{"report_id":"e5813c42-4b8f-4edc-94c2-0d605f4a76ec","version":6,"status":"done","tags":[],"date":"2023-12-08T14:36:18Z","url":{"schema":"https","addr":"www.lmbahsj2.com/DQ7MW8/83KB7S/?source_id=EGM\u0026sub1=SECCAPS-A","fqdn":"www.lmbahsj2.com","domain":"lmbahsj2.com","tld":"com"},"ip":{"addr":"35.201.76.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","fqdn":"money.quickencompare.com","domain":"quickencompare.com","tld":"com"},"title":"QuickenCompare Money - QUESTIONS"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T08:31:54Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2013-06-10 22:14:26","last_seen":"2023-12-08 07:43:19","alert_count":0,"request_count":1,"received_data":76754,"sent_data":482,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.datadoghq-browser-agent.com","ip":{"addr":"54.230.111.221","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-03-26","domain_rank":3490,"first_seen":"2019-04-26 18:31:20","last_seen":"2023-12-07 22:41:53","alert_count":0,"request_count":1,"received_data":118214,"sent_data":446,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-09-09 02:40:21","last_seen":"2023-12-08 07:46:22","alert_count":0,"request_count":1,"received_data":33924,"sent_data":549,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pix.revjet.com","ip":{"addr":"5.9.20.98","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2008-09-14","domain_rank":4646,"first_seen":"2015-09-01 17:11:50","last_seen":"2023-11-18 10:18:58","alert_count":0,"request_count":1,"received_data":314,"sent_data":1009,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.quickencompare.com","ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-01-21","domain_rank":0,"first_seen":"2022-07-11 01:11:04","last_seen":"2023-11-15 09:18:27","alert_count":0,"request_count":2,"received_data":14257,"sent_data":2086,"comment":"","tags":null,"fingerprints":null},{"fqdn":"script.anura.io","ip":{"addr":"3.8.43.133","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"domain_registered":"2016-03-22","domain_rank":43801,"first_seen":"2017-05-19 21:00:19","last_seen":"2023-12-07 06:39:39","alert_count":0,"request_count":2,"received_data":27193,"sent_data":1087,"comment":"","tags":null,"fingerprints":null},{"fqdn":"money.quickencompare.com","ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-01-21","domain_rank":0,"first_seen":"2023-02-10 04:00:13","last_seen":"2023-11-20 15:48:43","alert_count":0,"request_count":4,"received_data":28612,"sent_data":7200,"comment":"","tags":null,"fingerprints":null},{"fqdn":"p.typekit.net","ip":{"addr":"23.36.76.184","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-08-02","domain_rank":620,"first_seen":"2012-05-23 16:28:57","last_seen":"2023-12-08 05:19:07","alert_count":0,"request_count":1,"received_data":340,"sent_data":490,"comment":"","tags":null,"fingerprints":null},{"fqdn":"use.typekit.net","ip":{"addr":"23.36.76.122","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-08-02","domain_rank":494,"first_seen":"2012-07-05 03:42:39","last_seen":"2023-12-08 05:19:06","alert_count":0,"request_count":4,"received_data":34083,"sent_data":2281,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2013-05-22 04:07:37","last_seen":"2023-12-08 05:47:56","alert_count":0,"request_count":5,"received_data":522455,"sent_data":2261,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.lmbahsj2.com","ip":{"addr":"35.201.76.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2021-09-21","domain_rank":0,"first_seen":"2022-05-13 17:11:55","last_seen":"2023-12-05 14:01:25","alert_count":0,"request_count":3,"received_data":63592,"sent_data":1561,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cs-cdn.deviceatlas.com","ip":{"addr":"52.58.191.183","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2007-11-29","domain_rank":0,"first_seen":"2019-07-10 14:47:14","last_seen":"2023-11-18 16:00:31","alert_count":0,"request_count":1,"received_data":22883,"sent_data":425,"comment":"","tags":null,"fingerprints":null},{"fqdn":"content.quickencompare.com","ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-01-21","domain_rank":0,"first_seen":"2022-08-17 22:48:03","last_seen":"2023-11-17 22:09:56","alert_count":0,"request_count":4,"received_data":142433,"sent_data":3453,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ads.anura.io","ip":{"addr":"54.230.111.55","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2016-03-22","domain_rank":75730,"first_seen":"2016-10-30 01:38:15","last_seen":"2023-12-07 18:41:14","alert_count":0,"request_count":1,"received_data":464,"sent_data":470,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn-refinance.enhancedrefinow.com","ip":{"addr":"104.18.5.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-11-14","domain_rank":0,"first_seen":"2022-07-21 16:57:28","last_seen":"2023-11-17 22:09:56","alert_count":0,"request_count":1,"received_data":154841,"sent_data":460,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.redditstatic.com","ip":{"addr":"151.101.129.140","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2011-11-09","domain_rank":1440,"first_seen":"2012-06-30 14:33:28","last_seen":"2023-12-07 18:17:19","alert_count":0,"request_count":1,"received_data":8420,"sent_data":428,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rum-http-intake.logs.datadoghq.com","ip":{"addr":"3.233.159.178","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2010-07-09","domain_rank":3196,"first_seen":"2019-08-02 12:28:45","last_seen":"2023-12-05 07:26:41","alert_count":0,"request_count":3,"received_data":921,"sent_data":2062,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s.yimg.com","ip":{"addr":"87.248.119.252","port":443,"asn":203220,"as":"Yahoo! UK Services Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"1997-05-14","domain_rank":375,"first_seen":"2012-05-21 00:45:00","last_seen":"2023-12-07 18:20:32","alert_count":0,"request_count":2,"received_data":19947,"sent_data":884,"comment":"","tags":null,"fingerprints":null},{"fqdn":"content.refinance.quickenloans.com","ip":{"addr":"104.18.13.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-07-24","domain_rank":0,"first_seen":"2022-03-18 19:21:56","last_seen":"2023-11-13 09:22:54","alert_count":0,"request_count":1,"received_data":1741,"sent_data":511,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bat.bing.com","ip":{"addr":"13.107.21.200","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1996-01-29","domain_rank":387,"first_seen":"2014-04-08 11:23:16","last_seen":"2023-12-08 05:23:49","alert_count":0,"request_count":3,"received_data":15122,"sent_data":1891,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10 13:11:19","last_seen":"2023-11-19 18:48:38","alert_count":0,"request_count":1,"received_data":1482,"sent_data":1091,"comment":"","tags":null,"fingerprints":null},{"fqdn":"a44325.actonservice.com","ip":{"addr":"207.189.124.43","port":443,"asn":13649,"as":"ASN-VINS","country":"United States","country_code":"US"},"domain_registered":"2006-08-04","domain_rank":0,"first_seen":"2023-05-11 17:31:22","last_seen":"2023-11-17 22:09:59","alert_count":0,"request_count":2,"received_data":5833,"sent_data":1328,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ads.revjet.com","ip":{"addr":"65.109.98.106","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2008-09-14","domain_rank":2924,"first_seen":"2015-08-11 20:59:57","last_seen":"2023-12-07 20:28:01","alert_count":0,"request_count":1,"received_data":19798,"sent_data":430,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsp.starfieldtech.com","ip":{"addr":"192.124.249.24","port":0,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"domain_registered":"2003-03-06","domain_rank":6616,"first_seen":"2012-06-22 20:08:50","last_seen":"2023-12-08 05:16:58","alert_count":0,"request_count":3,"received_data":7971,"sent_data":1038,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static-lre.refinance.enhancedrefinow.com","ip":{"addr":"104.18.5.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-11-14","domain_rank":0,"first_seen":"2022-02-28 22:33:07","last_seen":"2023-11-17 22:09:56","alert_count":0,"request_count":4,"received_data":1201122,"sent_data":1897,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.250.74.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":25607,"first_seen":"2016-04-05 21:50:59","last_seen":"2023-12-08 07:38:21","alert_count":0,"request_count":1,"received_data":758,"sent_data":1096,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2023-12-08T14:36:10Z","timestamp":1702046170,"ip_dst":{"addr":"18.159.105.57","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"Client IP","port":44718,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard Low Port)","source":"{\"timestamp\":\"2023-12-08T14:36:10.329012+0000\",\"flow_id\":853178775635252,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.30\",\"src_port\":44718,\"dest_ip\":\"18.159.105.57\",\"dest_port\":443,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033077,\"rev\":2,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard Low Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_06_03\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2023-12-08T14:36:10.329012+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn-refinance.enhancedrefinow.com/pixel-616e834028d94a75ecaf.js","fqdn":"cdn-refinance.enhancedrefinow.com","domain":"enhancedrefinow.com","tld":"com"},"ip":{"addr":"104.18.5.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"725ec28cfe869b33faa17168c8edda5b","sha1":"be7280685ddccc0d7fd14728407f2f23e0f63cd0","sha256":"0a099c572e6793ac14cd77cb23fbcb1184f9b0e98ee11d0b8bd91f07ca5c35cb","sha512":"0c9b8894eac575d926a98154dfb17ff9e70aec7c1ea86d104145b5b6aebac30c77d403859f03051ca96a251d78465631a946258839ba6c2da83d4865a5f18ee4","ssdeep":"1536:QUaayP8kvtbA1TdHyhgHPTjJFS8R9xUHxKTEqEayEnBT3BTbGFcTE+XBT7BTsBTW:QUazPTAFDlJF5Wi5tA1o9","tlshash":"35e36458368ae5f5566370a9b03bdb10b262362038a9dd00ccded4a47d39daede21f35","size":153814,"data":"","first_seen":"2023-12-06T00:34:34Z","last_seen":"2024-08-20T16:37:43.830068Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4018d89d46acbb34fa9c74d9d001cdf","sha1":"abbd4922b4b0c42f23d2788e72a6b1560fc8e2a9","sha256":"cea6a6cdebdac3a6b465c00fd67ed575acc816184ec3df4f75115da18e9319d0","sha512":"2d0c0ba3ef387060f1119462eccf4f0b4c3e33f4eb669971c4bc9566c94808df6b371aba269092212cbdb5bce52d6c5973e69fb37b8f36e5a0b7ab91ca23eefe","ssdeep":"","tlshash":"c2e02db52c083d631ba01fb1507b930f3446220430aa9b40ddaca84032630b7802fa88","size":328,"data":"","first_seen":"2023-03-26T13:16:58Z","last_seen":"2024-09-19T20:13:27.574294Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/bat.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"13.107.21.200","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f75f159026f3a2c8cccda487b43157b","sha1":"021cf5c854db063cd79bf0394c24eb994e095640","sha256":"5e319852607809336b2534ffeb96f6933f26994dd040f535302c84f59cc0a214","sha512":"88276152ee25891d16e7b3b28a9b42cbd48d97e1a7d94c1bf5354612603868d5d537d2ba01a4e2f184e6dc6a492b67619d6a7c02da992ad604f7d0abef27a7a1","ssdeep":"768:OaOFhhRDUHahpROfRys3LzQRo4TYYyDMFWPKQ:OaOFnRrRURtzQy4ISWiQ","tlshash":"b923e7833350492a49ed86dc74692a03a336530e20fe309d7b8ce9f25559e0f527bb7e","size":46104,"data":"","first_seen":"2023-11-10T23:20:50Z","last_seen":"2026-01-03T14:17:01.401373Z","times_seen":11869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e451ef8df4c33b515475ac8cd3a74941","sha1":"61d9758731d8a5cff6ed60c4ce5983e463a9d5ca","sha256":"b2c0f15102fda61a2edcfcf5d995ee39d9b248d100eb6d06e0b92b82c4369c42","sha512":"bcf77f879b762c47481a4aae13e9f00d59ad49ce0fcb132448d2790c3e49adba38dc71de0e557d0b3815f48c2234f41fc4e60fe2d53f0acd36669d04025874e4","ssdeep":"","tlshash":"adf026dde145906593c4ac79153fcd587403305dc409dd79d14bcd0c5e6c7db40a48cd","size":543,"data":"","first_seen":"2023-03-26T13:16:58Z","last_seen":"2024-09-19T20:13:27.574772Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.revjet.com/analytics?acu=6680","fqdn":"ads.revjet.com","domain":"revjet.com","tld":"com"},"ip":{"addr":"65.109.98.106","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"26ec352468322f70910e03feb9b8b8fb","sha1":"18878e8adcd809ad7a4850c8698efd24b22c04e5","sha256":"2d84cdbfaf9b2bc0ba30bc5f67e45d03b265b52c3cfe24353e09175b1fb0fdfb","sha512":"9b0d180ab85748c8e16701d2ab1603c9be6aaef8e481574d3b35152f9f134e66c07a4620101e23044c1a07c458b7aa02cfac1474089e44ba262eec85283aa0bc","ssdeep":"384:S7NAWyKtqOLyN59yqK+VDSvNjHwAcOOStnW/np:S5w0sq9+5S1LwARFmp","tlshash":"d892d68cba65b426876330b1617f560f723ba46fb884c8a4a184d8e17c7496d427bf6c","size":19476,"data":"","first_seen":"2023-03-12T09:30:56Z","last_seen":"2025-11-04T04:39:00.128265Z","times_seen":729,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-11411986938","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5212802d4b2599af71c5e5c9bf52b94c","sha1":"c2d36c63dd8c22600299c4de627c0ebce0b244b2","sha256":"0c6cd51fe549c9c27dfe788d063313c4868db3e21ea807f255624832d8615198","sha512":"7a8eb68f49468a4f930cc211286ebec526987b355f39f59d319902ce400219842a4eaf0cdb361c011fb7a9671fdcc4660ef22ff94a56f1869427c34ed3c58cf5","ssdeep":"3072:ajdZAlCIWYyUyO1j5MypDDMv0MWXdXzhoO7DfFWkrtk4X:8fIHyUy4G3WtDhoO7DfYOtn","tlshash":"143408d973c3706682a7b4b4503f020ba17b6da6f84ccc94e189c5d52eb8a99417bf7c","size":233621,"data":"","first_seen":"2023-12-08T15:36:20Z","last_seen":"2023-12-08T15:36:21Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/p/action/146000783.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"13.107.21.200","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T10:57:30.943449Z","times_seen":14782693,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","fqdn":"money.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"280e199c65ca1e2edebe9be82aa0d129","sha1":"0705c43fc9e588d9d39fcc5a93aa84bd5370eb37","sha256":"4eb2645c75b71ee7ffc414de8d2d0891c100ab1ee521f4abe230de015cc43fa4","sha512":"a371a74490d3ecc80973eb628755cf3c7778427d6a4eb1e1327bbff26ea1b93ecd49b017dbd4806b1ac5ebb7cf3c324844a47fea13210026ace6e398606d741a","ssdeep":"","tlshash":"8cd0a7391da6c0351f77064f287bdf5c6d985458dd54e14640b8dd088d60f9508a55ec","size":239,"data":"","first_seen":"2023-03-26T13:16:58Z","last_seen":"2024-09-19T20:13:27.556698Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"96397ea4add0bd55c9e6a8bb82dd9336","sha1":"3467535f371c39973ccd249e0a63535b7df27666","sha256":"5a0fc340c17b356e22140a5e162ae2fcd5979d64af9d99b7d15e52daafbff4ee","sha512":"c1ddcc30a21737c39b70842e862e8c86d9ae0edd623849372b2c8ee872d2cdd286d14eb73ba998d7d49a046952b8c1da152a4194bbe60f528eee4a42754731cd","ssdeep":"","tlshash":"09e061ed1c9cb0982fa51935e13fd95ab34f126650414742d646cc9c1d389674505d48","size":376,"data":"","first_seen":"2023-05-11T17:31:44Z","last_seen":"2024-08-21T08:12:54.147701Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.redditstatic.com/ads/pixel.js","fqdn":"www.redditstatic.com","domain":"redditstatic.com","tld":"com"},"ip":{"addr":"151.101.129.140","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"78b6c68984a6ce5b3fcac1c6a9cad00c","sha1":"02e1d366a17506cea8adfe5a15949aca89719a02","sha256":"e803e774c7b59fe74f71ed93acaa875cf9a99947ff8ed7615cd0c93c1667250f","sha512":"b58674b36271f19ca88aeccb87fb818bbd6549425904fbff63d53ae84f29ae0cab021b74abbaee6ff2f7e8b7f11e0e23b7e523f2dd394f6487a402f28dbc650e","ssdeep":"384:xJi5iukbQbBfIJXvBP2w2Ig4YWrECIFeOV0rT8AevQ97sEebOpD/u5l1XvYvHjcE:xJiiusQ1HhCIFqrTSO75eIGvi","tlshash":"9fb219c9b2e56099d78a35f4177fb04775b7b96709fc0080c49888e21ee4d8a2677b3d","size":23777,"data":"","first_seen":"2023-06-15T23:22:15Z","last_seen":"2025-07-02T08:18:27.372616Z","times_seen":4081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb2ce45397d04da684bfbfc83bc8f3ad","sha1":"610a2fcbb3bc06efef2e07f11584b68568caeea5","sha256":"c6b100b14c1db0c481b7abed90f6a8cf258651bc86e32d00e5702da7a9f2d79f","sha512":"0929a681dc5dfef4581bfddbf53fe890ce53340b66407d54bf3ae4bcd9f8eb5d9e2c1a6855c63465c155221e65f7f5b81890fa4340c5bd7fcebc0fce324a15b6","ssdeep":"","tlshash":"65d0228c154a0c30c2ab1f820b7fb400a218332090f008312e0b33094320907e294924","size":197,"data":"","first_seen":"2023-05-11T17:31:45Z","last_seen":"2024-09-19T20:13:27.567203Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-10865694633","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"660961a3f9cc31fd27449dd0c07c6107","sha1":"5d4c2198be6fcd7fdbd58d465f616d5a749bde4d","sha256":"8dfb98b7cced2dfc953565ea0fc1f2074f7c2f9f5fa9510a02a8f17e014d143b","sha512":"8d9d3d48de608880bfc3c774612b4ff1429ccc7592b18c90f5077a75471d9716e6340b7468eb6c2142e6b67152a7f03e188e4435293dff0fb62380d23f14ff10","ssdeep":"3072:eHdZAlCIWYVUyO1j9jypDDMv0MWXdXAhA9DfFWkY4X:CfIHVUy4h3WtwhA9DfYq","tlshash":"8b24f7d9b383b46a83a3b474503f010bb17b6d96f84ccc94e189c5d52eb8a99417bf6c","size":210688,"data":"","first_seen":"2023-12-08T15:36:20Z","last_seen":"2023-12-08T15:36:21Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pix.revjet.com/track/pd3521?__noscript=false\u0026__cbf=revjet.callbacks.cb1702046169178\u0026location=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_259%26pkey1%3D259%26pkey2%3DSECCAPS-A%26pkey3%3D92bc792a678d4d3aac6777601f10fd8b%26pkey%3D%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D259%26_ef_transaction_id%3D92bc792a678d4d3aac6777601f10fd8b\u0026referrer=\u0026creditProfile=\u0026firstMortgageBalance=\u0026firstMortgageInterestRate=\u0026hasFHALoan=\u0026homeValue=\u0026loanToValue=\u0026propertyCity=\u0026propertyDescription=\u0026propertyState=\u0026propertyZipCode=\u0026rateType=\u0026typeOfLoan=\u0026loanRefiPurpose=","fqdn":"pix.revjet.com","domain":"revjet.com","tld":"com"},"ip":{"addr":"5.9.20.98","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba43362c32b7c63d1291479b4f4d9020","sha1":"dbcda434072be7dffb609f222b60e1ebfc194b16","sha256":"8c421b4080c183ef1aed880e63dd511d3c195e0f911a6cbe973ec81c6e402e63","sha512":"3229609cd42ee6ee366bbee1419ce8c631d5170816f7f9928bf53e72151829088167e18addfb943d883a52ca275e8b99296ff1a7969b95f8649e87c3628b5e3a","ssdeep":"","tlshash":"49900245882312635510da118554434a129c4224552985a595244ab555108614680404","size":46,"data":"","first_seen":"2023-12-08T15:36:20Z","last_seen":"2023-12-08T15:36:21Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-cdn.deviceatlas.com/dacs.js","fqdn":"cs-cdn.deviceatlas.com","domain":"deviceatlas.com","tld":"com"},"ip":{"addr":"52.58.191.183","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"610a4ab640dd5cfa6750aa2623357f51","sha1":"6f425451f0dffa8b2a418857da82c5d28e2db9e8","sha256":"fe49fc14b70cfc4f3edbc08e58087ca0f6e948a953c3eaeabdc7e78f512e5a22","sha512":"1ce2c2d9b3e89175961c1cf2798ade43e89e53cbc8c2318fdd68c96f79e162f0a81614627219b18cbd8bfe5ec2ac6af1cf5dfb5ac33daa99ff919aba139c0f25","ssdeep":"384:Fv6oZby61loUBRL0W4/y9mImAEH+T6T11+4QUbyHZKqr:Vxhy6RFowQ1+DkW","tlshash":"4fa2734871a2b89a03d322f9506f410af2bb597d246eb454c7e2dcd1be398de4133f69","size":21909,"data":"","first_seen":"2023-11-09T19:54:48Z","last_seen":"2024-08-20T20:14:31.890714Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lmbahsj2.com/scripts/sdk/everflow.js","fqdn":"www.lmbahsj2.com","domain":"lmbahsj2.com","tld":"com"},"ip":{"addr":"35.201.76.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a636b6eebf5b8e8d86fd79ce19d28fd","sha1":"1639511a82c32d506d65d737ea4c6c2d0033907d","sha256":"00bfb9da74d6c2c325c27e60fc9aea44f272cba1b072ad7b2ba4a805c3e8d555","sha512":"62609831fcc51ad6525150ff8c4a9bac7712d51b1653930deb86bc380fc905a3adfcf6d3312ab936716a8b75e90ebed8fb6cc9366b5bf68569a1cfe9d39a83bd","ssdeep":"768:BAuXnhgP01Au2IOTQpzEeIHV7xk6/NTBt0haRAe12bV/YRp3qnjcs3nATAruCf6w:RgP01Au2ITEeIHtYyxpsXjuCf6w","tlshash":"9053185c3296303643a370b0213fa50ab2ba9d95744c8454fa75cce46dbce5e9277fb8","size":61234,"data":"","first_seen":"2023-11-15T15:41:45Z","last_seen":"2024-08-20T19:28:13.020223Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-320492720","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e15cb67511eb360a6083c279210d336","sha1":"bf591fae4451caaacb9cd51e5c80da7958b3b34d","sha256":"01c8da48c092f25f31db23c09f69d9adb8c7ee6e1e7ee05544d5e1bce4d24e5c","sha512":"c748299003d184b6c7852fd38b0924d072fc70b7aa5673783108f7e3c1642a83ed3560372cdcb20edbe206a0771d35a19820d0078d30ad7756dea31df91d5b6b","ssdeep":"3072:kcdZAlCIWYVUyO1jO6ypDDMv0MWXdXAhA9DfFWkY4X:NfIHVUy4h3WtwhA9DfYq","tlshash":"9e24f7d9b383b46a82a3b474503f010bb1bb6d96f84ccc94e189c5d52eb8699417bf7c","size":211760,"data":"","first_seen":"2023-12-08T15:36:20Z","last_seen":"2023-12-08T15:36:21Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4b9aa4bd1158d2a90b163079af10fce","sha1":"f7555ee73aea2afd73b1e3a62e0b830060409efb","sha256":"1e10c7052444bdadef594f3cbc761f53daaea5e2ebd3cf803626f2339136eb88","sha512":"711c3abf1973a7cab42f81db97bd4f6c535cb387c8012aba1536bc6ccaa85b216664c2457cbf6c202c848ae8d97df897342494ca22f512a919d1a67c2f840028","ssdeep":"","tlshash":"1ce02201db526ef2460012fb787bc37a80efb189b16b8099a9c420835f5feacb000728","size":410,"data":"","first_seen":"2023-03-07T16:25:40Z","last_seen":"2026-05-05T10:22:05.18608Z","times_seen":761,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-lre.refinance.enhancedrefinow.com/main.93e3cac8409e105ab51a.js","fqdn":"static-lre.refinance.enhancedrefinow.com","domain":"enhancedrefinow.com","tld":"com"},"ip":{"addr":"104.18.5.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dec41562bede99a23e8a683bb0b2c7a7","sha1":"86106751c4e52e628127241dcf062bb1b6f08403","sha256":"8695c4e2c1b44b9e56e54ae8b5a75311ed905cfd10d262e443ab9df4312a2ac2","sha512":"9a36dd3937f4ae303145c81115a3fe878a4d394b8269a8523391adbacfdc75965decbcae7acdabfc3926c27749a386df02d9e4fc04aa00d67c268ae7c1d62a68","ssdeep":"24576:dv2xqleIFB9JvpcNiF/YIDKjEqcw1I/jEPxabzJoEbUlhu/yjxYr:dvmqleIFB9JvpcNiF/YIDKjEqcw1I/jB","tlshash":"4a05d888fea6e86c01bb446b507f191af2287f0985788810e575dddc74a4bcf753ab38","size":810885,"data":"","first_seen":"2023-11-15T15:41:45Z","last_seen":"2024-08-20T19:28:13.021812Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"aed8ad1460119edd6f3ae9e3da680f06","sha1":"3a365f816045964b7a0d15fd6fa8cafe890f0cad","sha256":"6bf537957ed6e2d65646624d1b32df206e345add7b3bda73cd786204d119f777","sha512":"b5d3b9e8a564b9c29aef1abaeb6ba6171755811a3cf64764f3a5b16ee747250cf8e282cd4dbd40186609e7a1dbb62026696773eb029b026d0716a90b0c968859","ssdeep":"","tlshash":"39a012000050e45a859bdb048b001050526401c25320078b081206184248811c141b3e","size":79,"data":"","first_seen":"2023-05-11T17:31:44Z","last_seen":"2024-09-19T20:13:27.564067Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b67dd64cff5f517bcb984779e825646a","sha1":"5859c78aceac531afac0c2e41c83075e86a22407","sha256":"e19cfc6f666ced2c792c99db05035bbd99a6b48a44bb83c848e7e910a0fde5ce","sha512":"bc2f2babb91a0f940570f44e64dfc4dccc8f3f0a61c0df26eae95895befa967d5aac6b1b23d1cc1a3c37cae63fb939ceb05eecd4b177335bb1a00f3c323c8b97","ssdeep":"","tlshash":"ebf05cadaf18a0065145982a0bafed153157704c5d03cd6a8a4fc8d85d2c777211fd8e","size":429,"data":"","first_seen":"2023-05-11T17:31:44Z","last_seen":"2024-09-19T20:13:27.557931Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8079758ba6a78d277502bd77d0d2810f","sha1":"10e90523f06ca6f3abc7781de64e8e10e907815b","sha256":"21c4c591f2f5fc722cfe3bde9f800996f9107e6ca0cc4cd813e80def50c336d8","sha512":"aa43ba5a1af6097b35dee6fa52d749a6862459eb742d70e9a3d5c1ed606f69e9ffe7d093487eb8b6b32c66abd33159256e04b779f79107513bfac841ec8332fa","ssdeep":"","tlshash":"d2e06ac135dc0270d0720575f1e34d4c3a59711cf54e1ee4df2d8084492d6d3480914c","size":380,"data":"","first_seen":"2023-05-11T17:31:45Z","last_seen":"2024-09-19T20:13:27.572031Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"883283af89b92923b7ce78ecaaeaaba6","sha1":"988fd393a2358008bbec5c9ffbd1e1bef17599ec","sha256":"d5a5210319d9ce7b18c12ba56bd37be8ebad434ec751a7cbf62ee6ceb456a569","sha512":"e7032dad238dd5387aff57bed6dc457728a04dbecaa0f774134215821c603782922e06453ff49b79ed5c7a737f7ab1fee1dbcacfe344ecefafea8eae8931df0d","ssdeep":"","tlshash":"1111cbd66a4788f04dc90e6f2129ab28b1183238f874e4a2728ccf2327c36a52846275","size":853,"data":"","first_seen":"2023-05-11T17:31:44Z","last_seen":"2024-09-19T20:13:27.56202Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"51f5d8192cd24bafc246831cc82d8299","sha1":"22ab7d0a33db6eb45f4aa19c8fd67704e6682a5d","sha256":"5fa0e3d2a47c1ddb28027ab5cf2c8ccbdf6d0b8d3c05fad9113817efd08afa4f","sha512":"94441ec15bf70cd082df803db29fc378f131dfb13c964e2038520d5164bf55e4d5d3d61edae74474cef79db5800117ff753dfbc094785f9a723c9f1875a99d80","ssdeep":"","tlshash":"b7e0617b284684341be929fd33b9df4a7b5a33901071c257bdcd44062365e93c654bec","size":417,"data":"","first_seen":"2023-03-26T13:16:58Z","last_seen":"2024-09-19T20:13:27.570894Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b968bb49597418ec6bf81800f25e4f5b","sha1":"68c16a530975b926e2ae34938af4068a2905e820","sha256":"eed94d8bc522fecac47a2ad784db6499b5b188041684272f1aa9e748157a1bb2","sha512":"a2e674504bda58db1f970a0fca24f561be67a0a10a3fa3ecfa7f5fc2215cff929bb63db9dfb0e4d7bd1e1dc7ef9dc32868f0292aa10df86f1721c9911788614d","ssdeep":"","tlshash":"0ac08cc9210a8e7186eb2f008b3fb100b002335094f11831090a23045120e07eb08860","size":153,"data":"","first_seen":"2023-03-26T13:16:58Z","last_seen":"2024-09-19T20:13:27.573805Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","fqdn":"money.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d9865a913a63ccc2c787cec0b47cbb1","sha1":"637aeafa66bdbb870170c3f1dc5bea264ca67bed","sha256":"5561b67d3c4ad6bcce4b16c9b77319cba3766b3bd172356660c9c0302d209362","sha512":"217233584c8f53eedd434d5b4ff4d63679156a16641cfcc54aa84716ccaf0a4ff6b1ff94a7e21fdf791be853e70a15a86e44fa62c31548348f8ce60f7c2dcf5a","ssdeep":"","tlshash":"9af078595ca3b13209b824352bb3e22e66a7a0273829d48435cccd0c3fb1ff30b15b48","size":599,"data":"","first_seen":"2024-08-20T16:21:52.893474Z","last_seen":"2024-08-20T16:21:52.893474Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.datadoghq-browser-agent.com/datadog-rum-v3.js","fqdn":"www.datadoghq-browser-agent.com","domain":"datadoghq-browser-agent.com","tld":"com"},"ip":{"addr":"54.230.111.221","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"647fda9a4d3d74344732d76cf1fff47c","sha1":"01720d421ce3373f1a1958a1d85edfae5ab5f442","sha256":"4375ebb4771e6dbb66555214b78781f96a3f6fc43f26b6e9acc4a4751551706b","sha512":"7a3c35cb75c6387a8c4f4359287cdad42c5722b7c1362c8189f8ef3d36f1f7642453ca830bf7b315f79947b384034d216e165b5b8b4f79a7596db760ceb86cad","ssdeep":"1536:yHOG/ZzSpabEJ1No/5612iRFDQ+0WVN83fIXDVeAr0tRoBAb3KrFgQn:wPIswXDVeA5Ab6rrn","tlshash":"2bb3e5dcf6c2b07517e33475516f260ab33a2954784a80a4e27ad1d53cb868ea237f7c","size":117677,"data":"","first_seen":"2023-03-07T13:55:13Z","last_seen":"2026-05-07T04:30:25.385517Z","times_seen":1669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-319191520","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81b5bb8bd24c0da562cfecb35cfc9c2d","sha1":"99966e6fa329a49bb9b20e6889342edaa474db62","sha256":"efdea119456ca38b17c2652aafcc0027d56006654fa31c393ddab0ea3e15f58e","sha512":"61a0e530c7a71bb3056549cac395b95e765b5ff34cae01b46f2fa783da45a43333e0754c47e1258895ad2ccbe703f22ea57a18da0fdc7a054bc946081ec1000b","ssdeep":"3072:qcdZAlCIWYVUyO1jUOypDDMv0MWXdXAhA9DfFWkY4X:3fIHVUy4f3WtwhA9DfYq","tlshash":"8924f7d9b383b46a83a3b474503f010bb1bb6d96f84ccc94e189c5d52eb8699417bf6c","size":211174,"data":"","first_seen":"2023-12-08T15:36:20Z","last_seen":"2023-12-08T15:36:20Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-320492720\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a10d0f77e45f198744f8acf3cf52b076","sha1":"6e21e1c72b1c5d702b8487c87d5503ce5638d65a","sha256":"0bd9f4988ec56677ed91ce284b3dadf83f22a86c240fde2f951e95dee1b1bc3f","sha512":"3ac83c451b169e60733e2b5055e9206af83d367548f019f14dc10eff6cfae39f2b1db6313a4cde97970ef219e068135185a28f7ed524a90742a58aed8cf6aac3","ssdeep":"3072:kcdZAlCIWYVUyO1jOSypDDMv0MWXdXAhA9DfFWk14w:NfIHVUy4/3WtwhA9DfYO","tlshash":"ba24f7d9b383b46a82a3b474503f010bb1bb6d96f84ccc94e189c5d52eb8699417bf7c","size":211790,"data":"","first_seen":"2023-12-08T15:36:20Z","last_seen":"2023-12-08T15:36:21Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script.anura.io/request.js?instance=3439535758\u0026exid=031df85b-9801-5331-badd-1ad7b5917356\u0026source=affl_everflow_qc-mon_143_259\u0026campaign=SECCAPS-A\u0026651020434517","fqdn":"script.anura.io","domain":"anura.io","tld":"io"},"ip":{"addr":"3.8.43.133","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"662177d4086a5564103a116ba871304f","sha1":"bbd47c439130274f5d1575fc7c704975fbabca31","sha256":"1e297df8900a1e063fe8af47bb1a52b29ba047b6ef848ca3a1d0d5568d0b33cb","sha512":"cd23bbdd03e978c5c995d9d72a90029bdf460eb731a09d18725891809ad39644197d2e218e6306bc714b2a40016a752861d1b82142da2d8dae3c1b18e9c0d76d","ssdeep":"768:enpbSzHCwvS0X37WBk2zwXrVglGwnqa6MQzGEVUCb8CohAWen3i:obSLNWeQorO5nqa6MQzGEVUCbGAHS","tlshash":"9a43e88a7672f001196211e9257f050ff3ba1ab9585c1080d7f5e4f5bcb4a5f8a3bb8d","size":55853,"data":"","first_seen":"2024-08-20T16:21:52.89453Z","last_seen":"2024-08-20T16:21:52.89453Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/wi/ytc.js","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.252","port":443,"asn":203220,"as":"Yahoo! UK Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c6ed25dce803fd84288922b8928409e","sha1":"3ccc10546ae12f160bacac1e9e422af091ea4a41","sha256":"480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91","sha512":"fe9265d2e6ea4acb7e0a87e08bedfaf48bcbad62bb7a86e73f9ae21c8437af3334d2a9733c6bc47a12bbf54f97ec79271cb5300f90231614f407599d1b4c05e5","ssdeep":"384:s40C/Y3uOOpp9W89rzOv4m8Avx2kjEhNgyyuek:VjOOp281UsAlErPyud","tlshash":"3982c748b3d5f0a103e2a1b1613fa90b7675193d1c6e9560b212c7843c7dacb9236f7d","size":18187,"data":"","first_seen":"2023-06-26T11:33:35Z","last_seen":"2024-08-29T17:29:21.078502Z","times_seen":6264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","fqdn":"money.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aefaa4da79f32540c4960082eb074be8","sha1":"87e2d0b546ff6c2b5ee6b5902f815b49fa4a2655","sha256":"3255edfde01430157b06339f89a3770d0a38c856de25e364f2709148e691b2b7","sha512":"dd772d16a0ff7cc2715f45f64d890a31dcbf672aa7b98ff7df51cbc57afb7d524645413cf295e9d1ae8c74609ca509e788b583c6123018212c6f334675a7de68","ssdeep":"","tlshash":"7f11fefa54de9436170366750a3f8909247b200f1caa3b91bc7c43dc3f58a7d20eba88","size":1012,"data":"","first_seen":"2023-12-04T16:37:02Z","last_seen":"2024-08-20T16:48:34.000892Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a81d387d85e55dd05dbfc30cd52bc028","sha1":"06edfc684e43599690f4ca58f9f58bbb18d8f008","sha256":"94d35cc88496407b118a1e35bfe7ce15de8c8146a5a740f5ef299cd0f650b611","sha512":"e366756043e075fb53ffca4e77c1a633a999f9c63b5c544246995815f145bf9502ef0f4c57815c3b57bab531c486499c82c306902b5176a5b682250519411973","ssdeep":"","tlshash":"cbe061fd1c98b09d2fa55935e13fe95ab34b06a650414741da46cc9c1d389774505d84","size":378,"data":"","first_seen":"2023-05-11T17:31:45Z","last_seen":"2024-08-21T08:12:54.158989Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a493268deb7794088fdef0eeb2ba1de0","sha1":"c9ab54357ed4a1f96091e4859e5e11165b383e8d","sha256":"a43f8a07c89161e2d9696f0f1bbb3875fda84f47ed8ea7fedf6ec70465251572","sha512":"8532dad4e47cbfc5ef39905f1a2c87c4354fd4b82b860348353fe398223caaa36aa7455e83b47aa6a75e1d7ef0bb6796af089aa78b8e44e5fc6c2f1f9ea19c00","ssdeep":"","tlshash":"1fd0228d150a0c31d19b1f420b7fb800a25d3225a0f014302e0a33094320907da64414","size":197,"data":"","first_seen":"2023-05-11T17:31:44Z","last_seen":"2024-09-19T20:13:27.555496Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a44325.actonservice.com/cdnr/forpci43/acton/bn/tracker/44325","fqdn":"a44325.actonservice.com","domain":"actonservice.com","tld":"com"},"ip":{"addr":"207.189.124.43","port":443,"asn":13649,"as":"ASN-VINS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bed2e43e5eb10b25eefe40693d0de4a1","sha1":"5a0acb09cf5fb693d35d2e57e815c291a335d89d","sha256":"13ce417e4b20037e99ac2621fb3bb79be4b77aaf13f00c388d40c3d32992e45f","sha512":"7981fab56e9d7ebd3eca8116001f9203959ef90cbac2deb6efecb9583345b65a928bb280a7f2e679243b0a8f46a295abbedc68f9aed3ea81665502281e6221c5","ssdeep":"96:quTE/nCwi7DVsJ5nzLwivnqLwIUXp5lTi+:JTE//I+Dw8LIq4+","tlshash":"33a1958c72bd0e21d1f33787bf7e8f8e7bfd22923459d588d45e98900665862243aa71","size":4850,"data":"","first_seen":"2023-12-08T15:36:20Z","last_seen":"2023-12-08T15:36:21Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","fqdn":"money.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"633c4221f5a0be5e88fe76b125205828","sha1":"4850fa28a3d009d906ac41bc073017616cf76932","sha256":"53dacb3a9207a3a5801bac5a2c49bb478e239b2d52f9da08709f42d8be47a646","sha512":"ebba0e7915c7b1bb100c60b1add8fc7d09ae1b6fe67a276874f0420ca3bced8925a5dfd8c0f26a2ac98d944f2750c4122ebfb116bf3bd17a0e699a1656b28e58","ssdeep":"192:81evW5IyWxhLyMXaIk2ZKsx1Tq+8gR4yMFxB74AXjhhbOEkhdZxZ+:81evoWxhmMXa30QgVMFFvyEkhdZxZ+","tlshash":"f112964f6e016d3a47572ba1396b6c28a478fb1bb180cd598c6f4d6d2df6af78423090","size":9451,"data":"","first_seen":"2024-08-20T16:21:52.897219Z","last_seen":"2024-08-20T16:21:52.897219Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-lre.refinance.enhancedrefinow.com/manifest.d7f9016d0e5da5649c5f.js","fqdn":"static-lre.refinance.enhancedrefinow.com","domain":"enhancedrefinow.com","tld":"com"},"ip":{"addr":"104.18.5.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab05865229c4be0e25398c314b00a787","sha1":"ffabd971a1d77d782aec1370f52e8f1d83769c82","sha256":"a261d93839339ffe4e77dead49be5380abb6b61fdbd67d735e01ccd17bae918f","sha512":"b3880bd9c6fa94e0e6345668dcb60f3976847aa894b7822fdb3193b2ecc3717bb90c4e981aafd82164efafa1f1ff235363802fb0f12410a752b1e2eedd76d652","ssdeep":"384:VkpQ49wHRasQ0JiPocrIkRTBymqHr2ntjw:WpQ49QTxwPocrbimqHrstjw","tlshash":"1f42d8eeb76c71b302a724e8883f5552e1732516000d84a0d611d2e6acbdbc9d57bff8","size":12636,"data":"","first_seen":"2023-11-15T15:41:45Z","last_seen":"2023-12-10T17:57:27Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-lre.refinance.enhancedrefinow.com/vendor.67a1d66e4ad0509192e9.js","fqdn":"static-lre.refinance.enhancedrefinow.com","domain":"enhancedrefinow.com","tld":"com"},"ip":{"addr":"104.18.5.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e80b2b8d6f895c55fb9aefe511479b6","sha1":"0384d450cbefee60914a876a238e95570aa1eb59","sha256":"e314c1e197eb15609d015265d6099200f7cfa6cb952e71af9fe891251570d67d","sha512":"b338dade93d0104b7932a05a0cb91fd254e16bda3d956f8504344e7a0791c0259a102eaf0cf13f1eb0129d642e7d16decaf44bc55393f245c7a50e8102f5404f","ssdeep":"12288:bBkPWgIESgLXkbjiagUk2HhVXneTUnny3wtIXxnGMPGTqZ0iZbsosu:1wWg5SgLUbjiagU4Uy80xn/QqSiyon","tlshash":"bed419c87292f0a143e350e6403f4406f23a6a29744e9994f3a5edd67cb994f607bf78","size":618569,"data":"","first_seen":"2023-08-24T15:19:24Z","last_seen":"2024-08-21T08:12:54.152414Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d07d98b97154701a99faef3fa639fb02","sha1":"1e79f33e4ac6e24c09350babd9a65a70debc7a5b","sha256":"517d26aac757304b7e1461562acad2c6b49585ed2e7be78d197e11a39763d555","sha512":"e3b06e9e2430b42088c669ef914c5013a81294aeb3efbca422adde6d06fc5dc489c0b990fe7aa706017aa1edefdc6bef1bdd34781c8fcc9021ef50d62fecf2c3","ssdeep":"","tlshash":"aea02288c002302082232bf02ccb08ec0c300030a0003080ec0880c088b030f080beec","size":64,"data":"","first_seen":"2023-03-26T08:07:59Z","last_seen":"2026-02-03T00:41:02.712261Z","times_seen":659,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f373025d049c1b35741d7d875ddc6b0","sha1":"a486f147997b72143ddb50c3e889b62b843802fa","sha256":"c10f0e610812f22aa3cf23610f64b0cf2c2efee9fccdf794435aaa47f4549093","sha512":"30c8bffb530f8750af29aac1338cb158cbedc9fe6193f5d94b0f366fa9e9c1a80d873c880776b51cc52b3c99da02ae9d366632a6fd81b42a820f812472cc0fe8","ssdeep":"","tlshash":"59c080907884f772f5f44f6c2e6735e775027021d1501f3953f917d419eb047615055a","size":165,"data":"","first_seen":"2023-03-26T13:16:58Z","last_seen":"2024-09-19T20:13:27.561463Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ca2d5159edcf9d277c901fc61767337","sha1":"324ae4f0e4d6e89adbb0d38ccf6e1304fe3eece2","sha256":"5cd314022e7dfc4f88f29e1e9749888925460c8d37cfa9379ca161cfbbe37aeb","sha512":"8cc4e1abe2f3d7573e04a76ea8551cb0cc8fb9528097f824b134279a2aa8d5062e16b72f0e1a34185357250065e197b42578d49818e8631d4cc046d572d10170","ssdeep":"","tlshash":"75f0e2c6e84be1d308694e03662cec3547eeaf30757b71826a1cf21d06be5a907814f5","size":458,"data":"","first_seen":"2023-05-11T17:31:45Z","last_seen":"2024-09-19T20:13:27.5678Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/320492720/?random=1702046169322\u0026cv=11\u0026fst=1702046169322\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be3bt0\u0026gcd=11l1l1l1l1\u0026dma_cps=sypham\u0026dma=1\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_259%26pkey1%3D259%26pkey2%3DSECCAPS-A%26pkey3%3D92bc792a678d4d3aac6777601f10fd8b%26pkey%3D%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D259%26_ef_transaction_id%3D92bc792a678d4d3aac6777601f10fd8b\u0026label=xSwBCJum9PsCELCp6ZgB\u0026hn=www.google.com\u0026frm=0\u0026tiba=QuickenCompare%20Money%20-%20QUESTIONS\u0026gtm_ee=1\u0026auid=1264768823.1702046169\u0026data=event%3Dconversion\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026rfmt=3\u0026fmt=4","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad8b6f08655797587cdec719a94efe59","sha1":"182adf5a140796f81e930649d05654dbf22fd5b7","sha256":"77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6","sha512":"519a8ea7ce2ed8661cc72d58bc0c02e721ef8e64608f4d2e26a56a970d43ebbf21bdf579c543ee1dfd667da8f87467c60111a3e6d246d435a5c2d066ab88efa3","ssdeep":"","tlshash":"0890045d30d14535cc3fd0355105157150f501075c5f117c1430430035115434c000f3","size":43,"data":"","first_seen":"2023-03-07T01:03:30Z","last_seen":"2026-05-02T15:05:55.10961Z","times_seen":10172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"18f6c5915df0ee9e990a9ed34e7e4c9e","sha1":"12ca6d04aca4a6c2d3c35d7bb3e0b17ee2b40eaf","sha256":"8a68328caf368d532d46b3f92810fc12cca5aa75b37860bd64de60c540ad8844","sha512":"6799e84485b804fa66b1aa37ebd1dd056dcc2693706a425419aa99ced9cbc87ba0500f2a3bf01dd5bd2fffa722f8f151b13dbebaeab8af5b46accc76aa73626d","ssdeep":"","tlshash":"a6a011888c02b0a082232ae028eae8ac08a02020a000a080e88888800aa038a0c0bea8","size":81,"data":"","first_seen":"2023-03-26T08:07:59Z","last_seen":"2026-02-03T00:41:02.728641Z","times_seen":661,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0efa13d18e21e1c280569064dccd2d9f","sha1":"0656901371cc259791bd253dc8835dc44b0575fd","sha256":"69eb3111ab6500088bcc0f5cb043f452bd7b7801bdcd7b0e478c2fc454fdba0a","sha512":"c2a8b7bd626179f2de81621b288bdcd7bce4f06a9511031f0fb9786650bcf5cb7af87539efcc195964f038788d84fc4bc77c00df6317048d38db8eb715a31210","ssdeep":"","tlshash":"1240000000000000000030c0000000000000000000000c000300000000000000000000","size":7,"data":"","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-05-07T10:57:34.054153Z","times_seen":100335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"bc1d3a136e6f54eff73adaf5669b9be3","sha1":"1a0f53998a4dd4c3f5e9a6fbadc64d21046d1295","sha256":"9aabfd165cfb96fc5e170862e4fd9c90cfa2a5705af401617c836f152398fce1","sha512":"8ee80ff0951e9ad9d691b55512e6260db1cca513173006de59376f7efe72e57f07b231591e456ff9a25fab549e113f03af2c3cc70fed354d03cf503f4e4bbfb4","ssdeep":"","tlshash":"184000000000000000300000000000000000030000000000000000000000000c0030c0","size":6,"data":"","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-05-07T10:57:34.055188Z","times_seen":100378,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a0bf95a38cb701564c34134431943259","sha1":"0187395c6d7697a45f0464905d967396748b2194","sha256":"124207d84bdc8a107cbcc04212a091e85157e09d7bf208f7afb4839498fef083","sha512":"d5060e5b2d8370e3c8ec336f5b957d73d4dfe43e55244e46bb32d1060dddb7023d1aa46bc3561ba86146035200748360eb19b7852038ef2bec925f39d3313310","ssdeep":"","tlshash":"804000000000000000300000000300c00000000000000000000000000000000c0030cc","size":7,"data":"","first_seen":"2023-03-07T12:56:09Z","last_seen":"2026-05-07T10:57:34.063059Z","times_seen":100256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"308065b5078a49f986fc3c9f9b66e5d3","sha1":"be1628c3c7d88ddfb243f216545e780b98cc4386","sha256":"fdfe0993e6e9e9917554bb95b1137af5870146fd38da5f13bea1b530ac05b296","sha512":"7c55327b79cd297b8b6984212dedc5066f88a06d4ab528bd982ea2fdb6f55468c6cd77fc9b27ab12346123b6c84aa573a8719eb4e3435bd01847fe20790a3f1c","ssdeep":"","tlshash":"214000c03000000000000c000cc00300000000000000000000c00030000030c0c00000","size":7,"data":"","first_seen":"2023-03-07T12:56:09Z","last_seen":"2026-05-07T10:57:34.057371Z","times_seen":105356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"166248a6129a1e4370d20adc2d4c23f3","sha1":"0fe0bb445f51fad57f3fc4115d7c66cf18545107","sha256":"b7d082ee12e91b756ea22e8513b8594eebcf5d39fab813da3cb55794dc888ad7","sha512":"ec7f23faf755a87ffa0e75a4cb03a07f23768e9691d7965d0fc060797aabdeaba450df5c416656b1fe6f68ec9360a43e4d3190b7059a82a77acf5b54012a4c11","ssdeep":"","tlshash":"5e4000c000000000000000000cc00000000000000000000000c0003000000000c00000","size":6,"data":"","first_seen":"2023-03-07T12:56:09Z","last_seen":"2026-05-07T11:05:55.555599Z","times_seen":105046,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"babd0daf38a8ba8a6c33c4d1d354eb56","sha1":"c64904f4f0bdb995912fdd1667d538cff4dee6e2","sha256":"ce519cccc38cf22bd82579910ddfdcb00f5726373dae5af87048b157303e8f27","sha512":"0c92e118e967aa1aa38876eb0d13f1864b4e9b6205673454ba516e6a5ef56307e8f08d74a076290c8201f35818c8b43f6dafcb7b7e8ce293e4a2166c0ee7a8d5","ssdeep":"","tlshash":"d64000030000000300000000000030000000000000000c000000000000000000000000","size":6,"data":"","first_seen":"2023-03-07T12:56:09Z","last_seen":"2026-05-07T10:57:34.064126Z","times_seen":100239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"http","addr":"ocsp.starfieldtech.com/","fqdn":"ocsp.starfieldtech.com","domain":"starfieldtech.com","tld":"com"},"ip":{"addr":"192.124.249.24","port":0,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-12-08T14:36:04.722523996Z","timestamp":1702046164722,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.starfieldtech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 76\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Sucuri/Cloudproxy\r\nDate: Fri, 08 Dec 2023 14:35:57 GMT\r\nContent-Type: application/ocsp-response\r\nContent-Length: 2149\r\nConnection: keep-alive\r\nX-Sucuri-ID: 15024\r\nContent-Transfer-Encoding: Binary\r\nCache-Control: public, no-transform, must-revalidate\r\nLast-Modified: Fri, 08 Dec 2023 07:58:17 GMT\r\nExpires: Sat, 09 Dec 2023 07:58:17 GMT\r\nETag: \"b4fd4f392378cfc7750c82f8e820a47b8b0e7416\"\r\nP3P: CP=\"IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA\"\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":2149,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"81524bf8c38f6d7590f9a035187264d5","sha1":"b4fd4f392378cfc7750c82f8e820a47b8b0e7416","sha256":"bcba702d34b4addaf917a58f33b9b9f0ef0bfc98ddbf33b105bbc8ad5e746087","sha512":"e13d7b81c310c78dd1c792e76890ee7ada363f2df01d37655eddecf4016e676281edca289b7dbc27b5070b300806d6a3e1ded78a3bf77a5b56baa038329d5368","ssdeep":"","tlshash":"6541e7d66b84ab519ac71e583be1c32e8fb801a196741840a4e2c751b8d13bf2cde00d","first_seen":"2023-12-08T15:36:20Z","last_seen":"2023-12-08T15:36:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lmbahsj2.com/DQ7MW8/83KB7S/?source_id=EGM\u0026sub1=SECCAPS-A","fqdn":"www.lmbahsj2.com","domain":"lmbahsj2.com","tld":"com"},"ip":{"addr":"35.201.76.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-08T14:36:04.581Z","timestamp":1702046164581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmbahsj2.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 28 Apr 2023 21:05:02 GMT","end":"Mon, 13 May 2024 15:10:13 GMT"},"fingerprint":{"sha1":"19:8A:1C:6D:15:5F:1E:82:A2:B6:F3:E1:A8:82:E4:C5:EE:3C:46:53","sha256":"AD:07:6F:39:EC:9D:DE:5D:01:AE:9F:A4:29:CF:11:44:D6:CD:26:E9:F1:14:4B:91:B7:6B:00:EE:F0:19:48:D4"}}},"request":{"raw":"GET /DQ7MW8/83KB7S/?source_id=EGM\u0026sub1=SECCAPS-A HTTP/1.1\r\nHost: www.lmbahsj2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Fri, 08 Dec 2023 14:35:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 316\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model\r\nlocation: https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b\r\nset-cookie: uniqueClick_83KB7S=38544cc0-c64d-4915-83f5-57fba02ff3d6:1702046158; Path=/; Expires=Sat, 09 Dec 2023 14:35:58 GMT; Secure; SameSite=None\ntransaction_id=92bc792a678d4d3aac6777601f10fd8b; Path=/; Expires=Thu, 07 Mar 2024 14:35:58 GMT; Secure; SameSite=None\r\nvary: Origin\r\nx-eflow-request-id: c196deea-ca6e-4e8c-b416-80e0cd8dd794\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":316,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (314)","md5":"013c61b38b142a9d3fcc1fc4cdcca88f","sha1":"91299edec5e2554edeb3747a4357c1e9b611a2b1","sha256":"10e216a345fe75e4df8998fb445ea6acf48adb74f4f19365db8f4aa3847b0729","sha512":"fc4f0189aa1b2f9e25d20f0f4f7c1ab9f1c8f11a9eb0857377518abb4bddb617f25b92bb21bcf3f414a21762ea1292d6e0df2c2502cda4ae9ccf767caf1533f5","ssdeep":"","tlshash":"71e072a62007ce56823857c1961285c8f9cb46c03682c088b38a1f698fb02abb48083d","first_seen":"2023-12-08T15:36:20Z","last_seen":"2023-12-08T15:36:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":188,"dns":6,"connect":8,"send":0,"wait":132,"receive":1,"ssl":188},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.starfieldtech.com/","fqdn":"ocsp.starfieldtech.com","domain":"starfieldtech.com","tld":"com"},"ip":{"addr":"192.124.249.23","port":0,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-12-08T14:36:05.018703794Z","timestamp":1702046165018,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.starfieldtech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 76\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Sucuri/Cloudproxy\r\nDate: Fri, 08 Dec 2023 14:35:58 GMT\r\nContent-Type: application/ocsp-response\r\nContent-Length: 2149\r\nConnection: keep-alive\r\nX-Sucuri-ID: 15023\r\nContent-Transfer-Encoding: Binary\r\nCache-Control: public, no-transform, must-revalidate\r\nLast-Modified: Fri, 08 Dec 2023 07:58:17 GMT\r\nExpires: Sat, 09 Dec 2023 07:58:17 GMT\r\nETag: \"b4fd4f392378cfc7750c82f8e820a47b8b0e7416\"\r\nP3P: CP=\"IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA\"\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":2149,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"81524bf8c38f6d7590f9a035187264d5","sha1":"b4fd4f392378cfc7750c82f8e820a47b8b0e7416","sha256":"bcba702d34b4addaf917a58f33b9b9f0ef0bfc98ddbf33b105bbc8ad5e746087","sha512":"e13d7b81c310c78dd1c792e76890ee7ada363f2df01d37655eddecf4016e676281edca289b7dbc27b5070b300806d6a3e1ded78a3bf77a5b56baa038329d5368","ssdeep":"","tlshash":"6541e7d66b84ab519ac71e583be1c32e8fb801a196741840a4e2c751b8d13bf2cde00d","first_seen":"2023-12-08T15:36:20Z","last_seen":"2023-12-08T15:36:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.refinance.quickenloans.com/msql/Testimonial_Stars_-_LMB_LRE_FNL_00015.png","fqdn":"content.refinance.quickenloans.com","domain":"quickenloans.com","tld":"com"},"ip":{"addr":"104.18.13.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:06.607Z","timestamp":1702046166607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"refinance.quickenloans.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 20 Nov 2023 00:00:00 GMT","end":"Tue, 19 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"1C:BA:47:A1:B9:5E:06:39:AC:47:A6:A8:49:17:24:B4:31:E4:F0:75","sha256":"75:C6:28:5D:01:29:B5:C7:7D:AA:CF:40:BB:D8:D9:85:2F:F5:FA:F2:30:2E:C3:70:CD:A1:58:86:C7:85:37:1E"}}},"request":{"raw":"GET /msql/Testimonial_Stars_-_LMB_LRE_FNL_00015.png HTTP/1.1\r\nHost: content.refinance.quickenloans.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Dec 2023 14:36:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 551\r\nlast-modified: Fri, 17 Nov 2023 05:34:25 GMT\r\nx-amz-server-side-encryption: AES256\r\netag: \"90732fd581b4624530c995d70d3f17a8\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a52c33748955378f279062b7fc7ef91e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN54-C1\r\nx-amz-cf-id: bs_FMuQrXpr4E6RFzDrM-xp7z-EnND8iJht3e1YQEgYSxE7PQx6mdQ==\r\ncf-cache-status: REVALIDATED\r\nexpires: Fri, 08 Dec 2023 18:36:00 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=YAJLybJY7.JbO0yx2AfSt7yPIuT8XX0ZOPaiyamD1eA-1702046160-0-AeY6rfvaL8x4H/Bz5zvVl25WsOyYnfy6L8JKo2tp7lw889QT/oJq9AkaJ0EJYgK/7NouKI/9g19oCcsqYwVucSA=; path=/; expires=Fri, 08-Dec-23 15:06:00 GMT; domain=.refinance.quickenloans.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 8325bcf3a8b856c0-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 20, 8-bit/color RGBA, non-interlaced\\012- data","md5":"90732fd581b4624530c995d70d3f17a8","sha1":"6704549936ece70f840129dcca57a5e56ff0cac5","sha256":"8bda4c30752b1529c25cf00cc9049534a89ad2428ed35c5000038ea81a08be6a","sha512":"19ceeedea5ca7ad8aec33b01982ff41400e2a12728a590f0c766d61947634b570c844ed2d7548c20622e7de4c56e3f05b8ed4f9833e96bf34e1036ef9b1a2a96","ssdeep":"","tlshash":"41f026b6ba1525d9d5114db2f385b83641788e53f71537c01638e137445e15f16c31ce","first_seen":"2023-04-11T15:03:55Z","last_seen":"2026-05-03T04:09:17.511896Z","times_seen":731,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":54,"dns":30,"connect":1,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/msd8xng.css","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.76.122","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:06.602Z","timestamp":1702046166602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 21 Sep 2023 00:00:00 GMT","end":"Mon, 21 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"42:82:CA:A5:EA:30:8F:60:60:37:2D:24:17:3D:52:62:54:D7:03:5B","sha256":"EF:DB:6C:82:0F:DB:74:FB:4D:DD:04:C5:A2:FF:1B:28:A6:BE:61:EE:CF:AF:10:A2:F7:9F:30:8F:71:44:61:29"}}},"request":{"raw":"GET /msd8xng.css HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css;charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\ncache-control: private, max-age=600, stale-while-revalidate=604800\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\ncontent-length: 680\r\ndate: Fri, 08 Dec 2023 14:36:00 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":680,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (516)","md5":"20203a97a8fb7c1ce2353ecc67ea540d","sha1":"69dd242bcc9927260938d83c99e59453871ebba4","sha256":"56af1865c3c674da77191c0c3f9c9a01789e64b2851675d878cb03b5bc57a353","sha512":"5ecc2c7f8983c2286d7ae2d84a8ef698c84fe7689939d12ca81e1f4a46aad15ca1758f8d3d42a47bf7de515eb426ec4786d57d7322d0fc2672aba7efb02d3118","ssdeep":"","tlshash":"df51afb181458ca3c4d01a72348eb3e4d52e755a36f0d9a64521c8b28c79ef7b311f7a","first_seen":"2023-05-11T17:31:45Z","last_seen":"2024-08-21T08:12:54.094891Z","times_seen":110,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":92,"dns":53,"connect":1,"send":0,"wait":140,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs-cdn.deviceatlas.com/dacs.js","fqdn":"cs-cdn.deviceatlas.com","domain":"deviceatlas.com","tld":"com"},"ip":{"addr":"52.58.191.183","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:06.599Z","timestamp":1702046166599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.deviceatlas.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 04 Mar 2023 07:26:21 GMT","end":"Thu, 04 Apr 2024 07:26:21 GMT"},"fingerprint":{"sha1":"24:8E:6E:64:30:97:51:E1:A5:07:DB:42:13:5B:15:27:BA:6F:10:C2","sha256":"B6:21:D9:9E:00:D9:34:1E:FF:B5:02:F1:FB:0F:18:CD:DF:28:34:C6:B2:E3:66:0E:C1:AE:0A:FB:2E:B7:25:02"}}},"request":{"raw":"GET /dacs.js HTTP/1.1\r\nHost: cs-cdn.deviceatlas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.17.9\r\ndate: Fri, 08 Dec 2023 14:36:00 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 21909\r\nlast-modified: Thu, 09 Nov 2023 13:50:26 GMT\r\netag: \"610a4ab640dd5cfa6750aa2623357f51\"\r\nexpires: Fri, 08 Dec 2023 14:35:59 GMT\r\ncache-control: no-cache\r\nx-cache: HIT\r\naccept-ch: DPR,Width,Viewport-Width,Viewport-Height,Device-Memory,RTT,Downlink,ECT,Lang,Sec-CH-DPR,Sec-CH-Width,Sec-CH-Viewport-Width,Sec-CH-Viewport-Height,Sec-CH-Device-Memory,Sec-CH-RTT,Sec-CH-Downlink,Sec-CH-ECT,Sec-CH-Lang,Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Bitness,Sec-CH-UA-WoW64,Sec-CH-Prefers-Reduced-Motion,Sec-CH-Prefers-Reduced-Transparency,Sec-CH-Prefers-Contrast,Sec-CH-Forced-Colors,Sec-CH-Prefers-Color-Scheme,Sec-CH-Prefers-Reduced-Data\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21909,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (21816)","md5":"610a4ab640dd5cfa6750aa2623357f51","sha1":"6f425451f0dffa8b2a418857da82c5d28e2db9e8","sha256":"fe49fc14b70cfc4f3edbc08e58087ca0f6e948a953c3eaeabdc7e78f512e5a22","sha512":"1ce2c2d9b3e89175961c1cf2798ade43e89e53cbc8c2318fdd68c96f79e162f0a81614627219b18cbd8bfe5ec2ac6af1cf5dfb5ac33daa99ff919aba139c0f25","ssdeep":"384:Fv6oZby61loUBRL0W4/y9mImAEH+T6T11+4QUbyHZKqr:Vxhy6RFowQ1+DkW","tlshash":"4fa2734871a2b89a03d322f9506f410af2bb597d246eb454c7e2dcd1be398de4133f69","first_seen":"2023-11-09T19:54:48Z","last_seen":"2024-08-20T20:14:31.890714Z","times_seen":38,"resource_available":true,"data":null}},"time_used":613,"timings":{"blocked":271,"dns":32,"connect":28,"send":0,"wait":54,"receive":5,"ssl":217},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-lre.refinance.enhancedrefinow.com/vendor.67a1d66e4ad0509192e9.js","fqdn":"static-lre.refinance.enhancedrefinow.com","domain":"enhancedrefinow.com","tld":"com"},"ip":{"addr":"104.18.5.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:06.690Z","timestamp":1702046166690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"enhancedrefinow.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 03 Mar 2023 00:00:00 GMT","end":"Fri, 01 Mar 2024 23:59:59 GMT"},"fingerprint":{"sha1":"CC:38:9A:93:4C:BD:74:FE:30:18:77:1F:80:24:AF:9E:02:FA:AB:56","sha256":"13:EE:41:7B:75:D4:1E:7D:00:43:FB:5F:7A:4F:92:8A:15:67:F5:DE:3C:88:12:3A:5F:B3:2C:4C:1B:9F:50:E3"}}},"request":{"raw":"GET /vendor.67a1d66e4ad0509192e9.js HTTP/1.1\r\nHost: static-lre.refinance.enhancedrefinow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Dec 2023 14:36:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Nov 2023 10:47:04 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\netag: W/\"0e80b2b8d6f895c55fb9aefe511479b6\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5a96272b81254403ef5ef083d36ce62a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN54-C1\r\nx-amz-cf-id: VEL_ZSoR_Lsi5mfBiIbZUYwyJ8gM1-0s3fly79AqbuPeB9p5H3tAVA==\r\ncf-cache-status: REVALIDATED\r\nexpires: Fri, 08 Dec 2023 18:36:00 GMT\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=Omb0xUvu.P8YpTmWJ1R5NKL8rkUzVjfTJdK.YaSrDQw-1702046160-0-AXtW0l7qDRM1KRdpWdaYzCdkUQ82mGE/9MZZ6f9vUswq+2XEjVzVOTpbLxU+SqWuSoM9FjbPJE7MWIyoEsVPj1s=; path=/; expires=Fri, 08-Dec-23 15:06:00 GMT; domain=.enhancedrefinow.com; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 8325bcf3dc5d56c9-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":197336,"size_decoded":0,"mime_type":"application/javascript","magic":"gzip compressed data, from Unix\\012- data","md5":"af6349f4c32ba3c91c24c427bdbacbc0","sha1":"1563256da36c7ad66418d765be98421750d4d447","sha256":"d94ea0bc30d8e1ccbba258dcf282ae1db1071795b3caf38903c8b4cb577db1bb","sha512":"319a73eb37945ff87650ecb60e24340e7a538816cca6dc17fe852b2a9d42196d319726cead041574030332b230149bc637580454c77200c00f22937494641973","ssdeep":"6144:awCBSMUsfn+P+EX1Et2VEBvIHbeydr0JI1UN6:fCsg2TX1m2mvvPJw5","tlshash":"2a142392fa7746a60b2aea990c6c3d94d8daec610d33e3fb5e2858295f0004bf5dc075","first_seen":"2023-12-07T21:17:59Z","last_seen":"2023-12-08T15:36:20Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.quickencompare.com/qc/refi-images/QC-Logo.png","fqdn":"content.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:06.603Z","timestamp":1702046166603,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 20 Feb 2023 00:00:00 GMT","end":"Tue, 20 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:4F:F5:9D:CC:0B:84:6F:19:29:53:3F:57:FA:AF:13:47:78:8C:D4","sha256":"AB:B5:03:98:D9:CB:8B:0F:D6:E0:7B:F4:85:30:EE:45:1C:DE:9E:CE:18:AA:55:47:24:90:A1:18:E4:40:03:EC"}}},"request":{"raw":"GET /qc/refi-images/QC-Logo.png HTTP/1.1\r\nHost: content.quickencompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visitorId=976d9683-a360-401d-9aa2-6e62aa115154; __cf_bm=nReyGEUG_FM4juS9cJzu463S.6anTSx8yoCus4yrZZw-1702046159-0-ARJmq5htPamGHqacCiA9bHma8kCMehsPbAIi37DTkE7hwAewu5QoVemc7y4DY6/FeAb8lRDC/i/gCzNpKM+hxrQ=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Dec 2023 14:36:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 58295\r\nlast-modified: Thu, 23 Nov 2023 14:00:50 GMT\r\nx-amz-server-side-encryption: AES256\r\netag: \"521752a26258e4864b241e2d53ffe6fb\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 660625642e0df86c41275db1ce1ac922.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN54-C1\r\nx-amz-cf-id: U8pU3G3HW7WBe2VyT8NlgJNZtgvXi-MtAZmVk3BVW5dxeJihjEpY1A==\r\ncf-cache-status: REVALIDATED\r\nexpires: Fri, 08 Dec 2023 18:36:00 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 8325bcf3aa220afe-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":58295,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1084 x 400, 8-bit/color RGBA, non-interlaced\\012- data","md5":"521752a26258e4864b241e2d53ffe6fb","sha1":"197a15424a4f1def49ad620d2e5efc5fc1629829","sha256":"c361b0d16f182441c533ead38d28a79b93c42473cfb5fbd0f5eebc2e64ea18a5","sha512":"3c702828cd5706dd43706e23fe32115bbce5a79054420bfb03fc0b75d98436e2e21dd0fbbdbcd13267304a81d9468328083b2a3a2c59daf89aa2188cc28ae66b","ssdeep":"","tlshash":"","first_seen":"2023-06-10T03:48:43Z","last_seen":"2023-12-08T15:36:20Z","times_seen":12,"resource_available":false,"data":null}},"time_used":798,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":733,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.quickencompare.com/nmn/logo/qc-financial-control.png","fqdn":"content.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:06.608Z","timestamp":1702046166608,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 20 Feb 2023 00:00:00 GMT","end":"Tue, 20 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:4F:F5:9D:CC:0B:84:6F:19:29:53:3F:57:FA:AF:13:47:78:8C:D4","sha256":"AB:B5:03:98:D9:CB:8B:0F:D6:E0:7B:F4:85:30:EE:45:1C:DE:9E:CE:18:AA:55:47:24:90:A1:18:E4:40:03:EC"}}},"request":{"raw":"GET /nmn/logo/qc-financial-control.png HTTP/1.1\r\nHost: content.quickencompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visitorId=976d9683-a360-401d-9aa2-6e62aa115154; __cf_bm=nReyGEUG_FM4juS9cJzu463S.6anTSx8yoCus4yrZZw-1702046159-0-ARJmq5htPamGHqacCiA9bHma8kCMehsPbAIi37DTkE7hwAewu5QoVemc7y4DY6/FeAb8lRDC/i/gCzNpKM+hxrQ=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Dec 2023 14:36:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 12630\r\nlast-modified: Thu, 23 Nov 2023 14:00:50 GMT\r\nx-amz-server-side-encryption: AES256\r\netag: \"d9164fb30114b13fdb91bd8011b5f71b\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 7f7d86a250c539fe4431535882cf4e4e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN54-C1\r\nx-amz-cf-id: zfxTiOIo3IJzwm1cRVtMH4HPWz4K38uiW_ZFnPNXB5Nj7-eBTUyoLQ==\r\ncf-cache-status: REVALIDATED\r\nexpires: Fri, 08 Dec 2023 18:36:00 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 8325bcf3aa1f0afe-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12630,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 281 x 168, 8-bit/color RGBA, non-interlaced\\012- data","md5":"d9164fb30114b13fdb91bd8011b5f71b","sha1":"45307fb107b9e0ec642b98d3b2153467cb00b633","sha256":"442b0856c633c8a41e1566de5aea94873cfa27b85e74e2fb2df4c92b55ab5608","sha512":"3d8cace0608ee48a4b21e3311988aaaac71637cddc8d60b607488b44f47bcf8e17a677954c12e36315f06f32151f1f32706e97839a0d5f8ed366869975066aa4","ssdeep":"384:aw8GzUBaH/MppKTmz+r8qOTauDy1EIXWHEi:L82UBBpKy69OOuDlB","tlshash":"c442c03d602391a71852954be04f024e7d9c3dc00866de93603cfad9d754b37de8a42f","first_seen":"2023-05-11T17:31:45Z","last_seen":"2025-10-23T19:43:06.15733Z","times_seen":128,"resource_available":false,"data":null}},"time_used":795,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":739,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/af/5066eb/00000000000000007735fdbb/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191\u0026fvd=n7\u0026v=3","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.76.122","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:08.573Z","timestamp":1702046168573,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 21 Sep 2023 00:00:00 GMT","end":"Mon, 21 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"42:82:CA:A5:EA:30:8F:60:60:37:2D:24:17:3D:52:62:54:D7:03:5B","sha256":"EF:DB:6C:82:0F:DB:74:FB:4D:DD:04:C5:A2:FF:1B:28:A6:BE:61:EE:CF:AF:10:A2:F7:9F:30:8F:71:44:61:29"}}},"request":{"raw":"GET /af/5066eb/00000000000000007735fdbb/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191\u0026fvd=n7\u0026v=3 HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.typekit.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/font-woff2\r\ncontent-length: 10552\r\netag: \"3ffc31f2c2e0e0a0bd3e7a4f831f835ccfabcbde\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000\r\ndate: Fri, 08 Dec 2023 14:36:01 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10552,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10552, version 1.0\\012- data","md5":"dfd4158df5a1e052abac4fbd93e09fb1","sha1":"9db6d016f4c8b240634f9334ec8c11b27a8926fd","sha256":"d3a3bb6d91875a850f5ab1dd85446084933aefde6a0c183689ce585e568f4ee3","sha512":"cb4ce36e0b6794a951140a38fc53b4e437a592380bdfbed42ae6dab6b11eac1f6e793cd698594d37e938b09d9c5867db438c182a7fd7b1b05b68cf99b21d11f3","ssdeep":"192:N4x/o7CCRPCHJnkaehoS7SvoZBeuFkzvuS/peVuSWRbiqL7uU6Tg:6xg7C0inkt7KIe0kzvu/VulZL7uvTg","tlshash":"b522bfe0ccf9052e1916d8beac100b795fefad4be960a353549c34763fe210eae60525","first_seen":"2023-04-05T14:55:04Z","last_seen":"2026-05-06T11:42:11.450046Z","times_seen":263,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":31,"dns":5,"connect":1,"send":0,"wait":2,"receive":1,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/af/bf384f/00000000000000007735fdb7/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191\u0026fvd=n5\u0026v=3","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.76.122","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:08.569Z","timestamp":1702046168569,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 21 Sep 2023 00:00:00 GMT","end":"Mon, 21 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"42:82:CA:A5:EA:30:8F:60:60:37:2D:24:17:3D:52:62:54:D7:03:5B","sha256":"EF:DB:6C:82:0F:DB:74:FB:4D:DD:04:C5:A2:FF:1B:28:A6:BE:61:EE:CF:AF:10:A2:F7:9F:30:8F:71:44:61:29"}}},"request":{"raw":"GET /af/bf384f/00000000000000007735fdb7/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191\u0026fvd=n5\u0026v=3 HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.typekit.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/font-woff2\r\ncontent-length: 10520\r\netag: \"2be4f5725e5a1282789d7f7270687fcf4d372bef\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000\r\ndate: Fri, 08 Dec 2023 14:36:01 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10520,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10520, version 1.0\\012- data","md5":"9c062dccf131a3086c8150e06794fe67","sha1":"0030407cafb86d8e591e93904d1c070c3b9c08ae","sha256":"19aefb2c51bd12339798e6877c1317ca2edd1ccf827b9cddb622dc094031a8f0","sha512":"601d6096ddeeea04e2b9c9924ec14cff59e75ca20779c201ee7d31c948da7f641c5966fd5a944d1d0391a6d02cc556aa12ba88be216f6f405c79c28e631b19eb","ssdeep":"192:zVA1dTm3812fFPkSTAmC8jaPqepKXcA/VV7KWnCPrhp0Z702fkJ4sd86:y7TS/smjjfyAcANV+ySPa702ZsF","tlshash":"7622d0a1e293c354dd53dab94806073b0d6218fb3ff896837d3cec6a9b011a9308f916","first_seen":"2023-05-11T17:31:45Z","last_seen":"2026-05-03T04:17:18.124251Z","times_seen":138,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":37,"dns":5,"connect":0,"send":0,"wait":2,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/af/070c63/00000000000000007735fdb6/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191\u0026fvd=n3\u0026v=3","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.76.122","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:08.571Z","timestamp":1702046168571,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 21 Sep 2023 00:00:00 GMT","end":"Mon, 21 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"42:82:CA:A5:EA:30:8F:60:60:37:2D:24:17:3D:52:62:54:D7:03:5B","sha256":"EF:DB:6C:82:0F:DB:74:FB:4D:DD:04:C5:A2:FF:1B:28:A6:BE:61:EE:CF:AF:10:A2:F7:9F:30:8F:71:44:61:29"}}},"request":{"raw":"GET /af/070c63/00000000000000007735fdb6/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191\u0026fvd=n3\u0026v=3 HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.typekit.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/font-woff2\r\ncontent-length: 10888\r\netag: \"b7140404e35689beadfbc7c2c96a907cf5aaa352\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000\r\ndate: Fri, 08 Dec 2023 14:36:01 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10888,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10888, version 1.0\\012- data","md5":"865a9070be41e8b5d8258be1bf57cab1","sha1":"2f7e1a72d4897a263394a4f07892c9389b954212","sha256":"eaa07ae8e4a20bddf808a50bb9e635664a986e2878e458899442b156c7a49e50","sha512":"37eb2caaaad497fcfc70c83ebd0dd59955172ffd95d76deb8a83ba50d2ef08fe6ad63de2db46c1e9976e1189cae8075f3be84248044aa2e87704e555aa618d2f","ssdeep":"192:In/AE7PDf1AO+v2OMDGSaIYCi7ycIYi0YV3au7Uuva0JM/xdXCW0tr/u2vMqJOun:ORPDdl+5MSZIYCiW9QufvRJCCW0U2vX","tlshash":"0122bf008b337634d3f41e36b09ed22fc36c596e34d1aeff5892756ed44492a4568a73","first_seen":"2023-05-11T17:31:45Z","last_seen":"2026-05-05T00:54:47.182073Z","times_seen":58,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":38,"dns":4,"connect":3,"send":0,"wait":4,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:08.565Z","timestamp":1702046168565,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"E5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD","sha256":"EF:BD:DB:F8:2A:77:8C:C2:9E:F9:E0:B2:26:39:CB:EC:63:F1:80:36:F6:06:6E:F5:E1:6C:45:66:A4:D1:A6:C8"}}},"request":{"raw":"GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33092\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 Dec 2023 23:21:56 GMT\r\nexpires: Fri, 06 Dec 2024 23:21:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 54845\r\nlast-modified: Wed, 13 Sep 2023 22:51:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33092,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33092, version 1.0\\012- data","md5":"057478083c1d55ea0c2182b24f6dd72f","sha1":"caf557cd276a76992084efc4c8857b66791a6b7f","sha256":"bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b","sha512":"98ff4416db333e5a5a8f8f299c393dd1a50f574a2c1c601a0724a8ea7fb652f6ec0ba2267390327185ebea55f5c5049ab486d88b4c5fc1585a6a975238507a15","ssdeep":"768:c+2lFKscxQAuDJ5m/xiYEQNMJjFaf0TteqKt:cZlhcxJuDa/xiMMJhaItzKt","tlshash":"3ce2f14a8cf7c02e72c5e22015d577c0d0a266e87ace9d4670af4478af50b47b33f9a9","first_seen":"2023-09-15T00:36:29Z","last_seen":"2026-05-07T05:41:18.949746Z","times_seen":47410,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":61,"dns":0,"connect":7,"send":0,"wait":13,"receive":8,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.quickencompare.com/qc/refi-images/BG-BLUE-ICON-WHITE.png","fqdn":"content.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:08.563Z","timestamp":1702046168563,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 20 Feb 2023 00:00:00 GMT","end":"Tue, 20 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:4F:F5:9D:CC:0B:84:6F:19:29:53:3F:57:FA:AF:13:47:78:8C:D4","sha256":"AB:B5:03:98:D9:CB:8B:0F:D6:E0:7B:F4:85:30:EE:45:1C:DE:9E:CE:18:AA:55:47:24:90:A1:18:E4:40:03:EC"}}},"request":{"raw":"GET /qc/refi-images/BG-BLUE-ICON-WHITE.png HTTP/1.1\r\nHost: content.quickencompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static-lre.refinance.enhancedrefinow.com/\r\nCookie: visitorId=976d9683-a360-401d-9aa2-6e62aa115154; __cf_bm=nReyGEUG_FM4juS9cJzu463S.6anTSx8yoCus4yrZZw-1702046159-0-ARJmq5htPamGHqacCiA9bHma8kCMehsPbAIi37DTkE7hwAewu5QoVemc7y4DY6/FeAb8lRDC/i/gCzNpKM+hxrQ=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Dec 2023 14:36:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 60242\r\nlast-modified: Mon, 27 Nov 2023 15:34:00 GMT\r\nx-amz-server-side-encryption: AES256\r\netag: \"0b525d003df460ee3ef27bb82defdb43\"\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 f6020f10d519a41b0c116dad7dcb2798.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN54-C1\r\nx-amz-cf-id: Z0TvvSdbNGuv03uzzFkfV90xM-LN3oC_ofnT5p9t4TKs4kTK_5WgiA==\r\ncf-cache-status: REVALIDATED\r\nexpires: Fri, 08 Dec 2023 18:36:01 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 8325bcff8a990afe-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60242,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2980 x 820, 8-bit/color RGBA, non-interlaced\\012- data","md5":"0b525d003df460ee3ef27bb82defdb43","sha1":"0e1f1b12bc01d745e847d91f64727e1bde0cf019","sha256":"78f6112cc353f90b0f71f3b1c2a5571b1b620290dd2048dc073eb91217c590e7","sha512":"c56569ca865d5069a27b0b0f95c16fca710f17d973712d43e9bae44b3d9a5560221c760563092c33caf53f9beab93dbfa2344de767c1ae64d0844c329cc99744","ssdeep":"1536:B3FIKUCy+F09WFfaszAkiS11D1DnWVppVlMNAvuZic/Kj:5FIKnZY/sz1i4FtWpVlMOvBc/2","tlshash":"5343ae7b2e0c99eec8144ff554b06ec67bb2657a182a43468f64b20b00a35a73fc75f1","first_seen":"2023-05-11T17:31:45Z","last_seen":"2025-10-23T19:43:06.138848Z","times_seen":126,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.redditstatic.com/ads/pixel.js","fqdn":"www.redditstatic.com","domain":"redditstatic.com","tld":"com"},"ip":{"addr":"151.101.129.140","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:09.007Z","timestamp":1702046169007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.redditstatic.com","organization":"REDDIT, INC."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 25 Aug 2023 00:00:00 GMT","end":"Wed, 21 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5B:10:93:15:D0:06:B8:27:DD:C8:15:7C:8A:49:4B:AD:06:D3:8E:15","sha256":"31:90:FA:DE:AB:61:7A:69:0B:98:8B:9A:E0:B0:AF:55:06:8D:FC:AC:6B:46:D5:05:1A:E1:5E:46:6F:37:98:99"}}},"request":{"raw":"GET /ads/pixel.js HTTP/1.1\r\nHost: www.redditstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 15 Jun 2023 20:49:59 GMT\r\netag: \"4a205643a240cb95fa82289d62b5af7e\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=60\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 08 Dec 2023 14:36:02 GMT\r\nvary: Accept-Encoding,Origin\r\nserver: snooserv\r\nreport-to: {\"group\": \"w3-reporting-nel\", \"max_age\": 14400, \"include_subdomains\": true,  \"endpoints\": [{ \"url\": \"https://w3-reporting-nel.reddit.com/reports\" }]}, {\"group\": \"w3-reporting\", \"max_age\": 14400, \"include_subdomains\": true, \"endpoints\": [{ \"url\": \"https://w3-reporting.reddit.com/reports\" }]}, {\"group\": \"w3-reporting-csp\", \"max_age\": 14400, \"include_subdomains\": true, \"endpoints\": [{ \"url\": \"https://w3-reporting-csp.reddit.com/reports\" }]}\r\nnel: {\"report_to\": \"w3-reporting-nel\", \"max_age\": 14400, \"include_subdomains\": false, \"success_fraction\": 0.02, \"failure_fraction\": 0.02}\r\ncontent-length: 7409\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7409,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23776)","md5":"78b6c68984a6ce5b3fcac1c6a9cad00c","sha1":"02e1d366a17506cea8adfe5a15949aca89719a02","sha256":"e803e774c7b59fe74f71ed93acaa875cf9a99947ff8ed7615cd0c93c1667250f","sha512":"b58674b36271f19ca88aeccb87fb818bbd6549425904fbff63d53ae84f29ae0cab021b74abbaee6ff2f7e8b7f11e0e23b7e523f2dd394f6487a402f28dbc650e","ssdeep":"384:xJi5iukbQbBfIJXvBP2w2Ig4YWrECIFeOV0rT8AevQ97sEebOpD/u5l1XvYvHjcE:xJiiusQ1HhCIFqrTSO75eIGvi","tlshash":"9fb219c9b2e56099d78a35f4177fb04775b7b96709fc0080c49888e21ee4d8a2677b3d","first_seen":"2023-06-15T23:22:15Z","last_seen":"2025-07-02T08:18:27.372616Z","times_seen":4081,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":55,"dns":17,"connect":12,"send":0,"wait":8,"receive":2,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.starfieldtech.com/","fqdn":"ocsp.starfieldtech.com","domain":"starfieldtech.com","tld":"com"},"ip":{"addr":"192.124.249.24","port":0,"asn":30148,"as":"SUCURI-SEC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-12-08T14:36:09.109262596Z","timestamp":1702046169109,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.starfieldtech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 76\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Sucuri/Cloudproxy\r\nDate: Fri, 08 Dec 2023 14:36:02 GMT\r\nContent-Type: application/ocsp-response\r\nContent-Length: 2149\r\nConnection: keep-alive\r\nX-Sucuri-ID: 15024\r\nContent-Transfer-Encoding: Binary\r\nCache-Control: public, no-transform, must-revalidate\r\nLast-Modified: Fri, 08 Dec 2023 07:58:17 GMT\r\nExpires: Sat, 09 Dec 2023 07:58:17 GMT\r\nETag: \"b4fd4f392378cfc7750c82f8e820a47b8b0e7416\"\r\nP3P: CP=\"IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA\"\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":2149,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"81524bf8c38f6d7590f9a035187264d5","sha1":"b4fd4f392378cfc7750c82f8e820a47b8b0e7416","sha256":"bcba702d34b4addaf917a58f33b9b9f0ef0bfc98ddbf33b105bbc8ad5e746087","sha512":"e13d7b81c310c78dd1c792e76890ee7ada363f2df01d37655eddecf4016e676281edca289b7dbc27b5070b300806d6a3e1ded78a3bf77a5b56baa038329d5368","ssdeep":"","tlshash":"6541e7d66b84ab519ac71e583be1c32e8fb801a196741840a4e2c751b8d13bf2cde00d","first_seen":"2023-12-08T15:36:20Z","last_seen":"2023-12-08T15:36:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-319191520","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:08.989Z","timestamp":1702046168989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:19 GMT","end":"Mon, 15 Jan 2024 11:18:18 GMT"},"fingerprint":{"sha1":"37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34","sha256":"11:4C:25:F9:AD:55:F4:E8:94:2E:64:99:7D:15:71:51:3E:11:44:0E:06:0D:EC:15:C3:6D:41:81:4B:0C:30:3D"}}},"request":{"raw":"GET /gtag/js?id=AW-319191520 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 08 Dec 2023 14:36:02 GMT\r\nexpires: Fri, 08 Dec 2023 14:36:02 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 08 Dec 2023 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 75414\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75414,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (4179)","md5":"81b5bb8bd24c0da562cfecb35cfc9c2d","sha1":"99966e6fa329a49bb9b20e6889342edaa474db62","sha256":"efdea119456ca38b17c2652aafcc0027d56006654fa31c393ddab0ea3e15f58e","sha512":"61a0e530c7a71bb3056549cac395b95e765b5ff34cae01b46f2fa783da45a43333e0754c47e1258895ad2ccbe703f22ea57a18da0fdc7a054bc946081ec1000b","ssdeep":"3072:qcdZAlCIWYVUyO1jUOypDDMv0MWXdXAhA9DfFWkY4X:3fIHVUy4f3WtwhA9DfYq","tlshash":"8924f7d9b383b46a83a3b474503f010bb1bb6d96f84ccc94e189c5d52eb8699417bf6c","first_seen":"2023-12-08T15:36:20Z","last_seen":"2023-12-08T15:36:20Z","times_seen":1,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":141,"dns":0,"connect":7,"send":0,"wait":27,"receive":14,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:06.600Z","timestamp":1702046166600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"CC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42","sha256":"9A:90:D4:1D:0C:D1:CA:9D:4D:19:37:44:C4:E6:E4:28:27:C0:F5:0A:9C:B4:56:89:C4:D1:8A:63:A7:01:28:54"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 08 Dec 2023 14:35:59 GMT\r\ndate: Fri, 08 Dec 2023 14:35:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76124,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"gzip compressed data, max compression\\012- data","md5":"221796c019303a2c51f2f73d7ad03a9c","sha1":"3e8f5f47fed88688c6c61e3b9072af01649a6d0d","sha256":"4d20e794ccf7e702b352d4820bcf2ae767e6ca0b24a670605eece9d3e6853e29","sha512":"a9bcc150786e45d1208cc9f7cf16d801ef1f6e39786987a3d12894a9442c60bdd9aa6a9db7eeb6c547c1636b82ce7af33888e883aee0979897a55313dbb470cb","ssdeep":"1536:U7UD//iaQ5MnoWSHxkbXZSpMe+viBcihDlbPMei2c5LicVDuyuRw1vcS8J:fD/KCoF6bLeJuihpAes5LiuhueESy","tlshash":"bf7302dfb89b3cd244d5fe8babf16fd20e9628b4281927171f50420daf771da0a64247","first_seen":"2023-12-08T15:36:20Z","last_seen":"2023-12-08T15:36:20Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":61,"dns":0,"connect":8,"send":0,"wait":27,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-11411986938","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:09.023Z","timestamp":1702046169023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:19 GMT","end":"Mon, 15 Jan 2024 11:18:18 GMT"},"fingerprint":{"sha1":"37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34","sha256":"11:4C:25:F9:AD:55:F4:E8:94:2E:64:99:7D:15:71:51:3E:11:44:0E:06:0D:EC:15:C3:6D:41:81:4B:0C:30:3D"}}},"request":{"raw":"GET /gtag/js?id=AW-11411986938 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 08 Dec 2023 14:36:02 GMT\r\nexpires: Fri, 08 Dec 2023 14:36:02 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 08 Dec 2023 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 80917\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80917,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (4179)","md5":"5212802d4b2599af71c5e5c9bf52b94c","sha1":"c2d36c63dd8c22600299c4de627c0ebce0b244b2","sha256":"0c6cd51fe549c9c27dfe788d063313c4868db3e21ea807f255624832d8615198","sha512":"7a8eb68f49468a4f930cc211286ebec526987b355f39f59d319902ce400219842a4eaf0cdb361c011fb7a9671fdcc4660ef22ff94a56f1869427c34ed3c58cf5","ssdeep":"3072:ajdZAlCIWYyUyO1j5MypDDMv0MWXdXzhoO7DfFWkrtk4X:8fIHyUy4G3WtDhoO7DfYOtn","tlshash":"143408d973c3706682a7b4b4503f020ba17b6da6f84ccc94e189c5d52eb8a99417bf7c","first_seen":"2023-12-08T15:36:20Z","last_seen":"2023-12-08T15:36:21Z","times_seen":1,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":120,"dns":10,"connect":11,"send":0,"wait":52,"receive":29,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-10865694633","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:09.057Z","timestamp":1702046169057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:19 GMT","end":"Mon, 15 Jan 2024 11:18:18 GMT"},"fingerprint":{"sha1":"37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34","sha256":"11:4C:25:F9:AD:55:F4:E8:94:2E:64:99:7D:15:71:51:3E:11:44:0E:06:0D:EC:15:C3:6D:41:81:4B:0C:30:3D"}}},"request":{"raw":"GET /gtag/js?id=AW-10865694633 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 08 Dec 2023 14:36:02 GMT\r\nexpires: Fri, 08 Dec 2023 14:36:02 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 08 Dec 2023 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 75509\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75509,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (4179)","md5":"660961a3f9cc31fd27449dd0c07c6107","sha1":"5d4c2198be6fcd7fdbd58d465f616d5a749bde4d","sha256":"8dfb98b7cced2dfc953565ea0fc1f2074f7c2f9f5fa9510a02a8f17e014d143b","sha512":"8d9d3d48de608880bfc3c774612b4ff1429ccc7592b18c90f5077a75471d9716e6340b7468eb6c2142e6b67152a7f03e188e4435293dff0fb62380d23f14ff10","ssdeep":"3072:eHdZAlCIWYVUyO1j9jypDDMv0MWXdXAhA9DfFWkY4X:CfIHVUy4h3WtwhA9DfYq","tlshash":"8b24f7d9b383b46a83a3b474503f010bb17b6d96f84ccc94e189c5d52eb8a99417bf6c","first_seen":"2023-12-08T15:36:20Z","last_seen":"2023-12-08T15:36:21Z","times_seen":1,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":117,"dns":3,"connect":9,"send":0,"wait":50,"receive":16,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-320492720\u0026l=dataLayer\u0026cx=c","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:09.352Z","timestamp":1702046169352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:19 GMT","end":"Mon, 15 Jan 2024 11:18:18 GMT"},"fingerprint":{"sha1":"37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34","sha256":"11:4C:25:F9:AD:55:F4:E8:94:2E:64:99:7D:15:71:51:3E:11:44:0E:06:0D:EC:15:C3:6D:41:81:4B:0C:30:3D"}}},"request":{"raw":"GET /gtag/destination?id=AW-320492720\u0026l=dataLayer\u0026cx=c HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 08 Dec 2023 14:36:02 GMT\r\nexpires: Fri, 08 Dec 2023 14:36:02 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 08 Dec 2023 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 75638\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75638,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (4179)","md5":"a10d0f77e45f198744f8acf3cf52b076","sha1":"6e21e1c72b1c5d702b8487c87d5503ce5638d65a","sha256":"0bd9f4988ec56677ed91ce284b3dadf83f22a86c240fde2f951e95dee1b1bc3f","sha512":"3ac83c451b169e60733e2b5055e9206af83d367548f019f14dc10eff6cfae39f2b1db6313a4cde97970ef219e068135185a28f7ed524a90742a58aed8cf6aac3","ssdeep":"3072:kcdZAlCIWYVUyO1jOSypDDMv0MWXdXAhA9DfFWk14w:NfIHVUy4/3WtwhA9DfYO","tlshash":"ba24f7d9b383b46a82a3b474503f010bb1bb6d96f84ccc94e189c5d52eb8699417bf7c","first_seen":"2023-12-08T15:36:20Z","last_seen":"2023-12-08T15:36:21Z","times_seen":1,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rum-http-intake.logs.datadoghq.com/v1/input/pub6a529f19365581f6a44df4d3740084c6?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Alre-ern-webapp%2Cversion%3A1.0.3%20d-M6NP3BZ42\u0026batch_time=1702046168956","fqdn":"rum-http-intake.logs.datadoghq.com","domain":"datadoghq.com","tld":"com"},"ip":{"addr":"3.233.159.178","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:08.961Z","timestamp":1702046168961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.logs.datadoghq.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 22 Mar 2023 00:00:00 GMT","end":"Fri, 22 Mar 2024 23:59:59 GMT"},"fingerprint":{"sha1":"29:24:46:A8:06:E2:F4:15:BE:A6:74:80:B3:36:D5:3D:E7:D5:15:99","sha256":"88:6A:77:71:F0:65:04:B6:A3:21:CF:5E:7C:85:F7:85:44:42:12:D1:A3:62:5E:91:BD:B3:CD:56:BC:D4:93:96"}}},"request":{"raw":"POST /v1/input/pub6a529f19365581f6a44df4d3740084c6?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Alre-ern-webapp%2Cversion%3A1.0.3%20d-M6NP3BZ42\u0026batch_time=1702046168956 HTTP/1.1\r\nHost: rum-http-intake.logs.datadoghq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 15339\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Dec 2023 14:36:02 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text, with no line terminators","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-05-07T10:57:07.5091Z","times_seen":626616,"resource_available":true,"data":null}},"time_used":987,"timings":{"blocked":391,"dns":37,"connect":100,"send":0,"wait":205,"receive":0,"ssl":249},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pix.revjet.com/track/pd3521?__noscript=false\u0026__cbf=revjet.callbacks.cb1702046169178\u0026location=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_259%26pkey1%3D259%26pkey2%3DSECCAPS-A%26pkey3%3D92bc792a678d4d3aac6777601f10fd8b%26pkey%3D%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D259%26_ef_transaction_id%3D92bc792a678d4d3aac6777601f10fd8b\u0026referrer=\u0026creditProfile=\u0026firstMortgageBalance=\u0026firstMortgageInterestRate=\u0026hasFHALoan=\u0026homeValue=\u0026loanToValue=\u0026propertyCity=\u0026propertyDescription=\u0026propertyState=\u0026propertyZipCode=\u0026rateType=\u0026typeOfLoan=\u0026loanRefiPurpose=","fqdn":"pix.revjet.com","domain":"revjet.com","tld":"com"},"ip":{"addr":"5.9.20.98","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:09.344Z","timestamp":1702046169344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.revjet.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Mar 2023 00:00:00 GMT","end":"Thu, 11 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"03:20:65:55:CD:08:1C:F0:68:28:E7:A4:5F:21:09:76:87:BF:9D:81","sha256":"AB:35:5A:BB:4C:BC:1E:79:31:77:DF:B2:5D:B9:14:82:26:40:71:97:7A:75:FC:34:01:DF:DA:3B:DC:B6:87:7A"}}},"request":{"raw":"GET /track/pd3521?__noscript=false\u0026__cbf=revjet.callbacks.cb1702046169178\u0026location=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_259%26pkey1%3D259%26pkey2%3DSECCAPS-A%26pkey3%3D92bc792a678d4d3aac6777601f10fd8b%26pkey%3D%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D259%26_ef_transaction_id%3D92bc792a678d4d3aac6777601f10fd8b\u0026referrer=\u0026creditProfile=\u0026firstMortgageBalance=\u0026firstMortgageInterestRate=\u0026hasFHALoan=\u0026homeValue=\u0026loanToValue=\u0026propertyCity=\u0026propertyDescription=\u0026propertyState=\u0026propertyZipCode=\u0026rateType=\u0026typeOfLoan=\u0026loanRefiPurpose= HTTP/1.1\r\nHost: pix.revjet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Dec 2023 14:36:02 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 46\r\nset-cookie: trx=6760958590264762246; Max-Age=63072000; Expires=Sun, 07 Dec 2025 14:36:02 GMT; Path=/; Domain=.revjet.com; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"ba43362c32b7c63d1291479b4f4d9020","sha1":"dbcda434072be7dffb609f222b60e1ebfc194b16","sha256":"8c421b4080c183ef1aed880e63dd511d3c195e0f911a6cbe973ec81c6e402e63","sha512":"3229609cd42ee6ee366bbee1419ce8c631d5170816f7f9928bf53e72151829088167e18addfb943d883a52ca275e8b99296ff1a7969b95f8649e87c3628b5e3a","ssdeep":"","tlshash":"49900245882312635510da118554434a129c4224552985a595244ab555108614680404","first_seen":"2023-12-08T15:36:20Z","last_seen":"2023-12-08T15:36:21Z","times_seen":1,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":169,"dns":76,"connect":45,"send":0,"wait":45,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rum-http-intake.logs.datadoghq.com/v1/input/pub6a529f19365581f6a44df4d3740084c6?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Alre-ern-webapp%2Cversion%3A1.0.3%20d-M6NP3BZ42\u0026batch_time=1702046169418","fqdn":"rum-http-intake.logs.datadoghq.com","domain":"datadoghq.com","tld":"com"},"ip":{"addr":"3.233.159.178","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:09.425Z","timestamp":1702046169425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.logs.datadoghq.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 22 Mar 2023 00:00:00 GMT","end":"Fri, 22 Mar 2024 23:59:59 GMT"},"fingerprint":{"sha1":"29:24:46:A8:06:E2:F4:15:BE:A6:74:80:B3:36:D5:3D:E7:D5:15:99","sha256":"88:6A:77:71:F0:65:04:B6:A3:21:CF:5E:7C:85:F7:85:44:42:12:D1:A3:62:5E:91:BD:B3:CD:56:BC:D4:93:96"}}},"request":{"raw":"POST /v1/input/pub6a529f19365581f6a44df4d3740084c6?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Alre-ern-webapp%2Cversion%3A1.0.3%20d-M6NP3BZ42\u0026batch_time=1702046169418 HTTP/1.1\r\nHost: rum-http-intake.logs.datadoghq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 15948\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Dec 2023 14:36:02 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text, with no line terminators","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-05-07T10:57:07.5091Z","times_seen":626616,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a44325.actonservice.com/cdnr/forpci43/acton/bn/tracker/44325","fqdn":"a44325.actonservice.com","domain":"actonservice.com","tld":"com"},"ip":{"addr":"207.189.124.43","port":443,"asn":13649,"as":"ASN-VINS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:09.074Z","timestamp":1702046169074,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.actonservice.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 May 2023 00:00:00 GMT","end":"Sat, 29 Jun 2024 23:59:59 GMT"},"fingerprint":{"sha1":"EE:F0:2F:E8:AA:FB:08:13:5C:9C:84:FB:04:6E:60:5B:4D:EB:B0:2E","sha256":"1F:A4:DA:74:E0:8D:00:64:E1:4F:81:1D:F9:DE:CE:90:20:2A:10:87:96:24:56:3B:98:D2:32:42:9B:24:3B:C7"}}},"request":{"raw":"GET /cdnr/forpci43/acton/bn/tracker/44325 HTTP/1.1\r\nHost: a44325.actonservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nP3P: CP=\"Act-On does not have a P3P policy. Learn why here: https://act-on.com/p3p-policy/\"\r\nSet-Cookie: wp44325=\"XXWVYDDDDDDTVUZXWMW-HTXW-XBYL-CZIC-LMAZTLKXTIZBDgNssDDD\"; Path=/; Max-Age=31536000; Domain=.actonservice.com; SameSite=None; Secure; Version=1\r\nContent-Type: application/javascript;charset=utf-8\r\nContent-Length: 4850\r\nDate: Fri, 08 Dec 2023 14:36:02 GMT\r\nX-Cnection: close\r\nStrict-Transport-Security: max-age=16070400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":4850,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"bed2e43e5eb10b25eefe40693d0de4a1","sha1":"5a0acb09cf5fb693d35d2e57e815c291a335d89d","sha256":"13ce417e4b20037e99ac2621fb3bb79be4b77aaf13f00c388d40c3d32992e45f","sha512":"7981fab56e9d7ebd3eca8116001f9203959ef90cbac2deb6efecb9583345b65a928bb280a7f2e679243b0a8f46a295abbedc68f9aed3ea81665502281e6221c5","ssdeep":"96:quTE/nCwi7DVsJ5nzLwivnqLwIUXp5lTi+:JTE//I+Dw8LIq4+","tlshash":"33a1958c72bd0e21d1f33787bf7e8f8e7bfd22923459d588d45e98900665862243aa71","first_seen":"2023-12-08T15:36:20Z","last_seen":"2023-12-08T15:36:21Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1054,"timings":{"blocked":439,"dns":52,"connect":165,"send":0,"wait":166,"receive":0,"ssl":229},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickencompare.com/wp-content/uploads/2022/05/cropped-QC_Icotype_Circle_Red-192x192.png","fqdn":"www.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:09.718Z","timestamp":1702046169718,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 20 Feb 2023 00:00:00 GMT","end":"Tue, 20 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:4F:F5:9D:CC:0B:84:6F:19:29:53:3F:57:FA:AF:13:47:78:8C:D4","sha256":"AB:B5:03:98:D9:CB:8B:0F:D6:E0:7B:F4:85:30:EE:45:1C:DE:9E:CE:18:AA:55:47:24:90:A1:18:E4:40:03:EC"}}},"request":{"raw":"GET /wp-content/uploads/2022/05/cropped-QC_Icotype_Circle_Red-192x192.png HTTP/1.1\r\nHost: www.quickencompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visitorId=976d9683-a360-401d-9aa2-6e62aa115154; __cf_bm=nReyGEUG_FM4juS9cJzu463S.6anTSx8yoCus4yrZZw-1702046159-0-ARJmq5htPamGHqacCiA9bHma8kCMehsPbAIi37DTkE7hwAewu5QoVemc7y4DY6/FeAb8lRDC/i/gCzNpKM+hxrQ=; _rdt_uuid=1702046169133.cbf79ccb-3675-4c4d-b743-3c3a20a1acb6; _gcl_au=1.1.1264768823.1702046169\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Dec 2023 14:36:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 10913\r\ncache-control: public, max-age=31622400\r\netag: \"646f8388-2aa1\"\r\nexpires: Sun, 08 Dec 2024 14:36:03 GMT\r\nlast-modified: Thu, 25 May 2023 15:49:28 GMT\r\nstrict-transport-security: max-age=2592000\r\nx-pantheon-styx-hostname: styx-fe1-a-685d4d5969-p4htw\r\nx-styx-req-id: 32d64d26-67a0-11ee-8ab1-a68b0bac51fb\r\nx-served-by: cache-chi-kigq8000146-CHI, cache-bma1675-BMA\r\nx-cache: HIT, MISS\r\nx-cache-hits: 1, 0\r\nx-timer: S1701973987.519388,VS0,VE126\r\nvia: 1.1 varnish, 1.1 varnish\r\ncf-cache-status: HIT\r\nage: 72177\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 8325bd0708810afe-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10913,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\\012- data","md5":"33459eb6a3bd646afe5d2b592d70a184","sha1":"3dbe306f999a2d9d3ac37fcbd664100e3dc9e4dd","sha256":"a3cbfe4e63c8a005a557d34d2bf2041a470c86c629429b4ec9d695a59c951fce","sha512":"c8de3bc39a7ebf0575fb10c0549b45be402880fdd8724b91537992f4fb510bc9e7ad422d7ca863621654672122d5bad778349b12771760b4a3c4302d85a07caf","ssdeep":"","tlshash":"","first_seen":"2023-05-04T23:59:24Z","last_seen":"2023-12-08T15:36:21Z","times_seen":13,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":43,"connect":1,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/bat.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"13.107.21.200","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:09.713Z","timestamp":1702046169713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure TLS Issuing CA 01","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 24 Oct 2023 07:42:22 GMT","end":"Sun, 21 Apr 2024 07:42:22 GMT"},"fingerprint":{"sha1":"A5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD","sha256":"06:59:26:26:34:3D:BB:CB:40:56:0E:F2:BF:23:29:1D:C6:E4:C1:7D:4D:E6:72:6A:C5:15:AF:F0:1F:D6:A7:AC"}}},"request":{"raw":"GET /bat.js HTTP/1.1\r\nHost: bat.bing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private,max-age=1800\r\ncontent-length: 13175\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 10 Nov 2023 20:09:55 GMT\r\naccept-ranges: bytes\r\netag: \"80abcdf1114da1:0\"\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: B52F01F818F1424480EDA8AAD6474927 Ref B: OSL30EDGE0317 Ref C: 2023-12-08T14:36:03Z\r\ndate: Fri, 08 Dec 2023 14:36:02 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13175,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (46103), with no line terminators","md5":"7f75f159026f3a2c8cccda487b43157b","sha1":"021cf5c854db063cd79bf0394c24eb994e095640","sha256":"5e319852607809336b2534ffeb96f6933f26994dd040f535302c84f59cc0a214","sha512":"88276152ee25891d16e7b3b28a9b42cbd48d97e1a7d94c1bf5354612603868d5d537d2ba01a4e2f184e6dc6a492b67619d6a7c02da992ad604f7d0abef27a7a1","ssdeep":"768:OaOFhhRDUHahpROfRys3LzQRo4TYYyDMFWPKQ:OaOFnRrRURtzQy4ISWiQ","tlshash":"b923e7833350492a49ed86dc74692a03a336530e20fe309d7b8ce9f25559e0f527bb7e","first_seen":"2023-11-10T23:20:50Z","last_seen":"2026-01-03T14:17:01.401373Z","times_seen":11869,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":18,"dns":71,"connect":1,"send":0,"wait":42,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.quickencompare.com/wp-content/uploads/2022/05/cropped-QC_Icotype_Circle_Red-32x32.png","fqdn":"www.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:09.720Z","timestamp":1702046169720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 20 Feb 2023 00:00:00 GMT","end":"Tue, 20 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:4F:F5:9D:CC:0B:84:6F:19:29:53:3F:57:FA:AF:13:47:78:8C:D4","sha256":"AB:B5:03:98:D9:CB:8B:0F:D6:E0:7B:F4:85:30:EE:45:1C:DE:9E:CE:18:AA:55:47:24:90:A1:18:E4:40:03:EC"}}},"request":{"raw":"GET /wp-content/uploads/2022/05/cropped-QC_Icotype_Circle_Red-32x32.png HTTP/1.1\r\nHost: www.quickencompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visitorId=976d9683-a360-401d-9aa2-6e62aa115154; __cf_bm=nReyGEUG_FM4juS9cJzu463S.6anTSx8yoCus4yrZZw-1702046159-0-ARJmq5htPamGHqacCiA9bHma8kCMehsPbAIi37DTkE7hwAewu5QoVemc7y4DY6/FeAb8lRDC/i/gCzNpKM+hxrQ=; _rdt_uuid=1702046169133.cbf79ccb-3675-4c4d-b743-3c3a20a1acb6; _gcl_au=1.1.1264768823.1702046169\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Dec 2023 14:36:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 1462\r\ncache-control: public, max-age=31622400\r\netag: \"646f8388-5b6\"\r\nexpires: Sun, 08 Dec 2024 14:36:03 GMT\r\nlast-modified: Thu, 25 May 2023 15:49:28 GMT\r\nstrict-transport-security: max-age=2592000\r\nx-pantheon-styx-hostname: styx-fe1-a-b8448654b-5nhpm\r\nx-styx-req-id: fcf64b0f-565f-11ee-9089-d2e2ed9d6f4f\r\nx-served-by: cache-chi-klot8100095-CHI, cache-bma1667-BMA\r\nx-cache: HIT, MISS\r\nx-cache-hits: 1, 0\r\nx-timer: S1701701162.825696,VS0,VE131\r\nvia: 1.1 varnish, 1.1 varnish\r\ncf-cache-status: HIT\r\nage: 264344\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 8325bd07087d0afe-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\\012- data","md5":"08c465daeab64895569e93e51c762db7","sha1":"06d83a5d5da54777459439485a5a410776f22375","sha256":"1bf8b66be3259665a6d9791e0dfbd82bd2f574a01bad981e3d4e66d71f137e78","sha512":"1e08815a17b0318a7033bc1de18764b47e9eb188d33240a41da2181b2ca16218aef29c20656ad55a7ed715f7b9ace10a685664a8fdf54ff38de37964dd648056","ssdeep":"","tlshash":"","first_seen":"2023-05-04T23:59:24Z","last_seen":"2023-12-08T15:36:21Z","times_seen":13,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":4,"dns":36,"connect":1,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/320492720/?random=1702046169322\u0026cv=11\u0026fst=1702046169322\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be3bt0\u0026gcd=11l1l1l1l1\u0026dma_cps=sypham\u0026dma=1\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_259%26pkey1%3D259%26pkey2%3DSECCAPS-A%26pkey3%3D92bc792a678d4d3aac6777601f10fd8b%26pkey%3D%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D259%26_ef_transaction_id%3D92bc792a678d4d3aac6777601f10fd8b\u0026label=xSwBCJum9PsCELCp6ZgB\u0026hn=www.google.com\u0026frm=0\u0026tiba=QuickenCompare%20Money%20-%20QUESTIONS\u0026gtm_ee=1\u0026auid=1264768823.1702046169\u0026data=event%3Dconversion\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026rfmt=3\u0026fmt=4","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:09.714Z","timestamp":1702046169714,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:57 GMT","end":"Mon, 15 Jan 2024 11:24:56 GMT"},"fingerprint":{"sha1":"B0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1","sha256":"8E:7A:F4:2A:73:D7:C2:C9:1E:EC:59:1E:76:11:A4:E4:8D:03:F6:64:60:A2:8A:86:33:52:6B:1D:FE:19:FA:8D"}}},"request":{"raw":"GET /pagead/1p-conversion/320492720/?random=1702046169322\u0026cv=11\u0026fst=1702046169322\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be3bt0\u0026gcd=11l1l1l1l1\u0026dma_cps=sypham\u0026dma=1\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_259%26pkey1%3D259%26pkey2%3DSECCAPS-A%26pkey3%3D92bc792a678d4d3aac6777601f10fd8b%26pkey%3D%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D259%26_ef_transaction_id%3D92bc792a678d4d3aac6777601f10fd8b\u0026label=xSwBCJum9PsCELCp6ZgB\u0026hn=www.google.com\u0026frm=0\u0026tiba=QuickenCompare%20Money%20-%20QUESTIONS\u0026gtm_ee=1\u0026auid=1264768823.1702046169\u0026data=event%3Dconversion\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026rfmt=3\u0026fmt=4 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 08 Dec 2023 14:36:03 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/320492720/?random=1702046169322\u0026cv=11\u0026fst=1702046169322\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be3bt0\u0026gcd=11l1l1l1l1\u0026dma_cps=sypham\u0026dma=1\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_259%26pkey1%3D259%26pkey2%3DSECCAPS-A%26pkey3%3D92bc792a678d4d3aac6777601f10fd8b%26pkey%3D%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D259%26_ef_transaction_id%3D92bc792a678d4d3aac6777601f10fd8b\u0026label=xSwBCJum9PsCELCp6ZgB\u0026hn=www.google.com\u0026frm=0\u0026tiba=QuickenCompare%20Money%20-%20QUESTIONS\u0026gtm_ee=1\u0026auid=1264768823.1702046169\u0026data=event%3Dconversion\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026rfmt=3\u0026fmt=4\u0026ipr=y\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: gzip\r\nserver: cafe\r\ncontent-length: 63\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":63,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"ad8b6f08655797587cdec719a94efe59","sha1":"182adf5a140796f81e930649d05654dbf22fd5b7","sha256":"77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6","sha512":"519a8ea7ce2ed8661cc72d58bc0c02e721ef8e64608f4d2e26a56a970d43ebbf21bdf579c543ee1dfd667da8f87467c60111a3e6d246d435a5c2d066ab88efa3","ssdeep":"","tlshash":"0890045d30d14535cc3fd0355105157150f501075c5f117c1430430035115434c000f3","first_seen":"2023-03-07T01:03:30Z","last_seen":"2026-05-02T15:05:55.10961Z","times_seen":10172,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":137,"dns":0,"connect":12,"send":0,"wait":29,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lmbahsj2.com/sdk/click?effp=725a9a464860515bcdb576360962c546\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b\u0026oid=143\u0026affid=259\u0026__cc=\u0026async=json","fqdn":"www.lmbahsj2.com","domain":"lmbahsj2.com","tld":"com"},"ip":{"addr":"35.201.76.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:09.894Z","timestamp":1702046169894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmbahsj2.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 28 Apr 2023 21:05:02 GMT","end":"Mon, 13 May 2024 15:10:13 GMT"},"fingerprint":{"sha1":"19:8A:1C:6D:15:5F:1E:82:A2:B6:F3:E1:A8:82:E4:C5:EE:3C:46:53","sha256":"AD:07:6F:39:EC:9D:DE:5D:01:AE:9F:A4:29:CF:11:44:D6:CD:26:E9:F1:14:4B:91:B7:6B:00:EE:F0:19:48:D4"}}},"request":{"raw":"GET /sdk/click?effp=725a9a464860515bcdb576360962c546\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b\u0026oid=143\u0026affid=259\u0026__cc=\u0026async=json HTTP/1.1\r\nHost: www.lmbahsj2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 08 Dec 2023 14:36:03 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 87\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://money.quickencompare.com\r\nset-cookie: uniqueClick=5a0ba9cb-1097-487c-9bf0-a461f6983257:1702046163; Path=/; Expires=Sat, 09 Dec 2023 14:36:03 GMT; Secure; SameSite=None\ntransaction_id=92bc792a678d4d3aac6777601f10fd8b; Path=/; Expires=Thu, 07 Mar 2024 14:36:03 GMT; Secure; SameSite=None\r\nvary: Origin\r\nx-eflow-request-id: 020372ad-0db9-4397-98ff-0b05083dd6ee\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON data\\012- , ASCII text","md5":"be8ec018b20dc81844ac027ae9ca0a21","sha1":"25970722e18a46a65b644b2a46083d31a9fa4000","sha256":"7939806ffd6b5d6fd215d472d42fc70ec7b920c9dc6b2479d740bdbf0bb3972f","sha512":"37dd7c10a5a648ecb9b20cd92b6d650c946335fc93b9ba92ed136954c52d1149cc945ac339697b6f376c4e030e421e9c6977e2eba1d2e981cd74f9c415e86f3f","ssdeep":"","tlshash":"30b01280444e0800404d96020942510048dd8ae06e1403542b048611173000cda4200c","first_seen":"2023-12-08T15:36:21Z","last_seen":"2023-12-08T15:36:21Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a44325.actonservice.com/acton/bn/44325?target=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_259%26pkey1%3D259%26pkey2%3DSECCAPS-A%26pkey3%3D92bc792a678d4d3aac6777601f10fd8b%26pkey%3D%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D259%26_ef_transaction_id%3D92bc792a678d4d3aac6777601f10fd8b\u0026ref=\u0026v=2\u0026ts=1702046169011\u0026nc=0","fqdn":"a44325.actonservice.com","domain":"actonservice.com","tld":"com"},"ip":{"addr":"207.189.124.43","port":443,"asn":13649,"as":"ASN-VINS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:09.887Z","timestamp":1702046169887,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.actonservice.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 May 2023 00:00:00 GMT","end":"Sat, 29 Jun 2024 23:59:59 GMT"},"fingerprint":{"sha1":"EE:F0:2F:E8:AA:FB:08:13:5C:9C:84:FB:04:6E:60:5B:4D:EB:B0:2E","sha256":"1F:A4:DA:74:E0:8D:00:64:E1:4F:81:1D:F9:DE:CE:90:20:2A:10:87:96:24:56:3B:98:D2:32:42:9B:24:3B:C7"}}},"request":{"raw":"GET /acton/bn/44325?target=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_259%26pkey1%3D259%26pkey2%3DSECCAPS-A%26pkey3%3D92bc792a678d4d3aac6777601f10fd8b%26pkey%3D%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D259%26_ef_transaction_id%3D92bc792a678d4d3aac6777601f10fd8b\u0026ref=\u0026v=2\u0026ts=1702046169011\u0026nc=0 HTTP/1.1\r\nHost: a44325.actonservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nCookie: wp44325=\"XXWVYDDDDDDTVUZXWMW-HTXW-XBYL-CZIC-LMAZTLKXTIZBDgNssDDD\"\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nSet-Cookie: wp44325=\"XXWVYDDDDDDTVUZXWMW-HTXW-XBYL-CZIC-LMAZTLKXTIZBDLVTXKBTZ-WMWJ-XVVI-ITWY-AXKMKJWLXLYHDjNpJrLgJhtiHkL_JhtDD\"; Path=/; Max-Age=31536000; Domain=.actonservice.com; SameSite=None; Secure; Version=1\r\nP3P: CP=\"Act-On does not have a P3P policy. Learn why here: https://act-on.com/p3p-policy/\"\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nDate: Fri, 08 Dec 2023 14:36:02 GMT\r\nX-Cnection: close\r\nStrict-Transport-Security: max-age=16070400\r\nVary: Accept-Encoding\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1\\012- data","md5":"f7f26805de1a1f270e665bf7873d7e19","sha1":"c32085898c6e36d361d4b8017087de90e1b8465c","sha256":"2188414d64d2930eb54f4731b6eb9a931358ba625d1cd7535a889409218609d2","sha512":"6755bed154762d44a97d836c1201a518b98c7df673c42fc125de88d5e8c73a43a08883280954c92cac7f62cc6ce31ce2e2208000c6be31c5f132446cddf702c0","ssdeep":"","tlshash":"d0900403f7c04007c171d030071503505344d01005440705404d715cdc551510c03010","first_seen":"2023-04-19T20:18:37Z","last_seen":"2026-05-07T10:49:43.024625Z","times_seen":1980,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/p/action/146000783.js","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"13.107.21.200","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:10.148Z","timestamp":1702046170148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure TLS Issuing CA 01","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 24 Oct 2023 07:42:22 GMT","end":"Sun, 21 Apr 2024 07:42:22 GMT"},"fingerprint":{"sha1":"A5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD","sha256":"06:59:26:26:34:3D:BB:CB:40:56:0E:F2:BF:23:29:1D:C6:E4:C1:7D:4D:E6:72:6A:C5:15:AF:F0:1F:D6:A7:AC"}}},"request":{"raw":"GET /p/action/146000783.js HTTP/1.1\r\nHost: bat.bing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ncache-control: private,max-age=1800\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 6F871225B0A44BE683E2FE51FE9B2FEB Ref B: OSL30EDGE0317 Ref C: 2023-12-08T14:36:03Z\r\ndate: Fri, 08 Dec 2023 14:36:02 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/x-javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T10:57:30.943449Z","times_seen":14782693,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bat.bing.com/action/0?ti=146000783\u0026Ver=2\u0026mid=54528a34-bc11-4277-926b-64b89c2925df\u0026sid=20f6945095d711ee80c7993d0622159e\u0026vid=20f6985095d711eebf5c35ffd50bdc63\u0026vids=1\u0026msclkid=N\u0026pi=918639831\u0026lg=en-US\u0026sw=1280\u0026sh=1024\u0026sc=24\u0026tl=QuickenCompare%20Money%20-%20QUESTIONS\u0026p=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_259%26pkey1%3D259%26pkey2%3DSECCAPS-A%26pkey3%3D92bc792a678d4d3aac6777601f10fd8b%26pkey%3D%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D259%26_ef_transaction_id%3D92bc792a678d4d3aac6777601f10fd8b\u0026r=\u0026lt=4566\u0026evt=pageLoad\u0026sv=1\u0026rn=87939","fqdn":"bat.bing.com","domain":"bing.com","tld":"com"},"ip":{"addr":"13.107.21.200","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:10.149Z","timestamp":1702046170149,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"www.bing.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure TLS Issuing CA 01","organization":"Microsoft Corporation"},"validity":{"start":"Tue, 24 Oct 2023 07:42:22 GMT","end":"Sun, 21 Apr 2024 07:42:22 GMT"},"fingerprint":{"sha1":"A5:EC:34:1F:AB:B3:69:71:54:88:69:BA:64:CC:E2:9B:32:B6:65:CD","sha256":"06:59:26:26:34:3D:BB:CB:40:56:0E:F2:BF:23:29:1D:C6:E4:C1:7D:4D:E6:72:6A:C5:15:AF:F0:1F:D6:A7:AC"}}},"request":{"raw":"GET /action/0?ti=146000783\u0026Ver=2\u0026mid=54528a34-bc11-4277-926b-64b89c2925df\u0026sid=20f6945095d711ee80c7993d0622159e\u0026vid=20f6985095d711eebf5c35ffd50bdc63\u0026vids=1\u0026msclkid=N\u0026pi=918639831\u0026lg=en-US\u0026sw=1280\u0026sh=1024\u0026sc=24\u0026tl=QuickenCompare%20Money%20-%20QUESTIONS\u0026p=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_259%26pkey1%3D259%26pkey2%3DSECCAPS-A%26pkey3%3D92bc792a678d4d3aac6777601f10fd8b%26pkey%3D%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D259%26_ef_transaction_id%3D92bc792a678d4d3aac6777601f10fd8b\u0026r=\u0026lt=4566\u0026evt=pageLoad\u0026sv=1\u0026rn=87939 HTTP/1.1\r\nHost: bat.bing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ncache-control: no-cache, must-revalidate\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nset-cookie: MUID=0928B8256B616C2D0BBEABC46A366D75; domain=.bing.com; expires=Wed, 01-Jan-2025 14:36:03 GMT; path=/; SameSite=None; Secure; Priority=High;\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: 3C0D44A6D7E64D5384B74B0E5317350B Ref B: OSL30EDGE0317 Ref C: 2023-12-08T14:36:03Z\r\ndate: Fri, 08 Dec 2023 14:36:02 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T10:57:30.943449Z","times_seen":14782693,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/320492720/?random=1702046169322\u0026cv=11\u0026fst=1702046169322\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be3bt0\u0026gcd=11l1l1l1l1\u0026dma_cps=sypham\u0026dma=1\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_259%26pkey1%3D259%26pkey2%3DSECCAPS-A%26pkey3%3D92bc792a678d4d3aac6777601f10fd8b%26pkey%3D%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D259%26_ef_transaction_id%3D92bc792a678d4d3aac6777601f10fd8b\u0026label=xSwBCJum9PsCELCp6ZgB\u0026hn=www.google.com\u0026frm=0\u0026tiba=QuickenCompare%20Money%20-%20QUESTIONS\u0026gtm_ee=1\u0026auid=1264768823.1702046169\u0026data=event%3Dconversion\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026rfmt=3\u0026fmt=4\u0026ipr=y","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.74.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:10.156Z","timestamp":1702046170156,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:27:27 GMT","end":"Mon, 15 Jan 2024 11:27:26 GMT"},"fingerprint":{"sha1":"6E:E4:BC:4A:67:5E:46:6A:B3:E4:CA:61:A7:C0:97:AB:14:F0:34:32","sha256":"6C:19:7E:D8:B6:4C:33:23:BE:69:B4:D7:78:7F:28:0F:20:6A:60:11:77:95:4F:1A:79:F9:9A:62:80:70:DD:13"}}},"request":{"raw":"GET /pagead/1p-conversion/320492720/?random=1702046169322\u0026cv=11\u0026fst=1702046169322\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026gtm=45be3bt0\u0026gcd=11l1l1l1l1\u0026dma_cps=sypham\u0026dma=1\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Fmoney.quickencompare.com%2F%3Fmoid%3D307646%26sourceid%3Daffl_everflow_qc-mon_143_259%26pkey1%3D259%26pkey2%3DSECCAPS-A%26pkey3%3D92bc792a678d4d3aac6777601f10fd8b%26pkey%3D%26sid%3D143%26cmpid%3D143%26crtid%3D%26oid%3D143%26affid%3D259%26_ef_transaction_id%3D92bc792a678d4d3aac6777601f10fd8b\u0026label=xSwBCJum9PsCELCp6ZgB\u0026hn=www.google.com\u0026frm=0\u0026tiba=QuickenCompare%20Money%20-%20QUESTIONS\u0026gtm_ee=1\u0026auid=1264768823.1702046169\u0026data=event%3Dconversion\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026rfmt=3\u0026fmt=4\u0026ipr=y HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 08 Dec 2023 14:36:03 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: gzip\r\nserver: cafe\r\ncontent-length: 63\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"ad8b6f08655797587cdec719a94efe59","sha1":"182adf5a140796f81e930649d05654dbf22fd5b7","sha256":"77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6","sha512":"519a8ea7ce2ed8661cc72d58bc0c02e721ef8e64608f4d2e26a56a970d43ebbf21bdf579c543ee1dfd667da8f87467c60111a3e6d246d435a5c2d066ab88efa3","ssdeep":"","tlshash":"0890045d30d14535cc3fd0355105157150f501075c5f117c1430430035115434c000f3","first_seen":"2023-03-07T01:03:30Z","last_seen":"2026-05-02T15:05:55.10961Z","times_seen":10172,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":55,"dns":1,"connect":8,"send":0,"wait":28,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script.anura.io/request.js?instance=3439535758\u0026exid=031df85b-9801-5331-badd-1ad7b5917356\u0026source=affl_everflow_qc-mon_143_259\u0026campaign=SECCAPS-A\u0026651020434517","fqdn":"script.anura.io","domain":"anura.io","tld":"io"},"ip":{"addr":"3.8.43.133","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:09.888Z","timestamp":1702046169888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script.anura.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 16 Oct 2023 00:00:00 GMT","end":"Wed, 13 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"83:CF:23:67:0B:B9:DB:BB:65:3F:31:44:AD:06:8B:B2:7E:B4:E1:20","sha256":"22:8A:B7:8D:F7:07:94:DE:BE:71:80:9B:A2:B1:3F:EA:42:3F:00:92:31:15:44:8C:50:D7:C4:4C:B1:2C:09:41"}}},"request":{"raw":"GET /request.js?instance=3439535758\u0026exid=031df85b-9801-5331-badd-1ad7b5917356\u0026source=affl_everflow_qc-mon_143_259\u0026campaign=SECCAPS-A\u0026651020434517 HTTP/1.1\r\nHost: script.anura.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Dec 2023 14:36:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nvary: Accept-Encoding\r\nexpires: Sun, 28 Dec 1980 18:57:00 EST\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26224,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (9731)","md5":"e06ce3e745ad4bd2246a32651a69b97c","sha1":"8b4708fd18545f0ff9ab9c7e4bbe76a5265f0967","sha256":"540ea53d585a8c8572d037d3f742b86adc72a61ff1254c21d99666132d7f96c3","sha512":"4ccaefdf996f42d290c60e5899f007c1c59a081f1af9f03fc09562bf6bd10f08474e1057eb5bce8bc75eb58377600fde774f4d202724b4f22ba2c08772353e61","ssdeep":"1536:obSLNWeQorO5nqa6MQzGEVUCbGAHgp281rACrPyud:VLMe+duurACDxd","tlshash":"af73198ab6a2f01109a310e5217f140ff3ba1a79585c5090e7b5d5f4bcb4a4f8a3bf9d","first_seen":"2023-12-08T15:36:21Z","last_seen":"2023-12-08T15:36:21Z","times_seen":1,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":179,"dns":53,"connect":30,"send":0,"wait":90,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/wi/config/10194306.json","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.252","port":443,"asn":203220,"as":"Yahoo! UK Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:10.410Z","timestamp":1702046170410,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.api.fantasysports.yahoo.com","organization":"Oath Holdings Inc."},"issuer":{"commonName":"DigiCert SHA2 High Assurance Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Nov 2023 00:00:00 GMT","end":"Wed, 27 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6","sha256":"0A:DC:8A:FB:63:56:2D:8D:E2:CE:B6:4F:F0:A6:8B:C9:F8:BB:A1:BE:16:48:D2:6A:5F:C7:40:28:7F:DB:02:3B"}}},"request":{"raw":"GET /wi/config/10194306.json HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nx-amz-request-id: CB4JNAN7J229ZYC4\r\nx-amz-id-2: cGqBgNjckEUB+wBsD6G95EQMQBbMorbIlQr0xZRaTtzKnA2k7iQ5knf8zUzJ3McjC9OuxRGlfak=\r\ncontent-type: application/json\r\ndate: Fri, 08 Dec 2023 14:36:03 GMT\r\nserver: ATS\r\nreferrer-policy: no-referrer-when-downgrade\r\ncache-control: public,max-age=3600\r\ncontent-encoding: gzip\r\ncontent-length: 22\r\nage: 0\r\nstrict-transport-security: max-age=31536000\r\nexpect-ct: max-age=31536000, report-uri=\"http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text, with no line terminators","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-05-07T10:57:07.5091Z","times_seen":626616,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":76,"dns":1,"connect":34,"send":0,"wait":132,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rum-http-intake.logs.datadoghq.com/v1/input/pub6a529f19365581f6a44df4d3740084c6?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Alre-ern-webapp%2Cversion%3A1.0.3%20d-M6NP3BZ42\u0026batch_time=1702046170707","fqdn":"rum-http-intake.logs.datadoghq.com","domain":"datadoghq.com","tld":"com"},"ip":{"addr":"3.233.159.178","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:10.713Z","timestamp":1702046170713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.logs.datadoghq.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 22 Mar 2023 00:00:00 GMT","end":"Fri, 22 Mar 2024 23:59:59 GMT"},"fingerprint":{"sha1":"29:24:46:A8:06:E2:F4:15:BE:A6:74:80:B3:36:D5:3D:E7:D5:15:99","sha256":"88:6A:77:71:F0:65:04:B6:A3:21:CF:5E:7C:85:F7:85:44:42:12:D1:A3:62:5E:91:BD:B3:CD:56:BC:D4:93:96"}}},"request":{"raw":"POST /v1/input/pub6a529f19365581f6a44df4d3740084c6?ddsource=browser\u0026ddtags=sdk_version%3A3.11.0%2Cenv%3Aprod%2Cservice%3Alre-ern-webapp%2Cversion%3A1.0.3%20d-M6NP3BZ42\u0026batch_time=1702046170707 HTTP/1.1\r\nHost: rum-http-intake.logs.datadoghq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 16117\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Dec 2023 14:36:04 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON data\\012- , ASCII text, with no line terminators","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-05-07T10:57:07.5091Z","times_seen":626616,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.anura.io/showads.js?90682510282","fqdn":"ads.anura.io","domain":"anura.io","tld":"io"},"ip":{"addr":"54.230.111.55","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:10.363Z","timestamp":1702046170363,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads.anura.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 30 May 2023 00:00:00 GMT","end":"Thu, 27 Jun 2024 23:59:59 GMT"},"fingerprint":{"sha1":"69:66:FA:26:E2:E4:89:00:9A:F7:DE:2C:F6:5A:C2:B9:58:04:5D:E6","sha256":"C2:BE:0D:1A:88:8A:A7:C8:1C:31:AE:74:D8:05:8D:2E:83:3E:9F:3A:8D:5D:05:E0:AB:44:A6:E6:43:13:50:9C"}}},"request":{"raw":"GET /showads.js?90682510282 HTTP/1.1\r\nHost: ads.anura.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 07 Dec 2023 19:40:31 GMT\r\nserver: nginx\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Du6zb8Dv3-qXvua8ZYJwFyDg-swqmJLjpXnFJluEopaf1aWetHocnA==\r\nage: 68132\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T10:57:30.943449Z","times_seen":14782693,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":79,"dns":32,"connect":1,"send":0,"wait":4,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.quickencompare.com/nmn/logo/dollar-money-icon-small.svg","fqdn":"content.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:06.606Z","timestamp":1702046166606,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 20 Feb 2023 00:00:00 GMT","end":"Tue, 20 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:4F:F5:9D:CC:0B:84:6F:19:29:53:3F:57:FA:AF:13:47:78:8C:D4","sha256":"AB:B5:03:98:D9:CB:8B:0F:D6:E0:7B:F4:85:30:EE:45:1C:DE:9E:CE:18:AA:55:47:24:90:A1:18:E4:40:03:EC"}}},"request":{"raw":"GET /nmn/logo/dollar-money-icon-small.svg HTTP/1.1\r\nHost: content.quickencompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visitorId=976d9683-a360-401d-9aa2-6e62aa115154; __cf_bm=nReyGEUG_FM4juS9cJzu463S.6anTSx8yoCus4yrZZw-1702046159-0-ARJmq5htPamGHqacCiA9bHma8kCMehsPbAIi37DTkE7hwAewu5QoVemc7y4DY6/FeAb8lRDC/i/gCzNpKM+hxrQ=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Dec 2023 14:36:00 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 23 Nov 2023 14:00:50 GMT\r\nx-amz-server-side-encryption: AES256\r\netag: W/\"3b280fb1b5f603b076383e1ca6ea531f\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6528f10684ec39317f94ed2a540d88b4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN54-C1\r\nx-amz-cf-id: Ani-paQksdVynqIW9BXjlj0Gx7_MvsMOT21oA0uKpKBIop_r2N12Ew==\r\ncf-cache-status: REVALIDATED\r\nexpires: Fri, 08 Dec 2023 18:36:00 GMT\r\ncache-control: public, max-age=14400\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 8325bcf3aa210afe-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7628,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with very long lines (7675), with no line terminators","md5":"9c7fa5ca9ac7adf457a83b5aed9fe269","sha1":"d527d4db3df8b0adb6af6408d9ab45c3ec67dc02","sha256":"f647b5bacc626969604abca8928075eb34accf47048b1ffa58e2cc56c08b0d3a","sha512":"b82b24c4b59211de9d17a3b49b10c6a02a44bbb609446f110f7126c52431f419c96f29afc7f9a39b91dfd7019d89b003cfadc00ef5638679844fed237ef90773","ssdeep":"96:M8DOyUb8luS7tivhhDEz55KXkBAYl98WHxUsNvrf1WWE+M51v5mFMMf2B0n2ceb:tDOSluSefEz3FltHWyR9E+M5x52MMeb","tlshash":"86f14cb8ad3b976eb8865e9f8c5ac34c6c35f42b176490074d89afa3b1d68b020d4533","first_seen":"2023-06-02T22:01:07Z","last_seen":"2025-01-03T15:16:34.307587Z","times_seen":102,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-refinance.enhancedrefinow.com/pixel-616e834028d94a75ecaf.js","fqdn":"cdn-refinance.enhancedrefinow.com","domain":"enhancedrefinow.com","tld":"com"},"ip":{"addr":"104.18.5.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:06.598Z","timestamp":1702046166598,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"enhancedrefinow.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 03 Mar 2023 00:00:00 GMT","end":"Fri, 01 Mar 2024 23:59:59 GMT"},"fingerprint":{"sha1":"CC:38:9A:93:4C:BD:74:FE:30:18:77:1F:80:24:AF:9E:02:FA:AB:56","sha256":"13:EE:41:7B:75:D4:1E:7D:00:43:FB:5F:7A:4F:92:8A:15:67:F5:DE:3C:88:12:3A:5F:B3:2C:4C:1B:9F:50:E3"}}},"request":{"raw":"GET /pixel-616e834028d94a75ecaf.js HTTP/1.1\r\nHost: cdn-refinance.enhancedrefinow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Dec 2023 14:36:01 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-dns-prefetch-control: off\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nreferrer-policy: same-origin\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 05 Dec 2023 23:27:35 GMT\r\netag: W/\"258d6-18c3c4eef05\"\r\ncf-cache-status: MISS\r\nexpires: Fri, 08 Dec 2023 18:36:01 GMT\r\nset-cookie: __cf_bm=wlhDV6Jb7vPbOKJCloIQbJFeSWsSoCxcoesvm1Rdm6g-1702046161-0-AS2HQ0Q1Bps2AQB34MooSbOmxWs1rXLmMLQoPx9HY4NwKjo7asbWaMQlajUUkE7dmcLN9xgM8aFLJ4KnUiANpUI=; path=/; expires=Fri, 08-Dec-23 15:06:01 GMT; domain=.enhancedrefinow.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 8325bcf3ac3556c9-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":153814,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T10:57:30.943449Z","times_seen":14782693,"resource_available":true,"data":null}},"time_used":1843,"timings":{"blocked":68,"dns":49,"connect":2,"send":0,"wait":1696,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.quickencompare.com/visitor","fqdn":"money.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:08.902Z","timestamp":1702046168902,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 20 Feb 2023 00:00:00 GMT","end":"Tue, 20 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:4F:F5:9D:CC:0B:84:6F:19:29:53:3F:57:FA:AF:13:47:78:8C:D4","sha256":"AB:B5:03:98:D9:CB:8B:0F:D6:E0:7B:F4:85:30:EE:45:1C:DE:9E:CE:18:AA:55:47:24:90:A1:18:E4:40:03:EC"}}},"request":{"raw":"POST /visitor HTTP/1.1\r\nHost: money.quickencompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b\r\nContent-Type: application/json\r\nContent-Length: 1515\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visitorId=976d9683-a360-401d-9aa2-6e62aa115154; sourceId=affl_everflow_qc-mon_143_259; connect.sid=s%3AJs9j82OmSUWNQPNWsZpPBUI8NztNnPON.Vo8i3xL9apcWd%2BOBeYofRfIH%2BSr1RuDKkaINlUBKkis; BIGipServerpl.prod-lreernwapp-lnd=!v+/04d+r6BZa1xVYWO5LSMyMNc4rD1WfHvJ08XcY49RCKkreEUvB6U3MDW2rzb7xosxksDTr9LxJ0sk=; __cf_bm=nReyGEUG_FM4juS9cJzu463S.6anTSx8yoCus4yrZZw-1702046159-0-ARJmq5htPamGHqacCiA9bHma8kCMehsPbAIi37DTkE7hwAewu5QoVemc7y4DY6/FeAb8lRDC/i/gCzNpKM+hxrQ=; DAPROPS=\"bS:0|scsVersion:2.4.5|bcookieSupport:1|bcss.animations:1|bcss.columns:1|bcss.transforms:1|bcss.transitions:1|sdeviceAspectRatio:1280/1024|sdevicePixelRatio:1|idisplayColorDepth:24|bflashCapable:0|bhtml.audio.ogg:1|bhtml.audio.mp3:1|bhtml.audio.wav:1|bhtml.audio.m4a:1|bhtml.canvas:1|bhtml.inlinesvg:1|bhtml.svg:1|bhtml.video.ap4x:0|bhtml.video.av1:1|bhtml.video.ogg:1|bhtml.video.h264:1|bhtml.video.webm:1|bjs.accessDom:1|bjs.applicationCache:0|bjs.deviceMotion:1|bjs.geoLocation:1|bjs.indexedDB:1|bjs.json:1|bjs.localStorage:1|bjs.modifyCss:1|bjs.modifyDom:1|bjs.querySelector:1|bjs.sessionStorage:1|bjs.supportBasicJavaScript:1|bjs.supportConsoleLog:1|bjs.supportEventListener:1|bjs.supportEvents:1|bjs.webGl:1|bjs.webSockets:1|bjs.webSqlDatabase:0|bjs.webWorkers:1|bjs.xhr:1|srendererRef:02919241789|sscreenWidthHeight:1280/1024|stimeZone:UTC|buserMedia:1|saudioRef:25450949bE:0\"\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Dec 2023 14:36:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-dns-prefetch-control: off\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nreferrer-policy: same-origin\r\ncache-control: no-store\r\netag: W/\"e7-xO6EJlDDN3o8NObj8SS8aKkI/Hw\"\r\ncf-cache-status: DYNAMIC\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 8325bd01ac340afe-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":231,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"820d81cea9c67c8563a00e4d9a9bb29b","sha1":"84783805db35b2fe7f9519119def78c2a23e0528","sha256":"b62ccaa7ef93881342e0d53749ac53fff15cad621425e7cc0c406d122daa6538","sha512":"d28decf89aabadc1011540b7de8c31856d622d881c7c513ab29e417ac6ffd288c4edfa986416ea7a287825d11f740e6c3ae5d9c5fc8c843889958d8b54000760","ssdeep":"","tlshash":"bfd02eab692cf808b3e90fc8093a0d0880cf6a2622e8808d882b902caa03c300020e20","first_seen":"2023-12-08T15:36:21Z","last_seen":"2023-12-08T15:36:21Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-lre.refinance.enhancedrefinow.com/manifest.d7f9016d0e5da5649c5f.js","fqdn":"static-lre.refinance.enhancedrefinow.com","domain":"enhancedrefinow.com","tld":"com"},"ip":{"addr":"104.18.5.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:06.688Z","timestamp":1702046166688,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"enhancedrefinow.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 03 Mar 2023 00:00:00 GMT","end":"Fri, 01 Mar 2024 23:59:59 GMT"},"fingerprint":{"sha1":"CC:38:9A:93:4C:BD:74:FE:30:18:77:1F:80:24:AF:9E:02:FA:AB:56","sha256":"13:EE:41:7B:75:D4:1E:7D:00:43:FB:5F:7A:4F:92:8A:15:67:F5:DE:3C:88:12:3A:5F:B3:2C:4C:1B:9F:50:E3"}}},"request":{"raw":"GET /manifest.d7f9016d0e5da5649c5f.js HTTP/1.1\r\nHost: static-lre.refinance.enhancedrefinow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Dec 2023 14:36:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 13 Nov 2023 19:49:34 GMT\r\netag: W/\"ab05865229c4be0e25398c314b00a787\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: j6xQDrVNaIhrWO44n7p_cS7sPJVO2HTWlWu5NqGBxiq0BcirAWMkGA==\r\ncf-cache-status: REVALIDATED\r\nexpires: Fri, 08 Dec 2023 18:36:00 GMT\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=mE82UF8ouwIu4QROgHVjW83uf_6lX5QyPR3UsPfJydo-1702046160-0-AclQZ8sr4jOa+QcnUU+jmAlC/9RVFA812we9XEFolEpAZLpuK8Psz4swaPKsDh9mWujyk6/SMbgjOk4bM/jzC/o=; path=/; expires=Fri, 08-Dec-23 15:06:00 GMT; domain=.enhancedrefinow.com; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 8325bcf3dc5856c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12636,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (12636), with no line terminators","md5":"ab05865229c4be0e25398c314b00a787","sha1":"ffabd971a1d77d782aec1370f52e8f1d83769c82","sha256":"a261d93839339ffe4e77dead49be5380abb6b61fdbd67d735e01ccd17bae918f","sha512":"b3880bd9c6fa94e0e6345668dcb60f3976847aa894b7822fdb3193b2ecc3717bb90c4e981aafd82164efafa1f1ff235363802fb0f12410a752b1e2eedd76d652","ssdeep":"384:VkpQ49wHRasQ0JiPocrIkRTBymqHr2ntjw:WpQ49QTxwPocrbimqHrstjw","tlshash":"1f42d8eeb76c71b302a724e8883f5552e1732516000d84a0d611d2e6acbdbc9d57bff8","first_seen":"2023-11-15T15:41:45Z","last_seen":"2023-12-10T17:57:27Z","times_seen":20,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.lmbahsj2.com/scripts/sdk/everflow.js","fqdn":"www.lmbahsj2.com","domain":"lmbahsj2.com","tld":"com"},"ip":{"addr":"35.201.76.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:09.016Z","timestamp":1702046169016,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lmbahsj2.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 28 Apr 2023 21:05:02 GMT","end":"Mon, 13 May 2024 15:10:13 GMT"},"fingerprint":{"sha1":"19:8A:1C:6D:15:5F:1E:82:A2:B6:F3:E1:A8:82:E4:C5:EE:3C:46:53","sha256":"AD:07:6F:39:EC:9D:DE:5D:01:AE:9F:A4:29:CF:11:44:D6:CD:26:E9:F1:14:4B:91:B7:6B:00:EE:F0:19:48:D4"}}},"request":{"raw":"GET /scripts/sdk/everflow.js HTTP/1.1\r\nHost: www.lmbahsj2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 Dec 2023 14:36:02 GMT\r\ncontent-type: text/javascript\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model\r\ncache-control: max-age=14400\r\nvary: Origin\r\nx-eflow-request-id: f25a8de9-fa2d-447c-ac1f-93bcab230399\r\ncontent-encoding: gzip\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61234,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T10:57:30.943449Z","times_seen":14782693,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":127,"dns":1,"connect":10,"send":0,"wait":122,"receive":0,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-lre.refinance.enhancedrefinow.com/main.93e3cac8409e105ab51a.css","fqdn":"static-lre.refinance.enhancedrefinow.com","domain":"enhancedrefinow.com","tld":"com"},"ip":{"addr":"104.18.5.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:06.596Z","timestamp":1702046166596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"enhancedrefinow.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 03 Mar 2023 00:00:00 GMT","end":"Fri, 01 Mar 2024 23:59:59 GMT"},"fingerprint":{"sha1":"CC:38:9A:93:4C:BD:74:FE:30:18:77:1F:80:24:AF:9E:02:FA:AB:56","sha256":"13:EE:41:7B:75:D4:1E:7D:00:43:FB:5F:7A:4F:92:8A:15:67:F5:DE:3C:88:12:3A:5F:B3:2C:4C:1B:9F:50:E3"}}},"request":{"raw":"GET /main.93e3cac8409e105ab51a.css HTTP/1.1\r\nHost: static-lre.refinance.enhancedrefinow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Dec 2023 14:36:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 13 Nov 2023 19:49:34 GMT\r\netag: W/\"51281ef41f6e2e58b368816515b69b7b\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: cQWHkrqEyqhTeJXjNNmvwKJQWJN5-Z9Ogl1iTx76tVdfXcT0CRjncw==\r\ncf-cache-status: REVALIDATED\r\nexpires: Fri, 08 Dec 2023 18:36:00 GMT\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=jKeQf56y_Wctaavww7mGVkcmTmRjO1Lg8vG2bZFgrE8-1702046160-0-ATQcqv+C+k7Ec/JZVSdrmwZVNfEJeoTX24oQCmBSzizwO2LH6eBOI9eweHPI+r8k4vCqwdCmM1ykcsGKzgyPAiM=; path=/; expires=Fri, 08-Dec-23 15:06:00 GMT; domain=.enhancedrefinow.com; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 8325bcf39c1c56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":175557,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (45544)","md5":"51281ef41f6e2e58b368816515b69b7b","sha1":"0c82a25d8cc39e108175154e244bcb2490b18b0d","sha256":"64cc6c3ae44025a0b21f96431acbdc5fe1601b19e27cfd4dfa0651dbb6776f33","sha512":"9efc5519e7820b85cdfb337ed6fa9f47f9e124e8ab707a5e9761a849485aa2f00dfaf555f889f128fa38398e1df6c789b21f429bb7d7c0974a891448359c8c48","ssdeep":"768:mMCSolXTXjzINgA9XkME+QXoxvdkzjujxAgTgzqjihRjcMInJIH4BITsMkmvHrTA:YzcgukskpJ/vB8CIzzre30AwClja","tlshash":"7d049532a520a1acb077c8eab681b6583115d517ea5b86f6fd61dd78c6c71b32f2330c","first_seen":"2023-10-31T16:36:34Z","last_seen":"2023-12-10T17:57:27Z","times_seen":30,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":58,"dns":40,"connect":1,"send":0,"wait":156,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/wi/ytc.js","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.252","port":443,"asn":203220,"as":"Yahoo! UK Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:10.183Z","timestamp":1702046170183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.api.fantasysports.yahoo.com","organization":"Oath Holdings Inc."},"issuer":{"commonName":"DigiCert SHA2 High Assurance Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Nov 2023 00:00:00 GMT","end":"Wed, 27 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"73:32:A8:90:C9:6F:41:1C:ED:AA:2A:95:41:24:4E:E2:B2:AB:FB:D6","sha256":"0A:DC:8A:FB:63:56:2D:8D:E2:CE:B6:4F:F0:A6:8B:C9:F8:BB:A1:BE:16:48:D2:6A:5F:C7:40:28:7F:DB:02:3B"}}},"request":{"raw":"GET /wi/ytc.js HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: 6U7hpp8nI0ixD3Hc6+qLJWsj2b9iJPWCM/xKPOO0l70oFb+FRwyPoClRWpdDhNyEweJuo9OE5LJJRSzXTZZTdA==\r\nx-amz-request-id: A2T4WCSK39DYEF3H\r\ndate: Fri, 08 Dec 2023 14:04:56 GMT\r\nlast-modified: Mon, 26 Jun 2023 09:26:35 GMT\r\nx-amz-expiration: expiry-date=\"Wed, 31 Jul 2024 00:00:00 GMT\", rule-id=\"oath-standard-lifecycle\"\r\netag: \"5c6ed25dce803fd84288922b8928409e-df\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public,max-age=3600\r\nx-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\nserver: ATS\r\nreferrer-policy: no-referrer-when-downgrade\r\nvary: Origin, Accept-Encoding\r\nage: 1868\r\ncontent-encoding: gzip\r\ncontent-length: 6262\r\nstrict-transport-security: max-age=31536000\r\nexpect-ct: max-age=31536000, report-uri=\"http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nats-carp-promotion: 1, 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18187,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (18187), with no line terminators","md5":"5c6ed25dce803fd84288922b8928409e","sha1":"3ccc10546ae12f160bacac1e9e422af091ea4a41","sha256":"480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91","sha512":"fe9265d2e6ea4acb7e0a87e08bedfaf48bcbad62bb7a86e73f9ae21c8437af3334d2a9733c6bc47a12bbf54f97ec79271cb5300f90231614f407599d1b4c05e5","ssdeep":"384:s40C/Y3uOOpp9W89rzOv4m8Avx2kjEhNgyyuek:VjOOp281UsAlErPyud","tlshash":"3982c748b3d5f0a103e2a1b1613fa90b7675193d1c6e9560b212c7843c7dacb9236f7d","first_seen":"2023-06-26T11:33:35Z","last_seen":"2024-08-29T17:29:21.078502Z","times_seen":6264,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":76,"dns":38,"connect":33,"send":0,"wait":35,"receive":1,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script.anura.io/response.json","fqdn":"script.anura.io","domain":"anura.io","tld":"io"},"ip":{"addr":"3.8.43.133","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:10.705Z","timestamp":1702046170705,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script.anura.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 16 Oct 2023 00:00:00 GMT","end":"Wed, 13 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"83:CF:23:67:0B:B9:DB:BB:65:3F:31:44:AD:06:8B:B2:7E:B4:E1:20","sha256":"22:8A:B7:8D:F7:07:94:DE:BE:71:80:9B:A2:B1:3F:EA:42:3F:00:92:31:15:44:8C:50:D7:C4:4C:B1:2C:09:41"}}},"request":{"raw":"POST /response.json HTTP/1.1\r\nHost: script.anura.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 5442\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Dec 2023 14:36:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: nginx\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST\r\nexpires: Sun, 28 Dec 1980 18:57:00 EST\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":151,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"2950c067f8f01afc63f2b7f35e3ebe8b","sha1":"301a76c7f88913a1fa15761fdac22d39cac45b27","sha256":"20c1e075f130969475cf05e65e3d6ff153fbbda360181b6f453406e377623caf","sha512":"126324e7488e7445c5e0ccf153179fd9c8236c8d786af28b27b47773abe1e1332f1d0c1d74ba3c915e19c7dc9a149862b5d966eb9822f3bdbc6ba3e7431256a3","ssdeep":"","tlshash":"efc08c070d06f089f7d08ece3a304c332469a4c7134f014986abca5a9ea987142b7999","first_seen":"2023-12-08T15:36:21Z","last_seen":"2023-12-08T15:36:21Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":67,"dns":1,"connect":29,"send":0,"wait":132,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","fqdn":"money.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-08T14:36:04.918Z","timestamp":1702046164918,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 20 Feb 2023 00:00:00 GMT","end":"Tue, 20 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:4F:F5:9D:CC:0B:84:6F:19:29:53:3F:57:FA:AF:13:47:78:8C:D4","sha256":"AB:B5:03:98:D9:CB:8B:0F:D6:E0:7B:F4:85:30:EE:45:1C:DE:9E:CE:18:AA:55:47:24:90:A1:18:E4:40:03:EC"}}},"request":{"raw":"GET /?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b HTTP/1.1\r\nHost: money.quickencompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Dec 2023 14:35:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-dns-prefetch-control: off\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nreferrer-policy: same-origin\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nset-cookie: visitorId=976d9683-a360-401d-9aa2-6e62aa115154; Domain=.quickencompare.com; Path=/; Expires=Sat, 07 Dec 2024 14:35:58 GMT\nsourceId=affl_everflow_qc-mon_143_259; Path=/; Expires=Fri, 15 Dec 2023 14:35:58 GMT\nconnect.sid=s%3AJs9j82OmSUWNQPNWsZpPBUI8NztNnPON.Vo8i3xL9apcWd%2BOBeYofRfIH%2BSr1RuDKkaINlUBKkis; Path=/; Expires=Fri, 15 Dec 2023 14:35:59 GMT; HttpOnly\nBIGipServerpl.prod-lreernwapp-lnd=!v+/04d+r6BZa1xVYWO5LSMyMNc4rD1WfHvJ08XcY49RCKkreEUvB6U3MDW2rzb7xosxksDTr9LxJ0sk=; path=/; Httponly; Secure\n__cf_bm=nReyGEUG_FM4juS9cJzu463S.6anTSx8yoCus4yrZZw-1702046159-0-ARJmq5htPamGHqacCiA9bHma8kCMehsPbAIi37DTkE7hwAewu5QoVemc7y4DY6/FeAb8lRDC/i/gCzNpKM+hxrQ=; path=/; expires=Fri, 08-Dec-23 15:05:59 GMT; domain=.quickencompare.com; HttpOnly; Secure; SameSite=None\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 8325bce91aaf0afe-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24889,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T10:57:30.943449Z","times_seen":14782693,"resource_available":true,"data":null}},"time_used":1444,"timings":{"blocked":58,"dns":39,"connect":1,"send":0,"wait":1327,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-lre.refinance.enhancedrefinow.com/main.93e3cac8409e105ab51a.js","fqdn":"static-lre.refinance.enhancedrefinow.com","domain":"enhancedrefinow.com","tld":"com"},"ip":{"addr":"104.18.5.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:06.686Z","timestamp":1702046166686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"enhancedrefinow.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 03 Mar 2023 00:00:00 GMT","end":"Fri, 01 Mar 2024 23:59:59 GMT"},"fingerprint":{"sha1":"CC:38:9A:93:4C:BD:74:FE:30:18:77:1F:80:24:AF:9E:02:FA:AB:56","sha256":"13:EE:41:7B:75:D4:1E:7D:00:43:FB:5F:7A:4F:92:8A:15:67:F5:DE:3C:88:12:3A:5F:B3:2C:4C:1B:9F:50:E3"}}},"request":{"raw":"GET /main.93e3cac8409e105ab51a.js HTTP/1.1\r\nHost: static-lre.refinance.enhancedrefinow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Dec 2023 14:36:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 13 Nov 2023 19:49:34 GMT\r\netag: W/\"dec41562bede99a23e8a683bb0b2c7a7\"\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: EJy6PytxORPNYh-TGOTN6W-_ThcOjbKUjHTMw5tSApe4obskrYLi1A==\r\ncf-cache-status: REVALIDATED\r\nexpires: Fri, 08 Dec 2023 18:36:00 GMT\r\ncache-control: public, max-age=14400\r\nset-cookie: __cf_bm=WC_tEWI_SUzlRB2fbhrJzt078gmHidYtsQb4gV46uOE-1702046160-0-AahJ+2rIh770dcpjL1xIJKeT2f9TE2H8XZbjJnsdFRNc6AB1Eq9cVn6tuQkOw53393tckPO/ZBGTgXgPlaokoeo=; path=/; expires=Fri, 08-Dec-23 15:06:00 GMT; domain=.enhancedrefinow.com; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=2592000\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 8325bcf3dc5656c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":810885,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T10:57:30.943449Z","times_seen":14782693,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.quickencompare.com/track","fqdn":"money.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:09.172Z","timestamp":1702046169172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 20 Feb 2023 00:00:00 GMT","end":"Tue, 20 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:4F:F5:9D:CC:0B:84:6F:19:29:53:3F:57:FA:AF:13:47:78:8C:D4","sha256":"AB:B5:03:98:D9:CB:8B:0F:D6:E0:7B:F4:85:30:EE:45:1C:DE:9E:CE:18:AA:55:47:24:90:A1:18:E4:40:03:EC"}}},"request":{"raw":"POST /track HTTP/1.1\r\nHost: money.quickencompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b\r\nContent-Type: application/json\r\nContent-Length: 472\r\nOrigin: https://money.quickencompare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visitorId=976d9683-a360-401d-9aa2-6e62aa115154; sourceId=affl_everflow_qc-mon_143_259; connect.sid=s%3AJs9j82OmSUWNQPNWsZpPBUI8NztNnPON.Vo8i3xL9apcWd%2BOBeYofRfIH%2BSr1RuDKkaINlUBKkis; BIGipServerpl.prod-lreernwapp-lnd=!v+/04d+r6BZa1xVYWO5LSMyMNc4rD1WfHvJ08XcY49RCKkreEUvB6U3MDW2rzb7xosxksDTr9LxJ0sk=; __cf_bm=nReyGEUG_FM4juS9cJzu463S.6anTSx8yoCus4yrZZw-1702046159-0-ARJmq5htPamGHqacCiA9bHma8kCMehsPbAIi37DTkE7hwAewu5QoVemc7y4DY6/FeAb8lRDC/i/gCzNpKM+hxrQ=; DAPROPS=\"bS:0|scsVersion:2.4.5|bcookieSupport:1|bcss.animations:1|bcss.columns:1|bcss.transforms:1|bcss.transitions:1|sdeviceAspectRatio:1280/1024|sdevicePixelRatio:1|idisplayColorDepth:24|bflashCapable:0|bhtml.audio.ogg:1|bhtml.audio.mp3:1|bhtml.audio.wav:1|bhtml.audio.m4a:1|bhtml.canvas:1|bhtml.inlinesvg:1|bhtml.svg:1|bhtml.video.ap4x:0|bhtml.video.av1:1|bhtml.video.ogg:1|bhtml.video.h264:1|bhtml.video.webm:1|bjs.accessDom:1|bjs.applicationCache:0|bjs.deviceMotion:1|bjs.geoLocation:1|bjs.indexedDB:1|bjs.json:1|bjs.localStorage:1|bjs.modifyCss:1|bjs.modifyDom:1|bjs.querySelector:1|bjs.sessionStorage:1|bjs.supportBasicJavaScript:1|bjs.supportConsoleLog:1|bjs.supportEventListener:1|bjs.supportEvents:1|bjs.webGl:1|bjs.webSockets:1|bjs.webSqlDatabase:0|bjs.webWorkers:1|bjs.xhr:1|srendererRef:02919241789|sscreenWidthHeight:1280/1024|stimeZone:UTC|buserMedia:1|saudioRef:25450949bE:0\"; _dd_s=rum=1\u0026id=35fc17e5-eaa0-49f4-886d-48b7227ce21b\u0026created=1702046168945\u0026expire=1702047068945; _rdt_uuid=1702046169133.cbf79ccb-3675-4c4d-b743-3c3a20a1acb6\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Dec 2023 14:36:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-dns-prefetch-control: off\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nreferrer-policy: same-origin\r\ncache-control: no-store\r\netag: W/\"f6-UWIDwLWjzlnvk1OPS1AVTNGVoxs\"\r\ncf-cache-status: DYNAMIC\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 8325bd033d9a0afe-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":246,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"40cfec07d16b968ce99df15ef043e1ef","sha1":"2d5be0b97509fa2589900410b5b2f7fbf3873d5e","sha256":"a9d7e021b6db3c6a82710e1d587e9c86b282b852944a1475642b25bdcc39f807","sha512":"85ec8d724663023d5d3ee18989f06c0c85b128d7386e5617fb78254ef7b1fb3ad98ed65bd08c4bb7496a72c2bd66d29de82792368b1e272316bbcb4fb0a2504d","ssdeep":"","tlshash":"86d02e025958fc98f5c40e8e3c3a1e3b0221e2c222ec008009ecea00e24883889db959","first_seen":"2023-12-08T15:36:21Z","last_seen":"2023-12-08T15:36:21Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-320492720","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:09.033Z","timestamp":1702046169033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:19 GMT","end":"Mon, 15 Jan 2024 11:18:18 GMT"},"fingerprint":{"sha1":"37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34","sha256":"11:4C:25:F9:AD:55:F4:E8:94:2E:64:99:7D:15:71:51:3E:11:44:0E:06:0D:EC:15:C3:6D:41:81:4B:0C:30:3D"}}},"request":{"raw":"GET /gtag/js?id=AW-320492720 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 08 Dec 2023 14:36:02 GMT\r\nexpires: Fri, 08 Dec 2023 14:36:02 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 08 Dec 2023 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 75529\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":211760,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (4179)","md5":"0e15cb67511eb360a6083c279210d336","sha1":"bf591fae4451caaacb9cd51e5c80da7958b3b34d","sha256":"01c8da48c092f25f31db23c09f69d9adb8c7ee6e1e7ee05544d5e1bce4d24e5c","sha512":"c748299003d184b6c7852fd38b0924d072fc70b7aa5673783108f7e3c1642a83ed3560372cdcb20edbe206a0771d35a19820d0078d30ad7756dea31df91d5b6b","ssdeep":"3072:kcdZAlCIWYVUyO1jO6ypDDMv0MWXdXAhA9DfFWkY4X:NfIHVUy4h3WtwhA9DfYq","tlshash":"9e24f7d9b383b46a82a3b474503f010bb1bb6d96f84ccc94e189c5d52eb8699417bf7c","first_seen":"2023-12-08T15:36:20Z","last_seen":"2023-12-08T15:36:21Z","times_seen":1,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":108,"dns":0,"connect":10,"send":0,"wait":29,"receive":49,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"money.quickencompare.com/app-configuration/?path=/lendingLeadGen/fraud/anura/enabled","fqdn":"money.quickencompare.com","domain":"quickencompare.com","tld":"com"},"ip":{"addr":"104.18.29.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:08.912Z","timestamp":1702046168912,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 20 Feb 2023 00:00:00 GMT","end":"Tue, 20 Feb 2024 23:59:59 GMT"},"fingerprint":{"sha1":"8A:4F:F5:9D:CC:0B:84:6F:19:29:53:3F:57:FA:AF:13:47:78:8C:D4","sha256":"AB:B5:03:98:D9:CB:8B:0F:D6:E0:7B:F4:85:30:EE:45:1C:DE:9E:CE:18:AA:55:47:24:90:A1:18:E4:40:03:EC"}}},"request":{"raw":"GET /app-configuration/?path=/lendingLeadGen/fraud/anura/enabled HTTP/1.1\r\nHost: money.quickencompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: visitorId=976d9683-a360-401d-9aa2-6e62aa115154; sourceId=affl_everflow_qc-mon_143_259; connect.sid=s%3AJs9j82OmSUWNQPNWsZpPBUI8NztNnPON.Vo8i3xL9apcWd%2BOBeYofRfIH%2BSr1RuDKkaINlUBKkis; BIGipServerpl.prod-lreernwapp-lnd=!v+/04d+r6BZa1xVYWO5LSMyMNc4rD1WfHvJ08XcY49RCKkreEUvB6U3MDW2rzb7xosxksDTr9LxJ0sk=; __cf_bm=nReyGEUG_FM4juS9cJzu463S.6anTSx8yoCus4yrZZw-1702046159-0-ARJmq5htPamGHqacCiA9bHma8kCMehsPbAIi37DTkE7hwAewu5QoVemc7y4DY6/FeAb8lRDC/i/gCzNpKM+hxrQ=; DAPROPS=\"bS:0|scsVersion:2.4.5|bcookieSupport:1|bcss.animations:1|bcss.columns:1|bcss.transforms:1|bcss.transitions:1|sdeviceAspectRatio:1280/1024|sdevicePixelRatio:1|idisplayColorDepth:24|bflashCapable:0|bhtml.audio.ogg:1|bhtml.audio.mp3:1|bhtml.audio.wav:1|bhtml.audio.m4a:1|bhtml.canvas:1|bhtml.inlinesvg:1|bhtml.svg:1|bhtml.video.ap4x:0|bhtml.video.av1:1|bhtml.video.ogg:1|bhtml.video.h264:1|bhtml.video.webm:1|bjs.accessDom:1|bjs.applicationCache:0|bjs.deviceMotion:1|bjs.geoLocation:1|bjs.indexedDB:1|bjs.json:1|bjs.localStorage:1|bjs.modifyCss:1|bjs.modifyDom:1|bjs.querySelector:1|bjs.sessionStorage:1|bjs.supportBasicJavaScript:1|bjs.supportConsoleLog:1|bjs.supportEventListener:1|bjs.supportEvents:1|bjs.webGl:1|bjs.webSockets:1|bjs.webSqlDatabase:0|bjs.webWorkers:1|bjs.xhr:1|srendererRef:02919241789|sscreenWidthHeight:1280/1024|stimeZone:UTC|buserMedia:1|saudioRef:25450949bE:0\"\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 Dec 2023 14:36:02 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-dns-prefetch-control: off\r\nstrict-transport-security: max-age=2592000\r\nx-download-options: noopen\r\nreferrer-policy: same-origin\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\ncontent-security-policy: frame-ancestors 'self' *.lowermybills.com *.quickenloans.com app.optimizely.com analytics.google.com\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 8325bd01bc410afe-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-05-07T10:57:00.671128Z","times_seen":381626,"resource_available":true,"data":null}},"time_used":775,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":775,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.typekit.net/p.css?s=1\u0026k=msd8xng\u0026ht=tk\u0026f=37513.37518.37522\u0026a=121980931\u0026app=typekit\u0026e=css","fqdn":"p.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.76.184","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:07.063Z","timestamp":1702046167063,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 21 Sep 2023 00:00:00 GMT","end":"Mon, 21 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"42:82:CA:A5:EA:30:8F:60:60:37:2D:24:17:3D:52:62:54:D7:03:5B","sha256":"EF:DB:6C:82:0F:DB:74:FB:4D:DD:04:C5:A2:FF:1B:28:A6:BE:61:EE:CF:AF:10:A2:F7:9F:30:8F:71:44:61:29"}}},"request":{"raw":"GET /p.css?s=1\u0026k=msd8xng\u0026ht=tk\u0026f=37513.37518.37522\u0026a=121980931\u0026app=typekit\u0026e=css HTTP/1.1\r\nHost: p.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.typekit.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css\r\ncontent-length: 5\r\nlast-modified: Tue, 07 Mar 2023 19:56:00 GMT\r\netag: \"640796d0-5\"\r\ncache-control: public, max-age=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\ndate: Fri, 08 Dec 2023 14:36:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"825e67eeb6b4bfac7536fc639a56ec43","sha1":"574a45385ae62544c7424e6f06417f0370b1a532","sha256":"c10ff60fd741e3b2b97479f16f45e5fa57449629f4d032f647fd23041a6ad7b1","sha512":"cdb6cde1fd1b32346cf34e75ae5b41646b947dc392ccd677d9b61fe32be80793f36362f58ba7b925336faa30f47fdc85105cadf460abde5d77fcf802caa30552","ssdeep":"","tlshash":"4540000000000300000000000330000000003000000000000300300000000000000000","first_seen":"2023-04-05T06:39:09Z","last_seen":"2025-04-06T19:07:10.877111Z","times_seen":6448,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":79,"dns":58,"connect":1,"send":0,"wait":2,"receive":6,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.revjet.com/analytics?acu=6680","fqdn":"ads.revjet.com","domain":"revjet.com","tld":"com"},"ip":{"addr":"65.109.98.106","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:09.066Z","timestamp":1702046169066,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.revjet.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 20 Mar 2023 00:00:00 GMT","end":"Thu, 11 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"03:20:65:55:CD:08:1C:F0:68:28:E7:A4:5F:21:09:76:87:BF:9D:81","sha256":"AB:35:5A:BB:4C:BC:1E:79:31:77:DF:B2:5D:B9:14:82:26:40:71:97:7A:75:FC:34:01:DF:DA:3B:DC:B6:87:7A"}}},"request":{"raw":"GET /analytics?acu=6680 HTTP/1.1\r\nHost: ads.revjet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 Dec 2023 14:36:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 20 Jul 2023 16:46:10 GMT\r\netag: W/\"64b964d2-4c14\"\r\nexpires: Fri, 08 Dec 2023 14:46:02 GMT\r\ncache-control: max-age=600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19476,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1311)","md5":"26ec352468322f70910e03feb9b8b8fb","sha1":"18878e8adcd809ad7a4850c8698efd24b22c04e5","sha256":"2d84cdbfaf9b2bc0ba30bc5f67e45d03b265b52c3cfe24353e09175b1fb0fdfb","sha512":"9b0d180ab85748c8e16701d2ab1603c9be6aaef8e481574d3b35152f9f134e66c07a4620101e23044c1a07c458b7aa02cfac1474089e44ba262eec85283aa0bc","ssdeep":"384:S7NAWyKtqOLyN59yqK+VDSvNjHwAcOOStnW/np:S5w0sq9+5S1LwARFmp","tlshash":"d892d68cba65b426876330b1617f560f723ba46fb884c8a4a184d8e17c7496d427bf6c","first_seen":"2023-03-12T09:30:56Z","last_seen":"2025-11-04T04:39:00.128265Z","times_seen":729,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":67,"dns":27,"connect":14,"send":0,"wait":13,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.datadoghq-browser-agent.com/datadog-rum-v3.js","fqdn":"www.datadoghq-browser-agent.com","domain":"datadoghq-browser-agent.com","tld":"com"},"ip":{"addr":"54.230.111.221","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://money.quickencompare.com/?moid=307646\u0026sourceid=affl_everflow_qc-mon_143_259\u0026pkey1=259\u0026pkey2=SECCAPS-A\u0026pkey3=92bc792a678d4d3aac6777601f10fd8b\u0026pkey=\u0026sid=143\u0026cmpid=143\u0026crtid=\u0026oid=143\u0026affid=259\u0026_ef_transaction_id=92bc792a678d4d3aac6777601f10fd8b","date":"2023-12-08T14:36:08.556Z","timestamp":1702046168556,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.datadoghq-browser-agent.com","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sat, 14 Jan 2023 00:00:00 GMT","end":"Tue, 16 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"FC:83:1B:FF:12:98:28:60:E5:F1:DC:73:0D:BC:6F:81:22:A7:F1:6D","sha256":"BF:90:E5:1B:7F:EB:5E:B6:0D:04:9C:89:BE:2F:4A:0D:AB:72:51:55:78:D7:96:34:11:26:6F:69:38:2E:17:B5"}}},"request":{"raw":"GET /datadog-rum-v3.js HTTP/1.1\r\nHost: www.datadoghq-browser-agent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://money.quickencompare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Jan 2022 16:36:14 GMT\r\nserver: AmazonS3\r\ncontent-encoding: br\r\ndate: Fri, 08 Dec 2023 14:36:01 GMT\r\ncache-control: max-age=14400, s-maxage=60\r\netag: W/\"647fda9a4d3d74344732d76cf1fff47c\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: PTlERKfrnGZFdmJgeMmN2tF8DEvWCPfFE-fD0H_F2CmkPDKAHUcVdA==\r\nage: 14\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":117677,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"647fda9a4d3d74344732d76cf1fff47c","sha1":"01720d421ce3373f1a1958a1d85edfae5ab5f442","sha256":"4375ebb4771e6dbb66555214b78781f96a3f6fc43f26b6e9acc4a4751551706b","sha512":"7a3c35cb75c6387a8c4f4359287cdad42c5722b7c1362c8189f8ef3d36f1f7642453ca830bf7b315f79947b384034d216e165b5b8b4f79a7596db760ceb86cad","ssdeep":"1536:yHOG/ZzSpabEJ1No/5612iRFDQ+0WVN83fIXDVeAr0tRoBAb3KrFgQn:wPIswXDVeA5Ab6rrn","tlshash":"2bb3e5dcf6c2b07517e33475516f260ab33a2954784a80a4e27ad1d53cb868ea237f7c","first_seen":"2023-03-07T13:55:13Z","last_seen":"2026-05-07T04:30:25.385517Z","times_seen":1669,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":64,"dns":54,"connect":5,"send":0,"wait":4,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
