: HIT\r\nx-cache: Miss from cloudfront\r\ncache-control: public, max-age=300\r\nx-amz-version-id: KB9KyNd7GXibBsADLW0N1PY1xwOSSVBp\r\nexpires: Sat, 30 May 2026 13:12:28 GMT\r\nlast-modified: Tue, 14 Apr 2026 23:09:59 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 6f51aa6fb8a84e87f8099e5f0adae70a.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: MHk-2_yFxzWtrFzT63YsQGLwuSMYWn0ZCe-tdS7QjPR8qSb_3GmHNw==\r\nx-amz-cf-pop: FRA56-P16\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"5825f84bcb842a5b57e6b2d514318f4e\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":663,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5825f84bcb842a5b57e6b2d514318f4e","sha1":"266d5d3ec3bb35dc52771e860b0a62ff927a6aa3","sha256":"31fdedc28c9c77fa745d73d591237754a7a217a247c47855212aaac51c3b768d","sha512":"162e972e11b81474a219ffe4035cb85ea0da9113c8719a23b9e47d695f692c69313543dc9fef66bab548e0057f73602a2c8d1cae77d8399fd29e8dcec1e52798","ssdeep":"","tlshash":"bc01fefe931374c8cb078a976b34b4b9231e64fb6f6a4984404c6b786443f92f052d24","first_seen":"2026-05-10T18:37:53.596909Z","last_seen":"2026-06-04T15:54:08.174513Z","times_seen":8,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5B82MZ73","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.1.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:35 GMT","end":"Thu, 30 Jul 2026 15:51:34 GMT"},"fingerprint":{"sha1":"4F:F6:A0:5C:88:9C:38:C1:57:D2:C2:16:50:CD:79:E3:67:50:CC:B0","sha256":"93:D6:F4:89:DB:C5:7B:E8:C8:73:F7:36:40:1B:87:32:83:AA:3F:54:8B:26:97:45:83:DB:E6:BF:FD:F5:70:33"}}},"request":{"raw":"GET /gtm.js?id=GTM-5B82MZ73 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\nexpires: Sat, 30 May 2026 13:07:28 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 30 May 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 155330\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":472719,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24565)","md5":"a4833f5df35ae2570ef750480510e6cf","sha1":"a26ce8b7924c35f3924cb75d72d1b620d0771808","sha256":"951a1b50914bd7c1f4e171da1849fe6251048f5cfec430c61a976d46726c6540","sha512":"edd3422d336ac125c75cd04196653d53330452f5caf4a43d00834a254fea6c0f6cd54f326579f4a6fac4a6e142ee99a99eb9e7a5ce82626b521d8ae5e71c60dc","ssdeep":"6144:QC2RfDNMVf3alwSXbTFQSvtxhuX7aWCBbnIb0aoCE+:QCtVf3aRxQSiroh+","tlshash":"eca42acdb3d6746253a2b478903f018ba57a28e2f44cc895f186cce42e7469a5273f7d","first_seen":"2026-05-30T13:08:05.451721Z","last_seen":"2026-05-30T13:08:05.451721Z","times_seen":1,"resource_available":true,"data":null}},"time_used":450,"timings":{"blocked":183,"dns":3,"connect":17,"send":0,"wait":35,"receive":47,"ssl":161},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/page-data/app-data.json","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /page-data/app-data.json HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV; _dd_s=rum=0\u0026expire=1780147348609\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\ncontent-type: application/json\r\ncf-ray: a03df648dc9223eb-OSL\r\ncf-cache-status: HIT\r\nx-cache: Miss from cloudfront\r\ncache-control: public, max-age=300\r\nx-amz-version-id: Z4ZCPCi0pUhORh44U2xcUMI.MlA8jGck\r\nexpires: Sat, 30 May 2026 13:12:28 GMT\r\nlast-modified: Fri, 29 May 2026 21:32:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 9648e05822820cc2f1496be50b69c468.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: YiNbiImxkdofkO0T2w2RBfCzS5BZ5IM_ZA3_y04HurpL9DByladf-w==\r\nx-amz-cf-pop: MCT50-P1\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"390c77adc0bec78c2f1b88ecb5d197b9\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":50,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"390c77adc0bec78c2f1b88ecb5d197b9","sha1":"e34d60d5cb031087965cd0050613b7ae04d3a4c6","sha256":"be8fc430e7f3e754a154bcd9463d76afdcca4c9865bac83f058b44d50dde8e05","sha512":"f4d49e5ec64949e20dcc3f84f63ade538f5f29ab9e07921dd64097d61d7b8f3457cb071145be01b4f77ca30680fdf9f576b0f6bd636239c3cb570aa768546941","ssdeep":"","tlshash":"7e900245422a2e62d51512125b45daa298a988776c6a0859dc04a1058a006988273325","first_seen":"2026-05-30T13:08:05.453001Z","last_seen":"2026-05-31T04:02:18.060721Z","times_seen":2,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.quickenloans.com/ql/brand/illustrations/HomePage_Learning_Center.svg","fqdn":"content.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:31.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /ql/brand/illustrations/HomePage_Learning_Center.svg HTTP/1.1\r\nHost: content.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV; _gcl_au=1.1.415580428.1780146449; _ga_RXLL9Z7XBK=GS2.1.s1780146449$o1$g1$t1780146449$j60$l0$h1307750120; _ga=GA1.1.1794521849.1780146450; FPID=FPID2.2.lGtLS%2FwKM1Dkjn1bgTKIebpgRE%2F8MRhUCyPYlPB4i6I%3D.1780146450; FPLC=Sh51DyavE4T2XIKp6sYZZ5ffRj0Epa64AtbN1tD51Ulapudn87Ylw2%2B7rtRR7JxphoASXaae9htaJrvWUmnXtehpYMRAYCMPUzzXdhQ1%2BI4FrQfvAR6osGQs19zNrQ%3D%3D; FPAU=1.1.415580428.1780146449; FPGSID=1.1780146450.1780146450.G-RXLL9Z7XBK.c7pwj_RtLeUzlCK7GTv5zg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:31 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Mon, 11 May 2026 22:20:42 GMT\r\nserver: cloudflare\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nexpires: Sat, 30 May 2026 13:12:31 GMT\r\ncache-control: public, max-age=300\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\netag: W/\"2ef6f7e0fc9cb44919110569fd8e96c8\"\r\ncontent-encoding: gzip\r\ncf-ray: a03df658fa0023eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1558,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2ef6f7e0fc9cb44919110569fd8e96c8","sha1":"238f4a52fa32344d7af7608ffef347b75fcf0a17","sha256":"9df7c6787bbd6d4e2be81359c0158a062bbc82de99e841d67234b8215adf101f","sha512":"079cefdb73ad6529c1081951f4022fc9083fe9ebb5c2122cdda9f248783e206f905e93ce3b1cebbde74b5f0c4bd4e1de4252bf370c1bc0401dbfb9854c5fb130","ssdeep":"","tlshash":"5a31dbd92b24d7e0e8419b38cf1c58e3a81365dd2918c4b8d3a02f217d8a5be4a886c5","first_seen":"2025-06-28T16:05:43.638716Z","last_seen":"2026-06-04T15:54:08.200327Z","times_seen":17,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/page-data/index/page-data.json","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /page-data/index/page-data.json HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV; _dd_s=rum=0\u0026expire=1780147348609\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\ncontent-type: application/json\r\ncf-ray: a03df648dc9923eb-OSL\r\ncf-cache-status: HIT\r\nx-cache: Miss from cloudfront\r\ncache-control: public, max-age=300\r\nx-amz-version-id: 1qKttD06p31gIlOQa8zNsKsbg6_XaQf5\r\nexpires: Sat, 30 May 2026 13:12:28 GMT\r\nlast-modified: Fri, 29 May 2026 21:32:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 02efb09910c56fb99344d44bcbe8e60e.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: E0EbRIeBxL6GJjyJW6Blm5MeT7MJeBuT-IbfeX-LiRsGWCKZJBn6Bw==\r\nx-amz-cf-pop: FRA60-P12\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"4721def23bba9f82b84e2956c2bda234\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1524695,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"e0772ddb478444f1be51a1e8fa39015c","sha1":"9b4a8bf0c1258ae3193fcb0faf433a5fcea98f00","sha256":"82dd389e49798196eb966678d5c947f1379b7525700ccbb60105a490fa66a82a","sha512":"8f885ca9622ed24a4199d287b1389137974b4d1fdcc8dbda9ec35f309ee825383a9390464b377bda92738dc3601525a7071cae8e859c5f5d878a2c957859f6da","ssdeep":"3072:CzE2qmhHgDaV4bRS54+3zbH1FajA2wV9/EZk2qSAyflvyjZYz7UvObCpCELR7hI:7aObRSi+3zbH1Faq9/JmHGhAELdhI","tlshash":"2425083e2a24dd2adf39890470797ed95dcca66713e9c5a4a8d8cd9c05c827d372a0fc","first_seen":"2026-05-27T18:23:51.130638Z","last_seen":"2026-05-31T04:02:18.066245Z","times_seen":3,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026dma=1\u0026dma_cps=a\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026tid=G-RXLL9Z7XBK\u0026cid=1794521849.1780146450\u0026gtm=45j91e65r0v9169491831z89137104487z99200500233za20gzb9137104487zd9137104487\u0026tag_exp=0~115616986~115938465~115938469~117384418~117384418~118012009~119034493~119064591\u0026_is_sw=f6te\u0026_tu=DA\u0026aip=1\u0026z=165458985","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:30.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:55:19 GMT","end":"Thu, 30 Jul 2026 15:55:18 GMT"},"fingerprint":{"sha1":"0B:35:DC:89:EA:6C:6B:84:37:37:B0:28:E3:EE:28:BF:30:63:E1:98","sha256":"0D:F4:09:F4:10:6D:23:C9:1F:1A:51:B4:6C:60:CE:E0:19:D8:B6:19:C5:C4:86:1B:00:2E:EA:54:40:0A:0E:26"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026dma=1\u0026dma_cps=a\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026tid=G-RXLL9Z7XBK\u0026cid=1794521849.1780146450\u0026gtm=45j91e65r0v9169491831z89137104487z99200500233za20gzb9137104487zd9137104487\u0026tag_exp=0~115616986~115938465~115938469~117384418~117384418~118012009~119034493~119064591\u0026_is_sw=f6te\u0026_tu=DA\u0026aip=1\u0026z=165458985 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 30 May 2026 13:07:31 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-08T01:30:53.152407Z","times_seen":940499,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":177,"dns":9,"connect":18,"send":0,"wait":36,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.quickenloans.com/ql/brand/illustrations/HomePage_Calculators.svg","fqdn":"content.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:31.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /ql/brand/illustrations/HomePage_Calculators.svg HTTP/1.1\r\nHost: content.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV; _gcl_au=1.1.415580428.1780146449; _ga_RXLL9Z7XBK=GS2.1.s1780146449$o1$g1$t1780146449$j60$l0$h1307750120; _ga=GA1.1.1794521849.1780146450; FPID=FPID2.2.lGtLS%2FwKM1Dkjn1bgTKIebpgRE%2F8MRhUCyPYlPB4i6I%3D.1780146450; FPLC=Sh51DyavE4T2XIKp6sYZZ5ffRj0Epa64AtbN1tD51Ulapudn87Ylw2%2B7rtRR7JxphoASXaae9htaJrvWUmnXtehpYMRAYCMPUzzXdhQ1%2BI4FrQfvAR6osGQs19zNrQ%3D%3D; FPAU=1.1.415580428.1780146449; FPGSID=1.1780146450.1780146450.G-RXLL9Z7XBK.c7pwj_RtLeUzlCK7GTv5zg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:31 GMT\r\ncontent-type: image/svg+xml\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=2592000\r\nserver: cloudflare\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Thu, 05 Mar 2026 07:53:07 GMT\r\nx-xss-protection: 1; mode=block\r\nvary: Accept-Encoding\r\nexpires: Sat, 30 May 2026 13:12:31 GMT\r\ncache-control: public, max-age=300\r\ncf-cache-status: HIT\r\netag: W/\"a4c5ef0b00d4b6da266c26b31e0eb7c0\"\r\ncontent-encoding: gzip\r\ncf-ray: a03df658f9f823eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8800,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a4c5ef0b00d4b6da266c26b31e0eb7c0","sha1":"7c01eb36d90bda22ea53dd17ea8315dbafcad2d3","sha256":"584a1a70981757cef6fcab96122d56f68334ce447725c4892942c47fba12c9ad","sha512":"162f7965d3eeabaf6747a609ad48da343afd25d667a49ae4783ecd65bddaa776922582135d7985ec62efa3408c36283457853b885ee2fc81a751c9c56309564a","ssdeep":"192:1l04IoKzk8Hdzuc4f0VqojCUd1kM0AqyNB5COCd:1545dzucio+MkM0F4TY","tlshash":"5d0293943b2993f8f542a3f58e1f64f67daa14d16a88c0b8c7613c40f45a4bf8de99d0","first_seen":"2025-06-28T16:05:43.617573Z","last_seen":"2026-06-04T15:54:08.121598Z","times_seen":17,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared-bff.quickenloans.com/api/tracking/event/v2","fqdn":"shared-bff.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.26.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:31.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"OPTIONS /api/tracking/event/v2 HTTP/1.1\r\nHost: shared-bff.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://www.quickenloans.com/\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 30 May 2026 13:07:31 GMT\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: authorization,content-type\r\ncf-cache-status: DYNAMIC\r\nset-cookie: AWSALBTG=dWFYiQCzpLiCcr9LTYSkzemKL1aWtux75kkHoSTfaxHpLTbYRYgHmpyY1DhPr5SFKu1FzDC1WxtLOkd6+z2h+qs9KnJmBLOownkAvh9zJcWDxfeOTOp1rJ0M/l6N+QRILcLsGYO5F2wMeTJQ+SyPkVESrfdKKyqaVkgMvum+U9CZtXR6Q8A=; Expires=Sat, 06 Jun 2026 13:07:31 GMT; Path=/\nAWSALBTGCORS=dWFYiQCzpLiCcr9LTYSkzemKL1aWtux75kkHoSTfaxHpLTbYRYgHmpyY1DhPr5SFKu1FzDC1WxtLOkd6+z2h+qs9KnJmBLOownkAvh9zJcWDxfeOTOp1rJ0M/l6N+QRILcLsGYO5F2wMeTJQ+SyPkVESrfdKKyqaVkgMvum+U9CZtXR6Q8A=; Expires=Sat, 06 Jun 2026 13:07:31 GMT; Path=/; SameSite=None; Secure\n__cf_bm=juyo6Z1oHBJ8thec737HaDAA_q3a_QHpP8DbSmHuojY-1780146451.3841717-1.0.1.1-ceOZLjNz4bAEHGSYaOEgXoQUYtBQGym5XX_59G2glFK0mRsRtI1NZ3ixUFitjmnUrXhvBvyWDxC2ZrtOnn28y0oEV.z9sYjh5MgiOxPabjhiC41l6iorb4urLoYop8w9; HttpOnly; SameSite=None; Secure; Path=/; Domain=quickenloans.com; Expires=Sat, 30 May 2026 13:37:31 GMT\n__cflb=0H28vfGvKfdvn24kVcWkzcj7SojU4X6yHEyTBKNdcsN; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 31 May 2026 12:07:31 GMT\r\nserver: cloudflare\r\ncf-ray: a03df6592aa223eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/webpack-runtime-f56f190d29a1eab2cf7b.js","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /webpack-runtime-f56f190d29a1eab2cf7b.js HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\ncontent-type: text/javascript\r\ncf-ray: a03df646bc3a23eb-OSL\r\ncf-cache-status: HIT\r\nx-cache: Miss from cloudfront\r\ncache-control: public, max-age=300\r\nx-amz-version-id: XTWrtcUb69xQ65f_ms4UI13M8k8_nogZ\r\nexpires: Sat, 30 May 2026 13:12:28 GMT\r\nlast-modified: Fri, 29 May 2026 21:32:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 c69902ded6396eee37d12b61d86f4414.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: t_jt-OhH0YZO7L-qfIcmOb_UVP2IW1xl6iHGzADI-sp_7bzulqdynQ==\r\nx-amz-cf-pop: FRA60-P12\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"c2a37e8b8c664fee12ec34d493b52f4b\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5719,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5654)","md5":"c2a37e8b8c664fee12ec34d493b52f4b","sha1":"ecbb4bdac703b385c90f5b0e94708c979e48dec8","sha256":"822e8134198be544082cec9855e9054c86a0e1a07f7f7f9493e3d6f3e75c6b77","sha512":"104064205404b04faf7d8151750f06d084621f86c5429ba988e5eb6deb8cfe78f6789c70d95fa6ab4917d8a17d2a0f298193876f47bb16b765526b51a78c64c7","ssdeep":"96:P/hEDq8FRw0elA5LtB7Ry1TuPl+VnmVBKST/hmRRc+irc3S:PaDBFW0H5LtB7us+Mj/Ou+ZS","tlshash":"5dc11bf879a574726eb3d048153f6a82797f1473984f68a5d607d1e07cf250c4029bf6","first_seen":"2026-05-30T13:08:05.457102Z","last_seen":"2026-05-31T04:02:18.062481Z","times_seen":2,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026dma=1\u0026dma_cps=a\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026tid=G-RXLL9Z7XBK\u0026cid=1794521849.1780146450\u0026gtm=45j91e65r0v9169491831z89137104487z99200500233za20gzb9137104487zd9137104487\u0026tag_exp=0~115616986~115938465~115938469~117215455~117215455~117215458~117215458~117384417~117384417~118012009~119034493~119064591\u0026_is_sw=f6te\u0026_tu=DA\u0026aip=1\u0026z=236562519","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:30.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:55:19 GMT","end":"Thu, 30 Jul 2026 15:55:18 GMT"},"fingerprint":{"sha1":"0B:35:DC:89:EA:6C:6B:84:37:37:B0:28:E3:EE:28:BF:30:63:E1:98","sha256":"0D:F4:09:F4:10:6D:23:C9:1F:1A:51:B4:6C:60:CE:E0:19:D8:B6:19:C5:C4:86:1B:00:2E:EA:54:40:0A:0E:26"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026dma=1\u0026dma_cps=a\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026tid=G-RXLL9Z7XBK\u0026cid=1794521849.1780146450\u0026gtm=45j91e65r0v9169491831z89137104487z99200500233za20gzb9137104487zd9137104487\u0026tag_exp=0~115616986~115938465~115938469~117215455~117215455~117215458~117215458~117384417~117384417~118012009~119034493~119064591\u0026_is_sw=f6te\u0026_tu=DA\u0026aip=1\u0026z=236562519 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 30 May 2026 13:07:30 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-08T01:30:53.152407Z","times_seen":940499,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":128,"dns":13,"connect":28,"send":0,"wait":35,"receive":5,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.typekit.net/p.css?s=1\u0026k=bqm0hoo\u0026ht=tk\u0026f=6849.6851.6852\u0026a=252093071\u0026app=typekit\u0026e=css","fqdn":"p.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 29 May 2026 00:00:00 GMT","end":"Sun, 13 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6D:59:E1:10:7C:04:87:2C:2B:42:9B:0B:02:BE:4A:FF:E8:09:E3:E9","sha256":"51:4C:B4:20:1D:97:45:B3:FE:50:80:99:68:E9:6C:33:8C:E3:66:B0:8E:BA:01:2F:87:14:D1:BE:86:8D:0E:73"}}},"request":{"raw":"GET /p.css?s=1\u0026k=bqm0hoo\u0026ht=tk\u0026f=6849.6851.6852\u0026a=252093071\u0026app=typekit\u0026e=css HTTP/1.1\r\nHost: p.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.typekit.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css\r\ncontent-length: 5\r\nlast-modified: Sun, 01 Dec 2024 12:58:09 GMT\r\netag: \"674c5d61-5\"\r\ncache-control: public, max-age=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"83d24d4b43cc7eef2b61e66c95f3d158","sha1":"f0cafc285ee23bb6c28c5166f305493c4331c84d","sha256":"1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb","sha512":"e6e84563d3a55767f8e5f36c4e217a0768120d6e15ce4d01aa63d36af7ec8d20b600ce96dcc56de91ec7e55e83a8267baddd68b61447069b82abdb2e92c6acb6","ssdeep":"","tlshash":"e630000000000000000000000000000000000c00000000000000000000000000000000","first_seen":"2023-03-12T07:28:04Z","last_seen":"2026-06-08T01:29:03.266608Z","times_seen":157913,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":29,"dns":21,"connect":1,"send":0,"wait":1,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/learnassets/QuickenLoans.com/Learning%20Center%20Images/Stock-LightBlueGreenHouseWithPinkDoor-AdobeStock-326716673-copy.jpeg","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /learnassets/QuickenLoans.com/Learning%20Center%20Images/Stock-LightBlueGreenHouseWithPinkDoor-AdobeStock-326716673-copy.jpeg HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21431\r\ncf-ray: a03df646bc2823eb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=300\r\netag: \"8f942d5fb8ddef35e106ed87f1f2dc6c\"\r\nexpires: Sat, 30 May 2026 13:12:28 GMT\r\nlast-modified: Thu, 28 Mar 2024 19:57:40 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 b175f9087cfd5448c6eb5fe6119c8b78.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: dNPVd64Xiev31qAbFDbI9FGFMC1KxeFC4A_znpo6vLELSg4R3PEIaA==\r\nx-amz-cf-pop: FRA56-P16\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: NAddO2d_XM6DbI5Og_qsEqFZM2tLudRZ\r\nx-cache: Miss from cloudfront\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21431,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 483x326, components 3","md5":"8f942d5fb8ddef35e106ed87f1f2dc6c","sha1":"f7833b36e9141aa45b4747c8404f27ffa479c20f","sha256":"cbe6e08be92aec641a017b5b05ea4bfcb994981f2b747a9102df934d7e42f258","sha512":"65db846caf54607c2d6f8b10de28d070ca064848f5f1be9d20a556e4bf98ab10eabe5abeb267dd7eb9beef789f5d4eabad81849166cd02e7d53bfeaeb75c554e","ssdeep":"384:rojkelcK/aa/XzWRn00qARiqoh3aOHimMmctPVAbeHFGr7D2peI/JLCk0+S2lzJa:rojke1aMWGe1iqtmctJlGr/Mz03Ks","tlshash":"68a2e180d2edb3dfe93236735f525e6aa232c0186ff1c544fd29a07615c5d99047f281","first_seen":"2026-05-27T18:23:51.103197Z","last_seen":"2026-05-31T04:02:18.0432Z","times_seen":3,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/icons/icon-512x512.png?v=5babdaa3851698bb82755d60565328bc","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:29.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /icons/icon-512x512.png?v=5babdaa3851698bb82755d60565328bc HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV; _dd_s=rum=0\u0026expire=1780147349173\u0026logs=1\u0026id=e2a7b34f-bf8f-4ef0-99c0-5abb003b5a27\u0026created=1780146449173; _gcl_au=1.1.415580428.1780146449\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 16556\r\ncf-ray: a03df64c5ab423eb-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncache-control: public, max-age=300\r\netag: \"95158d5f7b23e5be18cda455024685df\"\r\nexpires: Sat, 30 May 2026 13:12:30 GMT\r\nlast-modified: Fri, 29 May 2026 21:32:09 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 26668d8e031da1815e3b231b420050f0.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: BHa8f1BKH-5H2NkhpKq6lI7SiXfRQJy2bTEcM4SUZ8qTD9G7m5RvvA==\r\nx-amz-cf-pop: MXP63-P4\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: VLhqynmcG8D86G_GlQbo.PhbOuVI0KeN\r\nx-cache: Miss from cloudfront\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":16556,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"95158d5f7b23e5be18cda455024685df","sha1":"49edec4bb19be4c03e812e8deb15bf47e5ddfd14","sha256":"00231b80a45653b6aa2399f7ceba085bb6258c612b2851e95790cdc682fbe27a","sha512":"2c36290cb51544bbedd5eae1b3aaa686d98ac10ace80408b8723cfdbe6650387547f17a981c259c6ee5740a11f21d30c0098429c6d565982cb84200889895ab5","ssdeep":"384:dJWGwEE6AVtUhQflQ/XsXbCGTPAY2sxKfAgX:CJXZtgQflQ/XsdjxaX","tlshash":"61728c9dcf3a3d7c5ffd27483b762b25a8818a80dee251ff49097e0d20766e1a22140c","first_seen":"2025-01-29T19:04:39.631916Z","last_seen":"2026-06-04T15:54:08.18888Z","times_seen":18,"resource_available":false,"data":null}},"time_used":698,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":695,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sgtm.quickenloans.com/g/collect?v=2\u0026tid=G-RXLL9Z7XBK\u0026gtm=45je65r2v9169491831z89137104487za20gzb9137104487zd9137104487\u0026_p=1780146448462\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1307750120\u0026_eu=AAAAAGQ\u0026_fplc=0\u0026cid=1794521849.1780146450\u0026frm=0\u0026pscdl=noapi\u0026rcb=14\u0026sr=1280x1024\u0026ul=en-us\u0026ur=NO-03\u0026sst.etld=google.no\u0026sst.gcsub=region1\u0026sst.tft=1780146448462\u0026sst.lpc=230655900\u0026sst.navt=n\u0026sst.ude=0\u0026sst.sw_exp=1\u0026gaf=2\u0026_s=2\u0026tag_exp=0~115616986~115938465~115938469~118012009~119034493~119064591\u0026sid=1780146449\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Fwww.quickenloans.com%2F\u0026dt=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026_tu=DA\u0026en=page_view\u0026tfd=3134\u0026richsstsse","fqdn":"sgtm.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"216.239.34.21","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:29.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sgtm.quickenloans.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 21:02:49 GMT","end":"Sat, 11 Jul 2026 21:54:41 GMT"},"fingerprint":{"sha1":"48:5B:7A:A1:D1:40:2D:AB:39:AA:BA:F3:CF:8A:8D:A0:52:A8:8A:76","sha256":"FD:A9:2F:D7:DE:5B:2A:7C:CA:23:3D:80:84:AB:32:05:DA:1F:09:5B:FB:62:97:5B:37:74:8F:07:74:A3:93:2F"}}},"request":{"raw":"GET /g/collect?v=2\u0026tid=G-RXLL9Z7XBK\u0026gtm=45je65r2v9169491831z89137104487za20gzb9137104487zd9137104487\u0026_p=1780146448462\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=1307750120\u0026_eu=AAAAAGQ\u0026_fplc=0\u0026cid=1794521849.1780146450\u0026frm=0\u0026pscdl=noapi\u0026rcb=14\u0026sr=1280x1024\u0026ul=en-us\u0026ur=NO-03\u0026sst.etld=google.no\u0026sst.gcsub=region1\u0026sst.tft=1780146448462\u0026sst.lpc=230655900\u0026sst.navt=n\u0026sst.ude=0\u0026sst.sw_exp=1\u0026gaf=2\u0026_s=2\u0026tag_exp=0~115616986~115938465~115938469~118012009~119034493~119064591\u0026sid=1780146449\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Fwww.quickenloans.com%2F\u0026dt=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026_tu=DA\u0026en=page_view\u0026tfd=3134\u0026richsstsse HTTP/1.1\r\nHost: sgtm.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.quickenloans.com/\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV; _gcl_au=1.1.415580428.1780146449; _ga_RXLL9Z7XBK=GS2.1.s1780146449$o1$g1$t1780146449$j60$l0$h1307750120; _ga=GA1.1.1794521849.1780146450\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: FPID=FPID2.2.lGtLS%2FwKM1Dkjn1bgTKIebpgRE%2F8MRhUCyPYlPB4i6I%3D.1780146450; Max-Age=63072000; Domain=quickenloans.com; Path=/; Secure; HttpOnly\nFPLC=Sh51DyavE4T2XIKp6sYZZ5ffRj0Epa64AtbN1tD51Ulapudn87Ylw2%2B7rtRR7JxphoASXaae9htaJrvWUmnXtehpYMRAYCMPUzzXdhQ1%2BI4FrQfvAR6osGQs19zNrQ%3D%3D; Max-Age=72000; Domain=quickenloans.com; Path=/; Secure\nFPAU=1.1.415580428.1780146449; Max-Age=7775999; Domain=quickenloans.com; Path=/; Secure\nFPGSID=1.1780146450.1780146450.G-RXLL9Z7XBK.c7pwj_RtLeUzlCK7GTv5zg; Max-Age=1800; Domain=quickenloans.com; Path=/; SameSite=strict; Secure\r\ncache-control: no-cache\r\ncontent-type: text/plain\r\nx-content-type-options: nosniff\r\nx-accel-buffering: no\r\naccess-control-allow-origin: https://www.quickenloans.com\r\naccess-control-allow-credentials: true\r\ndate: Sat, 30 May 2026 13:07:30 GMT\r\nserver: Google Frontend\r\nexpires: Sat, 30 May 2026 13:07:30 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":832,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (384)","md5":"df8951c1c5f808d60a35820a11cf8325","sha1":"94affbf226fcae40c769cf2779713380b6a07e17","sha256":"be4120d2943b57f61e062385ea3a09505ab03a47876c92c3971c804fdf2b1d24","sha512":"0ab8ab4f80d3b42522932c184023a7e4c6f473dd17f8ed05c02f0ce0216c8f20181f16a7bdcabfa0c30b757fef2ea4c651917f2a33d32a8ab07755f86ef496f2","ssdeep":"","tlshash":"e101ce8b5ca02f533ba7d88451fa2492e5712b6ac0196b24c5511dfd9322b4a340f756","first_seen":"2026-05-30T13:08:05.460075Z","last_seen":"2026-05-30T13:08:05.460075Z","times_seen":1,"resource_available":false,"data":null}},"time_used":725,"timings":{"blocked":273,"dns":18,"connect":21,"send":0,"wait":179,"receive":0,"ssl":229},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.net/action/0?ti=247005605\u0026Ver=2\u0026mid=92465190-0456-4fc6-8bed-70e42d85268b\u0026bo=2\u0026pi=918639831\u0026lg=en-US\u0026sw=1280\u0026sh=1024\u0026sc=24\u0026tl=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026p=https%3A%2F%2Fwww.quickenloans.com%2F\u0026r=\u0026lt=2397\u0026evt=pageLoad\u0026sv=2\u0026asc=D\u0026cdb=AQAY\u0026rn=349166","fqdn":"bat.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:30.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bat.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 08","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 29 May 2026 05:05:49 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:A8:A6:D4:C4:BE:57:49:9D:0E:EC:1F:44:6C:49:B9:64:78:3B:31","sha256":"24:08:A3:95:AE:EF:AA:AB:5A:27:E0:DD:73:77:EF:6E:E8:C0:38:FE:27:3F:91:0B:E4:BD:6E:72:63:B6:00:34"}}},"request":{"raw":"GET /action/0?ti=247005605\u0026Ver=2\u0026mid=92465190-0456-4fc6-8bed-70e42d85268b\u0026bo=2\u0026pi=918639831\u0026lg=en-US\u0026sw=1280\u0026sh=1024\u0026sc=24\u0026tl=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026p=https%3A%2F%2Fwww.quickenloans.com%2F\u0026r=\u0026lt=2397\u0026evt=pageLoad\u0026sv=2\u0026asc=D\u0026cdb=AQAY\u0026rn=349166 HTTP/1.1\r\nHost: bat.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ncache-control: no-cache, must-revalidate\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\naccess-control-allow-origin: *\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 4121E04B12274F1BBD31BF193FE9F5D2 Ref B: OSL231050214040 Ref C: 2026-05-30T13:07:30Z\r\ndate: Sat, 30 May 2026 13:07:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":22,"dns":1,"connect":4,"send":0,"wait":66,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.quickenloans.com/ql/brand/illustrations/HomePage_Loan_Options.svg","fqdn":"content.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:31.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /ql/brand/illustrations/HomePage_Loan_Options.svg HTTP/1.1\r\nHost: content.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV; _gcl_au=1.1.415580428.1780146449; _ga_RXLL9Z7XBK=GS2.1.s1780146449$o1$g1$t1780146449$j60$l0$h1307750120; _ga=GA1.1.1794521849.1780146450; FPID=FPID2.2.lGtLS%2FwKM1Dkjn1bgTKIebpgRE%2F8MRhUCyPYlPB4i6I%3D.1780146450; FPLC=Sh51DyavE4T2XIKp6sYZZ5ffRj0Epa64AtbN1tD51Ulapudn87Ylw2%2B7rtRR7JxphoASXaae9htaJrvWUmnXtehpYMRAYCMPUzzXdhQ1%2BI4FrQfvAR6osGQs19zNrQ%3D%3D; FPAU=1.1.415580428.1780146449; FPGSID=1.1780146450.1780146450.G-RXLL9Z7XBK.c7pwj_RtLeUzlCK7GTv5zg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:31 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Wed, 06 May 2026 18:13:23 GMT\r\nserver: cloudflare\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nexpires: Sat, 30 May 2026 13:12:31 GMT\r\ncache-control: public, max-age=300\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\netag: W/\"694d8a153a2022dd1f06dabee1bfed8c\"\r\ncontent-encoding: gzip\r\ncf-ray: a03df658f9f023eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13815,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"694d8a153a2022dd1f06dabee1bfed8c","sha1":"852d579e44c500c7db26eacc40f39d7cbe906738","sha256":"ce3519da79091c9f5ce404b31d543fe49bed462eab17941d6abef9824d42b496","sha512":"8cca690595e2001d6dd75a89089c98a9f217051c3e3e10ce4479af3619ad1ebeca8aa1aa222e38838b91ce58be827a96a3eed6c4072185bc04331b1658ef1297","ssdeep":"192:nzcp+MaKI8g5XMMfAs2MbeSDARQwllSN8PXLFQysAJJYb4aLgVBa3hJ74Wh4/:nzczaKnM/3eHllSNoSL02NLgbWH754/","tlshash":"0052b6d4377a93f8b800b6fcc72a65a67d273cda7946c1b4c3a52d05b84256ccc988e7","first_seen":"2025-01-29T19:04:39.624278Z","last_seen":"2026-06-04T15:54:08.120415Z","times_seen":18,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.trustpilot.com/stats/TrustboxImpression?testid=trust-pilot-container\u0026locale=en-US\u0026styleHeight=140px\u0026styleWidth=100%25\u0026theme=light\u0026reviewLanguages=en\u0026tags=SelectedReview\u0026url=https%3A%2F%2Fwww.quickenloans.com%2F\u0026referrer=\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=en-US\u0026platform=Win32\u0026nosettings=1\u0026businessUnitId=4bed9e1a00006400050b9bca\u0026widgetId=53aa8912dec7e10d38f59f36","fqdn":"widget.trustpilot.com","domain":"trustpilot.com","tld":"com"},"ip":{"addr":"52.84.50.50","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36\u0026businessunitId=4bed9e1a00006400050b9bca#testid=trust-pilot-container\u0026locale=en-US\u0026styleHeight=140px\u0026styleWidth=100%25\u0026theme=light\u0026reviewLanguages=en\u0026tags=SelectedReview","date":"2026-05-30T13:07:31.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustpilot.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 03 Nov 2025 00:00:00 GMT","end":"Tue, 01 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:AC:04:00:1B:E6:03:65:36:95:67:5E:7F:21:62:B2:19:D0:0A:61","sha256":"C0:F0:3C:56:A6:A5:C3:53:B8:0A:28:8E:01:CC:3D:09:B5:5C:FC:55:FE:7F:8C:10:B8:E1:1F:7F:C6:56:F4:80"}}},"request":{"raw":"GET /stats/TrustboxImpression?testid=trust-pilot-container\u0026locale=en-US\u0026styleHeight=140px\u0026styleWidth=100%25\u0026theme=light\u0026reviewLanguages=en\u0026tags=SelectedReview\u0026url=https%3A%2F%2Fwww.quickenloans.com%2F\u0026referrer=\u0026userAgent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026language=en-US\u0026platform=Win32\u0026nosettings=1\u0026businessUnitId=4bed9e1a00006400050b9bca\u0026widgetId=53aa8912dec7e10d38f59f36 HTTP/1.1\r\nHost: widget.trustpilot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.trustpilot.com/trustboxes/53aa8912dec7e10d38f59f36/index.html?templateId=53aa8912dec7e10d38f59f36\u0026businessunitId=4bed9e1a00006400050b9bca\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 30 May 2026 13:07:31 GMT\r\nstrict-transport-security: max-age=31536000\r\ncache-control: no-store,no-cache\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 a82071c7a558f0fabf37ee3b940ad600.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Wqi3hPLlZ9dqUXPQNQ-ovyxMcl3GAsDACokdt5YoxizuFlZuFFkfkA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/af/ce0708/00000000000000007735d91b/31/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191\u0026fvd=n6\u0026v=3","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.77.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 29 May 2026 00:00:00 GMT","end":"Sun, 13 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6D:59:E1:10:7C:04:87:2C:2B:42:9B:0B:02:BE:4A:FF:E8:09:E3:E9","sha256":"51:4C:B4:20:1D:97:45:B3:FE:50:80:99:68:E9:6C:33:8C:E3:66:B0:8E:BA:01:2F:87:14:D1:BE:86:8D:0E:73"}}},"request":{"raw":"GET /af/ce0708/00000000000000007735d91b/31/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191\u0026fvd=n6\u0026v=3 HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.typekit.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/font-woff2\r\ncontent-length: 27788\r\netag: \"3e06fe9f3fc8fbc6bdcd281af9caddcfdbb890e9\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\nakamai-grn: 0.4d4d2417.1780146448.20a913d0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27788,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), CFF, length 27788, version 1.0","md5":"f12d0cf87d6c224b41ff7050d6f30ea2","sha1":"6f272c5795bf30a3fd67f68cc5dbaa84142d03c4","sha256":"0c515d89ee702b5edff16966a78c1f37a6f1b51d01dfdeb354423b9245f3cc10","sha512":"793bb7ec2751e52414722b0843d27179d3f38929bdfd4cc79301c2cee44edffdd9c36790ed88159c2e63664dfca181bf60d71631318eb9ab3b1852c8e21db68d","ssdeep":"384:eA0NiGZ2VF5VoVMTAHVpH6soZekIZv9bsQTrq2lTQhErV2JJYVAuxGJrk:s72VF5V0ppH6sBkulbsAq2NQ3PYyMG2","tlshash":"ccc2e176c17cb748e6088c4ecf67b6cf563756b9d3028c4218cea91c650e3be9775614","first_seen":"2025-10-18T06:00:46.95486Z","last_seen":"2026-06-04T15:54:08.11501Z","times_seen":29,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":5,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/s/collect?dma=1\u0026dma_cps=a\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026gtm=45j91e65r0v9169491831z89137104487z99200500233za20gzb9137104487zd9137104487\u0026tag_exp=0~115616986~115938465~115938469~117384418~117384418~117401771~117401771~118012009~119034493~119064591\u0026_is_sw=f6te\u0026_tu=BA\u0026_gsid=RXLL9Z7XBK9BLzg-mtI8DhkTn0802kZg","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:30.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"E5:3F:1D:8A:67:60:A8:60:56:38:E4:E3:ED:A6:64:D9:7C:89:E1:E1","sha256":"39:E2:E8:B9:46:82:06:98:FA:92:0A:A2:4F:57:DF:DF:EF:00:44:4A:27:C0:C4:99:EC:A5:E3:D4:1A:A8:A5:D4"}}},"request":{"raw":"GET /g/s/collect?dma=1\u0026dma_cps=a\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026gtm=45j91e65r0v9169491831z89137104487z99200500233za20gzb9137104487zd9137104487\u0026tag_exp=0~115616986~115938465~115938469~117384418~117384418~117401771~117401771~118012009~119034493~119064591\u0026_is_sw=f6te\u0026_tu=BA\u0026_gsid=RXLL9Z7XBK9BLzg-mtI8DhkTn0802kZg HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: *\r\ndate: Sat, 30 May 2026 13:07:30 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:329:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:329:0\r\nreport-to: {\"group\":\"ascnsrsggc:329:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:329:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":76,"dns":0,"connect":8,"send":0,"wait":17,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RXLL9Z7XBK\u0026cx=c\u0026gtm=4e65r2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.1.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:29.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:35 GMT","end":"Thu, 30 Jul 2026 15:51:34 GMT"},"fingerprint":{"sha1":"4F:F6:A0:5C:88:9C:38:C1:57:D2:C2:16:50:CD:79:E3:67:50:CC:B0","sha256":"93:D6:F4:89:DB:C5:7B:E8:C8:73:F7:36:40:1B:87:32:83:AA:3F:54:8B:26:97:45:83:DB:E6:BF:FD:F5:70:33"}}},"request":{"raw":"GET /gtag/js?id=G-RXLL9Z7XBK\u0026cx=c\u0026gtm=4e65r2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 30 May 2026 13:07:29 GMT\r\nexpires: Sat, 30 May 2026 13:07:29 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 160267\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":489808,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7164)","md5":"5e7900f1e6f35aa5e22deb97d113270c","sha1":"ad0dc9d4561812dd584ef2db7ba02522baa5526a","sha256":"64e92267190302d350ca3708dcd2e730e08e958e92e60d61433d2f1309c00b2e","sha512":"17d147f9337f501d459498053be248ffe9bacc3e31c07ddd90a2749227eeafdc37ea896fa16c457b7f3fe786e6be1ea5be33cd31ef93f15f029bec9a95c34838","ssdeep":"6144:1GORfDNalVf36lwSXbDQCtEhuX7aWCBbnr5ma5V/Qv+:k3lVf36RDQX75xw+","tlshash":"2fa4e8ceb3d674665396f478503f01cba57b28e2b44cc89ab189cce02e7469a4167f7c","first_seen":"2026-05-30T13:08:05.462432Z","last_seen":"2026-05-30T13:08:05.462432Z","times_seen":1,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/cdn-cgi/rum?","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:29.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 655\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV; _dd_s=rum=0\u0026expire=1780147349173\u0026logs=1\u0026id=e2a7b34f-bf8f-4ef0-99c0-5abb003b5a27\u0026created=1780146449173; _gcl_au=1.1.415580428.1780146449\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":655,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":2035,\"startTime\":1780146446533,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.5.0\",\"timings\":2},\"pageloadId\":\"58be60c2-6855-4014-886a-ca2defa9aa2d\",\"location\":\"https://www.quickenloans.com/\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"domainLookupStart\":776,\"domainLookupEnd\":810,\"connectStart\":812,\"connectEnd\":837,\"requestStart\":837,\"responseStart\":1475,\"responseEnd\":1475,\"domInteractive\":2016,\"domComplete\":2397,\"loadEventStart\":2397,\"loadEventEnd\":2397,\"transferSize\":21658,\"decodedBodySize\":132985},\"siteToken\":\"d6ef0163c5d845cdb765e8d8f92ad598\",\"st\":2}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 30 May 2026 13:07:29 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://www.quickenloans.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: a03df64b9f7423eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/af/89e217/00000000000000007735d919/31/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191\u0026fvd=n4\u0026v=3","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.77.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 29 May 2026 00:00:00 GMT","end":"Sun, 13 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6D:59:E1:10:7C:04:87:2C:2B:42:9B:0B:02:BE:4A:FF:E8:09:E3:E9","sha256":"51:4C:B4:20:1D:97:45:B3:FE:50:80:99:68:E9:6C:33:8C:E3:66:B0:8E:BA:01:2F:87:14:D1:BE:86:8D:0E:73"}}},"request":{"raw":"GET /af/89e217/00000000000000007735d919/31/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191\u0026fvd=n4\u0026v=3 HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.typekit.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/font-woff2\r\ncontent-length: 27688\r\netag: \"7497f876132f4818551f507b7d58dce004748546\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\nakamai-grn: 0.4d4d2417.1780146448.20a913c5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27688,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), CFF, length 27688, version 1.0","md5":"c129144dfb477f52c3fcd1ec2e869130","sha1":"4b15dc1e504a6fca2905f6ad2eab4a49139b6d49","sha256":"3f84e1308c51017b4aa3fbd76f08c8c774c54dd7ae191c3518a22566defd7734","sha512":"5827e6f67d2a89097554ab232b85f759e58da2f2e6f323b26195e3a01a7d9bcad4189cef57124ad5c00ec9a6fd2e9a3d0a84318404fa730f63cd253dabe79afe","ssdeep":"768:e1FoYeKZ8GUVzb39GN7UYBvaCzUpIjQLQdue:e3rP8GUVPsbBy+cLeue","tlshash":"09c2e1624ac6d361f27780bb282797906144b0d8fc6e610d73d73f29b80b02a4575bdf","first_seen":"2026-01-23T09:53:00.8964Z","last_seen":"2026-06-04T15:54:08.104569Z","times_seen":41,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":2,"receive":2,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/_gatsby/image/2f0edfd07eec0010945824adcedf3f76/cde0b6377ce9cbe86af3e998cedc2780/homepage-460.webp?u=https%3A%2F%2Fcms.quickenloans.com%2Fwp-content%2Fuploads%2F2026%2F05%2Fhomepage-460.webp\u0026a=w%3D460%26h%3D460%26fm%3Dwebp%26q%3D90\u0026cd=2026-05-18T21%3A23%3A26","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /_gatsby/image/2f0edfd07eec0010945824adcedf3f76/cde0b6377ce9cbe86af3e998cedc2780/homepage-460.webp?u=https%3A%2F%2Fcms.quickenloans.com%2Fwp-content%2Fuploads%2F2026%2F05%2Fhomepage-460.webp\u0026a=w%3D460%26h%3D460%26fm%3Dwebp%26q%3D90\u0026cd=2026-05-18T21%3A23%3A26 HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV; _dd_s=rum=0\u0026expire=1780147348609\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 26062\r\ncf-ray: a03df6484a5123eb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=300\r\netag: \"1217f02a94b333b2498331e19835edd6\"\r\nexpires: Sat, 30 May 2026 13:12:28 GMT\r\nlast-modified: Fri, 29 May 2026 21:32:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 cb6a2c71695f851967f08ee8b2defc0c.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: aquWlUi0Jwh2GSLzP24WhDRLCvrmMPq58ngba3RDGgUtHT_PIsEpAA==\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: QsXWnzsoB1YAS8RMLDEnefK58Iux2ZVa\r\nx-cache: Miss from cloudfront\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":26062,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"RIFF (little-endian) data, Web/P image","md5":"1217f02a94b333b2498331e19835edd6","sha1":"24f51e3930265a7679e1675999d96053d4fb98fc","sha256":"ddaf40fb2fe6e0e3529308002e895d3b7d8e03d3d749bec16df347cfc8f24f9c","sha512":"49d120d1296077aa6c7d35162ac9abc7d06afdca2171b946d13b4bf95adb7da2e3078d731dfc982961ec45d9023826c22e9deba446ca78d6575fbe04cbeab2f0","ssdeep":"384:14NFd1wKdIfF4G2tSb4lV0zXmDULW6ofCoN8KCRWVhPmkT5UcswxQMRAkwVMWIjx:Ox1wKYGGkSbWGaDmZoqCoWfAbweJIj0O","tlshash":"dac2f19d5771fb65c3ba52090d82485d2f163b4feaf69460dc186523fc08a5bc8bc1ee","first_seen":"2026-05-27T18:23:51.076549Z","last_seen":"2026-06-04T15:54:08.159766Z","times_seen":4,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/favicon.svg?v=5babdaa3851698bb82755d60565328bc","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:29.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /favicon.svg?v=5babdaa3851698bb82755d60565328bc HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV; _dd_s=rum=0\u0026expire=1780147349173\u0026logs=1\u0026id=e2a7b34f-bf8f-4ef0-99c0-5abb003b5a27\u0026created=1780146449173; _gcl_au=1.1.415580428.1780146449\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:29 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a03df64c5acb23eb-OSL\r\ncf-cache-status: HIT\r\nx-cache: Miss from cloudfront\r\ncache-control: public, max-age=300\r\nx-amz-version-id: cCI7tvLrEikw8m5xK8E8ftdqNyFRCJdZ\r\nexpires: Sat, 30 May 2026 13:12:29 GMT\r\nlast-modified: Fri, 29 May 2026 21:32:09 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 87e83cc6e8f384d40eab78133e901302.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: _6cEePrmV4SAlT8A80RunRt26EUtfxT64qbp9DtNOF9Gon3tuxErJg==\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"5babdaa3851698bb82755d60565328bc\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2193,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5babdaa3851698bb82755d60565328bc","sha1":"18c088f8587ebdba53a9a71a1445bd680427ccf4","sha256":"98f3d3d04115400c3a67f6c2886875c786b959fcda49412140d2af9b5321d2e4","sha512":"957d74ecbd01976110d059bceb3a9bff4dcc418578786a71b78c5b0d2e255fcd9cbaed0d3b098627894a2c58296a4abf43fc78854703ebf3c53f4c405b47e2d3","ssdeep":"","tlshash":"a34173a5267d414a9004c7927be15862ae5334c397e041f0f2de4eba43214d71feb2ee","first_seen":"2025-06-28T16:05:43.607884Z","last_seen":"2026-06-04T15:54:08.111256Z","times_seen":17,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.net/actionp/0?ti=247005605\u0026Ver=2\u0026mid=92465190-0456-4fc6-8bed-70e42d85268b\u0026bo=1\u0026evt=consent\u0026src=enforced\u0026cdb=AQAY\u0026asc=D","fqdn":"bat.bing.net","domain":"bing.net","tld":"net"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:30.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bat.bing.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 08","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 29 May 2026 05:05:49 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CB:A8:A6:D4:C4:BE:57:49:9D:0E:EC:1F:44:6C:49:B9:64:78:3B:31","sha256":"24:08:A3:95:AE:EF:AA:AB:5A:27:E0:DD:73:77:EF:6E:E8:C0:38:FE:27:3F:91:0B:E4:BD:6E:72:63:B6:00:34"}}},"request":{"raw":"POST /actionp/0?ti=247005605\u0026Ver=2\u0026mid=92465190-0456-4fc6-8bed-70e42d85268b\u0026bo=1\u0026evt=consent\u0026src=enforced\u0026cdb=AQAY\u0026asc=D HTTP/1.1\r\nHost: bat.bing.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ncache-control: no-cache, must-revalidate\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\naccess-control-allow-origin: *\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: D2D135D071B042CD81F728BD27F7E3B1 Ref B: OSL231050214040 Ref C: 2026-05-30T13:07:30Z\r\ndate: Sat, 30 May 2026 13:07:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":27,"dns":13,"connect":1,"send":0,"wait":28,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/learnassets/QuickenLoans.com/Learning%20Center%20Images/Resized-Stock-SmallBlueHouse-118157330.png","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /learnassets/QuickenLoans.com/Learning%20Center%20Images/Resized-Stock-SmallBlueHouse-118157330.png HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 98464\r\ncf-ray: a03df646ac0e23eb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=300\r\netag: \"6fcac5ce0de8e38a1831b7bcfed44c7f\"\r\nexpires: Sat, 30 May 2026 13:12:28 GMT\r\nlast-modified: Thu, 28 Mar 2024 19:57:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 6669c464282817493898225c9d17aae4.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: ipLHDxVIISEmO-MmrDCeSSzNWtgIHLh7StlTazPI_59_YYCTQ3FpiA==\r\nx-amz-cf-pop: FRA56-P16\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: aUuLcvl58J7jVSxVxF82ehk5gbPHf.6W\r\nx-cache: Miss from cloudfront\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":98464,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 483 x 322, 8-bit colormap, non-interlaced","md5":"6fcac5ce0de8e38a1831b7bcfed44c7f","sha1":"f556f14d46337042abd2a9a9fe804251a3801a49","sha256":"b9979153d3ed961c7f96af3318fba6d8a964e665e24b20f375ba6deb57109fa0","sha512":"d0ee3d46d16d0c929f701aa28b9a534236ab6baf3ba5e82b3deb5dbd7f8ac64833f1aaa08daa1069bf66e41c7a0529a041293325a667a7738c226f48c1bf8060","ssdeep":"1536:4S4MyyLl8GFI/eQ6L3Ipb8pChoU6nKnNrHDI2ahZBj3GuMudGSZjOxBhb++pvs:N4MyelC/QMp8pCgn6rVCR9tgSROnhbnC","tlshash":"83a312e24f9910ed5be63d3336df1191ec1a995fe7602a301491d7ad1f00c8c58e673a","first_seen":"2026-05-30T13:08:05.465562Z","last_seen":"2026-06-04T15:54:08.160457Z","times_seen":3,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared-bff.quickenloans.com/api/tracking/event/v2","fqdn":"shared-bff.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.26.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:31.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"OPTIONS /api/tracking/event/v2 HTTP/1.1\r\nHost: shared-bff.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://www.quickenloans.com/\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 30 May 2026 13:07:32 GMT\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: authorization,content-type\r\ncf-cache-status: DYNAMIC\r\nset-cookie: AWSALBTG=0Wjj5Vk12PXmtp1sEvl2gW+EJEK6NZfffrpbug4sirkN1jMa/tWLIgPl3ywTUAUtKpN/fVHeqQEQdjkARtrWRU3qJ2uw7z7WEcGcc6sV/Jlu0N0i/j5v5zupmCkW1dOqoylnlZmYUI1WCJZjENlK8BjyHuydqaEnAPKgUlFdOUPMELLUj/w=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/\nAWSALBTGCORS=0Wjj5Vk12PXmtp1sEvl2gW+EJEK6NZfffrpbug4sirkN1jMa/tWLIgPl3ywTUAUtKpN/fVHeqQEQdjkARtrWRU3qJ2uw7z7WEcGcc6sV/Jlu0N0i/j5v5zupmCkW1dOqoylnlZmYUI1WCJZjENlK8BjyHuydqaEnAPKgUlFdOUPMELLUj/w=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/; SameSite=None; Secure\n__cf_bm=lF6nnY0lr9jRwNqT.IEvDy1yOBRxAp543x1g_i9_oSQ-1780146451.3765845-1.0.1.1-jlUvlRLGMJd7L9izSVz6jGZYJYBUaxUI425XLmTkgOXi0Fw51.g20ACuPY3qPfX_CruvkatkMqdlEwfTXF_7AcBhIjD7dv3II992jM7dMGdscyM3ERc28Cm3sRaB7pop; HttpOnly; SameSite=None; Secure; Path=/; Domain=quickenloans.com; Expires=Sat, 30 May 2026 13:37:32 GMT\n__cflb=0H28vfGvKfdvn24kVcWkzcj7SojU4X6yHEyTBKNdcsN; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 31 May 2026 12:07:32 GMT\r\nserver: cloudflare\r\ncf-ray: a03df6591a6e23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":756,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":754,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared-bff.quickenloans.com/api/tracking/event/v2","fqdn":"shared-bff.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.26.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:32.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"POST /api/tracking/event/v2 HTTP/1.1\r\nHost: shared-bff.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.quickenloans.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.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.J5zwhxdhgkJt2Ab9_Chwx6vOWBOVhp8CGlXmAqW739L6V3kSFlxs8OU0MvpHjPTzFuNfJMUhkBUns4MD3BwiJjQyucZi7RUgxXr8PtH6uJr8A_zsMKBZQ8wRuaDRWF9ou5NC-nbggfm_BBOrUhf3fR9_uodej72VSlDiJJEZ_eAgKrVzue-zocez_R9Yz-y2bRxBakOoNEzHs6WncEuS--djwSfMSMHNoKqvGjJw6wSxnM9-BQ1Z_3v8CzGId3tVIIhSUathc2IhVbfJlQV4GCfLeVuJzVNszHnO-VUs9kCbHgfRCHh8hpY8a7t7oa2jFdLjinsLOQ3AEHreKoAh-Q\r\nContent-Length: 228\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":228,"data":"{\"eventType\":\"session_start\",\"visitorId\":\"6f13e051-5eb5-4d68-814a-8795d743e250\",\"sessionId\":\"37806818-4d7b-45c2-a6d5-613e2b947953\",\"marketingClickId\":\"db15f9ea-8128-5670-841f-97599e372e4d\",\"startDate\":\"2026-05-30T13:07:31.362Z\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: AWSALBTG=sTqBVuoHjDF3yopkK8NSeudLPVzFmbTGqg/WG38H5OjxyKslFtB9/HuSbbN3zBlJlNZv59A3t8S8tohgwteDTDw6SrF/pm3ZyWiDrdySnVIRpi1A1psF6mEcp7ubMZZ7RLpJGH7LGz1qCSbxDvJtplgyAjHnVI9ob0UpxfZTP+/N9tCICqA=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/\nAWSALBTGCORS=sTqBVuoHjDF3yopkK8NSeudLPVzFmbTGqg/WG38H5OjxyKslFtB9/HuSbbN3zBlJlNZv59A3t8S8tohgwteDTDw6SrF/pm3ZyWiDrdySnVIRpi1A1psF6mEcp7ubMZZ7RLpJGH7LGz1qCSbxDvJtplgyAjHnVI9ob0UpxfZTP+/N9tCICqA=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/; SameSite=None; Secure\n__cf_bm=5YS9zN9qCFKgqxfYGQJwrb47O8lncWKwQK1BAnvIsRI-1780146452.1787171-1.0.1.1-QeaeIuXSZs5YnLoR2xEUoonaBjEQ2Z47BkUmhyGPtZX3mR.XBl90V695JDwGRyaHlxyd7TFodYUW7OzXQPdyjP9BWIv5MWD3WlQzoBO_792y2UbNjTcXvTGV.Zw6pYpH; HttpOnly; SameSite=None; Secure; Path=/; Domain=quickenloans.com; Expires=Sat, 30 May 2026 13:37:32 GMT\n__cflb=0H28vfGvKfdvn24kVcWkzcj7SojU4X6z24VejxzuHMn; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 31 May 2026 12:07:32 GMT\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\netag: W/\"74f-tQvUjvckcL2Ta1tLGqksfm7xHqU\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a03df65e1e2a23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1871,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe338a0a32bf0d170bc15661cb27d920","sha1":"b50bd48ef72470bd936b5b4b1aa92c7e6ef11ea5","sha256":"f156ec6a4b469cb89a1d2c95728aeffc71af136fc8d31aefe5876b238452287a","sha512":"34326c349d0144a3d72aae7c0abb93f2526c8c1a4808f9c9d8568a20cd7a18f6bd8ac6c1a0a05480f26f337f66a72f326c037db98c8fadcbf07dcd643f17a50f","ssdeep":"","tlshash":"8331d77f0b8289ac7f427281ed1def040f9d64bb38c4a4a0ddee3d84a691a9f4c24164","first_seen":"2026-05-30T13:08:05.430283Z","last_seen":"2026-05-30T13:08:05.430283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared-bff.quickenloans.com/api/tracking/event/v2","fqdn":"shared-bff.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.26.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:32.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"POST /api/tracking/event/v2 HTTP/1.1\r\nHost: shared-bff.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.quickenloans.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.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.J5zwhxdhgkJt2Ab9_Chwx6vOWBOVhp8CGlXmAqW739L6V3kSFlxs8OU0MvpHjPTzFuNfJMUhkBUns4MD3BwiJjQyucZi7RUgxXr8PtH6uJr8A_zsMKBZQ8wRuaDRWF9ou5NC-nbggfm_BBOrUhf3fR9_uodej72VSlDiJJEZ_eAgKrVzue-zocez_R9Yz-y2bRxBakOoNEzHs6WncEuS--djwSfMSMHNoKqvGjJw6wSxnM9-BQ1Z_3v8CzGId3tVIIhSUathc2IhVbfJlQV4GCfLeVuJzVNszHnO-VUs9kCbHgfRCHh8hpY8a7t7oa2jFdLjinsLOQ3AEHreKoAh-Q\r\nContent-Length: 226\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":226,"data":"{\"eventType\":\"web_campaign\",\"visitorId\":\"6f13e051-5eb5-4d68-814a-8795d743e250\",\"marketingClickId\":\"db15f9ea-8128-5670-841f-97599e372e4d\",\"marketingOfferId\":\"\",\"destinationUrl\":\"https://www.quickenloans.com/\",\"referringUrl\":\"\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: AWSALBTG=iGy7NSzzzNGsVjYzfdpyrC3kbIax26H95Ihv1pAUuN534PiyzyauQoqNs5xiponVTwqzNROUNYMnF4wNiEvEumQcXgfgj6WNLTTk5NweK1F4KwZBfrFfLDxUMukf2gP6v7WBpKnv/e+piCbA/zh4JENOb75hRPzjbuHBIP7zm5/jV/Trsuw=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/\nAWSALBTGCORS=iGy7NSzzzNGsVjYzfdpyrC3kbIax26H95Ihv1pAUuN534PiyzyauQoqNs5xiponVTwqzNROUNYMnF4wNiEvEumQcXgfgj6WNLTTk5NweK1F4KwZBfrFfLDxUMukf2gP6v7WBpKnv/e+piCbA/zh4JENOb75hRPzjbuHBIP7zm5/jV/Trsuw=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/; SameSite=None; Secure\n__cf_bm=f0PK93WAx4vb8SpepDxqv6izxHU6PDMEKbr170LFBPI-1780146452.2627282-1.0.1.1-jUkLJpJJAG.6YdYeFKnE._gCteSAgIFxOrWp_GlQD7pSr02I8xnPwoxiyVks4hJbFrOhef6dS8CwTq7.1iJ7wNxBY1y7B7.tXlFwKoclm7UwyyUR64F_mwq7hleNYJkF; HttpOnly; SameSite=None; Secure; Path=/; Domain=quickenloans.com; Expires=Sat, 30 May 2026 13:37:32 GMT\n__cflb=0H28vfGvKfdvn24kVcWkzcj7SojU4X6z24VejxzuHMn; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 31 May 2026 12:07:32 GMT\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\netag: W/\"74f-tQvUjvckcL2Ta1tLGqksfm7xHqU\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a03df65ea81923eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1871,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe338a0a32bf0d170bc15661cb27d920","sha1":"b50bd48ef72470bd936b5b4b1aa92c7e6ef11ea5","sha256":"f156ec6a4b469cb89a1d2c95728aeffc71af136fc8d31aefe5876b238452287a","sha512":"34326c349d0144a3d72aae7c0abb93f2526c8c1a4808f9c9d8568a20cd7a18f6bd8ac6c1a0a05480f26f337f66a72f326c037db98c8fadcbf07dcd643f17a50f","ssdeep":"","tlshash":"8331d77f0b8289ac7f427281ed1def040f9d64bb38c4a4a0ddee3d84a691a9f4c24164","first_seen":"2026-05-30T13:08:05.430283Z","last_seen":"2026-05-30T13:08:05.430283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/component---src-containers-wp-page-container-wp-page-container-jsx-293310eecdfe9b0405f2.js","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /component---src-containers-wp-page-container-wp-page-container-jsx-293310eecdfe9b0405f2.js HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV; _dd_s=rum=0\u0026expire=1780147348609\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:29 GMT\r\ncontent-type: text/javascript\r\ncf-ray: a03df64a19a323eb-OSL\r\ncf-cache-status: HIT\r\nx-cache: Miss from cloudfront\r\ncache-control: public, max-age=300\r\nx-amz-version-id: L_PIvZ.Di5h3eO0knwl_Qm2yDuYLKlmP\r\nexpires: Sat, 30 May 2026 13:12:29 GMT\r\nlast-modified: Fri, 29 May 2026 21:32:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 265dfe1af97e54936c7a17fedf2ee5ca.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: X2CNIQYfhlb1NVWBfXcBfF92UUS6nwkfnOaOVgQ2RjuQeByatbHdvg==\r\nx-amz-cf-pop: FRA60-P12\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"1e34e0bade4269aee8b8a97ceee220c7\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3353,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3237)","md5":"1e34e0bade4269aee8b8a97ceee220c7","sha1":"6cf1f8be44ad582423b65cfa9aec024b62bff0ba","sha256":"ce5c34e7c06924f0bbfce09c046c623db6424923fecfed4181e536ab4a1a00d5","sha512":"ce6d2393d934000f2aa92aa52854116a35693222b3b4336f7bc23c90db35860e06bd5db1e3319ea36e974697353ea7fbced73d5d53da1c6df9fbbdd69d0e07d8","ssdeep":"","tlshash":"f9614469bf72e46c71bb9cdfc0b75c19e1187f17a5709a0088839cc8709979eb216a3d","first_seen":"2026-05-10T18:37:53.535389Z","last_seen":"2026-06-04T15:54:08.156899Z","times_seen":8,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=14\u0026frm=0\u0026auid=415580428.1780146449\u0026dt=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.quickenloans.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1645099745.1780146449\u0026navt=n\u0026npa=1\u0026gtm=45be65r2v9168885163z89137104487za20gzb9137104487zd9137104487xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~116701382~119027222~119034491~119064971\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-11380533681\u0026tid=AW-11380533681\u0026tft=1780146449527\u0026tfd=2992","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:30.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"22:23:AA:C0:3B:78:20:8C:E2:B9:B3:D2:68:3A:EA:1F:61:C4:08:DF","sha256":"16:A1:EB:63:D1:FC:CC:47:80:09:5E:C3:61:20:56:39:EC:CA:BA:D6:D2:EF:7A:A6:D6:F6:D1:75:BC:EB:9A:2C"}}},"request":{"raw":"GET /ccm/collect?rcb=14\u0026frm=0\u0026auid=415580428.1780146449\u0026dt=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.quickenloans.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1645099745.1780146449\u0026navt=n\u0026npa=1\u0026gtm=45be65r2v9168885163z89137104487za20gzb9137104487zd9137104487xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~116701382~119027222~119034491~119064971\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-11380533681\u0026tid=AW-11380533681\u0026tft=1780146449527\u0026tfd=2992 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Sat, 30 May 2026 13:07:30 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=1\u0026frm=0\u0026auid=415580428.1780146449\u0026dt=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.quickenloans.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1645099745.1780146449\u0026navt=n\u0026npa=1\u0026gtm=45be65r2v9213656542z89137104487za20gzb9137104487zd9137104487xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~116701382~118128923~118228214~119034493\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-11388547050\u0026tid=AW-11388547050\u0026tft=1780146449403\u0026tfd=2869","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:30.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"22:23:AA:C0:3B:78:20:8C:E2:B9:B3:D2:68:3A:EA:1F:61:C4:08:DF","sha256":"16:A1:EB:63:D1:FC:CC:47:80:09:5E:C3:61:20:56:39:EC:CA:BA:D6:D2:EF:7A:A6:D6:F6:D1:75:BC:EB:9A:2C"}}},"request":{"raw":"GET /ccm/collect?rcb=1\u0026frm=0\u0026auid=415580428.1780146449\u0026dt=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.quickenloans.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1645099745.1780146449\u0026navt=n\u0026npa=1\u0026gtm=45be65r2v9213656542z89137104487za20gzb9137104487zd9137104487xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~116701382~118128923~118228214~119034493\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-11388547050\u0026tid=AW-11388547050\u0026tft=1780146449403\u0026tfd=2869 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 30 May 2026 13:07:30 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/396-69ff8cb14bb501dc1e26.js","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:30.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /396-69ff8cb14bb501dc1e26.js HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV; _dd_s=rum=0\u0026expire=1780147349173\u0026logs=1\u0026id=e2a7b34f-bf8f-4ef0-99c0-5abb003b5a27\u0026created=1780146449173; _gcl_au=1.1.415580428.1780146449; _ga_RXLL9Z7XBK=GS2.1.s1780146449$o1$g1$t1780146449$j60$l0$h1307750120; _ga=GA1.1.1794521849.1780146450; FPID=FPID2.2.lGtLS%2FwKM1Dkjn1bgTKIebpgRE%2F8MRhUCyPYlPB4i6I%3D.1780146450; FPLC=Sh51DyavE4T2XIKp6sYZZ5ffRj0Epa64AtbN1tD51Ulapudn87Ylw2%2B7rtRR7JxphoASXaae9htaJrvWUmnXtehpYMRAYCMPUzzXdhQ1%2BI4FrQfvAR6osGQs19zNrQ%3D%3D; FPAU=1.1.415580428.1780146449; FPGSID=1.1780146450.1780146450.G-RXLL9Z7XBK.c7pwj_RtLeUzlCK7GTv5zg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:30 GMT\r\ncontent-type: text/javascript\r\ncf-ray: a03df6535c6923eb-OSL\r\ncf-cache-status: HIT\r\nx-cache: Miss from cloudfront\r\ncache-control: public, max-age=300\r\nx-amz-version-id: 62.hDo0rmMuivSTvOlBLTAsjU7Iz_6T8\r\nexpires: Sat, 30 May 2026 13:12:30 GMT\r\nlast-modified: Fri, 29 May 2026 21:32:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 c882e22548530d40265eb261348d86d0.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: zngDvUo_W-UwNZEnZOVd9hneCedlaYokFWM_k2g-QC9thfV3VIPalg==\r\nx-amz-cf-pop: FRA60-P12\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"62edfca5834f0054e1a6e7183ee5cb9c\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2744,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2691)","md5":"62edfca5834f0054e1a6e7183ee5cb9c","sha1":"068b960335619530010175922351c3d71142fe4d","sha256":"39e1560b4ddefcd63d22d41d677750af63a5b6901bb594551f61902917a8eda3","sha512":"c93693057707d0d631b6717a535db5d7b318639f3a41cb81eb68003996ce2b6c11ec4d70beb77a78cb390d3dc5f0fc24650fe714a314a6ea1b65f9ff40894056","ssdeep":"","tlshash":"ba51c7ac39a9f8b6b62730e9105e185056386a99e113c054d478ecd9f83ec9d0c33f9a","first_seen":"2025-11-19T23:18:11.153671Z","last_seen":"2026-06-04T15:54:08.189786Z","times_seen":16,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/gatsby-plugin-image-279a2eea236ee735eb64.js","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:31.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /gatsby-plugin-image-279a2eea236ee735eb64.js HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV; _dd_s=rum=0\u0026expire=1780147349173\u0026logs=1\u0026id=e2a7b34f-bf8f-4ef0-99c0-5abb003b5a27\u0026created=1780146449173; _gcl_au=1.1.415580428.1780146449; _ga_RXLL9Z7XBK=GS2.1.s1780146449$o1$g1$t1780146449$j60$l0$h1307750120; _ga=GA1.1.1794521849.1780146450; FPID=FPID2.2.lGtLS%2FwKM1Dkjn1bgTKIebpgRE%2F8MRhUCyPYlPB4i6I%3D.1780146450; FPLC=Sh51DyavE4T2XIKp6sYZZ5ffRj0Epa64AtbN1tD51Ulapudn87Ylw2%2B7rtRR7JxphoASXaae9htaJrvWUmnXtehpYMRAYCMPUzzXdhQ1%2BI4FrQfvAR6osGQs19zNrQ%3D%3D; FPAU=1.1.415580428.1780146449; FPGSID=1.1780146450.1780146450.G-RXLL9Z7XBK.c7pwj_RtLeUzlCK7GTv5zg; visitorId=6f13e051-5eb5-4d68-814a-8795d743e250; clickToken=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.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.J5zwhxdhgkJt2Ab9_Chwx6vOWBOVhp8CGlXmAqW739L6V3kSFlxs8OU0MvpHjPTzFuNfJMUhkBUns4MD3BwiJjQyucZi7RUgxXr8PtH6uJr8A_zsMKBZQ8wRuaDRWF9ou5NC-nbggfm_BBOrUhf3fR9_uodej72VSlDiJJEZ_eAgKrVzue-zocez_R9Yz-y2bRxBakOoNEzHs6WncEuS--djwSfMSMHNoKqvGjJw6wSxnM9-BQ1Z_3v8CzGId3tVIIhSUathc2IhVbfJlQV4GCfLeVuJzVNszHnO-VUs9kCbHgfRCHh8hpY8a7t7oa2jFdLjinsLOQ3AEHreKoAh-Q; sourceId=universal\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:31 GMT\r\ncontent-type: text/javascript\r\ncf-ray: a03df6597be123eb-OSL\r\ncf-cache-status: HIT\r\nx-cache: Miss from cloudfront\r\ncache-control: public, max-age=300\r\nx-amz-version-id: _AJTF_6DMGwDybwOvUW81jjOWaxufWtm\r\nexpires: Sat, 30 May 2026 13:12:31 GMT\r\nlast-modified: Fri, 29 May 2026 21:32:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 134cb849e01fafad6f264ff9633b073e.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: TnjbnVZn0oK0gSRkxIcBw5HqB6_hDD0A-jfoJHCf95KqjsOCcB_0Pw==\r\nx-amz-cf-pop: AMS58-P5\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"a09472154fe98c1ee16409fc313c0f72\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":544,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (544), with no line terminators","md5":"a09472154fe98c1ee16409fc313c0f72","sha1":"757f7d56eb8c2b4fa7969da0bf6c59e9bc1eb932","sha256":"151e8944ba4a3498856c6cede2763a4584a46df2f84485b1cbf567c9260058cc","sha512":"df3b929d58b07d331e1f7a84a4d993246fda2e8b36e274b3cafd0985100549c754646e1adb2bdb8426fda9e6dc76a56c18a679a5ead8935bbf8048fc37c7818a","ssdeep":"","tlshash":"cff049c8b2e2f40d1a0b2160257f7c9aa23e98d2685d8104cf600483f9b170c8022bd9","first_seen":"2025-11-19T23:18:11.150576Z","last_seen":"2026-06-04T15:54:08.145004Z","times_seen":16,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxvpr.com/wn","fqdn":"maxvpr.com","domain":"maxvpr.com","tld":"com"},"ip":{"addr":"52.72.49.79","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-30T13:07:26.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"maxvpr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 09:36:27 GMT","end":"Fri, 28 Aug 2026 09:36:26 GMT"},"fingerprint":{"sha1":"1D:E0:4E:62:88:70:FF:7C:DC:63:87:35:FD:AA:EC:5B:7A:3D:5C:31","sha256":"24:8F:B0:3B:CE:10:F0:DA:8B:CC:B1:7D:E5:B5:2D:A9:BB:71:45:72:D2:95:72:4D:25:05:14:EE:59:6D:22:F9"}}},"request":{"raw":"GET /wn HTTP/1.1\r\nHost: maxvpr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 30 May 2026 13:07:26 GMT\r\ncache-control: no-cache, no-store\r\nexpires: -1\r\nlocation: https://kelesort-norchure.com/8feefc1b-2d8f-49f0-a73b-04993ba6e651\r\ncontent-length: 0\r\nengine: Rebrandly.redirect, version 2.1\r\nstrict-transport-security: max-age=15552000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":132985,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":214,"dns":26,"connect":93,"send":0,"wait":100,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/learnassets/QuickenLoans.com/2022%20Images/Stock-Older-Gay-Couple-Playing-Piano-AdobeStock_522260616-copy.jpeg","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /learnassets/QuickenLoans.com/2022%20Images/Stock-Older-Gay-Couple-Playing-Piano-AdobeStock_522260616-copy.jpeg HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25729\r\ncf-ray: a03df646ac1823eb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=300\r\netag: \"6461b15e41a56eb480940b417ee047da\"\r\nexpires: Sat, 30 May 2026 13:12:28 GMT\r\nlast-modified: Thu, 28 Mar 2024 19:57:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 f6ee6c6473e3afbdf37ab2a1cc660926.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: 3gO66dwiFr19pU-BbrO7t8vJV7QMOOYFHcxVhqpyL04zqBY21tBSeQ==\r\nx-amz-cf-pop: FRA56-P16\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: oYE9Y_Fz7izxpLyiKdNO2SmI1poqYxiH\r\nx-cache: Miss from cloudfront\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25729,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 483x322, components 3","md5":"6461b15e41a56eb480940b417ee047da","sha1":"bc3f394fbf2f64772c370c3c8e55ff1362d2fe80","sha256":"4b77deb8295d1c3aedbd79766f5613c1c8d1f0ee46392030ae71b733ec690482","sha512":"86ea1efea4a71cf5f7dc0c275ab81fe8e1a0f0e9ed61bb9c169f17e9d1a439064c17cbbbeedb110cd766b58b6c436f272e1e7bc16f9ac01defa4cca0ba20652f","ssdeep":"768:RUSBAfZqYkGFTSFisfROgwyLRbhijYDRCG2:RkBxG5EgFI8lCG2","tlshash":"23c2e108fa4000d8573773b02ba8e467676ca89b7bd9f8bdf926ed70009f5d504b2728","first_seen":"2026-05-30T13:08:05.474302Z","last_seen":"2026-06-04T15:54:08.103276Z","times_seen":3,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/961e4a29-113ea15946d16f71099d.js","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /961e4a29-113ea15946d16f71099d.js HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV; _dd_s=rum=0\u0026expire=1780147348609\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:29 GMT\r\ncontent-type: text/javascript\r\ncf-ray: a03df64a197b23eb-OSL\r\ncf-cache-status: HIT\r\nx-cache: Miss from cloudfront\r\ncache-control: public, max-age=300\r\nx-amz-version-id: gXpGV8srbyD0tS6YO.w8L10Dd7bn5PFR\r\nexpires: Sat, 30 May 2026 13:12:29 GMT\r\nlast-modified: Fri, 29 May 2026 21:32:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 3ae34da451a19efe92d6bea00849f488.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: t6VJuOHaaLCpy5aGERd--zkmQ23JDVYjTfha3AarOqdqOd6g4EGHKQ==\r\nx-amz-cf-pop: FRA60-P12\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"07388a667b4a833fc323d80d4d4f6e65\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":400507,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65449)","md5":"07388a667b4a833fc323d80d4d4f6e65","sha1":"64e83dd8f9da4909acddd88b2c9c39cec869ca81","sha256":"8e694e98d5cb113d53ac9986f0a6a8e3fdf075b0830df6816e97263000a3381c","sha512":"76d8b58f14f4dc785d63edc6299ea8a19f689d68aa4b77cd1bf1256f13b63def2e2d424b19f51c444cf62c8b555c2205057938af9c1d73f2a8007cf8afd33430","ssdeep":"6144:0uUojnI9XRxdqafZ2nPX1nImPvdlOBWF2399bT+GnNTXaDhwxB/Yxg:DnI7vZ2nFIUdlOB6239oGNTj","tlshash":"99845dc87981f4715bb782da40af480bf33d650b780d8860f222fdd969ad499a137f6d","first_seen":"2025-11-19T23:18:11.185762Z","last_seen":"2026-06-04T15:54:08.156064Z","times_seen":16,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared-bff.quickenloans.com/api/tracking/authorize","fqdn":"shared-bff.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.26.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:29.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"POST /api/tracking/authorize HTTP/1.1\r\nHost: shared-bff.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.quickenloans.com/\r\nContent-Type: application/json\r\nContent-Length: 195\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":195,"data":"{\"eventToken\":\"\",\"sessionId\":\"\",\"userId\":\"\",\"visitorId\":\"\",\"originRequestedUri\":\"https://www.quickenloans.com/\",\"destinationUrl\":\"https://www.quickenloans.com/\",\"referringUri\":\"\",\"sourceId\":null}"}},"response":{"raw":"HTTP/2 201 Created\r\ndate: Sat, 30 May 2026 13:07:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1855\r\nset-cookie: AWSALBTG=DHiyNmECytHOmA0JTTPh0OaZ4OBYICBlli3hL9te2XF6TNIo4FKBliu9GToEnUYFj2NzWX5hTnjesfFL3onXJOGkQTBFhkgkKhLriAfzrYh7bnutCi1ENv3NjXH72Gjrt3I3U13uQ+buyEfc4Yf2Shq4hmThtcBbUFwnSgxioqpzWev3cIc=; Expires=Sat, 06 Jun 2026 13:07:29 GMT; Path=/\nAWSALBTGCORS=DHiyNmECytHOmA0JTTPh0OaZ4OBYICBlli3hL9te2XF6TNIo4FKBliu9GToEnUYFj2NzWX5hTnjesfFL3onXJOGkQTBFhkgkKhLriAfzrYh7bnutCi1ENv3NjXH72Gjrt3I3U13uQ+buyEfc4Yf2Shq4hmThtcBbUFwnSgxioqpzWev3cIc=; Expires=Sat, 06 Jun 2026 13:07:29 GMT; Path=/; SameSite=None; Secure\neventToken=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.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.J5zwhxdhgkJt2Ab9_Chwx6vOWBOVhp8CGlXmAqW739L6V3kSFlxs8OU0MvpHjPTzFuNfJMUhkBUns4MD3BwiJjQyucZi7RUgxXr8PtH6uJr8A_zsMKBZQ8wRuaDRWF9ou5NC-nbggfm_BBOrUhf3fR9_uodej72VSlDiJJEZ_eAgKrVzue-zocez_R9Yz-y2bRxBakOoNEzHs6WncEuS--djwSfMSMHNoKqvGjJw6wSxnM9-BQ1Z_3v8CzGId3tVIIhSUathc2IhVbfJlQV4GCfLeVuJzVNszHnO-VUs9kCbHgfRCHh8hpY8a7t7oa2jFdLjinsLOQ3AEHreKoAh-Q; Max-Age=31536000; Path=/; Expires=Sun, 30 May 2027 13:07:29 GMT; HttpOnly; Secure; SameSite=Strict\n__cf_bm=ApiZtNoT4VfjNm6GRY8bmJOTwouK2jPfjtWk.qOsyIM-1780146449.6336582-1.0.1.1-k2FZ_RFepYWVDf4Cwe1KX5BzZgLvu38dpM6Wo9ny0RFzAqWlW.IADeP28A0xMEadvnpV5n3rrQISu2NHV_CKlDsKgAHKOp9z5saBWL.y.Nbqc.MqsBZ7hbnP1JE0VD7m; HttpOnly; SameSite=None; Secure; Path=/; Domain=quickenloans.com; Expires=Sat, 30 May 2026 13:37:29 GMT\n__cflb=0H28vfGvKfdvn24kVcWkzcj7SojU4X6wobw44286HtY; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 31 May 2026 12:07:29 GMT\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\netag: W/\"73f-ACvVMoZYxTHFrLsvEZ97NhnQxXQ\"\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a03df64e39bf23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1855,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7297bf1fef9fe3c31905ddaa382c1785","sha1":"002bd5328658c531c5acbb2f119f7b3619d0c574","sha256":"77a3fb108058e36c28fe4158f55b5c67941be24f78656450fa941742e567b445","sha512":"b074dea07a1afb297b16c9619aa9ee6e8d40a531aedbfff10c154406e34d00400a236b9236f6404ff0e9a3821892a0c5f10221cfa61b36bd9a684bf5f81f8279","ssdeep":"","tlshash":"7d310baf274748ac721943d2e999ff081fd940e34642d0c1f2e42c19d3a0edf12554f4","first_seen":"2026-05-30T13:08:05.477703Z","last_seen":"2026-05-30T13:08:05.477703Z","times_seen":1,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/s/collect?dma=1\u0026dma_cps=a\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026gtm=45j91e65r0v9169491831z89137104487z99200500233za20gzb9137104487zd9137104487\u0026tag_exp=0~115616986~115938465~115938469~117215455~117215455~117215458~117215458~117384417~117384417~118012009~119034493~119064591\u0026_is_sw=f6te\u0026_tu=DA\u0026_gsid=RXLL9Z7XBKVv34HdWPJwCiKoAYCr5xhw","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:30.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"E5:3F:1D:8A:67:60:A8:60:56:38:E4:E3:ED:A6:64:D9:7C:89:E1:E1","sha256":"39:E2:E8:B9:46:82:06:98:FA:92:0A:A2:4F:57:DF:DF:EF:00:44:4A:27:C0:C4:99:EC:A5:E3:D4:1A:A8:A5:D4"}}},"request":{"raw":"GET /g/s/collect?dma=1\u0026dma_cps=a\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026gtm=45j91e65r0v9169491831z89137104487z99200500233za20gzb9137104487zd9137104487\u0026tag_exp=0~115616986~115938465~115938469~117215455~117215455~117215458~117215458~117384417~117384417~118012009~119034493~119064591\u0026_is_sw=f6te\u0026_tu=DA\u0026_gsid=RXLL9Z7XBKVv34HdWPJwCiKoAYCr5xhw HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: *\r\ndate: Sat, 30 May 2026 13:07:30 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:329:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:329:0\r\nreport-to: {\"group\":\"ascnsrsggc:329:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:329:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":131,"dns":0,"connect":21,"send":0,"wait":16,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared-bff.quickenloans.com/api/tracking/event/v2","fqdn":"shared-bff.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.26.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:32.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"POST /api/tracking/event/v2 HTTP/1.1\r\nHost: shared-bff.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.quickenloans.com/\r\nContent-Type: application/json\r\nAuthorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.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.J5zwhxdhgkJt2Ab9_Chwx6vOWBOVhp8CGlXmAqW739L6V3kSFlxs8OU0MvpHjPTzFuNfJMUhkBUns4MD3BwiJjQyucZi7RUgxXr8PtH6uJr8A_zsMKBZQ8wRuaDRWF9ou5NC-nbggfm_BBOrUhf3fR9_uodej72VSlDiJJEZ_eAgKrVzue-zocez_R9Yz-y2bRxBakOoNEzHs6WncEuS--djwSfMSMHNoKqvGjJw6wSxnM9-BQ1Z_3v8CzGId3tVIIhSUathc2IhVbfJlQV4GCfLeVuJzVNszHnO-VUs9kCbHgfRCHh8hpY8a7t7oa2jFdLjinsLOQ3AEHreKoAh-Q\r\nContent-Length: 198\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":198,"data":"{\"eventType\":\"custom\",\"marketingClickId\":\"db15f9ea-8128-5670-841f-97599e372e4d\",\"visitorId\":\"6f13e051-5eb5-4d68-814a-8795d743e250\",\"type\":\"OptimizelyFeatureX\",\"timestamp\":\"2026-05-30T13:07:28.931Z\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: AWSALBTG=B9yC381Qaboj2dK++3bmZoEYFheKa0JUDnAhTE6Icq3Lr9YgrdfeTysIWKJSruTJfge8tYmRLFxNKNOX0N1A8pUTCeKgORIOb/kPJu3OYLrSqZAXFwEZKKC3rFn8LjpsjfTMyP61vRWNnPBJjzw62fquyajpQYqLbdB1RZKWzIe+w3VrHBo=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/\nAWSALBTGCORS=B9yC381Qaboj2dK++3bmZoEYFheKa0JUDnAhTE6Icq3Lr9YgrdfeTysIWKJSruTJfge8tYmRLFxNKNOX0N1A8pUTCeKgORIOb/kPJu3OYLrSqZAXFwEZKKC3rFn8LjpsjfTMyP61vRWNnPBJjzw62fquyajpQYqLbdB1RZKWzIe+w3VrHBo=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/; SameSite=None; Secure\n__cf_bm=dMsf3xvSXi8C0.rS.icqUNL0qXDUQfCcnnz0no20mO0-1780146452.1140766-1.0.1.1-DmXcBWOFRXQU8VzPA5TyvjpF9.UIEtZJ5MDBAU3natXXE.vsA00ydOShsexZsrsDI6QNM4ROHIsVIZI9inpum93N3v7l47utEMlmGF1ziWvseHfv8XO1M58qiJUncHfv; HttpOnly; SameSite=None; Secure; Path=/; Domain=quickenloans.com; Expires=Sat, 30 May 2026 13:37:32 GMT\n__cflb=0H28vfGvKfdvn24kVcWkzcj7SojU4X6z24VejxzuHMn; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 31 May 2026 12:07:32 GMT\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\netag: W/\"74f-tQvUjvckcL2Ta1tLGqksfm7xHqU\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a03df65dbca423eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1871,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe338a0a32bf0d170bc15661cb27d920","sha1":"b50bd48ef72470bd936b5b4b1aa92c7e6ef11ea5","sha256":"f156ec6a4b469cb89a1d2c95728aeffc71af136fc8d31aefe5876b238452287a","sha512":"34326c349d0144a3d72aae7c0abb93f2526c8c1a4808f9c9d8568a20cd7a18f6bd8ac6c1a0a05480f26f337f66a72f326c037db98c8fadcbf07dcd643f17a50f","ssdeep":"","tlshash":"8331d77f0b8289ac7f427281ed1def040f9d64bb38c4a4a0ddee3d84a691a9f4c24164","first_seen":"2026-05-30T13:08:05.430283Z","last_seen":"2026-05-30T13:08:05.430283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/bat.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:29.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 03 May 2026 03:13:55 GMT","end":"Fri, 30 Oct 2026 03:13:55 GMT"},"fingerprint":{"sha1":"8E:B0:B8:72:C4:57:AF:BC:1A:2D:BE:E8:A5:01:2A:0E:76:5A:AB:54","sha256":"F3:47:7D:87:DC:FD:DF:F7:D6:48:6C:48:E9:FF:26:B6:63:61:4F:8D:5B:7C:AF:43:D3:CA:42:09:B9:CB:84:01"}}},"request":{"raw":"GET /bat.js HTTP/1.1\r\nHost: bat.bing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private,max-age=1800\r\ncontent-length: 15402\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 26 Mar 2026 22:06:51 GMT\r\naccept-ranges: bytes\r\netag: \"808fed96cbddc1:0\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 74C49DEFBC754C5E90219D1DB5943B79 Ref B: OSL231050213062 Ref C: 2026-05-30T13:07:29Z\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55262,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55260)","md5":"d9200f6aeb863daa8622d6d04b6439ce","sha1":"27f04243174adb38dc4297bf48df84bd6f81ee4e","sha256":"855230e1321917153b6859521e1ccfab0dce7497f88645e73d7e6db9c4bbe3b1","sha512":"8bed70ccf60061743fb71be37b2a56cdf918063cd01fb33d0d2edead3e1270b27a2c6d92735c08ceb542c71d4df4b8e2f09c84bc16a0df5a8563f0e33d155e9d","ssdeep":"768:YcMOGhicg/XNIh5HQm3mT1koLQBExf6ybGVGOjJDuOk:TMOGkcgVE34Lbxf6ybGMic","tlshash":"04430b4333509a7646f9419c786a2903a336570e30be70dc7a8cf8e6945de4b7237b7a","first_seen":"2026-04-02T20:43:57.836244Z","last_seen":"2026-06-07T21:57:57.848146Z","times_seen":48797,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":18,"dns":18,"connect":2,"send":0,"wait":28,"receive":1,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/p/conversions/s/0.8.64","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"150.171.28.10","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:30.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 02","organization":"Microsoft Corporation"},"validity":{"start":"Sun, 03 May 2026 03:13:55 GMT","end":"Fri, 30 Oct 2026 03:13:55 GMT"},"fingerprint":{"sha1":"8E:B0:B8:72:C4:57:AF:BC:1A:2D:BE:E8:A5:01:2A:0E:76:5A:AB:54","sha256":"F3:47:7D:87:DC:FD:DF:F7:D6:48:6C:48:E9:FF:26:B6:63:61:4F:8D:5B:7C:AF:43:D3:CA:42:09:B9:CB:84:01"}}},"request":{"raw":"GET /p/conversions/s/0.8.64 HTTP/1.1\r\nHost: bat.bing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=86400\r\ncontent-type: application/javascript;charset=utf-8\r\ncontent-encoding: br\r\nlast-modified: Fri, 29 May 2026 05:56:51 GMT\r\netag: W/\"0x8DEBD47147B12B6\"\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-ms-request-id: adc8e728-201e-0051-1c5d-efb357000000\r\nx-ms-version: 2018-03-28\r\nx-azure-ref: 20260530T130730Z-16f654d7f9crf2njhC1DUBp7uw0000000330000000004bgk\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 75398E6E727B4A3F9742E32C0E12D9DE Ref B: OSL231050213062 Ref C: 2026-05-30T13:07:30Z\r\ndate: Sat, 30 May 2026 13:07:30 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":40485,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (40468)","md5":"08aa236ee075c414528590dcbd829d81","sha1":"aff0fea20996f9c969b472117517a182c545a4f2","sha256":"66524a962d3a57008555a262df1eb09580891095bd26e82c858de26c1c2da8ab","sha512":"b24829c8ca8743e241169e4d38a000c0ac44ce6292dc1ad5f0692d00249d8d5b39c60fc3efe0df7cbc777610b1a53138056fff4f0fc6bfc4a3034ac299a9b3e5","ssdeep":"768:MDfRNWL2rF9veXP5jUokPukNmDbAX4OdX8hj7m7T:MDJNW6rvixlZH+D8gP","tlshash":"c00319ccb5427079837390b551bf210be2367d5678071860c536eac47d38beda2abe6e","first_seen":"2026-05-21T16:26:56.18179Z","last_seen":"2026-06-05T10:39:57.968569Z","times_seen":504,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.quickenloans.com/ql/brand/illustrations/HomePage_Mortgage_Rates.svg","fqdn":"content.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:31.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /ql/brand/illustrations/HomePage_Mortgage_Rates.svg HTTP/1.1\r\nHost: content.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV; _gcl_au=1.1.415580428.1780146449; _ga_RXLL9Z7XBK=GS2.1.s1780146449$o1$g1$t1780146449$j60$l0$h1307750120; _ga=GA1.1.1794521849.1780146450; FPID=FPID2.2.lGtLS%2FwKM1Dkjn1bgTKIebpgRE%2F8MRhUCyPYlPB4i6I%3D.1780146450; FPLC=Sh51DyavE4T2XIKp6sYZZ5ffRj0Epa64AtbN1tD51Ulapudn87Ylw2%2B7rtRR7JxphoASXaae9htaJrvWUmnXtehpYMRAYCMPUzzXdhQ1%2BI4FrQfvAR6osGQs19zNrQ%3D%3D; FPAU=1.1.415580428.1780146449; FPGSID=1.1780146450.1780146450.G-RXLL9Z7XBK.c7pwj_RtLeUzlCK7GTv5zg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:31 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nlast-modified: Wed, 06 May 2026 18:13:23 GMT\r\nserver: cloudflare\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nexpires: Sat, 30 May 2026 13:12:31 GMT\r\ncache-control: public, max-age=300\r\ncf-cache-status: HIT\r\nx-xss-protection: 1; mode=block\r\netag: W/\"d1a24404415785f2ac0baf7a064bfbd3\"\r\ncontent-encoding: gzip\r\ncf-ray: a03df658f9fe23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8099,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d1a24404415785f2ac0baf7a064bfbd3","sha1":"b0ca91859753f768686cea812592eca792f9223b","sha256":"277d2db5646d34cf1a171c365a556414f524fbf33131f8ee4a06275a49a7bec1","sha512":"285cfcf170a7a3e29448aebd72cb8bd2e105a9f6f5860b62454c1dc24773eae5b2fa41f5fa469de4db1c148915d3d94dae0f4bf3044d582b843093acb9a4b459","ssdeep":"192:WyDE0yIjTwfUIEk+yFfhFxZpDQz+Z6NQLfUGzEYnZ2:WyDFfiHrzeQ4Zh","tlshash":"6af1c4c0377083acf942f1fba227a076be5339eeb78a4d78c3216c04658b1515e96ce4","first_seen":"2025-06-28T16:05:43.622712Z","last_seen":"2026-06-04T15:54:08.190973Z","times_seen":17,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared-bff.quickenloans.com/api/tracking/event/v2","fqdn":"shared-bff.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.26.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:31.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"OPTIONS /api/tracking/event/v2 HTTP/1.1\r\nHost: shared-bff.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://www.quickenloans.com/\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 30 May 2026 13:07:32 GMT\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: authorization,content-type\r\ncf-cache-status: DYNAMIC\r\nset-cookie: AWSALBTG=971yq++CdeYAZiBJM4Q42lOUIsNlWNv6wO1pnkcW/zX9x+NKqxpn099VUKHJ0JzDIfseeOi4S2QH3m4XhFvWdGkmOLzFA21L698BVYrXk/kkYxmkTZoa0GdwUFpLCCnwk8vkQz7Fsb/67XLf/44SgTBodWfhMY2GD3NgnL0OKpFXmIkZjTc=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/\nAWSALBTGCORS=971yq++CdeYAZiBJM4Q42lOUIsNlWNv6wO1pnkcW/zX9x+NKqxpn099VUKHJ0JzDIfseeOi4S2QH3m4XhFvWdGkmOLzFA21L698BVYrXk/kkYxmkTZoa0GdwUFpLCCnwk8vkQz7Fsb/67XLf/44SgTBodWfhMY2GD3NgnL0OKpFXmIkZjTc=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/; SameSite=None; Secure\n__cf_bm=SfWqfxh4ZfJeuanBidsCMypUYYCTnPOtcTvlGBwWaKw-1780146451.3834202-1.0.1.1-bkMzrVGfTR4uO1IfG6LLKP_32RfRcCqvaHJTaV_K1Jii0knbA6smarbdxLIMWQoP6ZrnZAEab2veznWOKB99f.Bj5Xfj8e7Lbwsc2NcNIPCLedy47X8VhfTGd05sR0IO; HttpOnly; SameSite=None; Secure; Path=/; Domain=quickenloans.com; Expires=Sat, 30 May 2026 13:37:32 GMT\n__cflb=0H28vfGvKfdvn24kVcWkzcj7SojU4X6yHEyTBKNdcsN; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 31 May 2026 12:07:32 GMT\r\nserver: cloudflare\r\ncf-ray: a03df6592a9f23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":793,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/16663922781/?random=1352491435\u0026cv=11\u0026fst=1780146450579\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be65r2v9192557333z89137104487za20gzb9137104487zd9137104487xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~116701382~118228215~119034493\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fwww.quickenloans.com%2F\u0026rcb=0\u0026label=GgdBCIOh98gZEN2Q_Yk-\u0026frm=0\u0026tiba=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=415580428.1780146449\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=2~0~0~0\u0026em=tv.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCKG4sQIIscGxAgiwwbECCLHDsQIIisWxAgjCybECCLTGsQIIk9qxAgjb3LECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgj02rECCJfUsQIIyduxAgix4bECCLPhsQIIpt2xAgiw3rECCIDbsQI\u0026cerd=CgEA\u0026eitems=ChEI8JXq0AYQ39OXg-vY9rz_ARIdALI0U6huDUB2pxRip2It0odH6PXOleDuwtLN5iU\u0026fsk=ChEI8JXq0AYQn_OThtTn0-qAARIsAP15kqBCUjlO2QCn7RuY0SLa2a2lGENAzh5rXsQDWuWlVKJZCT25yI_AnfEaAnIy\u0026pscrd=IhMIx5bdporhlAMV0VweAh374QPhOh1odHRwczovL3d3dy5xdWlja2VubG9hbnMuY29tL0JWQ2hBSThKWHEwQVlReUtyVno1eW95WmxNRWl3QWh0NTFCeW1JZHRxQ1hzOUVWTmQ2ODhCamNZd2hOSEdrMFVST1RhYWx6czhPeFhGLXg1N0ZmMzBJM2d6DAgJYggIABAAGAAgAA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:32.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"22:23:AA:C0:3B:78:20:8C:E2:B9:B3:D2:68:3A:EA:1F:61:C4:08:DF","sha256":"16:A1:EB:63:D1:FC:CC:47:80:09:5E:C3:61:20:56:39:EC:CA:BA:D6:D2:EF:7A:A6:D6:F6:D1:75:BC:EB:9A:2C"}}},"request":{"raw":"GET /pagead/1p-conversion/16663922781/?random=1352491435\u0026cv=11\u0026fst=1780146450579\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be65r2v9192557333z89137104487za20gzb9137104487zd9137104487xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~116701382~118228215~119034493\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fwww.quickenloans.com%2F\u0026rcb=0\u0026label=GgdBCIOh98gZEN2Q_Yk-\u0026frm=0\u0026tiba=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=415580428.1780146449\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=2~0~0~0\u0026em=tv.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCKG4sQIIscGxAgiwwbECCLHDsQIIisWxAgjCybECCLTGsQIIk9qxAgjb3LECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgj02rECCJfUsQIIyduxAgix4bECCLPhsQIIpt2xAgiw3rECCIDbsQI\u0026cerd=CgEA\u0026eitems=ChEI8JXq0AYQ39OXg-vY9rz_ARIdALI0U6huDUB2pxRip2It0odH6PXOleDuwtLN5iU\u0026fsk=ChEI8JXq0AYQn_OThtTn0-qAARIsAP15kqBCUjlO2QCn7RuY0SLa2a2lGENAzh5rXsQDWuWlVKJZCT25yI_AnfEaAnIy\u0026pscrd=IhMIx5bdporhlAMV0VweAh374QPhOh1odHRwczovL3d3dy5xdWlja2VubG9hbnMuY29tL0JWQ2hBSThKWHEwQVlReUtyVno1eW95WmxNRWl3QWh0NTFCeW1JZHRxQ1hzOUVWTmQ2ODhCamNZd2hOSEdrMFVST1RhYWx6czhPeFhGLXg1N0ZmMzBJM2d6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.quickenloans.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 30 May 2026 13:07:32 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/16663922781/?random=1352491435\u0026cv=11\u0026fst=1780146450579\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be65r2v9192557333z89137104487za20gzb9137104487zd9137104487xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~116701382~118228215~119034493\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fwww.quickenloans.com%2F\u0026rcb=0\u0026label=GgdBCIOh98gZEN2Q_Yk-\u0026frm=0\u0026tiba=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=415580428.1780146449\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=2~0~0~0\u0026em=tv.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCKG4sQIIscGxAgiwwbECCLHDsQIIisWxAgjCybECCLTGsQIIk9qxAgjb3LECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgj02rECCJfUsQIIyduxAgix4bECCLPhsQIIpt2xAgiw3rECCIDbsQI\u0026cerd=CgEA\u0026eitems=ChEI8JXq0AYQ39OXg-vY9rz_ARIdALI0U6huDUB2pxRip2It0odH6PXOleDuwtLN5iU\u0026fsk=ChEI8JXq0AYQn_OThtTn0-qAARIsAP15kqBCUjlO2QCn7RuY0SLa2a2lGENAzh5rXsQDWuWlVKJZCT25yI_AnfEaAnIy\u0026ipr=y\u0026pscrd=IhMIx5bdporhlAMV0VweAh374QPhOh1odHRwczovL3d3dy5xdWlja2VubG9hbnMuY29tL0JWQ2hBSThKWHEwQVlReUtyVno1eW95WmxNRWl3QWh0NTFCeW1JZHRxQ1hzOUVWTmQ2ODhCamNZd2hOSEdrMFVST1RhYWx6czhPeFhGLXg1N0ZmMzBJM2d6DAgJYggIABAAGAAgAA\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared-bff.quickenloans.com/api/tracking/event/v2","fqdn":"shared-bff.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.26.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:34.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"OPTIONS /api/tracking/event/v2 HTTP/1.1\r\nHost: shared-bff.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://www.quickenloans.com/\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 30 May 2026 13:07:34 GMT\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: authorization,content-type\r\ncf-cache-status: DYNAMIC\r\nset-cookie: AWSALBTG=Wa0YYu0C3WasIevd2rd4DaKd6mmrJJ6AeI2J79uFJSu7LwJWqnNXbXdJCJbrE17wjYbXWXh9Sva85gCas7+HWIxL2GlbVK3QoLJQZaIrSDFJJOnQUDRG6UVzcC5vcMK5PDIY9B+4r0V/MBl/sbhM6DKF36PaDyfpvxYzuzo4lj5G2pX85zY=; Expires=Sat, 06 Jun 2026 13:07:34 GMT; Path=/\nAWSALBTGCORS=Wa0YYu0C3WasIevd2rd4DaKd6mmrJJ6AeI2J79uFJSu7LwJWqnNXbXdJCJbrE17wjYbXWXh9Sva85gCas7+HWIxL2GlbVK3QoLJQZaIrSDFJJOnQUDRG6UVzcC5vcMK5PDIY9B+4r0V/MBl/sbhM6DKF36PaDyfpvxYzuzo4lj5G2pX85zY=; Expires=Sat, 06 Jun 2026 13:07:34 GMT; Path=/; SameSite=None; Secure\n__cf_bm=.f_3_G..a2Us67lIDp5DiQXwFygaYYeZ2FOuw0WZ.zM-1780146454.3736486-1.0.1.1-aEV9kCmj8o5KQ_jh8TKyFhvZ_7_Q2YFU7uu38sx4A9sMSdxlJOzf90DLs9qd11tBz7h97gdDc8HIlqk9kCdxzpqg3g02Bod9V7SqJgWv8d7JVwhzulEsMs_E_76RvtW4; HttpOnly; SameSite=None; Secure; Path=/; Domain=quickenloans.com; Expires=Sat, 30 May 2026 13:37:34 GMT\n__cflb=0H28vfGvKfdvn24kVcWkzcj7SojU4X71VhY3sGFScLc; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 31 May 2026 12:07:34 GMT\r\nserver: cloudflare\r\ncf-ray: a03df66bdae923eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/global-styles.abfffb935cf6062e7157.css","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /global-styles.abfffb935cf6062e7157.css HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\ncontent-type: text/css\r\ncf-ray: a03df6458f3423eb-OSL\r\ncf-cache-status: HIT\r\nx-cache: Miss from cloudfront\r\ncache-control: public, max-age=300\r\nx-amz-version-id: fTt.wkuhLtIlwkivpwFSEem_ytNeTJNM\r\nexpires: Sat, 30 May 2026 13:12:28 GMT\r\nlast-modified: Fri, 29 May 2026 21:32:09 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 10a31a8919932a2483a8dee40abc5178.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: C-gC-efAg7ubNsbLErecCuGtqpHz9s2HduRYBjxoYDgTSXgS7XXimA==\r\nx-amz-cf-pop: FRA60-P12\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"543b45b60b6e5d31bed242f68c6efbba\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":174297,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"543b45b60b6e5d31bed242f68c6efbba","sha1":"fc22daed300b4544b5e0bd8c74e90959cc1c3133","sha256":"9b9a0f586d2af691079a2624eb83d867794cdbe72d35b62ae7083192045153e2","sha512":"7444776f636b199335cb0b179440fc153f8fee27b9e8b0d83447e87cd1661609e612c5866513244e5bf6dfb56f2c6376c4d4538252095d58272844b50a3d7107","ssdeep":"1536:xbsvCH+QjFfFzeyIpop1oAeAmoa6vgXFmkleKHU50nmmo:NsvSzehu7vgXFVleKpo","tlshash":"0c04e8947210723cb8bb993a5aa4791d73055d02eb9f93fdde518d3883cf6f30262a58","first_seen":"2026-05-30T13:08:05.482301Z","last_seen":"2026-05-31T04:02:18.061616Z","times_seen":2,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackpixel.refinance.quickenloans.com/ql-ut/tracking.js","fqdn":"trackpixel.refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.13.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"refinance.quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Apr 2026 02:00:19 GMT","end":"Fri, 03 Jul 2026 03:00:16 GMT"},"fingerprint":{"sha1":"CE:A4:9F:42:64:93:DD:02:72:58:EF:E2:CE:E2:27:64:27:F3:35:5F","sha256":"21:C5:8C:6C:B7:37:38:53:FA:00:EC:7B:59:25:43:37:08:C3:9B:86:61:E3:63:40:E9:9C:BD:31:CD:5C:4F:9A"}}},"request":{"raw":"GET /ql-ut/tracking.js HTTP/1.1\r\nHost: trackpixel.refinance.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 15 Apr 2026 14:30:02 GMT\r\nserver: cloudflare\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: tXx_xqGF_aq2EhQYdtgUiTiR_z_KCW32\r\ncontent-encoding: gzip\r\netag: \"5284e882a2f1d2f21418af81ee19cf11\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ae80ccab7109b5d2f1c1ee784af203a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: FRA56-P9\r\nx-amz-cf-id: GddALFzyJvrgXWXoj7wfKjOFIhGB4epgSxf8xhLzMiRGxIFifoc29w==\r\nx-xss-protection: 1; mode=block\r\nexpires: Sat, 30 May 2026 17:07:28 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=JjkaTjgkIrPmtjp8F2BgTML8Mw3bOJ5oLTV6crOzxIo-1780146448.3097677-1.0.1.1-dA3wEJGlcSM0LDX0NrSj8NcuEvqFuQ82zIvo2CaIBW._xBypbIZ4wlBvbWX3JRa7w.3MKnKDdujCZhTQSggA7yFYdS57Mnc6Y82P9flaU_LIdL7bC0HbvpFBq1M6HKps; HttpOnly; SameSite=None; Secure; Path=/; Domain=refinance.quickenloans.com; Expires=Sat, 30 May 2026 13:37:28 GMT\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-frame-options: SAMEORIGIN\r\ncf-ray: a03df645e85c4c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":19036,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18999)","md5":"5284e882a2f1d2f21418af81ee19cf11","sha1":"ef1c6d3f8a0d2cf1f45445c539716bcb8db27192","sha256":"3ac6ab6235010da69d4390d790446634a230ac5badfbd61d7cd51835715a8f5d","sha512":"6f72d11aabc48bab6a85f5723b78ce58d5dcc6b6a015dad2c9b19bb2fb4dba068e7f5d131eec0177979255f8cdfd93a2a99a329d954a25d2b991c2c73ce8d19b","ssdeep":"384:6PmG/SN9dg9ufRnUvVilGkaut36MJSPHp0fznjoMBLwgR9efant1tNSX1WmMc5bt:6P1S7EWRUvVoGkautK1PHp0fznjoMBct","tlshash":"d6820aa67594643a25da21de193a430c173ba7abb8d19060f9375ce43a2de0f43f1f78","first_seen":"2026-04-15T23:11:24.076186Z","last_seen":"2026-06-04T15:54:08.114339Z","times_seen":9,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":51,"dns":40,"connect":1,"send":0,"wait":67,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=1\u0026frm=0\u0026auid=415580428.1780146449\u0026dt=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.quickenloans.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1645099745.1780146449\u0026navt=n\u0026npa=1\u0026gtm=45be65r2v9213656542z89137104487za20gzb9137104487zd9137104487xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~116701382~118128923~118228214~119034493\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-11388547050\u0026tid=AW-11388547050\u0026tft=1780146449403\u0026tfd=2869","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:30.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"22:23:AA:C0:3B:78:20:8C:E2:B9:B3:D2:68:3A:EA:1F:61:C4:08:DF","sha256":"16:A1:EB:63:D1:FC:CC:47:80:09:5E:C3:61:20:56:39:EC:CA:BA:D6:D2:EF:7A:A6:D6:F6:D1:75:BC:EB:9A:2C"}}},"request":{"raw":"POST /ccm/collect?rcb=1\u0026frm=0\u0026auid=415580428.1780146449\u0026dt=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.quickenloans.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1645099745.1780146449\u0026navt=n\u0026npa=1\u0026gtm=45be65r2v9213656542z89137104487za20gzb9137104487zd9137104487xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~116701382~118128923~118228214~119034493\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-11388547050\u0026tid=AW-11388547050\u0026tft=1780146449403\u0026tfd=2869 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.quickenloans.com/\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ndate: Sat, 30 May 2026 13:07:30 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.quickenloans.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared-bff.quickenloans.com/api/tracking/event/v2","fqdn":"shared-bff.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.26.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:31.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"OPTIONS /api/tracking/event/v2 HTTP/1.1\r\nHost: shared-bff.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://www.quickenloans.com/\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 30 May 2026 13:07:32 GMT\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: authorization,content-type\r\ncf-cache-status: DYNAMIC\r\nset-cookie: AWSALBTG=66GCmwXqrPSkmtpzBEQVeXrUuQ0fDE30nZTPpYxKXXviC4cAaCrMau64HoJ2BlVOFO+gYMemtZG0/RLFbnFfAJuWrESABq0jMdlfrhpLU20xFm+8png157Jl3nWHlZc6f2ppO59J5NXd8d1XGR6PAbmconi6t/ZbAtuJAVuVJ+mIxtISUCU=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/\nAWSALBTGCORS=66GCmwXqrPSkmtpzBEQVeXrUuQ0fDE30nZTPpYxKXXviC4cAaCrMau64HoJ2BlVOFO+gYMemtZG0/RLFbnFfAJuWrESABq0jMdlfrhpLU20xFm+8png157Jl3nWHlZc6f2ppO59J5NXd8d1XGR6PAbmconi6t/ZbAtuJAVuVJ+mIxtISUCU=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/; SameSite=None; Secure\n__cf_bm=qY.B6mE8F0QRxisAXf_3OMydtl4ePtMt4qWtaOE8wXo-1780146451.3763494-1.0.1.1-5oZV1iuF0ufIWWvOj.bFZ.TuX3tpyX601vtM8k7JImCNNhO5pYaccEqluW.fWmYMc7odMJuEPWM1K0iAQbxoF8CbR9WcD.HykWhorCAsrJKjgUtXWsoCn01I.ZbSyC6I; HttpOnly; SameSite=None; Secure; Path=/; Domain=quickenloans.com; Expires=Sat, 30 May 2026 13:37:32 GMT\n__cflb=0H28vfGvKfdvn24kVcWkzcj7SojU4X6yHEyTBKNdcsN; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 31 May 2026 12:07:32 GMT\r\nserver: cloudflare\r\ncf-ray: a03df6591a7123eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":733,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":733,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shared-bff.quickenloans.com/api/tracking/event/v2","fqdn":"shared-bff.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.26.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:31.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"OPTIONS /api/tracking/event/v2 HTTP/1.1\r\nHost: shared-bff.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://www.quickenloans.com/\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 30 May 2026 13:07:32 GMT\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: authorization,content-type\r\ncf-cache-status: DYNAMIC\r\nset-cookie: AWSALBTG=x3k3vdA+lH+p5JNxRVu648uUvnHDLqlzS6D3xQGEJNLadW2iPcEtGFLST7hGkACWqRmre0fQL9Yu1YMPKxnCQBnjb30e24ZP0dKQT1rL546L7CAM1cy/AdoIfN8/e+2SXNDLkQkSS0B4dz1CAzoCeEHyqJFWJdQndXMKjJqxpeVg9HPJD2o=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/\nAWSALBTGCORS=x3k3vdA+lH+p5JNxRVu648uUvnHDLqlzS6D3xQGEJNLadW2iPcEtGFLST7hGkACWqRmre0fQL9Yu1YMPKxnCQBnjb30e24ZP0dKQT1rL546L7CAM1cy/AdoIfN8/e+2SXNDLkQkSS0B4dz1CAzoCeEHyqJFWJdQndXMKjJqxpeVg9HPJD2o=; Expires=Sat, 06 Jun 2026 13:07:32 GMT; Path=/; SameSite=None; Secure\n__cf_bm=9A8srSeY4gTKvVHKCSw3z5VM1vytgEPgI5m1gdCQSjQ-1780146451.3975155-1.0.1.1-ojl5EYu6TVkvY31sCu2jOeHs7uyZIHunYh3XBNpcWU09xrk44Pcentjqx7ej2IqsDlNqVMgRWCpMGAcgHNCNzIbe1k60wmv.RCmweLpsDIOWQsESWQSGYbsemaG8HyCz; HttpOnly; SameSite=None; Secure; Path=/; Domain=quickenloans.com; Expires=Sat, 30 May 2026 13:37:32 GMT\n__cflb=0H28vfGvKfdvn24kVcWkzcj7SojU4X6yHEyTBKNdcsN; HttpOnly; SameSite=None; Secure; Path=/; Expires=Sun, 31 May 2026 12:07:32 GMT\r\nserver: cloudflare\r\ncf-ray: a03df6593aea23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":776,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":775,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/cdn/QuickenLoans.com/logo-quickenloans.svg","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /cdn/QuickenLoans.com/logo-quickenloans.svg HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a03df6458f6b23eb-OSL\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\netag: \"13c36f3f146e63cb1c91aecfb0774694\"\r\nexpires: Sat, 30 May 2026 13:12:28 GMT\r\nlast-modified: Thu, 28 Mar 2024 19:57:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 cd1b1efd8fd6d8c3fcc4e5458686af18.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: GvwzwYthKtKcU6ROyhGq1emCPZqaPg0XtpxnzhqsrJgM1ihNC9tQQA==\r\nx-amz-cf-pop: FRA56-P16\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: tbjkcDJpvQp_P6a.cg_vDozEPaLcbYTl\r\nx-cache: Miss from cloudfront\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3051,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"13c36f3f146e63cb1c91aecfb0774694","sha1":"41533f74d5cf1d41a68a729693ce675f9b66a940","sha256":"e0e00a23e42a114d3254ce6337d651543576f10cb14385726702b0ae76c3702c","sha512":"04b00b2f7be633f40382f5a867ca3a601410b9cdf310f95016c60dd575fea1452084abf432db3af7d5bc629c6f96bef0ce3f6377eb351068a97cd01ae43a96f7","ssdeep":"","tlshash":"19519f7ec350c3b85ca68bfcda33b4b1e08e959d85e283d58369d96035e22c8f75d845","first_seen":"2026-05-10T18:37:53.639422Z","last_seen":"2026-06-04T15:54:08.131015Z","times_seen":8,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.datadoghq-browser-agent.com/us1/v5/datadog-logs.js","fqdn":"www.datadoghq-browser-agent.com","domain":"datadoghq-browser-agent.com","tld":"com"},"ip":{"addr":"52.222.188.176","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:29.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.datadoghq-browser-agent.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sat, 21 Mar 2026 00:00:00 GMT","end":"Mon, 05 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"63:4B:4D:B1:2A:6E:84:21:52:79:B4:B4:D3:ED:E2:D2:98:93:6E:A9","sha256":"1F:63:3F:C8:0A:5A:7B:77:CD:95:4A:06:A2:44:EE:56:05:79:D4:2B:B8:4C:16:D3:DF:52:C8:9D:A8:AF:0F:07"}}},"request":{"raw":"GET /us1/v5/datadog-logs.js HTTP/1.1\r\nHost: www.datadoghq-browser-agent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 14 Feb 2025 13:31:28 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\ncache-control: max-age=14400, s-maxage=60\r\netag: W/\"e229238b65ffda55a248392b78704816\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e21c7dce7b26c6a388cc82dd5423f574.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: IBfVzL-xyhV-gnJ0rgqd1UeUKqm0cH-Fnr1jgqn5bZN9QB333Z0U8A==\r\nage: 2\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":57534,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (57534), with no line terminators","md5":"e229238b65ffda55a248392b78704816","sha1":"df51ff61090c86fb44e3efb8be27966085ed470d","sha256":"d3880ef4d7b5da91b49bf616781458b9f9ea43b67a7214e754f0d652dca4dd5d","sha512":"89e2fb527502154263b7ffab3c6e40156f89d9a9a13a7eb61e0d108d43bc4be17452e8607b60f354c79feb205c70b1c1b9c0c90e6719f96ae61de82102916b7b","ssdeep":"768:osGeLUpZ3YHRxWNMsTx0O5jWlUPLc7xWDcFiTXGwudUpVK:osps3O8isTqUPLM9iMUHK","tlshash":"4a43b6ccb686b02113977172517f260ab33f2e55781e8420e267e2c47db865e9633f6d","first_seen":"2025-02-14T14:28:23.692261Z","last_seen":"2026-06-07T04:05:30.917431Z","times_seen":1028,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16663922781\u0026cx=c\u0026gtm=4e65r2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.1.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:29.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:35 GMT","end":"Thu, 30 Jul 2026 15:51:34 GMT"},"fingerprint":{"sha1":"4F:F6:A0:5C:88:9C:38:C1:57:D2:C2:16:50:CD:79:E3:67:50:CC:B0","sha256":"93:D6:F4:89:DB:C5:7B:E8:C8:73:F7:36:40:1B:87:32:83:AA:3F:54:8B:26:97:45:83:DB:E6:BF:FD:F5:70:33"}}},"request":{"raw":"GET /gtag/destination?id=AW-16663922781\u0026cx=c\u0026gtm=4e65r2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 30 May 2026 13:07:29 GMT\r\nexpires: Sat, 30 May 2026 13:07:29 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 30 May 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:71:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:71:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:71:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:71:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 143537\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":423021,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5930)","md5":"1a0d0736735bd177f72de57b06685e41","sha1":"e4f012e41dc29311596ccbdf8898accf9dddaa73","sha256":"5dad6ae581b59372ee631eada03773538359af4ac9d0dbed246dc1139c237869","sha512":"28e62f2afad47f22282a8fcc8086e1b5d6861dce79804606b8142ef3170acf46eddb9cab5c0e86ab1c0c08cf7cd90fccbb13a7181efb18eb57521ca8710b4fb2","ssdeep":"6144:s0RfDNlVf3AlwSXbTFQSvtxhuX7aWCBbnNlvaow+:sgVf3ARxQST8ow+","tlshash":"869409cdb3d6706253a3b478503f018ba57a69e2b44cc899f14acce42e7469a4277f7c","first_seen":"2026-05-30T13:08:05.486297Z","last_seen":"2026-05-30T13:08:05.486297Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/11380533681/?random=1780146449506\u0026cv=11\u0026fst=1780146449506\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be65r2v9168885163z89137104487za20gzb9137104487zd9137104487xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~116701382~119027222~119034491~119064971\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fwww.quickenloans.com%2F\u0026rcb=14\u0026label=j4dCCMa_7O4YELHT1LIq\u0026frm=0\u0026tiba=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=415580428.1780146449\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=1~0~0~0\u0026em=tv.1\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:30.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"22:23:AA:C0:3B:78:20:8C:E2:B9:B3:D2:68:3A:EA:1F:61:C4:08:DF","sha256":"16:A1:EB:63:D1:FC:CC:47:80:09:5E:C3:61:20:56:39:EC:CA:BA:D6:D2:EF:7A:A6:D6:F6:D1:75:BC:EB:9A:2C"}}},"request":{"raw":"POST /pagead/1p-conversion/11380533681/?random=1780146449506\u0026cv=11\u0026fst=1780146449506\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be65r2v9168885163z89137104487za20gzb9137104487zd9137104487xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~116701382~119027222~119034491~119064971\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fwww.quickenloans.com%2F\u0026rcb=14\u0026label=j4dCCMa_7O4YELHT1LIq\u0026frm=0\u0026tiba=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026bttype=purchase\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=415580428.1780146449\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=1~0~0~0\u0026em=tv.1\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.quickenloans.com/\r\nOrigin: https://www.quickenloans.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 30 May 2026 13:07:30 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\nlocation: https://www.google.com/pagead/1p-conversion/11380533681/?random=138240940\u0026cv=11\u0026fst=1780146449506\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be65r2v9168885163z89137104487za20gzb9137104487zd9137104487xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~116701382~119027222~119034491~119064971\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fwww.quickenloans.com%2F\u0026rcb=14\u0026label=j4dCCMa_7O4YELHT1LIq\u0026frm=0\u0026tiba=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=415580428.1780146449\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=1~0~0~0\u0026em=tv.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCKG4sQIIscGxAgiwwbECCLHDsQIIisWxAgjCybECCLTGsQIIk9qxAgjb3LECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgj02rECCJfUsQIIyduxAgix4bECCLPhsQIIpt2xAgiw3rECCIDbsQI\u0026cerd=CgEA\u0026eitems=ChEI8JXq0AYQ39OXg-vY9rz_ARIdALI0U6hBkgSKOHaWwiW70k9T_7bcK2pPGdhr4cg\u0026fsk=ChEI8JXq0AYQn_OThtTn0-qAARIsAP15kqBdSpXn1JEGwwqj7ZbOQAc3g78otC64O4pzyQjtVFRTqHRF4xbKKsUaAgsu\u0026pscrd=IhMIgOC_porhlAMVSM87Ah1x6wbqOh1odHRwczovL3d3dy5xdWlja2VubG9hbnMuY29tL0JWQ2hBSThKWHEwQVlReUtyVno1eW95WmxNRWl3QWh0NTFCMWlNWTNDUEFZdWg5MGY4QnVLeVlQMjZKSVZYZDBNYVd0UGZhRlBvTHIycHVTcTZud3R3U1F6DAgJYggIABAAGAAgAA\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026dma=1\u0026dma_cps=a\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026tid=G-RXLL9Z7XBK\u0026cid=1794521849.1780146450\u0026gtm=45j91e65r0v9169491831z89137104487z99200500233za20gzb9137104487zd9137104487\u0026tag_exp=0~115616986~115938465~115938469~117384418~117384418~117401771~117401771~118012009~119034493~119064591\u0026_is_sw=f6te\u0026_tu=BA\u0026aip=1\u0026z=255820457","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:30.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:55:19 GMT","end":"Thu, 30 Jul 2026 15:55:18 GMT"},"fingerprint":{"sha1":"0B:35:DC:89:EA:6C:6B:84:37:37:B0:28:E3:EE:28:BF:30:63:E1:98","sha256":"0D:F4:09:F4:10:6D:23:C9:1F:1A:51:B4:6C:60:CE:E0:19:D8:B6:19:C5:C4:86:1B:00:2E:EA:54:40:0A:0E:26"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026dma=1\u0026dma_cps=a\u0026npa=1\u0026gcd=13l3l3l2l1l1\u0026tid=G-RXLL9Z7XBK\u0026cid=1794521849.1780146450\u0026gtm=45j91e65r0v9169491831z89137104487z99200500233za20gzb9137104487zd9137104487\u0026tag_exp=0~115616986~115938465~115938469~117384418~117384418~117401771~117401771~118012009~119034493~119064591\u0026_is_sw=f6te\u0026_tu=BA\u0026aip=1\u0026z=255820457 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 30 May 2026 13:07:30 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-08T01:30:53.152407Z","times_seen":940499,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":93,"dns":14,"connect":16,"send":0,"wait":35,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/11380533681/?random=138240940\u0026cv=11\u0026fst=1780146449506\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be65r2v9168885163z89137104487za20gzb9137104487zd9137104487xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~116701382~119027222~119034491~119064971\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fwww.quickenloans.com%2F\u0026rcb=14\u0026label=j4dCCMa_7O4YELHT1LIq\u0026frm=0\u0026tiba=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=415580428.1780146449\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=1~0~0~0\u0026em=tv.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCKG4sQIIscGxAgiwwbECCLHDsQIIisWxAgjCybECCLTGsQIIk9qxAgjb3LECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgj02rECCJfUsQIIyduxAgix4bECCLPhsQIIpt2xAgiw3rECCIDbsQI\u0026cerd=CgEA\u0026eitems=ChEI8JXq0AYQ39OXg-vY9rz_ARIdALI0U6hBkgSKOHaWwiW70k9T_7bcK2pPGdhr4cg\u0026fsk=ChEI8JXq0AYQn_OThtTn0-qAARIsAP15kqBdSpXn1JEGwwqj7ZbOQAc3g78otC64O4pzyQjtVFRTqHRF4xbKKsUaAgsu\u0026ipr=y\u0026pscrd=IhMIgOC_porhlAMVSM87Ah1x6wbqOh1odHRwczovL3d3dy5xdWlja2VubG9hbnMuY29tL0JWQ2hBSThKWHEwQVlReUtyVno1eW95WmxNRWl3QWh0NTFCMWlNWTNDUEFZdWg5MGY4QnVLeVlQMjZKSVZYZDBNYVd0UGZhRlBvTHIycHVTcTZud3R3U1F6DAgJYggIABAAGAAgAA","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:32.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:55:19 GMT","end":"Thu, 30 Jul 2026 15:55:18 GMT"},"fingerprint":{"sha1":"0B:35:DC:89:EA:6C:6B:84:37:37:B0:28:E3:EE:28:BF:30:63:E1:98","sha256":"0D:F4:09:F4:10:6D:23:C9:1F:1A:51:B4:6C:60:CE:E0:19:D8:B6:19:C5:C4:86:1B:00:2E:EA:54:40:0A:0E:26"}}},"request":{"raw":"GET /pagead/1p-conversion/11380533681/?random=138240940\u0026cv=11\u0026fst=1780146449506\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=conversion\u0026gtm=45be65r2v9168885163z89137104487za20gzb9137104487zd9137104487xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938468~116701382~119027222~119034491~119064971\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fwww.quickenloans.com%2F\u0026rcb=14\u0026label=j4dCCMa_7O4YELHT1LIq\u0026frm=0\u0026tiba=Quicken%20Loans%20%7C%20A%20Quicker%20Path%20To%20Financial%20Freedom\u0026value=0\u0026hn=www.google.com\u0026npa=1\u0026pscdl=noapi\u0026auid=415580428.1780146449\u0026ec_mode=a\u0026_tu=CA\u0026gcl_ctr=1~0~0~0\u0026em=tv.1\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ct_cookie_present=false\u0026crd=CLTesQII8t-xAgit4bECCKG4sQIIscGxAgiwwbECCLHDsQIIisWxAgjCybECCLTGsQIIk9qxAgjb3LECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgj02rECCJfUsQIIyduxAgix4bECCLPhsQIIpt2xAgiw3rECCIDbsQI\u0026cerd=CgEA\u0026eitems=ChEI8JXq0AYQ39OXg-vY9rz_ARIdALI0U6hBkgSKOHaWwiW70k9T_7bcK2pPGdhr4cg\u0026fsk=ChEI8JXq0AYQn_OThtTn0-qAARIsAP15kqBdSpXn1JEGwwqj7ZbOQAc3g78otC64O4pzyQjtVFRTqHRF4xbKKsUaAgsu\u0026ipr=y\u0026pscrd=IhMIgOC_porhlAMVSM87Ah1x6wbqOh1odHRwczovL3d3dy5xdWlja2VubG9hbnMuY29tL0JWQ2hBSThKWHEwQVlReUtyVno1eW95WmxNRWl3QWh0NTFCMWlNWTNDUEFZdWg5MGY4QnVLeVlQMjZKSVZYZDBNYVd0UGZhRlBvTHIycHVTcTZud3R3U1F6DAgJYggIABAAGAAgAA HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.quickenloans.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 30 May 2026 13:07:32 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T01:34:10.730701Z","times_seen":16226504,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/framework-0a7535232495ea795a62.js","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /framework-0a7535232495ea795a62.js HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\ncontent-type: text/javascript\r\ncf-ray: a03df646bc4323eb-OSL\r\ncf-cache-status: HIT\r\nx-cache: Miss from cloudfront\r\ncache-control: public, max-age=300\r\nx-amz-version-id: tQsZGz.Xn3vSxBkF98wvPwTcNRHZWUDP\r\nexpires: Sat, 30 May 2026 13:12:28 GMT\r\nlast-modified: Fri, 29 May 2026 21:32:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 6a979963b4bbad2eae71dd7856d44c8c.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: b5Kfi4xE2slmaD5RgAB8LLK8_YT5qW-MxK2yPYwipZ42bbDX18EAMw==\r\nx-amz-cf-pop: FRA60-P12\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"003c366838a5dee5e52afbc9256d1928\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140952,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65448)","md5":"003c366838a5dee5e52afbc9256d1928","sha1":"1788c7edb517bcc6965d95a73ae8a235f1b49718","sha256":"3503abfd332624eab1d81e36c051bae6df17cd7615173fb221c3d2efd60d3f0c","sha512":"5444ffe7a4498622e28fae89bc9729b9f510eab6a79d38c3c33478310cd500be605001921dc0d3931dfee5cba2e6834f888eca1ca3ac06ffbf2230eb4ec5178c","ssdeep":"1536:lOQ8vukW5eZ7j9fohPQdeb9H78r9m0qKCmT9i9GrQsQ0llP2qcK:z81Eb9H2ENki9IQsOK","tlshash":"cad3f6e83992f5516ab302a700ef1807733d1a1b280c49a0a615fd9e75f846eb17bfdd","first_seen":"2025-11-19T23:18:11.177931Z","last_seen":"2026-06-04T15:54:08.103881Z","times_seen":16,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickenloans.com/app-9a1d233e31543a306752.js","fqdn":"www.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.27.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.quickenloans.com/","date":"2026-05-30T13:07:28.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"quickenloans.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 04:32:03 GMT","end":"Thu, 13 Aug 2026 05:31:48 GMT"},"fingerprint":{"sha1":"74:4A:0C:7D:23:7C:48:81:13:5C:7C:49:C5:18:D2:3C:88:67:51:6F","sha256":"D6:D1:76:DC:DE:A8:DC:02:81:8E:A9:E5:31:91:21:A8:B0:FB:99:1A:4B:0C:AE:C1:79:32:13:21:1C:E6:9A:15"}}},"request":{"raw":"GET /app-9a1d233e31543a306752.js HTTP/1.1\r\nHost: www.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.quickenloans.com/\r\nCookie: __cf_bm=P00msBWOEjKDFSx8CsNsN.FlzOZDmL4jJZ7by7RYeXk-1780146447.3743787-1.0.1.1-aYlGbljx3x4gusa.LJRVqcxjeHCItLBZcuttkrcGNbnRwzxCEy8ss37R6ZViDlaDkqjDTNRwLLqxd7nFiY2RSx_LixuZSqh.ljz88DvuQkIsR7CZ8odhGGQ0cBDb0CuV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 13:07:28 GMT\r\ncontent-type: text/javascript\r\ncf-ray: a03df646bc4923eb-OSL\r\ncf-cache-status: HIT\r\nx-cache: Miss from cloudfront\r\ncache-control: public, max-age=300\r\nx-amz-version-id: 6OzztdZHj5W3W9M.BnKyVonSiRE0bNAj\r\nexpires: Sat, 30 May 2026 13:12:28 GMT\r\nlast-modified: Fri, 29 May 2026 21:32:05 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000\r\nvary: Accept-Encoding\r\nvia: 1.1 90a1c9bfae56eb9062f3a496d1877f0c.cloudfront.net (CloudFront)\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-amz-cf-id: 474-e4EKIFfkVPqOmU-83sfjTgfemKIQ0fk8e1ji8oIXabgB2qy2Ag==\r\nx-amz-cf-pop: FRA60-P12\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"a5127f638ebb00364f2e08977d76db6b\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":323617,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65451)","md5":"a5127f638ebb00364f2e08977d76db6b","sha1":"01bee87121c0a843508f343bfe5cea1f7b3fe1a0","sha256":"667d400bb69ffc3323933da7bfa7e194187c50327e54513fd34221c54eaa18bd","sha512":"98e18bb527930f52d03e2eec5a24c51f3b5f7cc4d88f8b2bf54b8310e2acf57a79230d05cd4a409d0a85f72b648e9d2a42814e64b5a5fad39b5a8c77785ba4d8","ssdeep":"6144:I3IQgNsU0dADgoxjl33G+eJtESIgZXHSb3Mpvnv3ha:IENQ6DjdlnKOovk","tlshash":"fa64d88db5d2f0b85be365e4802f594af17b2a68700e94d1eab6d4c2ac7494f4033f6d","first_seen":"2026-05-10T18:37:53.530646Z","last_seen":"2026-06-04T15:54:08.125332Z","times_seen":8,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
