Edit tour

Windows Analysis Report
http://www.mortgagequestions.com/

Overview

General Information

Sample URL:	http://www.mortgagequestions.com/
Analysis ID:	1580453
Infos:

Detection

Score:	22
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected suspicious Javascript

HTML body contains low number of good links

HTML body contains password input but no form action

Invalid 'forgot password' link found

Stores files to the Windows start menu directory

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6076 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3192 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1992,i,4482549296618371493,1279557440734233122,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4712 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.mortgagequestions.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected suspicious Javascript

Source: 2.28..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://account.mortgagequestions.com/phhm/runtime... The provided JavaScript snippet exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code. While the context is not entirely clear, the overall behavior suggests a potentially malicious script that requires further investigation.

Source: https://account.mortgagequestions.com/phhm/#/login

HTTP Parser: Number of links: 0

Source: https://account.mortgagequestions.com/phhm/#/login

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://account.mortgagequestions.com/phhm/#/login

HTTP Parser: Invalid link: Forgot Password

Source: https://account.mortgagequestions.com/phhm/main.5ae79adb947e0038.js

HTTP Parser: (self.webpackchunkblack_knight=self.webpackchunkblack_knight||[]).push([[792],{92551:function(ae,k,o){var i;ae.exports=(i=o(73049),o(36462),o(1896),o(29614),o(66417),function(){var e=i,c=e.lib.blockcipher,h=e.algo,d=[],m=[],g=[],l=[],u=[],c=[],e=[],d=[],s=[],x=[];!function(){for(var j=[],f=0;f<256;f++)j[f]=f<128?f<<1:f<<1^283;var re=0,ce=0;for(f=0;f<256;f++){var pe=ce^ce<<1^ce<<2^ce<<3^ce<<4;d[re]=pe=pe>>>8^255&pe^99,m[pe]=re;var ce,q=j[re],ze=j[q],re=j[ze];g[re]=(ce=257*j[pe]^16843008*pe)<<24|ce>>>8,l[re]=ce<<16|ce>>>16,u[re]=ce<<8|ce>>>24,c[re]=ce,e[pe]=(ce=16843009*re^65537*ze^257*q^16843008*re)<<24|ce>>>8,d[pe]=ce<<16|ce>>>16,s[pe]=ce<<8|ce>>>24,x[pe]=ce,re?(re=q^j[j[j[re^q]]],ce^=j[j[ce]]):re=ce=1}}();var y=[0,1,2,4,8,16,32,64,128,27,54],u=h.aes=c.extend({_doreset:function(){if(!this._nrounds||this._keypriorreset!==this._key){for(var f=this._keypriorreset=this._key,re=f.words,ce=f.sigbytes/4,q=4*((this._nrounds=ce+6)+1),ze=this._keyschedule=[],re=0;re<q;re++)re<ce?ze[re]=re[re]:(j=ze[re-1],re%ce?ce>6&&re...

Source: https://account.mortgagequestions.com/phhm/#/login

HTTP Parser: <input type="password" .../> found

Source: https://www.mortgagequestions.com/	HTTP Parser: No favicon
Source: https://www.mortgagequestions.com/	HTTP Parser: No favicon

Source: https://account.mortgagequestions.com/phhm/#/login	HTTP Parser: No <meta name="author".. found
Source: https://account.mortgagequestions.com/phhm/#/login	HTTP Parser: No <meta name="author".. found
Source: https://account.mortgagequestions.com/phhm/#/login	HTTP Parser: No <meta name="author".. found
Source: https://account.mortgagequestions.com/phhm/#/login	HTTP Parser: No <meta name="author".. found

Source: https://account.mortgagequestions.com/phhm/#/login	HTTP Parser: No <meta name="copyright".. found
Source: https://account.mortgagequestions.com/phhm/#/login	HTTP Parser: No <meta name="copyright".. found
Source: https://account.mortgagequestions.com/phhm/#/login	HTTP Parser: No <meta name="copyright".. found
Source: https://account.mortgagequestions.com/phhm/#/login	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/styles/MQ-styles.css HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
Source: global traffic	HTTP traffic detected: GET /Content/styles/MortgageKeeper.css HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
Source: global traffic	HTTP traffic detected: GET /Content/styles/owlcarousel-theme.css HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
Source: global traffic	HTTP traffic detected: GET /Content/styles/owlcarousel.css HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
Source: global traffic	HTTP traffic detected: GET /ajax/libs/bootstrap-slider/10.0.0/css/bootstrap-slider.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/bootstrap-slider/4.5.2/css/bootstrap-slider.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.16.0/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/gitbrent/bootstrap4-toggle@3.6.1/css/bootstrap4-toggle.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/bootstrap-slider/4.5.2/bootstrap-slider.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/gitbrent/bootstrap4-toggle@3.6.1/js/bootstrap4-toggle.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/styles/mq.css HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
Source: global traffic	HTTP traffic detected: GET /kentico/bundles/pageComponents/styles?v=LvgvfTmKo1fhX4g3xYTHB60npvVe4E6N5OqbdpUwDA01 HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=6Le4f5AqAAAAACMx6SI8VYM7etmAXowUb1ykbHGZ HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/jquery?v=N2YlHnRI7it2_JoqUZTYWxPtx-s61zIGkk78Q0eabPM1 HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
Source: global traffic	HTTP traffic detected: GET /bundles/jquery-unobtrusive-ajax?v=yWiSJlfkRWGOtjh38MIfwsmv_b3zyMucdfkOPGDhEoA1 HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
Source: global traffic	HTTP traffic detected: GET /Content/script/owl.carousel.js HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
Source: global traffic	HTTP traffic detected: GET /gh/gitbrent/bootstrap4-toggle@3.6.1/js/bootstrap4-toggle.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/bootstrap-slider/4.5.2/bootstrap-slider.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.16.0/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/script/owl.navigation.js HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
Source: global traffic	HTTP traffic detected: GET /Content/script/owl.support.js HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/script/MQ.js HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=6Le4f5AqAAAAACMx6SI8VYM7etmAXowUb1ykbHGZ HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundles/jquery-unobtrusive-ajax?v=yWiSJlfkRWGOtjh38MIfwsmv_b3zyMucdfkOPGDhEoA1 HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=s2I2cWAONoMtcR8W/kX5wz1n48fgqFWSpZ5WjuMFoVU+pUeR1Tq+Snx8pONmTHdhN058gslMtDcXU6kTjxif8ieb1JNAR8VpSGin+fYDUTSHgrbVwbtFi0wa5GOE
Source: global traffic	HTTP traffic detected: GET /bundles/jquery?v=N2YlHnRI7it2_JoqUZTYWxPtx-s61zIGkk78Q0eabPM1 HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=NrKLvwtm045yUhHr1il3mSv9c+sXsYWk3sGZF/06+sdiIIXm7Qd98haLcEyqp3h4iJEjQWS/pJqic6x0NuyWyi3/lvZVIOADbyE/dVYW5XVpT3+pK1dnfIYaErcB
Source: global traffic	HTTP traffic detected: GET /Content/script/owl.navigation.js HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=NrKLvwtm045yUhHr1il3mSv9c+sXsYWk3sGZF/06+sdiIIXm7Qd98haLcEyqp3h4iJEjQWS/pJqic6x0NuyWyi3/lvZVIOADbyE/dVYW5XVpT3+pK1dnfIYaErcB
Source: global traffic	HTTP traffic detected: GET /Content/images/right-arrow.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x
Source: global traffic	HTTP traffic detected: GET /Content/script/owl.support.js HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=Vmnm4vHzpKIQBP8LhJTcHoKihu1/vTdYm0agezAZIJg3d2/Obzy67EDMiXeMSKZO/WII7fblW0ZZvKqBiWrriCU6+9DL6iZC9XmShKAVMgNy+YAYb5uWDgEoM5p3
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/home-owner_1.svg?ext=.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x
Source: global traffic	HTTP traffic detected: GET /Content/script/owl.carousel.js HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=Vmnm4vHzpKIQBP8LhJTcHoKihu1/vTdYm0agezAZIJg3d2/Obzy67EDMiXeMSKZO/WII7fblW0ZZvKqBiWrriCU6+9DL6iZC9XmShKAVMgNy+YAYb5uWDgEoM5p3
Source: global traffic	HTTP traffic detected: GET /content/images/warning.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/loan-option1.svg?ext=.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/homebuyer-checklist_1.svg?ext=.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/refinance-checklist.svg?ext=.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x
Source: global traffic	HTTP traffic detected: GET /Content/script/MQ.js HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rWsCfwPTRqH9t3fap6jtrPj8VI7vkGnklYn+MgDvJMcpVKP9C0jYVSL26zhIxQdhcKlnPDm+MWrH3VqmchdumrOPcD/LzDgQVhtoTS5qsLj2UyrC7PlU1CeCvBBQ
Source: global traffic	HTTP traffic detected: GET /Content/images/nextarrow-covid.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/MQ-app-logo-new.png?ext=.png HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=Vmnm4vHzpKIQBP8LhJTcHoKihu1/vTdYm0agezAZIJg3d2/Obzy67EDMiXeMSKZO/WII7fblW0ZZvKqBiWrriCU6+9DL6iZC9XmShKAVMgNy+YAYb5uWDgEoM5p3
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/home-owner_1.svg?ext=.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=pSeLWmc2pyE+ZPm/qS823rZeJj0WgLY2FbTrtElvQ4NcdO8zwVRwGiHR7PTr0nSrTpRFFFlFeue/WwRVreM/78ZTQej6sCSQTVX9htjnjtZ2cJrt603Ob1uqvOcD
Source: global traffic	HTTP traffic detected: GET /Content/images/right-arrow.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=pSeLWmc2pyE+ZPm/qS823rZeJj0WgLY2FbTrtElvQ4NcdO8zwVRwGiHR7PTr0nSrTpRFFFlFeue/WwRVreM/78ZTQej6sCSQTVX9htjnjtZ2cJrt603Ob1uqvOcD
Source: global traffic	HTTP traffic detected: GET /v1/apps/6567c1c6a2ec72132b15f3af/websdk HTTP/1.1Host: sdk.apptentive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/images/next.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=Vmnm4vHzpKIQBP8LhJTcHoKihu1/vTdYm0agezAZIJg3d2/Obzy67EDMiXeMSKZO/WII7fblW0ZZvKqBiWrriCU6+9DL6iZC9XmShKAVMgNy+YAYb5uWDgEoM5p3
Source: global traffic	HTTP traffic detected: GET /kentico/bundles/pageComponents/scripts?v=-JgURDK_xbjjD0-dkM5RgHCtLKu5Bs3tXGW1Fj3x1-E1 HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x
Source: global traffic	HTTP traffic detected: GET /kentico/bundles/forms/scripts?v=Gt4GbgwtDKK0sTC0YrvKBwgsxuk25Gpe2t6-p5hD_A81 HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/loan-option1.svg?ext=.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=Bt8eoKvQFSS9gzT2YLH176zsrU9Te3myvwe8OQfrCvR6RcRfHnyyRupO7GDWUAMDizag9x3qeweBs3X1+j4kqTTtWJ6gvMZwGgFGORtyrDJbeJsBN/0+quBxMbIq
Source: global traffic	HTTP traffic detected: GET /content/images/warning.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=Bt8eoKvQFSS9gzT2YLH176zsrU9Te3myvwe8OQfrCvR6RcRfHnyyRupO7GDWUAMDizag9x3qeweBs3X1+j4kqTTtWJ6gvMZwGgFGORtyrDJbeJsBN/0+quBxMbIq
Source: global traffic	HTTP traffic detected: GET /getmedia/a1f01d8f-56be-4d2b-b8a2-46ef8e8b6de0/iStock-1285205214.jpg?width=2000&height=1181&ext=.jpg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/refinance-checklist.svg?ext=.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=Bt8eoKvQFSS9gzT2YLH176zsrU9Te3myvwe8OQfrCvR6RcRfHnyyRupO7GDWUAMDizag9x3qeweBs3X1+j4kqTTtWJ6gvMZwGgFGORtyrDJbeJsBN/0+quBxMbIq
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/MQ-Background45.png?ext=.png HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/homebuyer-checklist_1.svg?ext=.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=Bt8eoKvQFSS9gzT2YLH176zsrU9Te3myvwe8OQfrCvR6RcRfHnyyRupO7GDWUAMDizag9x3qeweBs3X1+j4kqTTtWJ6gvMZwGgFGORtyrDJbeJsBN/0+quBxMbIq
Source: global traffic	HTTP traffic detected: GET /Content/images/nextarrow-covid.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=3oU3jg0W6LpMjZuWz+Aqq1qA6zBnUX2Hd25c8WJ6Ocw7kRLrQTWcwF6kC9C1Es7H7JFnb3xgvq7n6S9BnAggDVANHecywzPhRoPVavOYA0Yi5wLFo8dGHXGpn+rx
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/MQ-app-logo-new.png?ext=.png HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=3oU3jg0W6LpMjZuWz+Aqq1qA6zBnUX2Hd25c8WJ6Ocw7kRLrQTWcwF6kC9C1Es7H7JFnb3xgvq7n6S9BnAggDVANHecywzPhRoPVavOYA0Yi5wLFo8dGHXGpn+rx
Source: global traffic	HTTP traffic detected: GET /v1/apps/6567c1c6a2ec72132b15f3af/websdk HTTP/1.1Host: api.apptentive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/images/next.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=hcVFg5GlNgRFbz7ZnIVG2uRAshFQy/SUfeGz4NAmZX5/7PIEphwZyXciL9s+60Cq3xWO71Y5uO3/XpFsjlkHIZ3I7ESGQPhCb9s45kHBnuIKUry5K7HQt3+Y/yrB
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/App_Upgrade_home8.jpg?ext=.jpg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=EikTfrwu2Uh1lbAYSZzshvJM0Kz1MfDl/1jnSXfWGTx5LvGRIMXiZhGgwCx5eKZKCyZrc2U+FVKDRNYEWO7I0XujwnrtXFv7vJ+ZHBwj/Qh+yPEvATlmMzYxpoVW
Source: global traffic	HTTP traffic detected: GET /kentico/bundles/pageComponents/scripts?v=-JgURDK_xbjjD0-dkM5RgHCtLKu5Bs3tXGW1Fj3x1-E1 HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=EikTfrwu2Uh1lbAYSZzshvJM0Kz1MfDl/1jnSXfWGTx5LvGRIMXiZhGgwCx5eKZKCyZrc2U+FVKDRNYEWO7I0XujwnrtXFv7vJ+ZHBwj/Qh+yPEvATlmMzYxpoVW
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/shutterstock_234728809d.jpg?ext=.jpg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=7PAghP7O2rJiL6XNXIOb2ZPZlAzThx1ONxYZTp7FmYIKdzTYwrLx9w/mhuEH302TBoGHU0OgqcjbtTYYnUlQnD/bq3JSWEKDl42ImtBaLjyIuZpiqQeft0eLdaSi
Source: global traffic	HTTP traffic detected: GET /Content/images/header-right-arrow.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=7PAghP7O2rJiL6XNXIOb2ZPZlAzThx1ONxYZTp7FmYIKdzTYwrLx9w/mhuEH302TBoGHU0OgqcjbtTYYnUlQnD/bq3JSWEKDl42ImtBaLjyIuZpiqQeft0eLdaSi
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/SD-mobile-2023.png?ext=.png HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=VSQZEcOrMPPKchQKR0FWD1VBBoGKVSEDtM8uYIwBYEDqgotI3DBKtajIh38xegYE3fwuYN+UtwcPqCB1flBUzGsAuh+NqkLs6ugqlKVczDBmBEfa8NBzfsCR3vLY
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/App-store.png?ext=.png HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=VSQZEcOrMPPKchQKR0FWD1VBBoGKVSEDtM8uYIwBYEDqgotI3DBKtajIh38xegYE3fwuYN+UtwcPqCB1flBUzGsAuh+NqkLs6ugqlKVczDBmBEfa8NBzfsCR3vLY
Source: global traffic	HTTP traffic detected: GET /kentico/bundles/forms/scripts?v=Gt4GbgwtDKK0sTC0YrvKBwgsxuk25Gpe2t6-p5hD_A81 HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=TY5u3GuVg8wosEzR0bro4BcODpmB9k9JIRoo6bU2PxJeADkkf1EHHJonejcsr2JuRibkm+tZ6a8T+pQUzip+Ygmd/D1hHQH6R8K4LHntLMbmkkhrTuV7nKiG7ohb
Source: global traffic	HTTP traffic detected: GET /getmedia/a1f01d8f-56be-4d2b-b8a2-46ef8e8b6de0/iStock-1285205214.jpg?width=2000&height=1181&ext=.jpg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=TY5u3GuVg8wosEzR0bro4BcODpmB9k9JIRoo6bU2PxJeADkkf1EHHJonejcsr2JuRibkm+tZ6a8T+pQUzip+Ygmd/D1hHQH6R8K4LHntLMbmkkhrTuV7nKiG7ohb
Source: global traffic	HTTP traffic detected: GET /v1/apps/6567c1c6a2ec72132b15f3af/websdk HTTP/1.1Host: api.apptentive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/App_Upgrade_home8.jpg?ext=.jpg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=n3Y/lBv+tDRqwL2vW45bjESJvHPqcmpFqe9VOMJFqxk1e77DgSKszLNb25fAodEWGYjCp+8Vhu2QU6j8riEtC25ISUUxz9pAuqqN3lfpBWAz/raWefmQOsP5xAX6
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/google-pay.png?ext=.png HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=n3Y/lBv+tDRqwL2vW45bjESJvHPqcmpFqe9VOMJFqxk1e77DgSKszLNb25fAodEWGYjCp+8Vhu2QU6j8riEtC25ISUUxz9pAuqqN3lfpBWAz/raWefmQOsP5xAX6
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/call_help.svg?ext=.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=n3Y/lBv+tDRqwL2vW45bjESJvHPqcmpFqe9VOMJFqxk1e77DgSKszLNb25fAodEWGYjCp+8Vhu2QU6j8riEtC25ISUUxz9pAuqqN3lfpBWAz/raWefmQOsP5xAX6
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/MQ-Background45.png?ext=.png HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=n3Y/lBv+tDRqwL2vW45bjESJvHPqcmpFqe9VOMJFqxk1e77DgSKszLNb25fAodEWGYjCp+8Vhu2QU6j8riEtC25ISUUxz9pAuqqN3lfpBWAz/raWefmQOsP5xAX6
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/email-us.svg?ext=.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=spsRd1PM5roQ6lB5mIEeZbZ8FGd/KRbFVDrn7TgoQIKcQ1QHMNdaX+Iqh4UPgdTyQVcvKT2ymFht95F0Rk8GtBGG9f8n1ogugQI/JFcbBZFajPB28NiCnE8ZQKfd
Source: global traffic	HTTP traffic detected: GET /Content/images/header-right-arrow.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=spsRd1PM5roQ6lB5mIEeZbZ8FGd/KRbFVDrn7TgoQIKcQ1QHMNdaX+Iqh4UPgdTyQVcvKT2ymFht95F0Rk8GtBGG9f8n1ogugQI/JFcbBZFajPB28NiCnE8ZQKfd
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/Feedbacks.svg?ext=.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=pf9FWRx6CmT2Iu2ybzm1IPB4kopdgnx2oUDSO4yxxyULGzYijTHo3raNJeyg00bYakAwD7fUNqisV/Qa7aaWHSN7FyicnMY4nWQYpFVDQgaFyGEauwxgzaJK8xIi
Source: global traffic	HTTP traffic detected: GET /getmedia/51975178-32b0-44bf-babc-5af804f69e62/WereOnity5.png?width=2000&height=1174&ext=.png HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=jOm0fkppPqQ48mDKu/N2P/ZHB8CYqnzTcLm4Qw299sbHF7ULoWT1IpDBf1TV5CjVBVNcm3qXLf7gorWtrNMdz94Iv9B8qSaKmwPPO5MLX2+3eKWw2HqGdTPtAD/g
Source: global traffic	HTTP traffic detected: GET /Content/images/read-article-arrow.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=c38whLe5PvhtK2l/FqeeiwHmKBT4BBpRjkBcPCLGRK77K3hafR91V1wbcjHbFakLBpqtjKlrEx6uCly0moAfn5T0iZYElTEaZPyVioMLsogDpHFg4pE47hIWNv3c
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/App-store.png?ext=.png HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=c38whLe5PvhtK2l/FqeeiwHmKBT4BBpRjkBcPCLGRK77K3hafR91V1wbcjHbFakLBpqtjKlrEx6uCly0moAfn5T0iZYElTEaZPyVioMLsogDpHFg4pE47hIWNv3c
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/Banner_Covid.jpg?ext=.jpg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=c38whLe5PvhtK2l/FqeeiwHmKBT4BBpRjkBcPCLGRK77K3hafR91V1wbcjHbFakLBpqtjKlrEx6uCly0moAfn5T0iZYElTEaZPyVioMLsogDpHFg4pE47hIWNv3c
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/SD-mobile-2023.png?ext=.png HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=c38whLe5PvhtK2l/FqeeiwHmKBT4BBpRjkBcPCLGRK77K3hafR91V1wbcjHbFakLBpqtjKlrEx6uCly0moAfn5T0iZYElTEaZPyVioMLsogDpHFg4pE47hIWNv3c
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/FAQs.jpg?ext=.jpg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=mQu/6HkDebaEHjrrWxvDRw+2zBVksh9fssWV0WILhP9cmC5rkKLJkx+/5OnHmiQBzsIu+ytnzcQAmJggl5X+KgC4D17HQ2SNoj9iwkmIn1EXQU5uzjo85zXm3Sx5
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/google-pay.png?ext=.png HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=c38whLe5PvhtK2l/FqeeiwHmKBT4BBpRjkBcPCLGRK77K3hafR91V1wbcjHbFakLBpqtjKlrEx6uCly0moAfn5T0iZYElTEaZPyVioMLsogDpHFg4pE47hIWNv3c
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/shutterstock_234728809d.jpg?ext=.jpg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=c38whLe5PvhtK2l/FqeeiwHmKBT4BBpRjkBcPCLGRK77K3hafR91V1wbcjHbFakLBpqtjKlrEx6uCly0moAfn5T0iZYElTEaZPyVioMLsogDpHFg4pE47hIWNv3c
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/shutterstock_234728809_sm.jpg?ext=.jpg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=RaVcUuyEZgL3LUZe1sO8ECO0vuq3GcfsRSFfcd3wvlUi6Jlg+s7tK+Citcr7nS3vZ3uvIlsJiECm+8UesNYDDlkjLaQ6clrUTugeKi4RFFGlmI458Rw568w/xSl2
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/call_help.svg?ext=.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=mQu/6HkDebaEHjrrWxvDRw+2zBVksh9fssWV0WILhP9cmC5rkKLJkx+/5OnHmiQBzsIu+ytnzcQAmJggl5X+KgC4D17HQ2SNoj9iwkmIn1EXQU5uzjo85zXm3Sx5
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/shutterstock_1662151927.jpg?ext=.jpg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=ePgbN69bQl7dL/Zbngdx7/mXTinmJZkNZ4vnJfZGzyIeU4q8urIH6zt2QXJceZ4f7CSAgNht3OnJSu948yO52oguukXhT2f8ut/SXFarNGKDsAptOjm217AkJ8eu
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/email-us.svg?ext=.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=RaVcUuyEZgL3LUZe1sO8ECO0vuq3GcfsRSFfcd3wvlUi6Jlg+s7tK+Citcr7nS3vZ3uvIlsJiECm+8UesNYDDlkjLaQ6clrUTugeKi4RFFGlmI458Rw568w/xSl2
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/Feedbacks.svg?ext=.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=ePgbN69bQl7dL/Zbngdx7/mXTinmJZkNZ4vnJfZGzyIeU4q8urIH6zt2QXJceZ4f7CSAgNht3OnJSu948yO52oguukXhT2f8ut/SXFarNGKDsAptOjm217AkJ8eu
Source: global traffic	HTTP traffic detected: GET /Content/images/read-article-arrow.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=uG8t5IYOzTPzciI/KmMWKdp6X6QY8yW1ug7J0ZPJaCsCoUr72LOcCgdE1NFmfSBSPNpL7LHJVLTpd/tzw0Z8WmzxtVJYIAZQTA/CLED0SSsZaqL3GbtmmCoaHpMK
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6Le4f5AqAAAAACMx6SI8VYM7etmAXowUb1ykbHGZ&co=aHR0cHM6Ly93d3cubW9ydGdhZ2VxdWVzdGlvbnMuY29tOjQ0Mw..&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=6zhzv74on36j HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/shutterstock_1070766050-2_1.jpg?ext=.jpg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=/zHoiU1Q9fjnXX28nqi0/HUvHkFUJJci0TXwlSmpAl8MxAI80fSljkppBy1+/NYjUvxeJT6gBqyMWlewb/c0H9N+g/xINY4BfzFztwex2v6s+oKF0K0Kh7J/OfhA
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/Banner_Covid.jpg?ext=.jpg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=/zHoiU1Q9fjnXX28nqi0/HUvHkFUJJci0TXwlSmpAl8MxAI80fSljkppBy1+/NYjUvxeJT6gBqyMWlewb/c0H9N+g/xINY4BfzFztwex2v6s+oKF0K0Kh7J/OfhA
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/FAQs.jpg?ext=.jpg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=/zHoiU1Q9fjnXX28nqi0/HUvHkFUJJci0TXwlSmpAl8MxAI80fSljkppBy1+/NYjUvxeJT6gBqyMWlewb/c0H9N+g/xINY4BfzFztwex2v6s+oKF0K0Kh7J/OfhA
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/shutterstock_234728809_sm.jpg?ext=.jpg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=GqHFSMk9lrLS4k/trn3efumq47Orho5Yy2wLIIOLED+CeILID8xF1dYqTV483oJR4ay8wIfuZNHRcyQxmtvWEPr5wiLgiLcUjZkxGVtPeLeL1Vilxx2gXPcSjVo/
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/couch-pic.jpg?ext=.jpg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=GqHFSMk9lrLS4k/trn3efumq47Orho5Yy2wLIIOLED+CeILID8xF1dYqTV483oJR4ay8wIfuZNHRcyQxmtvWEPr5wiLgiLcUjZkxGVtPeLeL1Vilxx2gXPcSjVo/
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/Paperless-small.jpg?ext=.jpg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=sSZMZdA94O1IGK0TphnKCeBBwUMSfhk9y7fxM+s8if6MWGSsxi5nxo2HpMY+v0VUBO73Rv+aZ3WR6N1sVdPFYhk7DQeutQ/PxtDu7zcFdEMo4fc1M8z73bvEWzLR
Source: global traffic	HTTP traffic detected: GET /getmedia/51975178-32b0-44bf-babc-5af804f69e62/WereOnity5.png?width=2000&height=1174&ext=.png HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=sSZMZdA94O1IGK0TphnKCeBBwUMSfhk9y7fxM+s8if6MWGSsxi5nxo2HpMY+v0VUBO73Rv+aZ3WR6N1sVdPFYhk7DQeutQ/PxtDu7zcFdEMo4fc1M8z73bvEWzLR
Source: global traffic	HTTP traffic detected: GET /Content/images/article-img-1.png HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Content/styles/MQ-styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=sSZMZdA94O1IGK0TphnKCeBBwUMSfhk9y7fxM+s8if6MWGSsxi5nxo2HpMY+v0VUBO73Rv+aZ3WR6N1sVdPFYhk7DQeutQ/PxtDu7zcFdEMo4fc1M8z73bvEWzLR
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/shutterstock_1662151927.jpg?ext=.jpg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=sSZMZdA94O1IGK0TphnKCeBBwUMSfhk9y7fxM+s8if6MWGSsxi5nxo2HpMY+v0VUBO73Rv+aZ3WR6N1sVdPFYhk7DQeutQ/PxtDu7zcFdEMo4fc1M8z73bvEWzLR
Source: global traffic	HTTP traffic detected: GET /Content/images/previous-icon.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Content/styles/MQ-styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=i+v+70DzV7K9VlhVwlzcbT4VpOWTr3wWbr6BGOsGrVmpXcZnmI5XIMxjUuLsot6aFDCmGnW7zyMvd/S823BuSm2FEKfaWDPUbcBqRKyxSSsbgY51kyD+Yi1l1T5p
Source: global traffic	HTTP traffic detected: GET /Content/images/arroew-next.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Content/styles/MQ-styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=i+v+70DzV7K9VlhVwlzcbT4VpOWTr3wWbr6BGOsGrVmpXcZnmI5XIMxjUuLsot6aFDCmGnW7zyMvd/S823BuSm2FEKfaWDPUbcBqRKyxSSsbgY51kyD+Yi1l1T5p
Source: global traffic	HTTP traffic detected: GET /v1/sdk.min.js HTTP/1.1Host: sdk.apptentive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/shutterstock_1070766050-2_1.jpg?ext=.jpg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; AWSALB=LZOLvjwoO78e5ZTjilpyfYexkTm5O33iAAhauFag301OuNTYF4C7R265C1dVkqbhViYHA7F7zPIOo9t9AL01d5JqT1/xKv2xnO0YNQX/e0r6H1mXlG9qKii0myoQ
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/couch-pic.jpg?ext=.jpg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; AWSALB=LZOLvjwoO78e5ZTjilpyfYexkTm5O33iAAhauFag301OuNTYF4C7R265C1dVkqbhViYHA7F7zPIOo9t9AL01d5JqT1/xKv2xnO0YNQX/e0r6H1mXlG9qKii0myoQ
Source: global traffic	HTTP traffic detected: GET /Content/images/article-img-1.png HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; AWSALB=LZOLvjwoO78e5ZTjilpyfYexkTm5O33iAAhauFag301OuNTYF4C7R265C1dVkqbhViYHA7F7zPIOo9t9AL01d5JqT1/xKv2xnO0YNQX/e0r6H1mXlG9qKii0myoQ
Source: global traffic	HTTP traffic detected: GET /Content/fonts/Gotham/Gotham-Medium.woff HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.mortgagequestions.com/Content/styles/MQ-styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; AWSALB=LZOLvjwoO78e5ZTjilpyfYexkTm5O33iAAhauFag301OuNTYF4C7R265C1dVkqbhViYHA7F7zPIOo9t9AL01d5JqT1/xKv2xnO0YNQX/e0r6H1mXlG9qKii0myoQ
Source: global traffic	HTTP traffic detected: GET /MortgageQuestions/media/MortgageQuestions/Images/Paperless-small.jpg?ext=.jpg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; AWSALB=LZOLvjwoO78e5ZTjilpyfYexkTm5O33iAAhauFag301OuNTYF4C7R265C1dVkqbhViYHA7F7zPIOo9t9AL01d5JqT1/xKv2xnO0YNQX/e0r6H1mXlG9qKii0myoQ
Source: global traffic	HTTP traffic detected: GET /Content/fonts/Gotham/Gotham-Book.woff HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.mortgagequestions.com/Content/styles/MQ-styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; AWSALB=Xs9pmadfCjB/S+rUcCNCjbDPUK01cHNFyTUog+6Ri2jtCeC2nlx/HigRlZlULsnqbDcZU8HqT+8XMZVneVr8/8PurBmhloW4TrmtEyKSibJCQMY+WnsNPcfctUy4
Source: global traffic	HTTP traffic detected: GET /Content/images/arroew-next.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; AWSALB=4hAA9EpE4q3LqqOBDJGLLHrgeJA6NQOO8ySKvfuOkI/itRt0+dp00R/tAJN67AJ+NbA+jNqrot9t3EhLtqbzPG9KwMzm73QCl1dNzInid7nwaUarJG5f80D7x0YV
Source: global traffic	HTTP traffic detected: GET /phhm/ HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1
Source: global traffic	HTTP traffic detected: GET /Content/fonts/Gotham/Gotham-Light.woff HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.mortgagequestions.com/Content/styles/MQ-styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; AWSALB=4hAA9EpE4q3LqqOBDJGLLHrgeJA6NQOO8ySKvfuOkI/itRt0+dp00R/tAJN67AJ+NbA+jNqrot9t3EhLtqbzPG9KwMzm73QCl1dNzInid7nwaUarJG5f80D7x0YV
Source: global traffic	HTTP traffic detected: GET /v1/apps/6567c1c6a2ec72132b15f3af/manifest?api_version=15&locale=en-US HTTP/1.1Host: api.apptentive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.mortgagequestions.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/images/previous-icon.svg HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; AWSALB=4hAA9EpE4q3LqqOBDJGLLHrgeJA6NQOO8ySKvfuOkI/itRt0+dp00R/tAJN67AJ+NbA+jNqrot9t3EhLtqbzPG9KwMzm73QCl1dNzInid7nwaUarJG5f80D7x0YV
Source: global traffic	HTTP traffic detected: GET /phhm/runtime.703b6736fb2c9821.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; bkfs1=!SM1ByjJmsweKBQZcon1a7F8IKKxzc5jNLTRfioYZvEPPk+K6g8e/AUnIlxbD7c3VZHaKAgM+Q9Wqop0=; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8
Source: global traffic	HTTP traffic detected: GET /v1/sdk.min.js HTTP/1.1Host: sdk.apptentive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/styles/styles.css HTTP/1.1Host: sdk.apptentive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /phhm/polyfills.6f07a62f128f3c09.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; bkfs1=!SM1ByjJmsweKBQZcon1a7F8IKKxzc5jNLTRfioYZvEPPk+K6g8e/AUnIlxbD7c3VZHaKAgM+Q9Wqop0=; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8
Source: global traffic	HTTP traffic detected: GET /phhm/main.5ae79adb947e0038.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; bkfs1=!SM1ByjJmsweKBQZcon1a7F8IKKxzc5jNLTRfioYZvEPPk+K6g8e/AUnIlxbD7c3VZHaKAgM+Q9Wqop0=; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8
Source: global traffic	HTTP traffic detected: GET /v1/apps/6567c1c6a2ec72132b15f3af/manifest?api_version=15&locale=en-US HTTP/1.1Host: api.apptentive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /phhm/runtime.703b6736fb2c9821.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!jzJgnAYpu207O2pcon1a7F8IKKxzc5PYlAvw8EHDEOhrB9MNpwrkXJlRPQZf9COeTHmZngRCOYb1SxY=
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le4f5AqAAAAACMx6SI8VYM7etmAXowUb1ykbHGZ&co=aHR0cHM6Ly93d3cubW9ydGdhZ2VxdWVzdGlvbnMuY29tOjQ0Mw..&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=6zhzv74on36jAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/Xe7AbhhPfZcEikoNmhghBXAEhOusDIBKWKS_roS4Q7E.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le4f5AqAAAAACMx6SI8VYM7etmAXowUb1ykbHGZ&co=aHR0cHM6Ly93d3cubW9ydGdhZ2VxdWVzdGlvbnMuY29tOjQ0Mw..&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=6zhzv74on36jAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /phhm/polyfills.6f07a62f128f3c09.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!R3F473we/cLwDX9con1a7F8IKKxzc0y1OpARurMBOGgWSfBh2Ib1cDbi4FwzcImnb8bn5yiwU9pP6tU=
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/Xe7AbhhPfZcEikoNmhghBXAEhOusDIBKWKS_roS4Q7E.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/images/favicon.ico HTTP/1.1Host: www.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; AWSALB=NRARIFNwfuQQcLllUoVnTO2W2kJ1RwOlUYryT4dev3S6JZgEZlRb2F/LvyPQ5ewX1KRu7ZnD7o3m9FT8RbeMZfVp7revYsRPQ+yNJKgOKUaLMEryCwgaeoM08uOn
Source: global traffic	HTTP traffic detected: GET /phhm/scripts.9d6b8b762f67bb53.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!SgSmj6pvle0k+95con1a7F8IKKxzc9Omf+3rYYw0pv5WRLyjrO7QzdOTAdj4TwXVdxqFtg7agYOagjU=
Source: global traffic	HTTP traffic detected: GET /phhm/clientvariables.rwa.css HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!SgSmj6pvle0k+95con1a7F8IKKxzc9Omf+3rYYw0pv5WRLyjrO7QzdOTAdj4TwXVdxqFtg7agYOagjU=
Source: global traffic	HTTP traffic detected: GET /phhm/overrides.css HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!SgSmj6pvle0k+95con1a7F8IKKxzc9Omf+3rYYw0pv5WRLyjrO7QzdOTAdj4TwXVdxqFtg7agYOagjU=
Source: global traffic	HTTP traffic detected: GET /phhm/styles.f6b8b5bcda36b4b7.css HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!SgSmj6pvle0k+95con1a7F8IKKxzc9Omf+3rYYw0pv5WRLyjrO7QzdOTAdj4TwXVdxqFtg7agYOagjU=
Source: global traffic	HTTP traffic detected: GET /Content/images/favicon.ico HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; AWSALB=+qEPHu91YInq+/QgfCyyF+MHYJhcGlmrK7O8jWUk6YRqcfPJYCCu+OK0Das4lG25v6m51+sCC2q2YKL5S7DPiHNsfgLVuRRwDp1Bsu7WnxbgBqt/ST+zkPghTFM9
Source: global traffic	HTTP traffic detected: GET /phhm/scripts.9d6b8b762f67bb53.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!Yai7AtxGTfp4K0Jcon1a7F8IKKxzc/GeP/u3xKy513MbASx/fYIqCZhzLERxsV6l6dpkz5rVVBPfzTc=
Source: global traffic	HTTP traffic detected: GET /phhm/main.5ae79adb947e0038.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!Yai7AtxGTfp4K0Jcon1a7F8IKKxzc/GeP/u3xKy513MbASx/fYIqCZhzLERxsV6l6dpkz5rVVBPfzTc=
Source: global traffic	HTTP traffic detected: GET /phhm/webapi/config HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0x-mobile-source-id: f8993cdb-ad1f-4769-87fa-1efc51d76f3aUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!Yai7AtxGTfp4K0Jcon1a7F8IKKxzc/GeP/u3xKy513MbASx/fYIqCZhzLERxsV6l6dpkz5rVVBPfzTc=
Source: global traffic	HTTP traffic detected: GET /phhm/favicon.ico HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!Yai7AtxGTfp4K0Jcon1a7F8IKKxzc/GeP/u3xKy513MbASx/fYIqCZhzLERxsV6l6dpkz5rVVBPfzTc=
Source: global traffic	HTTP traffic detected: GET /phhm/webapi/config HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/10.bf367f9955f02ef0.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/67.4b11134a3977a2e1.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/204.60b4a89c5008cd37.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/136.aedaf5153678dc31.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/651.b7fb59c28e478c09.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/474.a445087bc18f6527.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/favicon.ico HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/127.4db69428b5b9ca5e.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/136.aedaf5153678dc31.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!2YSJB15Qw1YdJHJcon1a7F8IKKxzc/Y07lWKX1lXGqf+arZvtNMDNi7nYnUsqSY1mSIUSHGfPvr99Gs=
Source: global traffic	HTTP traffic detected: GET /phhm/683.70cce1837196921e.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/67.4b11134a3977a2e1.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!7JYSFpLwp+RPVQxcon1a7F8IKKxzc+LCQLZhZVFjqF9wjwXE7+T2JDv8g80trgFWsLzfHr3cLlMAoe4=
Source: global traffic	HTTP traffic detected: GET /phhm/851.4b628a023aae2aa9.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/10.bf367f9955f02ef0.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!7JYSFpLwp+RPVQxcon1a7F8IKKxzc+LCQLZhZVFjqF9wjwXE7+T2JDv8g80trgFWsLzfHr3cLlMAoe4=
Source: global traffic	HTTP traffic detected: GET /phhm/359.d13bf7b80fe989b1.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/368.2e7b8668e39a2b99.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/204.60b4a89c5008cd37.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!7JYSFpLwp+RPVQxcon1a7F8IKKxzc+LCQLZhZVFjqF9wjwXE7+T2JDv8g80trgFWsLzfHr3cLlMAoe4=
Source: global traffic	HTTP traffic detected: GET /phhm/916.916f71506db059bf.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/651.b7fb59c28e478c09.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!7JYSFpLwp+RPVQxcon1a7F8IKKxzc+LCQLZhZVFjqF9wjwXE7+T2JDv8g80trgFWsLzfHr3cLlMAoe4=
Source: global traffic	HTTP traffic detected: GET /phhm/474.a445087bc18f6527.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!auOZpekrownnmtVcon1a7F8IKKxzczBRvOZuXpWc2UV4xRsXxRiJMHOJb1x3JBg5CPaQZgPNjoF+ZR4=
Source: global traffic	HTTP traffic detected: GET /phhm/369.339f5cdcc5276fe6.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/683.70cce1837196921e.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!0nENwQkQQmFg3excon1a7F8IKKxzc9CO/2xo5xAk0dWMveG+tbllaSIo2N35wA2QTDFPBjpkhQ2Ibkg=
Source: global traffic	HTTP traffic detected: GET /phhm/203.210081cca82a28a0.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/368.2e7b8668e39a2b99.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!2/yOc5h9p5AIfWNcon1a7F8IKKxzc3pXrV+Xr57zGX6CaRjlmBIGcrnYJlMvMtqOAEg7MkvfNK8AA2o=
Source: global traffic	HTTP traffic detected: GET /phhm/696.6c12338ed84dd792.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/127.4db69428b5b9ca5e.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!2/yOc5h9p5AIfWNcon1a7F8IKKxzc3pXrV+Xr57zGX6CaRjlmBIGcrnYJlMvMtqOAEg7MkvfNK8AA2o=
Source: global traffic	HTTP traffic detected: GET /phhm/532.976b547f081893aa.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/716.80bb3a5ff02d0706.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/359.d13bf7b80fe989b1.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!2/yOc5h9p5AIfWNcon1a7F8IKKxzc3pXrV+Xr57zGX6CaRjlmBIGcrnYJlMvMtqOAEg7MkvfNK8AA2o=
Source: global traffic	HTTP traffic detected: GET /phhm/997.2847ab353f4d5cd1.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/851.4b628a023aae2aa9.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!ly5whdSOVAKcJAtcon1a7F8IKKxzcysQvAsHFJ5Y4NV/2DjOn4+feskqfTiqOOmdjK53k4vTFfpn/4I=
Source: global traffic	HTTP traffic detected: GET /phhm/369.339f5cdcc5276fe6.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!BeYrW7lPnCJyRIZcon1a7F8IKKxzc1ogvPOfY+8RFpJGF30Yp/JuWE3fivJLNyqlM/14UZB21zQe+YU=
Source: global traffic	HTTP traffic detected: GET /phhm/113.22107a236e0a837f.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/773.25a8e72670815c4e.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/916.916f71506db059bf.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!jBpqdB5JPUOep3Bcon1a7F8IKKxzc/Zvzm1dd5iItZgCGuH0mrKA/RkUASgRVZMuQsqISCVhlvCW39Y=
Source: global traffic	HTTP traffic detected: GET /phhm/77.ec1ceb5dff6d9299.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/781.522f62b8dd57fdd6.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/532.976b547f081893aa.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!wcTLBJ9qYY8EORBcon1a7F8IKKxzcxMPV7hSu3QeiW6cRR5xQTju4bYUjEm42zdldyzQd7KP+vYsrxc=
Source: global traffic	HTTP traffic detected: GET /phhm/818.57ee8b867c89ea43.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/203.210081cca82a28a0.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!wcTLBJ9qYY8EORBcon1a7F8IKKxzcxMPV7hSu3QeiW6cRR5xQTju4bYUjEm42zdldyzQd7KP+vYsrxc=
Source: global traffic	HTTP traffic detected: GET /phhm/325.6acceb6542b8d769.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
Source: global traffic	HTTP traffic detected: GET /phhm/696.6c12338ed84dd792.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!wcTLBJ9qYY8EORBcon1a7F8IKKxzcxMPV7hSu3QeiW6cRR5xQTju4bYUjEm42zdldyzQd7KP+vYsrxc=
Source: global traffic	HTTP traffic detected: GET /phhm/716.80bb3a5ff02d0706.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!2I+NFjxK2trpr+5con1a7F8IKKxzc0En9NavCEu27ieA0dkuwkCrznD4HT0sHjgK/XqFJD3MuI5Zb8A=
Source: global traffic	HTTP traffic detected: GET /phhm/997.2847ab353f4d5cd1.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!DSDp4DCzb0ChqVlcon1a7F8IKKxzc/xbm5UdpdR6etZq416LqraeJnUQb6X3pA9UDNRsVQilyH6i7e4=
Source: global traffic	HTTP traffic detected: GET /phhm/113.22107a236e0a837f.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!U3qSuOZVUsXzYf5con1a7F8IKKxzc0jgVcHYyjh8S88mOv2RZnCMH4Kb0QDCi6s2Za2wjJ0/fJuyDng=
Source: global traffic	HTTP traffic detected: GET /phhm/773.25a8e72670815c4e.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!0rbM2gM+lN5rytFcon1a7F8IKKxzc9u0/TUW0yzZtox6EgzGm2G15Sydk2ekVdcMJqqzoyfoA6/nLgo=
Source: global traffic	HTTP traffic detected: GET /phhm/77.ec1ceb5dff6d9299.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!75tIFpW7iIoRfrBcon1a7F8IKKxzcxY8mIPZKuQbqV0ePLEkmPmWjRuOIsH6kLAtGlkp/BQQmLRuzuA=
Source: global traffic	HTTP traffic detected: GET /phhm/781.522f62b8dd57fdd6.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!75tIFpW7iIoRfrBcon1a7F8IKKxzcxY8mIPZKuQbqV0ePLEkmPmWjRuOIsH6kLAtGlkp/BQQmLRuzuA=
Source: global traffic	HTTP traffic detected: GET /phhm/818.57ee8b867c89ea43.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!zNVSgMMitmzaLddcon1a7F8IKKxzcxmdMNTrfo5pOXBE+fOsQ3PHudkpNHtJGna0umVof6z+ADqouIM=
Source: global traffic	HTTP traffic detected: GET /phhm/325.6acceb6542b8d769.js HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!t6fi4uAoAAnKz2Rcon1a7F8IKKxzc7bG+ZtezXxbZ0+3DBZSGY2ezo2VEsx59/wxZUe2+pNN54Hulac=
Source: global traffic	HTTP traffic detected: GET /phhm/webapi/oauth2/v3/token HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!zVHQh1cZmXo0DDtcon1a7F8IKKxzc+NslblMqRG7J/LRs/efTfG8AOIP6X+S11zH0Mbe+F+NX402a68=
Source: global traffic	HTTP traffic detected: GET /lsd/api/v5/institution/configs?featuresVersion=5 HTTP/1.1Host: api.bkiconnect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonx-correlation-id: 83028587-bd87-4366-9a14-6511237795b5sec-ch-ua-mobile: ?0Authorization: Bearer fYrPBS4nGMdAVVEEtwkM45AGIdu5User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://account.mortgagequestions.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://account.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /phhm/webapi/oauth2/v1/session/phhm-prod HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-correlation-id: 83028587-bd87-4366-9a14-6511237795b5sec-ch-ua-mobile: ?0x-mobile-source-id: f8993cdb-ad1f-4769-87fa-1efc51d76f3aUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedaccept: application/jsonsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; _ga=GA1.1.2079666217.1735052710; _ga_5CLK8YKSSK=GS1.1.1735052740.1.0.1735052740.0.0.0; bkfs1=!xNND77tFFJDvKtNcon1a7F8IKKxzc71ojKQE/RKVCAZtD7WbYA+ll/AG66Wh97UbGlZDFG52gXvaHqo=
Source: global traffic	HTTP traffic detected: GET /lsd/api/v5/institution/configs?featuresVersion=5 HTTP/1.1Host: api.bkiconnect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cobrowse/CobrowseJS.ashx?group=21440&site=staging HTTP/1.1Host: www.glancecdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/latest/bundle-messenger-lite.js HTTP/1.1Host: lightning.us1.helium.servismatrixcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /phhm/Splash.0d64256915b454b8.jpg HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.mortgagequestions.com/phhm/styles.f6b8b5bcda36b4b7.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; _ga=GA1.1.2079666217.1735052710; _ga_5CLK8YKSSK=GS1.1.1735052740.1.0.1735052740.0.0.0; bkfs1=!ijf5hC90eNvQMdNcon1a7F8IKKxzc5w54Vw3oHeZOppLDGG2e+d9wUEjC/0RGvv8H+PJKrFe3FdF6FU=
Source: global traffic	HTTP traffic detected: GET /phhm/assets/images/Login/visable_off.svg HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.mortgagequestions.com/phhm/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; _ga=GA1.1.2079666217.1735052710; _ga_5CLK8YKSSK=GS1.1.1735052740.1.0.1735052740.0.0.0; bkfs1=!ijf5hC90eNvQMdNcon1a7F8IKKxzc5w54Vw3oHeZOppLDGG2e+d9wUEjC/0RGvv8H+PJKrFe3FdF6FU=
Source: global traffic	HTTP traffic detected: GET /cobrowse/js/GlanceCobrowseLoader_6.36.0M.js HTTP/1.1Host: storage.glancecdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://account.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /phhm/assets/images/Login/visable_off.svg HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; _ga=GA1.1.2079666217.1735052710; _ga_5CLK8YKSSK=GS1.1.1735052740.1.0.1735052740.0.0.0; bkfs1=!KN7KckFVqKXw0oRcon1a7F8IKKxzc9Br5YaInWndO4lNGTiKRQwcR8hYlSIW7C48rMXQx9v3JXfWBck=
Source: global traffic	HTTP traffic detected: GET /phhm/Splash.0d64256915b454b8.jpg HTTP/1.1Host: account.mortgagequestions.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; _ga=GA1.1.2079666217.1735052710; _ga_5CLK8YKSSK=GS1.1.1735052740.1.0.1735052740.0.0.0; bkfs1=!KN7KckFVqKXw0oRcon1a7F8IKKxzc9Br5YaInWndO4lNGTiKRQwcR8hYlSIW7C48rMXQx9v3JXfWBck=
Source: global traffic	HTTP traffic detected: GET /phhm/fa-light-300.3cf345e1805fdce7.woff2 HTTP/1.1Host: account.mortgagequestions.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.mortgagequestions.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://account.mortgagequestions.com/phhm/styles.f6b8b5bcda36b4b7.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; _ga=GA1.1.2079666217.1735052710; _ga_5CLK8YKSSK=GS1.1.1735052740.1.0.1735052740.0.0.0; bkfs1=!KN7KckFVqKXw0oRcon1a7F8IKKxzc9Br5YaInWndO4lNGTiKRQwcR8hYlSIW7C48rMXQx9v3JXfWBck=
Source: global traffic	HTTP traffic detected: GET /cobrowse/js/GlanceCobrowseLoader_6.36.0M.js HTTP/1.1Host: storage.glancecdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/latest/bundle-messenger-lite.js HTTP/1.1Host: lightning.us1.helium.servismatrixcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.mortgagequestions.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_261.2.dr, chromecache_412.2.dr, chromecache_403.2.dr, chromecache_295.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Ik:function(){e=nb()},Gd:function(){d()}}};var Vb=wa(["data-gtm-yt-inspected-"]),XD=["www.youtube.com","www.youtube-nocookie.com"],YD,ZD=!1; equals www.youtube.com (Youtube)
Source: chromecache_412.2.dr, chromecache_403.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=DB(a,c,e);T(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return T(122),!0;if(d&&f){for(var m=yb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},GB=function(){var a=[],b=function(c){return bb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_261.2.dr, chromecache_412.2.dr, chromecache_403.2.dr, chromecache_295.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Hh:e,Fh:f,Gh:g,mi:k,ni:m,Xe:n,Jb:b},q=A.YT;if(q)return q.ready&&q.ready(d),b;var r=A.onYouTubeIframeAPIReady;A.onYouTubeIframeAPIReady=function(){r&&r();d()};G(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(hE(w,"iframe_api")\|\|hE(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!ZD&&fE(x[B],p.Xe))return lc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_284.2.dr, chromecache_240.2.dr	String found in binary or memory: return b}VD.F="internal.enableAutoEventOnTimer";var Vb=wa(["data-gtm-yt-inspected-"]),XD=["www.youtube.com","www.youtube-nocookie.com"],YD,ZD=!1; equals www.youtube.com (Youtube)
Source: chromecache_412.2.dr, chromecache_403.2.dr	String found in binary or memory: var jD=function(a,b,c,d,e){var f=aB("fsl",c?"nv.mwt":"mwt",0),g;g=c?aB("fsl","nv.ids",[]):aB("fsl","ids",[]);if(!g.length)return!0;var k=fB(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);T(121);if(m==="https://www.facebook.com/tr/")return T(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Mz(k,Oz(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.mortgagequestions.com
Source: global traffic	DNS traffic detected: DNS query: use.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: sdk.apptentive.com
Source: global traffic	DNS traffic detected: DNS query: api.apptentive.com
Source: global traffic	DNS traffic detected: DNS query: account.mortgagequestions.com
Source: global traffic	DNS traffic detected: DNS query: api.bkiconnect.com
Source: global traffic	DNS traffic detected: DNS query: www.glancecdn.net
Source: global traffic	DNS traffic detected: DNS query: lightning.us1.helium.servismatrixcdn.com
Source: global traffic	DNS traffic detected: DNS query: storage.glancecdn.net

Source: unknown

HTTP traffic detected: POST /conversation?api_version=8 HTTP/1.1Host: api.apptentive.comConnection: keep-aliveContent-Length: 871sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsoncontent-type: application/jsonsec-ch-ua-mobile: ?0Authorization: OAuth 0095ab5892dc519a7e3d690a490155d0ed891e109b957e3563147c35ca58794fUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.mortgagequestions.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.mortgagequestions.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_223.2.dr, chromecache_330.2.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: chromecache_329.2.dr, chromecache_354.2.dr, chromecache_309.2.dr, chromecache_368.2.dr, chromecache_380.2.dr, chromecache_291.2.dr, chromecache_418.2.dr, chromecache_229.2.dr	String found in binary or memory: http://ns.useplus.org/ldf/xmp/1.0/
Source: chromecache_258.2.dr, chromecache_234.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_244.2.dr	String found in binary or memory: http://play.google.com/store/apps/details?id=com.phh.mortgagequestions
Source: chromecache_275.2.dr, chromecache_242.2.dr, chromecache_419.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_319.2.dr, chromecache_434.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_223.2.dr, chromecache_330.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_456.2.dr, chromecache_254.2.dr	String found in binary or memory: http://www.google.com/ig/adde?moduleurl=
Source: chromecache_456.2.dr, chromecache_254.2.dr	String found in binary or memory: http://www.google.com/ig/ifr?url=
Source: chromecache_244.2.dr	String found in binary or memory: https://account.mortgagequestions.com/phhm/#/login
Source: chromecache_295.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_290.2.dr, chromecache_394.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/%
Source: chromecache_349.2.dr, chromecache_321.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_232.2.dr, chromecache_377.2.dr	String found in binary or memory: https://api.apptentive.com
Source: chromecache_377.2.dr	String found in binary or memory: https://app-icons.apptentive.com/6567c1c6a2ec72132b15f3af_1701364912.png
Source: chromecache_244.2.dr	String found in binary or memory: https://apps.apple.com/us/app/phh-mortgagequestions/id1532108947
Source: chromecache_364.2.dr	String found in binary or memory: https://bootswatch.com
Source: chromecache_261.2.dr, chromecache_333.2.dr, chromecache_284.2.dr, chromecache_412.2.dr, chromecache_240.2.dr, chromecache_403.2.dr, chromecache_295.2.dr, chromecache_423.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_244.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/gh/gitbrent/bootstrap4-toggle
Source: chromecache_244.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/bootstrap-slider/10.0.0/css/bootstrap-slider.min.css
Source: chromecache_244.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/bootstrap-slider/4.5.2/bootstrap-slider.min.js
Source: chromecache_244.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/bootstrap-slider/4.5.2/css/bootstrap-slider.min.css
Source: chromecache_244.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.16.0/umd/popper.min.js
Source: chromecache_287.2.dr, chromecache_282.2.dr, chromecache_373.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_287.2.dr, chromecache_282.2.dr, chromecache_373.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_330.2.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: chromecache_223.2.dr, chromecache_330.2.dr	String found in binary or memory: https://developers.google.com/maps/deprecations
Source: chromecache_223.2.dr, chromecache_330.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/advanced-markers/migration
Source: chromecache_429.2.dr, chromecache_433.2.dr, chromecache_306.2.dr, chromecache_371.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#
Source: chromecache_330.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: chromecache_223.2.dr, chromecache_330.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/libraries
Source: chromecache_330.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: chromecache_287.2.dr, chromecache_282.2.dr, chromecache_373.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_287.2.dr, chromecache_282.2.dr, chromecache_373.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_287.2.dr, chromecache_282.2.dr, chromecache_373.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_364.2.dr, chromecache_310.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_364.2.dr	String found in binary or memory: https://fontawesome.com/license
Source: chromecache_310.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_364.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Roboto:wght
Source: chromecache_364.2.dr	String found in binary or memory: https://fonts.googleapis.com/icon?family=Material
Source: chromecache_227.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_253.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_364.2.dr, chromecache_305.2.dr, chromecache_453.2.dr, chromecache_246.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_269.2.dr, chromecache_256.2.dr, chromecache_457.2.dr	String found in binary or memory: https://gitbrent.github.io/bootstrap4-toggle/
Source: chromecache_296.2.dr, chromecache_344.2.dr	String found in binary or memory: https://github.com/RobinHerbots/Inputmask
Source: chromecache_364.2.dr, chromecache_305.2.dr, chromecache_453.2.dr, chromecache_246.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_305.2.dr, chromecache_453.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_223.2.dr, chromecache_330.2.dr	String found in binary or memory: https://goo.gle/js-api-loading
Source: chromecache_290.2.dr, chromecache_394.2.dr	String found in binary or memory: https://maps-api-ssl.google.com/maps?jsapiRedirect=true&file=googleapi
Source: chromecache_441.2.dr, chromecache_292.2.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/59/3a/main.js
Source: chromecache_290.2.dr, chromecache_394.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?jsapiRedirect=true
Source: chromecache_228.2.dr, chromecache_233.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?key=%
Source: chromecache_421.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?loading=async&key=AIzaSyA_lHnjSXPqcaMaWsKfiI0hNihTwzqXMn
Source: chromecache_244.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js
Source: chromecache_295.2.dr, chromecache_423.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_261.2.dr, chromecache_333.2.dr, chromecache_284.2.dr, chromecache_412.2.dr, chromecache_240.2.dr, chromecache_403.2.dr, chromecache_295.2.dr, chromecache_423.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_373.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_408.2.dr, chromecache_365.2.dr	String found in binary or memory: https://s4desktop.com
Source: chromecache_408.2.dr, chromecache_365.2.dr	String found in binary or memory: https://s4desktop.com/mkdirect/Codal/savemoney/modal-close.png
Source: chromecache_244.2.dr	String found in binary or memory: https://sdk.apptentive.com/v1/apps/6567c1c6a2ec72132b15f3af/websdk
Source: chromecache_408.2.dr, chromecache_365.2.dr	String found in binary or memory: https://stagespringfour.azurewebsites.net/MK30/MK31-new.asp?uCode=
Source: chromecache_408.2.dr, chromecache_365.2.dr	String found in binary or memory: https://stagespringfour.azurewebsites.net/MK30/MK31RP.asp?uCode=
Source: chromecache_261.2.dr, chromecache_412.2.dr, chromecache_403.2.dr, chromecache_295.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_321.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_223.2.dr, chromecache_330.2.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: chromecache_373.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_287.2.dr, chromecache_282.2.dr, chromecache_373.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_287.2.dr, chromecache_282.2.dr, chromecache_373.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_287.2.dr, chromecache_282.2.dr, chromecache_373.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_349.2.dr, chromecache_321.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_261.2.dr, chromecache_333.2.dr, chromecache_284.2.dr, chromecache_412.2.dr, chromecache_240.2.dr, chromecache_403.2.dr, chromecache_295.2.dr, chromecache_423.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_244.2.dr	String found in binary or memory: https://use.fontawesome.com/releases/v5.7.0/css/all.css
Source: chromecache_284.2.dr, chromecache_240.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_349.2.dr, chromecache_321.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_349.2.dr, chromecache_321.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_349.2.dr, chromecache_321.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_295.2.dr, chromecache_423.2.dr, chromecache_433.2.dr, chromecache_306.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_349.2.dr, chromecache_321.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_456.2.dr, chromecache_254.2.dr	String found in binary or memory: https://www.google.com/jsapi
Source: chromecache_244.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=6Le4f5AqAAAAACMx6SI8VYM7etmAXowUb1ykbHGZ
Source: chromecache_381.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_373.2.dr, chromecache_230.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_261.2.dr, chromecache_333.2.dr, chromecache_284.2.dr, chromecache_412.2.dr, chromecache_240.2.dr, chromecache_403.2.dr, chromecache_295.2.dr, chromecache_423.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_423.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_421.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js
Source: chromecache_349.2.dr, chromecache_321.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_244.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_244.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-M6TXQN4
Source: chromecache_287.2.dr, chromecache_282.2.dr, chromecache_373.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__.
Source: chromecache_394.2.dr	String found in binary or memory: https://www.gstatic.cn/charts/%
Source: chromecache_394.2.dr	String found in binary or memory: https://www.gstatic.cn/charts/debug/%
Source: chromecache_394.2.dr	String found in binary or memory: https://www.gstatic.com/charts/%
Source: chromecache_394.2.dr	String found in binary or memory: https://www.gstatic.com/charts/debug/%
Source: chromecache_421.2.dr	String found in binary or memory: https://www.gstatic.com/charts/loader.js
Source: chromecache_290.2.dr, chromecache_394.2.dr	String found in binary or memory: https://www.gstatic.com/inputtools/js/ita/inputtools_3.js
Source: chromecache_381.2.dr, chromecache_432.2.dr, chromecache_316.2.dr, chromecache_230.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js
Source: chromecache_261.2.dr, chromecache_412.2.dr, chromecache_403.2.dr, chromecache_295.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_291.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.shutterstock.com/image-photo/1070766050?utm_source=iptc&utm_medium=googleimages&
Source: chromecache_329.2.dr, chromecache_380.2.dr	String found in binary or memory: https://www.shutterstock.com/image-photo/1662151927?utm_source=iptc&utm_medium=googleimages&
Source: chromecache_309.2.dr, chromecache_418.2.dr	String found in binary or memory: https://www.shutterstock.com/image-photo/1987574105?utm_source=iptc&utm_medium=googleimages&
Source: chromecache_354.2.dr, chromecache_368.2.dr	String found in binary or memory: https://www.shutterstock.com/image-photo/234728809?utm_source=iptc&utm_medium=googleimages&u
Source: chromecache_329.2.dr, chromecache_354.2.dr, chromecache_309.2.dr, chromecache_368.2.dr, chromecache_380.2.dr, chromecache_291.2.dr, chromecache_418.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.shutterstock.com/license?utm_source=iptc&utm_medium=googleimages&utm_campaign=we
Source: chromecache_384.2.dr, chromecache_414.2.dr, chromecache_431.2.dr, chromecache_340.2.dr, chromecache_255.2.dr, chromecache_320.2.dr	String found in binary or memory: https://www.shutterstock.com/license?utm_source=iptc&utm_medium=googleimages&utm_campaign=webstateme
Source: chromecache_261.2.dr, chromecache_412.2.dr, chromecache_403.2.dr, chromecache_295.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900

Source: classification engine

Classification label: sus22.win@19/382@54/21

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1992,i,4482549296618371493,1279557440734233122,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.mortgagequestions.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1992,i,4482549296618371493,1279557440734233122,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 Registry Run Keys / Startup Folder	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://www.mortgagequestions.com/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://account.mortgagequestions.com/phhm/368.2e7b8668e39a2b99.js	0%	Avira URL Cloud	safe
https://account.mortgagequestions.com/phhm/651.b7fb59c28e478c09.js	0%	Avira URL Cloud	safe
https://account.mortgagequestions.com/phhm/532.976b547f081893aa.js	0%	Avira URL Cloud	safe
https://account.mortgagequestions.com/phhm/474.a445087bc18f6527.js	0%	Avira URL Cloud	safe
https://account.mortgagequestions.com/phhm/127.4db69428b5b9ca5e.js	0%	Avira URL Cloud	safe
https://account.mortgagequestions.com/phhm/696.6c12338ed84dd792.js	0%	Avira URL Cloud	safe
https://account.mortgagequestions.com/phhm/fa-light-300.3cf345e1805fdce7.woff2	0%	Avira URL Cloud	safe
https://stagespringfour.azurewebsites.net/MK30/MK31-new.asp?uCode=	0%	Avira URL Cloud	safe
https://account.mortgagequestions.com/phhm/325.6acceb6542b8d769.js	0%	Avira URL Cloud	safe
https://stagespringfour.azurewebsites.net/MK30/MK31RP.asp?uCode=	0%	Avira URL Cloud	safe
https://account.mortgagequestions.com/phhm/webapi/oauth2/v3/token	0%	Avira URL Cloud	safe
https://account.mortgagequestions.com/phhm/204.60b4a89c5008cd37.js	0%	Avira URL Cloud	safe
https://account.mortgagequestions.com/phhm/Splash.0d64256915b454b8.jpg	0%	Avira URL Cloud	safe
https://account.mortgagequestions.com/phhm/10.bf367f9955f02ef0.js	0%	Avira URL Cloud	safe
https://account.mortgagequestions.com/phhm/main.5ae79adb947e0038.js	0%	Avira URL Cloud	safe
https://account.mortgagequestions.com/phhm/polyfills.6f07a62f128f3c09.js	0%	Avira URL Cloud	safe
https://account.mortgagequestions.com/phhm/773.25a8e72670815c4e.js	0%	Avira URL Cloud	safe
https://account.mortgagequestions.com/phhm/851.4b628a023aae2aa9.js	0%	Avira URL Cloud	safe
https://account.mortgagequestions.com/phhm/683.70cce1837196921e.js	0%	Avira URL Cloud	safe
https://account.mortgagequestions.com/phhm/113.22107a236e0a837f.js	0%	Avira URL Cloud	safe
https://account.mortgagequestions.com/phhm/webapi/config	0%	Avira URL Cloud	safe
https://account.mortgagequestions.com/phhm/67.4b11134a3977a2e1.js	0%	Avira URL Cloud	safe
https://account.mortgagequestions.com/phhm/997.2847ab353f4d5cd1.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.65.229	true	false	high
sdk.apptentive.com	3.160.196.72	true	false	high
gateway-public-high-volume-green.eks-0.production.apptentive.com	23.20.35.169	true	false	high
www.mortgagequestions.com	44.196.118.130	true	false	high
JTCLoanSphereServicingDigital.bkiconnect.com	204.86.65.51	true	false	unknown
rtcapi.bkiconnect.com	74.113.193.91	true	false	high
lightning.us1.helium.servismatrixcdn.com	108.158.75.111	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
glancecdn.net	35.173.71.27	true	false	high
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	high
www.google.com	142.250.181.68	true	false	high
d10lse0r9n7r80.cloudfront.net	18.66.161.22	true	false	unknown
api.apptentive.com	unknown	unknown	false	high
api.bkiconnect.com	unknown	unknown	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
account.mortgagequestions.com	unknown	unknown	true	unknown
www.glancecdn.net	unknown	unknown	false	high
storage.glancecdn.net	unknown	unknown	false	high
use.fontawesome.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.mortgagequestions.com/Content/script/owl.carousel.js	false		high
https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/App-store.png?ext=.png	false		high
https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/shutterstock_234728809_sm.jpg?ext=.jpg	false		high
https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/shutterstock_1070766050-2_1.jpg?ext=.jpg	false		high
https://account.mortgagequestions.com/phhm/696.6c12338ed84dd792.js	false	Avira URL Cloud: safe	unknown
https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/Banner_Covid.jpg?ext=.jpg	false		high
https://www.mortgagequestions.com/	false		high
https://account.mortgagequestions.com/phhm/127.4db69428b5b9ca5e.js	false	Avira URL Cloud: safe	unknown
https://account.mortgagequestions.com/phhm/474.a445087bc18f6527.js	false	Avira URL Cloud: safe	unknown
https://account.mortgagequestions.com/phhm/368.2e7b8668e39a2b99.js	false	Avira URL Cloud: safe	unknown
https://www.mortgagequestions.com/Content/images/arroew-next.svg	false		high
https://account.mortgagequestions.com/phhm/532.976b547f081893aa.js	false	Avira URL Cloud: safe	unknown
https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/Paperless-small.jpg?ext=.jpg	false		high
https://www.mortgagequestions.com/getmedia/51975178-32b0-44bf-babc-5af804f69e62/WereOnity5.png?width=2000&height=1174&ext=.png	false		high
https://account.mortgagequestions.com/phhm/fa-light-300.3cf345e1805fdce7.woff2	false	Avira URL Cloud: safe	unknown
https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/homebuyer-checklist_1.svg?ext=.svg	false		high
https://www.mortgagequestions.com/Content/script/MQ.js	false		high
https://www.mortgagequestions.com/Content/fonts/Gotham/Gotham-Medium.woff	false		high
https://www.mortgagequestions.com/Content/images/header-right-arrow.svg	false		high
https://www.google.com/js/bg/Xe7AbhhPfZcEikoNmhghBXAEhOusDIBKWKS_roS4Q7E.js	false		high
https://account.mortgagequestions.com/phhm/651.b7fb59c28e478c09.js	false	Avira URL Cloud: safe	unknown
https://account.mortgagequestions.com/phhm/325.6acceb6542b8d769.js	false	Avira URL Cloud: safe	unknown
https://account.mortgagequestions.com/phhm/webapi/oauth2/v3/token	false	Avira URL Cloud: safe	unknown
https://sdk.apptentive.com/v1/styles/styles.css	false		high
https://www.mortgagequestions.com/Content/fonts/Gotham/Gotham-Light.woff	false		high
https://lightning.us1.helium.servismatrixcdn.com/v2/latest/bundle-messenger-lite.js	false		high
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/bootstrap-slider/4.5.2/bootstrap-slider.min.js	false		high
https://account.mortgagequestions.com/phhm/204.60b4a89c5008cd37.js	false	Avira URL Cloud: safe	unknown
https://account.mortgagequestions.com/phhm/773.25a8e72670815c4e.js	false	Avira URL Cloud: safe	unknown
https://account.mortgagequestions.com/phhm/main.5ae79adb947e0038.js	false	Avira URL Cloud: safe	unknown
https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/Feedbacks.svg?ext=.svg	false		high
https://account.mortgagequestions.com/phhm/10.bf367f9955f02ef0.js	false	Avira URL Cloud: safe	unknown
https://www.mortgagequestions.com/Content/script/owl.support.js	false		high
https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/shutterstock_234728809d.jpg?ext=.jpg	false		high
https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/couch-pic.jpg?ext=.jpg	false		high
https://cdnjs.cloudflare.com/ajax/libs/bootstrap-slider/10.0.0/css/bootstrap-slider.min.css	false		high
https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/FAQs.jpg?ext=.jpg	false		high
https://account.mortgagequestions.com/phhm/Splash.0d64256915b454b8.jpg	false	Avira URL Cloud: safe	unknown
https://account.mortgagequestions.com/phhm/polyfills.6f07a62f128f3c09.js	false	Avira URL Cloud: safe	unknown
https://account.mortgagequestions.com/phhm/683.70cce1837196921e.js	false	Avira URL Cloud: safe	unknown
https://account.mortgagequestions.com/phhm/851.4b628a023aae2aa9.js	false	Avira URL Cloud: safe	unknown
https://api.bkiconnect.com/lsd/api/v5/institution/configs?featuresVersion=5	false		high
https://account.mortgagequestions.com/phhm/113.22107a236e0a837f.js	false	Avira URL Cloud: safe	unknown
https://www.mortgagequestions.com/getmedia/a1f01d8f-56be-4d2b-b8a2-46ef8e8b6de0/iStock-1285205214.jpg?width=2000&height=1181&ext=.jpg	false		high
https://www.mortgagequestions.com/Content/images/read-article-arrow.svg	false		high
https://www.mortgagequestions.com/Content/script/owl.navigation.js	false		high
http://www.mortgagequestions.com/	false		high
https://api.apptentive.com/events?api_version=15	false		high
https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/SD-mobile-2023.png?ext=.png	false		high
https://sdk.apptentive.com/v1/sdk.min.js	false		high
https://www.mortgagequestions.com/bundles/jquery-unobtrusive-ajax?v=yWiSJlfkRWGOtjh38MIfwsmv_b3zyMucdfkOPGDhEoA1	false		high
https://www.mortgagequestions.com/Content/images/nextarrow-covid.svg	false		high
https://account.mortgagequestions.com/phhm/webapi/config	false	Avira URL Cloud: safe	unknown
https://www.mortgagequestions.com/Content/images/next.svg	false		high
https://www.mortgagequestions.com/Content/styles/owlcarousel-theme.css	false		high
https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/refinance-checklist.svg?ext=.svg	false		high
https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/google-pay.png?ext=.png	false		high
https://www.mortgagequestions.com/Content/styles/MortgageKeeper.css	false		high
https://account.mortgagequestions.com/phhm/67.4b11134a3977a2e1.js	false	Avira URL Cloud: safe	unknown
https://account.mortgagequestions.com/phhm/997.2847ab353f4d5cd1.js	false	Avira URL Cloud: safe	unknown
https://www.mortgagequestions.com/kentico/bundles/forms/scripts?v=Gt4GbgwtDKK0sTC0YrvKBwgsxuk25Gpe2t6-p5hD_A81	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stagespringfour.azurewebsites.net/MK30/MK31RP.asp?uCode=	chromecache_408.2.dr, chromecache_365.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_261.2.dr, chromecache_412.2.dr, chromecache_403.2.dr, chromecache_295.2.dr	false		high
http://www.broofa.com	chromecache_223.2.dr, chromecache_330.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_287.2.dr, chromecache_282.2.dr, chromecache_373.2.dr	false		high
https://stagespringfour.azurewebsites.net/MK30/MK31-new.asp?uCode=	chromecache_408.2.dr, chromecache_365.2.dr	false	Avira URL Cloud: safe	unknown
http://g.co/dev/maps-no-account	chromecache_223.2.dr, chromecache_330.2.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_287.2.dr, chromecache_282.2.dr, chromecache_373.2.dr	false		high
https://www.shutterstock.com/license?utm_source=iptc&utm_medium=googleimages&utm_campaign=webstateme	chromecache_384.2.dr, chromecache_414.2.dr, chromecache_431.2.dr, chromecache_340.2.dr, chromecache_255.2.dr, chromecache_320.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_349.2.dr, chromecache_321.2.dr	false		high
https://www.shutterstock.com/license?utm_source=iptc&utm_medium=googleimages&utm_campaign=we	chromecache_329.2.dr, chromecache_354.2.dr, chromecache_309.2.dr, chromecache_368.2.dr, chromecache_380.2.dr, chromecache_291.2.dr, chromecache_418.2.dr, chromecache_229.2.dr	false		high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_287.2.dr, chromecache_282.2.dr, chromecache_373.2.dr	false		high
https://fontawesome.com	chromecache_364.2.dr, chromecache_310.2.dr	false		high
https://www.google.com	chromecache_295.2.dr, chromecache_423.2.dr, chromecache_433.2.dr, chromecache_306.2.dr	false		high
https://www.youtube.com/iframe_api	chromecache_261.2.dr, chromecache_412.2.dr, chromecache_403.2.dr, chromecache_295.2.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__.	chromecache_287.2.dr, chromecache_282.2.dr, chromecache_373.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_305.2.dr, chromecache_453.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_287.2.dr, chromecache_282.2.dr, chromecache_373.2.dr	false		high
https://goo.gle/js-api-loading	chromecache_223.2.dr, chromecache_330.2.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_321.2.dr	false		high
http://opensource.org/licenses/MIT).	chromecache_258.2.dr, chromecache_234.2.dr	false		high
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_330.2.dr	false		high
https://support.google.com/recaptcha	chromecache_373.2.dr	false		high
https://www.shutterstock.com/image-photo/234728809?utm_source=iptc&utm_medium=googleimages&u	chromecache_354.2.dr, chromecache_368.2.dr	false		high
https://support.google.com/fusiontables/answer/9185417).	chromecache_223.2.dr, chromecache_330.2.dr	false		high
https://developers.google.com/maps/deprecations	chromecache_223.2.dr, chromecache_330.2.dr	false		high
http://ns.useplus.org/ldf/xmp/1.0/	chromecache_329.2.dr, chromecache_354.2.dr, chromecache_309.2.dr, chromecache_368.2.dr, chromecache_380.2.dr, chromecache_291.2.dr, chromecache_418.2.dr, chromecache_229.2.dr	false		high
https://www.shutterstock.com/image-photo/1070766050?utm_source=iptc&utm_medium=googleimages&	chromecache_291.2.dr, chromecache_229.2.dr	false		high
https://cct.google/taggy/agent.js	chromecache_261.2.dr, chromecache_333.2.dr, chromecache_284.2.dr, chromecache_412.2.dr, chromecache_240.2.dr, chromecache_403.2.dr, chromecache_295.2.dr, chromecache_423.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_287.2.dr, chromecache_282.2.dr, chromecache_373.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_373.2.dr	false		high
https://www.google.%/ads/ga-audiences	chromecache_349.2.dr, chromecache_321.2.dr	false		high
http://play.google.com/store/apps/details?id=com.phh.mortgagequestions	chromecache_244.2.dr	false		high
https://developers.google.com/maps/documentation/javascript/advanced-markers/migration	chromecache_223.2.dr, chromecache_330.2.dr	false		high
https://www.google.com/jsapi	chromecache_456.2.dr, chromecache_254.2.dr	false		high
https://cdn.jsdelivr.net/gh/gitbrent/bootstrap4-toggle	chromecache_244.2.dr	false		high
https://api.apptentive.com	chromecache_232.2.dr, chromecache_377.2.dr	false		high
https://s4desktop.com	chromecache_408.2.dr, chromecache_365.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
151.101.193.229	unknown	United States	54113	FASTLYUS	false
74.113.193.91	rtcapi.bkiconnect.com	United States	26630	LPS-3US	false
107.20.24.122	unknown	United States	14618	AMAZON-AESUS	false
35.173.71.27	glancecdn.net	United States	14618	AMAZON-AESUS	false
3.160.196.72	sdk.apptentive.com	United States	16509	AMAZON-02US	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
172.217.21.36	unknown	United States	15169	GOOGLEUS	false
23.20.35.169	gateway-public-high-volume-green.eks-0.production.apptentive.com	United States	14618	AMAZON-AESUS	false
18.66.161.22	d10lse0r9n7r80.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
204.86.65.51	JTCLoanSphereServicingDigital.bkiconnect.com	United States	30305	LPS-1US	false
108.158.75.111	lightning.us1.helium.servismatrixcdn.com	United States	16509	AMAZON-02US	false
44.196.118.130	www.mortgagequestions.com	United States	14618	AMAZON-AESUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
151.101.65.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
3.160.196.59	unknown	United States	16509	AMAZON-02US	false
104.18.11.207	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
108.158.75.60	unknown	United States	16509	AMAZON-02US	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1580453
Start date and time:	2024-12-24 16:03:54 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.mortgagequestions.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus22.win@19/382@54/21

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 173.194.220.84, 172.217.19.238, 172.217.21.35, 172.217.17.46, 104.21.27.152, 172.67.142.245, 199.232.210.172, 172.217.17.40, 192.229.221.95, 142.250.181.142, 172.217.19.206, 142.250.181.99, 142.250.181.138, 142.250.181.74, 172.217.19.234, 142.250.181.106, 142.250.181.10, 216.58.208.234, 172.217.17.42, 172.217.17.74, 172.217.19.202, 172.217.19.10, 142.250.181.42, 172.217.19.170, 216.58.208.227, 172.217.17.35, 34.104.35.123, 184.28.90.27, 4.245.163.56, 13.107.246.63
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, use.fontawesome.com.cdn.cloudflare.net, fe3cr.delivery.mp.microsoft.com, maps.googleapis.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, edgedl.me.gvt1.com, www.googletagmanager.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, www.google-analytics.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://www.mortgagequestions.com/

Input	Output
URL: http://www.mortgagequestions.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: http://www.mortgagequestions.com
URL: https://account.mortgagequestions.com/phhm/runtime... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The provided JavaScript snippet exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code. While the context is not entirely clear, the overall behavior suggests a potentially malicious script that requires further investigation." }
(()=>{"use strict";var e,v={},g={};function a(e){var n=g[e];if(void 0!==n)return n.exports;var r=g[e]={id:e,loaded:!1,exports:{}};return v[e].call(r.exports,r,r.exports,a),r.loaded=!0,r.exports}a.m=v,e=[],a.O=(n,r,i,d)=>{if(!r){var t=1/0;for(f=0;f<e.length;f++){for(var[r,i,d]=e[f],o=!0,c=0;c<r.length;c++)(!1&d\|\|t>=d)&&Object.keys(a.O).every(p=>a.O[p](r[c]))?r.splice(c--,1):(o=!1,d<t&&(t=d));if(o){e.splice(f--,1);var l=i();void 0!==l&&(n=l)}}return n}d=d\|\|0;for(var f=e.length;f>0&&e[f-1][2]>d;f--)e[f]=e[f-1];e[f]=[r,i,d]},a.n=e=>{var n=e&&e.__esModule?()=>e.default:()=>e;return a.d(n,{a:n}),n},a.d=(e,n)=>{for(var r in n)a.o(n,r)&&!a.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})},a.f={},a.e=e=>Promise.all(Object.keys(a.f).reduce((n,r)=>(a.f[r](e,n),n),[])),a.u=e=>e+"."+{10:"bf367f9955f02ef0",67:"4b11134a3977a2e1",77:"ec1ceb5dff6d9299",113:"22107a236e0a837f",127:"4db69428b5b9ca5e",136:"aedaf5153678dc31",203:"210081cca82a28a0",204:"60b4a89c5008cd37",325:"6acceb6542b8d769",359:"d13bf7b80fe989b1",368:"2e7b8668e39a2b99",369:"339f5cdcc5276fe6",474:"a445087bc18f6527",532:"976b547f081893aa",651:"b7fb59c28e478c09",683:"70cce1837196921e",696:"6c12338ed84dd792",716:"80bb3a5ff02d0706",773:"25a8e72670815c4e",781:"522f62b8dd57fdd6",818:"57ee8b867c89ea43",851:"4b628a023aae2aa9",916:"916f71506db059bf",997:"2847ab353f4d5cd1"}[e]+".js",a.miniCssF=e=>{},a.o=(e,n)=>Object.prototype.hasOwnProperty.call(e,n),(()=>{var e={},n="black-knight:";a.l=(r,i,d,f)=>{if(e[r])e[r].push(i);else{var t,o;if(void 0!==d)for(var c=document.getElementsByTagName("script"),l=0;l<c.length;l++){var b=c[l];if(b.getAttribute("src")==r\|\|b.getAttribute("data-webpack")==n+d){t=b;break}}t\|\|(o=!0,(t=document.createElement("script")).type="module",t.charset="utf-8",t.timeout=120,a.nc&&t.setAttribute("nonce",a.nc),t.setAttribute("data-webpack",n+d),t.src=a.tu(r)),e[r]=[i];var u=(h,p)=>{t.onerror=t.onload=null,clearTimeout(s);var m=e[r];if(delete e[r],t.parentNode&&t.parentNode.removeChild(t),m&&m.forEach(_=>_(p)),h)return h(p)},s=setTimeout(u.bind(null,void 0,{type:"timeout",target:t}),12e4);t.onerror=u.bind(null,t.onerror),t.onload=u.bind(null,t.onload),o&&document.head.appendChild(t)}}})(),a.r=e=>{typeof Symbol<"u"&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},a.nmd=e=>(e.paths=[],e.children\|\|(e.children=[]),e),(()=>{var e;a.tt=()=>(void 0===e&&(e={createScriptURL:n=>n},typeof trustedTypes<"u"&&trustedTypes.createPolicy&&(e=trustedTypes.createPolicy("angular#bundler",e))),e)})(),a.tu=e=>a.tt().createScriptURL(e),a.p="",(()=>{var e={121:0};a.f.j=(i,d)=>{var f=a.o(e,i)?e[i]:void 0;if(0!==f)if(f)d.push(f[2]);else if(121!=i){var t=new Promise((b,u)=>f=e[i]=[b,u]);d.push(f[2]=t);var o=a.p+a.u(i),c=new Error;a.l(o,b=>{if(a.o(e,i)&&(0!==(f=e[i])&&(e[i]=void 0),f)){var u=b&&("load"===b.type?"missing":b.type),s=b&&b.target&&b.target.src;c.message="Loading chunk "+i+" failed.\n("+u+": "+s+")",c.name="ChunkLoadError",c.type=u,c.request=s,f[1](c)}},"chunk-"+i,i)}else e[i]=0},a.O.j=i=>0===e[i];var n=(i,d)=>{var c,l,[f,t,o]=d,b=0;if(f.some(s=>0!==e[s])){for(c in t)a.o(t,c)&&(a.m[c]=t[c]);if(o)var u=o(a)}for(i&&i(d);b<f.length;b++)a.o(e,l=f[b])&&e[l]&&e[l][0](),e[l]=0;return a.O(u)},r=self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[];r.forEach(n.bind(null,0)),r.push=n.bind(null,r.push.bind(r))})()})();
URL: https://www.gstatic.com/charts/loader.js... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a polyfill for the Promise API, which is a common and legitimate functionality. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to suspicious domains. The code is well-structured and does not exhibit any aggressive or obfuscated behavior. While it uses some legacy practices like `setTimeout`, these pose a relatively low risk. Overall, this script is likely benign and intended for improving browser compatibility." }
(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / 'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var l=ca(this);function p(a,b){if(b)a:{var c=l;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}} p("Symbol",function(a){function b(h){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(h\|\|"")+"_"+e++,h)}function c(h,f){this.g=h;ba(this,"description",{configurable:!0,writable:!0,value:f})}if(a)return a;c.prototype.toString=function(){return this.g};var d="jscomp_symbol_"+(1E9Math.random()>>>0)+"_",e=0;return b}); p("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=l[b[c]];"function"===typeof d&&"function"!=typeof d.prototype[a]&&ba(d.prototype,a,{configurable:!0,writable:!0,value:function(){return da(aa(this))}})}return a});p("Symbol.asyncIterator",function(a){return a?a:Symbol("Symbol.asyncIterator")}); function da(a){a={next:a};a[Symbol.iterator]=function(){return this};return a}function q(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}function ea(a){if(!(a instanceof Array)){a=q(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function r(a,b){return Object.prototype.hasOwnProperty.call(a,b)} var fa="function"==typeof Object.assign?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)r(d,e)&&(a[e]=d[e])}return a};p("Object.assign",function(a){return a\|\|fa});var ha;if("function"==typeof Object.setPrototypeOf)ha=Object.setPrototypeOf;else{var ia;a:{var ja={a:!0},ka={};try{ka.__proto__=ja;ia=ka.a;break a}catch(a){}ia=!1}ha=ia?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var t=ha; function la(){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=arguments[c];return b} p("Promise",function(a){function b(f){this.g=0;this.i=void 0;this.h=[];this.o=!1;var g=this.j();try{f(g.resolve,g.reject)}catch(k){g.reject(k)}}function c(){this.g=null}function d(f){return f instanceof b?f:new b(function(g){g(f)})}if(a)return a;c.prototype.h=function(f){if(null==this.g){this.g=[];var g=this;this.i(function(){g.l()})}this.g.push(f)};var e=l.setTimeout;c.prototype.i=function(f){e(f,0)};c.prototype.l=function(){for(;this.g&&this.g.length;){var f=this.g;this.g=[];for(var g=0;g<f.length;++g){var k= f[g];f[g]=null;try{k()}catch(m){this.j(m)}}}this.g=null};c.prototype.j=function(f){this.i(function(){throw f;})};b.prototype.j=function(){function f(m){return function(n){k\|\|(k=!0,m.call(g,n))}}var g=this,k=!1;return{resolve:f(this.D),reject:f(this.l)}};b.prototype.D=function(f){if(f===this)this.l(new TypeError("A Promise cannot resolve to itself"));else if(f instanceof b)this.O(f);else{a:switch(typeof f){case "object":var g=null!=f;break a;case "function":g=!0;break a;default:g=!1}g?this.C(f):this.m(f)}}; b.prototype.C=function(f){var g=void 0;try{g=f.then}catch(k){this.l(k);return}"function"==typeof g?this.P(g,f):this.m(f)};b.prototype.l=function(f){this.u(2,f)};b.prototype.m=function(f){this.u(1,f)};b.prototyp
URL: https://account.mortgagequestions.com/phhm/651.b7f... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet appears to be a part of a larger library or framework, potentially related to web development or bundling. While it does not contain any obvious high-risk indicators, such as dynamic code execution or data exfiltration, it exhibits some moderate-risk behaviors that warrant further investigation. The use of external data transmission, fallback domains, and aggressive DOM manipulation suggest the need for additional context to fully assess the risk. Overall, this script requires more review to determine its true purpose and potential impact." }
(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[651],{36651:function(jn,mt,Ai){var Qe;jn=Ai.nmd(jn),function(){var o,sn="Expected a function",ke="__lodash_hash_undefined__",ne="__lodash_placeholder__",tt=1/0,qn=9007199254740991,Cn=4294967295,vl=[["ary",128],["bind",1],["bindKey",2],["curry",8],["curryRight",16],["flip",512],["partial",32],["partialRight",64],["rearg",256]],_t="[object Arguments]",re="[object Array]",Wt="[object Boolean]",bt="[object Date]",ie="[object Error]",ue="[object Function]",Ei="[object GeneratorFunction]",xn="[object Map]",Pt="[object Number]",bn="[object Object]",Ti="[object Promise]",Bt="[object RegExp]",An="[object Set]",Ft="[object String]",fe="[object Symbol]",Mt="[object WeakMap]",Ut="[object ArrayBuffer]",pt="[object DataView]",nr="[object Float32Array]",tr="[object Float64Array]",er="[object Int8Array]",rr="[object Int16Array]",ir="[object Int32Array]",ur="[object Uint8Array]",fr="[object Uint8ClampedArray]",lr="[object Uint16Array]",or="[object Uint32Array]",Sl=/\b__p \+= '';/g,El=/\b(__p \+=) '' \+/g,Tl=/(__e$.?$\|\b__t\)) \+\n'';/g,Li=/&(?:amp\|lt\|gt\|quot\|#39);/g,Ci=/[&<>"']/g,Ll=RegExp(Li.source),Cl=RegExp(Ci.source),yl=/<%-([\s\S]+?)%>/g,ml=/<%([\s\S]+?)%>/g,yi=/<%=([\s\S]+?)%>/g,Ol=/\.\|\[(?:[^[\]]\|(["'])(?:(?!\1)[^\\]\|\\.)?\1)\]/,Wl=/^\w$/,bl=/[^.[\]]+\|\[(?:(-?\d+(?:\.\d+)?)\|(["'])((?:(?!\2)[^\\]\|\\.)?)\2)\]\|(?=(?:\.\|\[\])(?:\.\|\[\]\|$))/g,sr=/[\\^$.+?()[\]{}\|]/g,Pl=RegExp(sr.source),ar=/^\s+/,Bl=/\s/,Fl=/\{(?:\n\/\* \[wrapped with .+\] \\/)?\n?/,Ml=/\{\n\/\ \[wrapped with (.+)\] \/,Ul=/,? & /,Dl=/[^\x00-\x2f\x3a-\x40\x5b-\x60\x7b-\x7f]+/g,Nl=/[()=,{}\[\]\/\s]/,Gl=/\$\$?/g,Hl=/\$\{([^\\}](?:\\.[^\\}]))\}/g,mi=/\w$/,Kl=/^[-+]0x[0-9a-f]+$/i,ql=/^0b[01]+$/i,$l=/^\[object .+?Constructor\]$/,zl=/^0o[0-7]+$/i,Zl=/^(?:0\|[1-9]\d)$/,Yl=/[\xc0-\xd6\xd8-\xf6\xf8-\xff\u0100-\u017f]/g,le=/($^)/,Xl=/['\n\r\u2028\u2029\\]/g,oe="\\ud800-\\udfff",Oi="\\u0300-\\u036f\\ufe20-\\ufe2f\\u20d0-\\u20ff",Wi="\\u2700-\\u27bf",bi="a-z\\xdf-\\xf6\\xf8-\\xff",Pi="A-Z\\xc0-\\xd6\\xd8-\\xde",Bi="\\ufe0e\\ufe0f",Fi="\\xac\\xb1\\xd7\\xf7\\x00-\\x2f\\x3a-\\x40\\x5b-\\x60\\x7b-\\xbf\\u2000-\\u206f \\t\\x0b\\f\\xa0\\ufeff\\n\\r\\u2028\\u2029\\u1680\\u180e\\u2000\\u2001\\u2002\\u2003\\u2004\\u2005\\u2006\\u2007\\u2008\\u2009\\u200a\\u202f\\u205f\\u3000",eo="["+oe+"]",Mi="["+Fi+"]",se="["+Oi+"]",Ui="\\d+",ro="["+Wi+"]",Di="["+bi+"]",Ni="[^"+oe+Fi+Ui+Wi+bi+Pi+"]",hr="\\ud83c[\\udffb-\\udfff]",Gi="[^"+oe+"]",gr="(?:\\ud83c[\\udde6-\\uddff]){2}",_r="[\\ud800-\\udbff][\\udc00-\\udfff]",vt="["+Pi+"]",Ki="(?:"+Di+"\|"+Ni+")",uo="(?:"+vt+"\|"+Ni+")",qi="(?:['\u2019](?:d\|ll\|m\|re\|s\|t\|ve))?",$i="(?:['\u2019](?:D\|LL\|M\|RE\|S\|T\|VE))?",zi="(?:"+se+"\|"+hr+")?",Zi="["+Bi+"]?",Yi=Zi+zi+"(?:\\u200d(?:"+[Gi,gr,_r].join("\|")+")"+Zi+zi+")",so="(?:"+[ro,gr,_r].join("\|")+")"+Yi,ao="(?:"+[Gi+se+"?",se,gr,_r,eo].join("\|")+")",co=RegExp("['\u2019]","g"),ho=RegExp(se,"g"),pr=RegExp(hr+"(?="+hr+")\|"+ao+Yi,"g"),go=RegExp([vt+"?"+Di+"+"+qi+"(?="+[Mi,vt,"$"].join("\|")+")",uo+"+"+$i+"(?="+[Mi,vt+Ki,"$"].join("\|")+")",vt+"?"+Ki+"+"+qi,vt+"+"+$i,"\\d(?:1ST\|2ND\|3RD\|(?![123])\\dTH)(?=\\b\|[a-z_])","\\d*(?:1st\|2nd\|3rd\|(?![123])\\dth)(?=\\b\|[A-Z_])",Ui,so].join("\|"),"g"),_o=RegExp("[\\u200d"+oe+Oi+Bi+"]"),po=/[a-z][A-Z]\|[A-Z]{2}[a-z]\|[0-9][a-zA-Z]\|[a-zA-Z][0-9]\|[^a-zA-Z0-9 ]/,vo=["Array","Buffer","DataView","Date","Error","Float32Array","Float64Array","Function","Int8Array","Int16Array","Int32Array","Map","Math","Object","Promise","RegExp","Set","String","Symbol","TypeError","Uint8Array","Uint8ClampedArray","Uint16Array","Uint32Array","WeakMap","_","clearTimeout","isFinite","parseInt","setTimeout"],wo=-1,M={};M[nr]=M[tr]=M[er]=M[rr]=M[ir]=M[ur]=M[fr]=M[lr]=M[or]=!0,M[_t]=M[re]=M[Ut]=M[Wt]=M[pt]=M[bt]=M[ie]=M[ue]=M[xn]=M[Pt]=M[bn]=M[Bt]=M[An]=M[Ft]=M[Mt]=!1;var F={};F[_t]=F[re]=F[Ut]=F[pt]=F[Wt]=F[bt]=F[nr]=F[tr]=F[er]=F[rr]=F[ir]=F[xn]=F[Pt]=F[bn]=F[Bt]=F[An]=F[Ft]=F[fe]=F[ur]=F[fr]=F[lr]=F[or]=!0,F[ie]=F[ue]=F[Mt]=!1;var Io={"\\
URL: https://account.mortgagequestions.com/phhm/scripts... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet appears to be a part of the jQuery library, which is a widely used and trusted JavaScript framework. While it contains some behaviors that could be considered moderate-risk, such as external data transmission and aggressive DOM manipulation, these are common practices in legitimate web development and do not necessarily indicate malicious intent. The snippet does not exhibit any high-risk indicators like dynamic code execution or data exfiltration. Therefore, the overall risk score is assessed as medium (4), requiring further review but not immediately flagged as high-risk." }
!function(R,Ae){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=R.document?Ae(R,!0):function(oe){if(!oe.document)throw new Error("jQuery requires a window with a document");return Ae(oe)}:Ae(R)}(typeof window<"u"?window:this,function(R,Ae){"use strict";var oe=[],f=Object.getPrototypeOf,le=oe.slice,ye=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},G=oe.push,xe=oe.indexOf,Me={},N=Me.toString,Be=Me.hasOwnProperty,_n=Be.toString,et=_n.call(Object),q={},Q=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},ue=function(e){return null!=e&&e===e.window},M=R.document,Yt={type:!0,src:!0,nonce:!0,noModule:!0};function Kt(e,n,o){var u,d,p=(o=o\|\|M).createElement("script");if(p.text=e,n)for(u in Yt)(d=n[u]\|\|n.getAttribute&&n.getAttribute(u))&&p.setAttribute(u,d);o.head.appendChild(p).parentNode.removeChild(p)}function Se(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?Me[N.call(e)]\|\|"object":typeof e}var We="3.7.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/animatedSelector,-effects/Tween",Nt=/HTML$/i,l=function(e,n){return new l.fn.init(e,n)};function je(e){var n=!!e&&"length"in e&&e.length,o=Se(e);return!Q(e)&&!ue(e)&&("array"===o\|\|0===n\|\|"number"==typeof n&&0<n&&n-1 in e)}function X(e,n){return e.nodeName&&e.nodeName.toLowerCase()===n.toLowerCase()}l.fn=l.prototype={jquery:We,constructor:l,length:0,toArray:function(){return le.call(this)},get:function(e){return null==e?le.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var n=l.merge(this.constructor(),e);return n.prevObject=this,n},each:function(e){return l.each(this,e)},map:function(e){return this.pushStack(l.map(this,function(n,o){return e.call(n,o,n)}))},slice:function(){return this.pushStack(le.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},even:function(){return this.pushStack(l.grep(this,function(e,n){return(n+1)%2}))},odd:function(){return this.pushStack(l.grep(this,function(e,n){return n%2}))},eq:function(e){var n=this.length,o=+e+(e<0?n:0);return this.pushStack(0<=o&&o<n?[this[o]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:G,sort:oe.sort,splice:oe.splice},l.extend=l.fn.extend=function(){var e,n,o,u,d,p,v=arguments[0]\|\|{},_=1,y=arguments.length,x=!1;for("boolean"==typeof v&&(x=v,v=arguments[_]\|\|{},_++),"object"==typeof v\|\|Q(v)\|\|(v={}),_===y&&(v=this,_--);_<y;_++)if(null!=(e=arguments[_]))for(n in e)u=e[n],"__proto__"!==n&&v!==u&&(x&&u&&(l.isPlainObject(u)\|\|(d=Array.isArray(u)))?(o=v[n],p=d&&!Array.isArray(o)?[]:d\|\|l.isPlainObject(o)?o:{},d=!1,v[n]=l.extend(x,p,u)):void 0!==u&&(v[n]=u));return v},l.extend({expando:"jQuery"+(We+Math.random()).replace(/\D/g,""),isReady:!0,error:function(e){throw new Error(e)},noop:function(){},isPlainObject:function(e){var n,o;return!(!e\|\|"[object Object]"!==N.call(e)\|\|(n=f(e))&&("function"!=typeof(o=Be.call(n,"constructor")&&n.constructor)\|\|_n.call(o)!==et))},isEmptyObject:function(e){var n;for(n in e)return!1;return!0},globalEval:function(e,n,o){Kt(e,{nonce:n&&n.nonce},o)},each:function(e,n){var o,u=0;if(je(e))for(o=e.length;u<o&&!1!==n.call(e[u],u,e[u]);u++);else for(u in e)if(!1===n.call(e[u],u,e[u]))break;return e},text:function(e){var n,o="",u=0,d=e.nodeType;if(!d)for(;n=e[u++];)o+=l.text(n);return 1===d\|\|11===d?e.textContent:9===d?e.documentElement.textContent:3===d\|\|4===d?e.nodeValue:o},makeArray:function(e,n){var o=n\|\|[];return null!=e&&(je(Object(e))?l.merge(o,"string"==typeof e?[e]:e):G.call(o,e)),o},inArray:function(e,n,o){return null==n?-1:xe.call(n,e,o)},isXMLDoc:function(e){var o=e&&(e.ownerDocument\|\|e).documentElement;return!Nt.test(e&&e.namespaceURI\|\|o&&o.nodeName\|\|"HTML")},merge:function(e,n){for(var o=+n.length,u=0,d=e.length;u<o;u++)e[d++]=n[u];return e.length=d,e},grep:function(e,
URL: https://account.mortgagequestions.com/phhm/683.70c... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet exhibits several behaviors that raise moderate security concerns. While it does not contain any high-risk indicators like dynamic code execution or data exfiltration, it engages in external data transmission, uses fallback domains, and performs aggressive DOM manipulation. Additionally, the script interacts with some domains of unknown reputation, which further increases the risk. Overall, the script requires further review due to its unclear or overly aggressive behavior, warranting a medium-risk score." }
"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[683,997],{38997:(x,N,o)=>{o.d(N,{P:()=>y});var t=o(50187),n=o(50213),e=o(23279),D=o(56610);function b(r,d){if(1&r&&e.nrm(0,"h2",7),2&r){const i=e.XpG();e.Y8G("innerHTML",i.title,e.npT)}}function v(r,d){if(1&r&&e.nrm(0,"h2",8),2&r){const i=e.XpG();e.Y8G("innerHtml",i.title_1,e.npT)}}function m(r,d){if(1&r&&e.nrm(0,"div",7),2&r){const i=e.XpG();e.Y8G("innerHTML",i.section,e.npT)}}function g(r,d){if(1&r&&(e.j41(0,"div"),e.nrm(1,"p",7)(2,"p",7),e.k0s()),2&r){const i=e.XpG();e.R7$(),e.Y8G("innerHTML",i.content_1,e.npT),e.R7$(),e.Y8G("innerHTML",i.content_2,e.npT)}}function p(r,d){if(1&r){const i=e.RV6();e.j41(0,"div",9)(1,"a",10),e.bIt("click",function(){e.eBV(i);const u=e.XpG();return e.Njj(u.letsDoThisNews())}),e.nrm(2,"p",7),e.k0s()()}if(2&r){const i=e.XpG();e.R7$(2),e.Y8G("innerHTML",i.btnTitle,e.npT)}}let y=(()=>{class r extends t.Z{constructor(i){super(i),this.injector=i,this.isDshbrdnws4=!1}ngOnInit(){if(this.page\|\|(this.page=this.feature+"_MODAL"),this.title=this.configService.getFeatureContentTitle(this.feature,this.page),"DSHBRDNWS4"===this.feature&&(this.title_1=this.configService.getFeatureContentTitle(this.feature,"DSHBRDNWS4_TITLE"),this.content_1=this.configService.getFeatureContentSection(this.feature,"DSHBRDNWS4_SECTION_1"),this.isDshbrdnws4=!0,this.content_2=this.configService.getFeatureContentSection(this.feature,this.apiWrapperService.isMortgage?"DSHBRDNWS4_MRT_SEC":"DSHBRDNWS4_NOMRT_SEC")),this.btnTitle=this.configService.getFeatureContentSection(this.btnFeature,this.btnFeature+"_SECTION"),this.section=this.configService.getFeatureContentSectionWithImages(this.feature,this.page),this.loanDataFeature&&this.loanDataPage&&this.loanData.Features){const i=this.loanData.Features[this.loanDataFeature];if(i&&i.content){const l=i.content[this.loanDataPage];l&&(l.TITLE&&(this.title=l.TITLE),l.SECTION&&(this.section=this.sanitizer.bypassSecurityTrustHtml(l.SECTION)))}}}letsDoThisNews(){this.sendUserAnalyticsEvent();const i=this.getGoogleAnalyticsEventCode(this.btnFeature);this.initiateAction({feature:this.btnFeature,phoneNumber:this.customerServicePhone,contactBusinessDays:this.companyInfo.contactNumberBusinessDays1,analyticsEvent:i,analyticsCategory:i?n.t5.Dashboard:null})}sendUserAnalyticsEvent(){"DBRDNWBTN"===this.btnFeature?this.analyticService.userActivityEvent(n.LW.news_offers_1_request,n.Ld.Dashboard,this.analyticService.getEventContext()):"DBRDNWBTN2"===this.btnFeature?this.analyticService.userActivityEvent(n.LW.news_offers_2_request,n.Ld.Dashboard,this.analyticService.getEventContext()):"DBRDNWBTN3"===this.btnFeature?this.analyticService.userActivityEvent(n.LW.news_offers_3_request,n.Ld.Dashboard,this.analyticService.getEventContext()):"DBRDNWBTN4"===this.btnFeature?this.analyticService.userActivityEvent(n.LW.news_offers_4_request,n.Ld.Dashboard,this.analyticService.getEventContext()):"LMP_NWBTN"===this.btnFeature?this.analyticService.userActivityEvent(n.LW.lower_payment_news_offers_request,n.Ld.MyHome,this.analyticService.getEventContext()):"LNNWSBTN"===this.btnFeature?this.analyticService.userActivityEvent(n.LW.news_offers_1_request,n.Ld.MyLoan,this.analyticService.getEventContext()):"LNNWSBTN2"===this.btnFeature?this.analyticService.userActivityEvent(n.LW.news_offers_2_request,n.Ld.MyLoan,this.analyticService.getEventContext()):"LNNWSBTN3"===this.btnFeature?this.analyticService.userActivityEvent(n.LW.news_offers_3_request,n.Ld.MyLoan,this.analyticService.getEventContext()):"NBRHDNBTN"===this.btnFeature?this.analyticService.userActivityEvent(n.LW.news_offers_1_request,n.Ld.MyNeighborhood,this.analyticService.getEventContext()):"NBRHDNBTN2"===this.btnFeature?this.analyticService.userActivityEvent(n.LW.news_offers_2_request,n.Ld.MyNeighborhood,this.analyticService.getEventContext()):"NBRHDNBTN3"===this.btnFeature?this.analyticService.userActivityEvent(n.LW.news_offers_3_request,n.Ld.MyNeighborhood,this.analyticService.getEventContex
URL: https://account.mortgagequestions.com/phhm/204.60b... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a legitimate Angular component with no obvious malicious behaviors. It includes some standard Angular practices like using the `webpackChunkblack_knight` global variable, accessing property information, and rendering content based on data. While it uses some legacy APIs like `XDomainRequest`, these are not inherently malicious and are likely used for compatibility reasons. Overall, the script seems to be part of a larger application and does not demonstrate any high-risk indicators." }
"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[204],{58376:(j,h,o)=>{o.d(h,{Y:()=>k});var c=o(50187),r=o(23279),v=o(56610),I=o(63854);function d(t,y){if(1&t&&(r.j41(0,"span",8),r.EFF(1),r.nI1(2,"currency"),r.k0s()),2&t){const m=r.XpG(2);r.R7$(),r.JRh(r.ii3(2,1,m.propertyInfo.AreaSalesInfo.AverageAreaSalesValue,"USD","symbol","1.0-0"))}}function b(t,y){1&t&&(r.j41(0,"span",8),r.EFF(1,"N/A "),r.k0s())}function u(t,y){if(1&t&&(r.j41(0,"div"),r.DNE(1,d,3,6,"span",6)(2,b,2,0,"span",6),r.j41(3,"span",7),r.EFF(4,"Average*"),r.k0s(),r.j41(5,"span",8)(6,"h3"),r.EFF(7,"Availability of information varies by location"),r.k0s()()()),2&t){const m=r.XpG();r.R7$(),r.Y8G("ngIf","N/A"!==(null==m.propertyInfo.AreaSalesInfo?null:m.propertyInfo.AreaSalesInfo.AverageAreaSalesValue)),r.R7$(),r.Y8G("ngIf","N/A"===(null==m.propertyInfo.AreaSalesInfo?null:m.propertyInfo.AreaSalesInfo.AverageAreaSalesValue))}}let k=(()=>{class t extends c.Z{constructor(m){super(m),this.injector=m,this.averagePropertyValue=0}ngOnInit(){super.ngOnInit()}static#t=this.\u0275fac=function(_){return new(_\|\|t)(r.rXU(r.zZn))};static#e=this.\u0275cmp=r.VBU({type:t,selectors:[["bki-dashboard-neighborhood"]],features:[r.Vt3],decls:9,vars:2,consts:[[1,"card__content"],[1,"wrapper","pb-2"],[4,"ngIf"],[3,"height"],[1,"footer"],[1,"footer-button",3,"click"],["class","amount",4,"ngIf"],[1,"card-data-sm"],[1,"amount"]],template:function(_,D){1&_&&(r.j41(0,"div",0)(1,"div",1)(2,"h2"),r.EFF(3,"Your Neighborhood property value "),r.DNE(4,u,8,2,"div",2),r.k0s()(),r.nrm(5,"bki-recent-sales-map",3),r.j41(6,"div",4)(7,"button",5),r.bIt("click",function(){return D.navigationService.goToMyNeighborhood()}),r.EFF(8,"Find out more"),r.k0s()()()),2&_&&(r.R7$(4),r.Y8G("ngIf",null!=D.propertyInfo),r.R7$(),r.Y8G("height",202))},dependencies:[v.bT,I.R,v.oe],encapsulation:2})}return t})()},21204:(j,h,o)=>{o.r(h),o.d(h,{DashboardModule:()=>tn});var c=o(56610),r=o(57936),v=o(37440),I=o(95565),d=o(37222),b=o(61480),u=o(50187),k=o(35257),t=o(23279),y=o(61448),m=o(84993),_=o(38997),D=o(60662),g=o(97800);function x(n,s){if(1&n&&(t.j41(0,"div")(1,"mat-expansion-panel",8)(2,"mat-expansion-panel-header",9),t.nrm(3,"mat-panel-title",3),t.k0s(),t.nrm(4,"div",3),t.k0s()()),2&n){const e=s.$implicit;t.R7$(3),t.Y8G("innerHTML",e.title,t.npT),t.R7$(),t.Y8G("innerHTML",e.content,t.npT)}}let P=(()=>{class n extends u.Z{constructor(e){super(e),this.injector=e}ngOnInit(){super.ngOnInit(),this.pageTitle=this.configService.getFeatureContentTitle("LEARNING","DASH_LRN_TTL"),this.pageContent=this.configService.getFeatureContentSection("LEARNING","DASH_LRN_SEC"),this.educationService.getfaq3Content().subscribe(e=>{this.faq3Items=e})}static#t=this.\u0275fac=function(a){return new(a\|\|n)(t.rXU(t.zZn))};static#e=this.\u0275cmp=t.VBU({type:n,selectors:[["bki-dashboard-education"]],features:[t.Vt3],decls:11,vars:3,consts:[[1,"card__content"],[1,"wrapper"],[1,"title-divider2"],[3,"innerHTML"],[1,"no-border"],[4,"ngFor","ngForOf"],[1,"footer"],[1,"footer-button",3,"click"],[2,"box-shadow","none"],[1,"no-background"]],template:function(a,i){1&a&&(t.j41(0,"div",0)(1,"div",1)(2,"h2"),t.EFF(3),t.k0s(),t.nrm(4,"div",2)(5,"div",3),t.j41(6,"mat-accordion",4),t.DNE(7,x,5,2,"div",5),t.k0s()(),t.j41(8,"div",6)(9,"button",7),t.bIt("click",function(){return i.navigationService.goToEducation()}),t.EFF(10,"More resources"),t.k0s()()()),2&a&&(t.R7$(3),t.JRh(i.pageTitle),t.R7$(2),t.Y8G("innerHTML",i.pageContent,t.npT),t.R7$(2),t.Y8G("ngForOf",i.faq3Items))},dependencies:[c.Sq,g.BS,g.GK,g.Z2,g.WN],encapsulation:2})}return n})();var l=o(50213),N=o(93473),E=o(72221);function M(n,s){1&n&&t.nrm(0,"img",12)}let L=(()=>{class n extends u.Z{constructor(e,a){super(e),this.linkoutService=a}ngOnInit(){super.ngOnInit(),this.myHomeCareModalTitle=this.configService.getFeatureContentTitle("DBCAREBTN","DBCAREBTN_MODAL"),this.myHomeCareModalSection=this.configService.getFeatureContentSectionWithImages("DBCAREBTN","DBCAREBTN_SEC1")}hide
URL: https://account.mortgagequestions.com/phhm/474.a44... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a part of a larger application and does not contain any high-risk indicators. It primarily handles the initialization and rendering of an iframe for a mortgage assistance e-sign process. The script uses standard web APIs and does not exhibit any suspicious behavior like dynamic code execution, data exfiltration, or malicious redirects. While it uses some legacy practices like `XDomainRequest`, the overall context suggests this is likely a benign component of a legitimate application." }
"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[474],{81927:(S,I,d)=>{d.d(I,{y:()=>y});var s=d(86482),D=d(93473),k=d(13713),b=d(50213),_=d(23279),C=d(61480),x=d(56610),e=d(72221),R=d(84993);const A=["mainContent"];function T(M,E){1&M&&_.nrm(0,"bki-busy-indicator",14)}let y=(()=>{class M{constructor(v,f,r,h,l,g){this.dialogRef=v,this.router=f,this.standardTermsConversionService=r,this.analyticService=h,this.linkoutService=l,this.dialogData=g,this.url="",this.isBusy=!0,this.emailAddress="",this.dialogData&&Object.keys(this.dialogData).forEach(m=>{this[m]=this.dialogData[m]})}ngOnInit(){setTimeout(()=>{this.nameField.nativeElement.focus()},100)}hideModal(v){this.analyticService.googleAnalyticsEvent(b.Fg.request_assistance_introduction_710_form_continue,b.t5.MortgageAssistance),this.analyticService.userActivityEvent(b.LW.request_assistance_introduction_710_form_continue,b.Ld.MortgageAssistance,this.analyticService.getEventContext()),this.dialogRef.close(v)}ngAfterViewInit(){this.initFrame()}initFrame(){this.isBusy=!0,this.linkoutService.getEntityLinkOutUrl({Entity:"LMRMAESIGN",TargetUrl:this.url,EmailAddress:this.emailAddress,PackageID:this.packageId,isStandAlone:!0}).subscribe(v=>{const f=document.getElementById("myframe");this.isBusy=!1,f.src=v},v=>{this.isBusy=!1})}static#e=this.\u0275fac=function(f){return new(f\|\|M)(_.rXU(s.CP),_.rXU(C.Ix),_.rXU(k.g),_.rXU(b.LD),_.rXU(D.A),_.rXU(s.Vh))};static#t=this.\u0275cmp=_.VBU({type:M,selectors:[["bki-mortgage-assistance-esign"]],viewQuery:function(f,r){if(1&f&&_.GBs(A,5),2&f){let h;_.mGM(h=_.lsd())&&(r.nameField=h.first)}},decls:16,vars:2,consts:[["mainContent",""],["myframe",""],[1,"body","bg-grey"],[1,"row","iframe-header"],[1,"col"],["tabindex","0"],[1,"col","iframe-close"],[1,"fal","fa-times","pl-4",3,"click"],[1,"esign-iframe"],["id","myframe","frameborder","0","width","80%","height","600px"],[1,"row","iframe-footer"],[1,"col","text-center"],["type","submit","mat-flat-button","","color","primary",1,"iframe-continue",3,"click"],["imgSize","lg",4,"ngIf"],["imgSize","lg"]],template:function(f,r){if(1&f){const h=_.RV6();_.j41(0,"div",2)(1,"div",3)(2,"div",4)(3,"span",5,0),_.EFF(5),_.k0s()(),_.j41(6,"div",6)(7,"i",7),_.bIt("click",function(){return _.eBV(h),_.Njj(r.hideModal())}),_.k0s()()(),_.j41(8,"div",8),_.nrm(9,"iframe",9,1),_.k0s(),_.j41(11,"div",10)(12,"div",11)(13,"button",12),_.bIt("click",function(){return _.eBV(h),_.Njj(r.hideModal())}),_.EFF(14,"Continue"),_.k0s()()()(),_.DNE(15,T,1,0,"bki-busy-indicator",13)}2&f&&(_.R7$(5),_.SpI("Request for ",r.standardTermsConversionService.replaceStandardTerm("Mortgage")," Assistance (Form 710)"),_.R7$(10),_.Y8G("ngIf",r.isBusy))},dependencies:[x.bT,e.$z,R.o],encapsulation:2})}return M})()},96474:(S,I,d)=>{d.d(I,{h:()=>Pe});var s=d(50187),D=d(50213),k=d(39062),b=d(81927),_=d(589),C=d(84692),x=d(3385),e=d(23279),R=d(56610),A=d(72221),T=d(63422),y=d(29344),M=d(52161),E=d(37222),v=d(84993);const f=["singleSelector"];function r(i,a){1&i&&(e.j41(0,"div",17)(1,"div",18),e.EFF(2,"Upload Documents"),e.k0s()())}function h(i,a){if(1&i&&(e.j41(0,"div",21),e.EFF(1,"Upload Documents"),e.k0s()),2&i){const t=e.XpG(2);e.Y8G("ngClass",t.isMobileDevice?"col-10 card-title-md":"col-11 card-title-md ")}}function l(i,a){if(1&i&&(e.j41(0,"div",21),e.EFF(1,"View Documents"),e.k0s()),2&i){const t=e.XpG(2);e.Y8G("ngClass",t.isMobileDevice?"col-10 card-title-md":"col-11 card-title-md ")}}function g(i,a){if(1&i&&(e.j41(0,"div",19),e.DNE(1,h,2,1,"div",20)(2,l,2,1,"div",20),e.k0s()),2&i){const t=e.XpG();e.R7$(),e.Y8G("ngIf",!t.isViewAll),e.R7$(),e.Y8G("ngIf",t.isViewAll)}}function m(i,a){1&i&&e.nrm(0,"div",22)}function p(i,a){if(1&i&&(e.j41(0,"div",19)(1,"p"),e.EFF(2," There are "),e.j41(3,"span",23),e.EFF(4),e.k0s(),e.EFF(5," based on the information provided. You can upload one document at a time or you can "),e.j41(6,"span",23),e.EFF(7,"upload a single file "),e.k0s(),e.EFF(8,"for multiple documents. "),e.k0s(),e.j41(9,"div",24),e
URL: https://account.mortgagequestions.com/phhm/136.aed... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet exhibits several behaviors that raise moderate security concerns. While it does not contain any high-risk indicators like dynamic code execution or data exfiltration, it does engage in external data transmission, use of fallback domains, and aggressive DOM manipulation. Additionally, the script interacts with Google Maps API, which could potentially be used for malicious purposes if not properly implemented. Further review is recommended to ensure the script's legitimacy and identify any potential security vulnerabilities." } The key reasons for the medium risk score (6) are: 1. External Data Transmission (2 points): The script interacts with the Google Maps API, which could potentially transmit user data to external domains. 2. Fallback Domains (2 points): The script uses the `self.webpackChunkblack_knight` variable, which could potentially reference multiple fallback domains. 3. Aggressive DOM Manipulation (2 points): The script extensively manipulates the DOM, including creating and modifying map markers and elements. While the script does not exhibit any high-risk behaviors, the combination of these moderate-risk indicators warrants further investigation to ensure the script's legitimacy and security. The use of the Google Maps API, in particular, should be reviewed to ensure that it is implemented securely and does not expose any sensitive user data.
"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[136,997],{63854:(v,c,l)=>{l.d(c,{R:()=>m});var a=l(23279),s=l(50187),t=l(84692),u=l(4805);const _=["mapElement"],d=["mapMarkerDiv"],f=["mapMarkerHomeDiv"],g=["mapMarkerHighlightDiv"];let m=(()=>{class h extends s.Z{constructor(i,e){super(i),this.injector=i,this.resourceLoader=e,this.zoom=15,this.height=200,this.selectionChanged=new a.bkB,this.delay=0,this.delayIncrement=50,this.loading=!0,this.averagePropertyValue=0,this.aVMValue=0,this.markers=[],this.highlightColor="black",this.shouldCreateMap=!1}ngAfterViewInit(){let i=window.getComputedStyle(this.mapMarkerDiv.nativeElement);this.markerColor=i.backgroundColor,this.labelColor=i.color,i=window.getComputedStyle(this.mapMarkerHighlightDiv.nativeElement),this.highlightColor=i.color,i=window.getComputedStyle(this.mapMarkerHomeDiv.nativeElement),this.markerHomeColor=i.color,this.mapBounds=new google.maps.LatLngBounds,this.shouldCreateMap=!0,this.shouldCreateMap&&null!=this.propertyInfo&&null!=this.avmData&&this.createMap()}loanChanging(){super.loanChanging(),this.shouldCreateMap=!0}dataChanged(i){super.dataChanged(i),this.shouldCreateMap&&null!=this.propertyInfo&&null!=this.avmData&&this.createMap()}createMap(){this.shouldCreateMap=!1,this.loading=!1,this.lat=this.propertyInfo.PropertyProfile.LatitudeIdentifier,this.lng=this.propertyInfo.PropertyProfile.LongitudeIdentifier,this.aVMValue=this.avmData.AVMValueAmount;var i={center:{lat:this.lat,lng:this.lng},zoom:this.zoom,mapTypeId:google.maps.MapTypeId.ROADMAP,gestureHandling:"greedy",streetViewControl:!1};this.map=new google.maps.Map(this.mapElement.nativeElement,i),this.resourceLoader.getHomeMapIconSVG(this.markerHomeColor).subscribe(e=>{this.markerHome=new google.maps.Marker({position:{lat:this.lat,lng:this.lng},optimized:!1,icon:{url:e,scaledSize:new google.maps.Size(50,50),size:new google.maps.Size(50,50),origin:{x:0,y:0},anchor:{x:25,y:25}},zIndex:1e3}),this.markerHome.setMap(this.map),this.mapBounds.extend(this.markerHome.getPosition())}),this.addMapMarker(t.J.getKValue(this.aVMValue),this.lat,this.lng,{x:0,y:35}),this.sales=this.propertyInfo.ComparableSales,this.markers=[],this.sales.forEach(e=>this.markers.push({marker:null,sale:e,processed:!1})),this.createMarkers()}createMarkers(){var i=this.findNextAddressToGeoCode();i?setTimeout(()=>{this.createMarker(i,()=>this.createMarkers())},this.delay):this.markers.length>0&&this.map.fitBounds(this.mapBounds)}findNextAddressToGeoCode(){return this.markers.find(i=>!i.processed)}createMarker(i,e){let n=i.sale;n.LatitudeIdentifier&&0!==n.LatitudeIdentifier&&n.LongitudeIdentifier&&0!==n.LongitudeIdentifier&&(this.addSaleMarker(i),e())}addSaleMarker(i){let e=i.sale;i.processed=!0,i.marker=this.addMapMarker("N/A"===e.PurchasePriceValue?"SALE":t.J.getKValue(t.J.convertStringToNumber(e.PurchasePriceValue)),e.LatitudeIdentifier,e.LongitudeIdentifier);let n=this;i.marker.addListener("click",()=>{n.selectSale(e),setTimeout(()=>{n.selectionChanged.emit(e)})})}addMapMarker(i,e,n,o){let p=new google.maps.Marker({position:{lat:e,lng:n},label:{color:this.labelColor,fontWeight:"normal",text:i},icon:{anchor:o,path:t.J.getTooltipPath(60,25,6,4),fillColor:this.markerColor,fillOpacity:1,strokeColor:"transparent",strokeWeight:2,labelOrigin:{x:0,y:-17},optimized:!1,zIndex:1}});return p.setMap(this.map),this.mapBounds.extend(p.getPosition()),p}getMarker(i){if(!i)return null;var e=this.markers.find(n=>n.sale===i);return e?e.marker:null}selectSale(i){this.selectedSale&&this.unselectSale(this.selectedSale),this.highlightMarker(i)}isSaleSelected(i){return this.selectedSale===i}highlightMarker(i){let e=this.getMarker(i);if(e){let n=e.getIcon();n.fillColor=this.highlightColor,e.setIcon(n),this.map.getBounds().contains(e.getPosition())\|\|this.map.panTo(e.getPosition()),e.setZIndex(google.maps.Marker.MAX_ZINDEX+1),this.selectedSale=i}}unselectSale(i){let e=this.getMarker(i);if(e){let n=e.getIcon();n.fillColor=this.markerColor,e.set
URL: https://account.mortgagequestions.com/phhm/polyfil... Model: Joe Sandbox AI	```json { "risk_score": 4, "reasoning": "The script includes moderate-risk indicators such as external data transmission using sendBeacon and XMLHttpRequest, which can send user data to third-party domains. However, there is no evidence of high-risk behaviors like dynamic code execution or data exfiltration to suspicious domains. The script's purpose is unclear, warranting further review." }
(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[461],{19462:()=>{!function(){"use strict";function le(de){return(le="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(se){return typeof se}:function(se){return se&&"function"==typeof Symbol&&se.constructor===Symbol&&se!==Symbol.prototype?"symbol":typeof se})(de)}(function(){(function(){return"navigator"in this&&"sendBeacon"in this.navigator}).call(this)\|\|("navigator"in this\|\|(this.navigator={}),this.navigator.sendBeacon=function(de,se){var Ce=this.event&&this.event.type,He="unload"===Ce\|\|"beforeunload"===Ce,Te="XMLHttpRequest"in this?new XMLHttpRequest:new ActiveXObject("Microsoft.XMLHTTP");Te.open("POST",de,!He),Te.withCredentials=!0,Te.setRequestHeader("Accept","/"),function(de){return"string"==typeof de}(se)?(Te.setRequestHeader("Content-Type","text/plain;charset=UTF-8"),Te.responseType="text/plain"):function(de){return de instanceof Blob}(se)&&se.type&&Te.setRequestHeader("Content-Type",se.type);try{Te.send(se)}catch{return!1}return!0}.bind(this))}).call("object"===(typeof window>"u"?"undefined":le(window))?window:{})}()},72260:()=>{"use strict";const le=globalThis;function ce(e){return(le.__Zone_symbol_prefix\|\|"__zone_symbol__")+e}const se=Object.getOwnPropertyDescriptor,Ce=Object.defineProperty,He=Object.getPrototypeOf,Te=Object.create,Tt=Array.prototype.slice,nt="addEventListener",ct="removeEventListener",rt=ce(nt),We=ce(ct),me="true",ye="false",$e=ce("");function ot(e,r){return Zone.current.wrap(e,r)}function Ne(e,r,l,t,a){return Zone.current.scheduleMacroTask(e,r,l,t,a)}const z=ce,Be=typeof window<"u",Ie=Be?window:void 0,ee=Be&&Ie\|\|globalThis,at="removeAttribute";function Ue(e,r){for(let l=e.length-1;l>=0;l--)"function"==typeof e[l]&&(e[l]=ot(e[l],r+"_"+l));return e}function lt(e){return!e\|\|!1!==e.writable&&!("function"==typeof e.get&&typeof e.set>"u")}const qe=typeof WorkerGlobalScope<"u"&&self instanceof WorkerGlobalScope,Xe=!("nw"in ee)&&typeof ee.process<"u"&&"[object process]"===ee.process.toString(),Ye=!Xe&&!qe&&!(!Be\|\|!Ie.HTMLElement),ut=typeof ee.process<"u"&&"[object process]"===ee.process.toString()&&!qe&&!(!Be\|\|!Ie.HTMLElement),Ke={},Et=z("enable_beforeunload"),ft=function(e){if(!(e=e\|\|ee.event))return;let r=Ke[e.type];r\|\|(r=Ke[e.type]=z("ON_PROPERTY"+e.type));const l=this\|\|e.target\|\|ee,t=l[r];let a;return Ye&&l===Ie&&"error"===e.type?(a=t&&t.call(this,e.message,e.filename,e.lineno,e.colno,e.error),!0===a&&e.preventDefault()):(a=t&&t.apply(this,arguments),"beforeunload"===e.type&&ee[Et]&&"string"==typeof a?e.returnValue=a:null!=a&&!a&&e.preventDefault()),a};function st(e,r,l){let t=se(e,r);if(!t&&l&&se(l,r)&&(t={enumerable:!0,configurable:!0}),!t\|\|!t.configurable)return;const a=z("on"+r+"patched");if(e.hasOwnProperty(a)&&e[a])return;delete t.writable,delete t.value;const _=t.get,y=t.set,k=r.slice(2);let w=Ke[k];w\|\|(w=Ke[k]=z("ON_PROPERTY"+k)),t.set=function(M){let E=this;!E&&e===ee&&(E=ee),E&&("function"==typeof E[w]&&E.removeEventListener(k,ft),y&&y.call(E,null),E[w]=M,"function"==typeof M&&E.addEventListener(k,ft,!1))},t.get=function(){let M=this;if(!M&&e===ee&&(M=ee),!M)return null;const E=M[w];if(E)return E;if(_){let O=_.call(this);if(O)return t.set.call(this,O),"function"==typeof M[at]&&M.removeAttribute(r),O}return null},Ce(e,r,t),e[a]=!0}function ht(e,r,l){if(r)for(let t=0;t<r.length;t++)st(e,"on"+r[t],l);else{const t=[];for(const a in e)"on"==a.slice(0,2)&&t.push(a);for(let a=0;a<t.length;a++)st(e,t[a],l)}}const Ee=z("originalInstance");function ze(e){const r=ee[e];if(!r)return;ee[z(e)]=r,ee[e]=function(){const a=Ue(arguments,e);switch(a.length){case 0:this[Ee]=new r;break;case 1:this[Ee]=new r(a[0]);break;case 2:this[Ee]=new r(a[0],a[1]);break;case 3:this[Ee]=new r(a[0],a[1],a[2]);break;case 4:this[Ee]=new r(a[0],a[1],a[2],a[3]);break;default:throw new Error("Arg list too long.")}},ke(ee[e],r);const l=new r(function(){});let t;for(t in l)"XMLHttpRequest"===e&&"responseBlob"===t\|\|function(a){"function"==typeof
URL: https://www.mortgagequestions.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Go Paperless", "prominent_button_name": "Enroll Today", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://account.mortgagequestions.com/phhm/67.4b11... Model: Joe Sandbox AI	```json { "risk_score": 2, "reasoning": "The script includes the use of Angular's bypassSecurityTrustResourceUrl, which can be risky if not properly handled, but there is no evidence of dynamic code execution, data exfiltration, or interaction with suspicious domains. The script appears to be part of a legitimate application, likely for generating QR codes and displaying property information." }
"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[67],{60662:(F,_,r)=>{r.d(_,{H:()=>rt});var v=r(50187),y=r(58082),d=r(50213),b=r(54153),t=r(23279),f=r(76098),V=r(86482);let u=(()=>{class a{constructor(e,o,i){this.sanitizer=e,this.propertyService=o,this.dialogRef=i,this.qrCodeUrl="#"}ngOnInit(){const e=this.propertyService.avmReportResponse.value?.QRCodeContent;this.qrCodeUrl=decodeURIComponent(this.propertyService.avmReportResponse.value?.QRCodeURL?.replace("https%3A%2F%2F","")),this.imagePath=this.sanitizer.bypassSecurityTrustResourceUrl(e)}close(){this.dialogRef.close()}static#t=this.\u0275fac=function(o){return new(o\|\|a)(t.rXU(f.up),t.rXU(b.X),t.rXU(V.CP))};static#e=this.\u0275cmp=t.VBU({type:a,selectors:[["bki-dashboard-propertyinfo-avm"]],decls:30,vars:3,consts:[[1,"card__content","avm-qrcode-panel"],[1,"container-fluid","secondary-regular-background"],[1,"row","pt-3"],[1,"col","text-center"],[1,"fa-stack","fa-3x"],[1,"far","fa-camera","fa-stack-1x"],[1,"far","fa-circle","fa-stack-2x","black-20-percent"],[1,"row","py-3"],["tabindex","0",1,"d-block","card-title-md","d-white"],[1,"wrapper"],[1,"row"],[1,"col-1","text-right"],[1,"far","fa-info-circle","qr-icon"],["role","alert","aria-live","polite","tabindex","0",1,"col-11","text-left","qr-message"],[1,"OneLinkNoTx"],["target","_blank",3,"href"],[3,"src"],[1,"col","text-right"],["type","button","value","Close",1,"mat-mdc-unelevated-button","mat-basic",3,"click"]],template:function(o,i){1&o&&(t.j41(0,"div",0)(1,"div",1)(2,"div",2)(3,"div",3)(4,"span",4),t.nrm(5,"i",5)(6,"i",6),t.k0s()()(),t.j41(7,"div",7)(8,"div",3)(9,"span",8)(10,"strong"),t.EFF(11,"Value Your Property"),t.k0s()()()()(),t.j41(12,"div",9)(13,"div",10)(14,"div",11),t.nrm(15,"i",12),t.k0s(),t.j41(16,"div",13)(17,"p"),t.EFF(18,"Scan the QR code with your mobile device's camera to value your property. You must use your mobile device's camera for this experience."),t.k0s(),t.j41(19,"p"),t.EFF(20,"Photos must be submitted within 72 hours from the start of the "),t.j41(21,"span",14),t.EFF(22,"Validate"),t.k0s(),t.EFF(23," session."),t.k0s()()(),t.j41(24,"div",3)(25,"a",15),t.nrm(26,"img",16),t.k0s()(),t.j41(27,"div",10)(28,"div",17)(29,"input",18),t.bIt("click",function(){return i.close()}),t.k0s()()()()()),2&o&&(t.R7$(25),t.Mz_("href","https://",i.qrCodeUrl,"",t.B4B),t.R7$(),t.Y8G("src",i.imagePath,t.B4B))},styles:[".avm-qrcode-panel[_ngcontent-%COMP%] .fa-camera[_ngcontent-%COMP%]{color:#fff}.avm-qrcode-panel[_ngcontent-%COMP%] .qr-icon[_ngcontent-%COMP%]{position:relative;top:1px;padding-right:.5em}.avm-qrcode-panel[_ngcontent-%COMP%] .qr-message[_ngcontent-%COMP%] > p[_ngcontent-%COMP%]:last-child{margin-bottom:0}"]})}return a})();var l=r(84692),D=r(5793),p=r(56610),S=r(29344),T=r(66566),k=r(84993),P=r(26182);const w=["estimatedValueChart"],L=["homeOverlay"],j=["chartStyleDiv"],G=["container"];function O(a,s){if(1&a&&(t.j41(0,"div",16)(1,"div",17),t.EFF(2),t.k0s(),t.nrm(3,"div",18),t.k0s()),2&a){const e=s.$implicit,o=t.XpG();t.xc7("margin-top",e.margin,"px"),t.R7$(),t.xc7("width",o.legendWidth,"px"),t.R7$(),t.JRh(e.value),t.R7$(),t.xc7("width",o.hLineWidth,"px")("border-bottom",e.isFooter?"1px solid black":"1px dashed darkgrey")}}let N=(()=>{class a extends v.Z{constructor(e){super(e),this.injector=e,this.width=0,this.height=200,this.vendorName="default",this.chartLoaded=!1,this.hLineWidth=0,this.marginLeft=33,this.legendWidth=50,this.currentPriceIndex=0,this.dashedLines=[]}ngOnInit(){this.chartLoaded=!1;let o,i,n,c,e={HousePriceIndexDate:this.avmData.AVMDate&&this.avmData.AVMDate.toString(),EstimatedAVMValueAmount:this.avmData.AVMValueAmount,HousePriceIndexLowestPropertyAmount:this.avmData.AVMLowValueAmount,HousePriceIndexHighestPropertyAmount:this.avmData.AVMHighValueAmount};this.isNullOrUndefined(e)\|\|(o=e.HousePriceIndexDate,i=Object.keys(e).length),n=this.isNullOrUndefined(this.estimatedAVMData)?0:this.estimatedAVMData.length,!this.isNullOrUndefined(e)&&n>0&&i>0&&(c=thi
URL: https://www.mortgagequestions.com/ Model: Joe Sandbox AI	{ "brands": [ "MQ" ] }
	{ "brands": [ "MQ" ] }
URL: https://account.mortgagequestions.com/phhm/#/login Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Having Trouble with Monthly Payments?", "prominent_button_name": "LOG IN", "text_input_field_labels": [ "Username", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://account.mortgagequestions.com/phhm/#/login Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://account.mortgagequestions.com/phhm/#/login Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Having Trouble with Monthly Payments?", "prominent_button_name": "Log in", "text_input_field_labels": [ "Username", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://account.mortgagequestions.com/phhm/#/login Model: Joe Sandbox AI	{ "brands": [ "Cobrowse" ] }
	{ "brands": [ "Cobrowse" ] }
URL: https://account.mortgagequestions.com/phhm/#/login Model: Joe Sandbox AI	```json{ "legit_domain": "mortgagequestions.com", "classification": "unknown", "reasons": [ "The URL 'mortgagequestions.com' is a legitimate domain associated with mortgage services.", "The brand 'Cobrowse' is not widely recognized and does not have a strong association with 'mortgagequestions.com'.", "The subdomain 'account' is commonly used for login pages and does not inherently indicate phishing.", "The URL does not contain suspicious elements such as misspellings or unusual domain extensions.", "The presence of input fields for 'Username' and 'Password' is typical for login pages but requires caution if the brand association is unclear." ], "riskscore": 4}
URL: account.mortgagequestions.com Brands: Cobrowse Input Fields: Username, Password

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 24 14:04:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9747896436577355
Encrypted:	false
SSDEEP:	48:8nodrQTL0SbMH3idAKZdA19ehwiZUklqehNy+3:8naQ3zbgKy
MD5:	43C3D8646CE9CBB2EE58983E490BEF46
SHA1:	11165E3F3179A7C0F78F736CD3922C1A9601087E
SHA-256:	BD8DC6DB14ECEFA83F35A4A817B532CE927EB3273924250E31C5E44E47FC87D8
SHA-512:	E64FA50C4F28470E974A05DA2F52716F4F8F6077846128B74AA3445D8F6CE1FC50D138B440B894E8862C4E059394D75C143CC5EB6BEA50B6A88D7EAD6553F166
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....4Y,.V..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.x....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.x....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.x....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.x..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.x...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............,7......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 24 14:04:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9929821523462943
Encrypted:	false
SSDEEP:	48:8SodrQTL0SbMH3idAKZdA1weh/iZUkAQkqeh6y+2:8SaQ3zba9Q/y
MD5:	C06B4A0E4D8141F05A958B452AADC258
SHA1:	FF0CA5DDE0BE039C3E533C5788ED3E5868B86CAC
SHA-256:	DA4D5CC275FC13D73BCE74BC303277B95FCA0A7011A7777DB6A084E0DCBAE52B
SHA-512:	14C179667E8F7179BA96C28900BD3C5B25923D0737CDFB8FE5BF4A1F3A0CA165F57F46A275C1985298BB07635B80F1D47451E71352C7DA3595CFC8D31BCE167F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......J,.V..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.x....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.x....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.x....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.x..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.x...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............,7......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.005768769808481
Encrypted:	false
SSDEEP:	48:8xGodrQTL0SbsH3idAKZdA14tseh7sFiZUkmgqeh7s8y+BX:8xGaQ3zbin2y
MD5:	4473341C03C40649D76A317FBF9C44D8
SHA1:	35A8AF5C94A1E32D986BBBB26A76F9624711484B
SHA-256:	B2BBF2D8B8783BD273E108E37441503A9356540DD3068F8FA3B7D4FD58D61612
SHA-512:	DC34581D2371EAEB5D702030901A4E55BC39D5FBE2217261C3F33D938987389D58CB029CD51A6579EC227DDB3D476672B4048F6528C04DDE2ECE5E5E7AD65327
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.x....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.x....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.x....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.x..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............,7......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 24 14:04:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9906701295246725
Encrypted:	false
SSDEEP:	48:8bxodrQTL0SbMH3idAKZdA1vehDiZUkwqehOy+R:8bxaQ3zbB0y
MD5:	DD88BBC98678FB9323C0088E3FBB7657
SHA1:	493931CD7C6B3833FE72CA1F2E9B21B1157BE2D1
SHA-256:	A6DB4F4AE8057A12112A9838D642F556021E132CBB9F58F9709ED433B02FC50A
SHA-512:	F95A5B7EB99DF64989DF38C9C9D280207155A3E583DD94A0E639FEC147470E3193FCE70E3F16A83A808EA37D90AC07850ECA43436880C13337B1B560C41F16BE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....!F,.V..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.x....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.x....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.x....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.x..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.x...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............,7......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 24 14:04:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.979684419439023
Encrypted:	false
SSDEEP:	48:8xodrQTL0SbMH3idAKZdA1hehBiZUk1W1qehYy+C:8xaQ3zbB94y
MD5:	F3628E5F6971A54D8B677CDD8F38C3EC
SHA1:	7E2494FE23C0DDBA5E9A0B0CCD4317235020017D
SHA-256:	AEDBF71B63FE7332FCF148AFDE23D5B14A683EAFBD8ADF29E523423A846F01B8
SHA-512:	62A7C42CAC23F5402A634596D5E009026F88E3B7D3F496F0C26E14ABE8B044805F183CAABB4A5E3445D4E1229FFBE1414D97A2F6821FE87B79F7D21B83418C56
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......R,.V..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.x....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.x....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.x....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.x..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.x...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............,7......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 24 14:04:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.988741303494112
Encrypted:	false
SSDEEP:	48:8XjZodrQTL0SbMH3idAKZdA1duT+ehOuTbbiZUk5OjqehOuTb2y+yT+:8taQ3zb9T/TbxWOvTb2y7T
MD5:	468901CE6EFF685CE4796BEBFF57C0DC
SHA1:	ACBA264BCED3EC46603FCF3A8CC432722C6BC912
SHA-256:	7D4942A4BCF6BF6EE30A71D5E0CD10BE297FB2EA394E230AA5893325EAAD5B93
SHA-512:	864BFA829D50E3D82BDD1CC0FF3E3A81686609E0AD400959C8DD5C073551DFB0293C0996507848879110C5C55D57DE67F71280BE03D28D3783AF152EB14BED52
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....?6:,.V..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.x....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.x....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.x....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.x..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.x...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............,7......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48787), with no line terminators
Category:	downloaded
Size (bytes):	48787
Entropy (8bit):	5.510122525253371
Encrypted:	false
SSDEEP:	768:pKYdOkgCDCYA/A1AVAFAgA8AWAfAmAbAgAeA1Ao3r0Advn8GFwDXTTrrCxBXN+zh:QHFwDXTTrrCxBXNqcGyzO
MD5:	81344CB1FA5CAD9ADA0F5E5B0117A376
SHA1:	1C8E38E0217FE8CB016AC1D9AF4652186AC94578
SHA-256:	6CB18FD3C17BDB753A46F840ACD3A3A699AD87154C93582752B60AB9EC6E1C1A
SHA-512:	7F47CE32E341708B2E4DD18E0575EEB40FBB77B1FA654063EF92D8036D13226564513C6B2C85A6DEBD079B0BD3B415483D0EF59B0F32EE7A02559AC94DCDDDC3
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/368.2e7b8668e39a2b99.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[368],{80368:(gn,w,s)=>{s.r(w),s.d(w,{MortgageAssistanceModule:()=>mn});var u=s(56610),g=s(61480),M=s(50187),h=s(50213),C=s(89977),k=s(84692),t=s(23279),x=s(97800),T=s(84993);const A=()=>["introduction"],c=n=>({mortgageassistance:n}),d=n=>({outlets:n}),p=n=>["/mortgage-assistance",n],O=()=>["borrowerinfo"],P=()=>["propertyinfo"],I=()=>["hardshipinfo"],b=()=>["borrowerincome"],y=()=>["borrowerassets"],j=()=>["agreement"],S=()=>["reviewsubmit"];function G(n,a){if(1&n&&(t.j41(0,"span",35),t.nrm(1,"i"),t.j41(2,"strong",36),t.EFF(3,"1"),t.k0s()()),2&n){t.XpG();const e=t.sdS(8);t.R7$(),t.HbH(e.isActive?"fa fa-circle fa-stack-2x circle-primary":"fa fa-circle fa-stack-2x circle-initial")}}function E(n,a){1&n&&t.nrm(0,"i",37)}function D(n,a){1&n&&t.nrm(0,"div",38)}function H(n,a){1&n&&t.nrm(0,"router-outlet",39)}function Y(n,a){1&n&&t.nrm(0,"div",40)}function N(n,a){if(1&n&&(t.j41(0,"span",35),t.nrm(1,"i"),t.j4

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	366
Entropy (8bit):	5.112357560984955
Encrypted:	false
SSDEEP:	6:tI9mc4slzhoFiA4UFAhkafBNqW2POFtd7W8dmnUU510cT9QZySrdGoTXs7/:t4ToOndxFtk8CUy10jZ5HXC
MD5:	80FC98157266D0A5062519F514FFD9B9
SHA1:	1694D631506AA3F2AC0887CA0C6DA105956F41EB
SHA-256:	9289B99E3825986C03EC3982DAF0C73146A37BE4F98E06A1B11A5F3F8E7B4FB5
SHA-512:	77BADA3B884DFB0DFA1CB30CDD1CB627CFACAAE9F05EDB67890DF28A53444C7485EB4166E2F81E8401D1B8EE9709C452CD64FAD99A38A5783E8E67459B7CEA3C
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12.004" height="10.003" viewBox="0 0 12.004 10.003"><defs><style>.a{fill:#72a951;}</style></defs><path class="a" d="M19.5,16.5H9.526l3.821-3.639a.5.5,0,0,0-.69-.724L8.293,16.294A1,1,0,0,0,8.3,17.717l4.355,4.148a.5.5,0,1,0,.69-.724L9.51,17.5H19.5a.5.5,0,0,0,0-1Z" transform="translate(20.004 22.003) rotate(180)"/></svg>

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1758
Entropy (8bit):	4.545407166458228
Encrypted:	false
SSDEEP:	24:t4x4e3zhRa4F5Tq7KblL0LtC44blHl1o8qsgD72NW/TaxxaBdcfgTkTMKOfNzGvj:H6xFZL0U4SLuseTexajcvWfNz0j
MD5:	43E85F24AC5FF5B369F44D8FB6588457
SHA1:	48A0B464E253BE91B2EBD24EBA9660C4F1E2FE2D
SHA-256:	189EC367A5C2A273D72A8FAEF4D4B4A1BD6E75BF1C2B42C84641D9952911B30F
SHA-512:	E6D53091598BDD4C993EA4E9AD9037E26FF46AD80089304FADCA797989D64534D014037A93FF1A586CC53F5759CAEFC33DE4B387F96CEABFDA772C66D8543C0A
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="41.032" height="41.102" viewBox="0 0 41.032 41.102"><defs><style>.a{fill:#fff;stroke:#fff;}</style></defs><g transform="translate(0.499 0.566)"><g transform="translate(0.001 0.004)"><g transform="translate(0 0)"><path class="a" d="M40.025,15.308A.631.631,0,0,0,40,15.173a.667.667,0,0,0-.038-.115.6.6,0,0,0-.067-.1.629.629,0,0,0-.089-.1c-.011-.009-.015-.022-.027-.031L33.361,9.838V4.673a2,2,0,0,0-2-2H24.128L21.233.423a1.978,1.978,0,0,0-2.433,0L15.9,2.671H8.673a2,2,0,0,0-2,2V9.838L.256,14.821c-.011.009-.016.022-.027.031a.626.626,0,0,0-.089.1.6.6,0,0,0-.067.1.658.658,0,0,0-.038.115.632.632,0,0,0-.027.133c0,.014-.008.026-.008.04V38.035a1.979,1.979,0,0,0,.392,1.178c0,.006,0,.013.009.019s.015.011.021.019A1.992,1.992,0,0,0,2,40.036H38.032a1.992,1.992,0,0,0,1.583-.79c.005-.007.013-.009.018-.015s.005-.013.009-.019a1.98,1.98,0,0,0,.392-1.178V15.348C40.033,15.334,40.026,15.322,40.025,15.308ZM19.616,1.476a.64.64,0,0,1,.8,0l1.539,1.2h-3.87ZM2.169,38.7,19.

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	350
Entropy (8bit):	5.054636650452941
Encrypted:	false
SSDEEP:	6:tI9mc4slzhoFiA4UFCERMDRiFtd7W8dmnUU510cT9QZySrdGoTXsjD6:t4ToO7RiFtk8CUy10jZ5HXQu
MD5:	E48136FCDBB84D5549CB9414820CE7C2
SHA1:	586E8E8899A7773BADDA69D0334244B849DFCE0E
SHA-256:	62F669F818B149942B39821E0B7E04490B3E33A9DD9CDA54CF28B7A3BB2C86F8
SHA-512:	CBD6E6ADCE2E717B3027943C239874CBE6864A9445EDEBC9132C808B13D8F67398E297FDC552E9C92FB384C669D54682F6667663A752B70CBCFFB6A9C9479825
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12.004" height="10.003" viewBox="0 0 12.004 10.003">.. <path id="left-arrow" d="M19.5,16.5H9.526l3.821-3.639a.5.5,0,0,0-.69-.724L8.293,16.294A1,1,0,0,0,8.3,17.717l4.355,4.148a.5.5,0,1,0,.69-.724L9.51,17.5H19.5a.5.5,0,0,0,0-1Z" transform="translate(20.004 22.003) rotate(180)" fill="#1074B2"/>..</svg>..

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 236 x 301, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	53993
Entropy (8bit):	7.967783952556641
Encrypted:	false
SSDEEP:	1536:4YTKX0mGTjK2a76PkLDtj9DtODQTQfClLap:DKnQjK2aPPtvLyYm
MD5:	BC51CA11FD4E52629D56421193C0ABDD
SHA1:	CE888C3FD79739A09A0BF5F6CE41A034AB5EE68B
SHA-256:	32DDED68D906C660B66901AFA5A1BF8E3C8ECBA58B8B2CBC6B9BED89C316E90F
SHA-512:	070D562E80C51EC6DFD9464C7DC5ACFCE7B85C79CE5737FD20A30D5039F6D0C0EA8A81A72831AA6FE6986DF179E577CC7660FD9FBCC7058BAB40FA1BC0090689
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......-......r......pHYs..........+.....#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5, 2022/05/09-07:22:29 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.4 (Windows)" xmp:CreateDate="2023-05-30T11:50:11-05:00" xmp:ModifyDate="2023-05-30T11:56:22-05:00" xmp:MetadataDate="2023-05-30T11:56:22-05:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:5e5a9117-ffa1-aa46-a003-da9edea77a24" xmpMM:DocumentID="adobe:docid:photoshop:378a38ce-2d5f-cc4d-b43b-d6b4697ce109" xmpMM:OriginalDocumentID="xmp.did:ec38c8

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	downloaded
Size (bytes):	242460
Entropy (8bit):	5.572325952912454
Encrypted:	false
SSDEEP:	6144:9b2YzT5agwtlj8J80jHHb5M6MsgAgyomU+NYiZBEAmQl93LqfwvT0oUAKAxdWEN:9b2YzT5agwtlj8XjHHb5M6xgAgyomU+9
MD5:	478E3305589332DDC238EE3EA07808F5
SHA1:	B00F76C0A64ADE72623D6EB597C7B19BCF25F1F8
SHA-256:	113588507DB2107CD3B88A3C0C926D9084926D762C3348DA257CE266D5A23D42
SHA-512:	A9EECC2C5B6839574DFD8F97681AC039E6A7252B3C8C02847B15DF688B7B9C8A6D21359AAC1F9F4D399776F47A9042E7E6B0C28C56C4F884D00C18974895AE35
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/59/3a/main.js
Preview:	(function(_){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2019 Google LLC. SPDX-License-Identifier: BSD-3-Clause././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause././..Math.uuid.js (v1.4).http://www.broofa.com.mailto:robert@broofa.com.Copyright (c) 2010 Robert Kieffer.Dual licensed under the MIT and GPL licenses../.var aaa,na,pa,oa,ta,caa,daa,Ia,Pa,Sa,Qb,Rb,eaa,gaa,Gc,Ic,haa,$c,Yc,ad,iaa,laa,hd,kd,ld,md,oaa,od,raa,uaa,vaa,Caa,Aaa,Baa,yaa,zaa,Eaa,Faa,Gaa,Haa,Iaa,re,Kaa,Jaa,Maa,Laa,Oaa,Naa,Paa,Qaa,te,Raa,Saa,Taa,Yaa,ff,bba,eba,Zaa,dba,cba,aba,$aa,fba,lf,gba,lba,mba,oba,rba,Cf,vba,Lf,wba,zba,Aba,Xf,Wf,Sba,mg,ng,og,pg,Uba,Vba,Zba,Wba,Yba,sg,Ag,$ba,aca,Eg,cca,bca,dca,Gg,fca,gca,hca,ica,jca,lca,nca,qca,Kg,Mg,Ng,oca,pca,tca,Qg,Ug,Vg,uca,Xg,Wg,vca,xca,zca,Dca,Fca,Eca,Gca,Ica,Mi,Pca,Oca,Tca,Uca,nj,Wca,Xca,Yca,ada,$ca,.bda,cda,wj,Zca,dda,Tj,Zj,jda,rk,l

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2095
Entropy (8bit):	5.040842149707784
Encrypted:	false
SSDEEP:	48:3JrVJANWgN4ScNqcVNQ3LxWxT0u+XxhVjL7vqsS0VMweF:3JrVet2HhOL8xT0D/7vhSa1A
MD5:	5BCC3D30ABAFCA11FAC5EB72C9283430
SHA1:	E5043EDCF5945E71854348AF50DF8462CB754477
SHA-256:	8423CE113B1BD31ED6ACB06D953E739B521DE21817713F17C1388624CE1753C5
SHA-512:	DB5274AE42927B3C1B4F837BC79C4251C9F7326FBAE3E871D3CB3D4F58FF0843A94B6E2E42273D8FAB8C7FD5EFB88E9CAFAFCD4D421AC3F9E6D2198B72898632
Malicious:	false
Reputation:	low
Preview:	/*.. Support Plugin.. .. @version 2.3.4.. * @author Vivid Planet Software GmbH.. * @author Artus Kolanowski.. * @author David Deutsch.. * @license The MIT License (MIT).. */..;(function($, window, document, undefined) {.....var style = $('<support>').get(0).style,....prefixes = 'Webkit Moz O ms'.split(' '),....events = {.....transition: {......end: {.......WebkitTransition: 'webkitTransitionEnd',.......MozTransition: 'transitionend',.......OTransition: 'oTransitionEnd',.......transition: 'transitionend'......}.....},.....animation: {......end: {.......WebkitAnimation: 'webkitAnimationEnd',.......MozAnimation: 'animationend',.......OAnimation: 'oAnimationEnd',.......animation: 'animationend'......}.....}....},....tests = {.....csstransforms: function() {......return !!test('transform');.....},.....csstransforms3d: function() {......return !!test('perspective');.....},.....csstransitions: function() {......return !!test('transition');.....},.....cssanimations: function() {......ret

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 31080, version 0.0
Category:	downloaded
Size (bytes):	31080
Entropy (8bit):	7.9869568305342975
Encrypted:	false
SSDEEP:	768:CeQ4iuemDSMX0DVpqqPJdrL6HYwadxMwY8HFFuv8I:CeQ41xDLOWqBdru4wyxMwZjI
MD5:	C8F017462FDC570B8878C7A8DE12CFDA
SHA1:	6377E8608A69D3780409C7AFF059DFFF1F77BDB9
SHA-256:	8F57C5C0FD924E2237EF0ACCD60D81DFDB34CF6B7D157F289174007BDDD3CB6E
SHA-512:	D44E7BFF8DD1F66155EAE244969B880DC44D614ED66F905BF0931F1F5B7119A83E0424E8ACE6AF5EBFA1ED960E95853BA769EB3954D8E98EB5058218AE2652B0
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/Content/fonts/Gotham/Gotham-Light.woff
Preview:	wOFF......yh......".........................FFTM..yL........u.b.GDEF..ip...N...Z.q..GPOS..o.......;..x.cGSUB..i........h...9OS/2.......M...`g.;.cmap...............Ggasp..ih............glyf...8..RV......."head...X...6...6...hhea.......!...$.~.3hmtx...$............loca...p........../Rmaxp........... .?..name..^....1......t.post..a...........P......33Zp.F_.<............v.....\6R.R.3.)..............x.c`d``K...8.s......@.d.....C.....x.c`d``\|.p.A............\|..0....x.c`b.......:....Q.B3_dHcb@.........a\|.57/ ..-._..,.u.o... 9..L{@r...iV.....x.._h[U....$.c..D&}.">.2D\|...Va.6E.."%.0.m.#.[.a."e..d........}.l......"{.#H....0.5~~77..J1.....s.=..........Fb\.............OLk.f.S...L.........u..i.......I._...{.b....~.......p..K._..o..7UM..f.U.'Gy~R..Z...............?..-..T..i.w.I.X....7.W5.K.].....E'U\...S0...f..,...vWT.....o..<...Q{.}...>c-.\|..7l].....,.>.[v_..dKYWQ.].!.......7..=..k...Rg....3.s......<..nP..;..?&j..o.\|c.fXw..&;....5..N.wJ.f.....q.x;..=o.G.....wx..%?

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 170 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4120
Entropy (8bit):	7.913522163225112
Encrypted:	false
SSDEEP:	96:AyGNReeFhYLiax63QCqnAvdgYgEdr2NaGFVVfv:AcimLio639KydgYJqNaGFzH
MD5:	3018F61AF73CF84052A8DFF2139EE460
SHA1:	4F17C9480BA6D1D7A90A494177D465B52E347CF4
SHA-256:	272266ECA53C5B83B87C0EE651287ED6ACDC3E5E6D06DBEF3A86FC730D563284
SHA-512:	DF2FDCF7BE44B22066C62CA34DCADF353BBB6A25BF3FA593D4FBC6FE4124A7A0DCC4E8301B9E3C7E1F8FF234376BDECC13677A98E462EE28EB6FC47B54FBEFED
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/App-store.png?ext=.png
Preview:	.PNG........IHDR.......2......C@.....sRGB........8eXIfMM........i.......................................2...........IDATx..w.]....=..&D..1.b.F.Dc.........XP.A........5..5..XA.XbO..a.....3...'.......z..;{vggg.....=.o B....?.7.x#\|....#+.....?...Y......^..<..U;...T...&...........#......~:,X. <..3.......[K`.%0f....;....;..Na.}..#G....o....[.v.m7f..W.gt....;w./...._.=,\.0<..sC<v..j.4..5.\.>..#{...........G./..r@G......._...u...ZH..?6.lm. T.........#.3.:m...6.t..5.....]Q/....g....x .v.a.D.........w..h...P.;...9..r.)....o..f@.C...x..?......X.....d..7n\8..3.......>.`3..Z.[l.EXc.5...B.n.;vlR.E....v..o....."=l...O.]w.5.#F..3........H.q...N2'.UW]e.c.wn ..u..7..<......O.0!...x...J.~.../.#...G.y..2.{..>...>...O?............!.^...x.....SO=5.&u6.t....._.g.>dD:M..3.....s..?l:D......(........M7.dy.}..7..u6..+..D..6>.a .^./>(.._.v..:.4KC+.]..>...VF.h/>....o...e.....1Qq.z.o....I.....2e.r..\|..W.VT..h.t.A..2.W}..{~..^=.....QD..J#{..S{CC.*.(.s.xp).

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	569
Entropy (8bit):	4.896633254731508
Encrypted:	false
SSDEEP:	12:Uc11FP/sO6ZRoT6pHAciJkSAx/s6ZmOHc9n+5cMK00k14enEPCedG:3F8OYsKuJXYmOOk4TfenEPCD
MD5:	71D6A57D21337114032CA39B294F3591
SHA1:	ADA1D867672276F16EF4D3B8A46A519FBA8E3D4E
SHA-256:	36B2057EB5EEF261A2CBB8C149DCF3A11EDAA15CCD8E3D462EB34999F5FF8F2A
SHA-512:	BC5F5B55C2741FED993D5D25A36030028C388C8888EA2D1D1F24970AEC4F856CDA366940B99D54FF2D4D9AF16DF8DE39AB847A7BA2BE0B649DE1CE2C9E70A330
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/icon?family=Material+Icons
Preview:	/* fallback */.@font-face {. font-family: 'Material Icons';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2) format('woff2');.}...material-icons {. font-family: 'Material Icons';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}.

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2329)
Category:	dropped
Size (bytes):	269363
Entropy (8bit):	5.544546099790321
Encrypted:	false
SSDEEP:	3072:PEhmJwFf9jU7Mr5alc4Ta0zzTVV5AT1EoCpZFdjNdyzmI3KUHD:PEqwbYHpZFByqUPj
MD5:	A68870343CF229117E2E937DE0A4BCAB
SHA1:	D26503D7966E135023BAF2BD6492C7016BF5601B
SHA-256:	7E7E72EECF6A4FB2981627EB8D15B947D394398DB4E67C7CA7705749CDB2F832
SHA-512:	4FAABE097901F529305EEE188C1C83F189044C7DA4151AE821D699B6E39E5561A162DF799CBCAAF7F32B099D495AF254D439FFD5587BA97A5D74ADE793575DDF
Malicious:	false
Reputation:	low
Preview:	/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var gvjs_aa=" does not match type ",gvjs_ba=" must be of type '",gvjs_ca="#000000",gvjs_da="#808080",gvjs_ea="#ffffff",gvjs_fa="<",gvjs_ga=""",gvjs_ha=", ",gvjs_ia=', for column "',gvjs_ja=".format",gvjs_ka="0000000000000000",gvjs_a="</div>",gvjs_la="<br>",gvjs_ma="AnnotatedTimeLine",gvjs_na="AreaChart",gvjs_oa="AreaChart-stacked",gvjs_pa="August",gvjs_qa="BarChart",gvjs_ra="BubbleChart",gvjs_sa="CSSStyleDeclaration",gvjs_ta="Can't combine significant digits and minimum fraction digits",gvjs_ua=."CandlestickChart",gvjs_va="Clobbering detected",gvjs_wa="Column ",gvjs_xa="ColumnChart",gvjs_ya="ComboChart",gvjs_za="Container is not defined",gvjs_Aa="Custom response handler must be a function.",gvjs_b="DIV",gvjs_Ba="December",gvjs_Ca="Edge",gvjs_Da="Element",gvjs_Ea="February",gvjs_Fa="Friday",gvjs_Ga="Gauge",gvjs_Ha="GeoChart",gvjs_Ia="HH:mm",gvjs_Ja="HH:mm:ss",gvjs_Ka="HH:mm:ss.SSS",gvjs_La="Histo

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 500x333, components 3
Category:	downloaded
Size (bytes):	76073
Entropy (8bit):	7.89132309668626
Encrypted:	false
SSDEEP:	1536:NSjR75RjuESIa5J9TeTtU87V1sWmH6RTfK42zmGXp8LE115Y3Nm9THw:AHvSIwJcTtUqVQgTfKAGZ8o1ew0
MD5:	40C9126AAC0BCE122C9A30621F1667D2
SHA1:	74565359E6C6A317280C2FE8D93CB3DB7FE76301
SHA-256:	FEA97BA1618DBCB5AD46BD9C0E5E5D82B9FFFB76E95CC47E9F7DE90AB3E93A14
SHA-512:	4D8CAF0FF407BB12D647DA2D24D9AE6F84CBCDEF34C4AE37164396A63385E4921201CD5F2F1D179F6AA1F3A28C3C95743C30CB37CB08D964886A7B68C7BA5BE3
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/shutterstock_1070766050-2_1.jpg?ext=.jpg
Preview:	......JFIF.....,.,......Exif..MM.*.............................J...........R.(...........i.........Z.......,.......,.................`...........@..........Photoshop 3.0.8BIM..........i.7Young,Black,Couple,Using,Laptop,Sitting,On,The,Floor,At..n..Shutterstock..s..Shutterstock..t.SCopyright (c) 2018 Monkey Business Images/Shutterstock. No use without permission......1070766050...........http://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>..<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Image::ExifTool 12.38">...<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">....<rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/">.....<dc:description>......<rdf:Alt>.......<rdf:li xml:lang="x-default">Young black couple using laptop sitting on the floor at home</rdf:li>......</rdf:Alt>.....</dc:description>....</rdf:Description>....<rdf:Description rdf:about="" xmlns:pdf="http://ns.adobe.com/pdf/1.3/">.....<pdf:CreationDate>2018-04-17</p

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1468), with no line terminators
Category:	downloaded
Size (bytes):	1468
Entropy (8bit):	5.80419190228783
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccA6+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtFtD1INxsLqJ:VKEcyKo7LmvtUjPKtX7ftD1INOLrwUnG
MD5:	955BABEDD811BED4D91929D0B9D6809F
SHA1:	9AB1FA57B306E32CB6C3BF6B67906EE26C9C4EE3
SHA-256:	B09B28A4904F1FC0DD7C783823238ACCF90BA45FFD678D5AB2949575D50A439E
SHA-512:	68CF71C4C9BCB56A3162967C3E2C83FF96D909C4CE013453A7631CECCB42872DFFCAF352445F090B3A5D9E6D801504443DFECDFCED6C3E643FAFB56851E54C15
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?render=6Le4f5AqAAAAACMx6SI8VYM7etmAXowUb1ykbHGZ
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6Le4f5AqAAAAACMx6SI8VYM7etmAXowUb1ykbHGZ');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	3.8617687959731937
Encrypted:	false
SSDEEP:	3:USCVMrczyqLOx1Kn:UfmrczyqLOG
MD5:	BADB5B0398F42F356C79810B7F8CCBC1
SHA1:	51AEB51099ECE62682A5D151788EFA0DE765AF73
SHA-256:	5DC184D427DB63B82100E6274BE27814CB73B9048D4D1927906E0FB922E1F365
SHA-512:	DCA8847A7DF9083BB43DA357E07C292A6B32A19C561E26876407453898FDCD4B9B8DE2FD2FF11052EC3DD2AA226C6948EA37479F8FA646A479A00C10A98B02FB
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/overrides.css
Preview:	/* This is intentionally left blank. */

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1593)
Category:	downloaded
Size (bytes):	3102
Entropy (8bit):	5.210205780814714
Encrypted:	false
SSDEEP:	96:BQ4FFJJtKjRa0poqt8NwAckGrnaiwvRKQjFlKGuQ:BPjJtKjPp3faiwvI+FlHuQ
MD5:	9A8527B5B936F15832C726CB86C6A680
SHA1:	3632F36573DFC354B0AD206FD7DB67E0F2925E31
SHA-256:	E99978840FE57EDBC920673CC57913D97AA76EC02651FBC98653FE1B738F28D5
SHA-512:	147723E009D720C278E35B120704EDD7E4ECC3B8ED98740FFC469812B765F4052A80B1CFBFA8ABFADD1566D856697E28B0F54E0041FA8220FD9BA4A9DB644148
Malicious:	false
Reputation:	low
URL:	https://api.apptentive.com/v1/apps/6567c1c6a2ec72132b15f3af/websdk
Preview:	(function initApptentiveSDK() {. var manifest = {"application_id":"6567c1c6a2ec72132b15f3af","interactions":[{"id":"6567c1c6a2ec72132b15f3b6","display_type":null,"type":"MessageCenter","version":2,"api_version":8,"configuration":{"title":"Message Center","branding":"Powered by Apptentive","composer":{"title":"New Message","hint_text":"Please leave detailed feedback","send_button":"Send","send_start":"Sending...","send_ok":"Sent","send_fail":"Failed","close_text":"Close","close_confirm_body":"Are you sure you want to discard this message?","close_discard_button":"Discard","close_cancel_button":"Cancel"},"greeting":{"title":"Hello!","body":"We'd love to get feedback from you on our app. The more details you can provide, the better.","image_url":"https://app-icons.apptentive.com/6567c1c6a2ec72132b15f3af_1701364912.png"},"status":{"body":"We will respond to your message soon."},"automated_message":{},"error_messages":{"http_error_body":"It looks like we're having trouble sending your mess

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2329)
Category:	downloaded
Size (bytes):	269363
Entropy (8bit):	5.544546099790321
Encrypted:	false
SSDEEP:	3072:PEhmJwFf9jU7Mr5alc4Ta0zzTVV5AT1EoCpZFdjNdyzmI3KUHD:PEqwbYHpZFByqUPj
MD5:	A68870343CF229117E2E937DE0A4BCAB
SHA1:	D26503D7966E135023BAF2BD6492C7016BF5601B
SHA-256:	7E7E72EECF6A4FB2981627EB8D15B947D394398DB4E67C7CA7705749CDB2F832
SHA-512:	4FAABE097901F529305EEE188C1C83F189044C7DA4151AE821D699B6E39E5561A162DF799CBCAAF7F32B099D495AF254D439FFD5587BA97A5D74ADE793575DDF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/charts/51/js/jsapi_compiled_default_module.js
Preview:	/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var gvjs_aa=" does not match type ",gvjs_ba=" must be of type '",gvjs_ca="#000000",gvjs_da="#808080",gvjs_ea="#ffffff",gvjs_fa="<",gvjs_ga=""",gvjs_ha=", ",gvjs_ia=', for column "',gvjs_ja=".format",gvjs_ka="0000000000000000",gvjs_a="</div>",gvjs_la="<br>",gvjs_ma="AnnotatedTimeLine",gvjs_na="AreaChart",gvjs_oa="AreaChart-stacked",gvjs_pa="August",gvjs_qa="BarChart",gvjs_ra="BubbleChart",gvjs_sa="CSSStyleDeclaration",gvjs_ta="Can't combine significant digits and minimum fraction digits",gvjs_ua=."CandlestickChart",gvjs_va="Clobbering detected",gvjs_wa="Column ",gvjs_xa="ColumnChart",gvjs_ya="ComboChart",gvjs_za="Container is not defined",gvjs_Aa="Custom response handler must be a function.",gvjs_b="DIV",gvjs_Ba="December",gvjs_Ca="Edge",gvjs_Da="Element",gvjs_Ea="February",gvjs_Fa="Friday",gvjs_Ga="Gauge",gvjs_Ha="GeoChart",gvjs_Ia="HH:mm",gvjs_Ja="HH:mm:ss",gvjs_Ka="HH:mm:ss.SSS",gvjs_La="Histo

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21084)
Category:	downloaded
Size (bytes):	21257
Entropy (8bit):	5.218656398361519
Encrypted:	false
SSDEEP:	384:knMQG5rwVO7dV9nNbRGCB9D45Hkn5vj2xpOxvIAgD75zBi5vISg3gzopL9TidOg3:P5sg7X/jD45eSxpOxvKD73i5vTzwL9Ti
MD5:	84415B7368FD6FC764CBE86039CE0626
SHA1:	62F238E73348C77EB9E865426A7D1B7DE23CBB2D
SHA-256:	C776195AD46333C6C9A9FE3C74502FFEA9A02FAF122388EA3567922CC65A3060
SHA-512:	8423F7A626064813EA9D7CA974AC4A3D23B304717BE6853CC10F356BA3A21971C531E2ACF7FF0285B81897BA54BF02265C96F4DCDE1BB35A350F399BA2479E17
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.16.0/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2019. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=e.ownerDocument.defaultView,n=o.getComputedStyle(e,null);return t?n[t]:n}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll\|overlay)/.test(r+s+p)?e:n(o(e))}function i(e){return e&&e.referenceNode?e.referenceNode:e}function r(e){return 11===e?re:10===e?pe:re\|\|pe}function p(e){if(!e)return document.documentElement;for(var o=r(10)?document.body:

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48332), with no line terminators
Category:	dropped
Size (bytes):	48332
Entropy (8bit):	5.4601960300160695
Encrypted:	false
SSDEEP:	768:JW6ntrxcd6l2vO8JYez3f7spyRTz5wQA2dU7+77YqPS+2BKAa0wkjaHUBGzUN/OP:rGJYeKyR6M/EnVGIbreugzHZaU
MD5:	8E1F404FF864B1B75E54DA6BC6F39AFF
SHA1:	CB795DAC9A30FCA721EA2AA82B091A66A84299EF
SHA-256:	A1CC631A2467E80DEF7E280B96EE010208DC7D49AD37313D094EBAE67425C2F0
SHA-512:	A0E7042BEB978D96D5DA66CA052432AF32B4CF1B9F67C01B9D07C7DD57988325CDC442369345EA8FB202715D9510577B46B8E277E2B30DFA0C105C006880291C
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[77],{15077:(we,b,o)=>{o.r(b),o.d(b,{SecureMessageModule:()=>je});var m=o(56610),j=o(57936),w=o(37440),F=o(95565),c=o(37222),S=o(61480),h=o(50187),_=o(89283),p=o(8301),T=o(43239),g=o(50213);class y{static notEmpty(a){return"string"==typeof a.value&&0===a.value.trim().length?{notEmpty:"Text must not be empty"}:null}}var e=o(23279),v=o(98278),f=o(72221),R=o(26182),E=o(24587),x=o(29344),k=o(66865),M=o(84993),I=o(58445),C=o(47309);function G(n,a){if(1&n&&e.nrm(0,"i",43),2&n){const t=e.XpG(3);e.BMQ("aria-label","Default "+t.replaceStandardTerm("Loan"))}}function B(n,a){if(1&n&&(e.j41(0,"mat-option",41),e.EFF(1),e.DNE(2,G,1,1,"i",42),e.k0s()),2&n){const t=a.$implicit,r=e.XpG(2);e.Y8G("value",t),e.R7$(),e.E5c(" ",r.lnAstricks,"",r.getLast4(null==t?null:t.LoanIdentifier),"\xa0\xa0\xa0(",t.PropertyAddress.AddressLineText,") "),e.R7$(),e.Y8G("ngIf","sso"!==(null==r.configInfo?null:r.configInfo.AuthMode)&&t.Borro

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63775), with no line terminators
Category:	downloaded
Size (bytes):	63775
Entropy (8bit):	5.440511697359558
Encrypted:	false
SSDEEP:	1536:ljLBpgmbxCS6Z3hfTa4PTx439gk54jXqIcQE5G3RP4zONhkgF:5LBpgyCS6Z3hfTa4PTS39x4jXqIcQE52
MD5:	4FDC72783A18CD0F7C4B9826A070CCCD
SHA1:	9A30915ED7FF2B7A38E2223C3A7F5DC736F5D54A
SHA-256:	ACBF9B48D51CA23CB614B5C4DB5BEC384E0BA8723C3ADEC44A7F042697943F6B
SHA-512:	C4B76C0E10AAC88B10DE0B71E0750952F2BD4990A0AEC30453FC09B9EB6CE96B9649E7040CF614892ED6380AAE7106E825849A0CC759FB70606439C10060CC40
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/204.60b4a89c5008cd37.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[204],{58376:(j,h,o)=>{o.d(h,{Y:()=>k});var c=o(50187),r=o(23279),v=o(56610),I=o(63854);function d(t,y){if(1&t&&(r.j41(0,"span",8),r.EFF(1),r.nI1(2,"currency"),r.k0s()),2&t){const m=r.XpG(2);r.R7$(),r.JRh(r.ii3(2,1,m.propertyInfo.AreaSalesInfo.AverageAreaSalesValue,"USD","symbol","1.0-0"))}}function b(t,y){1&t&&(r.j41(0,"span",8),r.EFF(1,"N/A "),r.k0s())}function u(t,y){if(1&t&&(r.j41(0,"div"),r.DNE(1,d,3,6,"span",6)(2,b,2,0,"span",6),r.j41(3,"span",7),r.EFF(4,"Average*"),r.k0s(),r.j41(5,"span",8)(6,"h3"),r.EFF(7,"Availability of information varies by location"),r.k0s()()()),2&t){const m=r.XpG();r.R7$(),r.Y8G("ngIf","N/A"!==(null==m.propertyInfo.AreaSalesInfo?null:m.propertyInfo.AreaSalesInfo.AverageAreaSalesValue)),r.R7$(),r.Y8G("ngIf","N/A"===(null==m.propertyInfo.AreaSalesInfo?null:m.propertyInfo.AreaSalesInfo.AverageAreaSalesValue))}}let k=(()=>{class t extends c.Z{constructor(m){super(m),this.inje

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 173612, version 330.32636
Category:	downloaded
Size (bytes):	173612
Entropy (8bit):	7.998625803514838
Encrypted:	true
SSDEEP:	3072:2icFpGeNgVCKevh/Mi7lSmT5mMhVzIGN9+UeE1H9bFuXEJLLc0Ki/3DoD4yPhQ:2bFEeCJevhF7lNT5mMh2wUUeAiXEJHcQ
MD5:	9CCB65771EAC6D1FF178DC577FF826CC
SHA1:	633DEBC754ADB1130F03E1BC89F015E32C1E39CD
SHA-256:	F6D6E49E8971C9B702E31BB9AD580EB9D374A13AF6E713E3673282C9E52AC7BC
SHA-512:	600A7BF39B4B8641F399C72E20E86CAD4EAC6BD937C4CB0F4F52A2C997A447F488107BBCFDAA1C4681D86914FCC6586B3E219ED40E606C26910E603C3CC51521
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/fa-light-300.3cf345e1805fdce7.woff2
Preview:	wOF2.......,.............J.\|....................?FFTM....`..J.....p....6.$........ .......[.....fH.P;a..5..$...,.u.my1.Z....M..w.......6......_..Gb..o...n...Z.R.)a..d.xFB.MF.RM-hy..n.h.+6m5[#.@.c>1.4.+..,x...._...}A'......F...mP..=.......9..5..7:..M...x.a_.~.Zg^D..8x{bUT.\....{.?/W.._.G..Du2.RR..J..... dI9+....;{.....!G....}".S....d........U....g{9...1z..xw...{..mz.3.....Xx.._,[T....<..WQ...^3....o.....[C..;.8...T. ..itk..].=......E...<.}..%l..z./a.]..H...9.F.8@...._;..,./f+b......tR.$Z.......nk..].@.!Vp..+V...0.!..\.>...._..y...N<.)..,).l.........t.~......A..hf...X..N.t..m.n...V.`..A.h..V.8Q}@.~p@...`....T...m....!x..A.DQ.%..B....n..:.4.u...=.....n.H.@.......C..\..@3..9.....Y..2;..H....J.i...L.gS........O....m[.2..u.R.Z...k"...K....&.....F8.Sk<.a..vz.db....3..JI.g.f.i..../....[...V.F...kX..c..F.TJ..0......V../*..o.....c\|.a.......NL/.f....X.-..+bT.rcA..(...!J...........lLP.@..3....Q.....$.4}qL.....&.S...m..aj.C.RbHi5C...O......\...rI.a.1..!..$.

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	448
Entropy (8bit):	5.245916014606842
Encrypted:	false
SSDEEP:	12:t41SL8Dz9+4vg4Znhhc1bvWCLAykoUCk2U8DDi:t41SwH7vgUnoUCkSQD
MD5:	480DD92C98A992B79B36C7C53A6A12FB
SHA1:	46D7FE3A5843163D63CC6651447F1F50138FB4FF
SHA-256:	8900B092DF73F93A6F8D581888663DA0FBAA3C52FC14C866BD04A0502538A6AF
SHA-512:	60B373DBC60356458234005291D47F20A592D99FAB4E8B28AB3CD25CDAA3DDDBDDDB19D1DBA5087B9230B4E6CA369374D0F6E6406093BA6FFB5833F3A628CE93
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 7.89 14.64"><defs><style>.cls-1{fill:#999;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><g id="next"><g id="Group_1146" data-name="Group 1146"><path id="Path_1135" data-name="Path 1135" class="cls-1" d="M7.72,6.92,1,.17a.55.55,0,0,0-.8,0,.55.55,0,0,0,0,.8L6.53,7.32.17,13.68a.57.57,0,0,0,.8.8L7.72,7.72A.57.57,0,0,0,7.72,6.92Z"/></g></g></g></g></svg>

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1877)
Category:	dropped
Size (bytes):	49299
Entropy (8bit):	5.3958443708886
Encrypted:	false
SSDEEP:	1536:EektGkQbgt/L3fG3K2cRGJKe5zGc/VTxzBn/V2p:XlH0t/LqGmTQp
MD5:	0D4116DADA2CAE1DB8727035A89248C1
SHA1:	CFE1A8697D0684F4872310B76523F949A3091D0A
SHA-256:	15F9C7DCB6D3F3FD50AC55A55F8A4168652122756D7763C13C333C9D4B8A36F0
SHA-512:	B5F7A5CE03130FE947B26647BA6603836F44F6491B7FD405BE3F31238920AFB393B4180DC1FCB7E2E5CE220F20F63D14D6568F16D27C519AFD57B5E8E6788042
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var p=ba(this);function q(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&l(c,a,{configurable:!0,writable:!0,value:b})}}.q("Symbol",function(a){function b(g){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(g\|\|"")+"_"+e++,g)}functio

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8314)
Category:	dropped
Size (bytes):	257932
Entropy (8bit):	5.548351319958186
Encrypted:	false
SSDEEP:	3072:vuaFitgcnsmIjD+D0qzmYasxzuZ1IwPcRCrha1hka0Mf3/8OtnmhYs/M1:v3YnsmQrZ1HcRCrda0Mf3/8Od
MD5:	305385849C88EC39FC695A4ECF64FCE8
SHA1:	A562E0E3FDD07D012B5CCC4FE77206683E61AC73
SHA-256:	DF289798A0291D03014897607A0F8F8CEDDC67F6232345D96C8001F952649F50
SHA-512:	EF7C1CBF09F79B349089F6EBF79053689BC9C59A18B95B17F93EF0DF412149CD53BFB6EB113DD8F16378D3022A8C9368F01CD703DF690ADA3A6503682C93BEA3
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"20",. . "macros":[{"function":"__e"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_useHashAutoLink":false,"vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":false,"vtp_trackingId":"UA-26545262-4","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableGA4Schema":true},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2000 x 1174, 8-bit/color RGB, interlaced
Category:	dropped
Size (bytes):	915125
Entropy (8bit):	7.998133183564552
Encrypted:	true
SSDEEP:	12288:x9H0WTwxE++TR3MYmlpOhw3lfRyRx4oMqheuZPnHdyBaj2uSp7Y6srzy/P1t7g0m:jUW8xy8pOh6LKeuVnpUsJqYw/PjTL4
MD5:	F02F32674830DC064C43BAE8F45C34B1
SHA1:	9364D76544CEC76F5D2530121800FFE6F32D9E6B
SHA-256:	EBA9BBB57DF023618E4C31DBCB13EC5953A4D4CDE3D041DF7D886F8045CB5232
SHA-512:	2C72BEF64D5DB47E5B3DA2DD83F6871F6C48D821D6F9945C0A634B0E2838266376A82E7B89A0E122C3D5F1BD4FE6CDAC775747C07928D2A55DDB42FBA5CB9E8F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................T....gAMA......a....KiCCPsRGB IEC61966-2.1..H..SgTS..=...BK...KoR.. RB..Ti........@...."....q....."..A...y.(..(6T....}..7o....9g..}>.F`.D....dJ....<6..'w..T ...@.-.................m@..n....8..P.....$......B....2r.2..2...t...%..[.....j..;e.O..v.$....(S*.@..@&.......X......`.(..s....`....`....).d....`...S......GE...3.(...x.W\!.S...d..T.n!...\].x.87C.P........ee......3...FvD.....9;.:;.8.:\|...........?........E..............e..../.....B.._......T.B.fg...k+..m.._......_.....................2..r<[&..q.?......wL..'..b.P.GK..i....$.I...H.........k.`.~..B[P..... ..%....w......1...w..0....h....................4P.6h.>....#..;x...P..8X.BH.L.C.,.UP.%...B..Z..F8.-p.........<.^...0.o`.A.2.DX.6b..".#.Ef!~H0...!.H."E..Rd5R..#U.^....9..E.!=.=...F~C>...@..j..\...B...h....G...h%Z..B.......>G.0....3.l0...B.x,..c.b......6.....b#.{..."....;!.0. $,",'..........B.a...$....nD>1..B.%..+.u.c...[.......!..\H..8R.i......D:C.!....d.6..A.%...r.y;...

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23482)
Category:	dropped
Size (bytes):	24578
Entropy (8bit):	5.144369979420571
Encrypted:	false
SSDEEP:	192:v2rVfXHVokwkArgaoHGVPBfryqPtcdovibtnpxK+B2Igg1+Wp1gunVFu/YlfOEsc:eZfFNF8qG3jyqlWnpxKe1luisU0K
MD5:	0BCE441D85809495747998B2998C6244
SHA1:	DA344D0C958A9B108CE5E09A8E076C78D921ACA7
SHA-256:	865E6DA67CB6F2C498D5EADAB433B0015D3FCF6329E8FA9111B9862B7ED208F9
SHA-512:	495B797120F53E0ABA848FB8C3B90AA2EE9B3FFD340960EE2E52DEBE83D4B54F86740CA884EBD2701B48BD69EDEEDFC9EF11D6144451777E917E22044A70150D
Malicious:	false
Reputation:	low
Preview:	/! =======================================================. VERSION 4.5.2 .========================================================= /./! =========================================================. bootstrap-slider.js. . Maintainers:. ..Kyle Kemp. ...- Twitter: @seiyria. ...- Github: seiyria. ..Rohit Kalkur. ...- Twitter: @Rovolutionary. ...- Github: rovolution. . =========================================================. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. *

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6976), with no line terminators
Category:	dropped
Size (bytes):	6976
Entropy (8bit):	5.34881209869658
Encrypted:	false
SSDEEP:	192:gVP87XJ/SwfM68wB4ZVfj/GHSqoaNMgLH:eP89/znB4ZAnNh
MD5:	55686AC2B404D2A18F57BC5DB2542B4C
SHA1:	0FD25A18333F7032AE1BDEAD5B3F53B2BF4E15F2
SHA-256:	3FE3C02476DA7A95D8B37E4F655F42FAC79DB1498EA5C996B27651BF7E6107EB
SHA-512:	122E7168065C77708547861E01654F6E9C4B5829FEE3E66B8A3A33A00478DCB93C18D06E5D9EEDF1F9EDD4598045876DEC9AA3519B457430A3486293D20F3A59
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[997],{38997:(d,c,r)=>{r.d(c,{P:()=>y});var _=r(50187),t=r(50213),e=r(23279),h=r(56610);function u(s,o){if(1&s&&e.nrm(0,"h2",7),2&s){const n=e.XpG();e.Y8G("innerHTML",n.title,e.npT)}}function f(s,o){if(1&s&&e.nrm(0,"h2",8),2&s){const n=e.XpG();e.Y8G("innerHtml",n.title_1,e.npT)}}function v(s,o){if(1&s&&e.nrm(0,"div",7),2&s){const n=e.XpG();e.Y8G("innerHTML",n.section,e.npT)}}function l(s,o){if(1&s&&(e.j41(0,"div"),e.nrm(1,"p",7)(2,"p",7),e.k0s()),2&s){const n=e.XpG();e.R7$(),e.Y8G("innerHTML",n.content_1,e.npT),e.R7$(),e.Y8G("innerHTML",n.content_2,e.npT)}}function N(s,o){if(1&s){const n=e.RV6();e.j41(0,"div",9)(1,"a",10),e.bIt("click",function(){e.eBV(n);const a=e.XpG();return e.Njj(a.letsDoThisNews())}),e.nrm(2,"p",7),e.k0s()()}if(2&s){const n=e.XpG();e.R7$(2),e.Y8G("innerHTML",n.btnTitle,e.npT)}}let y=(()=>{class s extends _.Z{constructor(n){super(n),this.injector=n,this.isDshbrdnws4=!1}ngOnInit(){i

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (901), with CRLF line terminators
Category:	downloaded
Size (bytes):	81800
Entropy (8bit):	3.642191124328871
Encrypted:	false
SSDEEP:	768:rNCZV9ghaYesYYiYgII2nlZj6ep7nBXV6:ra1sYTYgII2nlZjpRnRV6
MD5:	61905607FEEB5230A3BE1608021FEADC
SHA1:	DB95E326652544E87EE1E0DE83C55931D3567A23
SHA-256:	1DEA9738BDF8FDDD556DFB9CF9FA1566C1B59CE4CD6A08ADB971D7DC412D28E6
SHA-512:	E8B9D7B3823342DC3B0C16C1529AC3090C22F4402BF2A80594AED0DB69C097A5B5F501C15502DB7E81BA32A9997753A4421D640D7054527B9C807570EDD159A1
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/
Preview:	....<!DOCTYPE html>..<html lang="en">....<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <meta http-equiv="X-UA-Compatible" content="IE=10,IE=11">.. <meta name="format-detection" content="telephone=no">.. <title>Home</title>.. <meta name="description" content="">.. <meta name="keywords" content="">.. <link rel="icon" href="/Content/images/favicon.ico">.. <link href="/Content/styles/MQ-styles.css" rel="stylesheet">.. <link href="/Content/styles/MortgageKeeper.css" rel="stylesheet">.. <link href="/Content/styles/owlcarousel-theme.css" rel="stylesheet">.. <link href="/Content/styles/owlcarousel.css" rel="stylesheet">.. <link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.7.0/css/all.css" integrity="sha384-lZN37f5QGtY3VHgisS14W3ExzMWZxybE1SJSEsQp9S+oqd12jhcu+A56Ebc1zFSJ" crossorigin="anonymous">.. CDN -->.. .. <link href="/Content/styles/mq.css" rel="stylesheet">.

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
Preview:	{}.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65326)
Category:	downloaded
Size (bytes):	147770
Entropy (8bit):	5.100652697026727
Encrypted:	false
SSDEEP:	1536:Ci9xIewbIAZxsk6h56Ru1/raaE/4GaT3pXoMUd0QF63muCfQNk6hNO6W:f9vaST3VoMUd0863muCfQNk6hNO6W
MD5:	47F52020BF150FEBED27365D12A1EAC2
SHA1:	B0EFE8FC19BBE20D8E68A43DB2A6AE99923A3E1F
SHA-256:	8AAB28D08F597B7BF9E0613F28A3C0D827A3A71C27EEBA870F3C2FCEB743CD78
SHA-512:	7BA0DC87EB5EB33C5702205B06E582C2CF9E2949C0EC0AAF38300C66B155374A38D46A7AA2269B64FCACF0B66178424886056FA88F6207FDAEFBBA7CBDC1EFD1
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/Content/styles/mq.css
Preview:	/!. Bootstrap v4.6.2 (https://getbootstrap.com/). * Copyright 2011-2022 The Bootstrap Authors. * Copyright 2011-2022 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root{--blue: #007bff;--indigo: #6610f2;--purple: #6f42c1;--pink: #e83e8c;--red: #dc3545;--orange: #fd7e14;--yellow: #ffc107;--green: #28a745;--teal: #20c997;--cyan: #17a2b8;--white: #fff;--gray: #6c757d;--gray-dark: #343a40;--primary: #005BDF;--secondary: #6c757d;--success: #28a745;--info: #17a2b8;--warning: #ffc107;--danger: #dc3545;--light: #f8f9fa;--dark: #343a40;--breakpoint-xs: 0;--breakpoint-sm: 576px;--breakpoint-md: 768px;--breakpoint-lg: 992px;--breakpoint-xl: 1200px;--font-family-sans-serif: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";--font-family-monospace: SFMono-Regular, Menlo, Monaco, Consolas, "Liberation

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39586), with no line terminators
Category:	downloaded
Size (bytes):	39586
Entropy (8bit):	5.394685749294454
Encrypted:	false
SSDEEP:	768:h3eKEVlUYFcweYTb6jvd0McPXMNSCjUOsyOiiFdmOhXb:6ajjJKdhXb
MD5:	B401774981507F15418911485EB633EA
SHA1:	87FF23C19FF9518E51D35CE68F14C16C3C634B8E
SHA-256:	BC8849FED5523E9702920AE5B2514839D3E9C5C54A1896F43BF123ABF6609CB9
SHA-512:	4F38695B0D4F35ACD84BE6A49C00329BB4E467DF4133E78599CE493374DDE4825D5E85C7383925254BF54EA3672D28BA0D68274B12BE5A35A6FC5E6074C47C1B
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/10.bf367f9955f02ef0.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[10],{21322:(h,y,u)=>{u.d(y,{l:()=>Ut});var m=u(50187),t=u(23279),l=u(56610),p=u(10524),d=u(50213),_=u(22098),g=u(76098),s=u(66566);const F=e=>({$implicit:e,isCurrentDraft:!0}),r=e=>({$implicit:e,$isCurrentDraft:!1}),f=e=>({$implicit:e});function c(e,i){1&e&&(t.j41(0,"div")(1,"h2")(2,"span",17),t.EFF(3,"Your autopay details"),t.k0s()()())}function v(e,i){1&e&&(t.j41(0,"div")(1,"h2"),t.EFF(2," Your Autopay details "),t.k0s()())}function x(e,i){1&e&&(t.j41(0,"span",20),t.EFF(1,"On"),t.k0s())}function b(e,i){1&e&&(t.j41(0,"span",21),t.EFF(1,"Off"),t.k0s())}function A(e,i){if(1&e&&(t.j41(0,"span"),t.DNE(1,x,2,0,"span",18)(2,b,2,0,"span",19),t.k0s()),2&e){const n=t.XpG();t.R7$(),t.Y8G("ngIf",null==n.autopay?null:n.autopay.StatusIndicators.EnrolledIndicator),t.R7$(),t.Y8G("ngIf",!(null!=n.autopay&&n.autopay.StatusIndicators.EnrolledIndicator))}}function C(e,i){if(1&e&&t.nrm(0,"i",22),2&e){const n=t.XpG();t.F

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49701), with no line terminators
Category:	dropped
Size (bytes):	49701
Entropy (8bit):	5.4636202136439955
Encrypted:	false
SSDEEP:	768:w46/Mggg+0fmXjsfYmZNR7syfyR1VzCP1uCoychBge819PS+OBKsa0wkImH7BGz4:cpfYmlbyRAAnCByzreuy1DZ9e
MD5:	44A7BDBECBEBC40409F4290BE1CAF4E5
SHA1:	B37283093F15388D88B95FBE3F19D9D32F347D87
SHA-256:	22B75B469796F3E8F48E67C99C4349D147EDAD3AEE5118F80CBD747D6F3BDD1F
SHA-512:	CAFDA8E02CAEBFB122C8940E2024FBB26AB612302832655DBF02200774DEBB843ED5E2A65B21009EBE9491C66F5DE923C90E50A49DE7B753E81DBEBC59D372A3
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[781],{59781:(je,b,o)=>{o.r(b),o.d(b,{SecureMessageModuleV2:()=>we});var m=o(56610),w=o(57936),j=o(37440),F=o(95565),c=o(37222),S=o(61480),_=o(50187),u=o(50327),p=o(8301),T=o(43239),d=o(50213);class v{static notEmpty(a){return"string"==typeof a.value&&0===a.value.trim().length?{notEmpty:"Text must not be empty"}:null}}var e=o(23279),y=o(98278),f=o(72221),G=o(26182),E=o(24587),x=o(29344),k=o(66865),M=o(84993),R=o(58445),C=o(47309);function I(s,a){if(1&s&&e.nrm(0,"i",43),2&s){const t=e.XpG(3);e.BMQ("aria-label","Default "+t.replaceStandardTerm("Loan"))}}function V(s,a){if(1&s&&(e.j41(0,"mat-option",41),e.EFF(1),e.DNE(2,I,1,1,"i",42),e.k0s()),2&s){const t=a.$implicit,r=e.XpG(2);e.Y8G("value",t),e.R7$(),e.E5c(" ",r.lnAstricks,"",r.getLast4(null==t?null:t.LoanIdentifier),"\xa0\xa0\xa0(",t.PropertyAddress.AddressLineText,") "),e.R7$(),e.Y8G("ngIf","sso"!==(null==r.configInfo?null:r.configInfo.AuthMode)&&t.Bo

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36512), with no line terminators
Category:	dropped
Size (bytes):	36512
Entropy (8bit):	5.414012605709564
Encrypted:	false
SSDEEP:	768:KRhWyGkXsHp1nTYfzze/qe09nj9w1nf/e8S7ea9pbcny3xGqvsvgM/9kyRC697QX:x02OlRTQe8taTd7
MD5:	3FDF57DC7DAA713623A95C37D76202C2
SHA1:	C5F416EEE9F9660513E828A1A5439D1A0065A520
SHA-256:	116F6AD8F21290381C2C58DC79B96F87F7FCC0FC7F330DD3E712556B10ECAC4B
SHA-512:	98F730F8E236B8A2FE735EC3A1C6A6D0EDE529D29F824E2CE850A8D71807C84B169AD48C52D24ECA271DF6A7BF7ADD2006ED7A2984B47CB9059C1D7240E4B6FF
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[461],{19462:()=>{!function(){"use strict";function le(de){return(le="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(se){return typeof se}:function(se){return se&&"function"==typeof Symbol&&se.constructor===Symbol&&se!==Symbol.prototype?"symbol":typeof se})(de)}(function(){(function(){return"navigator"in this&&"sendBeacon"in this.navigator}).call(this)\|\|("navigator"in this\|\|(this.navigator={}),this.navigator.sendBeacon=function(de,se){var Ce=this.event&&this.event.type,He="unload"===Ce\|\|"beforeunload"===Ce,Te="XMLHttpRequest"in this?new XMLHttpRequest:new ActiveXObject("Microsoft.XMLHTTP");Te.open("POST",de,!He),Te.withCredentials=!0,Te.setRequestHeader("Accept","/"),function(de){return"string"==typeof de}(se)?(Te.setRequestHeader("Content-Type","text/plain;charset=UTF-8"),Te.responseType="text/plain"):function(de){return de instanceof Blob}(se)&&se.type&&Te.setRequestHeader("Content-Type",se

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2782), with no line terminators
Category:	downloaded
Size (bytes):	2782
Entropy (8bit):	5.136143364616988
Encrypted:	false
SSDEEP:	48:KgtF+a55pxqxUVS4xkNxNxrcx2x2jxGluplx0o3bxuepPZx5WBQxf4keHe35zWZt:KgH+ybxqxUVS4xkNxNxrcx2xkxGlklxU
MD5:	C60C7E6CC4762B7664A7BA9CBBCC0BC0
SHA1:	98DAC46AF03E98CAF2806D88499A5B941003EAD1
SHA-256:	02D5BE8A0EEFA213435800576E608F5FC2083091C2D657A80CD067C743BA9DD6
SHA-512:	0154D0FE33DE0E568C282776C465863CD9C1E55043B482CA6FD7183D1E925ABB80298CBA7C7FF417D453D60D878A9EF0D2B22BE93CCA8EF701E37D87497D0791
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/bundles/jquery-unobtrusive-ajax?v=yWiSJlfkRWGOtjh38MIfwsmv_b3zyMucdfkOPGDhEoA1
Preview:	!function(n){function i(n,t){for(var i=window,r=(n\|\|"").split(".");i&&r.length;)i=i[r.shift()];return"function"==typeof i?i:(t.push(n),Function.constructor.apply(null,t))}function u(n){return"GET"===n\|\|"POST"===n}function e(n,t){u(t)\|\|n.setRequestHeader("X-HTTP-Method-Override",t)}function o(t,i,r){var u;r.indexOf("application/x-javascript")===-1&&(u=(t.getAttribute("data-ajax-mode")\|\|"").toUpperCase(),n(t.getAttribute("data-ajax-update")).each(function(t,r){switch(u){case"BEFORE":n(r).prepend(i);break;case"AFTER":n(r).append(i);break;case"REPLACE-WITH":n(r).replaceWith(i);break;default:n(r).html(i)}}))}function f(t,r){var s,h,f,c;s=t.getAttribute("data-ajax-confirm");s&&!window.confirm(s)\|\|(h=n(t.getAttribute("data-ajax-loading")),c=parseInt(t.getAttribute("data-ajax-loading-duration"),10)\|\|0,n.extend(r,{type:t.getAttribute("data-ajax-method")\|\|void 0,url:t.getAttribute("data-ajax-url")\|\|void 0,cache:"true"===(t.getAttribute("data-ajax-cache")\|\|"").toLowerCase(),beforeSend:function(n)

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (931)
Category:	dropped
Size (bytes):	12219
Entropy (8bit):	5.511663265517366
Encrypted:	false
SSDEEP:	192:y4PognFuYt3Ytx+G1uGVj1BV5VNGt35D/st2sfatu74P+BY/Zp3Ul1xao631KwT4:ySogFu45kuEpBHfGt3V/xuatu74PIY/+
MD5:	AF5DE7362613A7327F46F584372E4191
SHA1:	CE0F0B62233A9EEB521726B229988B31C0F57804
SHA-256:	9F661CE1B64C2592E384BCC333522A73A89481C6A898CA6C244FC8EEFE8EE6C1
SHA-512:	BC37499183BE9252EE8727661A5A017A8821A8DCF5710B99E3B9280618FBB25EF91185BC47D4DD70072859FC14CBB3E6D917B2EAF70FFD9014055E0ED6C20366
Malicious:	false
Reputation:	low
Preview:	(function() {/. Copyright 2022 Glance Networks, Inc../.function m(a,...c){!window.console\|\|!window.console[a]\|\|window.GLANCE_COBROWSE&&window.GLANCE_COBROWSE.disableLogging\|\|(c=c.map(b=>{if("object"===typeof b)try{b=JSON.stringify(b)}catch(f){console.error(f),b="unable to convert object to string"}return"string"===typeof b?b.replace(/[\r\n]/g," ").replace("<","<"):b}),window.console[a](...c))}function p(...a){m("log",...a)}function x(...a){m("error",...a)}function y(...a){p("DEBUG:",...a)};/. Copyright (c) 2022 Glance Networks, Inc../.window.GLANCE=window.GLANCE\|\|{};window.GLANCE.VERSION="6.36.0.1543033431";window.GLANCE.PATCH="";window.GLANCE.Lib=window.GLANCE.Lib\|\|{};.(function(){var a=navigator.userAgent.toLowerCase(),c=navigator.platform.toLowerCase(),b=a.match(/(edge\|edg)[\s\/:]([\w\d\.]+)?/)\|\|a.match(/(opera\|ie\|firefox\|chrome\|crios\|version)[\s\/:]([\w\d\.]+)?.*?(safari\|version[\s\/:]([\w\d\.]+)\|$)/)\|\|a.match(/(rv):([\w\d\.]+)/)\|\|[null,"unknown",0];"edg"===b[1]&&(b[1]="edge

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23507), with no line terminators
Category:	dropped
Size (bytes):	23507
Entropy (8bit):	5.470056177596567
Encrypted:	false
SSDEEP:	384:T+l8kYviQidKeGqDrERb5oVkWn3yzYXU73a0dPdeaSOhhKhuJOTCt0knB6+BkYCr:TUQiUeGqDr6byVkWn3ycE73a0hdeaSOM
MD5:	BD93FB329CB8F8C259FD25CEF4711F6B
SHA1:	4EBC7E7AF4454CBE88A5723BB8557A63658E33C0
SHA-256:	3E0080DEEB48333B56B6E8EBF50F7581E5243921E7ED110BB564AEEB45DD9195
SHA-512:	E617DB2C616F9C5B17275974EB5B9BAEFA27B67C7EB5E9A65901603B658E6308979B79F8D79FCE4B7F05DBBC0719414C61A120B7DFDDA00960F49126F43ED029
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[67],{60662:(F,_,r)=>{r.d(_,{H:()=>rt});var v=r(50187),y=r(58082),d=r(50213),b=r(54153),t=r(23279),f=r(76098),V=r(86482);let u=(()=>{class a{constructor(e,o,i){this.sanitizer=e,this.propertyService=o,this.dialogRef=i,this.qrCodeUrl="#"}ngOnInit(){const e=this.propertyService.avmReportResponse.value?.QRCodeContent;this.qrCodeUrl=decodeURIComponent(this.propertyService.avmReportResponse.value?.QRCodeURL?.replace("https%3A%2F%2F","")),this.imagePath=this.sanitizer.bypassSecurityTrustResourceUrl(e)}close(){this.dialogRef.close()}static#t=this.\u0275fac=function(o){return new(o\|\|a)(t.rXU(f.up),t.rXU(b.X),t.rXU(V.CP))};static#e=this.\u0275cmp=t.VBU({type:a,selectors:[["bki-dashboard-propertyinfo-avm"]],decls:30,vars:3,consts:[[1,"card__content","avm-qrcode-panel"],[1,"container-fluid","secondary-regular-background"],[1,"row","pt-3"],[1,"col","text-center"],[1,"fa-stack","fa-3x"],[1,"far","fa-camera","fa-stac

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9576
Entropy (8bit):	5.3997296571084075
Encrypted:	false
SSDEEP:	192:rN5bN8NjNY3YNONCFNnNO6NfNANk3FNNN4YNYSNXpNgNjNS3mNuN4fNANUXNVNem:R5hKZ22EANOA1uCrDfxXvOZAMkwuUdbT
MD5:	DF845ACD692B2FFE5F46DB41E193E577
SHA1:	EFE7149445972A9FF473B89CFB3C873D2F7BB3C9
SHA-256:	8E878B38C0C357B63EB23D45C6182FD4F1AC0E92A5601A7E27F04EDCFAD5B4AF
SHA-512:	6D487DD5B7ACA59F0E185856C842708958A25B6832C5BB3C8F29AB4FA7FC2C2C6ADF8931DCB6EFB0E4F1E738188D8F9B2765147F371035AD156B35664C832758
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.g

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (541)
Category:	downloaded
Size (bytes):	519614
Entropy (8bit):	5.5522007052415585
Encrypted:	false
SSDEEP:	6144:tA2hXz7B36Mcx/BBn/N1duVsJRdD+G6V9Z5YEpdmq2xRmyJ1JCe:fjF3RO/NVJRdKGovpdaRmy9Ce
MD5:	CACCA7BCA63F8956B13B911C990713B7
SHA1:	524B727B15D66F07BB9FFEBD6F2DDF3464C39BFB
SHA-256:	0867EE1DF230C80DC1601A8C56C499FABE444AB3EC173CE8B901444560C8816D
SHA-512:	D84AE88650862BE2493CB30AB146953B095491B7C6707A85C3243A94732D879A81F69AF967C1A37B8667CF8674FA1A2AD686D56DE1DCF4FB2874B867DC7565B3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/charts/51/js/jsapi_compiled_ui_module.js
Preview:	/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var gvjs_ar=" - ",gvjs_br=" and ",gvjs_cr=" but expected type is ",gvjs_dr=' class="',gvjs_er=" does not have a domain column.",gvjs_fr=" is of type ",gvjs_gr=" of ",gvjs_hr=" to ",gvjs_ir='" id="',gvjs_jr='" value="',gvjs_X='">',gvjs_kr="#000",gvjs_lr="#109618",gvjs_mr="#222222",gvjs_nr="#333333",gvjs_or="#444444",gvjs_pr="#666666",gvjs_qr="#757575",gvjs_rr="#994499",gvjs_sr="#999",gvjs_tr="#999999",gvjs_ur="#CCCCCC",gvjs_vr="#DC3912",gvjs_wr="#FF9900",gvjs_xr="#FFFFFF",gvjs_yr="#ccc",gvjs_zr="#cccccc",.gvjs_Ar="#e0e0e0",gvjs_Br="#fff",gvjs_Cr="&up__table_query_url=",gvjs_Dr="-caption",gvjs_Er="-content",gvjs_Fr="-default",gvjs_Gr="-disabled",gvjs_Hr="-dropdown",gvjs_Ir="-inner-box",gvjs_Jr="-outer-box",gvjs_Kr="...",gvjs_Lr=".enableInteractivity",gvjs_Mr="0 0",gvjs_Nr="0px",gvjs_Or="100",gvjs_Pr="1px",gvjs_Qr="1px solid infotext",gvjs_Rr="400",gvjs_Sr="500",gvjs_Tr="600",gvjs_Ur="700",gvjs_Vr="800",gv

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=14, height=3555, bps=0, PhotometricIntepretation=RGB, description=FAQs ( frequently asked questions ) wood letters on wood background, orientation=upper-left, width=5332], baseline, precision 8, 500x333, components 3
Category:	dropped
Size (bytes):	82487
Entropy (8bit):	7.890965217696938
Encrypted:	false
SSDEEP:	1536:eghHnzrghHnzVDuokIxGZ2Ss5SipBuONGhV6eD7JBdiTHfNdVrCu:eUTrUTe4GECFhV6eD7diBdVrCu
MD5:	FA1BAC3F3CC71E697154B042603641BD
SHA1:	D808A129A1EB5CE5FD982512762A6B78D7B3FAD5
SHA-256:	5E762986EF9A2ED7DB19E00A78509C019038DF5A2D4AADA897131CE37499E354
SHA-512:	364C89236059F4C75D46B87C7BEA0708391E2B1E2CA641ADD2A4D12CE0524E712373AAB20234EA7ADBC475FB1C91BCDE65168E7AC8228F8532CFC353A84DB42F
Malicious:	false
Reputation:	low
Preview:	.....$Exif..MM.*.............................................................D.....................................................(...........1.....".....2.........2.......I...F.i....................FAQs ( frequently asked questions ) wood letters on wood background.......'.......'.Adobe Photoshop CC 2019 (Windows).2021:06:10 10:26:45.Copyright (c) 2017 patpitchaya/Shutterstock. No use without permission.............0221...................................M.............................................(.....................&...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................k...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3984)
Category:	dropped
Size (bytes):	4431
Entropy (8bit):	5.099799448887736
Encrypted:	false
SSDEEP:	96:qy2KSDMEu5jINZTYoabtF2tMTs//sycZyzyuRCpH:pRSDMEu5jINZTYoabtF2njU5
MD5:	71D2BAA15048D5C2B897AE4C41988B2C
SHA1:	4BCFDF2EFFE58345C69ED61D13ADBA541A4281E2
SHA-256:	A7A23EB6E02AA4A4217BB95D90FD72A3F0EED104588E6D4EDEB792288892E003
SHA-512:	6C08C1D5EC40BD7D36C368B3BBE3B2E09F7A904AF558E906EA7451942B4E490D17BA30ED980B2DAB9CAD6DE23164AB93F46F8ACC198DAB9776DC3E9B906A3C2A
Malicious:	false
Reputation:	low
Preview:	/\.\|\| ========================================================================.\|\| Bootstrap Toggle: bootstrap4-toggle.js v3.6.1.\|\| https://gitbrent.github.io/bootstrap4-toggle/.\|\| ========================================================================.\|\| Copyright 2018-2019 Brent Ely.\|\| Licensed under MIT.\|\| ========================================================================.\*/.!function(a){"use strict";function l(t,e){this.$element=a(t),this.options=a.extend({},this.defaults(),e),this.render()}l.VERSION="3.6.0",l.DEFAULTS={on:"On",off:"Off",onstyle:"primary",offstyle:"light",size:"normal",style:"",width:null,height:null},l.prototype.defaults=function(){return{on:this.$element.attr("data-on")\|\|l.DEFAULTS.on,off:this.$element.attr("data-off")\|\|l.DEFAULTS.off,onstyle:this.$element.attr("data-onstyle")\|\|l.DEFAULTS.onstyle,offstyle:this.$element.attr("data-offstyle")\|\|l.DEFAULTS.offstyle,size:this.$element.attr("data-size")\|\|l.DEFAULTS.size,style:this.$element.attr("data-sty

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	48231
Entropy (8bit):	5.071395059110367
Encrypted:	false
SSDEEP:	768:8T1P+MI0ntSkGYheMHAiSycckMRitAHhyeLowpooHQOz6hUnww+z:85u1MHUCBjloTO6Jz
MD5:	9E076028B920A8D86F42AC8D6D7D8FA9
SHA1:	526E0A7BE8382EEC5A97CDF003A34911813C2D44
SHA-256:	213000AC6409A91AB92D6A4F97FD61F045B707A5E38BD79DBD9D81DCE8093058
SHA-512:	D206E37E678970E997117124BAE5DFDA5A8780516B98EEFBA806B4EA75C5EAC11DA9ADF79355C767B8AB8A840F2DA02CCDF3723AA067A1B379CB513F0A79302B
Malicious:	false
Reputation:	low
Preview:	/*.. Owl carousel.. * @version 2.3.4.. * @author Bartosz Wojciechowski.. * @author David Deutsch.. * @license The MIT License (MIT).. * @todo Lazy Load Icon.. * @todo prevent animationend bubling.. * @todo itemsScaleUp.. * @todo Test Zepto.. * @todo stagePadding calculate wrong active classes.. /..;(function($, window, document, undefined) {...../... Creates a carousel.... * @class The Owl Carousel.... * @public... * @param {HTMLElement\|jQuery} element - The element to create the carousel for.... * @param {Object} [options] - The options... /...function Owl(element, options) {....../.... Current settings for the carousel..... * @public.... /....this.settings = null;....../.... Current options set by the caller including defaults..... * @public.... /....this.options = $.extend({}, Owl.Defaults, options);....../.... Plugin element..... * @public.... /....this.$element = $(element);....../.... Proxied event handlers..... * @protected.... */....this._handlers =

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21084)
Category:	dropped
Size (bytes):	21257
Entropy (8bit):	5.218656398361519
Encrypted:	false
SSDEEP:	384:knMQG5rwVO7dV9nNbRGCB9D45Hkn5vj2xpOxvIAgD75zBi5vISg3gzopL9TidOg3:P5sg7X/jD45eSxpOxvKD73i5vTzwL9Ti
MD5:	84415B7368FD6FC764CBE86039CE0626
SHA1:	62F238E73348C77EB9E865426A7D1B7DE23CBB2D
SHA-256:	C776195AD46333C6C9A9FE3C74502FFEA9A02FAF122388EA3567922CC65A3060
SHA-512:	8423F7A626064813EA9D7CA974AC4A3D23B304717BE6853CC10F356BA3A21971C531E2ACF7FF0285B81897BA54BF02265C96F4DCDE1BB35A350F399BA2479E17
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2019. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=e.ownerDocument.defaultView,n=o.getComputedStyle(e,null);return t?n[t]:n}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll\|overlay)/.test(r+s+p)?e:n(o(e))}function i(e){return e&&e.referenceNode?e.referenceNode:e}function r(e){return 11===e?re:10===e?pe:re\|\|pe}function p(e){if(!e)return document.documentElement;for(var o=r(10)?document.body:

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1712
Entropy (8bit):	4.367311345747244
Encrypted:	false
SSDEEP:	24:t41jz1vgUwEaSe1Rpk6DxUILeAu0/1lWZzGL540jrunhYU2nMtm7KvGVhv6Zb:CBlQRpNUZNm1QG60GC7MID2b
MD5:	14F159F884E5E99C4AE970F1D4F76D9C
SHA1:	A82EEC84DD2BA3A097DABF3F1435E208E1AC94E0
SHA-256:	43FD08AF836BF0BFB52DB0D2C05E3A96DD6EC3810BF7A69AE3869E65B417F60D
SHA-512:	5F40E65E6AF23C26B6385A7D42088C05F7953299CA01EB027ED7C2A06CB6571D02A5D7A285F510AD4DFE15B694FE9ED0E905F8751EDE0D881515D65561770748
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 34.15 40.06"><defs><style>.cls-1{fill:#007dc5;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path class="cls-1" d="M30,31.75c-.06,0-.2-.09-7.2-1.74-.07,0-1.52-.37-1.53-1.65V28h0c0-.57,0-1.89,0-2.87A8,8,0,0,0,24.64,22c.78,0,1.2,0,1.42,0h0a2.73,2.73,0,0,0,.57,0A2.63,2.63,0,0,0,28.68,20h1.06a3,3,0,0,0,3-3V15a3,3,0,0,0-3-3h-1V11a11,11,0,0,0-11-11h-1a11,11,0,0,0-11,11v1h-1a3,3,0,0,0-3,3v2a3,3,0,0,0,3,3H9a8,8,0,0,0,3.85,5c0,1.2,0,2.49,0,3l0,.33c0,1.28-1.46,1.64-1.52,1.65-7,1.65-7.15,1.72-7.15,1.72C-.34,33.09,0,36.44,0,36.44v3.62H24.45a.5.5,0,0,0,.5-.5.51.51,0,0,0-.5-.5H1V36.38s-.27-2.57,3.5-3.7c.24-.08,3.67-.89,6.31-1.52l6.81,4.14,6.54-3.94c2.49.59,5.28,1.25,5.51,1.33,3.72,1.11,3.49,3.59,3.48,3.75v2.62H29.82a.5.5,0,0,0-.5.5.5.5,0,0,0,.5.5h4.33V36.5S34.51,33.1,30,31.75Zm-8-24A15.69,15.69,0,0,1,9.74,12.3V11a7,7,0,0,1,7-7h1a7,7,0,0,1,7,7v1.54a8.4,8.4,0,0,1-4.81-1.82,18.68,18.68,0,0,0,2.81-2.21ZM26.4

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1758
Entropy (8bit):	4.545407166458228
Encrypted:	false
SSDEEP:	24:t4x4e3zhRa4F5Tq7KblL0LtC44blHl1o8qsgD72NW/TaxxaBdcfgTkTMKOfNzGvj:H6xFZL0U4SLuseTexajcvWfNz0j
MD5:	43E85F24AC5FF5B369F44D8FB6588457
SHA1:	48A0B464E253BE91B2EBD24EBA9660C4F1E2FE2D
SHA-256:	189EC367A5C2A273D72A8FAEF4D4B4A1BD6E75BF1C2B42C84641D9952911B30F
SHA-512:	E6D53091598BDD4C993EA4E9AD9037E26FF46AD80089304FADCA797989D64534D014037A93FF1A586CC53F5759CAEFC33DE4B387F96CEABFDA772C66D8543C0A
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/email-us.svg?ext=.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="41.032" height="41.102" viewBox="0 0 41.032 41.102"><defs><style>.a{fill:#fff;stroke:#fff;}</style></defs><g transform="translate(0.499 0.566)"><g transform="translate(0.001 0.004)"><g transform="translate(0 0)"><path class="a" d="M40.025,15.308A.631.631,0,0,0,40,15.173a.667.667,0,0,0-.038-.115.6.6,0,0,0-.067-.1.629.629,0,0,0-.089-.1c-.011-.009-.015-.022-.027-.031L33.361,9.838V4.673a2,2,0,0,0-2-2H24.128L21.233.423a1.978,1.978,0,0,0-2.433,0L15.9,2.671H8.673a2,2,0,0,0-2,2V9.838L.256,14.821c-.011.009-.016.022-.027.031a.626.626,0,0,0-.089.1.6.6,0,0,0-.067.1.658.658,0,0,0-.038.115.632.632,0,0,0-.027.133c0,.014-.008.026-.008.04V38.035a1.979,1.979,0,0,0,.392,1.178c0,.006,0,.013.009.019s.015.011.021.019A1.992,1.992,0,0,0,2,40.036H38.032a1.992,1.992,0,0,0,1.583-.79c.005-.007.013-.009.018-.015s.005-.013.009-.019a1.98,1.98,0,0,0,.392-1.178V15.348C40.033,15.334,40.026,15.322,40.025,15.308ZM19.616,1.476a.64.64,0,0,1,.8,0l1.539,1.2h-3.87ZM2.169,38.7,19.

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	313417
Entropy (8bit):	5.584898573038281
Encrypted:	false
SSDEEP:	6144:b45tYnsmQ8pZZ1HcRCrKkEZMf3/zrfyMuT+bs+X:s5tm9pZ7Hc80aPX
MD5:	3FF492ADF2E960C520893CB8B9C746B2
SHA1:	395D23141C157DC35E7D07E17D33DBED39BA6DF5
SHA-256:	EE77AB89587AC9A3BF513EC67193D80512B77AA3C8F5C00FA0A122FE7E03E790
SHA-512:	CB9F10556A40238FBCFCB03A3C2167986ED3F960851ADD4793EEBBCDA88C0D83FA307391ACA0CB6019A1DB7674147B3DEAFC24B9DA58A031E271A8F7768989A9
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-5CLK8YKSSK&l=dataLayer&cx=c&gtm=453e4cc1za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":12,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1629)
Category:	dropped
Size (bytes):	24811
Entropy (8bit):	5.552969684145338
Encrypted:	false
SSDEEP:	384:sG1cWavMK5uJYJ4pMv5KKjdvcJBQnx+wpaKoYi0:/taUdwDXswpaZH0
MD5:	23C6F16903FE7D4B4C68BD9AE55B78B4
SHA1:	60B0D741AFF75EB878E19547DC1A97ED7D891C10
SHA-256:	9AD0D8BF9E4659EB773EC937A69B25C1E8869B17C43ACD258F01E268F0194088
SHA-512:	4CD789A9C985816F7F19AC4A3D9639318F6CD532072F063C2C489C3C116FC96CAB29D650EE20651A6864F08A5E51B829B7A3E8A86FA6901F6C4A82A756CA0504
Malicious:	false
Reputation:	low
Preview:	var gvjs_Qo=" 0 0 1 ",gvjs_Ro="0%",gvjs_So="100%",gvjs_To="BUTTON",gvjs_Uo="SELECT",gvjs_Vo="TEXTAREA",gvjs_Wo="background",gvjs_Xo="baseline",gvjs_Yo="blur",gvjs_Zo="chartArea.bottom",gvjs__o="chartArea.height",gvjs_0o="chartArea.left",gvjs_1o="chartArea.right",gvjs_2o="chartArea.top",gvjs_3o="chartArea.width",gvjs_4o="circle",gvjs_5o="clip-path",gvjs_6o="corners.bottomleft.rx",gvjs_7o="corners.bottomleft.ry",gvjs_8o="corners.bottomright.rx",gvjs_9o="corners.bottomright.ry",gvjs_$o="corners.rx",.gvjs_ap="corners.ry",gvjs_bp="corners.topleft.rx",gvjs_cp="corners.topleft.ry",gvjs_dp="corners.topright.rx",gvjs_ep="corners.topright.ry",gvjs_fp="datatable",gvjs_gp="datum",gvjs_hp="defs",gvjs_ip="discrete",gvjs_jp="ellipse",gvjs_R="end",gvjs_kp="feComponentTransfer",gvjs_lp="feGaussianBlur",gvjs_mp="feMergeNode",gvjs_np="fill",gvjs_op="fill-opacity",gvjs_pp="fill.color",gvjs_qp="fill.opacity",gvjs_rp="fillColor",gvjs_sp="fillOpacity",gvjs_tp="filter",gvjs_up="finishAnimation",gvjs_vp="font.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 16-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel
Category:	dropped
Size (bytes):	103225
Entropy (8bit):	3.028585516752629
Encrypted:	false
SSDEEP:	768:Knnn3XrbXrbXrbXrSfffVHT/KroLrDcRb:Knnn3XnXnXnXGfffVHOrKD0b
MD5:	800EF3F6DC022950757B15A7EB3A61D7
SHA1:	7C9E8FE3A4292C8BBB0468F05B86927E828592E3
SHA-256:	E3ED68619F8369889D64A07877F00BA3EC0668E6BE73352D99E1706B0DB87377
SHA-512:	7CAE7C08B4D4A9BD84C0B119D54624895DF46C6D6E52E9EC8F5D212538B2CDEC453F09F986BA86A39252D593866EE21AEC9EE9C2A1C43BF235DDC2F5A555A71C
Malicious:	false
Reputation:	low
Preview:	............ .....f......... .(...1...@@.... .(B..Y...00.... ..%...X.. .... .....)~........ .h.......PNG........IHDR...............t%....IDATx.....P...s..AWQj+..V..n}_t.bA...m..j..T.@.......b.R..........iS.Ua...@.....*k.]..V.f....[.s2.N.......of&.Nr.!.................................................WQ.. E}..j.W.....U..&........Gc....y....fM;......z........R.. C...dH....)...!...2....L.u..O...c.m.]g...]...............k.v.._..............1}zl........l.@e...@.........R.. C...dH....)...!..tp.nX.b.........O..5eJ..././j'N....z...uk.)...../'.Y..o...V.X_.._.F.x$l.T.. GN.. C...dH....)...!...2...@.....{..M.u..6._l.._;....M.....K..S../....=.uH..z'\|....-:.'<\\.._....55..N......#Vm......KN.. C...dH....)...!...2...@.....P....).X1\|x......5....../W.s...3.7p^8.....;%.;5(.W.li..._../.sOl.........^...U.w.h.1......dH....)...!...2...@.........J...)4..P.]$>...........&.[.y....9.;.#.H.......p.=..?.g._.uWl...O.A.g.../.....{.............R.. C...dH....)...!...2T....).y.{...

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1900x388, components 3
Category:	downloaded
Size (bytes):	83605
Entropy (8bit):	7.841167459785804
Encrypted:	false
SSDEEP:	1536:kWrHSuvVEVKgUhBE09TEWx7k10YytJbyyEpRpyvrTnR6jxBJ0XG1:VryuvVEIzE/Zytegn8dB/
MD5:	2F6F8BD44CD3F0A229A34F8F4CC5F6BA
SHA1:	DAC1F1D29C92CF4E4DB83A7062BD5C83A6DE3E52
SHA-256:	F6438ED0CF40D28A4B2A85CC3E0FD693A217609DB77DE9A08F660380414ACF35
SHA-512:	85D335B2CDA44E8F9E227D73B8E4164F3CDAF2CEC34EABAFC0BF6490A8D0792798D7FE58815A40133136D7CD4F295B19C72C1BD5AF6699CCBACAE9E3857CD835
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/Banner_Covid.jpg?ext=.jpg
Preview:	......JFIF.....H.H.....C..............................................#....!!!..$'$ &. ! ...C........... ... ........l.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...b..V..yED....?....?.b[s....it......^n...T.I$.c..i.g...2.....1.V.h...5aaXWu......r.Z./..O...z.g..},...Z......aQ.X.d...v'....>x......\........io$2.h~....-.V......[...........d...6......F.KB...0..n.x.f....\.Qr.,.i_.S.0..;..W\^F.=....T....W...Sa...i..&...4. .?/.']..Z.Cr...Z.c.B...-..`..D...\K#..Mx.e..K....Z.4...2...j).X..\nV.(...F..u...P..Q....d...V.....

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	67384
Entropy (8bit):	7.3877052383468165
Encrypted:	false
SSDEEP:	1536:E6n+Swedz1P3KGsBKqDB+5fLckP2WcA2ld/26T2Z+Xt2rPP5/VX1:E6n+3edz1WKqDB+5fP1cA2ldhysd8Pt3
MD5:	2AC3294AFD99FDD839E84C8E3C15C3CE
SHA1:	92B576F222FDCE1B34489EA362A52CD20DC24233
SHA-256:	468F0053B0F490EB3E3E0E02EE221D412A38B9D184B4D606C2E5355D64E42973
SHA-512:	16CB064B2D75BE17BD079D744F4B0F1B80AEE6733A19D37CD1DCCA71FC756A0397BAC1FF4B6E22B2468346DF375ADB0323F79455C781D9E97B8C0418B9510002
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:BB8BAC7ADABC11E8992DF3C07620255D" xmpMM:InstanceID="xmp.iid:BB8BAC79DABC11E8992DF3C07620255D" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DC47F3F9CF4B11E8A4BDF40B2505C329" stRef:documentID="xmp.did:DC47F3FACF4B11E8A4BDF40B2505C329"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 174 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4378
Entropy (8bit):	7.935436158000869
Encrypted:	false
SSDEEP:	96:zClGv/HoMB3dUo52Kek5CEGCp9F8ZoLY/cx+fPZpxfqs/T:RvvNdUo554Cp3Kv/cx87VT
MD5:	FC6E58540A1E29DD914B2AFACBBA7419
SHA1:	0DDE053C11870C2E6AAE8C7D1EA43596965CA474
SHA-256:	4AB7DF83765A09E6DCA1952888C4F5B41C84B88C59E3EC1244E81065E1D58584
SHA-512:	F9EE2CF784F07CDB67EFA4F2D92F4B49E4FA57DA0ABC8B84B9C3A90C09A5C11B474D25C5F2A2E8119E7C4C89BD093CF093877A3E4AB21E0AE72D3B5CDA1DCED6
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/google-pay.png?ext=.png
Preview:	.PNG........IHDR.......2............sRGB........8eXIfMM........i.......................................2....n.U....IDATx....T.....}y.".(V.,j.$...I.."KL$6........a.....4..D........ .T...]A.}....w.;w..73..pOr.........;...w.TDI...#...';v...[t..=P.=P.vm.....o..........h...t.RY.x..\.R....K.......+'..z..n.Z.m+.<..T.TI...i.../...S...7<.>(..h.y..7.tx.S.N......./R(H..h.M.>..l.U.['.v... ,8.T{..O?...6H.?..&d....=P.=.y.f.9q..:t.......@.=p..q.I.;d.{...@..V...<...r.7:..;..5.5j..WT..-o.5R.V-..V.O:.&M......-[.L.}.Q.n../X.@._oQ....={J.5e...2a..9s.Kk..<..C...o..a.....~....{.-.E.g..\|.'.x.M..L.&.g....D...Kw....'.t.../.@......#.G......Q^K..@L.1...yF...^x..^.z..S..d._.b\|....}.....Q_..........e.#rH..=#r......t....Hh...?.....;w.&...8..7...i....o.>..4.Q......KE.....c..8K.r.0..<..t.jUEN5.94^.......1..".z.to..[.4`......;.TD.Yd..1q.(].t\v....-[...3&.k..z....3s.L.>}z._x.......:].^.._E....Y....u,.....v.\|..wQ}.p..`.P.@...4.t.@.Ui...6h.....2.m.4

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36382), with no line terminators
Category:	dropped
Size (bytes):	36382
Entropy (8bit):	5.427956382483397
Encrypted:	false
SSDEEP:	384:4qP3mMhCccoc1hStKga9nOY0EfZk4au6uJhga9q2pidXByAOKL/Heua9qdJqm4Nk:5ffKn9nJ16uJ+a9+yAnLha9s4iB
MD5:	CBEC2AA4B7048D247D35BC6A09F6EAF6
SHA1:	2DCF75F0D2977070ED34E86BDFC77E7D1EA9BE7F
SHA-256:	8825379EA3B078832ED62E9939DEECD599651CDA6B1F40F3617D84A2548247D3
SHA-512:	454C5A5AA591F8F7E6D7B32E15D6098D5F2457AC639A19ECBFB9787ED9F771F6BBB4FCF9363C7B7949AE3A00D20CF988AA5E386D266A72B4A5F449CCD1A16CE1
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[818],{52818:(Ne,C,r)=>{r.r(C),r.d(C,{DocumentCenterModule:()=>Fe});var d=r(56610),b=r(57936),L=r(37440),M=r(95565),p=r(37222),E=r(61480),f=r(50187),e=r(23279),I=r(61448),R=r(75629),P=r(84993),u=r(10194),c=r(50213),F=r(58082),h=r(84692),k=r(93295),N=r(5957),O=r(98278),A=r(72221),T=r(93901),G=r(66865),_=r(45683),m=r(68403);function x(n,o){if(1&n&&(e.qex(0),e.j41(1,"div",7),e.nrm(2,"span",8),e.k0s(),e.bVm()),2&n){const t=e.XpG();e.R7$(2),e.Y8G("innerHtml",t.headerContent,e.npT)}}function B(n,o){if(1&n&&(e.qex(0),e.j41(1,"mat-option",17),e.EFF(2),e.k0s(),e.bVm()),2&n){const t=o.$implicit;e.R7$(),e.Y8G("value",t),e.R7$(),e.SpI(" ",t.title," ")}}function w(n,o){if(1&n){const t=e.RV6();e.j41(0,"mat-select",16),e.bIt("selectionChange",function(i){e.eBV(t);const a=e.XpG(2);return e.Njj(a.onSelectionChange(i))}),e.DNE(1,B,3,2,"ng-container",14),e.k0s()}if(2&n){const t=e.XpG(2);e.Y8G("value",t.currentTabValue),e

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (514)
Category:	dropped
Size (bytes):	8077
Entropy (8bit):	4.792078386025652
Encrypted:	false
SSDEEP:	48:dLZcrmPD2kjTzura+vaBqsh6H3Lj9ZeHNQZIH1AHmZcP9DZRnNSD/gbcUrIQ0D4a:dL6rbXm/bg3DjiYRsB6U
MD5:	99926767E2E026E6C3CBECD1EE31CEB0
SHA1:	113F33D54D13EB32EF908A8F2820BD14E369B93E
SHA-256:	30C48EEF4E305A1F7E77D50DCAC4B5F7BAF250B0D55DFBAB468DB645BFB13C65
SHA-512:	7F5D88190231D3DDC192C09954ACE267B3845136AA8F809C2A29DFC4F7DE6B98EC1E7F953C150DD8C7BF50AEA40630BC0E78E926982E66C3C653FBA701F1F779
Malicious:	false
Reputation:	low
Preview:	var gvjs_iQ="#990000",gvjs_jQ="annotationText",gvjs_kQ="certainty";gvjs_iL.prototype.Jm=gvjs_V(70,function(a,b){if(this.Xg===gvjs_fw)return this.av(a,b);throw Error(gvjs_4r);});gvjs_jL.prototype.Jm=gvjs_V(69,function(a,b){return this.av(a,b)});function gvjs_lQ(a){var b=new gvjs_OE;b.sa=function(){return a};return b}function gvjs_mQ(a){gvjs_iL.call(this,a);this.cc(gvjs_d,gvjs_at,gvjs_S)}gvjs_o(gvjs_mQ,gvjs_iL);function gvjs_nQ(a){gvjs_iL.call(this,a);this.cc(gvjs_d,gvjs_4w,gvjs_S)}gvjs_o(gvjs_nQ,gvjs_iL);.function gvjs_oQ(a){gvjs_iL.call(this,a);this.cc(gvjs_d,gvjs_f,gvjs_S,"sparkline")}gvjs_o(gvjs_oQ,gvjs_iL);function gvjs_pQ(a){gvjs_iL.call(this,a);this.cc(gvjs_d,gvjs_e,gvjs_S)}gvjs_o(gvjs_pQ,gvjs_iL);function gvjs_qQ(a){gvjs_iL.call(this,a);this.cc(gvjs_Dd)}gvjs_o(gvjs_qQ,gvjs_iL);gvjs_qQ.prototype.Jm=function(a,b){return this.av(a,b)};function gvjs_rQ(a){gvjs_iL.call(this,a);this.cc(gvjs_yt)}gvjs_o(gvjs_rQ,gvjs_iL);function gvjs_sQ(a){gvjs_iL.call(this,a);this.cc(gvjs_d,gvjs_lt,gvjs

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3984)
Category:	downloaded
Size (bytes):	4431
Entropy (8bit):	5.099799448887736
Encrypted:	false
SSDEEP:	96:qy2KSDMEu5jINZTYoabtF2tMTs//sycZyzyuRCpH:pRSDMEu5jINZTYoabtF2njU5
MD5:	71D2BAA15048D5C2B897AE4C41988B2C
SHA1:	4BCFDF2EFFE58345C69ED61D13ADBA541A4281E2
SHA-256:	A7A23EB6E02AA4A4217BB95D90FD72A3F0EED104588E6D4EDEB792288892E003
SHA-512:	6C08C1D5EC40BD7D36C368B3BBE3B2E09F7A904AF558E906EA7451942B4E490D17BA30ED980B2DAB9CAD6DE23164AB93F46F8ACC198DAB9776DC3E9B906A3C2A
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/gh/gitbrent/bootstrap4-toggle@3.6.1/js/bootstrap4-toggle.min.js
Preview:	/\.\|\| ========================================================================.\|\| Bootstrap Toggle: bootstrap4-toggle.js v3.6.1.\|\| https://gitbrent.github.io/bootstrap4-toggle/.\|\| ========================================================================.\|\| Copyright 2018-2019 Brent Ely.\|\| Licensed under MIT.\|\| ========================================================================.\*/.!function(a){"use strict";function l(t,e){this.$element=a(t),this.options=a.extend({},this.defaults(),e),this.render()}l.VERSION="3.6.0",l.DEFAULTS={on:"On",off:"Off",onstyle:"primary",offstyle:"light",size:"normal",style:"",width:null,height:null},l.prototype.defaults=function(){return{on:this.$element.attr("data-on")\|\|l.DEFAULTS.on,off:this.$element.attr("data-off")\|\|l.DEFAULTS.off,onstyle:this.$element.attr("data-onstyle")\|\|l.DEFAULTS.onstyle,offstyle:this.$element.attr("data-offstyle")\|\|l.DEFAULTS.offstyle,size:this.$element.attr("data-size")\|\|l.DEFAULTS.size,style:this.$element.attr("data-sty

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 1209x1209, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1300x258, components 3
Category:	dropped
Size (bytes):	21744
Entropy (8bit):	7.566206974754159
Encrypted:	false
SSDEEP:	384:dqYMxkCDV5wHHhX34uDkmnO4oV5Y6lvWVKej3D9xq5lCr3:dqlLkNnY5Y6lvX+9xr3
MD5:	D9D80D797CF9C91F59C03C3D0562445B
SHA1:	78595B4DEE4DD25248ADAC9E1803AFF0E87A33A8
SHA-256:	C9283633ADCD900B1C1327F7BD4B9A64AE565A97A1611B29B5CC6359A84F0458
SHA-512:	F1B865F65248BB78B3F9ABB5AB42F455169DF8F92B0FD431D9FF7045D624A29829B373242003AAD128450E39193AE2D69416CEF88B0C10A9DE6C78D236C2AAED
Malicious:	false
Reputation:	low
Preview:	......JFIF............."Exif..MM..........................C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...IW..ZZ\|.T.#X...c....3......,....,...6.\6.'.;].....[}.J..33n?..r...._...?.Eukq5.....W..U.M?.uA..o/.^....a...s....`........f.%_....__A.._....4_\|......:.......k.?.T......R..%.G...0~.\|.=<.novG.o.\.....W..x..I.I..i.v....`;...b..Bt.#..b.._..,g.z.#.......b....J..}'....P..I.j".RPj.QN.<..u.t....................A..(.....:o..V-...Oog.U

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	636
Entropy (8bit):	5.11205484289448
Encrypted:	false
SSDEEP:	12:t47ztrpB4RfUukzV/hcB0ACxUhQtPJ98073QtlsE8clJTlJBmTMgEQq:t47zt1B4jkB2sUhOD39tHMge
MD5:	A2B1D4F07C3D4D672F9BAF00DCEF71E4
SHA1:	F0FAF4DAC3B442946FE0C0F9B34CA977AC8DF011
SHA-256:	7D889A195604581D33188F0654DDC7FFDA5FE2D4F9D17E8BDE489B7234D7B26D
SHA-512:	0FBD50D6312AB150A91D7977A8D9264488B81E67D1C810B22871586EECA7AC16F744E8A4C0A1BB658190BFA5E3971709F410910E74F401881D584C4280514196
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="14.904" height="14.045" viewBox="0 0 14.904 14.045">.. <g id="warning" transform="translate(0 -14.759)" opacity="0.7">.. <g id="Group_1127" data-name="Group 1127" transform="translate(0 14.759)">.. <path id="Path_1111" data-name="Path 1111" d="M14.595,25.506,9.33,15.828a2.183,2.183,0,0,0-3.755,0L.31,25.506a2.182,2.182,0,0,0,1.877,3.3h10.53A2.183,2.183,0,0,0,14.595,25.506ZM7.452,27.057a.873.873,0,1,1,.873-.873A.874.874,0,0,1,7.452,27.057Zm.873-3.493a.873.873,0,0,1-1.747,0V19.2a.873.873,0,0,1,1.747,0Z" transform="translate(0 -14.759)" fill="#fff"/>.. </g>.. </g>..</svg>..

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2420
Entropy (8bit):	4.637176192191629
Encrypted:	false
SSDEEP:	48:PenOKhkIZU1iEzpUheoM+GuUh3lMPD3972fv0djQN9du:mHhkIq1iEz6CuauDs0
MD5:	F77DCD5CDBF849A37B1CF7102327C391
SHA1:	610D8B86C45E0A8A60DCF12AE28FE18AA73A27D6
SHA-256:	0A496785B5652E4FDA98EF778C9153FF28C6966A2A4A257CD5A0063E5A2D7F42
SHA-512:	62566B7DB2DF99887B95294A5A8E445DAB408F599D717C95EF7B575596726126398A6A8092511F9444A0EF71E83388F8C7BF648E4328885AF4BBBF25DFCC103B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="49.861" height="43" viewBox="0 0 49.861 43"><defs><style>.a{fill:#fff;stroke:#fff;}</style></defs><g transform="translate(0.5 -35.448)"><g transform="translate(0 35.948)"><path class="a" d="M46.5,45.927h-6.18V38.313a2.368,2.368,0,0,0-2.365-2.365H2.365A2.368,2.368,0,0,0,0,38.313V66.428a1.54,1.54,0,0,0,2.63,1.089l4.9-4.9H8.545v7.613A2.368,2.368,0,0,0,10.911,72.6h14.9a.716.716,0,0,0,0-1.431h-14.9a.935.935,0,0,1-.934-.934V62.618H37.95a2.368,2.368,0,0,0,2.365-2.365V55.167a.716.716,0,1,0-1.431,0v5.086a.935.935,0,0,1-.934.934H7.233a.715.715,0,0,0-.506.21L1.618,66.505a.109.109,0,0,1-.186-.077V38.313a.935.935,0,0,1,.934-.934H37.95a.935.935,0,0,1,.934.934v13.7a.716.716,0,0,0,1.431,0v-4.66H46.5a.935.935,0,0,1,.934.934V76.407a.109.109,0,0,1-.186.077l-5.109-5.109a.715.715,0,0,0-.506-.21H28.959a.716.716,0,1,0,0,1.431H41.332l4.9,4.9a1.541,1.541,0,0,0,2.63-1.089V48.292A2.368,2.368,0,0,0,46.5,45.927Z" transform="translate(0 -35.948)"/><path class="a" d="M1

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1900x388, components 3
Category:	dropped
Size (bytes):	83605
Entropy (8bit):	7.841167459785804
Encrypted:	false
SSDEEP:	1536:kWrHSuvVEVKgUhBE09TEWx7k10YytJbyyEpRpyvrTnR6jxBJ0XG1:VryuvVEIzE/Zytegn8dB/
MD5:	2F6F8BD44CD3F0A229A34F8F4CC5F6BA
SHA1:	DAC1F1D29C92CF4E4DB83A7062BD5C83A6DE3E52
SHA-256:	F6438ED0CF40D28A4B2A85CC3E0FD693A217609DB77DE9A08F660380414ACF35
SHA-512:	85D335B2CDA44E8F9E227D73B8E4164F3CDAF2CEC34EABAFC0BF6490A8D0792798D7FE58815A40133136D7CD4F295B19C72C1BD5AF6699CCBACAE9E3857CD835
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C..............................................#....!!!..$'$ &. ! ...C........... ... ........l.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...b..V..yED....?....?.b[s....it......^n...T.I$.c..i.g...2.....1.V.h...5aaXWu......r.Z./..O...z.g..},...Z......aQ.X.d...v'....>x......\........io$2.h~....-.V......[...........d...6......F.KB...0..n.x.f....\.Qr.,.i_.S.0..;..W\^F.=....T....W...Sa...i..&...4. .?/.']..Z.Cr...Z.c.B...-..`..D...\K#..Mx.e..K....Z.4...2...j).X..\nV.(...F..u...P..Q....d...V.....

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	378
Entropy (8bit):	5.189525271343864
Encrypted:	false
SSDEEP:	6:tI9mc4slzu9PVGSBT/Mhm+BNURUvdGoAVrvdGodW2PDRgaWdqqZe3KMQa9U6r8i:t4itGSBrMc+4RUmeaWgaRc9Ai
MD5:	F2F29BCBEA7EE3EE44CBCDC03404AA66
SHA1:	7120F637003BFF7D09D61F1CD921D789202B3354
SHA-256:	B54411C702D86464009A23FAF96F14D09B255922D68B1F22A5621750231D1EEA
SHA-512:	292007B6C874BD02856F7376D737F9F50E6B5832CD8E0DC696AD53901CBCA1E214FBCA1D736253ACBA05AE547653A69317A75C3033B1AA07947F98348D26FEF8
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="7.882" height="14.632" viewBox="0 0 7.882 14.632"><defs><style>.a{fill:#999;}</style></defs><g transform="translate(7.882 14.632) rotate(180)"><g transform="translate(0 0)"><path class="a" d="M7.717,6.914.961.158a.563.563,0,0,0-.8.8L6.523,7.312.165,13.671a.563.563,0,0,0,.8.8L7.717,7.71A.563.563,0,0,0,7.717,6.914Z"/></g></g></svg>

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6179)
Category:	downloaded
Size (bytes):	7211
Entropy (8bit):	5.208921838393964
Encrypted:	false
SSDEEP:	192:v2rVfXH8Z3boSdBwi4z4p20odOPdO04z4pF0yI:eZfsZ3jwiMsue3MsvI
MD5:	F7CC439A8C4FB9E8C33E0FF06A852EC8
SHA1:	DD51BA461999034251732531ED9962F0B02AF067
SHA-256:	7F17ABD50551060150FBEADC47946974182CC5FCA1026711150F5EAFEEC6246B
SHA-512:	487733A91C11E6D701A3CB06C6122293917F442FF5A3C5199416B2699AE8201A601CF5B8B1D539D1B0142D63CB0EC87E8A7E052BF93806BF608A1C4317AFD8DE
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/bootstrap-slider/4.5.2/css/bootstrap-slider.min.css
Preview:	/! =======================================================. VERSION 4.5.2 .========================================================= /./! =========================================================. bootstrap-slider.js. . Maintainers:. ..Kyle Kemp. ...- Twitter: @seiyria. ...- Github: seiyria. ..Rohit Kalkur. ...- Twitter: @Rovolutionary. ...- Github: rovolution. . =========================================================. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. *

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18588, version 1.0
Category:	downloaded
Size (bytes):	18588
Entropy (8bit):	7.988601596032928
Encrypted:	false
SSDEEP:	384:WF9srt3EJfKy7iOpqErJeqQhzsaZqPTPabcoqYdBTKYPvS9BlTf:Wn6UhKYieqAiPQTwclYQLlTf
MD5:	115C2D84727B41DA5E9B4394887A8C40
SHA1:	44F495A7F32620E51ACCA2E78F7E0615CB305781
SHA-256:	AE0E442895406E9922237108496C2CD60F4947649A826463E2DA9860B5C25DD6
SHA-512:	00402945111722B041F317B082B7103BCC470C2112D86847EAC44674053FC0642C5DF72015DCB57C65C4FFABB7B03ECE7E5F889190F09A45CEF1F3E35F830F45
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......H........ ..H8................................\|.`..J.\..<........-..Z...x.6.$..0. .... ..S.7.5..K!.;..../.`..Sn.J.e.52P.(.....=9....f.....$....fZ.p...N...t....6.lfS.Ju.i.o.g..<....T"O.o..4..4....M/N.>.K..."[.P...W.u.>]................A.9z....IN^....z..Y.{....m=...+X9<?.......(IAG8rD....52L0.p .EJ..p....=.......[U...pz..g...../L.U.......P..W.U..q$L..6......C.M.0..R..........D(.ilX.Y..SZ.R...Q..j.6.@\."\|.l......3....,.T.....L...ap0......6.j.\&O.z`.$._+vwnr...,....?W.T....!.J...L#%.......A}........\.....l...:....U..u.J.0....O......&.!.)4.V..:.}.0f....:W......?U.....%...b...!....yA.sw.....5..T .}{.t!F.G....{"..pQ.S.v.S....t......U.Y\|.v.@....\|..(..V.........^....../.7......K......J.Uq/L.T-.`.O........;........';vWq.+....J...J..p.....sB`(1LC.k....?Z{...v>dS....F..........\.....UetU........6.V...vE....._.../...%.q...^.l...>^.z..l..p....j..@H...`X.p...KQ. .<@...I...BF.......L..6...y.2=.P....8;..@`.m.....R.B.L.r.*T.T..l@.6.Y....}g.....F.n...

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 170 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4120
Entropy (8bit):	7.913522163225112
Encrypted:	false
SSDEEP:	96:AyGNReeFhYLiax63QCqnAvdgYgEdr2NaGFVVfv:AcimLio639KydgYJqNaGFzH
MD5:	3018F61AF73CF84052A8DFF2139EE460
SHA1:	4F17C9480BA6D1D7A90A494177D465B52E347CF4
SHA-256:	272266ECA53C5B83B87C0EE651287ED6ACDC3E5E6D06DBEF3A86FC730D563284
SHA-512:	DF2FDCF7BE44B22066C62CA34DCADF353BBB6A25BF3FA593D4FBC6FE4124A7A0DCC4E8301B9E3C7E1F8FF234376BDECC13677A98E462EE28EB6FC47B54FBEFED
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......2......C@.....sRGB........8eXIfMM........i.......................................2...........IDATx..w.]....=..&D..1.b.F.Dc.........XP.A........5..5..XA.XbO..a.....3...'.......z..;{vggg.....=.o B....?.7.x#\|....#+.....?...Y......^..<..U;...T...&...........#......~:,X. <..3.......[K`.%0f....;....;..Na.}..#G....o....[.v.m7f..W.gt....;w./...._.=,\.0<..sC<v..j.4..5.\.>..#{...........G./..r@G......._...u...ZH..?6.lm. T.........#.3.:m...6.t..5.....]Q/....g....x .v.a.D.........w..h...P.;...9..r.)....o..f@.C...x..?......X.....d..7n\8..3.......>.`3..Z.[l.EXc.5...B.n.;vlR.E....v..o....."=l...O.]w.5.#F..3........H.q...N2'.UW]e.c.wn ..u..7..<......O.0!...x...J.~.../.#...G.y..2.{..>...>...O?............!.^...x.....SO=5.&u6.t....._.g.>dD:M..3.....s..?l:D......(........M7.dy.}..7..u6..+..D..6>.a .^./>(.._.v..:.4KC+.]..>...VF.h/>....o...e.....1Qq.z.o....I.....2e.r..\|..W.VT..h.t.A..2.W}..{~..^=.....QD..J#{..S{CC.*.(.s.xp).

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnA-DvYddFgORIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	432
Entropy (8bit):	5.095967961729588
Encrypted:	false
SSDEEP:	12:YIStQdZ9OVDog1QjWrXOi3g3Q5ojESZsPAycVyY:oCdZ0VDjqj6Oi3gg5+1ycVyY
MD5:	DF28F74DEFBFE4C77B24AE219CA88FDE
SHA1:	4867073BD2F73289BF8B01DD38551C22786466F5
SHA-256:	A3D9D9A13D0BCC9CBF8A0E7D1BF21442AE7A55D0DF5FDE46062FD4D4AFCBD763
SHA-512:	F20D329A75E02603A9108E93CC0533835BC277D545B458952417333B0ED680261198E6053ACBE48A1B46A9566A36F7A66A78C3D5E2A6C8BADA55BE583EC1ECB5
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/clientvariables.rwa.css
Preview:	:root{..--brandPrimary: #007DC5;..--brandPrimaryDark: #7DB7E4;..--brandPrimaryLight: #CEE2F3;..--brandSecondary: #007DC5;..--brandSecondaryDark: #3C3E3F;..--brandSecondaryLight: #606B74;..--brandTertiary: #007DC5;..--brandTertiaryDark: #465967;..--brandTertiaryLight: #9CAFAC;..--alertFriendly: #72A951;..--alertWarning: #FF8400;..--startColor: #007DC5;..--endColor: #007DC5;..--primaryFont: "Roboto";..--secondaryFont: "Roboto";..}

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	11615
Entropy (8bit):	5.105290050086187
Encrypted:	false
SSDEEP:	192:RneIHwv/CkVyxi6/yx6cvg13xJhIyOaQpwAaLnSf1kjnalqSWeLDK64I7VD77fRn:RneIyvcBJhIXaZdSf1mUK64I7VD7zRn
MD5:	2AF640CC408DCC903F2BF88D6AFC1077
SHA1:	2B42E40F2F0656F82511C0793A9A9681DEE0E961
SHA-256:	A37D7688DE7FBCB966722AA58B29BE1C37F3D5BF928A921315B1B19E98A34846
SHA-512:	C9BF6475AE5D2F63580E794965F1410E689A1357793F0BFFF9CAFC2AF45CB97FBBA3AD6655D8F83041B17D0F3E770121F4B88F415C4FD2F45D31688E66A1935A
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/Content/script/owl.navigation.js
Preview:	/*.. Navigation Plugin.. * @version 2.3.4.. * @author Artus Kolanowski.. * @author David Deutsch.. * @license The MIT License (MIT).. /..;(function($, window, document, undefined) {...'use strict';...../... Creates the navigation plugin.... * @class The Navigation Plugin... * @param {Owl} carousel - The Owl Carousel.... /...var Navigation = function(carousel) {..../.... Reference to the core..... * @protected.... * @type {Owl}.... /....this._core = carousel;....../.... Indicates whether the plugin is initialized or not..... * @protected.... * @type {Boolean}.... /....this._initialized = false;....../.... The current paging indexes..... * @protected.... * @type {Array}.... /....this._pages = [];....../.... All DOM elements of the user interface..... * @protected.... * @type {Object}.... /....this._controls = {};....../.... Markup for an indicator..... * @protected.... * @type {Array.<String>}.... /....this._templates = [];....../.... The carousel el

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18288)
Category:	dropped
Size (bytes):	18908
Entropy (8bit):	5.6255223057698815
Encrypted:	false
SSDEEP:	384:dVtfxzksuna6B3+9A/CY3DCcdye4PCwEnaeXsLRKyuHX/5:VKRai5HPIeaeX1yM
MD5:	0240AA22895CF57CB91160E784542720
SHA1:	F50652CCC59E7556511178A2A6BF92407D2E0955
SHA-256:	5DEEC06E184F7D97048A4A0D9A182105700484EBAC0C804A58A4BFAE84B843B1
SHA-512:	C4CADEB4398EB472EEF4989627E74C8CC9A80A1045F2C01E3DCFA63D20B52901223F90AB0A0F6F13833F627A0A5C4BBDDEB86CA9F4A2972654F881B2DF4B1879
Malicious:	false
Reputation:	low
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var U=function(p){return p},G=function(p,b){if(!(p=(b=null,B).trustedTypes,p)\|\|!p.createPolicy)return b;try{b=p.createPolicy("bg",{createHTML:U,createScript:U,createScriptURL:U})}catch(e){B.console&&B.console.error(e.message)}return b},B=this\|\|self;(0,eval)(function(p,b){return(b=G())&&p.eval(b.createScript("1"))===1?function(e){return b.createScript(e)}:function(e){return""+e}}(B)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var H=function(p,b){for(b=[];p--;)b.push(Math.random()*255\|0);return b},C=function(p,b){b.J.splice(0,0,p)},e_=function(p,b,U,B,Y){function r(){}return B=(p=$q(p,function(v){r&&(b&&bb(b),Y=v,r(),r=void 0)},(Y=void 0,!!b)),p)[1],U=p[0],{invoke:function(v,W,E,e){function G(){Y(function(X){bb(function(){v(X)})},E)}if(!W)return W=U(E),v&&v(W),W;Y?G():(e=r,r=function(){bb((e(),G))})

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	downloaded
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2360
Entropy (8bit):	4.869825580674243
Encrypted:	false
SSDEEP:	48:gjkxThJSTtIXYikX2/WlUj4lN4Qb0DCJOLYXqj:XJS95X2/HjQ4u0+JyKI
MD5:	DB6AC4892597C389DBFDA43D84CD78D0
SHA1:	BF675904F447F35E3DF0E4864470613B9854EA47
SHA-256:	B457FADF77556D85D24D9A3DD83E0C2943224E2FC0260DE913EC7D8D2785BDBE
SHA-512:	F97E907F4CF0280516BA2B4AAD4005E9694C960D94AEE73BB27A18056811AC9FDC222783C95F5A1746AD518ACAF32CBA70CE11B8462CA6CB1DAB9731ABD388DC
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/home-owner_1.svg?ext=.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="57.62" height="62.39" viewBox="0 0 57.62 62.39"><defs><style>.a{fill:#007dc5;}</style></defs><g transform="translate(-644.43 -9.549)"><path class="a" d="M729.59,107.16h-2V99.58c0-7.23-7.24-15.32-16.93-15.32s-16.94,8.09-16.94,15.32v3.6h-2v-3.6c0-8.17,8.09-17.31,18.93-17.31s18.92,9.14,18.92,17.31Z" transform="translate(-38.07 -72.721)"/><path class="a" d="M718.51,122.51l-1.1-1.66a11.32,11.32,0,0,0,4.88-9.66v-2.7h2v2.7a13.28,13.28,0,0,1-5.77,11.32" transform="translate(-38.07 -72.721)"/><path class="a" d="M725.94,109.49c-7.8,0-23.57-10-23.57-18.26h2c0,6.54,14.15,16.26,21.58,16.26Z" transform="translate(-38.07 -72.721)"/><path class="a" d="M705.2,123.81c-5.72-2.55-9.44-7.52-9.47-12.66v-4c0-4.94,3.76-8.76,7.25-10.21l.77,1.84c-3,1.24-6,4.52-6,8.37v4c0,4.35,3.28,8.61,8.29,10.84Z" transform="translate(-38.07 -72.721)"/><path class="a" d="M712.66,130.73h-1.33a3.65,3.65,0,1,1,0-7.3h1.33a3.65,3.65,0,1,1,0,7.3m-1.33-5.31a1.66,1.66,0,0,0,0,3.32h1.33a1.

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8314)
Category:	downloaded
Size (bytes):	257932
Entropy (8bit):	5.548510212379855
Encrypted:	false
SSDEEP:	3072:vuaFitgcnsmIj0+D0qzmYasxzuZ1IwPcRCrha1hka0Mf3/8OtnmhYs/M1:v3YnsmQIZ1HcRCrda0Mf3/8Od
MD5:	9592A02FB949F8F471AA5DACAED57BCD
SHA1:	7A2C44DC0916D8CBA57512DC254DE915B8EAF1F9
SHA-256:	4EB3B4E0FD23F165F58A198FF0330A014EC4B574E492E874814DE79FBB5775B2
SHA-512:	94A530663C460C1C446A06178C822109013869D7232C845C2BDE0300CED7F609718A9BA95E1CA7F04E6D8CF2973BCB8ABF701F21D99E52BE721D854837CF6A52
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-M6TXQN4
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"20",. . "macros":[{"function":"__e"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_useHashAutoLink":false,"vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":false,"vtp_trackingId":"UA-26545262-4","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableGA4Schema":true},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48787), with no line terminators
Category:	dropped
Size (bytes):	48787
Entropy (8bit):	5.510122525253371
Encrypted:	false
SSDEEP:	768:pKYdOkgCDCYA/A1AVAFAgA8AWAfAmAbAgAeA1Ao3r0Advn8GFwDXTTrrCxBXN+zh:QHFwDXTTrrCxBXNqcGyzO
MD5:	81344CB1FA5CAD9ADA0F5E5B0117A376
SHA1:	1C8E38E0217FE8CB016AC1D9AF4652186AC94578
SHA-256:	6CB18FD3C17BDB753A46F840ACD3A3A699AD87154C93582752B60AB9EC6E1C1A
SHA-512:	7F47CE32E341708B2E4DD18E0575EEB40FBB77B1FA654063EF92D8036D13226564513C6B2C85A6DEBD079B0BD3B415483D0EF59B0F32EE7A02559AC94DCDDDC3
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[368],{80368:(gn,w,s)=>{s.r(w),s.d(w,{MortgageAssistanceModule:()=>mn});var u=s(56610),g=s(61480),M=s(50187),h=s(50213),C=s(89977),k=s(84692),t=s(23279),x=s(97800),T=s(84993);const A=()=>["introduction"],c=n=>({mortgageassistance:n}),d=n=>({outlets:n}),p=n=>["/mortgage-assistance",n],O=()=>["borrowerinfo"],P=()=>["propertyinfo"],I=()=>["hardshipinfo"],b=()=>["borrowerincome"],y=()=>["borrowerassets"],j=()=>["agreement"],S=()=>["reviewsubmit"];function G(n,a){if(1&n&&(t.j41(0,"span",35),t.nrm(1,"i"),t.j41(2,"strong",36),t.EFF(3,"1"),t.k0s()()),2&n){t.XpG();const e=t.sdS(8);t.R7$(),t.HbH(e.isActive?"fa fa-circle fa-stack-2x circle-primary":"fa fa-circle fa-stack-2x circle-initial")}}function E(n,a){1&n&&t.nrm(0,"i",37)}function D(n,a){1&n&&t.nrm(0,"div",38)}function H(n,a){1&n&&t.nrm(0,"router-outlet",39)}function Y(n,a){1&n&&t.nrm(0,"div",40)}function N(n,a){if(1&n&&(t.j41(0,"span",35),t.nrm(1,"i"),t.j4

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	151895
Entropy (8bit):	5.3272479992092165
Encrypted:	false
SSDEEP:	3072:xSjA9b/wWvjbpv5z+EuuQMG34cWWPWbed:xSjA9b4Kjtvo9lMG34cWWP3
MD5:	07C7E372A599AF9DFE6F4B82C0F81017
SHA1:	E13E16B587E982016D43105BC203BC75F79270B5
SHA-256:	51F88E33955855D7CFB229A6C67E0CF21920268ED44DFEA94CD8F857848F58F5
SHA-512:	183EC84111AD58E1B709A61DB9D02497BB6FBEE021ADED5213407DFA9710F81D853A4B07E1A5EB4988325F740012A1E8C06E7BA2E135218EEFA7BB36633A9844
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/scripts.9d6b8b762f67bb53.js
Preview:	!function(R,Ae){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=R.document?Ae(R,!0):function(oe){if(!oe.document)throw new Error("jQuery requires a window with a document");return Ae(oe)}:Ae(R)}(typeof window<"u"?window:this,function(R,Ae){"use strict";var oe=[],f=Object.getPrototypeOf,le=oe.slice,ye=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},G=oe.push,xe=oe.indexOf,Me={},N=Me.toString,Be=Me.hasOwnProperty,_n=Be.toString,et=_n.call(Object),q={},Q=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},ue=function(e){return null!=e&&e===e.window},M=R.document,Yt={type:!0,src:!0,nonce:!0,noModule:!0};function Kt(e,n,o){var u,d,p=(o=o\|\|M).createElement("script");if(p.text=e,n)for(u in Yt)(d=n[u]\|\|n.getAttribute&&n.getAttribute(u))&&p.setAttribute(u,d);o.head.appendChild(p).parentNode.removeChild(p)}function Se(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	downloaded
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6976), with no line terminators
Category:	downloaded
Size (bytes):	6976
Entropy (8bit):	5.34881209869658
Encrypted:	false
SSDEEP:	192:gVP87XJ/SwfM68wB4ZVfj/GHSqoaNMgLH:eP89/znB4ZAnNh
MD5:	55686AC2B404D2A18F57BC5DB2542B4C
SHA1:	0FD25A18333F7032AE1BDEAD5B3F53B2BF4E15F2
SHA-256:	3FE3C02476DA7A95D8B37E4F655F42FAC79DB1498EA5C996B27651BF7E6107EB
SHA-512:	122E7168065C77708547861E01654F6E9C4B5829FEE3E66B8A3A33A00478DCB93C18D06E5D9EEDF1F9EDD4598045876DEC9AA3519B457430A3486293D20F3A59
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/997.2847ab353f4d5cd1.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[997],{38997:(d,c,r)=>{r.d(c,{P:()=>y});var _=r(50187),t=r(50213),e=r(23279),h=r(56610);function u(s,o){if(1&s&&e.nrm(0,"h2",7),2&s){const n=e.XpG();e.Y8G("innerHTML",n.title,e.npT)}}function f(s,o){if(1&s&&e.nrm(0,"h2",8),2&s){const n=e.XpG();e.Y8G("innerHtml",n.title_1,e.npT)}}function v(s,o){if(1&s&&e.nrm(0,"div",7),2&s){const n=e.XpG();e.Y8G("innerHTML",n.section,e.npT)}}function l(s,o){if(1&s&&(e.j41(0,"div"),e.nrm(1,"p",7)(2,"p",7),e.k0s()),2&s){const n=e.XpG();e.R7$(),e.Y8G("innerHTML",n.content_1,e.npT),e.R7$(),e.Y8G("innerHTML",n.content_2,e.npT)}}function N(s,o){if(1&s){const n=e.RV6();e.j41(0,"div",9)(1,"a",10),e.bIt("click",function(){e.eBV(n);const a=e.XpG();return e.Njj(a.letsDoThisNews())}),e.nrm(2,"p",7),e.k0s()()}if(2&s){const n=e.XpG();e.R7$(2),e.Y8G("innerHTML",n.btnTitle,e.npT)}}let y=(()=>{class s extends _.Z{constructor(n){super(n),this.injector=n,this.isDshbrdnws4=!1}ngOnInit(){i

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 2000x1181, components 3
Category:	downloaded
Size (bytes):	125774
Entropy (8bit):	7.880422197499796
Encrypted:	false
SSDEEP:	3072:F7fzyZDombWwotnVU1anrhq1Lt3fXKE/LVaIfb7N6XfAnzCxJ:Nfe3Sztn+14rhq1BBLVBb7ifAnur
MD5:	B01C190E5B0A0307C7BEE4CFC2EB69D0
SHA1:	3468C988D854A9898AFA79F04829FB986254F510
SHA-256:	996A46793952A8CE4303D54F24D7173F23D5E476445E8A1D4A2CEBBB8CCE4F6C
SHA-512:	0099D225EFA2D2DB5DBCEECBD6217365E11E5B8ECABA5D28BB7796B4BB73626912FD44A70340D8BAD63E58297D96C17F433A27D0B719B85FC91B351518EEF66D
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/getmedia/a1f01d8f-56be-4d2b-b8a2-46ef8e8b6de0/iStock-1285205214.jpg?width=2000&height=1181&ext=.jpg
Preview:	......JFIF.....,.,.....C..............................................#....!!!..$'$ &. ! ...C........... ... ..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....(...i..a..6.\R.DaK.\R."..Z.1...RSMe8\dTS...e..L3K.1EE....v`(4..3V.a.....u.:...\..`>.nh.T.!.RQN...R..R..4...k.L.........u..$..`...E..R..h.....(...(...(...(...(....(.....Z)(......(...(...(......)...iM4.2.(.......JJ....QP0..).....P!)..L4.e0..HDf.5)..R$a...mh..JJ.&kT.aII.\.$)sM.....Q..!.QO...)....5@:.QJ.QN.....u6...IE%0...S.$,*&.;...K....T..j.a..O4...b...0

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2186)
Category:	downloaded
Size (bytes):	62428
Entropy (8bit):	5.434909466624309
Encrypted:	false
SSDEEP:	1536:nygImrQ9lbiv3fG3K2cRGJKeARlXAnVYqkAKDS16nH:x1QzbivRRen9K
MD5:	32BC41D964FAA1B95D9C61FC443DF579
SHA1:	02D3F83DAC14FE996BABBFE332779ED182D39D1C
SHA-256:	369AE154EAB37B7ADA7776B934833183BB053EBD1D0255F70EF8944F65CABB0C
SHA-512:	45539D5A40BF03B25C6F4328C0D10BF62A1012FF9BE634877D62EC8A7FF35B25DD6CDC0FDFD5FCAE2E3D980B6E4BA653B259C099935D52A20E8B6581CCE521D5
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/charts/loader.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var l=ca(this);function p(a,b){if(b)a:{var c=l;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.p("Symbol",function(a){function b(h){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(h\|\|"")+"_"+e++,h)}funct

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 500x333, components 3
Category:	dropped
Size (bytes):	76073
Entropy (8bit):	7.89132309668626
Encrypted:	false
SSDEEP:	1536:NSjR75RjuESIa5J9TeTtU87V1sWmH6RTfK42zmGXp8LE115Y3Nm9THw:AHvSIwJcTtUqVQgTfKAGZ8o1ew0
MD5:	40C9126AAC0BCE122C9A30621F1667D2
SHA1:	74565359E6C6A317280C2FE8D93CB3DB7FE76301
SHA-256:	FEA97BA1618DBCB5AD46BD9C0E5E5D82B9FFFB76E95CC47E9F7DE90AB3E93A14
SHA-512:	4D8CAF0FF407BB12D647DA2D24D9AE6F84CBCDEF34C4AE37164396A63385E4921201CD5F2F1D179F6AA1F3A28C3C95743C30CB37CB08D964886A7B68C7BA5BE3
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,......Exif..MM.*.............................J...........R.(...........i.........Z.......,.......,.................`...........@..........Photoshop 3.0.8BIM..........i.7Young,Black,Couple,Using,Laptop,Sitting,On,The,Floor,At..n..Shutterstock..s..Shutterstock..t.SCopyright (c) 2018 Monkey Business Images/Shutterstock. No use without permission......1070766050...........http://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>..<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Image::ExifTool 12.38">...<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">....<rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/">.....<dc:description>......<rdf:Alt>.......<rdf:li xml:lang="x-default">Young black couple using laptop sitting on the floor at home</rdf:li>......</rdf:Alt>.....</dc:description>....</rdf:Description>....<rdf:Description rdf:about="" xmlns:pdf="http://ns.adobe.com/pdf/1.3/">.....<pdf:CreationDate>2018-04-17</p

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10687)
Category:	dropped
Size (bytes):	11680
Entropy (8bit):	5.911184398994319
Encrypted:	false
SSDEEP:	192:2IGIsmhP0zK1+UuNFa2h5z585PwcqewMoM/SuU05454wpwhaRLkoqUoRU6PzUT0w:lVsml+3NFa2hR29DLwzAfniC+7RLr1WI
MD5:	EE5D9E270C2E9C3ECEF4B12F4A6C3A06
SHA1:	5C2FA6F59553A6F173A5362BA74769D8A4C01FE2
SHA-256:	A2E1E44E63ED64F3314394862C787F15D8B2BD977F8708D1DC1756C8CBABA480
SHA-512:	325D09513B8FD9E5C4EAD1BB6E00857353531493ED5CA0941B6C7E000C158C9962B6133862A996C4570B018D550E424CBE8BD76F6E2C34CC35C7891A44984BBF
Malicious:	false
Reputation:	low
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. var rules = {. createHTML: function(src) {. return src;. },. createScriptURL: function(src) {. return src;. }. };. var ttPolicy;. . try {. ttPolicy = window.trustedTypes.createPolicy('google-maps-api-loader', rules);. } catch(e) {. ttPolicy = rules;. }. . function getScript(src) {. var a, nonce = ((a = document.querySelector("script[nonce]")) == null ? void 0 : a.nonce) \|\| "";. var s = document.createElement('script');. . s.src = ttPolicy.createScriptURL(src);. s.nonce = nonce;. document.head.appendChild(s);. }. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=992\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=992\

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.685492403125113
Encrypted:	false
SSDEEP:	3:9CMiSNDrHqTbTsixEmm0/rY:9XLBmTbTsSd/M
MD5:	1424AD4B9FEB9D0AF588DE01D5D8C904
SHA1:	9BC148A55B630B06A013A2C07D5B6D09EE17E02C
SHA-256:	2EB9A848F9AFDB96F3811A92DD3C0391E4CE967418117887E719081A46ABDF1D
SHA-512:	1E9EC812A172356F29DACF21BE8AEF5BC15DB63EF815F4A2061B71AFAA465D0EBD8B454D1FA3C9D6EA299ACF27D4C41F35A8FC7EDF1E0C7517BE93876A528D9D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkt4-DY5iR_8hIFDeeNQA4SBQ3OQUx6?alt=proto
Preview:	CjUKDQ3njUAOGgQIVhgCIAEKJA3OQUx6GgQISxgCKhcIClITCgkhQCQjKiUuP18QARj/////Dw==

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78685
Entropy (8bit):	6.020282308187139
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOIQbkhXwW5vxM:mGRFauOxLA/+IcTOuXK
MD5:	6AEC8CFD5D3A790339DC627F9F1229B5
SHA1:	B6C8CFFE38E1015DD8595F2DD1A92435E2795874
SHA-256:	80583FA3C83831A9E036EBA0500D1B9C0D30892D0701F1617E0FAFAF5AEAA2CA
SHA-512:	4279E479C860007D04CD6FF0B8C45131C18D87420CD5CEB5C727A7DDBFB4206D007069102D643DA97C3BF01D0B756A2EF4662C8E39B6969FC154DE3C763B1EFC
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	313417
Entropy (8bit):	5.584938561481229
Encrypted:	false
SSDEEP:	6144:b45tYnsmQ8pNZ1HcRCrKkEZMf3/zrfyMuT+bs+X:s5tm9pN7Hc80aPX
MD5:	9680504A3A058CDB7035077CD7A10389
SHA1:	0C235D726776094FCFACEAADE1C8E9A505BF1AE8
SHA-256:	D14B74EE352636DD349B4046C624527CEC18F9884BCABE4A037541041E6B2832
SHA-512:	0936A0F6B8A08E1609CBC0815C534C7254DBDF1272DEAE4A27264E4F59D00FE54790787D227FCEA96F2E523B9098321109B8210D1E460863658C1C98D18220CC
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":12,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57033), with CRLF line terminators
Category:	dropped
Size (bytes):	143253
Entropy (8bit):	5.04880831243031
Encrypted:	false
SSDEEP:	1536:W1+lm9En1d/Tezj1QJ73XFWK9IxPYqEilsee4eiRM1v89R5n9JlJYwkUmP:0hQJ73XFF4PYTOuKR5nr0YC
MD5:	B4B8438589EEF52D1DE6AA7561B4074D
SHA1:	78B6759BB6F812FC266C8631E612D938CCEF8C34
SHA-256:	328B0B4FAC3B70295894974E6067D4AF1FA8EA19F76B960CD9E52B8EE8069E57
SHA-512:	23760A210B27238E69B0F406A3E8FBE721AE44FCF00EF683B57FEECBD4A3E868048EF5E6ECD896F45D471CC7B85CD899DB98F5E51EF301D94E1963493ED86511
Malicious:	false
Reputation:	low
Preview:	window.kentico = window.kentico \|\| {};..window.kentico._forms = window.kentico._forms \|\| {};..window.kentico._forms.formFileUploaderComponent = (function (document) {.... function disableElements(form) {.. form.fileUploaderDisabledElements = [];.. var elements = form.elements;.. for (var i = 0; i < elements.length; i++) {.. var element = elements[i];.. if (!element.disabled) {.. form.fileUploaderDisabledElements.push(i);.. element.disabled = true;.. }.. }.. }.... function enableElements(form) {.. form.fileUploaderDisabledElements.forEach(function (disabledElement) {.. form.elements[disabledElement].disabled = false;.. });.. }.... function clearTempFile(fileInput, inputReplacementFilename, inputPlaceholder, tempFileIdentifierInput, inputTextButton, inputIconButton) {.. fileInput.value = null;.. fileInput.removeAttribute("hidden");.. inpu

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	94274
Entropy (8bit):	5.461471799761873
Encrypted:	false
SSDEEP:	1536:OdZRXT9M8NfrzS26nWU/j9FVkN7/NMZVnHIaJZV:4M0frAWU/j97ZVnHIaJZV
MD5:	D7419532EEFA731D1B6CE8622E74A77F
SHA1:	284F3F4C1722BC71221CA004736996AEAA074C34
SHA-256:	83BDBDD16A8F2E0D2C1C370164642765A2B9B292BE1C906132457E2F924D2DC4
SHA-512:	64DC155FF85ADE6A8C6819F129357692A5B7B678F2D80F796409344861188BA9C98BD3D7180FD78F0F372E57B2D60ADBAE07395FB02294B2039FD34C73C181F9
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/716.80bb3a5ff02d0706.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[716],{63854:(z,w,_)=>{_.d(w,{R:()=>X});var k=_(23279),a=_(50187),G=_(84692),i=_(4805);const e=["mapElement"],t=["mapMarkerDiv"],o=["mapMarkerHomeDiv"],D=["mapMarkerHighlightDiv"];let X=(()=>{class B extends a.Z{constructor(f,y){super(f),this.injector=f,this.resourceLoader=y,this.zoom=15,this.height=200,this.selectionChanged=new k.bkB,this.delay=0,this.delayIncrement=50,this.loading=!0,this.averagePropertyValue=0,this.aVMValue=0,this.markers=[],this.highlightColor="black",this.shouldCreateMap=!1}ngAfterViewInit(){let f=window.getComputedStyle(this.mapMarkerDiv.nativeElement);this.markerColor=f.backgroundColor,this.labelColor=f.color,f=window.getComputedStyle(this.mapMarkerHighlightDiv.nativeElement),this.highlightColor=f.color,f=window.getComputedStyle(this.mapMarkerHomeDiv.nativeElement),this.markerHomeColor=f.color,this.mapBounds=new google.maps.LatLngBounds,this.shouldCreateMap=!0,this.shouldCreateM

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5913
Entropy (8bit):	4.79240855955947
Encrypted:	false
SSDEEP:	96:YcjvcbtTyZ9z9Zva7zSMDPrDxDtvoz+H46Oww6oWWjhMKV:1uQFZypDnx9Bn+
MD5:	370DAF8605778E4C4D46BFD809C2DAAF
SHA1:	059560A1C517C601DDB3E0E4C5447A768FA1F1C0
SHA-256:	D9323653BA55784E9C985870E57CFFB3E810CDBE96518B07DA5830C0E3765241
SHA-512:	D02C5E5B20B04796959D9ADA4B79EDA7F79B4CFD178EF679ADE5214A98688D7BA3D51D1022658D0BB2B9A5C6985A8E410A4A35CCF9008AE66DED9BC170E95AFF
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/homebuyer-checklist_1.svg?ext=.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="49.193" height="63.869" viewBox="0 0 49.193 63.869"><defs><style>.a{fill:#007dc5;}</style></defs><g transform="translate(-555.009 -9.649)"><path class="a" d="M620.848,112.4H616.22a1.235,1.235,0,0,1-1.235-1.245v-2.231h-2.148v2.231A1.235,1.235,0,0,1,611.6,112.4h-4.628a1.235,1.235,0,0,1-1.235-1.245v-8.094a1.2,1.2,0,0,1,.363-.872l6.932-6.942a1.3,1.3,0,0,1,1.754,0l6.942,6.932a1.245,1.245,0,0,1,.353.872v8.094a1.235,1.235,0,0,1-1.235,1.245M607.12,111.149Zm9.246-.145H620.7v-7.886l-6.786-6.8-6.869,6.849v7.845h4.337v-3.466h5ZM613.813,96.228Z" transform="translate(-34.555 -72.248)"/><path class="a" d="M623.388,94.231H604.9a.737.737,0,0,1-.726-.726v-5.78a.706.706,0,0,1,.726-.716h3.943a5.344,5.344,0,0,1,10.595,0h3.953a.716.716,0,0,1,.716.726V93.5a.726.726,0,0,1-.726.726m-.706-1.453V88.451h-3.9a.726.726,0,0,1-.726-.726,3.9,3.9,0,1,0-7.793,0,.726.726,0,0,1-.726.726h-3.9v4.337" transform="translate(-34.578 -72.721)"/><path class="a" d="M596.521,89.21a3.53

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8721), with no line terminators
Category:	downloaded
Size (bytes):	8724
Entropy (8bit):	5.035000732018059
Encrypted:	false
SSDEEP:	96:vUcVor+6qZnB0ce/PYdmG7mdXmUcWR94Vss:loq6sTe/P2mGQQL
MD5:	7D2F07D4C73BDD2C030A5362CA770C2C
SHA1:	E02D8017470AD792B3BA637D3FE7A03160CADDA4
SHA-256:	BBA99EECFB85EE86B0C6F7DBEE21296241F3E147D8B21FE07E2F1D55A002346B
SHA-512:	01281A9231660E7B0F816D5C81C3D65E0116BDAAEC86360B46301BF455FC01C4E435E9638C2BD6C7969770141730733E8A912DE8489C403E956BE811A054C952
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/kentico/bundles/pageComponents/styles?v=LvgvfTmKo1fhX4g3xYTHB60npvVe4E6N5OqbdpUwDA01
Preview:	.fr-clearfix::after{clear:both;display:block;content:"";height:0}.fr-hide-by-clipping{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);border:0}.fr-view img.fr-rounded,.fr-view .fr-img-caption.fr-rounded img{border-radius:10px;-moz-border-radius:10px;-webkit-border-radius:10px;-moz-background-clip:padding;-webkit-background-clip:padding-box;background-clip:padding-box}.fr-view img.fr-shadow,.fr-view .fr-img-caption.fr-shadow img{-webkit-box-shadow:10px 10px 5px 0 #ccc;-moz-box-shadow:10px 10px 5px 0 #ccc;box-shadow:10px 10px 5px 0 #ccc}.fr-view img.fr-bordered,.fr-view .fr-img-caption.fr-bordered img{border:solid 5px #ccc}.fr-view img.fr-bordered{-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box}.fr-view .fr-img-caption.fr-bordered img{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}.fr-view li img.fr-dii.fr-fil{margin-right:20px}.fr-view{word-wrap:break-word}.fr-view span[styl

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49701), with no line terminators
Category:	downloaded
Size (bytes):	49701
Entropy (8bit):	5.4636202136439955
Encrypted:	false
SSDEEP:	768:w46/Mggg+0fmXjsfYmZNR7syfyR1VzCP1uCoychBge819PS+OBKsa0wkImH7BGz4:cpfYmlbyRAAnCByzreuy1DZ9e
MD5:	44A7BDBECBEBC40409F4290BE1CAF4E5
SHA1:	B37283093F15388D88B95FBE3F19D9D32F347D87
SHA-256:	22B75B469796F3E8F48E67C99C4349D147EDAD3AEE5118F80CBD747D6F3BDD1F
SHA-512:	CAFDA8E02CAEBFB122C8940E2024FBB26AB612302832655DBF02200774DEBB843ED5E2A65B21009EBE9491C66F5DE923C90E50A49DE7B753E81DBEBC59D372A3
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/781.522f62b8dd57fdd6.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[781],{59781:(je,b,o)=>{o.r(b),o.d(b,{SecureMessageModuleV2:()=>we});var m=o(56610),w=o(57936),j=o(37440),F=o(95565),c=o(37222),S=o(61480),_=o(50187),u=o(50327),p=o(8301),T=o(43239),d=o(50213);class v{static notEmpty(a){return"string"==typeof a.value&&0===a.value.trim().length?{notEmpty:"Text must not be empty"}:null}}var e=o(23279),y=o(98278),f=o(72221),G=o(26182),E=o(24587),x=o(29344),k=o(66865),M=o(84993),R=o(58445),C=o(47309);function I(s,a){if(1&s&&e.nrm(0,"i",43),2&s){const t=e.XpG(3);e.BMQ("aria-label","Default "+t.replaceStandardTerm("Loan"))}}function V(s,a){if(1&s&&(e.j41(0,"mat-option",41),e.EFF(1),e.DNE(2,I,1,1,"i",42),e.k0s()),2&s){const t=a.$implicit,r=e.XpG(2);e.Y8G("value",t),e.R7$(),e.E5c(" ",r.lnAstricks,"",r.getLast4(null==t?null:t.LoanIdentifier),"\xa0\xa0\xa0(",t.PropertyAddress.AddressLineText,") "),e.R7$(),e.Y8G("ngIf","sso"!==(null==r.configInfo?null:r.configInfo.AuthMode)&&t.Bo

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2095
Entropy (8bit):	5.040842149707784
Encrypted:	false
SSDEEP:	48:3JrVJANWgN4ScNqcVNQ3LxWxT0u+XxhVjL7vqsS0VMweF:3JrVet2HhOL8xT0D/7vhSa1A
MD5:	5BCC3D30ABAFCA11FAC5EB72C9283430
SHA1:	E5043EDCF5945E71854348AF50DF8462CB754477
SHA-256:	8423CE113B1BD31ED6ACB06D953E739B521DE21817713F17C1388624CE1753C5
SHA-512:	DB5274AE42927B3C1B4F837BC79C4251C9F7326FBAE3E871D3CB3D4F58FF0843A94B6E2E42273D8FAB8C7FD5EFB88E9CAFAFCD4D421AC3F9E6D2198B72898632
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/Content/script/owl.support.js
Preview:	/*.. Support Plugin.. .. @version 2.3.4.. * @author Vivid Planet Software GmbH.. * @author Artus Kolanowski.. * @author David Deutsch.. * @license The MIT License (MIT).. */..;(function($, window, document, undefined) {.....var style = $('<support>').get(0).style,....prefixes = 'Webkit Moz O ms'.split(' '),....events = {.....transition: {......end: {.......WebkitTransition: 'webkitTransitionEnd',.......MozTransition: 'transitionend',.......OTransition: 'oTransitionEnd',.......transition: 'transitionend'......}.....},.....animation: {......end: {.......WebkitAnimation: 'webkitAnimationEnd',.......MozAnimation: 'animationend',.......OAnimation: 'oAnimationEnd',.......animation: 'animationend'......}.....}....},....tests = {.....csstransforms: function() {......return !!test('transform');.....},.....csstransforms3d: function() {......return !!test('perspective');.....},.....csstransitions: function() {......return !!test('transition');.....},.....cssanimations: function() {......ret

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41440), with no line terminators
Category:	downloaded
Size (bytes):	41440
Entropy (8bit):	5.4310865272583895
Encrypted:	false
SSDEEP:	384:WnJC0gIfhnibHCOnISlJImN3nDrBZxwW4zTJPi9j49Bi/HoK/Jxa3TjihP1KDnw/:WGCO9lx3n6TJPuc9Bi/zIl9qZ7f
MD5:	55F413417823E516E1C5ED701ED65262
SHA1:	8A6390966AAEC825878441D629E567AE782A267B
SHA-256:	E83C23A2FD2C32A9623DE14EA105DA2A949285B458F45DF6F6C44DB23CC8DB17
SHA-512:	89F6E7AF3A20181864A92D965A7E3D0B0BB3E43F44032C0CC24270F512C007581CA4E19488343460CA396CB71B5AB88B16440BE6761FE6F6087D778891B4DDCA
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/325.6acceb6542b8d769.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[325],{32325:(at,_,l)=>{l.r(_),l.d(_,{RequestMortgageAssistanceModule:()=>ot});var r=l(56610),h=l(57936),C=l(37440),R=l(95565),f=l(37222),v=l(61480),p=l(50187),e=l(23279),M=l(61448),D=l(84993),k=l(77232),S=l(32940);function I(n,a){if(1&n&&(e.j41(0,"div"),e.EFF(1),e.nI1(2,"titlecase"),e.k0s()),2&n){const t=e.XpG(3);e.R7$(),e.SpI(" ",e.bMT(2,1,null==t.loanContacts?null:t.loanContacts.MailingAddress.MailingAddressLine1),"")}}function T(n,a){if(1&n&&(e.j41(0,"div"),e.EFF(1),e.nI1(2,"titlecase"),e.k0s()),2&n){const t=e.XpG(3);e.R7$(),e.SpI(" ",e.bMT(2,1,null==t.loanContacts?null:t.loanContacts.MailingAddress.MailingAddressLine2),"")}}function F(n,a){if(1&n&&(e.j41(0,"div"),e.EFF(1),e.nI1(2,"titlecase"),e.k0s()),2&n){const t=e.XpG(3);e.R7$(),e.E5c(" ",e.bMT(2,3,null==t.loanContacts?null:t.loanContacts.MailingAddress.MailingCity)," ",null==t.loanContacts?null:t.loanContacts.MailingAddress.MailingState," ",nul

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 44185
Category:	downloaded
Size (bytes):	5833
Entropy (8bit):	7.9720784906286815
Encrypted:	false
SSDEEP:	96:ZazHwGakyU7CMFOpoqPpurN2jQcmwqQo33rF4D+ZjsPtvbGDlg+UWmCgOm2POes6:ZqRCM2od2jYUo33R4qCtvbzWmgmrp6
MD5:	724C294DD5B1945CF445E64B523412B6
SHA1:	4EBD1735BC32E413C48B1D49BC99F2DEACCA0DAF
SHA-256:	AA4BADBC3EA6AC0FBA03D1950F4272B18473340618761900714A29180380D2FE
SHA-512:	0CA67CA1727404EC0C75A9F6C3E5CEF117624276430686D875F9D0517CBF08AAEFB371EAA27C50906FDC343C6ACF6EE4CAE763F586571DF09C2652312946C000
Malicious:	false
Reputation:	low
URL:	https://sdk.apptentive.com/v1/styles/styles.css
Preview:	...........=.n.8.....j...XYy...f..{.=/=;....C)1..RJ9..G5j.}...#HIy....n;S...... ..W.....h..I^.O...<../..`.;.'..E]... .../_.b..i.z..G...;.?.[U&v.Q.........G.....HaV..$...q..en.......x..EN.k..].D^..Q.n.:-.0.B.c....Kv%.@..-.e.n..1\..!QE.4..]..L.G.).vy-H.t..D....&..$.(...[x.VuT."........pS$.~U..Q....?......d.5....,[FN.t...p2...`.R.1R>..$.<&.r9..2...'R.i.eC..+.F.o.yS...9M..}....H..2....D.Qm8.<..5..k.>.......n...8Rc0.H.ntya..(.R.e...J ,.....KP.....V....UP..].....u...%...:.....`I...L..J...'.`S....h.\|\F....u........w.....Uc.z[m..M.sz[...u0.P]H.G.5.I...r.......`V..E.O.f[.u....)...f..s....c...,......Y....K..0J.......?'..}.....G~1.r....._a.......F$....m}...]..#.9... .a.E..!..U..O....#_4....\|M.=FJ.GOQy.6........,J3.....K.B%..P.5......M..D.u.:.J.%.. ...D1}.A.)..R.A..;....~..r........jo...W.}.e.So.3w.!}..g....C...}.}}o.]o....:..&*...$>.......r.....w.9.`...m..}..N..3.s.l.%..8:..N.... ....Yj.J....m.F.b.?.#.V.r.>../.Af../......N.[nR.....U.nK.\|.W.l..f.[

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5305), with no line terminators
Category:	downloaded
Size (bytes):	5305
Entropy (8bit):	5.4844247424999235
Encrypted:	false
SSDEEP:	96:Lf4J1LB0QiSAm0RSkPcjDpIW6UrFtlv8hccfiXj5+M06p10ASSgyifLx:03UeDpI2BtlEGz5+Mh5u9
MD5:	AAEB92ABC60635A7CF287EE85C274BB1
SHA1:	B553A0EBCF02F522918C33A9222BED5F605C7D23
SHA-256:	BB54C0796F11F83807A43FA39E063015C0385F62160BEB9B9B7EA34B88501A5E
SHA-512:	1FCB93F6DAA1E1E941C3852D05D99BDCDB8AF827856389C1CD98DA8C6ACC2C3BB126D1790F4838B201002B6E15056D0AEB3ADCEB90595EFA6A3162DE5B54FAE5
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/532.976b547f081893aa.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[532],{12783:(h,d,i)=>{i.d(d,{D:()=>E});var o=i(50213),m=i(50187),_=i(93473),e=i(23279),s=i(56610),l=i(72221);function M(t,u){1&t&&e.nrm(0,"img",12)}let r=(()=>{class t extends m.Z{constructor(n,a){super(n),this.linkoutService=a}ngOnInit(){super.ngOnInit(),this.myHomeCareModalTitle=this.configService.getFeatureContentTitle("MHCAREBTN","MHCAREBTN_MODAL"),this.myHomeCareModalSection=this.configService.getFeatureContentSectionWithImages("MHCAREBTN","MHCAREBTN_SEC1")}hideModal(){this.analyticService.userActivityEvent(o.LW.cancel_my_homecare_service_request,o.Ld.MyLoan,this.analyticService.getEventContext()),this.analyticService.googleAnalyticsEvent(o.Fg.my_homecare_cancel_service,o.t5.Loan),this.closeModal()}proceedToHouseHappy(){this.analyticService.userActivityEvent(o.LW.proceed_my_homecare_service_request,o.Ld.MyLoan,this.analyticService.getEventContext()),this.analyticService.googleAnalyticsEvent(o.Fg.

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59765)
Category:	downloaded
Size (bytes):	60044
Entropy (8bit):	5.145139926823033
Encrypted:	false
SSDEEP:	768:wfAnnayQIk8HVheIE8Dg76TXQI4vPKMEK6viTlCDFm4n6xOp6Pxg3/wCVaAk2:wfUnTcWCw6xJxg7aAz
MD5:	02D223393E00C273EFDCB1ADE8F4F8B1
SHA1:	0CC93B8421D89C24A889642428B363CB831DE78A
SHA-256:	79C599DD760CEC0C1621A1AF49D9A2A49DA5D45E1B37D4575BACE0A5E0226582
SHA-512:	339296DF3B6E2080A65488634AA5DED35A15D9BA5EDB8F203B1AA695C62B13302FC2CECFC37CFA04AD2219BAF0BDDAD4414862DDE5E0B71A7923C3C3A3D61F8D
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function o(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function s(){return(s=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&Objec

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10314)
Category:	downloaded
Size (bytes):	273936
Entropy (8bit):	5.4043946771380895
Encrypted:	false
SSDEEP:	6144:BuKC6ZzYr9ID9NgYCsGsRtOshIU+R6kksn2r/I/WMP3en6E6:BuKC6ZzY5IDoYishIU+Ukksn2r/I/WMf
MD5:	3D3762B29E9E79978081A747B52BC225
SHA1:	9B8B64216438DB38565D010223C3086FAFA9CAE1
SHA-256:	249E85B9792CDFB9CE084D58830B251BEFB8FBEB9DAE85FD252A3B252DE6897F
SHA-512:	CC895DA9796BC8AB6BAFA221B8455C28A634E92A90AA3B38B6707AF9C9B3D724427CE8C9B6FC3632BD0F4C02138A9D1BA31492A74D33A0DAC851BF7AA23E3349
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/59/3a/common.js
Preview:	google.maps.__gjsload__('common', function(_){var Yja,Xja,$ja,fka,mka,nka,qka,Or,rka,Pr,ska,Qr,tka,Rr,Ur,Wr,vka,wka,zka,Aka,Cka,Fs,Eka,Gka,Hka,Qs,Lka,vt,Tka,Vka,Uka,Zka,$ka,cla,dla,ela,$t,fu,jla,gu,ju,kla,ku,lla,nu,rla,sla,vu,tla,ula,kma,lma,Jma,Nma,Oma,Pma,Qma,Rma,Xw,Vma,Yw,Wma,Xma,Zma,ana,$ma,cna,bna,Yma,dna,fna,hna,pna,tna,una,Dna,Bna,sx,tx,Fna,Gna,Hna,Ina,Kna,Lna,ax,bx,ena,$w,tw,cka,Mna,dka,ina,eka,jka,lka,Rna,Sna,Tna,Una,Vna,Ax,Jv,Yna,Zna,$na,Ika,Ks;.Yja=function(a){const b=[];let c=a.length;var d=a[c-1];let e;if(_.bh(d)){c--;e={};var f=0;for(const g in d)d[g]!=null&&(e[g]=Xja(d[g],a,g),f++);f\|\|(e=void 0)}for(d=0;d<c;d++)f=a[d],f!=null&&(b[d]=Xja(f,a,d+1));e&&b.push(e);return b};Xja=function(a,b,c){a instanceof _.th&&(a=a.Ll(b,+c));return Array.isArray(a)?Yja(a):typeof a==="boolean"?a?1:0:typeof a==="number"?isNaN(a)\|\|a===Infinity\|\|a===-Infinity?String(a):a:a instanceof Uint8Array?_.Ac(a):a instanceof _.Jc?_.Vc(a):a};_.Zq=function(a){return!!a.handled};._.Zja=function(a,b){functio

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1279
Entropy (8bit):	5.043314298006345
Encrypted:	false
SSDEEP:	24:4yHM+OKUqBFrJ43snqtcFtFUc82h4OKUO3/O1VwwJKPIiNRKLt61D:THozqBlTqtc7p3yIJSD
MD5:	8A1DB2E2853E16E74B363EAC4B84621D
SHA1:	EE8C2606150C53A2C81BACE77C94CB17E76DE59D
SHA-256:	E683A56F42FB7D4E5AC16277FF30AB69BF8CE6338E2D630C966E15D1FF0BB0F1
SHA-512:	53E8839262BB7E47DA6C3AC27F288812C0684A793FAEEB85071BB62FDB2E827A887D10F0E2D72D19097D506542F504EF9EF8B40EF6197D9AF36B73907AB4EC75
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/Content/styles/owlcarousel-theme.css
Preview:	/.. .Default theme - Owl Carousel CSS File.. /...owl-theme .owl-nav {.. margin-top: 10px;.. text-align: center;.. -webkit-tap-highlight-color: transparent;..}.....owl-theme .owl-nav [class='owl-'] {.. color: #FFF;.. font-size: 14px;.. margin: 5px;.. padding: 4px 7px;.. background: #D6D6D6;.. display: inline-block;.. cursor: pointer;.. border-radius: 3px;..}.....owl-theme .owl-nav [class='owl-']:hover {.. background: #869791;.. color: #FFF;.. text-decoration: none;..}.....owl-theme .owl-nav .disabled {.. opacity: 0.5;.. cursor: default;..}.....owl-theme .owl-nav.disabled + .owl-dots {.. margin-top: 10px;..}.....owl-theme .owl-dots {.. text-align: center;.. -webkit-tap-highlight-color: transparent;..}.....owl-theme .owl-dots .owl-dot {.. display: inline-block;.. zoom: 1;.. display: inline;..}.....owl-theme .owl-dots .owl-dot span {.. width: 10px;.. height: 10px;.. margin: 5px 7px;.. background: #D6D6D6;.. display: block;.. -webkit-backface-visibility: v

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3408), with no line terminators
Category:	downloaded
Size (bytes):	3408
Entropy (8bit):	5.492968161369872
Encrypted:	false
SSDEEP:	96:sFSlWahHzRE9xiV7Vs9TYS4MIsu+Mp3yXefGM:sF6hHGDi9mVYvXs50OM
MD5:	7917ADCABDF1A46E6E5BBAA091DE226D
SHA1:	DB458B4ECF269EAF4557E831675A8FB591BF3712
SHA-256:	0736C24908BB7CF50D3388608B3C21630C7D37BBDE76C56F63C92F3120AA2B83
SHA-512:	732A68F4AFA27F8EBF7C15A5AF523AE45E4647F83E8CABC44BDC04001FBFBF811A336F9E4D8276B30C1C1A93390A0B518AC6DA9D11E1233DC71462CBD407708C
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/runtime.703b6736fb2c9821.js
Preview:	(()=>{"use strict";var e,v={},g={};function a(e){var n=g[e];if(void 0!==n)return n.exports;var r=g[e]={id:e,loaded:!1,exports:{}};return v[e].call(r.exports,r,r.exports,a),r.loaded=!0,r.exports}a.m=v,e=[],a.O=(n,r,i,d)=>{if(!r){var t=1/0;for(f=0;f<e.length;f++){for(var[r,i,d]=e[f],o=!0,c=0;c<r.length;c++)(!1&d\|\|t>=d)&&Object.keys(a.O).every(p=>a.O[p](r[c]))?r.splice(c--,1):(o=!1,d<t&&(t=d));if(o){e.splice(f--,1);var l=i();void 0!==l&&(n=l)}}return n}d=d\|\|0;for(var f=e.length;f>0&&e[f-1][2]>d;f--)e[f]=e[f-1];e[f]=[r,i,d]},a.n=e=>{var n=e&&e.__esModule?()=>e.default:()=>e;return a.d(n,{a:n}),n},a.d=(e,n)=>{for(var r in n)a.o(n,r)&&!a.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})},a.f={},a.e=e=>Promise.all(Object.keys(a.f).reduce((n,r)=>(a.f[r](e,n),n),[])),a.u=e=>e+"."+{10:"bf367f9955f02ef0",67:"4b11134a3977a2e1",77:"ec1ceb5dff6d9299",113:"22107a236e0a837f",127:"4db69428b5b9ca5e",136:"aedaf5153678dc31",203:"210081cca82a28a0",204:"60b4a89c5008cd37",325:"6acceb6542b8d769",359

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1000x666, components 3
Category:	dropped
Size (bytes):	163486
Entropy (8bit):	7.915785467990164
Encrypted:	false
SSDEEP:	3072:S1TPT2D3LTxM0gJFYLaXyeGi61ZDoPxRGgYWRaryDGqoRIHrUH/xjLQRvmCP:SxUvx8TA8lxIZDWxRYWoOoRL6ROq
MD5:	18E677CCF68BC250AFF3B4C8D7F51B40
SHA1:	F8F59B3E6B05F0952C9DF0F8E4C58D53A5CF4EE7
SHA-256:	00548B1A172D0C1B9CB620A008FBA27F76E4821A365E1FA2BC79DA7C648F44AA
SHA-512:	CE1A052A05F80CC8E34417BA47AB66D32DAB992CEDA9F0A14F59D338037B584B9B2ABF20029A069EB9ABD108C8D1893AE44CED5A84A7BF779D09D8F6410E97DA
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,......Exif..MM.*.............................V...........^.(.......................i.........f.......,.......,..............0210....................0100..............................................Photoshop 3.0.8BIM............@self employed,woman,business,ethnicity,mature,work,one,american,..i.<Happy,Mature,Woman,Working,On,Laptop,At,Home,Office.,African..n..Shutterstock..s..Shutterstock..t.NCopyright (c) 2021 JLco Julia Amaral/Shutterstock. No use without permission......1987574105............http://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>..<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Image::ExifTool 12.16">...<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">....<rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/">.....<dc:description>......<rdf:Alt>.......<rdf:li xml:lang="x-default">Happy mature woman working on laptop at home office. African woman sitting at desk and using laptop at home.</

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54456)
Category:	downloaded
Size (bytes):	54641
Entropy (8bit):	4.712564291864468
Encrypted:	false
SSDEEP:	768:SuV31Uz1RPq4NvvU63HJYkQCZ/WMQyjJKp7CzsGnQzU:SuczrC4NnzHSBCkgu7cs1w
MD5:	251D28BD755F5269A4531DF8A81D5664
SHA1:	C0F035B41B23C6E8FAB735F618AA3CFF0897B4F9
SHA-256:	AFDC6BF2DE981FFD7D370B76F44E7580572F197EFBE214B9CFA4005D189D8EAE
SHA-512:	8111F411C21C6011644139DBA4EF24D1696C0F6D31E55CE384E0353A0F3E65402170C502BDDF803C3DF9149C371B31C03F77BE98FDBC61C0C9C55AFBE399681F
Malicious:	false
Reputation:	low
URL:	https://use.fontawesome.com/releases/v5.7.0/css/all.css
Preview:	/!. Font Awesome Free 5.7.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa,.fab,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pull-lef

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (366), with CRLF line terminators
Category:	downloaded
Size (bytes):	193030
Entropy (8bit):	4.575441576528984
Encrypted:	false
SSDEEP:	1536:5Y1ufIJuvuegxlyXaADd0FrjJNWUD77+HrKm+m:61ugJuvueQyXal7+Hmm
MD5:	E9C87D33FAA8C94812D69641E07D7958
SHA1:	EB7A34FAF1BF4C53CE6387EC233F89ED236BF03F
SHA-256:	B24BFAB101F5CF703B645B354DA8E7C47EA89F3220F573CBDBDE60EE2ECC6DA0
SHA-512:	854FAD9D6394F464BDDB43496D7137D9D9FCAB1FBE03C007F69A0529B84634AAE09D53C7609D7209B6EE5E675CF277E53C67D25F7AA21DD9F1600472BA5B903C
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/Content/styles/MQ-styles.css
Preview:	.@font-face {.. font-family: gothamLight;.. src: url("../fonts/Gotham/Gotham-Light.woff");..}....@font-face {.. font-family: gothamMedium;.. src: url("../fonts/Gotham/Gotham-Medium.woff");..}....@font-face {.. font-family: gothamBook;.. src: url("../fonts/Gotham/Gotham-Book.woff");..}....@font-face {.. font-family: gothamBold;.. src: url("../fonts/Gotham/Gotham-Bold.woff");..}....html {.. scroll-behavior: smooth;..}....body {.. font-size: 16px;.. font-family: gothamBook;.. color: #000;..}....@media screen and (max-width: 900px) {.. body {.. font-size: 13px;.. }..}.....sectionbg {.. background-color: #F3F4FB;..}.....cardshadow {.. -webkit-box-shadow: 0px 0px 18px rgba(0, 0, 0, 0.06);.. -ms-box-shadow: 0px 0px 18px rgba(0, 0, 0, 0.06);.. box-shadow: 0px 0px 18px rgba(0, 0, 0, 0.06);..}.....btnoutline:focus {.. outline: none;..}.....mortgagelogin {.. background-color: #007DC5;.. color: #ffffff !important;.. border-

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 1209x1209, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1300x258, components 3
Category:	downloaded
Size (bytes):	21744
Entropy (8bit):	7.566206974754159
Encrypted:	false
SSDEEP:	384:dqYMxkCDV5wHHhX34uDkmnO4oV5Y6lvWVKej3D9xq5lCr3:dqlLkNnY5Y6lvX+9xr3
MD5:	D9D80D797CF9C91F59C03C3D0562445B
SHA1:	78595B4DEE4DD25248ADAC9E1803AFF0E87A33A8
SHA-256:	C9283633ADCD900B1C1327F7BD4B9A64AE565A97A1611B29B5CC6359A84F0458
SHA-512:	F1B865F65248BB78B3F9ABB5AB42F455169DF8F92B0FD431D9FF7045D624A29829B373242003AAD128450E39193AE2D69416CEF88B0C10A9DE6C78D236C2AAED
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/App_Upgrade_home8.jpg?ext=.jpg
Preview:	......JFIF............."Exif..MM..........................C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...IW..ZZ\|.T.#X...c....3......,....,...6.\6.'.;].....[}.J..33n?..r...._...?.Eukq5.....W..U.M?.uA..o/.^....a...s....`........f.%_....__A.._....4_\|......:.......k.?.T......R..%.G...0~.\|.=<.novG.o.\.....W..x..I.I..i.v....`;...b..Bt.#..b.._..,g.z.#.......b....J..}'....P..I.j".RPj.QN.<..u.t....................A..(.....:o..V-...Oog.U

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	151895
Entropy (8bit):	5.3272479992092165
Encrypted:	false
SSDEEP:	3072:xSjA9b/wWvjbpv5z+EuuQMG34cWWPWbed:xSjA9b4Kjtvo9lMG34cWWP3
MD5:	07C7E372A599AF9DFE6F4B82C0F81017
SHA1:	E13E16B587E982016D43105BC203BC75F79270B5
SHA-256:	51F88E33955855D7CFB229A6C67E0CF21920268ED44DFEA94CD8F857848F58F5
SHA-512:	183EC84111AD58E1B709A61DB9D02497BB6FBEE021ADED5213407DFA9710F81D853A4B07E1A5EB4988325F740012A1E8C06E7BA2E135218EEFA7BB36633A9844
Malicious:	false
Reputation:	low
Preview:	!function(R,Ae){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=R.document?Ae(R,!0):function(oe){if(!oe.document)throw new Error("jQuery requires a window with a document");return Ae(oe)}:Ae(R)}(typeof window<"u"?window:this,function(R,Ae){"use strict";var oe=[],f=Object.getPrototypeOf,le=oe.slice,ye=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},G=oe.push,xe=oe.indexOf,Me={},N=Me.toString,Be=Me.hasOwnProperty,_n=Be.toString,et=_n.call(Object),q={},Q=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},ue=function(e){return null!=e&&e===e.window},M=R.document,Yt={type:!0,src:!0,nonce:!0,noModule:!0};function Kt(e,n,o){var u,d,p=(o=o\|\|M).createElement("script");if(p.text=e,n)for(u in Yt)(d=n[u]\|\|n.getAttribute&&n.getAttribute(u))&&p.setAttribute(u,d);o.head.appendChild(p).parentNode.removeChild(p)}function Se(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	583
Entropy (8bit):	4.99417154895903
Encrypted:	false
SSDEEP:	12:t4IFC/Bc4RUAHdFLVXjQkvjO0SFyiq8LD8c6xMjf:t4IF8BnRRHdFxuRFxLQcQMT
MD5:	7DE4F31DD3496EC89A24AE49A8439B51
SHA1:	E1C307031EFBBA3A917D69B1D81C46D1F9754D99
SHA-256:	4B957023FBE2A6325A82E5B94F71CC6A1F58F7585A4378047570B16634FA2F95
SHA-512:	20162266A956FB2496F25C008C9016680A3BF705D4D220DCFBA8AC12FDC185A908BA5794D0D74A09FBC47698D7F3FF17A8A57A46466E2BDAD2497697086A7AAA
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/Content/images/header-right-arrow.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="18" height="14.25" viewBox="0 0 18 14.25"><defs><style>.a{fill:#fdfefe;}</style></defs><g transform="translate(0 -53.333)"><path class="a" d="M17.971,60.6a.375.375,0,0,0-.082-.409l-6.75-6.75a.375.375,0,0,0-.53.53l6.11,6.11H.375a.375.375,0,0,0,0,.75H16.72L10.61,66.938a.375.375,0,1,0,.521.539l.009-.009,6.75-6.75A.376.376,0,0,0,17.971,60.6Z"/><path class="a" d="M17.625,246.343H.375c-.207,0-.375-.253-.375-.565s.168-.565.375-.565h17.25c.207,0,.375.253.375.565S17.832,246.343,17.625,246.343Z" transform="translate(0 -185.324)"/></g></svg>

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.8035671313969885
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKFcM6Qaxp3T2TjWaee:PLKdXNQKFtaxZT2TjL
MD5:	C206147C7CAE99642A4F8A2C640A0019
SHA1:	8C32B7B7E0807BBE85E5C8C94F87AFEA31EEDC40
SHA-256:	6F55ADBECCE78B9C566F8DC830177DC91782702FF35F213F009FC2B902E25603
SHA-512:	0D94AA53B801AC69A9BB4A7DF4FC0E00B6FFD1C5668A6FEE4EFC11986B7F516EB27A8A0197C0106A4295ACD5F63C222EA2F1BD9431BF2D689672AC91C5528EB6
Malicious:	false
Reputation:	low
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	4684149
Entropy (8bit):	5.6657771575513936
Encrypted:	false
SSDEEP:	49152:N90SKb3vNruSz7WI0IT1NX4bwV7uDfm7y2/QUOei30HCAQ3mkMMuDJk39sH02kh8:30Su3vNruSz7WI0IT/7y2/QUOei30LOm
MD5:	096170ED451F5A5BB848DD3B5B983F3A
SHA1:	F779B34C348EF63D5A2FA74B75ACA2779D66B1C5
SHA-256:	D317A2F5C8DC332C3365B08E9618A3975DD091D617FC3B7EE2BC5377402CADFE
SHA-512:	B537763A075A1E5AB7C0A7AA0DDDD1190C288A299E13A8A74B2F91751A72E6AEDCFF40B1BF5B4FEE65F13058B5C508F47F870B5436A7C364ED43B9B8496F1FAD
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/main.5ae79adb947e0038.js
Preview:	(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[792],{92551:function(Ae,K,o){var i;Ae.exports=(i=o(73049),o(36462),o(1896),o(29614),o(66417),function(){var e=i,C=e.lib.BlockCipher,h=e.algo,d=[],m=[],g=[],l=[],u=[],c=[],E=[],D=[],S=[],x=[];!function(){for(var J=[],F=0;F<256;F++)J[F]=F<128?F<<1:F<<1^283;var re=0,ce=0;for(F=0;F<256;F++){var pe=ce^ce<<1^ce<<2^ce<<3^ce<<4;d[re]=pe=pe>>>8^255&pe^99,m[pe]=re;var Ce,Q=J[re],ze=J[Q],Re=J[ze];g[re]=(Ce=257J[pe]^16843008pe)<<24\|Ce>>>8,l[re]=Ce<<16\|Ce>>>16,u[re]=Ce<<8\|Ce>>>24,c[re]=Ce,E[pe]=(Ce=16843009Re^65537ze^257Q^16843008re)<<24\|Ce>>>8,D[pe]=Ce<<16\|Ce>>>16,S[pe]=Ce<<8\|Ce>>>24,x[pe]=Ce,re?(re=Q^J[J[J[Re^Q]]],ce^=J[J[ce]]):re=ce=1}}();var Y=[0,1,2,4,8,16,32,64,128,27,54],U=h.AES=C.extend({_doReset:function(){if(!this._nRounds\|\|this._keyPriorReset!==this._key){for(var F=this._keyPriorReset=this._key,re=F.words,ce=F.sigBytes/4,Q=4*((this._nRounds=ce+6)+1),ze=this._keySchedule=[],Re=0;Re<Q;Re++)Re<ce?ze[Re]=re[Re]:(J

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	70923
Entropy (8bit):	5.350993168791548
Encrypted:	false
SSDEEP:	768:EbTR/dlOlV6K0jlLiqfNravf87e+3wvjLiNUK8jWqulMrURTVgWPe7La0EakIG+d:EbTtdOyjlNZeES4aCmEPeVEapGYwS
MD5:	7446AD95EFFB27D9C6418D90DD52429F
SHA1:	324CECA2B43E3214FEB85361F0237744885ACC68
SHA-256:	FEE57E41FA7E20F46D03AD9F20BC4506DAD32B15CC06B27693ECFD7BA23D230A
SHA-512:	56469414DE539E6016E3E9EFC100D21F6B3E3084696727DA9D4CA684C62FF73775E9C4310F1D40907210731EF93413AB64E202114869B2915969EDAFECE1B135
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[651],{36651:function(jn,mt,Ai){var Qe;jn=Ai.nmd(jn),function(){var o,sn="Expected a function",ke="__lodash_hash_undefined__",ne="__lodash_placeholder__",tt=1/0,qn=9007199254740991,Cn=4294967295,vl=[["ary",128],["bind",1],["bindKey",2],["curry",8],["curryRight",16],["flip",512],["partial",32],["partialRight",64],["rearg",256]],_t="[object Arguments]",re="[object Array]",Wt="[object Boolean]",bt="[object Date]",ie="[object Error]",ue="[object Function]",Ei="[object GeneratorFunction]",xn="[object Map]",Pt="[object Number]",bn="[object Object]",Ti="[object Promise]",Bt="[object RegExp]",An="[object Set]",Ft="[object String]",fe="[object Symbol]",Mt="[object WeakMap]",Ut="[object ArrayBuffer]",pt="[object DataView]",nr="[object Float32Array]",tr="[object Float64Array]",er="[object Int8Array]",rr="[object Int16Array]",ir="[object Int32Array]",ur="[object Uint8Array]",fr="[object Uint8ClampedArray]",lr="[object Uint16Ar

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2532
Entropy (8bit):	4.806919805861742
Encrypted:	false
SSDEEP:	48:c6gKGb1dTvEZIepQAEIi1bLBf+uCO2+X3niyMg2pxruM:QR1dwEIEJBCl+XXjIzd
MD5:	81F05788C1B38527A74543D18BD9591D
SHA1:	180E84EB5F4385510AB2533AA7EDAB0FFCB7D995
SHA-256:	2C190FA563949366296BC68EE0B4C6C7A0478F46A72918F9217B9A93BE736347
SHA-512:	BA61009DEA9DC76757A1882A8DB2C7B9AF2808D84A5067FDD78D1859F72F89A9A3D79F40D4AFD5A735B74A8EF3E2CCE9CE037CAB8EE26044D37D9E633739914A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="20px" height="14px" viewBox="0 0 20 14" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 52.5 (67469) - http://www.bohemiancoding.com/sketch -->. <title>Visible</title>. <desc>Created with Sketch.</desc>. <defs>. <polygon id="path-1" points="0.000194108705 0.245833333 19.8404167 0.245833333 19.8404167 13.3332917 0.000194108705 13.3332917"></polygon>. </defs>. <g id="Visible" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="visable_off">. <path d="M9.919,8.94570833 C8.73108333,8.94570833 7.76483333,7.97945833 7.76483333,6.79154167 C7.76483333,5.60154167 8.73108333,4.63320833 9.919,4.63320833 C11.1069167,4.63320833 12.0731667,5.60154167 12.0731667,6.79154167 C12.0731667,7.97945833 11.1069167,8.94570833 9.919,8.94570833 M9.919,2.96654167 C7.81191667,2.96654167 6.09816667,4.68279167 6.09816667,6.79154167 C6.

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=14, height=800, bps=0, PhotometricIntepretation=RGB, description=Loan concept. Young couple holding a white miniature house, orientation=upper-left, width=3810], baseline, precision 8, 3810x800, components 3
Category:	downloaded
Size (bytes):	168182
Entropy (8bit):	7.267729512284729
Encrypted:	false
SSDEEP:	3072:rrd2vHqZSH+9HTmmMmBMQVL3tpMPFSSXnilpCUy8+3:fd4hSTMmBMQVrt0XnilT63
MD5:	39824C4480D544C72E9B11CCEA1C4C14
SHA1:	9D29B9F35024D5EFCE26D3D80908DA2EF7EE56A4
SHA-256:	F5701A668AA61D33DE6835D68D3BE38F289EDAF0ADE3BB3C6BC9A77D01A0E563
SHA-512:	C7835146B9096E6E94D09EFBC4F5FB18C716D6376417F489FD4DC9EAF2AA153ABAB004AF9FC3E5812745C7B76DAB68840144105687564CC027F7750C21A04397
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/shutterstock_234728809d.jpg?ext=.jpg
Preview:	......Exif..MM.*........................... .................................;.....................................................(...........1...........2.........&.......D...:.i....................Loan concept. Young couple holding a white miniature house..-....'..-....'.Adobe Photoshop 23.4 (Windows).2022:09:09 15:57:59.Copyright (c) 2014 baranq/Shutterstock. No use without permission..............0231.................................. .............................................(.................................c.......H.......H..........Adobe_CM......Adobe.d................................................................................................................................................."...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	408
Entropy (8bit):	5.212379163907344
Encrypted:	false
SSDEEP:	6:tI9mc4slzdnIQeAHh7S90BNURUvdGo7FqvdGoi1W2Pxftp8r25+iKy4vTtf2jire:t4zI0Hd/4RULFqS9+2oy4vkji3FVi
MD5:	A579EF78B8A07A32E8BF7C11A8706491
SHA1:	551A2E53B43EF993EF68E8499E86641BF2540439
SHA-256:	1E0A52512433EC70B2B88A15E5593FD026ECF314EC7AA7C3BA9E3A9B7D5608E5
SHA-512:	B8A0892EAFD913383C91F7F53AC1CE3BDE990E80F0D836EDA73B8EBC3DEE0218B2F892521A338E7DCA167F235601FF3D0504D9B6F1325AD8F17C41A107455F2D
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/Content/images/nextarrow-covid.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="5.128" height="9.52" viewBox="0 0 5.128 9.52"><defs><style>.a{fill:#f6f7fd;}</style></defs><g transform="translate(-102.297 0)"><g transform="translate(102.297 0)"><path class="a" d="M107.318,4.5l-4.4-4.4a.366.366,0,0,0-.518.518l4.137,4.137L102.4,8.9a.366.366,0,1,0,.518.518l4.4-4.4A.366.366,0,0,0,107.318,4.5Z" transform="translate(-102.297 0)"/></g></g></svg>

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	419
Entropy (8bit):	5.169071389004767
Encrypted:	false
SSDEEP:	12:t4MBB4guq+4RULFqS5ej1WNGxQUbAL3FVi:t4MBB4guaRWF3qcNU63Fg
MD5:	E1F0F9C28378EFA0FA49CB6C5E7D013A
SHA1:	B623B7296BAC1C69E15911FB30D21CABFCE56F2E
SHA-256:	A3490D8EA5E00D6C68F40A304C5B6BB30FB3E796B3C5F54EC75F871733EB7CEE
SHA-512:	B18195EBEF607E81EFB7E5C2BB40B372DA25744E381943C49CD85E65B399619D5C5DD5E8A8C6F0AC686F4633242F08F0E7F4FBD60B8EE539F5C036ACC04ADA8B
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/Content/images/next.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="5.411" height="10.045" viewBox="0 0 5.411 10.045"><defs><style>.a{fill:#333;}</style></defs><g transform="translate(-102.297 0)"><g transform="translate(102.297 0)"><path class="a" d="M107.6,4.747,102.957.109a.387.387,0,0,0-.547.547l4.365,4.365L102.41,9.386a.386.386,0,1,0,.547.547L107.6,5.294A.387.387,0,0,0,107.6,4.747Z" transform="translate(-102.297 0)"/></g></g></svg>

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 122002
Category:	downloaded
Size (bytes):	28232
Entropy (8bit):	7.992341488219618
Encrypted:	true
SSDEEP:	768:2ruUrqOoI8gKbV4moJtdrijtxl7DiX654dyZKskm:4qD7JV43ix/7EWKsh
MD5:	10666DB45BC960408B88C28F31FAC175
SHA1:	DA9AED7F3638AF5BF1351F44EA70A7228421B598
SHA-256:	946F539457136E416776AFB0BA67910CAC35F8E4212B4F0691F12C28DAFF296D
SHA-512:	B8FE2AEDACE2192F6DD98060E1D4A48D160D642654E7828D257B11341824A2AF8028FFA8BE0B0B8681DB4E167D6EC4649F36B862B7E58C5F0F06CE973039D460
Malicious:	false
Reputation:	low
URL:	https://sdk.apptentive.com/v1/sdk.min.js
Preview:	............r.X.0...V.tA.T.3;K6._uU....6....h).<.0....V..B.......eo..\|..G8.v.m......<...H.......~.....C6...f5+....6.Xz.(.u^.Q......z...p0.fU..,.......9{U./....1$A..".z..f.i.S....>..U....y...G...XL..]...,8aSV3.`S...........!..8..d.Z.oN...u..+.V.....)+..h]../.....?+...Q.,...+X.JT.fo{.C.O.....<.;....e3...U.l.R.......0.E....>..!.S,-~...M.D....'Y..K.Y..8.a=+.Xd./..R........4.:...7.{.l^1.0/.{r......H,.l^.e}=c...z.x;/gl^_...iT'!.'.7/O...a;....E......I.Z.(xVN.y.....<..V.WAQ.A.0.`..s.>8+.WY.... .z...N.E1agy.&.V.....Vg{.!...C.~..alp.W....9.z..\.......X.......L.......O.K....f....H5....?...Q..U.......C..]Gj..8..kg#....n..v.{.d_.x.}.....}.<.....\|.._.B....%.q.....>......0a8(.>Gm...>@4...K.....f.,....g.%.....2...bv:.4J$uS..=...<+...@z4...I....GbC.-...5....N.N.....&.....-.mm.^......:...Nb9O.._ }g.i-PSa/g....3...P......U..M.1..d?N..E.P\|.].........hl......I.U_77G........).....^..m...>...8.n.F.u...E.g&..Z..7.:..$..W......c,W.f.u..]'....u.

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 74316, version 329.30932
Category:	downloaded
Size (bytes):	74316
Entropy (8bit):	7.997047050204256
Encrypted:	true
SSDEEP:	1536:FmpHVNed2v9kA6Tqjrqpah6g+SHQ9aKYFAinzbKH6XrneR4ah:Fmp3ed2v9zjrqpRSwQFAsbK6eZ
MD5:	52134B924FD61958F88323845DEFFC64
SHA1:	CFCCDF2C8BE593220EA949989A5ABC0B380EA2AC
SHA-256:	658CF43DB24E9D4C57890E958AA74656A13139754DE24F19E706F0A355279E4D
SHA-512:	C95CC6CAF6C00079D72B565F929EF2AFDE882B3CA5EB40FB07BF6BE97507DD3AA76F31281B383AF21CD54F4934104BF6D29859949B1E32E4657F347AAA91D56F
Malicious:	false
Reputation:	low
URL:	https://use.fontawesome.com/releases/v5.7.0/webfonts/fa-solid-900.woff2
Preview:	wOF2......"L.......p..!..Ix.....................?FFTM....`...........:.6.$..$..,.. ..%.._[.@....S..HoV.k.(.2.Q.....U........6........M.b.......F..e.......cT..b...Z.... .\|rP.....tH...Y....G....Fhok<Gh....>\......eJ...V...D.".....r...lX-......"....@)..A....)...@D "..}.s.g.C8.(.....m..h...#..........M..w&....4.1.M8S.JTb21..L..k;9.'.......f.].Q.=k.....Lr...b....y..j}B.{...;!...a]..}.0.......`g.G.e.Zg..o;.^........b/....16.V/t.%G..rx~n.._.....`.`..}V....Fm.()..L..........q.g4..^.g\..s.6<..f.'.<".g.b...j....F..".%@...w..,.-.#.[ !...:.'/..P.....&Y.z................,.......U...A..p..A..)..(....~.:..rU..n}\.......E....J6..$hY....)}.2........:~.X..:..I..r......ZU..U.._U..5.K..:8... ..E2...:.p......0... ..e%.t..........B.\|P%.....G...Q1...........q6......@......Q......Vj..d....(q..........L..W1/..K.P..v...J.....D..k.. ......ZJ....Dxm....-..........G.7].E...pvb.!..%.....Y..P.g0B.\........t.AC..!...C....f......bcm..9.ZV.`...A..=.....j./]

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3000 x 753, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	661830
Entropy (8bit):	7.974995215160677
Encrypted:	false
SSDEEP:	12288:LWQzVO4gekOoJSkewTvC+7ZyA8LZrUGbA4K+ejEyrz1QMc5brvQkIDb:L7zE4gekbhfDC+7MA8LZrTje7P1QM6f8
MD5:	6AE8C8C7D52BF828E539D4FCA0899E4A
SHA1:	0DB2EB4E029A9973ADD42D40C23DE9C92DE5D833
SHA-256:	7F22671678D9D8EA631DD05A3EBD2C4CCB1C0931E985593BEC95D61236D11F63
SHA-512:	294EFC3DDA23A4E8F400B79946B7AAF767164E6D317844A2A538F47F709BE2ABEB050F78B7A0D86E61C1ABD4504BE2398C2800422D211817F3E0E50FB33F4034
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/MQ-Background45.png?ext=.png
Preview:	.PNG........IHDR.....................sRGB.........gAMA......a.....pHYs..."..."........iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5, 2022/05/09-07:22:29 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.4 (Windows)" xmp:CreateDate="2022-05-10T13:29:34-05:00" xmp:ModifyDate="2023-05-30T11:26:14-05:00" xmp:MetadataDate="2023-05-30T11:26:14-05:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:d1f0d65a-a259-6e41-97d1-bf43506fc394" xmpMM:DocumentID="adobe:docid:photoshop:c00c3808-744b-1241-ae23-d3abe74b4b1a" xmpMM:Origi

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	dropped
Size (bytes):	86959
Entropy (8bit):	5.251894241992128
Encrypted:	false
SSDEEP:	1536:U7khn1KLiK+6a+gx1Lh+CNsAlxJd97f48WF/xTLw03XR3c8h4DZwCp:HX/+CWE/4TLw03Bx4wCp
MD5:	DF90194413117476ACB1693DCA99FAEB
SHA1:	7CCA30AF7E30A98B1EA8228DF054087A7F189D4D
SHA-256:	174AE13B9457AEA32B20EF28E726E7CBF023775C914760FB777B60152AC451F9
SHA-512:	04AE8FD24306452F217A079F63CEA14F0D83BF92CD40940EDD86DFF727EDDCCBDC082E906CE929E3492065151E1AC9AD2604922159F229562AA4828430CA10D9
Malicious:	false
Reputation:	low
Preview:	!function(n,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=n.document?t(n,!0):function(n){if(!n.document)throw new Error("jQuery requires a window with a document");return t(n)}:t(n)}("undefined"!=typeof window?window:this,function(n,t){"use strict";function nu(n,t,i){var r,e,f=(i=i\|\|u).createElement("script");if(f.text=n,t)for(r in le)(e=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&f.setAttribute(r,e);i.head.appendChild(f).parentNode.removeChild(f)}function et(n){return null==n?n+"":"object"==typeof n\|\|"function"==typeof n?oi[dr.call(n)]\|\|"object":typeof n}function ki(n){var t=!!n&&"length"in n&&n.length,i=et(n);return!e(n)&&!ft(n)&&("array"===i\|\|0===t\|\|"number"==typeof t&&0<t&&t-1 in n)}function s(n,t){return n.nodeName&&n.nodeName.toLowerCase()===t.toLowerCase()}function we(n,t){return t?"\0"===n?".":n.slice(0,-1)+"\\"+n.charCodeAt(n.length-1).toString(16)+" ":"\\"+n}function di(n,t,r){return e(t)?i.grep(n,function(n,i){return!!t.call(n,i,n)!=

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12012), with no line terminators
Category:	downloaded
Size (bytes):	12012
Entropy (8bit):	5.382777500124146
Encrypted:	false
SSDEEP:	192:ZghXg7ID08QkjGhC4vDSYGcWDDoRZYC/9U94ohq+Myyrnv:Zf7ID08QkqhbDF2DoRrEq+iv
MD5:	4037A1F0A10744478611B1B369C05530
SHA1:	BF73E2B868C85E73A6D89DCA2C84F1E33F8E7D23
SHA-256:	311B5C87C19C120D51E8B6DE89443CE08688407C9D02AD46B6863261C463E10C
SHA-512:	7148BE7BA3C6ADBB2ADCADF9F8B81B3188F44A0C6758069730AACEDA53EFEBE5BC97B17B6804881D7CF7F4BE23C1E9A45E3C6F33EF782FF9D2FA5DCD1959D8D6
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/136.aedaf5153678dc31.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[136,997],{63854:(v,c,l)=>{l.d(c,{R:()=>m});var a=l(23279),s=l(50187),t=l(84692),u=l(4805);const _=["mapElement"],d=["mapMarkerDiv"],f=["mapMarkerHomeDiv"],g=["mapMarkerHighlightDiv"];let m=(()=>{class h extends s.Z{constructor(i,e){super(i),this.injector=i,this.resourceLoader=e,this.zoom=15,this.height=200,this.selectionChanged=new a.bkB,this.delay=0,this.delayIncrement=50,this.loading=!0,this.averagePropertyValue=0,this.aVMValue=0,this.markers=[],this.highlightColor="black",this.shouldCreateMap=!1}ngAfterViewInit(){let i=window.getComputedStyle(this.mapMarkerDiv.nativeElement);this.markerColor=i.backgroundColor,this.labelColor=i.color,i=window.getComputedStyle(this.mapMarkerHighlightDiv.nativeElement),this.highlightColor=i.color,i=window.getComputedStyle(this.mapMarkerHomeDiv.nativeElement),this.markerHomeColor=i.color,this.mapBounds=new google.maps.LatLngBounds,this.shouldCreateMap=!0,this.shouldCre

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1500x689, components 3
Category:	downloaded
Size (bytes):	96938
Entropy (8bit):	7.901038492580623
Encrypted:	false
SSDEEP:	1536:df+2IrRfsH9QWS6jP15qre1CfmbuIj62LHRKW/gEXQrSCBCGWyPmS/0+rL2XWHe:81VEddKre1Lf621KW/gJ+CIAPvD+Ae
MD5:	F869756D214AFF606F4DF6F7C2899CA4
SHA1:	CB4B401CEA253A8C8CD3DDD332FF6C589F25B841
SHA-256:	D4C820D188A23C3DCE87A16900307BDC93C3F88B0D8CB2653C0C2CB9D32A7DAE
SHA-512:	E12113502C2643FB124D78A6CC4C2080F1B49A4D8B6BE0DDFFA450EEF18AE81D71C82E2A6ABD087748BDCA702499D22D6527CE2D54952968BF36C4C9E89214D5
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/shutterstock_1662151927.jpg?ext=.jpg
Preview:	......JFIF.....,.,......Exif..MM.*.............................V...........^.(.......................i.........f.......,.......,..............0210....................0100.......................o......................Photoshop 3.0.8BIM..........i.>Close,Up,Young,Man,Hand,Pressing,Calculator,With,House's,Model..n..Shutterstock..s..Shutterstock..t.ICopyright (c) 2020 chainarong06/Shutterstock. No use without permission......1662151927............http://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>..<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Image::ExifTool 12.38">...<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">....<rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/">.....<dc:description>......<rdf:Alt>.......<rdf:li xml:lang="x-default">close up young man hand pressing calculator with house's model and mail letter for check and summary expense of home loan mortgage for refinance plan and invoice monthly concept</rdf

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	dropped
Size (bytes):	242460
Entropy (8bit):	5.572325952912454
Encrypted:	false
SSDEEP:	6144:9b2YzT5agwtlj8J80jHHb5M6MsgAgyomU+NYiZBEAmQl93LqfwvT0oUAKAxdWEN:9b2YzT5agwtlj8XjHHb5M6xgAgyomU+9
MD5:	478E3305589332DDC238EE3EA07808F5
SHA1:	B00F76C0A64ADE72623D6EB597C7B19BCF25F1F8
SHA-256:	113588507DB2107CD3B88A3C0C926D9084926D762C3348DA257CE266D5A23D42
SHA-512:	A9EECC2C5B6839574DFD8F97681AC039E6A7252B3C8C02847B15DF688B7B9C8A6D21359AAC1F9F4D399776F47A9042E7E6B0C28C56C4F884D00C18974895AE35
Malicious:	false
Reputation:	low
Preview:	(function(_){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2019 Google LLC. SPDX-License-Identifier: BSD-3-Clause././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause././..Math.uuid.js (v1.4).http://www.broofa.com.mailto:robert@broofa.com.Copyright (c) 2010 Robert Kieffer.Dual licensed under the MIT and GPL licenses../.var aaa,na,pa,oa,ta,caa,daa,Ia,Pa,Sa,Qb,Rb,eaa,gaa,Gc,Ic,haa,$c,Yc,ad,iaa,laa,hd,kd,ld,md,oaa,od,raa,uaa,vaa,Caa,Aaa,Baa,yaa,zaa,Eaa,Faa,Gaa,Haa,Iaa,re,Kaa,Jaa,Maa,Laa,Oaa,Naa,Paa,Qaa,te,Raa,Saa,Taa,Yaa,ff,bba,eba,Zaa,dba,cba,aba,$aa,fba,lf,gba,lba,mba,oba,rba,Cf,vba,Lf,wba,zba,Aba,Xf,Wf,Sba,mg,ng,og,pg,Uba,Vba,Zba,Wba,Yba,sg,Ag,$ba,aca,Eg,cca,bca,dca,Gg,fca,gca,hca,ica,jca,lca,nca,qca,Kg,Mg,Ng,oca,pca,tca,Qg,Ug,Vg,uca,Xg,Wg,vca,xca,zca,Dca,Fca,Eca,Gca,Ica,Mi,Pca,Oca,Tca,Uca,nj,Wca,Xca,Yca,ada,$ca,.bda,cda,wj,Zca,dda,Tj,Zj,jda,rk,l

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	419
Entropy (8bit):	5.169071389004767
Encrypted:	false
SSDEEP:	12:t4MBB4guq+4RULFqS5ej1WNGxQUbAL3FVi:t4MBB4guaRWF3qcNU63Fg
MD5:	E1F0F9C28378EFA0FA49CB6C5E7D013A
SHA1:	B623B7296BAC1C69E15911FB30D21CABFCE56F2E
SHA-256:	A3490D8EA5E00D6C68F40A304C5B6BB30FB3E796B3C5F54EC75F871733EB7CEE
SHA-512:	B18195EBEF607E81EFB7E5C2BB40B372DA25744E381943C49CD85E65B399619D5C5DD5E8A8C6F0AC686F4633242F08F0E7F4FBD60B8EE539F5C036ACC04ADA8B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="5.411" height="10.045" viewBox="0 0 5.411 10.045"><defs><style>.a{fill:#333;}</style></defs><g transform="translate(-102.297 0)"><g transform="translate(102.297 0)"><path class="a" d="M107.6,4.747,102.957.109a.387.387,0,0,0-.547.547l4.365,4.365L102.41,9.386a.386.386,0,1,0,.547.547L107.6,5.294A.387.387,0,0,0,107.6,4.747Z" transform="translate(-102.297 0)"/></g></g></svg>

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1880)
Category:	dropped
Size (bytes):	141572
Entropy (8bit):	5.542270901378846
Encrypted:	false
SSDEEP:	3072:Ig1gE80sgr0SURoz7ak5bPJBJxx4vncyHgrU:Nl80saaobPJT4vncyHr
MD5:	74245970E061E3D4D0E8B2E3B0A33494
SHA1:	8BB6902BEA6D407393227D4BEEC34C11F4A2F07B
SHA-256:	FE67208F19B72CC7F3285BB2B3FCF9C412B5341B4FB5861B384D882E19A4B0E4
SHA-512:	9EA4B101338098B5EF7A37520D56A33613D916E13E835497E2D032537D4E4C6AE5664D56AB975E47870F79F3422ED02CC6EFBA9A036BFC49B2F6C9CC7163F1C7
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[],. "tags":[],. "predicates":[],. "rules":[].},."runtime":[ .]..,"blob":{"1":"1"}.........};.....var aa,ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},fa=function(a){for(var b=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global],c=0;c<b.length;++c){var d=b[c];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");.},ha=fa(this),ia=function(a,b){if(b)a:{for(var c=ha,d=a.split("."),e=0;e<d.length-1;e++){var f=d[e];if(!(f in c))break a;c=c[f]}var h=d[d.length-1],l=c[h],m=b(l);m!=l&&m!=null&&ea(c,h,{configurable:!0,writable:!0,value:m})}};.ia("Symbol",function(a){i

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 31728, version 0.0
Category:	downloaded
Size (bytes):	31728
Entropy (8bit):	7.987483710263458
Encrypted:	false
SSDEEP:	768:4fRSKbgeQXT9mL6RQO8Vq36ErTd938HFGndZgw:40KbaXToLUQO8Vq38w4w
MD5:	0AA8A6F6243D023CBDAA19B9D43C2FBE
SHA1:	B902FF82A9B8DC473F58E3FAC48B244930799746
SHA-256:	887D7EC088C82A8D96342F943FF7CF9D03D37FDBE487865C363412D778695143
SHA-512:	15343CD56632BA1BC22D87F4AA1E3CC56856DBED6FCD7B4495845B9BFB8BE4F546664537E57695939D63A745C51B55741457000E4B99C0EFDDCF31613F541B45
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/Content/fonts/Gotham/Gotham-Book.woff
Preview:	wOFF......{.......".........................FFTM..{.........u.b.GDEF..k`...N...Z.q..GPOS..q...."..=.....GSUB..k........h...9OS/2.......M...`gG;.cmap...............Ggasp..kX............glyf...<..TC...`f!..head...X...6...6....hhea.......!...$...@hmtx...$.........D.loca...t...........maxp........... .?..name..`....4....W..post..c...........P......33Z..._.<............~.....\6Q.H...F..............x.c`d``K...8.s.?...n.@.d...........x.c`d``\|.p.A............\|..0....x.c`ba`te`e``..j...(.../2.11 .........0......R..../.q..:.7@.l...+.....3..%.....x..}dUa....9.n.d.#.I%I.d...Q.E...k.k...z...1..L...V.+.c&.....2.d...N,....u.-.>..y.s.y.....}.+$A......6..i.W.[Pc}...O2N#.5.s..Y.....>.8b..R.#......7H.E8.....\|."....M.\|.1r..P..22....U...z....ZCV!..u.....P..J.B^}..G...\|~,...g.....T..@U.%...V.a..q.9.....jV...F.+X..y.......u.i.=....r.t...G..f3..9........sV". ..N...c......T.>lP{.f..{7.P.N?N..W]...>.}N....{.)g.....N%..n;..J.:...$..*.7....n.....=Y..MBD.mF\<..h....."...?.w.2.=.

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18596, version 1.0
Category:	downloaded
Size (bytes):	18596
Entropy (8bit):	7.988788312296589
Encrypted:	false
SSDEEP:	384:h5D5WUhNanar/Z19V6iGCYIqoPfHwfr13GPgqbrxremyFKKWB:h/NaOrBGCYIBPfQD1xqPhl
MD5:	C83E4437A53D7F849F9D32DF3D6B68F3
SHA1:	FABEA5AD92ED3E2431659B02E7624DF30D0C6BBC
SHA-256:	D9BADA3A44BB2FFA66DEC5CC781CAFC9EF17ED876CD9B0C5F7EF18228B63CEBB
SHA-512:	C2CA1630F7229DD2DEC37E0722F769DD94FD115EEFA8EEBA40F9BB09E4FDAB7CC7D15F3DEEA23F50911FEAE22BAE96341A5BACA20B59C7982CAF7A91A51E152F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......H...........H=................................\|.`..J.H..<........>..Z...x.6.$..0. ..~. ..)...%.m..t.D<...U.c....D....@........@e..a..R./<...p..q..q....S<.nm...X..(ER....e.....O.?Q_..FYH......ml.E..?;X0>.f.Y.,.n.a...._h8c.006U.cS..3.m.Or..I9..5.;.=..'!..c.O...W.K..f....k..&Xq..Y?.r...%.S..y.:q.......uD.d.R..'..Q,L.... e`..=?.{...e%{.....3+$.....NkF2...... ._}..2]....,.F.u.S4O.~w).G..../]}6.nVwKj.h@........5.7P....i..r........U?.........q..Cm......g...\.zu.....P..\|....5G$...4k$..L..g..".y..?..6...O...e..@..0TYh..v........M.....#B...O.i.G$.Bq..m.A.s~...A...c.....25K.....B..<..w.A....G.O...A......A,y"q....q<....N..{Ta..!.\|vzo.;9.5>.>....7I.i.Ld.4..y...].g.....'m_(...O-..}.K.(....R..2.q.z9.D..]..$.#$.:x..:{..m.OF...K[J. ......lpH.#%V....4.;l.<..J.6.T..a...I..\|..zj.k.-...y...#..e.1,s....<.HX.....z{L....'.$. "..tY..m.<.\8P. a.......x.W\.b.%...RA.\.... M.......v1......#...............`.c..%.Nc.d.qP.68....$<.O.S_7...U.].jn>@.3.c..wO..>.>a.qg....\..kb.

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1629)
Category:	downloaded
Size (bytes):	24811
Entropy (8bit):	5.552969684145338
Encrypted:	false
SSDEEP:	384:sG1cWavMK5uJYJ4pMv5KKjdvcJBQnx+wpaKoYi0:/taUdwDXswpaZH0
MD5:	23C6F16903FE7D4B4C68BD9AE55B78B4
SHA1:	60B0D741AFF75EB878E19547DC1A97ED7D891C10
SHA-256:	9AD0D8BF9E4659EB773EC937A69B25C1E8869B17C43ACD258F01E268F0194088
SHA-512:	4CD789A9C985816F7F19AC4A3D9639318F6CD532072F063C2C489C3C116FC96CAB29D650EE20651A6864F08A5E51B829B7A3E8A86FA6901F6C4A82A756CA0504
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/charts/51/js/jsapi_compiled_graphics_module.js
Preview:	var gvjs_Qo=" 0 0 1 ",gvjs_Ro="0%",gvjs_So="100%",gvjs_To="BUTTON",gvjs_Uo="SELECT",gvjs_Vo="TEXTAREA",gvjs_Wo="background",gvjs_Xo="baseline",gvjs_Yo="blur",gvjs_Zo="chartArea.bottom",gvjs__o="chartArea.height",gvjs_0o="chartArea.left",gvjs_1o="chartArea.right",gvjs_2o="chartArea.top",gvjs_3o="chartArea.width",gvjs_4o="circle",gvjs_5o="clip-path",gvjs_6o="corners.bottomleft.rx",gvjs_7o="corners.bottomleft.ry",gvjs_8o="corners.bottomright.rx",gvjs_9o="corners.bottomright.ry",gvjs_$o="corners.rx",.gvjs_ap="corners.ry",gvjs_bp="corners.topleft.rx",gvjs_cp="corners.topleft.ry",gvjs_dp="corners.topright.rx",gvjs_ep="corners.topright.ry",gvjs_fp="datatable",gvjs_gp="datum",gvjs_hp="defs",gvjs_ip="discrete",gvjs_jp="ellipse",gvjs_R="end",gvjs_kp="feComponentTransfer",gvjs_lp="feGaussianBlur",gvjs_mp="feMergeNode",gvjs_np="fill",gvjs_op="fill-opacity",gvjs_pp="fill.color",gvjs_qp="fill.opacity",gvjs_rp="fillColor",gvjs_sp="fillOpacity",gvjs_tp="filter",gvjs_up="finishAnimation",gvjs_vp="font.

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2000 x 1174, 8-bit/color RGB, interlaced
Category:	downloaded
Size (bytes):	915125
Entropy (8bit):	7.998133183564552
Encrypted:	true
SSDEEP:	12288:x9H0WTwxE++TR3MYmlpOhw3lfRyRx4oMqheuZPnHdyBaj2uSp7Y6srzy/P1t7g0m:jUW8xy8pOh6LKeuVnpUsJqYw/PjTL4
MD5:	F02F32674830DC064C43BAE8F45C34B1
SHA1:	9364D76544CEC76F5D2530121800FFE6F32D9E6B
SHA-256:	EBA9BBB57DF023618E4C31DBCB13EC5953A4D4CDE3D041DF7D886F8045CB5232
SHA-512:	2C72BEF64D5DB47E5B3DA2DD83F6871F6C48D821D6F9945C0A634B0E2838266376A82E7B89A0E122C3D5F1BD4FE6CDAC775747C07928D2A55DDB42FBA5CB9E8F
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/getmedia/51975178-32b0-44bf-babc-5af804f69e62/WereOnity5.png?width=2000&height=1174&ext=.png
Preview:	.PNG........IHDR................T....gAMA......a....KiCCPsRGB IEC61966-2.1..H..SgTS..=...BK...KoR.. RB..Ti........@...."....q....."..A...y.(..(6T....}..7o....9g..}>.F`.D....dJ....<6..'w..T ...@.-.................m@..n....8..P.....$......B....2r.2..2...t...%..[.....j..;e.O..v.$....(S*.@..@&.......X......`.(..s....`....`....).d....`...S......GE...3.(...x.W\!.S...d..T.n!...\].x.87C.P........ee......3...FvD.....9;.:;.8.:\|...........?........E..............e..../.....B.._......T.B.fg...k+..m.._......_.....................2..r<[&..q.?......wL..'..b.P.GK..i....$.I...H.........k.`.~..B[P..... ..%....w......1...w..0....h....................4P.6h.>....#..;x...P..8X.BH.L.C.,.UP.%...B..Z..F8.-p.........<.^...0.o`.A.2.DX.6b..".#.Ef!~H0...!.H."E..Rd5R..#U.^....9..E.!=.=...F~C>...@..j..\...B...h....G...h%Z..B.......>G.0....3.l0...B.x,..c.b......6.....b#.{..."....;!.0. $,",'..........B.a...$....nD>1..B.%..+.u.c...[.......!..\H..8R.i......D:C.!....d.6..A.%...r.y;...

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23507), with no line terminators
Category:	downloaded
Size (bytes):	23507
Entropy (8bit):	5.470056177596567
Encrypted:	false
SSDEEP:	384:T+l8kYviQidKeGqDrERb5oVkWn3yzYXU73a0dPdeaSOhhKhuJOTCt0knB6+BkYCr:TUQiUeGqDr6byVkWn3ycE73a0hdeaSOM
MD5:	BD93FB329CB8F8C259FD25CEF4711F6B
SHA1:	4EBC7E7AF4454CBE88A5723BB8557A63658E33C0
SHA-256:	3E0080DEEB48333B56B6E8EBF50F7581E5243921E7ED110BB564AEEB45DD9195
SHA-512:	E617DB2C616F9C5B17275974EB5B9BAEFA27B67C7EB5E9A65901603B658E6308979B79F8D79FCE4B7F05DBBC0719414C61A120B7DFDDA00960F49126F43ED029
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/67.4b11134a3977a2e1.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[67],{60662:(F,_,r)=>{r.d(_,{H:()=>rt});var v=r(50187),y=r(58082),d=r(50213),b=r(54153),t=r(23279),f=r(76098),V=r(86482);let u=(()=>{class a{constructor(e,o,i){this.sanitizer=e,this.propertyService=o,this.dialogRef=i,this.qrCodeUrl="#"}ngOnInit(){const e=this.propertyService.avmReportResponse.value?.QRCodeContent;this.qrCodeUrl=decodeURIComponent(this.propertyService.avmReportResponse.value?.QRCodeURL?.replace("https%3A%2F%2F","")),this.imagePath=this.sanitizer.bypassSecurityTrustResourceUrl(e)}close(){this.dialogRef.close()}static#t=this.\u0275fac=function(o){return new(o\|\|a)(t.rXU(f.up),t.rXU(b.X),t.rXU(V.CP))};static#e=this.\u0275cmp=t.VBU({type:a,selectors:[["bki-dashboard-propertyinfo-avm"]],decls:30,vars:3,consts:[[1,"card__content","avm-qrcode-panel"],[1,"container-fluid","secondary-regular-background"],[1,"row","pt-3"],[1,"col","text-center"],[1,"fa-stack","fa-3x"],[1,"far","fa-camera","fa-stac

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18288)
Category:	downloaded
Size (bytes):	18908
Entropy (8bit):	5.6255223057698815
Encrypted:	false
SSDEEP:	384:dVtfxzksuna6B3+9A/CY3DCcdye4PCwEnaeXsLRKyuHX/5:VKRai5HPIeaeX1yM
MD5:	0240AA22895CF57CB91160E784542720
SHA1:	F50652CCC59E7556511178A2A6BF92407D2E0955
SHA-256:	5DEEC06E184F7D97048A4A0D9A182105700484EBAC0C804A58A4BFAE84B843B1
SHA-512:	C4CADEB4398EB472EEF4989627E74C8CC9A80A1045F2C01E3DCFA63D20B52901223F90AB0A0F6F13833F627A0A5C4BBDDEB86CA9F4A2972654F881B2DF4B1879
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/Xe7AbhhPfZcEikoNmhghBXAEhOusDIBKWKS_roS4Q7E.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var U=function(p){return p},G=function(p,b){if(!(p=(b=null,B).trustedTypes,p)\|\|!p.createPolicy)return b;try{b=p.createPolicy("bg",{createHTML:U,createScript:U,createScriptURL:U})}catch(e){B.console&&B.console.error(e.message)}return b},B=this\|\|self;(0,eval)(function(p,b){return(b=G())&&p.eval(b.createScript("1"))===1?function(e){return b.createScript(e)}:function(e){return""+e}}(B)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var H=function(p,b){for(b=[];p--;)b.push(Math.random()*255\|0);return b},C=function(p,b){b.J.splice(0,0,p)},e_=function(p,b,U,B,Y){function r(){}return B=(p=$q(p,function(v){r&&(b&&bb(b),Y=v,r(),r=void 0)},(Y=void 0,!!b)),p)[1],U=p[0],{invoke:function(v,W,E,e){function G(){Y(function(X){bb(function(){v(X)})},E)}if(!W)return W=U(E),v&&v(W),W;Y?G():(e=r,r=function(){bb((e(),G))})

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=14, height=800, bps=0, PhotometricIntepretation=RGB, description=Loan concept. Young couple holding a white miniature house, orientation=upper-left, width=3810], baseline, precision 8, 3810x800, components 3
Category:	dropped
Size (bytes):	168182
Entropy (8bit):	7.267729512284729
Encrypted:	false
SSDEEP:	3072:rrd2vHqZSH+9HTmmMmBMQVL3tpMPFSSXnilpCUy8+3:fd4hSTMmBMQVrt0XnilT63
MD5:	39824C4480D544C72E9B11CCEA1C4C14
SHA1:	9D29B9F35024D5EFCE26D3D80908DA2EF7EE56A4
SHA-256:	F5701A668AA61D33DE6835D68D3BE38F289EDAF0ADE3BB3C6BC9A77D01A0E563
SHA-512:	C7835146B9096E6E94D09EFBC4F5FB18C716D6376417F489FD4DC9EAF2AA153ABAB004AF9FC3E5812745C7B76DAB68840144105687564CC027F7750C21A04397
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*........................... .................................;.....................................................(...........1...........2.........&.......D...:.i....................Loan concept. Young couple holding a white miniature house..-....'..-....'.Adobe Photoshop 23.4 (Windows).2022:09:09 15:57:59.Copyright (c) 2014 baranq/Shutterstock. No use without permission..............0231.................................. .............................................(.................................c.......H.......H..........Adobe_CM......Adobe.d................................................................................................................................................."...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21629), with no line terminators
Category:	downloaded
Size (bytes):	21629
Entropy (8bit):	5.445759738372239
Encrypted:	false
SSDEEP:	384:H0KcO5Tdk/8uLCoCnQf7qq4nqURiUZt/UyPIvDQw9SnDV0EFwglr9T/Pm0RPGiPx:H1V5Tdk/8uLCoCny7d4nqUcUZtMyAvDG
MD5:	EAF58FCBA545624B5557550650E9C3A2
SHA1:	45AFCD20C0C1D950D18EAD1370B95578D8AC00D0
SHA-256:	EEF36CB85F389D570BBA75792FA9836BB4AD7296A750D0DE79B489FC11501964
SHA-512:	4D519087EEFB742930D533596D223AD35372FE78175975E0DF36273E1D98C06352C7586331EA142DBC30A54305704F63A7271A79ED7FD367F43438936391E519
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/369.339f5cdcc5276fe6.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[369],{77232:(E,I,s)=>{s.d(I,{X:()=>ft});var C=s(50187),r=s(37222),g=s(98278),v=s(7711),b=s(40409),_=s(8301),d=s(35025),p=s(84692),m=s(50213),t=s(23279),f=s(56610),x=s(72221),k=s(52839),F=s(26182),R=s(24587),D=s(29344),N=s(66865),A=s(87928),M=s(84993),G=s(94102),L=s(60608);function j(a,i){if(1&a&&(t.j41(0,"div",19),t.EFF(1),t.k0s()),2&a){const e=t.XpG(2);t.R7$(),t.SpI(" Are you sure you want to cancel your ",e.singularText.toLowerCase()," scheduled for: ")}}function y(a,i){if(1&a&&(t.j41(0,"div",15)(1,"div",20),t.EFF(2),t.k0s()()),2&a){const e=t.XpG(2);t.R7$(2),t.SpI(" ",e.formatDisplayDate()," ")}}function $(a,i){if(1&a&&(t.j41(0,"div",15)(1,"div",21),t.EFF(2),t.k0s()()),2&a){const e=t.XpG(2);t.R7$(2),t.JRh(e.error)}}function O(a,i){if(1&a){const e=t.RV6();t.j41(0,"div",22)(1,"button",23),t.bIt("click",function(){t.eBV(e);const n=t.XpG(2);return t.Njj(n.hideCancel())}),t.EFF(2),t.k0s()()}if(2&a){const

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 282 x 188, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	69678
Entropy (8bit):	7.9894042389627495
Encrypted:	false
SSDEEP:	1536:JSrmnZX2BxE6RI2tF7d3xwC/FdppuJlp897nMZP7oWEf63:c+XQCgF7ZrA897nKP+C
MD5:	DEC7CD29E65BB033B1276EFA21143FA0
SHA1:	5934F80A5E876ADFF21A0116D6789CC279719327
SHA-256:	D02A0BEBF1806FF1312BB5D6816FF9CA7B1FBB35E3F70D25DF26F400FF0D6A1A
SHA-512:	3DC385BAE7D5E5A2E4EF6D93E22AB7F2281D2D4593B692CAC432318653C1CA5D722041695DCD14AB924A0E8EC363AC5B22294E2B13149ECC0A46DB3050C732FE
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/Content/images/article-img-1.png
Preview:	.PNG........IHDR...............a.....sRGB.......@.IDATx..i.%.u.w+3k..[...F.1.d.y.../G.dcF...I..W.K.y..OD.....8.......~....X.......o.....=z\|....:]\\..\^...<8]<....qu...:4...I>.....Kp.....a....x....Nw.w..O.N.\|.....G..G....>A....t.E.....>...7Vp....g/.......N..\|H........M........-...t..Z......9...7............+.2.y.....C.....a.. ..........N..;..O...]w.~C._.g..z..tE>..U...-9K.].9.zY...&...V..3r.....6zn.A.r.S.%..F.<.5.\|...!~'.......k..NW./.W...K....5..l.S[o.A.-..a..}zs...}...w...\|.\....pKlo...X........&..7...V.:..!C.... F.X..e;M.._......$....l.].7.\|./......HC.0.D.8.7..AS.t../.....~@.&..'...G$.=.c"8'....d&Q&'...+.0!....aB.....[o.2.8Aa.......H..cQ.l:...n}m(.I.N.....6v..<P..w.....W...+.z#l...,.'..9.+...^.H8.y.K..B..l.zX.....FF.......t..%...=i...Hb ...... ...r.J.l.l.l.p7)..}p3.m4.6..:0.W.!.:.[..wAq..'..[.P...u.G.t.t.WV.w.1.\..\."..6.2.........L.-9.0.!..\|G1#6..r.g..>c)...qL.B.~........E.t.3y.#...o.lN...."39<........ ..U@...tr...Z.j.O.Q`..2.....(.2

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57033), with CRLF line terminators
Category:	downloaded
Size (bytes):	143253
Entropy (8bit):	5.04880831243031
Encrypted:	false
SSDEEP:	1536:W1+lm9En1d/Tezj1QJ73XFWK9IxPYqEilsee4eiRM1v89R5n9JlJYwkUmP:0hQJ73XFF4PYTOuKR5nr0YC
MD5:	B4B8438589EEF52D1DE6AA7561B4074D
SHA1:	78B6759BB6F812FC266C8631E612D938CCEF8C34
SHA-256:	328B0B4FAC3B70295894974E6067D4AF1FA8EA19F76B960CD9E52B8EE8069E57
SHA-512:	23760A210B27238E69B0F406A3E8FBE721AE44FCF00EF683B57FEECBD4A3E868048EF5E6ECD896F45D471CC7B85CD899DB98F5E51EF301D94E1963493ED86511
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/kentico/bundles/forms/scripts?v=Gt4GbgwtDKK0sTC0YrvKBwgsxuk25Gpe2t6-p5hD_A81
Preview:	window.kentico = window.kentico \|\| {};..window.kentico._forms = window.kentico._forms \|\| {};..window.kentico._forms.formFileUploaderComponent = (function (document) {.... function disableElements(form) {.. form.fileUploaderDisabledElements = [];.. var elements = form.elements;.. for (var i = 0; i < elements.length; i++) {.. var element = elements[i];.. if (!element.disabled) {.. form.fileUploaderDisabledElements.push(i);.. element.disabled = true;.. }.. }.. }.... function enableElements(form) {.. form.fileUploaderDisabledElements.forEach(function (disabledElement) {.. form.elements[disabledElement].disabled = false;.. });.. }.... function clearTempFile(fileInput, inputReplacementFilename, inputPlaceholder, tempFileIdentifierInput, inputTextButton, inputIconButton) {.. fileInput.value = null;.. fileInput.removeAttribute("hidden");.. inpu

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	114073
Entropy (8bit):	5.483575526742188
Encrypted:	false
SSDEEP:	1536:rllPlWVxcEBvjP0d5SHsPxqK5LcKt90rEi5ovYKb:JKcEBbP0d51PRcKtGEY6
MD5:	35FBA254EA4C2CD6F2356A69E0BC15B4
SHA1:	5E5783C401D30C92A1E4D3FAD835C6E07BBFB85C
SHA-256:	53A74742D128CD73E1575FA159864B8B49F016510F3239822DBB33D836D8B7A4
SHA-512:	CC3ACAE414C52BD141327B19D49C20D4DC67F62A74D7EC36FD42A6E9C9FFC3A3C6D27D51047ACD45B3155C322A9260A4C4EDCBF1B5C9C97A6B7A6F6D0EC0509C
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[696],{41428:(U,A,c)=>{c.d(A,{o:()=>y});var _=c(50187),T=c(50213),s=c(23279),u=c(56610),a=c(66566),o=c(84993),e=c(77582);function i(g,I){if(1&g&&s.nrm(0,"i",13),2&g){const v=s.XpG(2);s.FS9("matTooltip",v.deferredBalanceInfo)}}function D(g,I){if(1&g&&(s.j41(0,"div",14)(1,"p",15),s.EFF(2,"Based on your estimated home equity of"),s.k0s(),s.j41(3,"div",16),s.EFF(4),s.nI1(5,"currency"),s.k0s()()),2&g){const v=s.XpG(2);s.R7$(4),s.SpI(" ",s.ii3(5,1,v.equity,"USD","symbol","1.0-0")," ")}}function j(g,I){if(1&g){const v=s.RV6();s.j41(0,"div",17)(1,"div",18),s.EFF(2),s.nI1(3,"CasualNumberAbbreviation"),s.k0s(),s.j41(4,"p",19),s.EFF(5," Buying an investment property "),s.k0s(),s.j41(6,"p")(7,"a",20),s.bIt("click",function(){s.eBV(v);const P=s.XpG(2);return s.Njj(P.openLearnMoreInvestmentProperty())}),s.EFF(8,"More details"),s.k0s()()()}if(2&g){const v=s.XpG(2);s.Y8G("ngClass",v.showBoth?"mr-sm-2":""),s.R7$(2),s.S

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36512), with no line terminators
Category:	downloaded
Size (bytes):	36512
Entropy (8bit):	5.414012605709564
Encrypted:	false
SSDEEP:	768:KRhWyGkXsHp1nTYfzze/qe09nj9w1nf/e8S7ea9pbcny3xGqvsvgM/9kyRC697QX:x02OlRTQe8taTd7
MD5:	3FDF57DC7DAA713623A95C37D76202C2
SHA1:	C5F416EEE9F9660513E828A1A5439D1A0065A520
SHA-256:	116F6AD8F21290381C2C58DC79B96F87F7FCC0FC7F330DD3E712556B10ECAC4B
SHA-512:	98F730F8E236B8A2FE735EC3A1C6A6D0EDE529D29F824E2CE850A8D71807C84B169AD48C52D24ECA271DF6A7BF7ADD2006ED7A2984B47CB9059C1D7240E4B6FF
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/polyfills.6f07a62f128f3c09.js
Preview:	(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[461],{19462:()=>{!function(){"use strict";function le(de){return(le="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(se){return typeof se}:function(se){return se&&"function"==typeof Symbol&&se.constructor===Symbol&&se!==Symbol.prototype?"symbol":typeof se})(de)}(function(){(function(){return"navigator"in this&&"sendBeacon"in this.navigator}).call(this)\|\|("navigator"in this\|\|(this.navigator={}),this.navigator.sendBeacon=function(de,se){var Ce=this.event&&this.event.type,He="unload"===Ce\|\|"beforeunload"===Ce,Te="XMLHttpRequest"in this?new XMLHttpRequest:new ActiveXObject("Microsoft.XMLHTTP");Te.open("POST",de,!He),Te.withCredentials=!0,Te.setRequestHeader("Accept","/"),function(de){return"string"==typeof de}(se)?(Te.setRequestHeader("Content-Type","text/plain;charset=UTF-8"),Te.responseType="text/plain"):function(de){return de instanceof Blob}(se)&&se.type&&Te.setRequestHeader("Content-Type",se

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	636
Entropy (8bit):	5.11205484289448
Encrypted:	false
SSDEEP:	12:t47ztrpB4RfUukzV/hcB0ACxUhQtPJ98073QtlsE8clJTlJBmTMgEQq:t47zt1B4jkB2sUhOD39tHMge
MD5:	A2B1D4F07C3D4D672F9BAF00DCEF71E4
SHA1:	F0FAF4DAC3B442946FE0C0F9B34CA977AC8DF011
SHA-256:	7D889A195604581D33188F0654DDC7FFDA5FE2D4F9D17E8BDE489B7234D7B26D
SHA-512:	0FBD50D6312AB150A91D7977A8D9264488B81E67D1C810B22871586EECA7AC16F744E8A4C0A1BB658190BFA5E3971709F410910E74F401881D584C4280514196
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/content/images/warning.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="14.904" height="14.045" viewBox="0 0 14.904 14.045">.. <g id="warning" transform="translate(0 -14.759)" opacity="0.7">.. <g id="Group_1127" data-name="Group 1127" transform="translate(0 14.759)">.. <path id="Path_1111" data-name="Path 1111" d="M14.595,25.506,9.33,15.828a2.183,2.183,0,0,0-3.755,0L.31,25.506a2.182,2.182,0,0,0,1.877,3.3h10.53A2.183,2.183,0,0,0,14.595,25.506ZM7.452,27.057a.873.873,0,1,1,.873-.873A.874.874,0,0,1,7.452,27.057Zm.873-3.493a.873.873,0,0,1-1.747,0V19.2a.873.873,0,0,1,1.747,0Z" transform="translate(0 -14.759)" fill="#fff"/>.. </g>.. </g>..</svg>..

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65457)
Category:	dropped
Size (bytes):	5046489
Entropy (8bit):	5.339016011048655
Encrypted:	false
SSDEEP:	49152:1qyuAuipJEsJrk6T58AQAQgYoXhm/FYM/4DAACUY8NdA4UpqNi8rVQh9cGtMt47c:j8uuYo37Fk/82l
MD5:	3FBF127B6585151197D456676ED1299F
SHA1:	26E8EDAAAC315578A1941FF023E127EB9EBB474E
SHA-256:	6F4E23152A561BC2D2FE42571F3FB3AC3FE19B3557BF75827B4F859F5C3A1289
SHA-512:	0F165E20C65B103691B1F8203FAA04F9E1AAE7F9229A723C81713F17B02BC16B159D9FECB98793FE7E1554C21604655E786E4AEFE6F064B5C09FEC402A2B42E7
Malicious:	false
Reputation:	low
Preview:	/! For license information please see bundle-messenger-lite.js.LICENSE.txt /.(()=>{var e={83538:(e,t,r)=>{"use strict";r.r(t),r.d(t,{default:()=>o});var n=r(47313),i=r(14942),a=r(46417);const o=function(e){let{enhancedMessengerPreview:t,onload:r,isCardOnTop:o,config:s,title:u,subTitle:c,icon:p,watermarkColor:l,hasWelcomeMessages:m,maxTopPosition:d,handIcon:y}=e;return(0,n.useEffect)((()=>{r(!0)}),[r]),(0,a.jsx)(i.Z,{enhancedMessengerPreview:t,isCardOnTop:o,config:s,title:u,subTitle:c,icon:p,watermarkColor:l,hasWelcomeMessages:m,maxTopPosition:d,handIcon:y})}},32405:(e,t,r)=>{"use strict";r.r(t),r.d(t,{default:()=>R});var n=r(1084),i=r(47313),a=r(41281),o=r.n(a),s=r(87950),u=r(40290),c=r(81053),p=r(90593),l=r(3842),m=r(24363),d=r(3762),y=r(52635),h=r(43829),b=r(46417);const f=function(e,t,r,n,i,a){return!e&&(!(!t\|\|""===t)&&(!(!r&&0===(arguments.length>6&&void 0!==arguments[6]?arguments[6]:[]).length)&&(!(r.length>700)&&(!/^\s*$/.test(r)&&(!!n&&(!!i&&!a))))))};function g(e){let{display

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	448
Entropy (8bit):	5.245916014606842
Encrypted:	false
SSDEEP:	12:t41SL8Dz9+4vg4Znhhc1bvWCLAykoUCk2U8DDi:t41SwH7vgUnoUCkSQD
MD5:	480DD92C98A992B79B36C7C53A6A12FB
SHA1:	46D7FE3A5843163D63CC6651447F1F50138FB4FF
SHA-256:	8900B092DF73F93A6F8D581888663DA0FBAA3C52FC14C866BD04A0502538A6AF
SHA-512:	60B373DBC60356458234005291D47F20A592D99FAB4E8B28AB3CD25CDAA3DDDBDDDB19D1DBA5087B9230B4E6CA369374D0F6E6406093BA6FFB5833F3A628CE93
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/Content/images/arroew-next.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 7.89 14.64"><defs><style>.cls-1{fill:#999;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><g id="next"><g id="Group_1146" data-name="Group 1146"><path id="Path_1135" data-name="Path 1135" class="cls-1" d="M7.72,6.92,1,.17a.55.55,0,0,0-.8,0,.55.55,0,0,0,0,.8L6.53,7.32.17,13.68a.57.57,0,0,0,.8.8L7.72,7.72A.57.57,0,0,0,7.72,6.92Z"/></g></g></g></g></svg>

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12012), with no line terminators
Category:	dropped
Size (bytes):	12012
Entropy (8bit):	5.382777500124146
Encrypted:	false
SSDEEP:	192:ZghXg7ID08QkjGhC4vDSYGcWDDoRZYC/9U94ohq+Myyrnv:Zf7ID08QkqhbDF2DoRrEq+iv
MD5:	4037A1F0A10744478611B1B369C05530
SHA1:	BF73E2B868C85E73A6D89DCA2C84F1E33F8E7D23
SHA-256:	311B5C87C19C120D51E8B6DE89443CE08688407C9D02AD46B6863261C463E10C
SHA-512:	7148BE7BA3C6ADBB2ADCADF9F8B81B3188F44A0C6758069730AACEDA53EFEBE5BC97B17B6804881D7CF7F4BE23C1E9A45E3C6F33EF782FF9D2FA5DCD1959D8D6
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[136,997],{63854:(v,c,l)=>{l.d(c,{R:()=>m});var a=l(23279),s=l(50187),t=l(84692),u=l(4805);const _=["mapElement"],d=["mapMarkerDiv"],f=["mapMarkerHomeDiv"],g=["mapMarkerHighlightDiv"];let m=(()=>{class h extends s.Z{constructor(i,e){super(i),this.injector=i,this.resourceLoader=e,this.zoom=15,this.height=200,this.selectionChanged=new a.bkB,this.delay=0,this.delayIncrement=50,this.loading=!0,this.averagePropertyValue=0,this.aVMValue=0,this.markers=[],this.highlightColor="black",this.shouldCreateMap=!1}ngAfterViewInit(){let i=window.getComputedStyle(this.mapMarkerDiv.nativeElement);this.markerColor=i.backgroundColor,this.labelColor=i.color,i=window.getComputedStyle(this.mapMarkerHighlightDiv.nativeElement),this.highlightColor=i.color,i=window.getComputedStyle(this.mapMarkerHomeDiv.nativeElement),this.markerHomeColor=i.color,this.mapBounds=new google.maps.LatLngBounds,this.shouldCreateMap=!0,this.shouldCre

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	415886
Entropy (8bit):	5.453611256726838
Encrypted:	false
SSDEEP:	3072:e1j7PRrfmVOR+uzbcQhevegpsOSa/ff58sk5MlCxPgQ/flqSjukkNMkJQfakvwFQ:e1j7PBzblhe5sUf5hlQEQD
MD5:	6388D53B925B44CF1BB2F0D6B308740D
SHA1:	9BB263F1F9781A69A3C26A69D7468CF92F2E6794
SHA-256:	5955E570A4327B0CA563B2EA00137AF5A44F81497FC88EF1C5FD8A8048FA6591
SHA-512:	99D279C46DEE2ABF323CA76637CBCFA13DC47B2E7CBE45F7D7518129E32784E674CF862B1E4A722B38257C026BD865E6CEEFEFE78F131BF89165CF6D779964A7
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[851],{55710:(rn,B,g)=>{g.d(B,{Q:()=>Sr});var f=g(50213),T=g(50187),y=g(89977),C=g(84692),P=g(35025),t=g(40011),v=g(33222),e=g(23279),u=g(37222),b=g(56610),x=g(72221),F=g(97800),X=g(84993),N=g(98278),k=g(52839),D=g(24587),M=g(29344),S=g(86498),V=g(66865),G=g(42413);const A=i=>({rmaHideDetails:i}),Q=(i,r)=>({rmaHideDetails:i,strong:r});function Z(i,r){if(1&i&&(e.j41(0,"div",14)(1,"mat-error",30),e.EFF(2),e.k0s()()),2&i){const n=r.$implicit;e.R7$(2),e.SpI("",n.value,".")}}function K(i,r){if(1&i&&(e.j41(0,"div",24)(1,"div",25)(2,"span",26),e.nrm(3,"i",27),e.k0s(),e.j41(4,"span",28),e.EFF(5," Please correct the errors below. "),e.k0s()(),e.DNE(6,Z,3,1,"div",29),e.nI1(7,"keyvalue"),e.k0s()),2&i){const n=e.XpG();e.R7$(4),e.BMQ("aria-label",n.alert),e.R7$(2),e.Y8G("ngForOf",e.bMT(7,2,n.validationMap))}}function ee(i,r){if(1&i&&(e.j41(0,"mat-error"),e.EFF(1),e.k0s()),2&i){const n=e.XpG();e.R7$(),e.JRh(n.valida

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	20198
Entropy (8bit):	4.076903429045786
Encrypted:	false
SSDEEP:	384:NJaUh1Q/YDw+TtrnEwoPor0Nb9Z1OzsktyjxHLiPkctEDSIjj08:NJaUhi/YDwwrWPor0Nb9reyAPkcqDSI7
MD5:	B470AB8781DCAC2AE1A56D0E95D656C2
SHA1:	93557D82E28B2103EFBBDC8E9B444411607E0772
SHA-256:	BF6BAA5B68AEEF6969257BC62E8769BCA1C1E9A3B1A31903EBAC7850C14EB724
SHA-512:	737270EA636BCCFC4C9794E383B67B31CA2F174DF8C26472EE0187093D8192B04C142A31E35DFFB7F4F828AC79ABCE28FCB4919C05785A26B3CDBEBAA7434BC4
Malicious:	false
Reputation:	low
Preview:	............ .h...V......... ......... .... .....F...00.... ..%............ .P....D..(....... ..... ..........................................................................................}...}...}...}...}...}...}...}...}...}...}...}...}...}...}...}...}...}...}.2.}...}...}...}...}...}.L.}.b.}...}...}...}...}...}...}...}...}.?.}...}...}...}...}...}...}...}...}...}...}...}...}...}...}...}.:.}.u.}...}.(.}...}...}...}...}.y.}.L.}...}...}...}...}...}...}.Q.}...}...}.d.}...}...}...}...}...}.A.}...}...}...}...}...}...}...}...}...}...}...}...}...}...}...}...}...}.[.}...}...}...}...}...}...}...}...}...}...}...}...}.W.}...}.".}...}...}...}...}...}...}.Y.}...}...}...}...}...\|...}...}...}...}...}...}.L.{...z...y...u.......x.W.z...z...y.a.y...{...{...{...\|...}.T.}....5[..I.g.`cI.yVL.wXU.nY}.Mq..Jw`.g`Q.rP}.Ky..9....R.y.......~..7..%?..\|I.y.Q.r.Q.r.M.u.G.{.F.\|.K.w.M.u.C...;..J8...9...........Q.r.c.a.R.q/Q.r.Q.r.Q.r.Q.r.Q.r.Q.r.Q.r[T.o...8.W.m.....................Q.r.Q.r.Q.r8Q.r.Q.r.Q.roQ.r.Q.r.Q.

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 600x254, components 3
Category:	dropped
Size (bytes):	33986
Entropy (8bit):	7.73375968283946
Encrypted:	false
SSDEEP:	768:Z3lPhg5ojkMq4r74EuQ9nyIxRfDdMF93M+pJs29/deIgeRmseoJN1:Z3lPPM4juYpgxJsGIq51
MD5:	0E1CD98EF71933CA67606B2A22F146FF
SHA1:	1327A9617B3AA27A048AC5823D0CC37584DBDAA6
SHA-256:	8EBF1F158CA2A3D47246D08764725FF640007787036374F17F353B1212CCC415
SHA-512:	29BA42A60BEBA7EE6772F38844F4D8B88389B3B8DCC9C3D50F095ED5B2A99FA659B52A2770092BB00EF50B71AE9D40100F350ED0AA307C19360D33EE1C3BF3A2
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,....."Exif..MM.*..........................Photoshop 3.0.8BIM..........i.:Loan,Concept.,Young,Couple,Holding,A,White,Miniature,House..n..Shutterstock..s..Shutterstock..t.CCopyright (c) 2014 baranq/Shutterstock. No use without permission......234728809..........~http://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>..<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Image::ExifTool 12.38">...<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">....<rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/">.....<dc:description>......<rdf:Alt>.......<rdf:li xml:lang="x-default">Loan concept. Young couple holding a white miniature house</rdf:li>......</rdf:Alt>.....</dc:description>....</rdf:Description>....<rdf:Description rdf:about="" xmlns:pdf="http://ns.adobe.com/pdf/1.3/">.....<pdf:CreationDate>2014-12-02</pdf:CreationDate>....</rdf:Description>....<rdf:Description rdf:about="" xmlns:photoshop="http://ns.adobe.com/pho

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28766), with no line terminators
Category:	downloaded
Size (bytes):	28766
Entropy (8bit):	5.486079470671268
Encrypted:	false
SSDEEP:	768:Qz94T7hWJwdHlVqFs7ejSJEBjC2hmdemEG2:C4TNWJwdHlVqFs7ejSJEBjC2aem2
MD5:	EA694C54512BF6341E3AE6A8EE0F3235
SHA1:	626F378C8A4B1AAE8E1105356C313E35F2602F5F
SHA-256:	265DC08DE517C63B23B4A82E46CB5201D6605B16223EB17068142273926AA876
SHA-512:	9C9C8B1CBE6D90EE5702AE62FD48D40FBF59DF05F97C6E858A0563E9FD2A8C9C0C76B27B4B188F830A021DAEF56C346547E5E9E7E630BDDCBB408C9101B8919E
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/113.22107a236e0a837f.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[113],{10113:(Nt,v,e)=>{e.r(v),e.d(v,{EducationModule:()=>Dt});var m=e(56610),u=e(57936),f=e(37440),y=e(95565),p=e(61480),h=e(50187),d=e(50213),n=e(23279),_=e(97800),k=e(62465),g=e(17662),b=e(61448),G=e(58082),C=e(36995),x=e(98278),T=e(26182),E=e(29344),w=e(66865),c=e(52161),M=e(84993),I=e(72551),R=e(64927),S=e(60679),Y=e(499),j=e(38343),$=e(58376),P=e(60662),L=e(90941),F=e(45725),O=e(37051),D=e(68789),N=e(72074),U=e(39029),X=e(79217),A=e(5317),B=e(68571),V=e(12783),H=e(41428),W=e(66814),z=e(99498),Z=e(27432),K=e(25866),J=e(80202);function Q(t,i){1&t&&(n.qex(0),n.j41(1,"h2"),n.EFF(2,"Stay on track: set your goals"),n.k0s(),n.nrm(3,"div",7),n.j41(4,"div",8),n.nrm(5,"mat-icon",9),n.j41(6,"div",10)(7,"p"),n.EFF(8,"Here are your goals at a quick glance. Click a specific goal to learn more"),n.k0s()()(),n.bVm())}function q(t,i){if(1&t&&(n.j41(0,"mat-option",17),n.EFF(1),n.k0s()),2&t){const a=i.$implicit;n.Y

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	121537
Entropy (8bit):	5.471939254116188
Encrypted:	false
SSDEEP:	3072:/vGY/q5vw93Zw8C3a9landEUEWEzEMEHEKEv5Vlm7LzZ8Gv:GY/pJC3a9landEUEWEzEMEHEKEv5VlmB
MD5:	1A4DCF48032B2340E4A99EB506023B04
SHA1:	05E46F9048B0D8EB44EC599EAFAF945EA882B956
SHA-256:	9E953106A7045D10870DBB7C1C92B000FD2E0ADD4D7AFFAFF1399A9520F5D514
SHA-512:	6943DB2B3DFE0B7FF208E8B479E954E2F57A0EFE8E24E71C2D85D72A989E4B8EBA5AA8A08F25C6261F6D23C31F083F954236894628BAEC37B83B4818AA2F6C01
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/359.d13bf7b80fe989b1.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[359],{84197:(K,G,d)=>{d.d(G,{C:()=>Rt});var a=d(86482),F=d(50213),$=d(53370),O=d(11662),M=d(81128),N=d(54537),o=d(80426),r=d(84692),k=d(43618),i=d(37222),w=d(24587),B=d(13713),j=d(9527),L=d(32476),U=(d(96628),d(18522)),e=d(23279),S=d(76098),x=d(56610),P=d(98278),I=d(72221),D=d(52839),g=d(26182),T=d(29344),l=d(66865),C=d(66566),u=d(15954);const E=["f"];function V(n,f){1&n&&e.eu8(0)}function y(n,f){if(1&n&&(e.qex(0),e.DNE(1,V,1,0,"ng-container",13),e.bVm()),2&n){e.XpG();const t=e.sdS(11);e.R7$(),e.Y8G("ngTemplateOutlet",t)}}function h(n,f){1&n&&e.eu8(0)}function s(n,f){if(1&n&&(e.qex(0),e.DNE(1,h,1,0,"ng-container",13),e.bVm()),2&n){e.XpG();const t=e.sdS(13);e.R7$(),e.Y8G("ngTemplateOutlet",t)}}function c(n,f){1&n&&e.eu8(0)}function p(n,f){if(1&n&&(e.qex(0),e.DNE(1,c,1,0,"ng-container",13),e.bVm()),2&n){e.XpG();const t=e.sdS(15);e.R7$(),e.Y8G("ngTemplateOutlet",t)}}function v(n,f){1&n&&e.eu8(0)}function

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (931)
Category:	downloaded
Size (bytes):	12219
Entropy (8bit):	5.511663265517366
Encrypted:	false
SSDEEP:	192:y4PognFuYt3Ytx+G1uGVj1BV5VNGt35D/st2sfatu74P+BY/Zp3Ul1xao631KwT4:ySogFu45kuEpBHfGt3V/xuatu74PIY/+
MD5:	AF5DE7362613A7327F46F584372E4191
SHA1:	CE0F0B62233A9EEB521726B229988B31C0F57804
SHA-256:	9F661CE1B64C2592E384BCC333522A73A89481C6A898CA6C244FC8EEFE8EE6C1
SHA-512:	BC37499183BE9252EE8727661A5A017A8821A8DCF5710B99E3B9280618FBB25EF91185BC47D4DD70072859FC14CBB3E6D917B2EAF70FFD9014055E0ED6C20366
Malicious:	false
Reputation:	low
URL:	https://storage.glancecdn.net/cobrowse/js/GlanceCobrowseLoader_6.36.0M.js
Preview:	(function() {/. Copyright 2022 Glance Networks, Inc../.function m(a,...c){!window.console\|\|!window.console[a]\|\|window.GLANCE_COBROWSE&&window.GLANCE_COBROWSE.disableLogging\|\|(c=c.map(b=>{if("object"===typeof b)try{b=JSON.stringify(b)}catch(f){console.error(f),b="unable to convert object to string"}return"string"===typeof b?b.replace(/[\r\n]/g," ").replace("<","<"):b}),window.console[a](...c))}function p(...a){m("log",...a)}function x(...a){m("error",...a)}function y(...a){p("DEBUG:",...a)};/. Copyright (c) 2022 Glance Networks, Inc../.window.GLANCE=window.GLANCE\|\|{};window.GLANCE.VERSION="6.36.0.1543033431";window.GLANCE.PATCH="";window.GLANCE.Lib=window.GLANCE.Lib\|\|{};.(function(){var a=navigator.userAgent.toLowerCase(),c=navigator.platform.toLowerCase(),b=a.match(/(edge\|edg)[\s\/:]([\w\d\.]+)?/)\|\|a.match(/(opera\|ie\|firefox\|chrome\|crios\|version)[\s\/:]([\w\d\.]+)?.*?(safari\|version[\s\/:]([\w\d\.]+)\|$)/)\|\|a.match(/(rv):([\w\d\.]+)/)\|\|[null,"unknown",0];"edg"===b[1]&&(b[1]="edge

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2360
Entropy (8bit):	4.869825580674243
Encrypted:	false
SSDEEP:	48:gjkxThJSTtIXYikX2/WlUj4lN4Qb0DCJOLYXqj:XJS95X2/HjQ4u0+JyKI
MD5:	DB6AC4892597C389DBFDA43D84CD78D0
SHA1:	BF675904F447F35E3DF0E4864470613B9854EA47
SHA-256:	B457FADF77556D85D24D9A3DD83E0C2943224E2FC0260DE913EC7D8D2785BDBE
SHA-512:	F97E907F4CF0280516BA2B4AAD4005E9694C960D94AEE73BB27A18056811AC9FDC222783C95F5A1746AD518ACAF32CBA70CE11B8462CA6CB1DAB9731ABD388DC
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="57.62" height="62.39" viewBox="0 0 57.62 62.39"><defs><style>.a{fill:#007dc5;}</style></defs><g transform="translate(-644.43 -9.549)"><path class="a" d="M729.59,107.16h-2V99.58c0-7.23-7.24-15.32-16.93-15.32s-16.94,8.09-16.94,15.32v3.6h-2v-3.6c0-8.17,8.09-17.31,18.93-17.31s18.92,9.14,18.92,17.31Z" transform="translate(-38.07 -72.721)"/><path class="a" d="M718.51,122.51l-1.1-1.66a11.32,11.32,0,0,0,4.88-9.66v-2.7h2v2.7a13.28,13.28,0,0,1-5.77,11.32" transform="translate(-38.07 -72.721)"/><path class="a" d="M725.94,109.49c-7.8,0-23.57-10-23.57-18.26h2c0,6.54,14.15,16.26,21.58,16.26Z" transform="translate(-38.07 -72.721)"/><path class="a" d="M705.2,123.81c-5.72-2.55-9.44-7.52-9.47-12.66v-4c0-4.94,3.76-8.76,7.25-10.21l.77,1.84c-3,1.24-6,4.52-6,8.37v4c0,4.35,3.28,8.61,8.29,10.84Z" transform="translate(-38.07 -72.721)"/><path class="a" d="M712.66,130.73h-1.33a3.65,3.65,0,1,1,0-7.3h1.33a3.65,3.65,0,1,1,0,7.3m-1.33-5.31a1.66,1.66,0,0,0,0,3.32h1.33a1.

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21629), with no line terminators
Category:	dropped
Size (bytes):	21629
Entropy (8bit):	5.445759738372239
Encrypted:	false
SSDEEP:	384:H0KcO5Tdk/8uLCoCnQf7qq4nqURiUZt/UyPIvDQw9SnDV0EFwglr9T/Pm0RPGiPx:H1V5Tdk/8uLCoCny7d4nqUcUZtMyAvDG
MD5:	EAF58FCBA545624B5557550650E9C3A2
SHA1:	45AFCD20C0C1D950D18EAD1370B95578D8AC00D0
SHA-256:	EEF36CB85F389D570BBA75792FA9836BB4AD7296A750D0DE79B489FC11501964
SHA-512:	4D519087EEFB742930D533596D223AD35372FE78175975E0DF36273E1D98C06352C7586331EA142DBC30A54305704F63A7271A79ED7FD367F43438936391E519
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[369],{77232:(E,I,s)=>{s.d(I,{X:()=>ft});var C=s(50187),r=s(37222),g=s(98278),v=s(7711),b=s(40409),_=s(8301),d=s(35025),p=s(84692),m=s(50213),t=s(23279),f=s(56610),x=s(72221),k=s(52839),F=s(26182),R=s(24587),D=s(29344),N=s(66865),A=s(87928),M=s(84993),G=s(94102),L=s(60608);function j(a,i){if(1&a&&(t.j41(0,"div",19),t.EFF(1),t.k0s()),2&a){const e=t.XpG(2);t.R7$(),t.SpI(" Are you sure you want to cancel your ",e.singularText.toLowerCase()," scheduled for: ")}}function y(a,i){if(1&a&&(t.j41(0,"div",15)(1,"div",20),t.EFF(2),t.k0s()()),2&a){const e=t.XpG(2);t.R7$(2),t.SpI(" ",e.formatDisplayDate()," ")}}function $(a,i){if(1&a&&(t.j41(0,"div",15)(1,"div",21),t.EFF(2),t.k0s()()),2&a){const e=t.XpG(2);t.R7$(2),t.JRh(e.error)}}function O(a,i){if(1&a){const e=t.RV6();t.j41(0,"div",22)(1,"button",23),t.bIt("click",function(){t.eBV(e);const n=t.XpG(2);return t.Njj(n.hideCancel())}),t.EFF(2),t.k0s()()}if(2&a){const

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48332), with no line terminators
Category:	downloaded
Size (bytes):	48332
Entropy (8bit):	5.4601960300160695
Encrypted:	false
SSDEEP:	768:JW6ntrxcd6l2vO8JYez3f7spyRTz5wQA2dU7+77YqPS+2BKAa0wkjaHUBGzUN/OP:rGJYeKyR6M/EnVGIbreugzHZaU
MD5:	8E1F404FF864B1B75E54DA6BC6F39AFF
SHA1:	CB795DAC9A30FCA721EA2AA82B091A66A84299EF
SHA-256:	A1CC631A2467E80DEF7E280B96EE010208DC7D49AD37313D094EBAE67425C2F0
SHA-512:	A0E7042BEB978D96D5DA66CA052432AF32B4CF1B9F67C01B9D07C7DD57988325CDC442369345EA8FB202715D9510577B46B8E277E2B30DFA0C105C006880291C
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/77.ec1ceb5dff6d9299.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[77],{15077:(we,b,o)=>{o.r(b),o.d(b,{SecureMessageModule:()=>je});var m=o(56610),j=o(57936),w=o(37440),F=o(95565),c=o(37222),S=o(61480),h=o(50187),_=o(89283),p=o(8301),T=o(43239),g=o(50213);class y{static notEmpty(a){return"string"==typeof a.value&&0===a.value.trim().length?{notEmpty:"Text must not be empty"}:null}}var e=o(23279),v=o(98278),f=o(72221),R=o(26182),E=o(24587),x=o(29344),k=o(66865),M=o(84993),I=o(58445),C=o(47309);function G(n,a){if(1&n&&e.nrm(0,"i",43),2&n){const t=e.XpG(3);e.BMQ("aria-label","Default "+t.replaceStandardTerm("Loan"))}}function B(n,a){if(1&n&&(e.j41(0,"mat-option",41),e.EFF(1),e.DNE(2,G,1,1,"i",42),e.k0s()),2&n){const t=a.$implicit,r=e.XpG(2);e.Y8G("value",t),e.R7$(),e.E5c(" ",r.lnAstricks,"",r.getLast4(null==t?null:t.LoanIdentifier),"\xa0\xa0\xa0(",t.PropertyAddress.AddressLineText,") "),e.R7$(),e.Y8G("ngIf","sso"!==(null==r.configInfo?null:r.configInfo.AuthMode)&&t.Borro

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65457)
Category:	downloaded
Size (bytes):	6434226
Entropy (8bit):	5.263170225661774
Encrypted:	false
SSDEEP:	49152:1qyuAuipJEsJrk6T58AQAQgYoXhm/FYM/4DAACUY8NdA4UpqNi8rVQh9cGtMt47a:j8uuYo37Fk/82J
MD5:	8DA58D32390BA3FBCE30EAA9096849B3
SHA1:	08182250E11C45712EE902A6595FF692F943BF3F
SHA-256:	B9B884CAF30DC9D50FA5752F313FD6C47A6C5AAB3C3B8C6BBA17EB1B2D0547C2
SHA-512:	BB4F7BD7F9492AFB5C9CD432458EB9C42B96F693D357D2563BB729FE52114CAF4B197FF02BACF72638259382A6D0C7ECD261E86B549FC1B3FC4C388ED6708589
Malicious:	false
Reputation:	low
URL:	https://lightning.us1.helium.servismatrixcdn.com/v2/latest/bundle-messenger-lite.js
Preview:	/! For license information please see bundle-messenger-lite.js.LICENSE.txt /.(()=>{var e={83538:(e,t,r)=>{"use strict";r.r(t),r.d(t,{default:()=>o});var n=r(47313),i=r(14942),a=r(46417);const o=function(e){let{enhancedMessengerPreview:t,onload:r,isCardOnTop:o,config:s,title:u,subTitle:c,icon:p,watermarkColor:l,hasWelcomeMessages:m,maxTopPosition:d,handIcon:y}=e;return(0,n.useEffect)((()=>{r(!0)}),[r]),(0,a.jsx)(i.Z,{enhancedMessengerPreview:t,isCardOnTop:o,config:s,title:u,subTitle:c,icon:p,watermarkColor:l,hasWelcomeMessages:m,maxTopPosition:d,handIcon:y})}},32405:(e,t,r)=>{"use strict";r.r(t),r.d(t,{default:()=>R});var n=r(1084),i=r(47313),a=r(41281),o=r.n(a),s=r(87950),u=r(40290),c=r(81053),p=r(90593),l=r(3842),m=r(24363),d=r(3762),y=r(52635),h=r(43829),b=r(46417);const f=function(e,t,r,n,i,a){return!e&&(!(!t\|\|""===t)&&(!(!r&&0===(arguments.length>6&&void 0!==arguments[6]?arguments[6]:[]).length)&&(!(r.length>700)&&(!/^\s*$/.test(r)&&(!!n&&(!!i&&!a))))))};function g(e){let{display

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39586), with no line terminators
Category:	dropped
Size (bytes):	39586
Entropy (8bit):	5.394685749294454
Encrypted:	false
SSDEEP:	768:h3eKEVlUYFcweYTb6jvd0McPXMNSCjUOsyOiiFdmOhXb:6ajjJKdhXb
MD5:	B401774981507F15418911485EB633EA
SHA1:	87FF23C19FF9518E51D35CE68F14C16C3C634B8E
SHA-256:	BC8849FED5523E9702920AE5B2514839D3E9C5C54A1896F43BF123ABF6609CB9
SHA-512:	4F38695B0D4F35ACD84BE6A49C00329BB4E467DF4133E78599CE493374DDE4825D5E85C7383925254BF54EA3672D28BA0D68274B12BE5A35A6FC5E6074C47C1B
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[10],{21322:(h,y,u)=>{u.d(y,{l:()=>Ut});var m=u(50187),t=u(23279),l=u(56610),p=u(10524),d=u(50213),_=u(22098),g=u(76098),s=u(66566);const F=e=>({$implicit:e,isCurrentDraft:!0}),r=e=>({$implicit:e,$isCurrentDraft:!1}),f=e=>({$implicit:e});function c(e,i){1&e&&(t.j41(0,"div")(1,"h2")(2,"span",17),t.EFF(3,"Your autopay details"),t.k0s()()())}function v(e,i){1&e&&(t.j41(0,"div")(1,"h2"),t.EFF(2," Your Autopay details "),t.k0s()())}function x(e,i){1&e&&(t.j41(0,"span",20),t.EFF(1,"On"),t.k0s())}function b(e,i){1&e&&(t.j41(0,"span",21),t.EFF(1,"Off"),t.k0s())}function A(e,i){if(1&e&&(t.j41(0,"span"),t.DNE(1,x,2,0,"span",18)(2,b,2,0,"span",19),t.k0s()),2&e){const n=t.XpG();t.R7$(),t.Y8G("ngIf",null==n.autopay?null:n.autopay.StatusIndicators.EnrolledIndicator),t.R7$(),t.Y8G("ngIf",!(null!=n.autopay&&n.autopay.StatusIndicators.EnrolledIndicator))}}function C(e,i){if(1&e&&t.nrm(0,"i",22),2&e){const n=t.XpG();t.F

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	70923
Entropy (8bit):	5.350993168791548
Encrypted:	false
SSDEEP:	768:EbTR/dlOlV6K0jlLiqfNravf87e+3wvjLiNUK8jWqulMrURTVgWPe7La0EakIG+d:EbTtdOyjlNZeES4aCmEPeVEapGYwS
MD5:	7446AD95EFFB27D9C6418D90DD52429F
SHA1:	324CECA2B43E3214FEB85361F0237744885ACC68
SHA-256:	FEE57E41FA7E20F46D03AD9F20BC4506DAD32B15CC06B27693ECFD7BA23D230A
SHA-512:	56469414DE539E6016E3E9EFC100D21F6B3E3084696727DA9D4CA684C62FF73775E9C4310F1D40907210731EF93413AB64E202114869B2915969EDAFECE1B135
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/651.b7fb59c28e478c09.js
Preview:	(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[651],{36651:function(jn,mt,Ai){var Qe;jn=Ai.nmd(jn),function(){var o,sn="Expected a function",ke="__lodash_hash_undefined__",ne="__lodash_placeholder__",tt=1/0,qn=9007199254740991,Cn=4294967295,vl=[["ary",128],["bind",1],["bindKey",2],["curry",8],["curryRight",16],["flip",512],["partial",32],["partialRight",64],["rearg",256]],_t="[object Arguments]",re="[object Array]",Wt="[object Boolean]",bt="[object Date]",ie="[object Error]",ue="[object Function]",Ei="[object GeneratorFunction]",xn="[object Map]",Pt="[object Number]",bn="[object Object]",Ti="[object Promise]",Bt="[object RegExp]",An="[object Set]",Ft="[object String]",fe="[object Symbol]",Mt="[object WeakMap]",Ut="[object ArrayBuffer]",pt="[object DataView]",nr="[object Float32Array]",tr="[object Float64Array]",er="[object Int8Array]",rr="[object Int16Array]",ir="[object Int32Array]",ur="[object Uint8Array]",fr="[object Uint8ClampedArray]",lr="[object Uint16Ar

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65032)
Category:	downloaded
Size (bytes):	576233
Entropy (8bit):	5.088811139962037
Encrypted:	false
SSDEEP:	6144:bNcG3SYiLENM6HN26yxNQOu8k+7FlqSg8E3SYiCENM6HN26nstvkYuprGGtqCjYu:AuDtvkYup6qqqYwi8
MD5:	6726A93C916969968C293A12870A3725
SHA1:	164F8A1DC6C4183C00EA73D8D8B682E29CCB9F67
SHA-256:	A5341B5D171D28B6D71915F0D7D02AAF70F1F20324593A595CE8C921942AEB07
SHA-512:	D98954869762664DBF4C4FCC73A8276B70FB555963E26D3B94ACF6EE221D4DF6426ADE7ACE14EAF570DC108FB11D0057AB5767B67532F35AA75220A5D73A6CA1
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/styles.f6b8b5bcda36b4b7.css
Preview:	@import"https://fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700&display=swap";@import"https://fonts.googleapis.com/icon?family=Material+Icons";/!. Bootswatch v4.6.2. * Homepage: https://bootswatch.com. * Copyright 2012-2022 Thomas Park. * Licensed under MIT. * Based on Bootstrap.//!.* Bootstrap v4.6.2 (https://getbootstrap.com/).* Copyright 2011-2022 The Bootstrap Authors.* Copyright 2011-2022 Twitter, Inc..* Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE).*/:root{--blue:#2196f3;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#e51c23;--orange:#fd7e14;--yellow:#ff9800;--green:#4caf50;--teal:#20c997;--cyan:#9c27b0;--white:#fff;--gray:#666;--gray-dark:#222;--primary:#2196f3;--secondary:#fff;--success:#4caf50;--info:#9c27b0;--warning:#ff9800;--danger:#e51c23;--light:#fff;--dark:#222;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:Roboto,-apple-system,BlinkMa

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (430), with CRLF line terminators
Category:	dropped
Size (bytes):	112739
Entropy (8bit):	4.816194799134832
Encrypted:	false
SSDEEP:	768:9L+Vt9oTDnrPMMPM2p3UxCEyhYJu326xqTvEpSqp0dpASp7Z:9L+Vt9oTDn5p5Oy2WpvpOpJp7Z
MD5:	5BBCB46165588E260E3A40850D1F50C3
SHA1:	F328381312800B23132FCC90917F06AFA10746B0
SHA-256:	EEDF56F388E188E92CC4C18CFEF8DB7C90ACF4F255ACC93DD24507D98CC4C927
SHA-512:	284ED2F4463A90825ED5F2C7ECAA3D7E63213A10B9FD389D902070237BBFC407844AD7254D54CBC7B3C9C8EF3E1922CFCF5377F12C2CB52F8D6F855D9C0D9C2F
Malicious:	false
Reputation:	low
Preview:	// hamburger..function openNav() {.. if (document.getElementById("mySidenav").classList.contains("w100")) {.. document.getElementById("mySidenav").classList.remove("w100");.. }.. else {.. document.getElementById("mySidenav").classList.add("w100");.. }..}....$('.carousel .item').each(function () {.. var next = $(this).next();.. if (!next.length) {.. next = $(this).siblings(':first');.. }.. next.children(':first-child').clone().appendTo($(this));.... for (var i = 0; i < 2; i++) {.. next = next.next();.. if (!next.length) {.. next = $(this).siblings(':first');.. }.... next.children(':first-child').clone().appendTo($(this));.. }..});......function myAlert() {.. var url = $("#promo-btn").attr('data-src');.. $("#video").attr('src', url);.. $('#video').focus();..}....$('#carousel-1').carousel({.. interval: 4000,.. wrap: true,.. keyboard: true..});..var serverPath = "https://s4desktop.co

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	114073
Entropy (8bit):	5.483575526742188
Encrypted:	false
SSDEEP:	1536:rllPlWVxcEBvjP0d5SHsPxqK5LcKt90rEi5ovYKb:JKcEBbP0d51PRcKtGEY6
MD5:	35FBA254EA4C2CD6F2356A69E0BC15B4
SHA1:	5E5783C401D30C92A1E4D3FAD835C6E07BBFB85C
SHA-256:	53A74742D128CD73E1575FA159864B8B49F016510F3239822DBB33D836D8B7A4
SHA-512:	CC3ACAE414C52BD141327B19D49C20D4DC67F62A74D7EC36FD42A6E9C9FFC3A3C6D27D51047ACD45B3155C322A9260A4C4EDCBF1B5C9C97A6B7A6F6D0EC0509C
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/696.6c12338ed84dd792.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[696],{41428:(U,A,c)=>{c.d(A,{o:()=>y});var _=c(50187),T=c(50213),s=c(23279),u=c(56610),a=c(66566),o=c(84993),e=c(77582);function i(g,I){if(1&g&&s.nrm(0,"i",13),2&g){const v=s.XpG(2);s.FS9("matTooltip",v.deferredBalanceInfo)}}function D(g,I){if(1&g&&(s.j41(0,"div",14)(1,"p",15),s.EFF(2,"Based on your estimated home equity of"),s.k0s(),s.j41(3,"div",16),s.EFF(4),s.nI1(5,"currency"),s.k0s()()),2&g){const v=s.XpG(2);s.R7$(4),s.SpI(" ",s.ii3(5,1,v.equity,"USD","symbol","1.0-0")," ")}}function j(g,I){if(1&g){const v=s.RV6();s.j41(0,"div",17)(1,"div",18),s.EFF(2),s.nI1(3,"CasualNumberAbbreviation"),s.k0s(),s.j41(4,"p",19),s.EFF(5," Buying an investment property "),s.k0s(),s.j41(6,"p")(7,"a",20),s.bIt("click",function(){s.eBV(v);const P=s.XpG(2);return s.Njj(P.openLearnMoreInvestmentProperty())}),s.EFF(8,"More details"),s.k0s()()()}if(2&g){const v=s.XpG(2);s.Y8G("ngClass",v.showBoth?"mr-sm-2":""),s.R7$(2),s.S

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Category:	downloaded
Size (bytes):	18536
Entropy (8bit):	7.986571198050597
Encrypted:	false
SSDEEP:	384:IhocXmE6eM871P7td/mcOKA454H2orQEONKrOqxw:f6WeL1P//9D54WCCKc
MD5:	8EFF0B8045FD1959E117F85654AE7770
SHA1:	227FEE13CEB7C410B5C0BB8000258B6643CB6255
SHA-256:	89978E658E840B927DDDB5CB3A835C7D8526ECE79933BD9F3096B301FE1A8571
SHA-512:	2E4FB65CAAB06F02E341E9BA4FB217D682338881DABA3518A0DF8DF724E0496E1AF613DB8E2F65B42B9E82703BA58916B5F5ABB68C807C78A88577030A6C2058
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......Hh..........H..............................Z..\|.`..J.T..<.....H..U..Z...x.6.$..0. ..t. ..I....p.0.VU.......1....AQ...d..x.....R..4.-.c..C$fUc.c..IX..@..~g.xs.....%...O...eJ.w..U.\|.......%..{.......U+..T#.S......`.n.....V.w.4..~P"..zk.%..../........=3...F.........V.FL..;Bc.........A.Uk.U1.b!Y.BH.DL...s.s...F.m.9a..GJ..1..#.`m5..DI..X5#.........B.Akm.....&..0...{.L.....G......-(.......O4.@3....=......f..l...$.....j..NO...e.Y.tJ2J>F.(.c....08..e...~....D2S7s:.G'Gm........!.7.........r.c.`,.....~.).......c>1.......Y.g2^...T-1.7./r./....>...g.ov@u.?.U.+._...'M..,.,g....!g..9."..yBF.#r+.Ps...%.d=....U...5.b.$:`.4R.II.<A....Q)....e...k.....M.8.z....+.....5}..F........F.d._...].~-](.Lf....Y..W....;-z...;. .@x._v../.%UIm....=s...P.C....G...^..Q.!g.!b._.P....at..?.}....t.z...O(..Y6..R.2.X....k.R..K.gw(.F.K?m..R...7....dj..7. .r.U..be.4......8.].w.B..B......Y..:..8.N..U...NEm...\.^q..f}.......{..6.". ...y-.Y...N.+.M E..`......R.$T

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 600x254, components 3
Category:	downloaded
Size (bytes):	33986
Entropy (8bit):	7.73375968283946
Encrypted:	false
SSDEEP:	768:Z3lPhg5ojkMq4r74EuQ9nyIxRfDdMF93M+pJs29/deIgeRmseoJN1:Z3lPPM4juYpgxJsGIq51
MD5:	0E1CD98EF71933CA67606B2A22F146FF
SHA1:	1327A9617B3AA27A048AC5823D0CC37584DBDAA6
SHA-256:	8EBF1F158CA2A3D47246D08764725FF640007787036374F17F353B1212CCC415
SHA-512:	29BA42A60BEBA7EE6772F38844F4D8B88389B3B8DCC9C3D50F095ED5B2A99FA659B52A2770092BB00EF50B71AE9D40100F350ED0AA307C19360D33EE1C3BF3A2
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/shutterstock_234728809_sm.jpg?ext=.jpg
Preview:	......JFIF.....,.,....."Exif..MM.*..........................Photoshop 3.0.8BIM..........i.:Loan,Concept.,Young,Couple,Holding,A,White,Miniature,House..n..Shutterstock..s..Shutterstock..t.CCopyright (c) 2014 baranq/Shutterstock. No use without permission......234728809..........~http://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>..<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Image::ExifTool 12.38">...<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">....<rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/">.....<dc:description>......<rdf:Alt>.......<rdf:li xml:lang="x-default">Loan concept. Young couple holding a white miniature house</rdf:li>......</rdf:Alt>.....</dc:description>....</rdf:Description>....<rdf:Description rdf:about="" xmlns:pdf="http://ns.adobe.com/pdf/1.3/">.....<pdf:CreationDate>2014-12-02</pdf:CreationDate>....</rdf:Description>....<rdf:Description rdf:about="" xmlns:photoshop="http://ns.adobe.com/pho

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 174 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4378
Entropy (8bit):	7.935436158000869
Encrypted:	false
SSDEEP:	96:zClGv/HoMB3dUo52Kek5CEGCp9F8ZoLY/cx+fPZpxfqs/T:RvvNdUo554Cp3Kv/cx87VT
MD5:	FC6E58540A1E29DD914B2AFACBBA7419
SHA1:	0DDE053C11870C2E6AAE8C7D1EA43596965CA474
SHA-256:	4AB7DF83765A09E6DCA1952888C4F5B41C84B88C59E3EC1244E81065E1D58584
SHA-512:	F9EE2CF784F07CDB67EFA4F2D92F4B49E4FA57DA0ABC8B84B9C3A90C09A5C11B474D25C5F2A2E8119E7C4C89BD093CF093877A3E4AB21E0AE72D3B5CDA1DCED6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......2............sRGB........8eXIfMM........i.......................................2....n.U....IDATx....T.....}y.".(V.,j.$...I.."KL$6........a.....4..D........ .T...]A.}....w.;w..73..pOr.........;...w.TDI...#...';v...[t..=P.=P.vm.....o..........h...t.RY.x..\.R....K.......+'..z..n.Z.m+.<..T.TI...i.../...S...7<.>(..h.y..7.tx.S.N......./R(H..h.M.>..l.U.['.v... ,8.T{..O?...6H.?..&d....=P.=.y.f.9q..:t.......@.=p..q.I.;d.{...@..V...<...r.7:..;..5.5j..WT..-o.5R.V-..V.O:.&M......-[.L.}.Q.n../X.@._oQ....={J.5e...2a..9s.Kk..<..C...o..a.....~....{.-.E.g..\|.'.x.M..L.&.g....D...Kw....'.t.../.@......#.G......Q^K..@L.1...yF...^x..^.z..S..d._.b\|....}.....Q_..........e.#rH..=#r......t....Hh...?.....;w.&...8..7...i....o.>..4.Q......KE.....c..8K.r.0..<..t.jUEN5.94^.......1..".z.to..[.4`......;.TD.Yd..1q.(].t\v....-[...3&.k..z....3s.L.>}z._x.......:].^.._E....Y....u,.....v.\|..wQ}.p..`.P.@...4.t.@.Ui...6h.....2.m.4

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
Preview:	{}.

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (555)
Category:	downloaded
Size (bytes):	193121
Entropy (8bit):	5.640261249941191
Encrypted:	false
SSDEEP:	3072:4sla483uJAAeKa8Bz+9y8eHygLzpUA6Ba9iDWDZWa81EpdWA8csDxClly5CN8f7G:Fla483uza8Bz+9jeHzLziA6Ba9ieWaWm
MD5:	41B485C81221CF2C17A8009EB1485A2A
SHA1:	910E95F76660FBED18F2DA67A7CE9688B07E86E2
SHA-256:	00A2425F4782D1CAF94DB30CBE18A5D05488D59573B033146C351A5958E662D4
SHA-512:	9907A4D999FCDBE454537E080E957B7268752C2AED2E1EBBF4D7F00A5F9D36A60936EB5033F0FE5BB46F67300A13D7380700DE31AEF2C9EB98C5992E581EC6A9
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/59/3a/util.js
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var Aya,RB,Bya,Cya,Dya,Eya,Fya,Hya,ZB,$B,aC,bC,cC,eC,fC,Iya,gC,Jya,jC,lC,mC,nC,Lya,Mya,Nya,qC,sC,uC,vC,Pya,Qya,Rya,Tya,BC,Vya,CC,Xya,DC,Zya,Yya,$ya,aza,bza,cza,dza,eza,fza,gza,hza,iza,jza,kza,lza,mza,nza,oza,pza,qza,rza,HC,uza,JC,vza,wza,xza,yza,zza,Aza,Bza,Cza,Dza,Eza,Fza,Hza,Jza,Lza,Nza,Pza,Rza,Tza,Vza,Xza,Zza,$za,aAa,bAa,cAa,dAa,eAa,fAa,KC,gAa,hAa,iAa,jAa,kAa,lAa,nAa,MC,NC,oAa,pAa,qAa,rAa,sAa,tAa,uAa,vAa,wAa,xAa,yAa,OC,zAa,PC,AAa,BAa,CAa,DAa,EAa,FAa,GAa,QC,HAa,RC,IAa,JAa,KAa,LAa,MAa,NAa,OAa,PAa,.QAa,RAa,SAa,TAa,UAa,VAa,WAa,XAa,YAa,ZAa,$Aa,bBa,cBa,dBa,fBa,TC,gBa,hBa,iBa,jBa,kBa,lBa,nBa,qBa,rBa,tBa,wBa,xBa,yBa,zBa,ABa,oD,pD,CBa,rD,sD,tD,EBa,FBa,GBa,wD,xD,zD,AD,HBa,BD,DD,IBa,KBa,LBa,NBa,RBa,SBa,JD,WBa,$Ba,aCa,bCa,MD,cCa,eCa,fCa,gCa,hCa,PD,jCa,oCa,XD,rCa,qCa,YD,sCa,$D,uCa,sE,vCa,xCa,zCa,yE,ACa,zE,BCa,CCa,DCa,ECa,BE,GCa,FCa,HCa,JCa,LCa,NCa,RCa,PCa,SCa,QCa,CE,DE,VCa,WCa,EE,FE,GE,IE

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29607), with no line terminators
Category:	downloaded
Size (bytes):	29607
Entropy (8bit):	5.480530380678138
Encrypted:	false
SSDEEP:	768:J9NWMYQDRjX+81xpfR/Qwl6wY8UPeM1xpVv8Ih85Jh78y7r89BIbwZ+VZYJTsl5t:J1DL41DnO7mZa35DBinG1
MD5:	3129E6AD58F1734B856841837EE351EB
SHA1:	8DB235E4F405014D2DACBE496A159B92ED4A0DFE
SHA-256:	CBBCBBF55B2F09E3C1DC935556A17BB1C205480B5D46CF42666F081702986C6C
SHA-512:	CD2283D8A007D433A6AE9137AE9761976C59B16205A5E3874960AC9A1A1805B4F75641CECFD809371D04AA06D98ED471D073964E1E3B90980F401A62A64F3220
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/773.25a8e72670815c4e.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[773],{93409:(b,x,p)=>{p.d(x,{D:()=>Pe});var i=p(50187),u=p(58082),h=(p(50327),p(93295)),f=p(84692),e=p(23279),C=p(5957),d=p(56610),M=p(95894);function w(t,o){1&t&&e.eu8(0)}function O(t,o){if(1&t&&(e.qex(0),e.DNE(1,w,1,0,"ng-container",19),e.bVm()),2&t){e.XpG(2);const n=e.sdS(3);e.R7$(),e.Y8G("ngTemplateOutlet",n)}}function P(t,o){1&t&&e.eu8(0)}function m(t,o){if(1&t&&(e.qex(0),e.DNE(1,P,1,0,"ng-container",19),e.bVm()),2&t){e.XpG(2);const n=e.sdS(3);e.R7$(),e.Y8G("ngTemplateOutlet",n)}}function g(t,o){1&t&&e.eu8(0)}function c(t,o){if(1&t&&(e.qex(0),e.DNE(1,g,1,0,"ng-container",19),e.bVm()),2&t){e.XpG(2);const n=e.sdS(7);e.R7$(),e.Y8G("ngTemplateOutlet",n)}}function l(t,o){1&t&&e.eu8(0)}function r(t,o){if(1&t&&(e.qex(0),e.DNE(1,l,1,0,"ng-container",19),e.bVm()),2&t){e.XpG(2);const n=e.sdS(7);e.R7$(),e.Y8G("ngTemplateOutlet",n)}}function _(t,o){1&t&&e.eu8(0)}function F(t,o){if(1&t&&(e.qex(0),e.DNE(1,_,1,

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	dropped
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 31760, version 0.0
Category:	downloaded
Size (bytes):	31760
Entropy (8bit):	7.985808032847546
Encrypted:	false
SSDEEP:	768:GR41nB45n7cUEHGhURutUMsw6UaNoG9/e68HFer:GRKnB4YWhXtKw65NP9/e7er
MD5:	F20D5814B4E377C940183AFCFF0DEB87
SHA1:	6C3E5CD537446A2362D95AFE1709F5E05E557409
SHA-256:	C2749EAC6C049305592F0999E7DBDE7AB2DB9D593B4C83BE220E2EC927243D40
SHA-512:	D8F2A36066ADF29B67C519B35622BDE807438A8EE043BAC5C8A4D3C4FA0E618DA1F31D2B925346752E687FCC451115B0FC4E911AE65847DEC0419562D8B21F15
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/Content/fonts/Gotham/Gotham-Medium.woff
Preview:	wOFF......\|.......".........................FFTM..{.........u.avGDEF..k....N...Z.q..GPOS..q...."..=....[GSUB..k........h...9OS/2.......M...`g`;.cmap...............Ggasp..kx............glyf...@..T\...`...head...X...6...6...zhhea.......!...$...Qhmtx...$............loca...x........`?.fmaxp........... .?..name..`....8.....R..post..c...........P......33...U_.<............G.....\5&.7...q..............x.c`d``K...8...?..f...@.d...........x.c`d``\|.p.A............\|..0....x.c`b.g.c`e``..j...(.../2.11 .........0......R..../.q..:.7@.l.........3........x..Mh\U........ .M7](.E..H.....c.S..RB.B.....J:.i.2H.a(..!5-C...B\..\..DEI)].).dQ..V....n..q..Nxx.=9.s...i..,A..Z.ok..)._.ptU9?.L.W........c..k.C+.e.G.U.E........'............ou.......30....7].h.v.......Ch.:......Z.f..;....k.2...aU%?.....a.}:.5.\|$......_.......}........_......C.w..{.{..D....k>.Q5...>......?...y....u.=......:..R.[P.[..S*.q!...h>\|.'....~...]..5..E....h...`...[.Wt.......:...I..c...`N#..d.h4...d..y...v..

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	378
Entropy (8bit):	5.189525271343864
Encrypted:	false
SSDEEP:	6:tI9mc4slzu9PVGSBT/Mhm+BNURUvdGoAVrvdGodW2PDRgaWdqqZe3KMQa9U6r8i:t4itGSBrMc+4RUmeaWgaRc9Ai
MD5:	F2F29BCBEA7EE3EE44CBCDC03404AA66
SHA1:	7120F637003BFF7D09D61F1CD921D789202B3354
SHA-256:	B54411C702D86464009A23FAF96F14D09B255922D68B1F22A5621750231D1EEA
SHA-512:	292007B6C874BD02856F7376D737F9F50E6B5832CD8E0DC696AD53901CBCA1E214FBCA1D736253ACBA05AE547653A69317A75C3033B1AA07947F98348D26FEF8
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/Content/images/previous-icon.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="7.882" height="14.632" viewBox="0 0 7.882 14.632"><defs><style>.a{fill:#999;}</style></defs><g transform="translate(7.882 14.632) rotate(180)"><g transform="translate(0 0)"><path class="a" d="M7.717,6.914.961.158a.563.563,0,0,0-.8.8L6.523,7.312.165,13.671a.563.563,0,0,0,.8.8L7.717,7.71A.563.563,0,0,0,7.717,6.914Z"/></g></g></svg>

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	583
Entropy (8bit):	4.99417154895903
Encrypted:	false
SSDEEP:	12:t4IFC/Bc4RUAHdFLVXjQkvjO0SFyiq8LD8c6xMjf:t4IF8BnRRHdFxuRFxLQcQMT
MD5:	7DE4F31DD3496EC89A24AE49A8439B51
SHA1:	E1C307031EFBBA3A917D69B1D81C46D1F9754D99
SHA-256:	4B957023FBE2A6325A82E5B94F71CC6A1F58F7585A4378047570B16634FA2F95
SHA-512:	20162266A956FB2496F25C008C9016680A3BF705D4D220DCFBA8AC12FDC185A908BA5794D0D74A09FBC47698D7F3FF17A8A57A46466E2BDAD2497697086A7AAA
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="18" height="14.25" viewBox="0 0 18 14.25"><defs><style>.a{fill:#fdfefe;}</style></defs><g transform="translate(0 -53.333)"><path class="a" d="M17.971,60.6a.375.375,0,0,0-.082-.409l-6.75-6.75a.375.375,0,0,0-.53.53l6.11,6.11H.375a.375.375,0,0,0,0,.75H16.72L10.61,66.938a.375.375,0,1,0,.521.539l.009-.009,6.75-6.75A.376.376,0,0,0,17.971,60.6Z"/><path class="a" d="M17.625,246.343H.375c-.207,0-.375-.253-.375-.565s.168-.565.375-.565h17.25c.207,0,.375.253.375.565S17.832,246.343,17.625,246.343Z" transform="translate(0 -185.324)"/></g></svg>

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1593)
Category:	dropped
Size (bytes):	3102
Entropy (8bit):	5.210435934797121
Encrypted:	false
SSDEEP:	96:BQ4FFJJtKjRa0poqt8NwAckGrnUiwvRKQjFlKGuQ:BPjJtKjPp3fUiwvI+FlHuQ
MD5:	10795314D7AC42294E46023F6C74021C
SHA1:	126928C8C746E04643A6595C66A29D235D35E262
SHA-256:	5CA4B8F31488A9932A185D0376F354DE4613E7377DB91EFEB472337816900C22
SHA-512:	C90B8B36B4D77681D5953DFDADDD6F62DF99BFD8B107014D189BC5F6BFCE9C1AF5E6754AEBA240E9B09A104F89CE823C68E081A97CB28D47D28B1B688F981D4B
Malicious:	false
Reputation:	low
Preview:	(function initApptentiveSDK() {. var manifest = {"application_id":"6567c1c6a2ec72132b15f3af","interactions":[{"id":"6567c1c6a2ec72132b15f3b6","display_type":null,"type":"MessageCenter","version":2,"api_version":8,"configuration":{"title":"Message Center","branding":"Powered by Apptentive","composer":{"title":"New Message","hint_text":"Please leave detailed feedback","send_button":"Send","send_start":"Sending...","send_ok":"Sent","send_fail":"Failed","close_text":"Close","close_confirm_body":"Are you sure you want to discard this message?","close_discard_button":"Discard","close_cancel_button":"Cancel"},"greeting":{"title":"Hello!","body":"We'd love to get feedback from you on our app. The more details you can provide, the better.","image_url":"https://app-icons.apptentive.com/6567c1c6a2ec72132b15f3af_1701364912.png"},"status":{"body":"We will respond to your message soon."},"automated_message":{},"error_messages":{"http_error_body":"It looks like we're having trouble sending your mess

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	782223
Entropy (8bit):	5.48615647253175
Encrypted:	false
SSDEEP:	12288:7yK2WbNTzCWSYA2AxFoRRqNMpcRH7juCjFiFICsMSYA2X/d0RtY:tTzCWQ2AxFoRRqNMpcRH7juCjFiFInMF
MD5:	E9E33DFA5856F5BB18DA20B1247FF36D
SHA1:	F4F4CF492F88062F79DDCB074C5DDBB323AE91F7
SHA-256:	8CD3FC6E82F194609F937935701EFE9FFACB23301B6C27A313FEE921655345B1
SHA-512:	DEBC6B35416272DB234C11946303B5890E8D3999827D412C51276262C91A8B59F30BD63AF75200D8C84097F9B7A05868CD3C7FA71BDF4B949E39E493DEAA8E28
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[916],{72551:(Gt,it,g)=>{g.d(it,{b:()=>f});var u=g(11662),W=g(81128),l=g(3814),w=g(50187),s=g(84197),j=g(50213),t=g(23279),O=g(56610),y=g(21640),B=g(66566),N=g(84993);function Y(p,D){if(1&p&&(t.qex(0),t.j41(1,"div",5)(2,"div",29)(3,"h2"),t.EFF(4),t.k0s()(),t.nrm(5,"i",30),t.k0s(),t.bVm()),2&p){const d=t.XpG(2);t.R7$(4),t.JRh(d.replaceStandardTerm("Request to close")),t.R7$(),t.FS9("matTooltip",d.reqCloseIndicatorTooltip)}}function at(p,D){if(1&p&&(t.qex(0),t.j41(1,"div",5)(2,"div",29)(3,"h2"),t.EFF(4),t.k0s()(),t.nrm(5,"i",30),t.k0s(),t.bVm()),2&p){const d=t.XpG(2);t.R7$(4),t.Lme("",d.replaceStandardTerm("Payoff")," or ",d.replaceStandardTerm("paydown"),""),t.R7$(),t.FS9("matTooltip",d.paydownIndicatorTooltip)}}function yt(p,D){if(1&p&&(t.qex(0),t.j41(1,"h2"),t.EFF(2),t.k0s(),t.bVm()),2&p){const d=t.XpG(2);t.R7$(2),t.Lme("",d.replaceStandardTerm("Loan")," ",d.replaceStandardTerm("payoff"),"")}}function

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (514)
Category:	downloaded
Size (bytes):	8077
Entropy (8bit):	4.792078386025652
Encrypted:	false
SSDEEP:	48:dLZcrmPD2kjTzura+vaBqsh6H3Lj9ZeHNQZIH1AHmZcP9DZRnNSD/gbcUrIQ0D4a:dL6rbXm/bg3DjiYRsB6U
MD5:	99926767E2E026E6C3CBECD1EE31CEB0
SHA1:	113F33D54D13EB32EF908A8F2820BD14E369B93E
SHA-256:	30C48EEF4E305A1F7E77D50DCAC4B5F7BAF250B0D55DFBAB468DB645BFB13C65
SHA-512:	7F5D88190231D3DDC192C09954ACE267B3845136AA8F809C2A29DFC4F7DE6B98EC1E7F953C150DD8C7BF50AEA40630BC0E78E926982E66C3C653FBA701F1F779
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/charts/51/js/jsapi_compiled_corechart_module.js
Preview:	var gvjs_iQ="#990000",gvjs_jQ="annotationText",gvjs_kQ="certainty";gvjs_iL.prototype.Jm=gvjs_V(70,function(a,b){if(this.Xg===gvjs_fw)return this.av(a,b);throw Error(gvjs_4r);});gvjs_jL.prototype.Jm=gvjs_V(69,function(a,b){return this.av(a,b)});function gvjs_lQ(a){var b=new gvjs_OE;b.sa=function(){return a};return b}function gvjs_mQ(a){gvjs_iL.call(this,a);this.cc(gvjs_d,gvjs_at,gvjs_S)}gvjs_o(gvjs_mQ,gvjs_iL);function gvjs_nQ(a){gvjs_iL.call(this,a);this.cc(gvjs_d,gvjs_4w,gvjs_S)}gvjs_o(gvjs_nQ,gvjs_iL);.function gvjs_oQ(a){gvjs_iL.call(this,a);this.cc(gvjs_d,gvjs_f,gvjs_S,"sparkline")}gvjs_o(gvjs_oQ,gvjs_iL);function gvjs_pQ(a){gvjs_iL.call(this,a);this.cc(gvjs_d,gvjs_e,gvjs_S)}gvjs_o(gvjs_pQ,gvjs_iL);function gvjs_qQ(a){gvjs_iL.call(this,a);this.cc(gvjs_Dd)}gvjs_o(gvjs_qQ,gvjs_iL);gvjs_qQ.prototype.Jm=function(a,b){return this.av(a,b)};function gvjs_rQ(a){gvjs_iL.call(this,a);this.cc(gvjs_yt)}gvjs_o(gvjs_rQ,gvjs_iL);function gvjs_sQ(a){gvjs_iL.call(this,a);this.cc(gvjs_d,gvjs_lt,gvjs

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1500x689, components 3
Category:	dropped
Size (bytes):	96938
Entropy (8bit):	7.901038492580623
Encrypted:	false
SSDEEP:	1536:df+2IrRfsH9QWS6jP15qre1CfmbuIj62LHRKW/gEXQrSCBCGWyPmS/0+rL2XWHe:81VEddKre1Lf621KW/gJ+CIAPvD+Ae
MD5:	F869756D214AFF606F4DF6F7C2899CA4
SHA1:	CB4B401CEA253A8C8CD3DDD332FF6C589F25B841
SHA-256:	D4C820D188A23C3DCE87A16900307BDC93C3F88B0D8CB2653C0C2CB9D32A7DAE
SHA-512:	E12113502C2643FB124D78A6CC4C2080F1B49A4D8B6BE0DDFFA450EEF18AE81D71C82E2A6ABD087748BDCA702499D22D6527CE2D54952968BF36C4C9E89214D5
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,......Exif..MM.*.............................V...........^.(.......................i.........f.......,.......,..............0210....................0100.......................o......................Photoshop 3.0.8BIM..........i.>Close,Up,Young,Man,Hand,Pressing,Calculator,With,House's,Model..n..Shutterstock..s..Shutterstock..t.ICopyright (c) 2020 chainarong06/Shutterstock. No use without permission......1662151927............http://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>..<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Image::ExifTool 12.38">...<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">....<rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/">.....<dc:description>......<rdf:Alt>.......<rdf:li xml:lang="x-default">close up young man hand pressing calculator with house's model and mail letter for check and summary expense of home loan mortgage for refinance plan and invoice monthly concept</rdf

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1468), with no line terminators
Category:	dropped
Size (bytes):	1468
Entropy (8bit):	5.80419190228783
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccA6+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtFtD1INxsLqJ:VKEcyKo7LmvtUjPKtX7ftD1INOLrwUnG
MD5:	955BABEDD811BED4D91929D0B9D6809F
SHA1:	9AB1FA57B306E32CB6C3BF6B67906EE26C9C4EE3
SHA-256:	B09B28A4904F1FC0DD7C783823238ACCF90BA45FFD678D5AB2949575D50A439E
SHA-512:	68CF71C4C9BCB56A3162967C3E2C83FF96D909C4CE013453A7631CECCB42872DFFCAF352445F090B3A5D9E6D801504443DFECDFCED6C3E643FAFB56851E54C15
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6Le4f5AqAAAAACMx6SI8VYM7etmAXowUb1ykbHGZ');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	20198
Entropy (8bit):	4.076903429045786
Encrypted:	false
SSDEEP:	384:NJaUh1Q/YDw+TtrnEwoPor0Nb9Z1OzsktyjxHLiPkctEDSIjj08:NJaUhi/YDwwrWPor0Nb9reyAPkcqDSI7
MD5:	B470AB8781DCAC2AE1A56D0E95D656C2
SHA1:	93557D82E28B2103EFBBDC8E9B444411607E0772
SHA-256:	BF6BAA5B68AEEF6969257BC62E8769BCA1C1E9A3B1A31903EBAC7850C14EB724
SHA-512:	737270EA636BCCFC4C9794E383B67B31CA2F174DF8C26472EE0187093D8192B04C142A31E35DFFB7F4F828AC79ABCE28FCB4919C05785A26B3CDBEBAA7434BC4
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/Content/images/favicon.ico
Preview:	............ .h...V......... ......... .... .....F...00.... ..%............ .P....D..(....... ..... ..........................................................................................}...}...}...}...}...}...}...}...}...}...}...}...}...}...}...}...}...}...}.2.}...}...}...}...}...}.L.}.b.}...}...}...}...}...}...}...}...}.?.}...}...}...}...}...}...}...}...}...}...}...}...}...}...}...}.:.}.u.}...}.(.}...}...}...}...}.y.}.L.}...}...}...}...}...}...}.Q.}...}...}.d.}...}...}...}...}...}.A.}...}...}...}...}...}...}...}...}...}...}...}...}...}...}...}...}...}.[.}...}...}...}...}...}...}...}...}...}...}...}...}.W.}...}.".}...}...}...}...}...}...}.Y.}...}...}...}...}...\|...}...}...}...}...}...}.L.{...z...y...u.......x.W.z...z...y.a.y...{...{...{...\|...}.T.}....5[..I.g.`cI.yVL.wXU.nY}.Mq..Jw`.g`Q.rP}.Ky..9....R.y.......~..7..%?..\|I.y.Q.r.Q.r.M.u.G.{.F.\|.K.w.M.u.C...;..J8...9...........Q.r.c.a.R.q/Q.r.Q.r.Q.r.Q.r.Q.r.Q.r.Q.r[T.o...8.W.m.....................Q.r.Q.r.Q.r8Q.r.Q.r.Q.roQ.r.Q.r.Q.

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12964), with no line terminators
Category:	downloaded
Size (bytes):	12964
Entropy (8bit):	5.435811018877785
Encrypted:	false
SSDEEP:	384:j0E0K0Jpho5EGdNfCKF4qU91wQF1DL4lD:jv1QphQEgNfCKF4191wQF1DL4lD
MD5:	8B93A054386B799DFA757F2C04540744
SHA1:	29888EF6A60F7108972D383D56975E3E04C338AD
SHA-256:	6980B25984B940E3BCF221221276B8D706B9498C1A265ADDD60CB7B1AB809AE3
SHA-512:	29AD321FCE9C0290EA11B491EE76156A8E6AC39A1CED69320905EE7C8A040A25664D64B4B88E8EC21806C72DABEC15059C6F7233387C2F36822C60A1FF3994CE
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/683.70cce1837196921e.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[683,997],{38997:(x,N,o)=>{o.d(N,{P:()=>y});var t=o(50187),n=o(50213),e=o(23279),D=o(56610);function b(r,d){if(1&r&&e.nrm(0,"h2",7),2&r){const i=e.XpG();e.Y8G("innerHTML",i.title,e.npT)}}function v(r,d){if(1&r&&e.nrm(0,"h2",8),2&r){const i=e.XpG();e.Y8G("innerHtml",i.title_1,e.npT)}}function m(r,d){if(1&r&&e.nrm(0,"div",7),2&r){const i=e.XpG();e.Y8G("innerHTML",i.section,e.npT)}}function g(r,d){if(1&r&&(e.j41(0,"div"),e.nrm(1,"p",7)(2,"p",7),e.k0s()),2&r){const i=e.XpG();e.R7$(),e.Y8G("innerHTML",i.content_1,e.npT),e.R7$(),e.Y8G("innerHTML",i.content_2,e.npT)}}function p(r,d){if(1&r){const i=e.RV6();e.j41(0,"div",9)(1,"a",10),e.bIt("click",function(){e.eBV(i);const u=e.XpG();return e.Njj(u.letsDoThisNews())}),e.nrm(2,"p",7),e.k0s()()}if(2&r){const i=e.XpG();e.R7$(2),e.Y8G("innerHTML",i.btnTitle,e.npT)}}let y=(()=>{class r extends t.Z{constructor(i){super(i),this.injector=i,this.isDshbrdnws4=!1}ngOnInit

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=14, height=3555, bps=0, PhotometricIntepretation=RGB, description=FAQs ( frequently asked questions ) wood letters on wood background, orientation=upper-left, width=5332], baseline, precision 8, 500x333, components 3
Category:	downloaded
Size (bytes):	82487
Entropy (8bit):	7.890965217696938
Encrypted:	false
SSDEEP:	1536:eghHnzrghHnzVDuokIxGZ2Ss5SipBuONGhV6eD7JBdiTHfNdVrCu:eUTrUTe4GECFhV6eD7diBdVrCu
MD5:	FA1BAC3F3CC71E697154B042603641BD
SHA1:	D808A129A1EB5CE5FD982512762A6B78D7B3FAD5
SHA-256:	5E762986EF9A2ED7DB19E00A78509C019038DF5A2D4AADA897131CE37499E354
SHA-512:	364C89236059F4C75D46B87C7BEA0708391E2B1E2CA641ADD2A4D12CE0524E712373AAB20234EA7ADBC475FB1C91BCDE65168E7AC8228F8532CFC353A84DB42F
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/FAQs.jpg?ext=.jpg
Preview:	.....$Exif..MM.*.............................................................D.....................................................(...........1.....".....2.........2.......I...F.i....................FAQs ( frequently asked questions ) wood letters on wood background.......'.......'.Adobe Photoshop CC 2019 (Windows).2021:06:10 10:26:45.Copyright (c) 2017 patpitchaya/Shutterstock. No use without permission.............0221...................................M.............................................(.....................&...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................k...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	4684149
Entropy (8bit):	5.6657771575513936
Encrypted:	false
SSDEEP:	49152:N90SKb3vNruSz7WI0IT1NX4bwV7uDfm7y2/QUOei30HCAQ3mkMMuDJk39sH02kh8:30Su3vNruSz7WI0IT/7y2/QUOei30LOm
MD5:	096170ED451F5A5BB848DD3B5B983F3A
SHA1:	F779B34C348EF63D5A2FA74B75ACA2779D66B1C5
SHA-256:	D317A2F5C8DC332C3365B08E9618A3975DD091D617FC3B7EE2BC5377402CADFE
SHA-512:	B537763A075A1E5AB7C0A7AA0DDDD1190C288A299E13A8A74B2F91751A72E6AEDCFF40B1BF5B4FEE65F13058B5C508F47F870B5436A7C364ED43B9B8496F1FAD
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[792],{92551:function(Ae,K,o){var i;Ae.exports=(i=o(73049),o(36462),o(1896),o(29614),o(66417),function(){var e=i,C=e.lib.BlockCipher,h=e.algo,d=[],m=[],g=[],l=[],u=[],c=[],E=[],D=[],S=[],x=[];!function(){for(var J=[],F=0;F<256;F++)J[F]=F<128?F<<1:F<<1^283;var re=0,ce=0;for(F=0;F<256;F++){var pe=ce^ce<<1^ce<<2^ce<<3^ce<<4;d[re]=pe=pe>>>8^255&pe^99,m[pe]=re;var Ce,Q=J[re],ze=J[Q],Re=J[ze];g[re]=(Ce=257J[pe]^16843008pe)<<24\|Ce>>>8,l[re]=Ce<<16\|Ce>>>16,u[re]=Ce<<8\|Ce>>>24,c[re]=Ce,E[pe]=(Ce=16843009Re^65537ze^257Q^16843008re)<<24\|Ce>>>8,D[pe]=Ce<<16\|Ce>>>16,S[pe]=Ce<<8\|Ce>>>24,x[pe]=Ce,re?(re=Q^J[J[J[Re^Q]]],ce^=J[J[ce]]):re=ce=1}}();var Y=[0,1,2,4,8,16,32,64,128,27,54],U=h.AES=C.extend({_doReset:function(){if(!this._nRounds\|\|this._keyPriorReset!==this._key){for(var F=this._keyPriorReset=this._key,re=F.words,ce=F.sigBytes/4,Q=4*((this._nRounds=ce+6)+1),ze=this._keySchedule=[],Re=0;Re<Q;Re++)Re<ce?ze[Re]=re[Re]:(J

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 56, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	4768
Entropy (8bit):	7.663263889601914
Encrypted:	false
SSDEEP:	96:vSLYkknmWIYW/K0QHnbHcigyzd7lyYVaCAsSwqdnyl/X8206ugW79F9:vSMkkn1Hbbg3Y4CrSvnyl/X4Fh
MD5:	F2550B432D80D425103D8DC3561441E1
SHA1:	073D29F80E87B893B4F57BE0280A85B808CD6716
SHA-256:	0741997B4C13CA9FC29730ED660EC456F56FC7971E5F6D946F77845607B303D7
SHA-512:	482A9DF557734FA09CD00B2C29D8D08927605BB97428D10AB7229C41A76E610DECD56CF8DB424BB6437E7C8C946A0EC8C85E6D3046E52696DF8CFC0B8180A040
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/MQ-app-logo-new.png?ext=.png
Preview:	.PNG........IHDR...@...8......zi%....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmp:CreateDate="2021-06-08T13:38:10-05:00" xmp:ModifyDate="2021-06-08T13:46:02-05:00" xmp:MetadataDate="2021-06-08T13:46:02-05:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:f152d61b-177a-8f4a-8c74-3e32a8f8f1fc" xmpMM:DocumentID="adobe:docid:photoshop:2f79e7a7-e4de-3d45-9326-99c3e6c5754

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3408), with no line terminators
Category:	dropped
Size (bytes):	3408
Entropy (8bit):	5.492968161369872
Encrypted:	false
SSDEEP:	96:sFSlWahHzRE9xiV7Vs9TYS4MIsu+Mp3yXefGM:sF6hHGDi9mVYvXs50OM
MD5:	7917ADCABDF1A46E6E5BBAA091DE226D
SHA1:	DB458B4ECF269EAF4557E831675A8FB591BF3712
SHA-256:	0736C24908BB7CF50D3388608B3C21630C7D37BBDE76C56F63C92F3120AA2B83
SHA-512:	732A68F4AFA27F8EBF7C15A5AF523AE45E4647F83E8CABC44BDC04001FBFBF811A336F9E4D8276B30C1C1A93390A0B518AC6DA9D11E1233DC71462CBD407708C
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";var e,v={},g={};function a(e){var n=g[e];if(void 0!==n)return n.exports;var r=g[e]={id:e,loaded:!1,exports:{}};return v[e].call(r.exports,r,r.exports,a),r.loaded=!0,r.exports}a.m=v,e=[],a.O=(n,r,i,d)=>{if(!r){var t=1/0;for(f=0;f<e.length;f++){for(var[r,i,d]=e[f],o=!0,c=0;c<r.length;c++)(!1&d\|\|t>=d)&&Object.keys(a.O).every(p=>a.O[p](r[c]))?r.splice(c--,1):(o=!1,d<t&&(t=d));if(o){e.splice(f--,1);var l=i();void 0!==l&&(n=l)}}return n}d=d\|\|0;for(var f=e.length;f>0&&e[f-1][2]>d;f--)e[f]=e[f-1];e[f]=[r,i,d]},a.n=e=>{var n=e&&e.__esModule?()=>e.default:()=>e;return a.d(n,{a:n}),n},a.d=(e,n)=>{for(var r in n)a.o(n,r)&&!a.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})},a.f={},a.e=e=>Promise.all(Object.keys(a.f).reduce((n,r)=>(a.f[r](e,n),n),[])),a.u=e=>e+"."+{10:"bf367f9955f02ef0",67:"4b11134a3977a2e1",77:"ec1ceb5dff6d9299",113:"22107a236e0a837f",127:"4db69428b5b9ca5e",136:"aedaf5153678dc31",203:"210081cca82a28a0",204:"60b4a89c5008cd37",325:"6acceb6542b8d769",359

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29607), with no line terminators
Category:	dropped
Size (bytes):	29607
Entropy (8bit):	5.480530380678138
Encrypted:	false
SSDEEP:	768:J9NWMYQDRjX+81xpfR/Qwl6wY8UPeM1xpVv8Ih85Jh78y7r89BIbwZ+VZYJTsl5t:J1DL41DnO7mZa35DBinG1
MD5:	3129E6AD58F1734B856841837EE351EB
SHA1:	8DB235E4F405014D2DACBE496A159B92ED4A0DFE
SHA-256:	CBBCBBF55B2F09E3C1DC935556A17BB1C205480B5D46CF42666F081702986C6C
SHA-512:	CD2283D8A007D433A6AE9137AE9761976C59B16205A5E3874960AC9A1A1805B4F75641CECFD809371D04AA06D98ED471D073964E1E3B90980F401A62A64F3220
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[773],{93409:(b,x,p)=>{p.d(x,{D:()=>Pe});var i=p(50187),u=p(58082),h=(p(50327),p(93295)),f=p(84692),e=p(23279),C=p(5957),d=p(56610),M=p(95894);function w(t,o){1&t&&e.eu8(0)}function O(t,o){if(1&t&&(e.qex(0),e.DNE(1,w,1,0,"ng-container",19),e.bVm()),2&t){e.XpG(2);const n=e.sdS(3);e.R7$(),e.Y8G("ngTemplateOutlet",n)}}function P(t,o){1&t&&e.eu8(0)}function m(t,o){if(1&t&&(e.qex(0),e.DNE(1,P,1,0,"ng-container",19),e.bVm()),2&t){e.XpG(2);const n=e.sdS(3);e.R7$(),e.Y8G("ngTemplateOutlet",n)}}function g(t,o){1&t&&e.eu8(0)}function c(t,o){if(1&t&&(e.qex(0),e.DNE(1,g,1,0,"ng-container",19),e.bVm()),2&t){e.XpG(2);const n=e.sdS(7);e.R7$(),e.Y8G("ngTemplateOutlet",n)}}function l(t,o){1&t&&e.eu8(0)}function r(t,o){if(1&t&&(e.qex(0),e.DNE(1,l,1,0,"ng-container",19),e.bVm()),2&t){e.XpG(2);const n=e.sdS(7);e.R7$(),e.Y8G("ngTemplateOutlet",n)}}function _(t,o){1&t&&e.eu8(0)}function F(t,o){if(1&t&&(e.qex(0),e.DNE(1,_,1,

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28766), with no line terminators
Category:	dropped
Size (bytes):	28766
Entropy (8bit):	5.486079470671268
Encrypted:	false
SSDEEP:	768:Qz94T7hWJwdHlVqFs7ejSJEBjC2hmdemEG2:C4TNWJwdHlVqFs7ejSJEBjC2aem2
MD5:	EA694C54512BF6341E3AE6A8EE0F3235
SHA1:	626F378C8A4B1AAE8E1105356C313E35F2602F5F
SHA-256:	265DC08DE517C63B23B4A82E46CB5201D6605B16223EB17068142273926AA876
SHA-512:	9C9C8B1CBE6D90EE5702AE62FD48D40FBF59DF05F97C6E858A0563E9FD2A8C9C0C76B27B4B188F830A021DAEF56C346547E5E9E7E630BDDCBB408C9101B8919E
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[113],{10113:(Nt,v,e)=>{e.r(v),e.d(v,{EducationModule:()=>Dt});var m=e(56610),u=e(57936),f=e(37440),y=e(95565),p=e(61480),h=e(50187),d=e(50213),n=e(23279),_=e(97800),k=e(62465),g=e(17662),b=e(61448),G=e(58082),C=e(36995),x=e(98278),T=e(26182),E=e(29344),w=e(66865),c=e(52161),M=e(84993),I=e(72551),R=e(64927),S=e(60679),Y=e(499),j=e(38343),$=e(58376),P=e(60662),L=e(90941),F=e(45725),O=e(37051),D=e(68789),N=e(72074),U=e(39029),X=e(79217),A=e(5317),B=e(68571),V=e(12783),H=e(41428),W=e(66814),z=e(99498),Z=e(27432),K=e(25866),J=e(80202);function Q(t,i){1&t&&(n.qex(0),n.j41(1,"h2"),n.EFF(2,"Stay on track: set your goals"),n.k0s(),n.nrm(3,"div",7),n.j41(4,"div",8),n.nrm(5,"mat-icon",9),n.j41(6,"div",10)(7,"p"),n.EFF(8,"Here are your goals at a quick glance. Click a specific goal to learn more"),n.k0s()()(),n.bVm())}function q(t,i){if(1&t&&(n.j41(0,"mat-option",17),n.EFF(1),n.k0s()),2&t){const a=i.$implicit;n.Y

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18492, version 1.0
Category:	downloaded
Size (bytes):	18492
Entropy (8bit):	7.988005025098439
Encrypted:	false
SSDEEP:	384:jHq3alnVfBJBuMlPGCh9NBRLS64LRb0v5waXf0BFY0/rJ8Zw4bzUQb:jHqKf5JMOPdzNPLS64laxsFY0t8XcM
MD5:	7FDA4C62C1BDEAE7A08E6FD438104BAC
SHA1:	B1F626E78F5F6D7BE993303A49EB81F0FA4CE57C
SHA-256:	4DBD328E347E890A801D51F9A5F8D38A3EFD51EC34C0AA22CC83D0A95D6D9D71
SHA-512:	C4A36A3C1FF23023533DFF103A108844B7CFE4E793ABA0B1B5576431E77DD6E9EDF29FAD68132577AD6AD55CA7A011A38723DA2FA15D9071D2C6BA4E02D1DADC
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
Preview:	wOF2......H<..........G..............................Z..\|.`..J.X..<.....P..N..Z...x.6.$..0. ..\|. ..:...%l.F.......T.mZ..V.n!.53.l.@..N....CD.!f......I.(;..Cw.2L..@....M....(.H].......1..I&..tE.e....D...}y..6D.h.Z..$y.J.X._....J2 .(.....=M..+Hd.Y.6.f.J.z..:.........#.#...3..;.<..q./.,g.tK.Y.Ne.?......1.b.......S.".~..\|Q.9.1Q.Y.^....MkF......;v..g(.(S...Z.>...l.XW.Z....-Q.h..MR8$..W(..Wh.0....X..;]3...:..\/..L...L.U...6".h?K.....A.....(2z.uRTn...GaJ......+..4..d...I.[!..Ua..x..4.,@..t....3.e..J._'..R.j.p.t...`.4.......aI,.....W..9V..K..c..... g...:.........'..6.O.0+..;Q..&..e..=..sg......Eg.2.R.M..{{w.{{'4.L.O2.L$) ;..`....PeW..O..iS..e..S.l... .....R.R.+.!.uLUE~...C.JN..J.r...@..g..:.\..;..s.n.s........sq4... ;..N.`.H<T.....p.#2.e....H..T...........1....^......L.....R...R.1.!............E..m_Z~....z..L..j....".q~..Pg!X}1.q.!.n......@.d...._5=..x.......[.y.#$Q.d.........j...1n.....&...-(N..P\5<.f.qB..\|.i...q<.'..C.A...\.i.x.9........1.>....

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42686), with no line terminators
Category:	downloaded
Size (bytes):	42686
Entropy (8bit):	5.451110988956773
Encrypted:	false
SSDEEP:	768:v7WuHuoZzgsKwhKHeICjQgRGOhOQ3YBwnQgETee0rXAe+Xl6W/+DaXS/AzXbaOi+:v6uH91K+ICH14zGNPw6DR42zienmH3
MD5:	3B401C2E0F0EAAB29323A6DD1CAADFBC
SHA1:	15A3F2F4B8AB5D33E0EB20A5AC3A150D577D994D
SHA-256:	74D9C6209E008CE33A8EDB728880D9AAB2C1378AB0845566046F35DCE138A79C
SHA-512:	D7CADBE98C667FC6026B0F67E1D35D1673DD05CF63FDE0F6316C3031873F642268679FF141FE5E8924D693F5DF72A9C20A4848B36D23FC6E8FCFC0AF18F21249
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/474.a445087bc18f6527.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[474],{81927:(S,I,d)=>{d.d(I,{y:()=>y});var s=d(86482),D=d(93473),k=d(13713),b=d(50213),_=d(23279),C=d(61480),x=d(56610),e=d(72221),R=d(84993);const A=["mainContent"];function T(M,E){1&M&&_.nrm(0,"bki-busy-indicator",14)}let y=(()=>{class M{constructor(v,f,r,h,l,g){this.dialogRef=v,this.router=f,this.standardTermsConversionService=r,this.analyticService=h,this.linkoutService=l,this.dialogData=g,this.url="",this.isBusy=!0,this.emailAddress="",this.dialogData&&Object.keys(this.dialogData).forEach(m=>{this[m]=this.dialogData[m]})}ngOnInit(){setTimeout(()=>{this.nameField.nativeElement.focus()},100)}hideModal(v){this.analyticService.googleAnalyticsEvent(b.Fg.request_assistance_introduction_710_form_continue,b.t5.MortgageAssistance),this.analyticService.userActivityEvent(b.LW.request_assistance_introduction_710_form_continue,b.Ld.MortgageAssistance,this.analyticService.getEventContext()),this.dialogRef.clos

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2796
Entropy (8bit):	4.4818601033244745
Encrypted:	false
SSDEEP:	48:ARKX0O9/1rSKfPhN6Pv/tPgB7kbHLkaIcw8JJBwZXY7kh4J:AejqtykzlIcLJMZo7kaJ
MD5:	F35FD7C16C1D669D92DE5FD724D2F7D1
SHA1:	92211A5578E75CE161572849CB11785E39AAB028
SHA-256:	80750CC02B0D116EAA15E9C8449957EFBD5945FB890D121DCC59FB9698C023E0
SHA-512:	6EB69EA2AD3F93A46B21AAEFA51111B4594CB589266220C8CEB681CFFE85E50DAD5EDA5DD0068843A7F540CDA8E4B92A4FDFCEEEC61B7E95DD2AD03E91B31227
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="65.712" height="65.702" viewBox="0 0 65.712 65.702"><defs><style>.a{fill:#117ec1;}</style></defs><g transform="translate(-0.061 -0.018)"><path class="a" d="M400.527,93.713a5.816,5.816,0,1,1,5.806-5.806,5.816,5.816,0,0,1-5.806,5.806m0-10.005a4.2,4.2,0,1,0,4.2,4.2,4.2,4.2,0,0,0-4.2-4.2" transform="translate(-367.604 -82.062)"/><path class="a" d="M400.527,145.213a5.816,5.816,0,1,1,5.806-5.816,5.816,5.816,0,0,1-5.806,5.816m0-10.016a4.2,4.2,0,1,0,4.2,4.2,4.2,4.2,0,0,0-4.2-4.2" transform="translate(-367.604 -79.493)"/><path class="a" d="M426.276,119.463a5.816,5.816,0,1,1,5.816-5.806,5.816,5.816,0,0,1-5.816,5.806m0-10.005a4.2,4.2,0,1,0,4.2,4.2,4.2,4.2,0,0,0-4.2-4.2" transform="translate(-366.319 -80.778)"/><path class="a" d="M374.777,119.463a5.816,5.816,0,1,1,5.806-5.806,5.816,5.816,0,0,1-5.806,5.806m0-10.005a4.2,4.2,0,1,0,4.2,4.2,4.2,4.2,0,0,0-4.2-4.2" transform="translate(-368.889 -80.778)"/><path class="a" d="M418.636,101.343a5.816,5.816,0,1,1

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12720
Entropy (8bit):	4.948901526461946
Encrypted:	false
SSDEEP:	384:Mg35fzPzmPaRI6C2cSZeleZlkKPO4dsr74P:MgpfzCSUjOW0P
MD5:	C5934A97CD2E7A2CE012214D66AB8515
SHA1:	E5553D827C725B9CB6619D019363A71CF18B7C69
SHA-256:	E9C9244F08810A7573B16FD89288D4587F617DE4C005B3E4D74EE034B6DBF280
SHA-512:	96CFCEC47F300865606FABF7284BFAEDC3F919B553425BB88B93CD23C943EFF03F2B379C5908FAB004DD1F53774102C5B9911CAD623DD669F4E39984397110EE
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/charts/51/css/util/util.css
Preview:	/* javascript/gviz/devel/jsapi/static/util/css/toolbar.css */..google-visualization-toolbar {. font-size: 100%;.}...google-visualization-toolbar .google-visualization-toolbar-export-igoogle {. margin-right: 0.1em;.}...google-visualization-toolbar .google-visualization-toolbar-export-data {. margin-right: 0.1em;.}...google-visualization-toolbar .google-visualization-toolbar-html-code {. margin-right: 0.1em;.}...google-visualization-toolbar-html-code-explanation {. font-weight: bold;.}...google-visualization-toolbar-ok-button {. padding: 2px;.}...google-visualization-toolbar-triangle {. position: absolute;. right: 0px;. top: 0px;.}...google-visualization-toolbar-caption-table {. width: 100%;. padding: 0;. margin: 0;. border: 0;. border-collapse: collapse;.}...google-visualization-toolbar-small-dialog {. width: 500px;.}...google-visualization-toolbar-big-dialog {. width: 800px;.}...google-visualization-toolbar-small-dialog,..google-visualization-toolbar-big-dialog {. posi

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2186)
Category:	dropped
Size (bytes):	62428
Entropy (8bit):	5.434909466624309
Encrypted:	false
SSDEEP:	1536:nygImrQ9lbiv3fG3K2cRGJKeARlXAnVYqkAKDS16nH:x1QzbivRRen9K
MD5:	32BC41D964FAA1B95D9C61FC443DF579
SHA1:	02D3F83DAC14FE996BABBFE332779ED182D39D1C
SHA-256:	369AE154EAB37B7ADA7776B934833183BB053EBD1D0255F70EF8944F65CABB0C
SHA-512:	45539D5A40BF03B25C6F4328C0D10BF62A1012FF9BE634877D62EC8A7FF35B25DD6CDC0FDFD5FCAE2E3D980B6E4BA653B259C099935D52A20E8B6581CCE521D5
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var l=ca(this);function p(a,b){if(b)a:{var c=l;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.p("Symbol",function(a){function b(h){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(h\|\|"")+"_"+e++,h)}funct

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1590
Entropy (8bit):	4.934387451808658
Encrypted:	false
SSDEEP:	48:YHz/GPIY4F5qiFJJZlJKjRaTg+EiASr+tE3V:yY4FFJJtKjRa0poqtEl
MD5:	177A3D913C4075CB77D75E28383CBF6F
SHA1:	AD2B2E05177311BC1E498330E56096B3B21D5525
SHA-256:	BFCA9610F9690F289E58C67AA776BF3691B846086C1D928A7ED884788335CD14
SHA-512:	6C2E708E629C1A3F86180E8150A917B58F0F938F40786489045DD0C75129D06D57D2BB19EC3F78FD5059838CE08E22356596C373AC6F432CC8C0CE42AB6A8CE5
Malicious:	false
Reputation:	low
URL:	https://api.apptentive.com/v1/apps/6567c1c6a2ec72132b15f3af/manifest?api_version=15&locale=en-US
Preview:	{"application_id":"6567c1c6a2ec72132b15f3af","interactions":[{"id":"6567c1c6a2ec72132b15f3b6","display_type":null,"type":"MessageCenter","version":2,"api_version":15,"configuration":{"title":"Message Center","branding":"Powered by Apptentive","composer":{"title":"New Message","hint_text":"Please leave detailed feedback","send_button":"Send","send_start":"Sending...","send_ok":"Sent","send_fail":"Failed","close_text":"Close","close_confirm_body":"Are you sure you want to discard this message?","close_discard_button":"Discard","close_cancel_button":"Cancel"},"greeting":{"title":"Hello!","body":"We'd love to get feedback from you on our app. The more details you can provide, the better.","image_url":"https://app-icons.apptentive.com/6567c1c6a2ec72132b15f3af_1701364912.png"},"status":{"body":"We will respond to your message soon."},"automated_message":{},"error_messages":{"http_error_body":"It looks like we're having trouble sending your message. We've saved it and will try sending it agai

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1712
Entropy (8bit):	4.367311345747244
Encrypted:	false
SSDEEP:	24:t41jz1vgUwEaSe1Rpk6DxUILeAu0/1lWZzGL540jrunhYU2nMtm7KvGVhv6Zb:CBlQRpNUZNm1QG60GC7MID2b
MD5:	14F159F884E5E99C4AE970F1D4F76D9C
SHA1:	A82EEC84DD2BA3A097DABF3F1435E208E1AC94E0
SHA-256:	43FD08AF836BF0BFB52DB0D2C05E3A96DD6EC3810BF7A69AE3869E65B417F60D
SHA-512:	5F40E65E6AF23C26B6385A7D42088C05F7953299CA01EB027ED7C2A06CB6571D02A5D7A285F510AD4DFE15B694FE9ED0E905F8751EDE0D881515D65561770748
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/call_help.svg?ext=.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 34.15 40.06"><defs><style>.cls-1{fill:#007dc5;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path class="cls-1" d="M30,31.75c-.06,0-.2-.09-7.2-1.74-.07,0-1.52-.37-1.53-1.65V28h0c0-.57,0-1.89,0-2.87A8,8,0,0,0,24.64,22c.78,0,1.2,0,1.42,0h0a2.73,2.73,0,0,0,.57,0A2.63,2.63,0,0,0,28.68,20h1.06a3,3,0,0,0,3-3V15a3,3,0,0,0-3-3h-1V11a11,11,0,0,0-11-11h-1a11,11,0,0,0-11,11v1h-1a3,3,0,0,0-3,3v2a3,3,0,0,0,3,3H9a8,8,0,0,0,3.85,5c0,1.2,0,2.49,0,3l0,.33c0,1.28-1.46,1.64-1.52,1.65-7,1.65-7.15,1.72-7.15,1.72C-.34,33.09,0,36.44,0,36.44v3.62H24.45a.5.5,0,0,0,.5-.5.51.51,0,0,0-.5-.5H1V36.38s-.27-2.57,3.5-3.7c.24-.08,3.67-.89,6.31-1.52l6.81,4.14,6.54-3.94c2.49.59,5.28,1.25,5.51,1.33,3.72,1.11,3.49,3.59,3.48,3.75v2.62H29.82a.5.5,0,0,0-.5.5.5.5,0,0,0,.5.5h4.33V36.5S34.51,33.1,30,31.75Zm-8-24A15.69,15.69,0,0,1,9.74,12.3V11a7,7,0,0,1,7-7h1a7,7,0,0,1,7,7v1.54a8.4,8.4,0,0,1-4.81-1.82,18.68,18.68,0,0,0,2.81-2.21ZM26.4

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42686), with no line terminators
Category:	dropped
Size (bytes):	42686
Entropy (8bit):	5.451110988956773
Encrypted:	false
SSDEEP:	768:v7WuHuoZzgsKwhKHeICjQgRGOhOQ3YBwnQgETee0rXAe+Xl6W/+DaXS/AzXbaOi+:v6uH91K+ICH14zGNPw6DR42zienmH3
MD5:	3B401C2E0F0EAAB29323A6DD1CAADFBC
SHA1:	15A3F2F4B8AB5D33E0EB20A5AC3A150D577D994D
SHA-256:	74D9C6209E008CE33A8EDB728880D9AAB2C1378AB0845566046F35DCE138A79C
SHA-512:	D7CADBE98C667FC6026B0F67E1D35D1673DD05CF63FDE0F6316C3031873F642268679FF141FE5E8924D693F5DF72A9C20A4848B36D23FC6E8FCFC0AF18F21249
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[474],{81927:(S,I,d)=>{d.d(I,{y:()=>y});var s=d(86482),D=d(93473),k=d(13713),b=d(50213),_=d(23279),C=d(61480),x=d(56610),e=d(72221),R=d(84993);const A=["mainContent"];function T(M,E){1&M&&_.nrm(0,"bki-busy-indicator",14)}let y=(()=>{class M{constructor(v,f,r,h,l,g){this.dialogRef=v,this.router=f,this.standardTermsConversionService=r,this.analyticService=h,this.linkoutService=l,this.dialogData=g,this.url="",this.isBusy=!0,this.emailAddress="",this.dialogData&&Object.keys(this.dialogData).forEach(m=>{this[m]=this.dialogData[m]})}ngOnInit(){setTimeout(()=>{this.nameField.nativeElement.focus()},100)}hideModal(v){this.analyticService.googleAnalyticsEvent(b.Fg.request_assistance_introduction_710_form_continue,b.t5.MortgageAssistance),this.analyticService.userActivityEvent(b.LW.request_assistance_introduction_710_form_continue,b.Ld.MortgageAssistance,this.analyticService.getEventContext()),this.dialogRef.clos

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2369
Entropy (8bit):	4.816178287903932
Encrypted:	false
SSDEEP:	48:OdeJYrF2UkJNMWJr2C/j2jHdaV9IZ3Ep0kSf1K1NCZrobDR:tWZkB2Kj6aViZ3E6ffAQmDR
MD5:	3276C76D71565D25C787999484FB689B
SHA1:	DEA4A67AD34B364E7DB8CF44C9478E5767382489
SHA-256:	F7B28C39A23A8F6092E9EE3456A46A4B825ADCC02DBE4055F21982C0BD247CF4
SHA-512:	1C2859E4E7574AB2FA99A1B138C225E5D191F8C34B6996599904467438964D87304930B59ADC2E5C9B180B5561C0F980288C3750F7FD1998EF6AE5313004308B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="64.491" height="62.527" viewBox="0 0 64.491 62.527"><defs><style>.a{fill:#007cc5;}</style></defs><g transform="translate(-441.418 -9.676)"><path class="a" d="M533.432,117.26a.8.8,0,0,1-.58-.246L509.091,93.263l-23.761,23.751a.826.826,0,0,1-1.17,0l-4.424-4.424a.816.816,0,0,1,0-1.17l28.637-28.775a.885.885,0,0,1,.59-.246.088.088,0,0,0,.069,0,.816.816,0,0,1,.649.236l28.775,28.775a.826.826,0,0,1,0,1.17L534.031,117a.816.816,0,0,1-.59.246M509.68,91.493h0l23.761,23.761L536.7,112,509.022,84.346,481.5,112l3.254,3.264L508.5,91.5a.836.836,0,0,1,1.17,0h0m-1.229-8.789.58.59Z" transform="translate(-38.07 -72.721)"/><path class="a" d="M531.669,99.887h-1.661V87.441h-6.036v4.7H522.31V86.616a.836.836,0,0,1,.836-.836h7.707a.836.836,0,0,1,.836.836Z" transform="translate(-38.795 -72.778)"/><path class="a" d="M502.6,137.711H489.326a.836.836,0,0,1-.836-.826V116.948h1.661v19.082h11.62V114.756a.836.836,0,0,1,.826-.836h13.281a.826.826,0,0,1,.826.836v4.424h-1.652v-3.6

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12964), with no line terminators
Category:	dropped
Size (bytes):	12964
Entropy (8bit):	5.435811018877785
Encrypted:	false
SSDEEP:	384:j0E0K0Jpho5EGdNfCKF4qU91wQF1DL4lD:jv1QphQEgNfCKF4191wQF1DL4lD
MD5:	8B93A054386B799DFA757F2C04540744
SHA1:	29888EF6A60F7108972D383D56975E3E04C338AD
SHA-256:	6980B25984B940E3BCF221221276B8D706B9498C1A265ADDD60CB7B1AB809AE3
SHA-512:	29AD321FCE9C0290EA11B491EE76156A8E6AC39A1CED69320905EE7C8A040A25664D64B4B88E8EC21806C72DABEC15059C6F7233387C2F36822C60A1FF3994CE
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[683,997],{38997:(x,N,o)=>{o.d(N,{P:()=>y});var t=o(50187),n=o(50213),e=o(23279),D=o(56610);function b(r,d){if(1&r&&e.nrm(0,"h2",7),2&r){const i=e.XpG();e.Y8G("innerHTML",i.title,e.npT)}}function v(r,d){if(1&r&&e.nrm(0,"h2",8),2&r){const i=e.XpG();e.Y8G("innerHtml",i.title_1,e.npT)}}function m(r,d){if(1&r&&e.nrm(0,"div",7),2&r){const i=e.XpG();e.Y8G("innerHTML",i.section,e.npT)}}function g(r,d){if(1&r&&(e.j41(0,"div"),e.nrm(1,"p",7)(2,"p",7),e.k0s()),2&r){const i=e.XpG();e.R7$(),e.Y8G("innerHTML",i.content_1,e.npT),e.R7$(),e.Y8G("innerHTML",i.content_2,e.npT)}}function p(r,d){if(1&r){const i=e.RV6();e.j41(0,"div",9)(1,"a",10),e.bIt("click",function(){e.eBV(i);const u=e.XpG();return e.Njj(u.letsDoThisNews())}),e.nrm(2,"p",7),e.k0s()()}if(2&r){const i=e.XpG();e.R7$(2),e.Y8G("innerHTML",i.btnTitle,e.npT)}}let y=(()=>{class r extends t.Z{constructor(i){super(i),this.injector=i,this.isDshbrdnws4=!1}ngOnInit

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5913
Entropy (8bit):	4.79240855955947
Encrypted:	false
SSDEEP:	96:YcjvcbtTyZ9z9Zva7zSMDPrDxDtvoz+H46Oww6oWWjhMKV:1uQFZypDnx9Bn+
MD5:	370DAF8605778E4C4D46BFD809C2DAAF
SHA1:	059560A1C517C601DDB3E0E4C5447A768FA1F1C0
SHA-256:	D9323653BA55784E9C985870E57CFFB3E810CDBE96518B07DA5830C0E3765241
SHA-512:	D02C5E5B20B04796959D9ADA4B79EDA7F79B4CFD178EF679ADE5214A98688D7BA3D51D1022658D0BB2B9A5C6985A8E410A4A35CCF9008AE66DED9BC170E95AFF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="49.193" height="63.869" viewBox="0 0 49.193 63.869"><defs><style>.a{fill:#007dc5;}</style></defs><g transform="translate(-555.009 -9.649)"><path class="a" d="M620.848,112.4H616.22a1.235,1.235,0,0,1-1.235-1.245v-2.231h-2.148v2.231A1.235,1.235,0,0,1,611.6,112.4h-4.628a1.235,1.235,0,0,1-1.235-1.245v-8.094a1.2,1.2,0,0,1,.363-.872l6.932-6.942a1.3,1.3,0,0,1,1.754,0l6.942,6.932a1.245,1.245,0,0,1,.353.872v8.094a1.235,1.235,0,0,1-1.235,1.245M607.12,111.149Zm9.246-.145H620.7v-7.886l-6.786-6.8-6.869,6.849v7.845h4.337v-3.466h5ZM613.813,96.228Z" transform="translate(-34.555 -72.248)"/><path class="a" d="M623.388,94.231H604.9a.737.737,0,0,1-.726-.726v-5.78a.706.706,0,0,1,.726-.716h3.943a5.344,5.344,0,0,1,10.595,0h3.953a.716.716,0,0,1,.716.726V93.5a.726.726,0,0,1-.726.726m-.706-1.453V88.451h-3.9a.726.726,0,0,1-.726-.726,3.9,3.9,0,1,0-7.793,0,.726.726,0,0,1-.726.726h-3.9v4.337" transform="translate(-34.578 -72.721)"/><path class="a" d="M596.521,89.21a3.53

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	17343
Entropy (8bit):	4.574648456324525
Encrypted:	false
SSDEEP:	192:dpRaSMvrZd5RqyMk5RWG8LXIiql5R0UqrmfKkKQMSoR0OUt:dpRKvrZd5Rek5RQ25REE
MD5:	57CADFE98295AEAF0EAD1679CE7A7F03
SHA1:	3A944FF6CB7DA7FA325FC0DA9893297EF0AE438E
SHA-256:	90726592DA817D93844A110B981AC667573BA396E6A0B0EA446B61AC093428C3
SHA-512:	E11EC9F373D94D3E44E7279C29D854381C1ACD6644AAE2A6F47252D508F21C3F212DA337B5C11EDA952E31811E58000FAF873E9EA6D2483923C8ED8A4951AE57
Malicious:	false
Reputation:	low
Preview:	..function handleFailedAPICall(response) {.. $('#exceptionMessage').removeClass('d-none');.. console.error(`Failed API Response: ${response}`)..}......function handleErrorResponse(response) {.. $('#errorMessage').removeClass('d-none');.. console.error(`Error API Response: ${response}`)..}....$('#frmAssistanceLocator').on('submit', (e) => {.. e.preventDefault();.. $('#successMessageBITB').addClass('d-none');.. $('#successMessageNOBITB').addClass('d-none');.. $('#successMessageSD').addClass('d-none');.. $('#errorMessage').addClass('d-none');.. $('#exceptionMessage').addClass('d-none');.... $('#frmAssistanceLocator').addClass('was-validated');.. if ($('form input:required:valid').length !== $('form input:required').length) {.. e.preventDefault();.. } else {.. $('#frmAssistanceLocator').addClass('positionrelative');.. $('#frmAssistanceLocator').append('<div class="loaderimg"></div>');.. .... grecaptcha.ready(function

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	86959
Entropy (8bit):	5.251894241992128
Encrypted:	false
SSDEEP:	1536:U7khn1KLiK+6a+gx1Lh+CNsAlxJd97f48WF/xTLw03XR3c8h4DZwCp:HX/+CWE/4TLw03Bx4wCp
MD5:	DF90194413117476ACB1693DCA99FAEB
SHA1:	7CCA30AF7E30A98B1EA8228DF054087A7F189D4D
SHA-256:	174AE13B9457AEA32B20EF28E726E7CBF023775C914760FB777B60152AC451F9
SHA-512:	04AE8FD24306452F217A079F63CEA14F0D83BF92CD40940EDD86DFF727EDDCCBDC082E906CE929E3492065151E1AC9AD2604922159F229562AA4828430CA10D9
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/bundles/jquery?v=N2YlHnRI7it2_JoqUZTYWxPtx-s61zIGkk78Q0eabPM1
Preview:	!function(n,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=n.document?t(n,!0):function(n){if(!n.document)throw new Error("jQuery requires a window with a document");return t(n)}:t(n)}("undefined"!=typeof window?window:this,function(n,t){"use strict";function nu(n,t,i){var r,e,f=(i=i\|\|u).createElement("script");if(f.text=n,t)for(r in le)(e=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&f.setAttribute(r,e);i.head.appendChild(f).parentNode.removeChild(f)}function et(n){return null==n?n+"":"object"==typeof n\|\|"function"==typeof n?oi[dr.call(n)]\|\|"object":typeof n}function ki(n){var t=!!n&&"length"in n&&n.length,i=et(n);return!e(n)&&!ft(n)&&("array"===i\|\|0===t\|\|"number"==typeof t&&0<t&&t-1 in n)}function s(n,t){return n.nodeName&&n.nodeName.toLowerCase()===t.toLowerCase()}function we(n,t){return t?"\0"===n?".":n.slice(0,-1)+"\\"+n.charCodeAt(n.length-1).toString(16)+" ":"\\"+n}function di(n,t,r){return e(t)?i.grep(n,function(n,i){return!!t.call(n,i,n)!=

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	330788
Entropy (8bit):	5.578794341231974
Encrypted:	false
SSDEEP:	6144:u43hYnsmQ8pHZ1HcRCrKkEZMf3/+rfNFuT+bseG:33hm9pH7Hc8YHbG
MD5:	F9BA97328A31D98B07B0778642F6CF0F
SHA1:	E5DA82C5855C49903914158E15F066E672112E55
SHA-256:	59AE9A06D173DE6D218004FE9940EED2A9FEF85A5FCB8F07747C65AA1E75B44E
SHA-512:	9DA807F087C9571B82B2A514731009C99F925A4EC1B917BF4863FB374A6BB10313FEAEE8DE5EE23301BA831E6C5699E057263BA666176D65EF19A653DC5C872D
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5305), with no line terminators
Category:	dropped
Size (bytes):	5305
Entropy (8bit):	5.4844247424999235
Encrypted:	false
SSDEEP:	96:Lf4J1LB0QiSAm0RSkPcjDpIW6UrFtlv8hccfiXj5+M06p10ASSgyifLx:03UeDpI2BtlEGz5+Mh5u9
MD5:	AAEB92ABC60635A7CF287EE85C274BB1
SHA1:	B553A0EBCF02F522918C33A9222BED5F605C7D23
SHA-256:	BB54C0796F11F83807A43FA39E063015C0385F62160BEB9B9B7EA34B88501A5E
SHA-512:	1FCB93F6DAA1E1E941C3852D05D99BDCDB8AF827856389C1CD98DA8C6ACC2C3BB126D1790F4838B201002B6E15056D0AEB3ADCEB90595EFA6A3162DE5B54FAE5
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[532],{12783:(h,d,i)=>{i.d(d,{D:()=>E});var o=i(50213),m=i(50187),_=i(93473),e=i(23279),s=i(56610),l=i(72221);function M(t,u){1&t&&e.nrm(0,"img",12)}let r=(()=>{class t extends m.Z{constructor(n,a){super(n),this.linkoutService=a}ngOnInit(){super.ngOnInit(),this.myHomeCareModalTitle=this.configService.getFeatureContentTitle("MHCAREBTN","MHCAREBTN_MODAL"),this.myHomeCareModalSection=this.configService.getFeatureContentSectionWithImages("MHCAREBTN","MHCAREBTN_SEC1")}hideModal(){this.analyticService.userActivityEvent(o.LW.cancel_my_homecare_service_request,o.Ld.MyLoan,this.analyticService.getEventContext()),this.analyticService.googleAnalyticsEvent(o.Fg.my_homecare_cancel_service,o.t5.Loan),this.closeModal()}proceedToHouseHappy(){this.analyticService.userActivityEvent(o.LW.proceed_my_homecare_service_request,o.Ld.MyLoan,this.analyticService.getEventContext()),this.analyticService.googleAnalyticsEvent(o.Fg.

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	782223
Entropy (8bit):	5.48615647253175
Encrypted:	false
SSDEEP:	12288:7yK2WbNTzCWSYA2AxFoRRqNMpcRH7juCjFiFICsMSYA2X/d0RtY:tTzCWQ2AxFoRRqNMpcRH7juCjFiFInMF
MD5:	E9E33DFA5856F5BB18DA20B1247FF36D
SHA1:	F4F4CF492F88062F79DDCB074C5DDBB323AE91F7
SHA-256:	8CD3FC6E82F194609F937935701EFE9FFACB23301B6C27A313FEE921655345B1
SHA-512:	DEBC6B35416272DB234C11946303B5890E8D3999827D412C51276262C91A8B59F30BD63AF75200D8C84097F9B7A05868CD3C7FA71BDF4B949E39E493DEAA8E28
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/916.916f71506db059bf.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[916],{72551:(Gt,it,g)=>{g.d(it,{b:()=>f});var u=g(11662),W=g(81128),l=g(3814),w=g(50187),s=g(84197),j=g(50213),t=g(23279),O=g(56610),y=g(21640),B=g(66566),N=g(84993);function Y(p,D){if(1&p&&(t.qex(0),t.j41(1,"div",5)(2,"div",29)(3,"h2"),t.EFF(4),t.k0s()(),t.nrm(5,"i",30),t.k0s(),t.bVm()),2&p){const d=t.XpG(2);t.R7$(4),t.JRh(d.replaceStandardTerm("Request to close")),t.R7$(),t.FS9("matTooltip",d.reqCloseIndicatorTooltip)}}function at(p,D){if(1&p&&(t.qex(0),t.j41(1,"div",5)(2,"div",29)(3,"h2"),t.EFF(4),t.k0s()(),t.nrm(5,"i",30),t.k0s(),t.bVm()),2&p){const d=t.XpG(2);t.R7$(4),t.Lme("",d.replaceStandardTerm("Payoff")," or ",d.replaceStandardTerm("paydown"),""),t.R7$(),t.FS9("matTooltip",d.paydownIndicatorTooltip)}}function yt(p,D){if(1&p&&(t.qex(0),t.j41(1,"h2"),t.EFF(2),t.k0s(),t.bVm()),2&p){const d=t.XpG(2);t.R7$(2),t.Lme("",d.replaceStandardTerm("Loan")," ",d.replaceStandardTerm("payoff"),"")}}function

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 282 x 188, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	69678
Entropy (8bit):	7.9894042389627495
Encrypted:	false
SSDEEP:	1536:JSrmnZX2BxE6RI2tF7d3xwC/FdppuJlp897nMZP7oWEf63:c+XQCgF7ZrA897nKP+C
MD5:	DEC7CD29E65BB033B1276EFA21143FA0
SHA1:	5934F80A5E876ADFF21A0116D6789CC279719327
SHA-256:	D02A0BEBF1806FF1312BB5D6816FF9CA7B1FBB35E3F70D25DF26F400FF0D6A1A
SHA-512:	3DC385BAE7D5E5A2E4EF6D93E22AB7F2281D2D4593B692CAC432318653C1CA5D722041695DCD14AB924A0E8EC363AC5B22294E2B13149ECC0A46DB3050C732FE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............a.....sRGB.......@.IDATx..i.%.u.w+3k..[...F.1.d.y.../G.dcF...I..W.K.y..OD.....8.......~....X.......o.....=z\|....:]\\..\^...<8]<....qu...:4...I>.....Kp.....a....x....Nw.w..O.N.\|.....G..G....>A....t.E.....>...7Vp....g/.......N..\|H........M........-...t..Z......9...7............+.2.y.....C.....a.. ..........N..;..O...]w.~C._.g..z..tE>..U...-9K.].9.zY...&...V..3r.....6zn.A.r.S.%..F.<.5.\|...!~'.......k..NW./.W...K....5..l.S[o.A.-..a..}zs...}...w...\|.\....pKlo...X........&..7...V.:..!C.... F.X..e;M.._......$....l.].7.\|./......HC.0.D.8.7..AS.t../.....~@.&..'...G$.=.c"8'....d&Q&'...+.0!....aB.....[o.2.8Aa.......H..cQ.l:...n}m(.I.N.....6v..<P..w.....W...+.z#l...,.'..9.+...^.H8.y.K..B..l.zX.....FF.......t..%...=i...Hb ...... ...r.J.l.l.l.p7)..}p3.m4.6..:0.W.!.:.[..wAq..'..[.P...u.G.t.t.WV.w.1.\..\."..6.2.........L.-9.0.!..\|G1#6..r.g..>c)...qL.B.~........E.t.3y.#...o.lN...."39<........ ..U@...tr...Z.j.O.Q`..2.....(.2

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	192198
Entropy (8bit):	5.5297918289391
Encrypted:	false
SSDEEP:	3072:q/Di/kvEGnC7zCBZFaa5xY3HDB91pmrG0L/EhmbelQFU1la:h8qzwaabY3HDT1pH0L/EhmEDa
MD5:	79C84858DBE71F1EF3250D58CF698188
SHA1:	B396B52BFCACFD23524F42D0F0C97067FBBEE929
SHA-256:	5B5FF8A7050B541686054D26CC03F4E22A20FF19EA6E2D7F6305FF4293C2BBEF
SHA-512:	EE2FEA6B648E94C2785E2932F26134941C08D25693BB05E43ADA7225C1FB4A72239FA4828999793E5E002F10780C2864BA9D65A1A5DD98E01841EA29A0AECF4F
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[203],{39029:(fe,te,h)=>{h.d(te,{i:()=>qe});var o=h(35025),e=h(50187),a=h(67107),n=h(23279),Y=h(37222),X=h(41745),oe=h(82283),t=h(50213),Z=h(48781),z=h(70098),ne=h(27921),q=function(_){return _.REQUEST="REQUEST",_.CONFIRM_REQUEST="CONFIRM_REQUEST",_.PENDING="PENDING",_.PENDING_PREVENT_CANCEL="PENDING_PREVENT_CANCEL",_.CANCEL_PENDING="CANCEL_PENDING",_}(q\|\|{}),G=h(34401);const N="I have read and agree to the terms and conditions regarding Payment Services.",A_getTermsAndConditionsForActivityTracking=function j(_){const P=x(_);if(P){const s=G.w.removeHtmlAndCodes(P);return`${N} ${s}`}return N};function x(_){const P=_.configService.getFeatureContentSection("HEADVCNSNT","HEADV_CONSENT");return _.configService.searchAndReplaceVariables(P,z.b.getTermsAndConditionsProps(_))}var L=h(56610),W=h(98278),ae=h(72221),re=h(24587),K=h(29344),me=h(66865),pe=h(42413),T=h(84993),ee=h(9527),F=h(8301),J=h(1919),S=h(63422)

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (430), with CRLF line terminators
Category:	downloaded
Size (bytes):	112739
Entropy (8bit):	4.816194799134832
Encrypted:	false
SSDEEP:	768:9L+Vt9oTDnrPMMPM2p3UxCEyhYJu326xqTvEpSqp0dpASp7Z:9L+Vt9oTDn5p5Oy2WpvpOpJp7Z
MD5:	5BBCB46165588E260E3A40850D1F50C3
SHA1:	F328381312800B23132FCC90917F06AFA10746B0
SHA-256:	EEDF56F388E188E92CC4C18CFEF8DB7C90ACF4F255ACC93DD24507D98CC4C927
SHA-512:	284ED2F4463A90825ED5F2C7ECAA3D7E63213A10B9FD389D902070237BBFC407844AD7254D54CBC7B3C9C8EF3E1922CFCF5377F12C2CB52F8D6F855D9C0D9C2F
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/Content/script/MQ.js
Preview:	// hamburger..function openNav() {.. if (document.getElementById("mySidenav").classList.contains("w100")) {.. document.getElementById("mySidenav").classList.remove("w100");.. }.. else {.. document.getElementById("mySidenav").classList.add("w100");.. }..}....$('.carousel .item').each(function () {.. var next = $(this).next();.. if (!next.length) {.. next = $(this).siblings(':first');.. }.. next.children(':first-child').clone().appendTo($(this));.... for (var i = 0; i < 2; i++) {.. next = next.next();.. if (!next.length) {.. next = $(this).siblings(':first');.. }.... next.children(':first-child').clone().appendTo($(this));.. }..});......function myAlert() {.. var url = $("#promo-btn").attr('data-src');.. $("#video").attr('src', url);.. $('#video').focus();..}....$('#carousel-1').carousel({.. interval: 4000,.. wrap: true,.. keyboard: true..});..var serverPath = "https://s4desktop.co

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2796
Entropy (8bit):	4.4818601033244745
Encrypted:	false
SSDEEP:	48:ARKX0O9/1rSKfPhN6Pv/tPgB7kbHLkaIcw8JJBwZXY7kh4J:AejqtykzlIcLJMZo7kaJ
MD5:	F35FD7C16C1D669D92DE5FD724D2F7D1
SHA1:	92211A5578E75CE161572849CB11785E39AAB028
SHA-256:	80750CC02B0D116EAA15E9C8449957EFBD5945FB890D121DCC59FB9698C023E0
SHA-512:	6EB69EA2AD3F93A46B21AAEFA51111B4594CB589266220C8CEB681CFFE85E50DAD5EDA5DD0068843A7F540CDA8E4B92A4FDFCEEEC61B7E95DD2AD03E91B31227
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/loan-option1.svg?ext=.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="65.712" height="65.702" viewBox="0 0 65.712 65.702"><defs><style>.a{fill:#117ec1;}</style></defs><g transform="translate(-0.061 -0.018)"><path class="a" d="M400.527,93.713a5.816,5.816,0,1,1,5.806-5.806,5.816,5.816,0,0,1-5.806,5.806m0-10.005a4.2,4.2,0,1,0,4.2,4.2,4.2,4.2,0,0,0-4.2-4.2" transform="translate(-367.604 -82.062)"/><path class="a" d="M400.527,145.213a5.816,5.816,0,1,1,5.806-5.816,5.816,5.816,0,0,1-5.806,5.816m0-10.016a4.2,4.2,0,1,0,4.2,4.2,4.2,4.2,0,0,0-4.2-4.2" transform="translate(-367.604 -79.493)"/><path class="a" d="M426.276,119.463a5.816,5.816,0,1,1,5.816-5.806,5.816,5.816,0,0,1-5.816,5.806m0-10.005a4.2,4.2,0,1,0,4.2,4.2,4.2,4.2,0,0,0-4.2-4.2" transform="translate(-366.319 -80.778)"/><path class="a" d="M374.777,119.463a5.816,5.816,0,1,1,5.806-5.806,5.816,5.816,0,0,1-5.806,5.806m0-10.005a4.2,4.2,0,1,0,4.2,4.2,4.2,4.2,0,0,0-4.2-4.2" transform="translate(-368.889 -80.778)"/><path class="a" d="M418.636,101.343a5.816,5.816,0,1,1

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63775), with no line terminators
Category:	dropped
Size (bytes):	63775
Entropy (8bit):	5.440511697359558
Encrypted:	false
SSDEEP:	1536:ljLBpgmbxCS6Z3hfTa4PTx439gk54jXqIcQE5G3RP4zONhkgF:5LBpgyCS6Z3hfTa4PTS39x4jXqIcQE52
MD5:	4FDC72783A18CD0F7C4B9826A070CCCD
SHA1:	9A30915ED7FF2B7A38E2223C3A7F5DC736F5D54A
SHA-256:	ACBF9B48D51CA23CB614B5C4DB5BEC384E0BA8723C3ADEC44A7F042697943F6B
SHA-512:	C4B76C0E10AAC88B10DE0B71E0750952F2BD4990A0AEC30453FC09B9EB6CE96B9649E7040CF614892ED6380AAE7106E825849A0CC759FB70606439C10060CC40
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[204],{58376:(j,h,o)=>{o.d(h,{Y:()=>k});var c=o(50187),r=o(23279),v=o(56610),I=o(63854);function d(t,y){if(1&t&&(r.j41(0,"span",8),r.EFF(1),r.nI1(2,"currency"),r.k0s()),2&t){const m=r.XpG(2);r.R7$(),r.JRh(r.ii3(2,1,m.propertyInfo.AreaSalesInfo.AverageAreaSalesValue,"USD","symbol","1.0-0"))}}function b(t,y){1&t&&(r.j41(0,"span",8),r.EFF(1,"N/A "),r.k0s())}function u(t,y){if(1&t&&(r.j41(0,"div"),r.DNE(1,d,3,6,"span",6)(2,b,2,0,"span",6),r.j41(3,"span",7),r.EFF(4,"Average*"),r.k0s(),r.j41(5,"span",8)(6,"h3"),r.EFF(7,"Availability of information varies by location"),r.k0s()()()),2&t){const m=r.XpG();r.R7$(),r.Y8G("ngIf","N/A"!==(null==m.propertyInfo.AreaSalesInfo?null:m.propertyInfo.AreaSalesInfo.AverageAreaSalesValue)),r.R7$(),r.Y8G("ngIf","N/A"===(null==m.propertyInfo.AreaSalesInfo?null:m.propertyInfo.AreaSalesInfo.AverageAreaSalesValue))}}let k=(()=>{class t extends c.Z{constructor(m){super(m),this.inje

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	121537
Entropy (8bit):	5.471939254116188
Encrypted:	false
SSDEEP:	3072:/vGY/q5vw93Zw8C3a9landEUEWEzEMEHEKEv5Vlm7LzZ8Gv:GY/pJC3a9landEUEWEzEMEHEKEv5VlmB
MD5:	1A4DCF48032B2340E4A99EB506023B04
SHA1:	05E46F9048B0D8EB44EC599EAFAF945EA882B956
SHA-256:	9E953106A7045D10870DBB7C1C92B000FD2E0ADD4D7AFFAFF1399A9520F5D514
SHA-512:	6943DB2B3DFE0B7FF208E8B479E954E2F57A0EFE8E24E71C2D85D72A989E4B8EBA5AA8A08F25C6261F6D23C31F083F954236894628BAEC37B83B4818AA2F6C01
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[359],{84197:(K,G,d)=>{d.d(G,{C:()=>Rt});var a=d(86482),F=d(50213),$=d(53370),O=d(11662),M=d(81128),N=d(54537),o=d(80426),r=d(84692),k=d(43618),i=d(37222),w=d(24587),B=d(13713),j=d(9527),L=d(32476),U=(d(96628),d(18522)),e=d(23279),S=d(76098),x=d(56610),P=d(98278),I=d(72221),D=d(52839),g=d(26182),T=d(29344),l=d(66865),C=d(66566),u=d(15954);const E=["f"];function V(n,f){1&n&&e.eu8(0)}function y(n,f){if(1&n&&(e.qex(0),e.DNE(1,V,1,0,"ng-container",13),e.bVm()),2&n){e.XpG();const t=e.sdS(11);e.R7$(),e.Y8G("ngTemplateOutlet",t)}}function h(n,f){1&n&&e.eu8(0)}function s(n,f){if(1&n&&(e.qex(0),e.DNE(1,h,1,0,"ng-container",13),e.bVm()),2&n){e.XpG();const t=e.sdS(13);e.R7$(),e.Y8G("ngTemplateOutlet",t)}}function c(n,f){1&n&&e.eu8(0)}function p(n,f){if(1&n&&(e.qex(0),e.DNE(1,c,1,0,"ng-container",13),e.bVm()),2&n){e.XpG();const t=e.sdS(15);e.R7$(),e.Y8G("ngTemplateOutlet",t)}}function v(n,f){1&n&&e.eu8(0)}function

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	330788
Entropy (8bit):	5.578643522496802
Encrypted:	false
SSDEEP:	6144:u43hYnsmQ8pKZ1HcRCrKkEZMf3/+rfNFuT+bseG:33hm9pK7Hc8YHbG
MD5:	F4D7AF04A1C0329D5A85034C4A12F4AF
SHA1:	44B15934D6F36AC061044F960E4BE2E872CBECC0
SHA-256:	E1E76AA3426544956F51C101B223ADF4F485328A1EC07014B53C6BFBC85E80BF
SHA-512:	3560DC56E7161D0140AEF30456F9641DECDACF6325249F96E49A9CD6F49C499B2175CC2B1E9D76B8278A131F3AA24B48415F7533F04B0F10266BC4BE6E5620E4
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-FJK2RS82Y6&l=dataLayer&cx=c&gtm=45He4cc1v849139528za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=14, height=3875, bps=0, PhotometricIntepretation=RGB, description=Young smiling woman sitting on sofa and looking up while drinking hot tea. Young brunette woman thinking at home in a leisure t, orientation=upper-left, width=5836], baseline, precision 8, 382x278, components 3
Category:	dropped
Size (bytes):	39386
Entropy (8bit):	7.676210697344094
Encrypted:	false
SSDEEP:	384:D/RW2T1WFqnu0gqI7ii1/RW2T1WFqnu0gynLDiROYK5D2JmHAQAKLct+HsDPzUeG:p1WFqo771WFqp6HVucx+HsDPvZAmblS3
MD5:	A22E6A57C136E2368CFE03B62DFB176B
SHA1:	7B0A273D2BC33B482F44CD5AC21D45A64A6B083E
SHA-256:	04A8EAC7AE72D6A6C4AAF1284E454CBEEA62149266C49B3BF4344B1B57F8D9B9
SHA-512:	4DE28EEC9848DC7C1601E12D54632981D1A21A929D8C9DB5DD4FC1D9BDF88502A84929B854DD591B2EC56696BFCA617B4E54408ACF6B3CE9F934C7DCD7D80A9B
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*...........................#.........................................................................x.............(...........1.....".....2.................B.....i.............8......Young smiling woman sitting on sofa and looking up while drinking hot tea. Young brunette woman thinking at home in a leisure time. Happy girl relaxing at home on a bright winter morning........'.......'.Adobe Photoshop CC 2019 (Windows).2021:06:10 10:24:23.Copyright (c) 2017 Rido/Shutterstock. No use without permission............0221.......................~.........................................................(.................................@.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................t...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2782), with no line terminators
Category:	dropped
Size (bytes):	2782
Entropy (8bit):	5.136143364616988
Encrypted:	false
SSDEEP:	48:KgtF+a55pxqxUVS4xkNxNxrcx2x2jxGluplx0o3bxuepPZx5WBQxf4keHe35zWZt:KgH+ybxqxUVS4xkNxNxrcx2xkxGlklxU
MD5:	C60C7E6CC4762B7664A7BA9CBBCC0BC0
SHA1:	98DAC46AF03E98CAF2806D88499A5B941003EAD1
SHA-256:	02D5BE8A0EEFA213435800576E608F5FC2083091C2D657A80CD067C743BA9DD6
SHA-512:	0154D0FE33DE0E568C282776C465863CD9C1E55043B482CA6FD7183D1E925ABB80298CBA7C7FF417D453D60D878A9EF0D2B22BE93CCA8EF701E37D87497D0791
Malicious:	false
Reputation:	low
Preview:	!function(n){function i(n,t){for(var i=window,r=(n\|\|"").split(".");i&&r.length;)i=i[r.shift()];return"function"==typeof i?i:(t.push(n),Function.constructor.apply(null,t))}function u(n){return"GET"===n\|\|"POST"===n}function e(n,t){u(t)\|\|n.setRequestHeader("X-HTTP-Method-Override",t)}function o(t,i,r){var u;r.indexOf("application/x-javascript")===-1&&(u=(t.getAttribute("data-ajax-mode")\|\|"").toUpperCase(),n(t.getAttribute("data-ajax-update")).each(function(t,r){switch(u){case"BEFORE":n(r).prepend(i);break;case"AFTER":n(r).append(i);break;case"REPLACE-WITH":n(r).replaceWith(i);break;default:n(r).html(i)}}))}function f(t,r){var s,h,f,c;s=t.getAttribute("data-ajax-confirm");s&&!window.confirm(s)\|\|(h=n(t.getAttribute("data-ajax-loading")),c=parseInt(t.getAttribute("data-ajax-loading-duration"),10)\|\|0,n.extend(r,{type:t.getAttribute("data-ajax-method")\|\|void 0,url:t.getAttribute("data-ajax-url")\|\|void 0,cache:"true"===(t.getAttribute("data-ajax-cache")\|\|"").toLowerCase(),beforeSend:function(n)

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1524
Entropy (8bit):	4.893987789109122
Encrypted:	false
SSDEEP:	24:+LrwGHhgt9RSynqIqcwxnzWkIG/9tnMk5CrPB6PoBv/zjG0V4cuApYr8+VGu:+LrNmtWyn/aNSQ9xMZFXcAE
MD5:	C0D9257463706E7243AF302EF6E287BA
SHA1:	D81CE8030056DCCC08FBF46C9C54E5D3D5033493
SHA-256:	2CB6D99C8BA2262A4D0C6D0333A35B67BE6D4DB6C5A7D2C4A9CFF74E5970E4F6
SHA-512:	55628F663A13202432C7949591F80E770C8FA6CA6DFE8C088871B7B1549D191978D5A3B3EE6349A1F68C7A5386BCB12B4BC143D0279A66B553D61EF585B5CE91
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/charts/51/css/core/tooltip.css
Preview:	/* Copyright 2012 Google Inc. All Rights Reserved. */...google-visualization-tooltip-action:hover {. background-color: #eeeeee;.}..google-visualization-tooltip {. border:solid 1px #bdbdbd;. border-radius: 2px;. background-color: white;. position: absolute;. box-shadow: 0px 2px 2px 0px rgba(204, 204, 204, 0.6);. font-size: 12px;. padding: 0px;. -moz-box-shadow: 0px 2px 2px 0px rgba(204, 204, 204, 0.6);. -webkit-box-shadow: 0px 2px 2px 0px rgba(204, 204, 204, 0.6);. z-index: 10000;.}..google-visualization-tooltip-action-list {. list-style-type: none;. margin: 0;. padding: 0.5em 0em 0.5em 0em;. cursor: hand;.}..google-visualization-tooltip-action {. margin: 0;. cursor: pointer;. padding: 0.5em 2em 0.5em 1em;.}..google-visualization-tooltip-action:hover {. background-color: #eeeeee;.}..google-visualization-tooltip-item-list {. list-style-type: none;. margin: 1em 0 1em 0;. padding: 0em;.}..google-visualization-tooltip-item {. margin: 0.65em 0em 0.65em 0em;. padding:

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1266
Entropy (8bit):	4.862270459982723
Encrypted:	false
SSDEEP:	24:FhCFAv9rKLADo0/Ylv9rSnO6Hx/9v9rhfor5tItW7v9rmka:Fjds8IdqfHxFdhKIcdmN
MD5:	C813D1EDDADEEA3E1B879CF730B6CA94
SHA1:	915E492B8D093C6314F785F939ED22A852044474
SHA-256:	2DF9C1C740392496C502EE80C06A62319D27475EDE740CC688EFB79A65C45764
SHA-512:	400A6F363C3AE780A6303B6FD54E53C9B7231E60DE4278264B82C948ED692886BF047E3A2C5F69950E8AF8A91018AE5EB4DD493A4DCC24D5B28D50D30CB0FCB3
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/Content/styles/MortgageKeeper.css
Preview:	...mkTile * {.. font-family: gothamMedium;..}...mkFrame {.. width: 200px;.. height: 226px;..}.....mkTile .mkTop {.. background-color: #62b5e7;.. display: flex;.. justify-content: center;.. align-items: center;.. color: black;.. text-align: center;..}...mkTop {.. height: 60px; width: 100%; ..}.....mkTile .mkMiddle {.. background: linear-gradient(#86c6ec, #bae0f7);.. color: #024572;.. display: flex;.. justify-content: center;.. align-items: center;.. font-weight: bold;..}...mkMiddle {.. height: 96px; width: 100%;..}.....mkTile ul {.. padding: 0;.. margin: 0;.. list-style: square;.. text-align: left;..}.....mkTile .mkBottomA {.. background-color: #60b3e7;.. display: flex;.. justify-content: center;.. align-items: center;..}...mkBottomA {.. height: 50px; width: 100%;..}.....mkTile .mkBottomB {.. background-color: #40a1d8;..}...mkBottomB {.. height: 20px; width: 100%;..}...mkBottomB img {.. height: 100%;

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1000x666, components 3
Category:	downloaded
Size (bytes):	163486
Entropy (8bit):	7.915785467990164
Encrypted:	false
SSDEEP:	3072:S1TPT2D3LTxM0gJFYLaXyeGi61ZDoPxRGgYWRaryDGqoRIHrUH/xjLQRvmCP:SxUvx8TA8lxIZDWxRYWoOoRL6ROq
MD5:	18E677CCF68BC250AFF3B4C8D7F51B40
SHA1:	F8F59B3E6B05F0952C9DF0F8E4C58D53A5CF4EE7
SHA-256:	00548B1A172D0C1B9CB620A008FBA27F76E4821A365E1FA2BC79DA7C648F44AA
SHA-512:	CE1A052A05F80CC8E34417BA47AB66D32DAB992CEDA9F0A14F59D338037B584B9B2ABF20029A069EB9ABD108C8D1893AE44CED5A84A7BF779D09D8F6410E97DA
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/Paperless-small.jpg?ext=.jpg
Preview:	......JFIF.....,.,......Exif..MM.*.............................V...........^.(.......................i.........f.......,.......,..............0210....................0100..............................................Photoshop 3.0.8BIM............@self employed,woman,business,ethnicity,mature,work,one,american,..i.<Happy,Mature,Woman,Working,On,Laptop,At,Home,Office.,African..n..Shutterstock..s..Shutterstock..t.NCopyright (c) 2021 JLco Julia Amaral/Shutterstock. No use without permission......1987574105............http://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>..<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Image::ExifTool 12.16">...<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">....<rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/">.....<dc:description>......<rdf:Alt>.......<rdf:li xml:lang="x-default">Happy mature woman working on laptop at home office. African woman sitting at desk and using laptop at home.</

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23482)
Category:	downloaded
Size (bytes):	24578
Entropy (8bit):	5.144369979420571
Encrypted:	false
SSDEEP:	192:v2rVfXHVokwkArgaoHGVPBfryqPtcdovibtnpxK+B2Igg1+Wp1gunVFu/YlfOEsc:eZfFNF8qG3jyqlWnpxKe1luisU0K
MD5:	0BCE441D85809495747998B2998C6244
SHA1:	DA344D0C958A9B108CE5E09A8E076C78D921ACA7
SHA-256:	865E6DA67CB6F2C498D5EADAB433B0015D3FCF6329E8FA9111B9862B7ED208F9
SHA-512:	495B797120F53E0ABA848FB8C3B90AA2EE9B3FFD340960EE2E52DEBE83D4B54F86740CA884EBD2701B48BD69EDEEDFC9EF11D6144451777E917E22044A70150D
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/bootstrap-slider/4.5.2/bootstrap-slider.min.js
Preview:	/! =======================================================. VERSION 4.5.2 .========================================================= /./! =========================================================. bootstrap-slider.js. . Maintainers:. ..Kyle Kemp. ...- Twitter: @seiyria. ...- Github: seiyria. ..Rohit Kalkur. ...- Twitter: @Rovolutionary. ...- Github: rovolution. . =========================================================. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. *

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 16-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel
Category:	downloaded
Size (bytes):	103225
Entropy (8bit):	3.028585516752629
Encrypted:	false
SSDEEP:	768:Knnn3XrbXrbXrbXrSfffVHT/KroLrDcRb:Knnn3XnXnXnXGfffVHOrKD0b
MD5:	800EF3F6DC022950757B15A7EB3A61D7
SHA1:	7C9E8FE3A4292C8BBB0468F05B86927E828592E3
SHA-256:	E3ED68619F8369889D64A07877F00BA3EC0668E6BE73352D99E1706B0DB87377
SHA-512:	7CAE7C08B4D4A9BD84C0B119D54624895DF46C6D6E52E9EC8F5D212538B2CDEC453F09F986BA86A39252D593866EE21AEC9EE9C2A1C43BF235DDC2F5A555A71C
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/favicon.ico
Preview:	............ .....f......... .(...1...@@.... .(B..Y...00.... ..%...X.. .... .....)~........ .h.......PNG........IHDR...............t%....IDATx.....P...s..AWQj+..V..n}_t.bA...m..j..T.@.......b.R..........iS.Ua...@.....*k.]..V.f....[.s2.N.......of&.Nr.!.................................................WQ.. E}..j.W.....U..&........Gc....y....fM;......z........R.. C...dH....)...!...2....L.u..O...c.m.]g...]...............k.v.._..............1}zl........l.@e...@.........R.. C...dH....)...!..tp.nX.b.........O..5eJ..././j'N....z...uk.)...../'.Y..o...V.X_.._.F.x$l.T.. GN.. C...dH....)...!...2...@.....{..M.u..6._l.._;....M.....K..S../....=.uH..z'\|....-:.'<\\.._....55..N......#Vm......KN.. C...dH....)...!...2...@.....P....).X1\|x......5....../W.s...3.7p^8.....;%.;5(.W.li..._../.sOl.........^...U.w.h.1......dH....)...!...2...@.........J...)4..P.]$>...........&.[.y....9.;.#.H.......p.=..?.g._.uWl...O.A.g.../.....{.............R.. C...dH....)...!...2T....).y.{...

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (61573)
Category:	downloaded
Size (bytes):	63234
Entropy (8bit):	4.871947268038963
Encrypted:	false
SSDEEP:	768:ADWrrKSZ+DCYiVpKUKeRw/8+LrCe1btS9KEaM:1rrKSZ+DJiVpKe+ae1btS9K7M
MD5:	7F480B2D2A981DB5895005340B534414
SHA1:	63B573043864D1F75C34E21ADFC4EEEBD25BFCCE
SHA-256:	954476ECB609AD28A13EF7F78F3F4AAB585CC5CEE5B44481F2F5CD48165FA6A9
SHA-512:	0523284685EACD7C68A7D6646D042E336B23D37ECCF6C6D0BFFD27015EDB6C5A85D7FED68339B209B8688807E98BF9CC5595E75616D787AEE3D78AEA79F3859F
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/
Preview:	<!doctype html>.<html lang="en" data-critters-container>.<head>. <meta charset="utf-8">. <title>PHH Mortgage</title>. <base href="./">. <meta name="google" content="notranslate">. <meta name="viewport" content="width=device-width, initial-scale=1">. <link rel="icon" type="image/x-icon" href="favicon.ico">. <style>:root{--brandPrimary:#008080;--brandPrimaryDark:#006666;--brandPrimaryLight:#80C0C0;--brandSecondary:#3A539B;--brandSecondaryDark:#2E427C;--brandSecondaryLight:#9DA9CD;--brandTertiary:#1460AA;--brandTertiaryDark:#104D88;--brandTertiaryLight:#8AB0D5;--alertFriendly:#F07509;--alertWarning:#DB372C;--startColor:#008080;--endColor:#008080;--primaryFont:"proxima-nova";--secondaryFont:"proxima-nova"}</style><link rel="stylesheet" href="clientvariables.rwa.css" media="print" onload="this.media='all'"><noscript><link rel="stylesheet" href="clientvariables.rwa.css"></noscript>. <link rel="stylesheet" href="overrides.css" media="print" onload="this.media='all'"><n

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1880)
Category:	downloaded
Size (bytes):	141572
Entropy (8bit):	5.542309209025541
Encrypted:	false
SSDEEP:	3072:Ig1gE80sjr0SURoz7ak5bPJBJxx4vncyHgrU:Nl80sdaobPJT4vncyHr
MD5:	0B0956C26BD47683C3DEFD78E0C59C4A
SHA1:	4E09898C9912A3A9FBE0A030DC0E56C650041172
SHA-256:	B3BB37E0AD30CD81BE6922E93A7A8504B6F241E1935B30B0EFBE6D7C62E3D90A
SHA-512:	70E204FE953BA8F703CD8F95324FA2D53CE6E3B245B128D608203AC1838F2F4E77B7EA83E31E4460164E5D2EEAD01D2A05F8D55D4200042D8CAEE32A28D95944
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[],. "tags":[],. "predicates":[],. "rules":[].},."runtime":[ .]..,"blob":{"1":"1"}.........};.....var aa,ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},fa=function(a){for(var b=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global],c=0;c<b.length;++c){var d=b[c];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");.},ha=fa(this),ia=function(a,b){if(b)a:{for(var c=ha,d=a.split("."),e=0;e<d.length-1;e++){var f=d[e];if(!(f in c))break a;c=c[f]}var h=d[d.length-1],l=c[h],m=b(l);m!=l&&m!=null&&ea(c,h,{configurable:!0,writable:!0,value:m})}};.ia("Symbol",function(a){i

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 122002
Category:	dropped
Size (bytes):	28232
Entropy (8bit):	7.992341488219618
Encrypted:	true
SSDEEP:	768:2ruUrqOoI8gKbV4moJtdrijtxl7DiX654dyZKskm:4qD7JV43ix/7EWKsh
MD5:	10666DB45BC960408B88C28F31FAC175
SHA1:	DA9AED7F3638AF5BF1351F44EA70A7228421B598
SHA-256:	946F539457136E416776AFB0BA67910CAC35F8E4212B4F0691F12C28DAFF296D
SHA-512:	B8FE2AEDACE2192F6DD98060E1D4A48D160D642654E7828D257B11341824A2AF8028FFA8BE0B0B8681DB4E167D6EC4649F36B862B7E58C5F0F06CE973039D460
Malicious:	false
Reputation:	low
Preview:	............r.X.0...V.tA.T.3;K6._uU....6....h).<.0....V..B.......eo..\|..G8.v.m......<...H.......~.....C6...f5+....6.Xz.(.u^.Q......z...p0.fU..,.......9{U./....1$A..".z..f.i.S....>..U....y...G...XL..]...,8aSV3.`S...........!..8..d.Z.oN...u..+.V.....)+..h]../.....?+...Q.,...+X.JT.fo{.C.O.....<.;....e3...U.l.R.......0.E....>..!.S,-~...M.D....'Y..K.Y..8.a=+.Xd./..R........4.:...7.{.l^1.0/.{r......H,.l^.e}=c...z.x;/gl^_...iT'!.'.7/O...a;....E......I.Z.(xVN.y.....<..V.WAQ.A.0.`..s.>8+.WY.... .z...N.E1agy.&.V.....Vg{.!...C.~..alp.W....9.z..\.......X.......L.......O.K....f....H5....?...Q..U.......C..]Gj..8..kg#....n..v.{.d_.x.}.....}.<.....\|.._.B....%.q.....>......0a8(.>Gm...>@4...K.....f.,....g.%.....2...bv:.4J$uS..=...<+...@z4...I....GbC.-...5....N.N.....&.....-.mm.^......:...Nb9O.._ }g.i-PSa/g....3...P......U..M.1..d?N..E.P\|.].........hl......I.U_77G........).....^..m...>...8.n.F.u...E.g&..Z..7.:..$..W......c,W.f.u..]'....u.

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	94274
Entropy (8bit):	5.461471799761873
Encrypted:	false
SSDEEP:	1536:OdZRXT9M8NfrzS26nWU/j9FVkN7/NMZVnHIaJZV:4M0frAWU/j97ZVnHIaJZV
MD5:	D7419532EEFA731D1B6CE8622E74A77F
SHA1:	284F3F4C1722BC71221CA004736996AEAA074C34
SHA-256:	83BDBDD16A8F2E0D2C1C370164642765A2B9B292BE1C906132457E2F924D2DC4
SHA-512:	64DC155FF85ADE6A8C6819F129357692A5B7B678F2D80F796409344861188BA9C98BD3D7180FD78F0F372E57B2D60ADBAE07395FB02294B2039FD34C73C181F9
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[716],{63854:(z,w,_)=>{_.d(w,{R:()=>X});var k=_(23279),a=_(50187),G=_(84692),i=_(4805);const e=["mapElement"],t=["mapMarkerDiv"],o=["mapMarkerHomeDiv"],D=["mapMarkerHighlightDiv"];let X=(()=>{class B extends a.Z{constructor(f,y){super(f),this.injector=f,this.resourceLoader=y,this.zoom=15,this.height=200,this.selectionChanged=new k.bkB,this.delay=0,this.delayIncrement=50,this.loading=!0,this.averagePropertyValue=0,this.aVMValue=0,this.markers=[],this.highlightColor="black",this.shouldCreateMap=!1}ngAfterViewInit(){let f=window.getComputedStyle(this.mapMarkerDiv.nativeElement);this.markerColor=f.backgroundColor,this.labelColor=f.color,f=window.getComputedStyle(this.mapMarkerHighlightDiv.nativeElement),this.highlightColor=f.color,f=window.getComputedStyle(this.mapMarkerHomeDiv.nativeElement),this.markerHomeColor=f.color,this.mapBounds=new google.maps.LatLngBounds,this.shouldCreateMap=!0,this.shouldCreateM

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2420
Entropy (8bit):	4.637176192191629
Encrypted:	false
SSDEEP:	48:PenOKhkIZU1iEzpUheoM+GuUh3lMPD3972fv0djQN9du:mHhkIq1iEz6CuauDs0
MD5:	F77DCD5CDBF849A37B1CF7102327C391
SHA1:	610D8B86C45E0A8A60DCF12AE28FE18AA73A27D6
SHA-256:	0A496785B5652E4FDA98EF778C9153FF28C6966A2A4A257CD5A0063E5A2D7F42
SHA-512:	62566B7DB2DF99887B95294A5A8E445DAB408F599D717C95EF7B575596726126398A6A8092511F9444A0EF71E83388F8C7BF648E4328885AF4BBBF25DFCC103B
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/Feedbacks.svg?ext=.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="49.861" height="43" viewBox="0 0 49.861 43"><defs><style>.a{fill:#fff;stroke:#fff;}</style></defs><g transform="translate(0.5 -35.448)"><g transform="translate(0 35.948)"><path class="a" d="M46.5,45.927h-6.18V38.313a2.368,2.368,0,0,0-2.365-2.365H2.365A2.368,2.368,0,0,0,0,38.313V66.428a1.54,1.54,0,0,0,2.63,1.089l4.9-4.9H8.545v7.613A2.368,2.368,0,0,0,10.911,72.6h14.9a.716.716,0,0,0,0-1.431h-14.9a.935.935,0,0,1-.934-.934V62.618H37.95a2.368,2.368,0,0,0,2.365-2.365V55.167a.716.716,0,1,0-1.431,0v5.086a.935.935,0,0,1-.934.934H7.233a.715.715,0,0,0-.506.21L1.618,66.505a.109.109,0,0,1-.186-.077V38.313a.935.935,0,0,1,.934-.934H37.95a.935.935,0,0,1,.934.934v13.7a.716.716,0,0,0,1.431,0v-4.66H46.5a.935.935,0,0,1,.934.934V76.407a.109.109,0,0,1-.186.077l-5.109-5.109a.715.715,0,0,0-.506-.21H28.959a.716.716,0,1,0,0,1.431H41.332l4.9,4.9a1.541,1.541,0,0,0,2.63-1.089V48.292A2.368,2.368,0,0,0,46.5,45.927Z" transform="translate(0 -35.948)"/><path class="a" d="M1

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 56, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4768
Entropy (8bit):	7.663263889601914
Encrypted:	false
SSDEEP:	96:vSLYkknmWIYW/K0QHnbHcigyzd7lyYVaCAsSwqdnyl/X8206ugW79F9:vSMkkn1Hbbg3Y4CrSvnyl/X4Fh
MD5:	F2550B432D80D425103D8DC3561441E1
SHA1:	073D29F80E87B893B4F57BE0280A85B808CD6716
SHA-256:	0741997B4C13CA9FC29730ED660EC456F56FC7971E5F6D946F77845607B303D7
SHA-512:	482A9DF557734FA09CD00B2C29D8D08927605BB97428D10AB7229C41A76E610DECD56CF8DB424BB6437E7C8C946A0EC8C85E6D3046E52696DF8CFC0B8180A040
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...8......zi%....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmp:CreateDate="2021-06-08T13:38:10-05:00" xmp:ModifyDate="2021-06-08T13:46:02-05:00" xmp:MetadataDate="2021-06-08T13:46:02-05:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:f152d61b-177a-8f4a-8c74-3e32a8f8f1fc" xmpMM:DocumentID="adobe:docid:photoshop:2f79e7a7-e4de-3d45-9326-99c3e6c5754

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	275574
Entropy (8bit):	5.505500042404655
Encrypted:	false
SSDEEP:	6144:REPNos2J66YCFOd8994DEEYm0mfz66xF6IQrYoQXeC5uWaxvGpYpFrki/Y4ONQCX:REPNosI66YCFOd8994DEEYm0mfz66xFz
MD5:	6294E2A21852B75D8A9CC394FB603F37
SHA1:	C58F34B68B7E7C9CF9D5C35FF9F513FBB2D95FC5
SHA-256:	2A7D4603B86F46ACB8E149A34941D31F6FEC25C6EB641C398E99C858BCC5F772
SHA-512:	A093FD7A7E08A23CA9A382D8C4861763BF3D1314200E20FB7555180167655237E64C1524C853E4DBA855F99E8F25230BDFFB1A8D46ACA9C6EDA2781B11AC1341
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/127.4db69428b5b9ca5e.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[127],{66753:(se,te,i)=>{i.d(te,{d:()=>v});var e=i(32559);function v(ne,a){return H=>H.lift(new W(ne,a))}class W{constructor(a,H){this.keySelector=a,this.flushes=H}call(a,H){return H.subscribe(new Q(a,this.keySelector,this.flushes))}}class Q extends e.gn{constructor(a,H,Y){super(a),this.keySelector=H,this.values=new Set,Y&&this.add((0,e.tS)(Y,new e.zA(this)))}notifyNext(){this.values.clear()}notifyError(a){this._error(a)}_next(a){this.keySelector?this._useKeySelector(a):this._finalizeNext(a,a)}_useKeySelector(a){let H;const{destination:Y}=this;try{H=this.keySelector(a)}catch(ee){return void Y.error(ee)}this._finalizeNext(H,a)}_finalizeNext(a,H){const{values:Y}=this;Y.has(a)\|\|(Y.add(a),this.destination.next(H))}}},62803:(se,te,i)=>{i.d(te,{k:()=>k});var e=i(23279),v=i(50213),W=i(50187),Q=i(89977),ne=i(84692),a=i(40011),H=i(8301),Y=i(56610),ee=i(37222),t=i(72221),n=i(63422),S=i(29344),E=i(4684),F=i(66566

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (555)
Category:	dropped
Size (bytes):	193121
Entropy (8bit):	5.640261249941191
Encrypted:	false
SSDEEP:	3072:4sla483uJAAeKa8Bz+9y8eHygLzpUA6Ba9iDWDZWa81EpdWA8csDxClly5CN8f7G:Fla483uza8Bz+9jeHzLziA6Ba9ieWaWm
MD5:	41B485C81221CF2C17A8009EB1485A2A
SHA1:	910E95F76660FBED18F2DA67A7CE9688B07E86E2
SHA-256:	00A2425F4782D1CAF94DB30CBE18A5D05488D59573B033146C351A5958E662D4
SHA-512:	9907A4D999FCDBE454537E080E957B7268752C2AED2E1EBBF4D7F00A5F9D36A60936EB5033F0FE5BB46F67300A13D7380700DE31AEF2C9EB98C5992E581EC6A9
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var Aya,RB,Bya,Cya,Dya,Eya,Fya,Hya,ZB,$B,aC,bC,cC,eC,fC,Iya,gC,Jya,jC,lC,mC,nC,Lya,Mya,Nya,qC,sC,uC,vC,Pya,Qya,Rya,Tya,BC,Vya,CC,Xya,DC,Zya,Yya,$ya,aza,bza,cza,dza,eza,fza,gza,hza,iza,jza,kza,lza,mza,nza,oza,pza,qza,rza,HC,uza,JC,vza,wza,xza,yza,zza,Aza,Bza,Cza,Dza,Eza,Fza,Hza,Jza,Lza,Nza,Pza,Rza,Tza,Vza,Xza,Zza,$za,aAa,bAa,cAa,dAa,eAa,fAa,KC,gAa,hAa,iAa,jAa,kAa,lAa,nAa,MC,NC,oAa,pAa,qAa,rAa,sAa,tAa,uAa,vAa,wAa,xAa,yAa,OC,zAa,PC,AAa,BAa,CAa,DAa,EAa,FAa,GAa,QC,HAa,RC,IAa,JAa,KAa,LAa,MAa,NAa,OAa,PAa,.QAa,RAa,SAa,TAa,UAa,VAa,WAa,XAa,YAa,ZAa,$Aa,bBa,cBa,dBa,fBa,TC,gBa,hBa,iBa,jBa,kBa,lBa,nBa,qBa,rBa,tBa,wBa,xBa,yBa,zBa,ABa,oD,pD,CBa,rD,sD,tD,EBa,FBa,GBa,wD,xD,zD,AD,HBa,BD,DD,IBa,KBa,LBa,NBa,RBa,SBa,JD,WBa,$Ba,aCa,bCa,MD,cCa,eCa,fCa,gCa,hCa,PD,jCa,oCa,XD,rCa,qCa,YD,sCa,$D,uCa,sE,vCa,xCa,zCa,yE,ACa,zE,BCa,CCa,DCa,ECa,BE,GCa,FCa,HCa,JCa,LCa,NCa,RCa,PCa,SCa,QCa,CE,DE,VCa,WCa,EE,FE,GE,IE

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 2000x1181, components 3
Category:	dropped
Size (bytes):	125774
Entropy (8bit):	7.880422197499796
Encrypted:	false
SSDEEP:	3072:F7fzyZDombWwotnVU1anrhq1Lt3fXKE/LVaIfb7N6XfAnzCxJ:Nfe3Sztn+14rhq1BBLVBb7ifAnur
MD5:	B01C190E5B0A0307C7BEE4CFC2EB69D0
SHA1:	3468C988D854A9898AFA79F04829FB986254F510
SHA-256:	996A46793952A8CE4303D54F24D7173F23D5E476445E8A1D4A2CEBBB8CCE4F6C
SHA-512:	0099D225EFA2D2DB5DBCEECBD6217365E11E5B8ECABA5D28BB7796B4BB73626912FD44A70340D8BAD63E58297D96C17F433A27D0B719B85FC91B351518EEF66D
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,.....C..............................................#....!!!..$'$ &. ! ...C........... ... ..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....(...i..a..6.\R.DaK.\R."..Z.1...RSMe8\dTS...e..L3K.1EE....v`(4..3V.a.....u.:...\..`>.nh.T.!.RQN...R..R..4...k.L.........u..$..`...E..R..h.....(...(...(...(...(....(.....Z)(......(...(...(......)...iM4.2.(.......JJ....QP0..).....P!)..L4.e0..HDf.5)..R$a...mh..JJ.&kT.aII.\.$)sM.....Q..!.QO...)....5@:.QJ.QN.....u6...IE%0...S.$,*&.;...K....T..j.a..O4...b...0

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=14, height=3875, bps=0, PhotometricIntepretation=RGB, description=Young smiling woman sitting on sofa and looking up while drinking hot tea. Young brunette woman thinking at home in a leisure t, orientation=upper-left, width=5836], baseline, precision 8, 382x278, components 3
Category:	downloaded
Size (bytes):	39386
Entropy (8bit):	7.676210697344094
Encrypted:	false
SSDEEP:	384:D/RW2T1WFqnu0gqI7ii1/RW2T1WFqnu0gynLDiROYK5D2JmHAQAKLct+HsDPzUeG:p1WFqo771WFqp6HVucx+HsDPvZAmblS3
MD5:	A22E6A57C136E2368CFE03B62DFB176B
SHA1:	7B0A273D2BC33B482F44CD5AC21D45A64A6B083E
SHA-256:	04A8EAC7AE72D6A6C4AAF1284E454CBEEA62149266C49B3BF4344B1B57F8D9B9
SHA-512:	4DE28EEC9848DC7C1601E12D54632981D1A21A929D8C9DB5DD4FC1D9BDF88502A84929B854DD591B2EC56696BFCA617B4E54408ACF6B3CE9F934C7DCD7D80A9B
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/couch-pic.jpg?ext=.jpg
Preview:	......Exif..MM.*...........................#.........................................................................x.............(...........1.....".....2.................B.....i.............8......Young smiling woman sitting on sofa and looking up while drinking hot tea. Young brunette woman thinking at home in a leisure time. Happy girl relaxing at home on a bright winter morning........'.......'.Adobe Photoshop CC 2019 (Windows).2021:06:10 10:24:23.Copyright (c) 2017 Rido/Shutterstock. No use without permission............0221.......................~.........................................................(.................................@.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................t...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.8035671313969885
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKFcM6Qaxp3T2TjWaee:PLKdXNQKFtaxZT2TjL
MD5:	C206147C7CAE99642A4F8A2C640A0019
SHA1:	8C32B7B7E0807BBE85E5C8C94F87AFEA31EEDC40
SHA-256:	6F55ADBECCE78B9C566F8DC830177DC91782702FF35F213F009FC2B902E25603
SHA-512:	0D94AA53B801AC69A9BB4A7DF4FC0E00B6FFD1C5668A6FEE4EFC11986B7F516EB27A8A0197C0106A4295ACD5F63C222EA2F1BD9431BF2D689672AC91C5528EB6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10314)
Category:	dropped
Size (bytes):	273936
Entropy (8bit):	5.4043946771380895
Encrypted:	false
SSDEEP:	6144:BuKC6ZzYr9ID9NgYCsGsRtOshIU+R6kksn2r/I/WMP3en6E6:BuKC6ZzY5IDoYishIU+Ukksn2r/I/WMf
MD5:	3D3762B29E9E79978081A747B52BC225
SHA1:	9B8B64216438DB38565D010223C3086FAFA9CAE1
SHA-256:	249E85B9792CDFB9CE084D58830B251BEFB8FBEB9DAE85FD252A3B252DE6897F
SHA-512:	CC895DA9796BC8AB6BAFA221B8455C28A634E92A90AA3B38B6707AF9C9B3D724427CE8C9B6FC3632BD0F4C02138A9D1BA31492A74D33A0DAC851BF7AA23E3349
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('common', function(_){var Yja,Xja,$ja,fka,mka,nka,qka,Or,rka,Pr,ska,Qr,tka,Rr,Ur,Wr,vka,wka,zka,Aka,Cka,Fs,Eka,Gka,Hka,Qs,Lka,vt,Tka,Vka,Uka,Zka,$ka,cla,dla,ela,$t,fu,jla,gu,ju,kla,ku,lla,nu,rla,sla,vu,tla,ula,kma,lma,Jma,Nma,Oma,Pma,Qma,Rma,Xw,Vma,Yw,Wma,Xma,Zma,ana,$ma,cna,bna,Yma,dna,fna,hna,pna,tna,una,Dna,Bna,sx,tx,Fna,Gna,Hna,Ina,Kna,Lna,ax,bx,ena,$w,tw,cka,Mna,dka,ina,eka,jka,lka,Rna,Sna,Tna,Una,Vna,Ax,Jv,Yna,Zna,$na,Ika,Ks;.Yja=function(a){const b=[];let c=a.length;var d=a[c-1];let e;if(_.bh(d)){c--;e={};var f=0;for(const g in d)d[g]!=null&&(e[g]=Xja(d[g],a,g),f++);f\|\|(e=void 0)}for(d=0;d<c;d++)f=a[d],f!=null&&(b[d]=Xja(f,a,d+1));e&&b.push(e);return b};Xja=function(a,b,c){a instanceof _.th&&(a=a.Ll(b,+c));return Array.isArray(a)?Yja(a):typeof a==="boolean"?a?1:0:typeof a==="number"?isNaN(a)\|\|a===Infinity\|\|a===-Infinity?String(a):a:a instanceof Uint8Array?_.Ac(a):a instanceof _.Jc?_.Vc(a):a};_.Zq=function(a){return!!a.handled};._.Zja=function(a,b){functio

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2532
Entropy (8bit):	4.806919805861742
Encrypted:	false
SSDEEP:	48:c6gKGb1dTvEZIepQAEIi1bLBf+uCO2+X3niyMg2pxruM:QR1dwEIEJBCl+XXjIzd
MD5:	81F05788C1B38527A74543D18BD9591D
SHA1:	180E84EB5F4385510AB2533AA7EDAB0FFCB7D995
SHA-256:	2C190FA563949366296BC68EE0B4C6C7A0478F46A72918F9217B9A93BE736347
SHA-512:	BA61009DEA9DC76757A1882A8DB2C7B9AF2808D84A5067FDD78D1859F72F89A9A3D79F40D4AFD5A735B74A8EF3E2CCE9CE037CAB8EE26044D37D9E633739914A
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/assets/images/Login/visable_off.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="20px" height="14px" viewBox="0 0 20 14" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 52.5 (67469) - http://www.bohemiancoding.com/sketch -->. <title>Visible</title>. <desc>Created with Sketch.</desc>. <defs>. <polygon id="path-1" points="0.000194108705 0.245833333 19.8404167 0.245833333 19.8404167 13.3332917 0.000194108705 13.3332917"></polygon>. </defs>. <g id="Visible" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="visable_off">. <path d="M9.919,8.94570833 C8.73108333,8.94570833 7.76483333,7.97945833 7.76483333,6.79154167 C7.76483333,5.60154167 8.73108333,4.63320833 9.919,4.63320833 C11.1069167,4.63320833 12.0731667,5.60154167 12.0731667,6.79154167 C12.0731667,7.97945833 11.1069167,8.94570833 9.919,8.94570833 M9.919,2.96654167 C7.81191667,2.96654167 6.09816667,4.68279167 6.09816667,6.79154167 C6.

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	408
Entropy (8bit):	5.212379163907344
Encrypted:	false
SSDEEP:	6:tI9mc4slzdnIQeAHh7S90BNURUvdGo7FqvdGoi1W2Pxftp8r25+iKy4vTtf2jire:t4zI0Hd/4RULFqS9+2oy4vkji3FVi
MD5:	A579EF78B8A07A32E8BF7C11A8706491
SHA1:	551A2E53B43EF993EF68E8499E86641BF2540439
SHA-256:	1E0A52512433EC70B2B88A15E5593FD026ECF314EC7AA7C3BA9E3A9B7D5608E5
SHA-512:	B8A0892EAFD913383C91F7F53AC1CE3BDE990E80F0D836EDA73B8EBC3DEE0218B2F892521A338E7DCA167F235601FF3D0504D9B6F1325AD8F17C41A107455F2D
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="5.128" height="9.52" viewBox="0 0 5.128 9.52"><defs><style>.a{fill:#f6f7fd;}</style></defs><g transform="translate(-102.297 0)"><g transform="translate(102.297 0)"><path class="a" d="M107.318,4.5l-4.4-4.4a.366.366,0,0,0-.518.518l4.137,4.137L102.4,8.9a.366.366,0,1,0,.518.518l4.4-4.4A.366.366,0,0,0,107.318,4.5Z" transform="translate(-102.297 0)"/></g></g></svg>

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	67384
Entropy (8bit):	7.3877052383468165
Encrypted:	false
SSDEEP:	1536:E6n+Swedz1P3KGsBKqDB+5fLckP2WcA2ld/26T2Z+Xt2rPP5/VX1:E6n+3edz1WKqDB+5fP1cA2ldhysd8Pt3
MD5:	2AC3294AFD99FDD839E84C8E3C15C3CE
SHA1:	92B576F222FDCE1B34489EA362A52CD20DC24233
SHA-256:	468F0053B0F490EB3E3E0E02EE221D412A38B9D184B4D606C2E5355D64E42973
SHA-512:	16CB064B2D75BE17BD079D744F4B0F1B80AEE6733A19D37CD1DCCA71FC756A0397BAC1FF4B6E22B2468346DF375ADB0323F79455C781D9E97B8C0418B9510002
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/Splash.0d64256915b454b8.jpg
Preview:	......Exif..II*.................Ducky.......<.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:BB8BAC7ADABC11E8992DF3C07620255D" xmpMM:InstanceID="xmp.iid:BB8BAC79DABC11E8992DF3C07620255D" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DC47F3F9CF4B11E8A4BDF40B2505C329" stRef:documentID="xmp.did:DC47F3FACF4B11E8A4BDF40B2505C329"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	275574
Entropy (8bit):	5.505500042404655
Encrypted:	false
SSDEEP:	6144:REPNos2J66YCFOd8994DEEYm0mfz66xF6IQrYoQXeC5uWaxvGpYpFrki/Y4ONQCX:REPNosI66YCFOd8994DEEYm0mfz66xFz
MD5:	6294E2A21852B75D8A9CC394FB603F37
SHA1:	C58F34B68B7E7C9CF9D5C35FF9F513FBB2D95FC5
SHA-256:	2A7D4603B86F46ACB8E149A34941D31F6FEC25C6EB641C398E99C858BCC5F772
SHA-512:	A093FD7A7E08A23CA9A382D8C4861763BF3D1314200E20FB7555180167655237E64C1524C853E4DBA855F99E8F25230BDFFB1A8D46ACA9C6EDA2781B11AC1341
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[127],{66753:(se,te,i)=>{i.d(te,{d:()=>v});var e=i(32559);function v(ne,a){return H=>H.lift(new W(ne,a))}class W{constructor(a,H){this.keySelector=a,this.flushes=H}call(a,H){return H.subscribe(new Q(a,this.keySelector,this.flushes))}}class Q extends e.gn{constructor(a,H,Y){super(a),this.keySelector=H,this.values=new Set,Y&&this.add((0,e.tS)(Y,new e.zA(this)))}notifyNext(){this.values.clear()}notifyError(a){this._error(a)}_next(a){this.keySelector?this._useKeySelector(a):this._finalizeNext(a,a)}_useKeySelector(a){let H;const{destination:Y}=this;try{H=this.keySelector(a)}catch(ee){return void Y.error(ee)}this._finalizeNext(H,a)}_finalizeNext(a,H){const{values:Y}=this;Y.has(a)\|\|(Y.add(a),this.destination.next(H))}}},62803:(se,te,i)=>{i.d(te,{k:()=>k});var e=i(23279),v=i(50213),W=i(50187),Q=i(89977),ne=i(84692),a=i(40011),H=i(8301),Y=i(56610),ee=i(37222),t=i(72221),n=i(63422),S=i(29344),E=i(4684),F=i(66566

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7557)
Category:	downloaded
Size (bytes):	9248
Entropy (8bit):	5.299701565210756
Encrypted:	false
SSDEEP:	192:iriFQHJyyG6nOJZt3oS7Bwi4z4pY0odOPdO04z4pF0yE:iuFmlG6nOJZtBwiMsoe3MsvE
MD5:	A47094CC19BED91AF505E81201A25EEF
SHA1:	D56C60DB65576971EFE75B642A0A7BA8B1876680
SHA-256:	59FB922D87731AF96C154E88998612136EFB5AC8DFC94DF441E1AE3488DE2442
SHA-512:	D0B1FEAC46ACC5F03930AD52EA4E409EC90167465C5CC91425092D4CC757151630E92E31925DCD3C3864799643D2E9C61FC5AD5800DAA1596CD93FD346792D10
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/bootstrap-slider/10.0.0/css/bootstrap-slider.min.css
Preview:	/! =======================================================. VERSION 10.0.0 .========================================================= /./! =========================================================. bootstrap-slider.js. . Maintainers:. ..Kyle Kemp. ...- Twitter: @seiyria. ...- Github: seiyria. ..Rohit Kalkur. ...- Twitter: @Rovolutionary. ...- Github: rovolution. . =========================================================. . bootstrap-slider is released under the MIT License. * Copyright (c) 2017 Kyle Kemp, Rohit Kalkur, and contributors. * . * Permission is hereby granted, free of charge, to any person. * obtaining a copy of this software and associated documentation. * files (the "Software"), to deal in the Software without. * restriction, including without limitation the rights to use,. * copy, modify, merge, publish, distribute, sublicense, and/or sell. * copies of the Software, and to permit persons to whom the. * Software i

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2604
Entropy (8bit):	4.834425917957476
Encrypted:	false
SSDEEP:	48:TSO7Zyf6QJkCYADPCPZDHHCZ+FNt5e9weVwYM7RVTvUKSB8tqeQ63Q71F7pLwf:TSHTmQKPQ4eWhl82Ck
MD5:	213686E33ECBB20CBB02D25104AFBB64
SHA1:	756DA421200ADD0243F16B32041FE05BE9DF26DF
SHA-256:	F734F8A317110D3F24018F52EA2F32649B25CF485C424D8FC5616C6676690638
SHA-512:	83FC5B5760CF4FB1A690339FEE20B7A9CD23078611C976C664546184F740A156D90683F74960678BD3C132ABF1A723F4016E2E62CDE9079385DC63C5BE633E03
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/Content/styles/owlcarousel.css
Preview:	/.. Owl Carousel - Core.. /...owl-carousel {.. display: none;.. width: 100%;.. -webkit-tap-highlight-color: transparent;.. / position relative and z-index fix webkit rendering fonts issue /.. position: relative;.. z-index: 1;..}.....owl-carousel .owl-stage {.. position: relative;.. -ms-touch-action: pan-Y;.. touch-action: manipulation;.. -moz-backface-visibility: hidden;.. / fix firefox animation glitch /..}.....owl-carousel .owl-stage:after {.. content: ".";.. display: block;.. clear: both;.. visibility: hidden;.. line-height: 0;.. height: 0;..}.....owl-carousel .owl-stage-outer {.. position: relative;.. overflow: hidden;.. / fix for flashing background */.. -webkit-transform: translate3d(0px, 0px, 0px);..}.....owl-carousel .owl-wrapper,...owl-carousel .owl-item {.. -webkit-backface-visibility: hidden;.. -moz-backface-visibility: hidden;.. -ms-backface-visibility: hidden;.. -webkit-transform: translate3d(0, 0, 0);.. -moz-transform: translate3d(0, 0,

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1590
Entropy (8bit):	4.934387451808658
Encrypted:	false
SSDEEP:	48:YHz/GPIY4F5qiFJJZlJKjRaTg+EiASr+tE3V:yY4FFJJtKjRa0poqtEl
MD5:	177A3D913C4075CB77D75E28383CBF6F
SHA1:	AD2B2E05177311BC1E498330E56096B3B21D5525
SHA-256:	BFCA9610F9690F289E58C67AA776BF3691B846086C1D928A7ED884788335CD14
SHA-512:	6C2E708E629C1A3F86180E8150A917B58F0F938F40786489045DD0C75129D06D57D2BB19EC3F78FD5059838CE08E22356596C373AC6F432CC8C0CE42AB6A8CE5
Malicious:	false
Reputation:	low
Preview:	{"application_id":"6567c1c6a2ec72132b15f3af","interactions":[{"id":"6567c1c6a2ec72132b15f3b6","display_type":null,"type":"MessageCenter","version":2,"api_version":15,"configuration":{"title":"Message Center","branding":"Powered by Apptentive","composer":{"title":"New Message","hint_text":"Please leave detailed feedback","send_button":"Send","send_start":"Sending...","send_ok":"Sent","send_fail":"Failed","close_text":"Close","close_confirm_body":"Are you sure you want to discard this message?","close_discard_button":"Discard","close_cancel_button":"Cancel"},"greeting":{"title":"Hello!","body":"We'd love to get feedback from you on our app. The more details you can provide, the better.","image_url":"https://app-icons.apptentive.com/6567c1c6a2ec72132b15f3af_1701364912.png"},"status":{"body":"We will respond to your message soon."},"automated_message":{},"error_messages":{"http_error_body":"It looks like we're having trouble sending your message. We've saved it and will try sending it agai

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10687)
Category:	downloaded
Size (bytes):	11680
Entropy (8bit):	5.911184398994319
Encrypted:	false
SSDEEP:	192:2IGIsmhP0zK1+UuNFa2h5z585PwcqewMoM/SuU05454wpwhaRLkoqUoRU6PzUT0w:lVsml+3NFa2hR29DLwzAfniC+7RLr1WI
MD5:	EE5D9E270C2E9C3ECEF4B12F4A6C3A06
SHA1:	5C2FA6F59553A6F173A5362BA74769D8A4C01FE2
SHA-256:	A2E1E44E63ED64F3314394862C787F15D8B2BD977F8708D1DC1756C8CBABA480
SHA-512:	325D09513B8FD9E5C4EAD1BB6E00857353531493ED5CA0941B6C7E000C158C9962B6133862A996C4570B018D550E424CBE8BD76F6E2C34CC35C7891A44984BBF
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/js?loading=async&key=AIzaSyA_lHnjSXPqcaMaWsKfiI0hNihTwzqXMno
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. var rules = {. createHTML: function(src) {. return src;. },. createScriptURL: function(src) {. return src;. }. };. var ttPolicy;. . try {. ttPolicy = window.trustedTypes.createPolicy('google-maps-api-loader', rules);. } catch(e) {. ttPolicy = rules;. }. . function getScript(src) {. var a, nonce = ((a = document.querySelector("script[nonce]")) == null ? void 0 : a.nonce) \|\| "";. var s = document.createElement('script');. . s.src = ttPolicy.createScriptURL(src);. s.nonce = nonce;. document.head.appendChild(s);. }. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=992\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=992\

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1877)
Category:	downloaded
Size (bytes):	49299
Entropy (8bit):	5.3958443708886
Encrypted:	false
SSDEEP:	1536:EektGkQbgt/L3fG3K2cRGJKe5zGc/VTxzBn/V2p:XlH0t/LqGmTQp
MD5:	0D4116DADA2CAE1DB8727035A89248C1
SHA1:	CFE1A8697D0684F4872310B76523F949A3091D0A
SHA-256:	15F9C7DCB6D3F3FD50AC55A55F8A4168652122756D7763C13C333C9D4B8A36F0
SHA-512:	B5F7A5CE03130FE947B26647BA6603836F44F6491B7FD405BE3F31238920AFB393B4180DC1FCB7E2E5CE220F20F63D14D6568F16D27C519AFD57B5E8E6788042
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/charts/51/loader.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var p=ba(this);function q(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&l(c,a,{configurable:!0,writable:!0,value:b})}}.q("Symbol",function(a){function b(g){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(g\|\|"")+"_"+e++,g)}functio

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	17343
Entropy (8bit):	4.574648456324525
Encrypted:	false
SSDEEP:	192:dpRaSMvrZd5RqyMk5RWG8LXIiql5R0UqrmfKkKQMSoR0OUt:dpRKvrZd5Rek5RQ25REE
MD5:	57CADFE98295AEAF0EAD1679CE7A7F03
SHA1:	3A944FF6CB7DA7FA325FC0DA9893297EF0AE438E
SHA-256:	90726592DA817D93844A110B981AC667573BA396E6A0B0EA446B61AC093428C3
SHA-512:	E11EC9F373D94D3E44E7279C29D854381C1ACD6644AAE2A6F47252D508F21C3F212DA337B5C11EDA952E31811E58000FAF873E9EA6D2483923C8ED8A4951AE57
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/kentico/bundles/pageComponents/scripts?v=-JgURDK_xbjjD0-dkM5RgHCtLKu5Bs3tXGW1Fj3x1-E1
Preview:	..function handleFailedAPICall(response) {.. $('#exceptionMessage').removeClass('d-none');.. console.error(`Failed API Response: ${response}`)..}......function handleErrorResponse(response) {.. $('#errorMessage').removeClass('d-none');.. console.error(`Error API Response: ${response}`)..}....$('#frmAssistanceLocator').on('submit', (e) => {.. e.preventDefault();.. $('#successMessageBITB').addClass('d-none');.. $('#successMessageNOBITB').addClass('d-none');.. $('#successMessageSD').addClass('d-none');.. $('#errorMessage').addClass('d-none');.. $('#exceptionMessage').addClass('d-none');.... $('#frmAssistanceLocator').addClass('was-validated');.. if ($('form input:required:valid').length !== $('form input:required').length) {.. e.preventDefault();.. } else {.. $('#frmAssistanceLocator').addClass('positionrelative');.. $('#frmAssistanceLocator').append('<div class="loaderimg"></div>');.. .... grecaptcha.ready(function

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	192198
Entropy (8bit):	5.5297918289391
Encrypted:	false
SSDEEP:	3072:q/Di/kvEGnC7zCBZFaa5xY3HDB91pmrG0L/EhmbelQFU1la:h8qzwaabY3HDT1pH0L/EhmEDa
MD5:	79C84858DBE71F1EF3250D58CF698188
SHA1:	B396B52BFCACFD23524F42D0F0C97067FBBEE929
SHA-256:	5B5FF8A7050B541686054D26CC03F4E22A20FF19EA6E2D7F6305FF4293C2BBEF
SHA-512:	EE2FEA6B648E94C2785E2932F26134941C08D25693BB05E43ADA7225C1FB4A72239FA4828999793E5E002F10780C2864BA9D65A1A5DD98E01841EA29A0AECF4F
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/203.210081cca82a28a0.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[203],{39029:(fe,te,h)=>{h.d(te,{i:()=>qe});var o=h(35025),e=h(50187),a=h(67107),n=h(23279),Y=h(37222),X=h(41745),oe=h(82283),t=h(50213),Z=h(48781),z=h(70098),ne=h(27921),q=function(_){return _.REQUEST="REQUEST",_.CONFIRM_REQUEST="CONFIRM_REQUEST",_.PENDING="PENDING",_.PENDING_PREVENT_CANCEL="PENDING_PREVENT_CANCEL",_.CANCEL_PENDING="CANCEL_PENDING",_}(q\|\|{}),G=h(34401);const N="I have read and agree to the terms and conditions regarding Payment Services.",A_getTermsAndConditionsForActivityTracking=function j(_){const P=x(_);if(P){const s=G.w.removeHtmlAndCodes(P);return`${N} ${s}`}return N};function x(_){const P=_.configService.getFeatureContentSection("HEADVCNSNT","HEADV_CONSENT");return _.configService.searchAndReplaceVariables(P,z.b.getTermsAndConditionsProps(_))}var L=h(56610),W=h(98278),ae=h(72221),re=h(24587),K=h(29344),me=h(66865),pe=h(42413),T=h(84993),ee=h(9527),F=h(8301),J=h(1919),S=h(63422)

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 236 x 301, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	53993
Entropy (8bit):	7.967783952556641
Encrypted:	false
SSDEEP:	1536:4YTKX0mGTjK2a76PkLDtj9DtODQTQfClLap:DKnQjK2aPPtvLyYm
MD5:	BC51CA11FD4E52629D56421193C0ABDD
SHA1:	CE888C3FD79739A09A0BF5F6CE41A034AB5EE68B
SHA-256:	32DDED68D906C660B66901AFA5A1BF8E3C8ECBA58B8B2CBC6B9BED89C316E90F
SHA-512:	070D562E80C51EC6DFD9464C7DC5ACFCE7B85C79CE5737FD20A30D5039F6D0C0EA8A81A72831AA6FE6986DF179E577CC7660FD9FBCC7058BAB40FA1BC0090689
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/SD-mobile-2023.png?ext=.png
Preview:	.PNG........IHDR.......-......r......pHYs..........+.....#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5, 2022/05/09-07:22:29 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.4 (Windows)" xmp:CreateDate="2023-05-30T11:50:11-05:00" xmp:ModifyDate="2023-05-30T11:56:22-05:00" xmp:MetadataDate="2023-05-30T11:56:22-05:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:5e5a9117-ffa1-aa46-a003-da9edea77a24" xmpMM:DocumentID="adobe:docid:photoshop:378a38ce-2d5f-cc4d-b43b-d6b4697ce109" xmpMM:OriginalDocumentID="xmp.did:ec38c8

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	11615
Entropy (8bit):	5.105290050086187
Encrypted:	false
SSDEEP:	192:RneIHwv/CkVyxi6/yx6cvg13xJhIyOaQpwAaLnSf1kjnalqSWeLDK64I7VD77fRn:RneIyvcBJhIXaZdSf1mUK64I7VD7zRn
MD5:	2AF640CC408DCC903F2BF88D6AFC1077
SHA1:	2B42E40F2F0656F82511C0793A9A9681DEE0E961
SHA-256:	A37D7688DE7FBCB966722AA58B29BE1C37F3D5BF928A921315B1B19E98A34846
SHA-512:	C9BF6475AE5D2F63580E794965F1410E689A1357793F0BFFF9CAFC2AF45CB97FBBA3AD6655D8F83041B17D0F3E770121F4B88F415C4FD2F45D31688E66A1935A
Malicious:	false
Reputation:	low
Preview:	/*.. Navigation Plugin.. * @version 2.3.4.. * @author Artus Kolanowski.. * @author David Deutsch.. * @license The MIT License (MIT).. /..;(function($, window, document, undefined) {...'use strict';...../... Creates the navigation plugin.... * @class The Navigation Plugin... * @param {Owl} carousel - The Owl Carousel.... /...var Navigation = function(carousel) {..../.... Reference to the core..... * @protected.... * @type {Owl}.... /....this._core = carousel;....../.... Indicates whether the plugin is initialized or not..... * @protected.... * @type {Boolean}.... /....this._initialized = false;....../.... The current paging indexes..... * @protected.... * @type {Array}.... /....this._pages = [];....../.... All DOM elements of the user interface..... * @protected.... * @type {Object}.... /....this._controls = {};....../.... Markup for an indicator..... * @protected.... * @type {Array.<String>}.... /....this._templates = [];....../.... The carousel el

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2369
Entropy (8bit):	4.816178287903932
Encrypted:	false
SSDEEP:	48:OdeJYrF2UkJNMWJr2C/j2jHdaV9IZ3Ep0kSf1K1NCZrobDR:tWZkB2Kj6aViZ3E6ffAQmDR
MD5:	3276C76D71565D25C787999484FB689B
SHA1:	DEA4A67AD34B364E7DB8CF44C9478E5767382489
SHA-256:	F7B28C39A23A8F6092E9EE3456A46A4B825ADCC02DBE4055F21982C0BD247CF4
SHA-512:	1C2859E4E7574AB2FA99A1B138C225E5D191F8C34B6996599904467438964D87304930B59ADC2E5C9B180B5561C0F980288C3750F7FD1998EF6AE5313004308B
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/MortgageQuestions/media/MortgageQuestions/Images/refinance-checklist.svg?ext=.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="64.491" height="62.527" viewBox="0 0 64.491 62.527"><defs><style>.a{fill:#007cc5;}</style></defs><g transform="translate(-441.418 -9.676)"><path class="a" d="M533.432,117.26a.8.8,0,0,1-.58-.246L509.091,93.263l-23.761,23.751a.826.826,0,0,1-1.17,0l-4.424-4.424a.816.816,0,0,1,0-1.17l28.637-28.775a.885.885,0,0,1,.59-.246.088.088,0,0,0,.069,0,.816.816,0,0,1,.649.236l28.775,28.775a.826.826,0,0,1,0,1.17L534.031,117a.816.816,0,0,1-.59.246M509.68,91.493h0l23.761,23.761L536.7,112,509.022,84.346,481.5,112l3.254,3.264L508.5,91.5a.836.836,0,0,1,1.17,0h0m-1.229-8.789.58.59Z" transform="translate(-38.07 -72.721)"/><path class="a" d="M531.669,99.887h-1.661V87.441h-6.036v4.7H522.31V86.616a.836.836,0,0,1,.836-.836h7.707a.836.836,0,0,1,.836.836Z" transform="translate(-38.795 -72.778)"/><path class="a" d="M502.6,137.711H489.326a.836.836,0,0,1-.836-.826V116.948h1.661v19.082h11.62V114.756a.836.836,0,0,1,.826-.836h13.281a.826.826,0,0,1,.826.836v4.424h-1.652v-3.6

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	415886
Entropy (8bit):	5.453611256726838
Encrypted:	false
SSDEEP:	3072:e1j7PRrfmVOR+uzbcQhevegpsOSa/ff58sk5MlCxPgQ/flqSjukkNMkJQfakvwFQ:e1j7PBzblhe5sUf5hlQEQD
MD5:	6388D53B925B44CF1BB2F0D6B308740D
SHA1:	9BB263F1F9781A69A3C26A69D7468CF92F2E6794
SHA-256:	5955E570A4327B0CA563B2EA00137AF5A44F81497FC88EF1C5FD8A8048FA6591
SHA-512:	99D279C46DEE2ABF323CA76637CBCFA13DC47B2E7CBE45F7D7518129E32784E674CF862B1E4A722B38257C026BD865E6CEEFEFE78F131BF89165CF6D779964A7
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/851.4b628a023aae2aa9.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[851],{55710:(rn,B,g)=>{g.d(B,{Q:()=>Sr});var f=g(50213),T=g(50187),y=g(89977),C=g(84692),P=g(35025),t=g(40011),v=g(33222),e=g(23279),u=g(37222),b=g(56610),x=g(72221),F=g(97800),X=g(84993),N=g(98278),k=g(52839),D=g(24587),M=g(29344),S=g(86498),V=g(66865),G=g(42413);const A=i=>({rmaHideDetails:i}),Q=(i,r)=>({rmaHideDetails:i,strong:r});function Z(i,r){if(1&i&&(e.j41(0,"div",14)(1,"mat-error",30),e.EFF(2),e.k0s()()),2&i){const n=r.$implicit;e.R7$(2),e.SpI("",n.value,".")}}function K(i,r){if(1&i&&(e.j41(0,"div",24)(1,"div",25)(2,"span",26),e.nrm(3,"i",27),e.k0s(),e.j41(4,"span",28),e.EFF(5," Please correct the errors below. "),e.k0s()(),e.DNE(6,Z,3,1,"div",29),e.nI1(7,"keyvalue"),e.k0s()),2&i){const n=e.XpG();e.R7$(4),e.BMQ("aria-label",n.alert),e.R7$(2),e.Y8G("ngForOf",e.bMT(7,2,n.validationMap))}}function ee(i,r){if(1&i&&(e.j41(0,"mat-error"),e.EFF(1),e.k0s()),2&i){const n=e.XpG();e.R7$(),e.JRh(n.valida

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	48231
Entropy (8bit):	5.071395059110367
Encrypted:	false
SSDEEP:	768:8T1P+MI0ntSkGYheMHAiSycckMRitAHhyeLowpooHQOz6hUnww+z:85u1MHUCBjloTO6Jz
MD5:	9E076028B920A8D86F42AC8D6D7D8FA9
SHA1:	526E0A7BE8382EEC5A97CDF003A34911813C2D44
SHA-256:	213000AC6409A91AB92D6A4F97FD61F045B707A5E38BD79DBD9D81DCE8093058
SHA-512:	D206E37E678970E997117124BAE5DFDA5A8780516B98EEFBA806B4EA75C5EAC11DA9ADF79355C767B8AB8A840F2DA02CCDF3723AA067A1B379CB513F0A79302B
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/Content/script/owl.carousel.js
Preview:	/*.. Owl carousel.. * @version 2.3.4.. * @author Bartosz Wojciechowski.. * @author David Deutsch.. * @license The MIT License (MIT).. * @todo Lazy Load Icon.. * @todo prevent animationend bubling.. * @todo itemsScaleUp.. * @todo Test Zepto.. * @todo stagePadding calculate wrong active classes.. /..;(function($, window, document, undefined) {...../... Creates a carousel.... * @class The Owl Carousel.... * @public... * @param {HTMLElement\|jQuery} element - The element to create the carousel for.... * @param {Object} [options] - The options... /...function Owl(element, options) {....../.... Current settings for the carousel..... * @public.... /....this.settings = null;....../.... Current options set by the caller including defaults..... * @public.... /....this.options = $.extend({}, Owl.Defaults, options);....../.... Plugin element..... * @public.... /....this.$element = $(element);....../.... Proxied event handlers..... * @protected.... */....this._handlers =

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41440), with no line terminators
Category:	dropped
Size (bytes):	41440
Entropy (8bit):	5.4310865272583895
Encrypted:	false
SSDEEP:	384:WnJC0gIfhnibHCOnISlJImN3nDrBZxwW4zTJPi9j49Bi/HoK/Jxa3TjihP1KDnw/:WGCO9lx3n6TJPuc9Bi/zIl9qZ7f
MD5:	55F413417823E516E1C5ED701ED65262
SHA1:	8A6390966AAEC825878441D629E567AE782A267B
SHA-256:	E83C23A2FD2C32A9623DE14EA105DA2A949285B458F45DF6F6C44DB23CC8DB17
SHA-512:	89F6E7AF3A20181864A92D965A7E3D0B0BB3E43F44032C0CC24270F512C007581CA4E19488343460CA396CB71B5AB88B16440BE6761FE6F6087D778891B4DDCA
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[325],{32325:(at,_,l)=>{l.r(_),l.d(_,{RequestMortgageAssistanceModule:()=>ot});var r=l(56610),h=l(57936),C=l(37440),R=l(95565),f=l(37222),v=l(61480),p=l(50187),e=l(23279),M=l(61448),D=l(84993),k=l(77232),S=l(32940);function I(n,a){if(1&n&&(e.j41(0,"div"),e.EFF(1),e.nI1(2,"titlecase"),e.k0s()),2&n){const t=e.XpG(3);e.R7$(),e.SpI(" ",e.bMT(2,1,null==t.loanContacts?null:t.loanContacts.MailingAddress.MailingAddressLine1),"")}}function T(n,a){if(1&n&&(e.j41(0,"div"),e.EFF(1),e.nI1(2,"titlecase"),e.k0s()),2&n){const t=e.XpG(3);e.R7$(),e.SpI(" ",e.bMT(2,1,null==t.loanContacts?null:t.loanContacts.MailingAddress.MailingAddressLine2),"")}}function F(n,a){if(1&n&&(e.j41(0,"div"),e.EFF(1),e.nI1(2,"titlecase"),e.k0s()),2&n){const t=e.XpG(3);e.R7$(),e.E5c(" ",e.bMT(2,3,null==t.loanContacts?null:t.loanContacts.MailingAddress.MailingCity)," ",null==t.loanContacts?null:t.loanContacts.MailingAddress.MailingState," ",nul

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36382), with no line terminators
Category:	downloaded
Size (bytes):	36382
Entropy (8bit):	5.427956382483397
Encrypted:	false
SSDEEP:	384:4qP3mMhCccoc1hStKga9nOY0EfZk4au6uJhga9q2pidXByAOKL/Heua9qdJqm4Nk:5ffKn9nJ16uJ+a9+yAnLha9s4iB
MD5:	CBEC2AA4B7048D247D35BC6A09F6EAF6
SHA1:	2DCF75F0D2977070ED34E86BDFC77E7D1EA9BE7F
SHA-256:	8825379EA3B078832ED62E9939DEECD599651CDA6B1F40F3617D84A2548247D3
SHA-512:	454C5A5AA591F8F7E6D7B32E15D6098D5F2457AC639A19ECBFB9787ED9F771F6BBB4FCF9363C7B7949AE3A00D20CF988AA5E386D266A72B4A5F449CCD1A16CE1
Malicious:	false
Reputation:	low
URL:	https://account.mortgagequestions.com/phhm/818.57ee8b867c89ea43.js
Preview:	"use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[818],{52818:(Ne,C,r)=>{r.r(C),r.d(C,{DocumentCenterModule:()=>Fe});var d=r(56610),b=r(57936),L=r(37440),M=r(95565),p=r(37222),E=r(61480),f=r(50187),e=r(23279),I=r(61448),R=r(75629),P=r(84993),u=r(10194),c=r(50213),F=r(58082),h=r(84692),k=r(93295),N=r(5957),O=r(98278),A=r(72221),T=r(93901),G=r(66865),_=r(45683),m=r(68403);function x(n,o){if(1&n&&(e.qex(0),e.j41(1,"div",7),e.nrm(2,"span",8),e.k0s(),e.bVm()),2&n){const t=e.XpG();e.R7$(2),e.Y8G("innerHtml",t.headerContent,e.npT)}}function B(n,o){if(1&n&&(e.qex(0),e.j41(1,"mat-option",17),e.EFF(2),e.k0s(),e.bVm()),2&n){const t=o.$implicit;e.R7$(),e.Y8G("value",t),e.R7$(),e.SpI(" ",t.title," ")}}function w(n,o){if(1&n){const t=e.RV6();e.j41(0,"mat-select",16),e.bIt("selectionChange",function(i){e.eBV(t);const a=e.XpG(2);return e.Njj(a.onSelectionChange(i))}),e.DNE(1,B,3,2,"ng-container",14),e.k0s()}if(2&n){const t=e.XpG(2);e.Y8G("value",t.currentTabValue),e

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3000 x 753, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	661830
Entropy (8bit):	7.974995215160677
Encrypted:	false
SSDEEP:	12288:LWQzVO4gekOoJSkewTvC+7ZyA8LZrUGbA4K+ejEyrz1QMc5brvQkIDb:L7zE4gekbhfDC+7MA8LZrTje7P1QM6f8
MD5:	6AE8C8C7D52BF828E539D4FCA0899E4A
SHA1:	0DB2EB4E029A9973ADD42D40C23DE9C92DE5D833
SHA-256:	7F22671678D9D8EA631DD05A3EBD2C4CCB1C0931E985593BEC95D61236D11F63
SHA-512:	294EFC3DDA23A4E8F400B79946B7AAF767164E6D317844A2A538F47F709BE2ABEB050F78B7A0D86E61C1ABD4504BE2398C2800422D211817F3E0E50FB33F4034
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................sRGB.........gAMA......a.....pHYs..."..."........iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5, 2022/05/09-07:22:29 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.4 (Windows)" xmp:CreateDate="2022-05-10T13:29:34-05:00" xmp:ModifyDate="2023-05-30T11:26:14-05:00" xmp:MetadataDate="2023-05-30T11:26:14-05:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:d1f0d65a-a259-6e41-97d1-bf43506fc394" xmpMM:DocumentID="adobe:docid:photoshop:c00c3808-744b-1241-ae23-d3abe74b4b1a" xmpMM:Origi

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59765)
Category:	dropped
Size (bytes):	60044
Entropy (8bit):	5.145139926823033
Encrypted:	false
SSDEEP:	768:wfAnnayQIk8HVheIE8Dg76TXQI4vPKMEK6viTlCDFm4n6xOp6Pxg3/wCVaAk2:wfUnTcWCw6xJxg7aAz
MD5:	02D223393E00C273EFDCB1ADE8F4F8B1
SHA1:	0CC93B8421D89C24A889642428B363CB831DE78A
SHA-256:	79C599DD760CEC0C1621A1AF49D9A2A49DA5D45E1B37D4575BACE0A5E0226582
SHA-512:	339296DF3B6E2080A65488634AA5DED35A15D9BA5EDB8F203B1AA695C62B13302FC2CECFC37CFA04AD2219BAF0BDDAD4414862DDE5E0B71A7923C3C3A3D61F8D
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function o(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function s(){return(s=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&Objec

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	366
Entropy (8bit):	5.112357560984955
Encrypted:	false
SSDEEP:	6:tI9mc4slzhoFiA4UFAhkafBNqW2POFtd7W8dmnUU510cT9QZySrdGoTXs7/:t4ToOndxFtk8CUy10jZ5HXC
MD5:	80FC98157266D0A5062519F514FFD9B9
SHA1:	1694D631506AA3F2AC0887CA0C6DA105956F41EB
SHA-256:	9289B99E3825986C03EC3982DAF0C73146A37BE4F98E06A1B11A5F3F8E7B4FB5
SHA-512:	77BADA3B884DFB0DFA1CB30CDD1CB627CFACAAE9F05EDB67890DF28A53444C7485EB4166E2F81E8401D1B8EE9709C452CD64FAD99A38A5783E8E67459B7CEA3C
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/Content/images/read-article-arrow.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12.004" height="10.003" viewBox="0 0 12.004 10.003"><defs><style>.a{fill:#72a951;}</style></defs><path class="a" d="M19.5,16.5H9.526l3.821-3.639a.5.5,0,0,0-.69-.724L8.293,16.294A1,1,0,0,0,8.3,17.717l4.355,4.148a.5.5,0,1,0,.69-.724L9.51,17.5H19.5a.5.5,0,0,0,0-1Z" transform="translate(20.004 22.003) rotate(180)"/></svg>

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	350
Entropy (8bit):	5.054636650452941
Encrypted:	false
SSDEEP:	6:tI9mc4slzhoFiA4UFCERMDRiFtd7W8dmnUU510cT9QZySrdGoTXsjD6:t4ToO7RiFtk8CUy10jZ5HXQu
MD5:	E48136FCDBB84D5549CB9414820CE7C2
SHA1:	586E8E8899A7773BADDA69D0334244B849DFCE0E
SHA-256:	62F669F818B149942B39821E0B7E04490B3E33A9DD9CDA54CF28B7A3BB2C86F8
SHA-512:	CBD6E6ADCE2E717B3027943C239874CBE6864A9445EDEBC9132C808B13D8F67398E297FDC552E9C92FB384C669D54682F6667663A752B70CBCFFB6A9C9479825
Malicious:	false
Reputation:	low
URL:	https://www.mortgagequestions.com/Content/images/right-arrow.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12.004" height="10.003" viewBox="0 0 12.004 10.003">.. <path id="left-arrow" d="M19.5,16.5H9.526l3.821-3.639a.5.5,0,0,0-.69-.724L8.293,16.294A1,1,0,0,0,8.3,17.717l4.355,4.148a.5.5,0,1,0,.69-.724L9.51,17.5H19.5a.5.5,0,0,0,0-1Z" transform="translate(20.004 22.003) rotate(180)" fill="#1074B2"/>..</svg>..

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (541)
Category:	dropped
Size (bytes):	519614
Entropy (8bit):	5.5522007052415585
Encrypted:	false
SSDEEP:	6144:tA2hXz7B36Mcx/BBn/N1duVsJRdD+G6V9Z5YEpdmq2xRmyJ1JCe:fjF3RO/NVJRdKGovpdaRmy9Ce
MD5:	CACCA7BCA63F8956B13B911C990713B7
SHA1:	524B727B15D66F07BB9FFEBD6F2DDF3464C39BFB
SHA-256:	0867EE1DF230C80DC1601A8C56C499FABE444AB3EC173CE8B901444560C8816D
SHA-512:	D84AE88650862BE2493CB30AB146953B095491B7C6707A85C3243A94732D879A81F69AF967C1A37B8667CF8674FA1A2AD686D56DE1DCF4FB2874B867DC7565B3
Malicious:	false
Reputation:	low
Preview:	/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var gvjs_ar=" - ",gvjs_br=" and ",gvjs_cr=" but expected type is ",gvjs_dr=' class="',gvjs_er=" does not have a domain column.",gvjs_fr=" is of type ",gvjs_gr=" of ",gvjs_hr=" to ",gvjs_ir='" id="',gvjs_jr='" value="',gvjs_X='">',gvjs_kr="#000",gvjs_lr="#109618",gvjs_mr="#222222",gvjs_nr="#333333",gvjs_or="#444444",gvjs_pr="#666666",gvjs_qr="#757575",gvjs_rr="#994499",gvjs_sr="#999",gvjs_tr="#999999",gvjs_ur="#CCCCCC",gvjs_vr="#DC3912",gvjs_wr="#FF9900",gvjs_xr="#FFFFFF",gvjs_yr="#ccc",gvjs_zr="#cccccc",.gvjs_Ar="#e0e0e0",gvjs_Br="#fff",gvjs_Cr="&up__table_query_url=",gvjs_Dr="-caption",gvjs_Er="-content",gvjs_Fr="-default",gvjs_Gr="-disabled",gvjs_Hr="-dropdown",gvjs_Ir="-inner-box",gvjs_Jr="-outer-box",gvjs_Kr="...",gvjs_Lr=".enableInteractivity",gvjs_Mr="0 0",gvjs_Nr="0px",gvjs_Or="100",gvjs_Pr="1px",gvjs_Qr="1px solid infotext",gvjs_Rr="400",gvjs_Sr="500",gvjs_Tr="600",gvjs_Ur="700",gvjs_Vr="800",gv

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2397)
Category:	downloaded
Size (bytes):	2795
Entropy (8bit):	4.949412834496387
Encrypted:	false
SSDEEP:	48:lnKFasPtuSAFf6UNVeH8epDms13J5nFBcj8okK+JrNKJEnwKd:Y7PM1HNVPiPnBcj8ohWrNKJEnwKd
MD5:	645F82BA08FB36644E9F044BBF8BC7D5
SHA1:	F4E2A54DAB518243B9372E92FD624B72488A2F4B
SHA-256:	3B6BCCEF2618DCABDC24197D2A55A07162038B61B0FA85B7F7E59C787A5931E0
SHA-512:	133AEC50BC8DCD4738C6731AA93AC1E04A46BEE76AA5EB711BF58D8C2A46E99CB2006C5E07A38117DA36E3AFA6C31DE5FFD0A7F37F222C872BC693C74E2CA000
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/gh/gitbrent/bootstrap4-toggle@3.6.1/css/bootstrap4-toggle.min.css
Preview:	/\.\|\| ========================================================================.\|\| Bootstrap Toggle: bootstrap4-toggle.css v3.6.1.\|\| https://gitbrent.github.io/bootstrap4-toggle/.\|\| ========================================================================.\|\| Copyright 2018-2019 Brent Ely.\|\| Licensed under MIT.\|\| ========================================================================.\*/..btn-group-xs>.btn,.btn-xs{padding:.35rem .4rem .25rem .4rem;font-size:.875rem;line-height:.5;border-radius:.2rem}.checkbox label .toggle,.checkbox-inline .toggle{margin-left:-1.25rem;margin-right:.35rem}.toggle{position:relative;overflow:hidden}.toggle.btn.btn-light,.toggle.btn.btn-outline-light{border-color:rgba(0,0,0,.15)}.toggle input[type=checkbox]{display:none}.toggle-group{position:absolute;width:200%;top:0;bottom:0;left:0;transition:left .35s;-webkit-transition:left .35s;-moz-user-select:none;-webkit-user-select:none}.toggle-group label,.toggle-group span{cursor:pointer}.toggle.off .toggl

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 24, 2024 16:04:40.426831007 CET	49675	443	192.168.2.5	23.1.237.91
Dec 24, 2024 16:04:40.432209969 CET	49674	443	192.168.2.5	23.1.237.91
Dec 24, 2024 16:04:40.536204100 CET	49673	443	192.168.2.5	23.1.237.91
Dec 24, 2024 16:04:50.027893066 CET	49675	443	192.168.2.5	23.1.237.91
Dec 24, 2024 16:04:50.043505907 CET	49674	443	192.168.2.5	23.1.237.91
Dec 24, 2024 16:04:50.137305021 CET	49673	443	192.168.2.5	23.1.237.91
Dec 24, 2024 16:04:50.886084080 CET	49711	443	192.168.2.5	142.250.181.68
Dec 24, 2024 16:04:50.886178017 CET	443	49711	142.250.181.68	192.168.2.5
Dec 24, 2024 16:04:50.886271954 CET	49711	443	192.168.2.5	142.250.181.68
Dec 24, 2024 16:04:50.886605024 CET	49711	443	192.168.2.5	142.250.181.68
Dec 24, 2024 16:04:50.886671066 CET	443	49711	142.250.181.68	192.168.2.5
Dec 24, 2024 16:04:52.531991005 CET	443	49703	23.1.237.91	192.168.2.5
Dec 24, 2024 16:04:52.532207012 CET	49703	443	192.168.2.5	23.1.237.91
Dec 24, 2024 16:04:52.588665962 CET	443	49711	142.250.181.68	192.168.2.5
Dec 24, 2024 16:04:52.588974953 CET	49711	443	192.168.2.5	142.250.181.68
Dec 24, 2024 16:04:52.589122057 CET	443	49711	142.250.181.68	192.168.2.5
Dec 24, 2024 16:04:52.590084076 CET	443	49711	142.250.181.68	192.168.2.5
Dec 24, 2024 16:04:52.590188026 CET	49711	443	192.168.2.5	142.250.181.68
Dec 24, 2024 16:04:52.591507912 CET	49711	443	192.168.2.5	142.250.181.68
Dec 24, 2024 16:04:52.591618061 CET	443	49711	142.250.181.68	192.168.2.5
Dec 24, 2024 16:04:52.637345076 CET	49711	443	192.168.2.5	142.250.181.68
Dec 24, 2024 16:04:52.637371063 CET	443	49711	142.250.181.68	192.168.2.5
Dec 24, 2024 16:04:52.684659004 CET	49711	443	192.168.2.5	142.250.181.68
Dec 24, 2024 16:04:52.736090899 CET	49713	80	192.168.2.5	44.196.118.130
Dec 24, 2024 16:04:52.736483097 CET	49714	80	192.168.2.5	44.196.118.130
Dec 24, 2024 16:04:52.855684042 CET	80	49713	44.196.118.130	192.168.2.5
Dec 24, 2024 16:04:52.855746031 CET	49713	80	192.168.2.5	44.196.118.130
Dec 24, 2024 16:04:52.855962038 CET	80	49714	44.196.118.130	192.168.2.5
Dec 24, 2024 16:04:52.856028080 CET	49714	80	192.168.2.5	44.196.118.130
Dec 24, 2024 16:04:52.856281996 CET	49713	80	192.168.2.5	44.196.118.130
Dec 24, 2024 16:04:52.975725889 CET	80	49713	44.196.118.130	192.168.2.5
Dec 24, 2024 16:04:53.978427887 CET	80	49713	44.196.118.130	192.168.2.5
Dec 24, 2024 16:04:54.029150963 CET	49713	80	192.168.2.5	44.196.118.130
Dec 24, 2024 16:04:54.202966928 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:54.202997923 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:54.208496094 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:54.208496094 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:54.208524942 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:55.546724081 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:55.547032118 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:55.547043085 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:55.548110008 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:55.548176050 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:55.553316116 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:55.553390026 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:55.553524971 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:55.553533077 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:55.601666927 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.329492092 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.329571009 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.329583883 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.354511976 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.354582071 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.354589939 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.396936893 CET	49717	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.396991014 CET	443	49717	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.397074938 CET	49717	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.400855064 CET	49717	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.400876045 CET	443	49717	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.404138088 CET	49718	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.404165983 CET	443	49718	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.404239893 CET	49718	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.404694080 CET	49719	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.404707909 CET	443	49719	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.404803991 CET	49719	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.405174971 CET	49720	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.405256987 CET	443	49720	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.405364990 CET	49720	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.406608105 CET	49721	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.406634092 CET	443	49721	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.406701088 CET	49721	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.408783913 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.409250021 CET	49718	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.409260035 CET	443	49718	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.410883904 CET	49719	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.410898924 CET	443	49719	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.411263943 CET	49720	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.411302090 CET	443	49720	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.411859989 CET	49721	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.411869049 CET	443	49721	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.521738052 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.521806955 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.521847963 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.521863937 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.521884918 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.521887064 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.521955013 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.536849976 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.536864042 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.536926985 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.546660900 CET	49723	443	192.168.2.5	104.17.24.14
Dec 24, 2024 16:04:57.546679020 CET	443	49723	104.17.24.14	192.168.2.5
Dec 24, 2024 16:04:57.546838999 CET	49723	443	192.168.2.5	104.17.24.14
Dec 24, 2024 16:04:57.546998978 CET	49724	443	192.168.2.5	104.17.24.14
Dec 24, 2024 16:04:57.547034025 CET	443	49724	104.17.24.14	192.168.2.5
Dec 24, 2024 16:04:57.547173977 CET	49724	443	192.168.2.5	104.17.24.14
Dec 24, 2024 16:04:57.547267914 CET	49725	443	192.168.2.5	104.17.24.14
Dec 24, 2024 16:04:57.547420025 CET	443	49725	104.17.24.14	192.168.2.5
Dec 24, 2024 16:04:57.547700882 CET	49725	443	192.168.2.5	104.17.24.14
Dec 24, 2024 16:04:57.548173904 CET	49726	443	192.168.2.5	104.17.24.14
Dec 24, 2024 16:04:57.548182964 CET	443	49726	104.17.24.14	192.168.2.5
Dec 24, 2024 16:04:57.548240900 CET	49726	443	192.168.2.5	104.17.24.14
Dec 24, 2024 16:04:57.548491001 CET	49726	443	192.168.2.5	104.17.24.14
Dec 24, 2024 16:04:57.548501015 CET	443	49726	104.17.24.14	192.168.2.5
Dec 24, 2024 16:04:57.548691034 CET	49725	443	192.168.2.5	104.17.24.14
Dec 24, 2024 16:04:57.548732042 CET	443	49725	104.17.24.14	192.168.2.5
Dec 24, 2024 16:04:57.548860073 CET	49724	443	192.168.2.5	104.17.24.14
Dec 24, 2024 16:04:57.548871994 CET	443	49724	104.17.24.14	192.168.2.5
Dec 24, 2024 16:04:57.549274921 CET	49723	443	192.168.2.5	104.17.24.14
Dec 24, 2024 16:04:57.549285889 CET	443	49723	104.17.24.14	192.168.2.5
Dec 24, 2024 16:04:57.549680948 CET	49727	443	192.168.2.5	104.18.10.207
Dec 24, 2024 16:04:57.549727917 CET	443	49727	104.18.10.207	192.168.2.5
Dec 24, 2024 16:04:57.549794912 CET	49727	443	192.168.2.5	104.18.10.207
Dec 24, 2024 16:04:57.550263882 CET	49727	443	192.168.2.5	104.18.10.207
Dec 24, 2024 16:04:57.550278902 CET	443	49727	104.18.10.207	192.168.2.5
Dec 24, 2024 16:04:57.551440001 CET	49728	443	192.168.2.5	172.217.21.36
Dec 24, 2024 16:04:57.551450014 CET	443	49728	172.217.21.36	192.168.2.5
Dec 24, 2024 16:04:57.551516056 CET	49728	443	192.168.2.5	172.217.21.36
Dec 24, 2024 16:04:57.551668882 CET	49728	443	192.168.2.5	172.217.21.36
Dec 24, 2024 16:04:57.551681995 CET	443	49728	172.217.21.36	192.168.2.5
Dec 24, 2024 16:04:57.557090998 CET	49729	443	192.168.2.5	151.101.65.229
Dec 24, 2024 16:04:57.557105064 CET	443	49729	151.101.65.229	192.168.2.5
Dec 24, 2024 16:04:57.557157040 CET	49729	443	192.168.2.5	151.101.65.229
Dec 24, 2024 16:04:57.557286978 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.557382107 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.557471037 CET	49730	443	192.168.2.5	151.101.65.229
Dec 24, 2024 16:04:57.557526112 CET	443	49730	151.101.65.229	192.168.2.5
Dec 24, 2024 16:04:57.557589054 CET	49730	443	192.168.2.5	151.101.65.229
Dec 24, 2024 16:04:57.557791948 CET	49729	443	192.168.2.5	151.101.65.229
Dec 24, 2024 16:04:57.557800055 CET	443	49729	151.101.65.229	192.168.2.5
Dec 24, 2024 16:04:57.558130980 CET	49730	443	192.168.2.5	151.101.65.229
Dec 24, 2024 16:04:57.558151007 CET	443	49730	151.101.65.229	192.168.2.5
Dec 24, 2024 16:04:57.567059040 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.567157030 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.576107025 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.576176882 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.603724003 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.603737116 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.603806019 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.621769905 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.621844053 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.723040104 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.723102093 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.723160028 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.723170042 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.723237991 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.737262964 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.737369061 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.744112015 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.744213104 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.762938023 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.763055086 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.774301052 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.774377108 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.785433054 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.785506010 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.785512924 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.785542011 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.785563946 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.785609007 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.785806894 CET	49716	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.785816908 CET	443	49716	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.786544085 CET	49731	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.786577940 CET	443	49731	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:57.786659956 CET	49731	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.787446022 CET	49731	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:57.787460089 CET	443	49731	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:58.624962091 CET	443	49717	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:58.627140045 CET	49717	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:58.627209902 CET	443	49717	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:58.627590895 CET	443	49717	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:58.628326893 CET	49717	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:58.628410101 CET	443	49717	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:58.628966093 CET	49717	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:58.644613981 CET	443	49718	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:58.646120071 CET	443	49720	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:58.646478891 CET	49720	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:58.646511078 CET	443	49720	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:58.646670103 CET	49718	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:58.646692991 CET	443	49718	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:58.647070885 CET	443	49718	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:58.647505045 CET	443	49720	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:58.647604942 CET	49720	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:58.648149967 CET	49718	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:58.648231030 CET	443	49718	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:58.648639917 CET	49720	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:58.648703098 CET	443	49720	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:58.648950100 CET	49718	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:58.649055958 CET	49720	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:58.649065971 CET	443	49720	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:58.655513048 CET	443	49721	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:58.657290936 CET	49721	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:58.657313108 CET	443	49721	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:58.658269882 CET	443	49721	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:58.658370972 CET	49721	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:58.658735037 CET	49721	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:58.658788919 CET	443	49721	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:58.658885956 CET	49721	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:58.675344944 CET	443	49717	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:58.691339970 CET	443	49718	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:58.699358940 CET	49721	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:58.699368000 CET	443	49721	107.20.24.122	192.168.2.5
Dec 24, 2024 16:04:58.699412107 CET	49720	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:58.745707989 CET	49721	443	192.168.2.5	107.20.24.122
Dec 24, 2024 16:04:58.764743090 CET	443	49724	104.17.24.14	192.168.2.5
Dec 24, 2024 16:04:58.766513109 CET	49724	443	192.168.2.5	104.17.24.14

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 24, 2024 16:04:50.747281075 CET	192.168.2.5	1.1.1.1	0xbf40	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:50.747561932 CET	192.168.2.5	1.1.1.1	0xf939	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 24, 2024 16:04:52.341538906 CET	192.168.2.5	1.1.1.1	0xa1dc	Standard query (0)	www.mortgagequestions.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:52.341715097 CET	192.168.2.5	1.1.1.1	0xaa4d	Standard query (0)	www.mortgagequestions.com	65	IN (0x0001)	false
Dec 24, 2024 16:04:53.980984926 CET	192.168.2.5	1.1.1.1	0x22f2	Standard query (0)	www.mortgagequestions.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:53.981147051 CET	192.168.2.5	1.1.1.1	0xc3d4	Standard query (0)	www.mortgagequestions.com	65	IN (0x0001)	false
Dec 24, 2024 16:04:57.405999899 CET	192.168.2.5	1.1.1.1	0x662e	Standard query (0)	use.fontawesome.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:57.406152964 CET	192.168.2.5	1.1.1.1	0xf4c6	Standard query (0)	use.fontawesome.com	65	IN (0x0001)	false
Dec 24, 2024 16:04:57.407310963 CET	192.168.2.5	1.1.1.1	0x5c99	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:57.407546043 CET	192.168.2.5	1.1.1.1	0x4b34	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 24, 2024 16:04:57.408101082 CET	192.168.2.5	1.1.1.1	0x8042	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:57.408493042 CET	192.168.2.5	1.1.1.1	0xdba6	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Dec 24, 2024 16:04:57.410219908 CET	192.168.2.5	1.1.1.1	0xd1a7	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:57.410377979 CET	192.168.2.5	1.1.1.1	0xd273	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Dec 24, 2024 16:04:57.414119959 CET	192.168.2.5	1.1.1.1	0x89cc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:57.414378881 CET	192.168.2.5	1.1.1.1	0x6ff5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 24, 2024 16:04:59.293427944 CET	192.168.2.5	1.1.1.1	0xd46a	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:59.293879986 CET	192.168.2.5	1.1.1.1	0x307f	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Dec 24, 2024 16:04:59.437586069 CET	192.168.2.5	1.1.1.1	0x9003	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:59.438258886 CET	192.168.2.5	1.1.1.1	0x9cba	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 24, 2024 16:04:59.619334936 CET	192.168.2.5	1.1.1.1	0x5f9a	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:59.619474888 CET	192.168.2.5	1.1.1.1	0x9970	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Dec 24, 2024 16:05:00.077759027 CET	192.168.2.5	1.1.1.1	0x3ea0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:00.077944994 CET	192.168.2.5	1.1.1.1	0x4a54	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 24, 2024 16:05:00.922012091 CET	192.168.2.5	1.1.1.1	0x6c7	Standard query (0)	www.mortgagequestions.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:00.922127962 CET	192.168.2.5	1.1.1.1	0x5868	Standard query (0)	www.mortgagequestions.com	65	IN (0x0001)	false
Dec 24, 2024 16:05:02.379761934 CET	192.168.2.5	1.1.1.1	0x15e5	Standard query (0)	sdk.apptentive.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:02.379959106 CET	192.168.2.5	1.1.1.1	0xf7f0	Standard query (0)	sdk.apptentive.com	65	IN (0x0001)	false
Dec 24, 2024 16:05:05.125926971 CET	192.168.2.5	1.1.1.1	0xcd95	Standard query (0)	api.apptentive.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:05.126106977 CET	192.168.2.5	1.1.1.1	0x68e8	Standard query (0)	api.apptentive.com	65	IN (0x0001)	false
Dec 24, 2024 16:05:07.531055927 CET	192.168.2.5	1.1.1.1	0x831f	Standard query (0)	api.apptentive.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:07.531342983 CET	192.168.2.5	1.1.1.1	0xa2dc	Standard query (0)	api.apptentive.com	65	IN (0x0001)	false
Dec 24, 2024 16:05:11.197609901 CET	192.168.2.5	1.1.1.1	0x3200	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:11.198096991 CET	192.168.2.5	1.1.1.1	0x58c5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 24, 2024 16:05:14.821568966 CET	192.168.2.5	1.1.1.1	0x3b07	Standard query (0)	account.mortgagequestions.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:14.821708918 CET	192.168.2.5	1.1.1.1	0x822b	Standard query (0)	account.mortgagequestions.com	65	IN (0x0001)	false
Dec 24, 2024 16:05:16.191220999 CET	192.168.2.5	1.1.1.1	0xf7a4	Standard query (0)	sdk.apptentive.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:16.191220999 CET	192.168.2.5	1.1.1.1	0x1498	Standard query (0)	sdk.apptentive.com	65	IN (0x0001)	false
Dec 24, 2024 16:05:18.021987915 CET	192.168.2.5	1.1.1.1	0x6b42	Standard query (0)	account.mortgagequestions.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:18.022346020 CET	192.168.2.5	1.1.1.1	0x3796	Standard query (0)	account.mortgagequestions.com	65	IN (0x0001)	false
Dec 24, 2024 16:05:38.501779079 CET	192.168.2.5	1.1.1.1	0x391c	Standard query (0)	api.bkiconnect.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:38.502015114 CET	192.168.2.5	1.1.1.1	0x7cfc	Standard query (0)	api.bkiconnect.com	65	IN (0x0001)	false
Dec 24, 2024 16:05:43.969567060 CET	192.168.2.5	1.1.1.1	0xe1aa	Standard query (0)	www.glancecdn.net	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:43.969923973 CET	192.168.2.5	1.1.1.1	0x25e8	Standard query (0)	www.glancecdn.net	65	IN (0x0001)	false
Dec 24, 2024 16:05:43.970535040 CET	192.168.2.5	1.1.1.1	0x585b	Standard query (0)	lightning.us1.helium.servismatrixcdn.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:43.970643044 CET	192.168.2.5	1.1.1.1	0x6b6b	Standard query (0)	lightning.us1.helium.servismatrixcdn.com	65	IN (0x0001)	false
Dec 24, 2024 16:05:43.973721027 CET	192.168.2.5	1.1.1.1	0x6367	Standard query (0)	api.bkiconnect.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:43.973929882 CET	192.168.2.5	1.1.1.1	0x78c7	Standard query (0)	api.bkiconnect.com	65	IN (0x0001)	false
Dec 24, 2024 16:05:46.256202936 CET	192.168.2.5	1.1.1.1	0xed0a	Standard query (0)	storage.glancecdn.net	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:46.256439924 CET	192.168.2.5	1.1.1.1	0x5697	Standard query (0)	storage.glancecdn.net	65	IN (0x0001)	false
Dec 24, 2024 16:05:49.600431919 CET	192.168.2.5	1.1.1.1	0x24d5	Standard query (0)	storage.glancecdn.net	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:49.600431919 CET	192.168.2.5	1.1.1.1	0xc901	Standard query (0)	storage.glancecdn.net	65	IN (0x0001)	false
Dec 24, 2024 16:05:57.914412022 CET	192.168.2.5	1.1.1.1	0x389c	Standard query (0)	lightning.us1.helium.servismatrixcdn.com	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:57.914602041 CET	192.168.2.5	1.1.1.1	0xa494	Standard query (0)	lightning.us1.helium.servismatrixcdn.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 24, 2024 16:04:50.884468079 CET	1.1.1.1	192.168.2.5	0xf939	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 24, 2024 16:04:50.884716988 CET	1.1.1.1	192.168.2.5	0xbf40	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:52.735304117 CET	1.1.1.1	192.168.2.5	0xa1dc	No error (0)	www.mortgagequestions.com		44.196.118.130	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:52.735304117 CET	1.1.1.1	192.168.2.5	0xa1dc	No error (0)	www.mortgagequestions.com		107.20.24.122	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:54.198159933 CET	1.1.1.1	192.168.2.5	0x22f2	No error (0)	www.mortgagequestions.com		107.20.24.122	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:54.198159933 CET	1.1.1.1	192.168.2.5	0x22f2	No error (0)	www.mortgagequestions.com		44.196.118.130	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:57.543493986 CET	1.1.1.1	192.168.2.5	0x662e	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:04:57.543931007 CET	1.1.1.1	192.168.2.5	0xf4c6	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:04:57.545258999 CET	1.1.1.1	192.168.2.5	0x5c99	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:57.545258999 CET	1.1.1.1	192.168.2.5	0x5c99	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:57.545289040 CET	1.1.1.1	192.168.2.5	0x8042	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:57.545289040 CET	1.1.1.1	192.168.2.5	0x8042	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:57.545841932 CET	1.1.1.1	192.168.2.5	0x4b34	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 24, 2024 16:04:57.546992064 CET	1.1.1.1	192.168.2.5	0xd1a7	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:04:57.546992064 CET	1.1.1.1	192.168.2.5	0xd1a7	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:57.546992064 CET	1.1.1.1	192.168.2.5	0xd1a7	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:57.546992064 CET	1.1.1.1	192.168.2.5	0xd1a7	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:57.546992064 CET	1.1.1.1	192.168.2.5	0xd1a7	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:57.548441887 CET	1.1.1.1	192.168.2.5	0xdba6	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Dec 24, 2024 16:04:57.550869942 CET	1.1.1.1	192.168.2.5	0x6ff5	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 24, 2024 16:04:57.551012993 CET	1.1.1.1	192.168.2.5	0x89cc	No error (0)	www.google.com		172.217.21.36	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:57.556636095 CET	1.1.1.1	192.168.2.5	0xd273	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:04:59.432008982 CET	1.1.1.1	192.168.2.5	0xd46a	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:04:59.432008982 CET	1.1.1.1	192.168.2.5	0xd46a	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:59.432008982 CET	1.1.1.1	192.168.2.5	0xd46a	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:59.432008982 CET	1.1.1.1	192.168.2.5	0xd46a	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:59.432008982 CET	1.1.1.1	192.168.2.5	0xd46a	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:59.432229042 CET	1.1.1.1	192.168.2.5	0x307f	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:04:59.574496984 CET	1.1.1.1	192.168.2.5	0x9003	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:59.574496984 CET	1.1.1.1	192.168.2.5	0x9003	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:59.574805021 CET	1.1.1.1	192.168.2.5	0x9cba	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 24, 2024 16:04:59.756167889 CET	1.1.1.1	192.168.2.5	0x5f9a	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:59.756167889 CET	1.1.1.1	192.168.2.5	0x5f9a	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:04:59.757260084 CET	1.1.1.1	192.168.2.5	0x9970	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Dec 24, 2024 16:05:00.216253996 CET	1.1.1.1	192.168.2.5	0x3ea0	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:00.216865063 CET	1.1.1.1	192.168.2.5	0x4a54	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 24, 2024 16:05:01.063801050 CET	1.1.1.1	192.168.2.5	0x6c7	No error (0)	www.mortgagequestions.com		107.20.24.122	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:01.063801050 CET	1.1.1.1	192.168.2.5	0x6c7	No error (0)	www.mortgagequestions.com		44.196.118.130	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:02.637049913 CET	1.1.1.1	192.168.2.5	0x15e5	No error (0)	sdk.apptentive.com		3.160.196.72	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:02.637049913 CET	1.1.1.1	192.168.2.5	0x15e5	No error (0)	sdk.apptentive.com		3.160.196.66	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:02.637049913 CET	1.1.1.1	192.168.2.5	0x15e5	No error (0)	sdk.apptentive.com		3.160.196.45	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:02.637049913 CET	1.1.1.1	192.168.2.5	0x15e5	No error (0)	sdk.apptentive.com		3.160.196.59	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:05.501910925 CET	1.1.1.1	192.168.2.5	0xcd95	No error (0)	api.apptentive.com	gateway-public-high-volume.eks-0.production.apptentive.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:05.501910925 CET	1.1.1.1	192.168.2.5	0xcd95	No error (0)	gateway-public-high-volume.eks-0.production.apptentive.com	gateway-public-high-volume-green.eks-0.production.apptentive.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:05.501910925 CET	1.1.1.1	192.168.2.5	0xcd95	No error (0)	gateway-public-high-volume-green.eks-0.production.apptentive.com		23.20.35.169	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:05.501910925 CET	1.1.1.1	192.168.2.5	0xcd95	No error (0)	gateway-public-high-volume-green.eks-0.production.apptentive.com		3.225.144.75	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:05.501910925 CET	1.1.1.1	192.168.2.5	0xcd95	No error (0)	gateway-public-high-volume-green.eks-0.production.apptentive.com		3.216.74.155	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:05.501910925 CET	1.1.1.1	192.168.2.5	0xcd95	No error (0)	gateway-public-high-volume-green.eks-0.production.apptentive.com		18.204.0.234	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:05.501910925 CET	1.1.1.1	192.168.2.5	0xcd95	No error (0)	gateway-public-high-volume-green.eks-0.production.apptentive.com		18.215.67.47	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:05.501910925 CET	1.1.1.1	192.168.2.5	0xcd95	No error (0)	gateway-public-high-volume-green.eks-0.production.apptentive.com		35.171.240.14	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:05.501910925 CET	1.1.1.1	192.168.2.5	0xcd95	No error (0)	gateway-public-high-volume-green.eks-0.production.apptentive.com		52.73.70.176	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:05.501910925 CET	1.1.1.1	192.168.2.5	0xcd95	No error (0)	gateway-public-high-volume-green.eks-0.production.apptentive.com		50.17.156.167	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:05.514162064 CET	1.1.1.1	192.168.2.5	0x68e8	No error (0)	api.apptentive.com	gateway-public-high-volume.eks-0.production.apptentive.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:05.514162064 CET	1.1.1.1	192.168.2.5	0x68e8	No error (0)	gateway-public-high-volume.eks-0.production.apptentive.com	gateway-public-high-volume-green.eks-0.production.apptentive.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:07.669658899 CET	1.1.1.1	192.168.2.5	0xa2dc	No error (0)	api.apptentive.com	gateway-public-high-volume.eks-0.production.apptentive.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:07.669658899 CET	1.1.1.1	192.168.2.5	0xa2dc	No error (0)	gateway-public-high-volume.eks-0.production.apptentive.com	gateway-public-high-volume-green.eks-0.production.apptentive.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:07.670003891 CET	1.1.1.1	192.168.2.5	0x831f	No error (0)	api.apptentive.com	gateway-public-high-volume.eks-0.production.apptentive.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:07.670003891 CET	1.1.1.1	192.168.2.5	0x831f	No error (0)	gateway-public-high-volume.eks-0.production.apptentive.com	gateway-public-high-volume-green.eks-0.production.apptentive.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:07.670003891 CET	1.1.1.1	192.168.2.5	0x831f	No error (0)	gateway-public-high-volume-green.eks-0.production.apptentive.com		23.20.35.169	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:07.670003891 CET	1.1.1.1	192.168.2.5	0x831f	No error (0)	gateway-public-high-volume-green.eks-0.production.apptentive.com		3.225.144.75	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:07.670003891 CET	1.1.1.1	192.168.2.5	0x831f	No error (0)	gateway-public-high-volume-green.eks-0.production.apptentive.com		3.216.74.155	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:07.670003891 CET	1.1.1.1	192.168.2.5	0x831f	No error (0)	gateway-public-high-volume-green.eks-0.production.apptentive.com		18.204.0.234	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:07.670003891 CET	1.1.1.1	192.168.2.5	0x831f	No error (0)	gateway-public-high-volume-green.eks-0.production.apptentive.com		52.73.70.176	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:07.670003891 CET	1.1.1.1	192.168.2.5	0x831f	No error (0)	gateway-public-high-volume-green.eks-0.production.apptentive.com		50.17.156.167	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:07.670003891 CET	1.1.1.1	192.168.2.5	0x831f	No error (0)	gateway-public-high-volume-green.eks-0.production.apptentive.com		18.215.67.47	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:07.670003891 CET	1.1.1.1	192.168.2.5	0x831f	No error (0)	gateway-public-high-volume-green.eks-0.production.apptentive.com		35.171.240.14	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:11.335505962 CET	1.1.1.1	192.168.2.5	0x58c5	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 24, 2024 16:05:11.336324930 CET	1.1.1.1	192.168.2.5	0x3200	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:15.361797094 CET	1.1.1.1	192.168.2.5	0x3b07	No error (0)	account.mortgagequestions.com	loansphereservicingdigital.bkiconnect.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:15.361797094 CET	1.1.1.1	192.168.2.5	0x3b07	No error (0)	loansphereservicingdigital.bkiconnect.com	JTCLoanSphereServicingDigital.bkiconnect.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:15.361797094 CET	1.1.1.1	192.168.2.5	0x3b07	No error (0)	JTCLoanSphereServicingDigital.bkiconnect.com		204.86.65.51	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:15.362236977 CET	1.1.1.1	192.168.2.5	0x822b	No error (0)	account.mortgagequestions.com	loansphereservicingdigital.bkiconnect.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:15.362236977 CET	1.1.1.1	192.168.2.5	0x822b	No error (0)	loansphereservicingdigital.bkiconnect.com	JTCLoanSphereServicingDigital.bkiconnect.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:16.330054045 CET	1.1.1.1	192.168.2.5	0xf7a4	No error (0)	sdk.apptentive.com		3.160.196.59	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:16.330054045 CET	1.1.1.1	192.168.2.5	0xf7a4	No error (0)	sdk.apptentive.com		3.160.196.45	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:16.330054045 CET	1.1.1.1	192.168.2.5	0xf7a4	No error (0)	sdk.apptentive.com		3.160.196.66	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:16.330054045 CET	1.1.1.1	192.168.2.5	0xf7a4	No error (0)	sdk.apptentive.com		3.160.196.72	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:18.159534931 CET	1.1.1.1	192.168.2.5	0x6b42	No error (0)	account.mortgagequestions.com	loansphereservicingdigital.bkiconnect.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:18.159534931 CET	1.1.1.1	192.168.2.5	0x6b42	No error (0)	loansphereservicingdigital.bkiconnect.com	JTCLoanSphereServicingDigital.bkiconnect.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:18.159534931 CET	1.1.1.1	192.168.2.5	0x6b42	No error (0)	JTCLoanSphereServicingDigital.bkiconnect.com		204.86.65.51	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:18.159703970 CET	1.1.1.1	192.168.2.5	0x3796	No error (0)	account.mortgagequestions.com	loansphereservicingdigital.bkiconnect.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:18.159703970 CET	1.1.1.1	192.168.2.5	0x3796	No error (0)	loansphereservicingdigital.bkiconnect.com	JTCLoanSphereServicingDigital.bkiconnect.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:38.988367081 CET	1.1.1.1	192.168.2.5	0x391c	No error (0)	api.bkiconnect.com	rtcapi.bkiconnect.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:38.988367081 CET	1.1.1.1	192.168.2.5	0x391c	No error (0)	rtcapi.bkiconnect.com		74.113.193.91	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:38.988635063 CET	1.1.1.1	192.168.2.5	0x7cfc	No error (0)	api.bkiconnect.com	rtcapi.bkiconnect.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:44.109497070 CET	1.1.1.1	192.168.2.5	0x25e8	No error (0)	www.glancecdn.net	glancecdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:44.114036083 CET	1.1.1.1	192.168.2.5	0x6367	No error (0)	api.bkiconnect.com	rtcapi.bkiconnect.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:44.114036083 CET	1.1.1.1	192.168.2.5	0x6367	No error (0)	rtcapi.bkiconnect.com		74.113.193.91	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:44.115272999 CET	1.1.1.1	192.168.2.5	0x78c7	No error (0)	api.bkiconnect.com	rtcapi.bkiconnect.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:44.184925079 CET	1.1.1.1	192.168.2.5	0xe1aa	No error (0)	www.glancecdn.net	glancecdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:44.184925079 CET	1.1.1.1	192.168.2.5	0xe1aa	No error (0)	glancecdn.net		35.173.71.27	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:44.184925079 CET	1.1.1.1	192.168.2.5	0xe1aa	No error (0)	glancecdn.net		34.239.225.84	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:44.184925079 CET	1.1.1.1	192.168.2.5	0xe1aa	No error (0)	glancecdn.net		3.225.102.198	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:44.184925079 CET	1.1.1.1	192.168.2.5	0xe1aa	No error (0)	glancecdn.net		54.210.157.154	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:44.726857901 CET	1.1.1.1	192.168.2.5	0x585b	No error (0)	lightning.us1.helium.servismatrixcdn.com		108.158.75.111	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:44.726857901 CET	1.1.1.1	192.168.2.5	0x585b	No error (0)	lightning.us1.helium.servismatrixcdn.com		108.158.75.15	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:44.726857901 CET	1.1.1.1	192.168.2.5	0x585b	No error (0)	lightning.us1.helium.servismatrixcdn.com		108.158.75.103	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:44.726857901 CET	1.1.1.1	192.168.2.5	0x585b	No error (0)	lightning.us1.helium.servismatrixcdn.com		108.158.75.60	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:46.478470087 CET	1.1.1.1	192.168.2.5	0xed0a	No error (0)	storage.glancecdn.net	d10lse0r9n7r80.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:46.478470087 CET	1.1.1.1	192.168.2.5	0xed0a	No error (0)	d10lse0r9n7r80.cloudfront.net		18.66.161.22	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:46.478470087 CET	1.1.1.1	192.168.2.5	0xed0a	No error (0)	d10lse0r9n7r80.cloudfront.net		18.66.161.31	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:46.478470087 CET	1.1.1.1	192.168.2.5	0xed0a	No error (0)	d10lse0r9n7r80.cloudfront.net		18.66.161.42	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:46.478470087 CET	1.1.1.1	192.168.2.5	0xed0a	No error (0)	d10lse0r9n7r80.cloudfront.net		18.66.161.106	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:46.478741884 CET	1.1.1.1	192.168.2.5	0x5697	No error (0)	storage.glancecdn.net	d10lse0r9n7r80.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:49.738589048 CET	1.1.1.1	192.168.2.5	0xc901	No error (0)	storage.glancecdn.net	d10lse0r9n7r80.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:49.738922119 CET	1.1.1.1	192.168.2.5	0x24d5	No error (0)	storage.glancecdn.net	d10lse0r9n7r80.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 24, 2024 16:05:49.738922119 CET	1.1.1.1	192.168.2.5	0x24d5	No error (0)	d10lse0r9n7r80.cloudfront.net		18.66.161.22	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:49.738922119 CET	1.1.1.1	192.168.2.5	0x24d5	No error (0)	d10lse0r9n7r80.cloudfront.net		18.66.161.42	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:49.738922119 CET	1.1.1.1	192.168.2.5	0x24d5	No error (0)	d10lse0r9n7r80.cloudfront.net		18.66.161.31	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:49.738922119 CET	1.1.1.1	192.168.2.5	0x24d5	No error (0)	d10lse0r9n7r80.cloudfront.net		18.66.161.106	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:58.053482056 CET	1.1.1.1	192.168.2.5	0x389c	No error (0)	lightning.us1.helium.servismatrixcdn.com		108.158.75.60	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:58.053482056 CET	1.1.1.1	192.168.2.5	0x389c	No error (0)	lightning.us1.helium.servismatrixcdn.com		108.158.75.15	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:58.053482056 CET	1.1.1.1	192.168.2.5	0x389c	No error (0)	lightning.us1.helium.servismatrixcdn.com		108.158.75.103	A (IP address)	IN (0x0001)	false
Dec 24, 2024 16:05:58.053482056 CET	1.1.1.1	192.168.2.5	0x389c	No error (0)	lightning.us1.helium.servismatrixcdn.com		108.158.75.111	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49713	44.196.118.130	80	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 24, 2024 16:04:52.856281996 CET	440	OUT	GET / HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 24, 2024 16:04:53.978427887 CET	345	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Tue, 24 Dec 2024 15:04:53 GMT Content-Type: text/html Content-Length: 134 Connection: keep-alive Location: https://www.mortgagequestions.com:443/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>
Dec 24, 2024 16:05:38.981026888 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49714	44.196.118.130	80	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 24, 2024 16:05:37.871557951 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49716	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:04:55 UTC	668	OUT	GET / HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:04:57 UTC	2483	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:04:57 GMT Content-Type: text/html; charset=utf-8 Content-Length: 81800 Connection: close Set-Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92; Expires=Tue, 31 Dec 2024 15:04:55 GMT; Path=/ Set-Cookie: AWSALBCORS=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92; Expires=Tue, 31 Dec 2024 15:04:55 GMT; Path=/; SameSite=None Cache-Control: private Content-Security-Policy: default-src 'self' https://www.google-analytics.com https://sdk.apptentive.com https://api.apptentive.com;font-src 'self' https://use.fontawesome.com https://fonts.googleapis.com https://fonts.gstatic.com https://unpkg.com data:;img-src 'self' https://www.google.com https://platform-cdn.sharethis.com https://s4desktop.com https://www.google.co.in https://www.google-analytics.com https://s3.amazonaws.com;frame-ancestors 'self' https://cms-uat.mortgagequestions.com https://uat.mortgagequestions.com https://4654125057.encompasstpoconnect.com;frame-src 'self' https://cms-uat.mortgagequestions.com https://uat.mortgagequestions.com https://bid.g.doubleclick.net https://www.google.com http://dntcl.qualaroo.com https://s4desktop.com;script-src 'self' 'nonce-HZKjdKzd1syw9sL2tPoqhQ==' https://sdk.apptentive.com https://api.apptentive.com https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com https://s4desktop.com https://platform-api.sharethis.com https://cdnj [TRUNCATED] X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:04:57 UTC	1338	IN	Data Raw: 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 31 30 2c 49 45 3d 31 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="IE=10,IE=11"> <meta name="format-detection" conte
2024-12-24 15:04:57 UTC	1338	IN	Data Raw: 65 72 2e 6a 73 2f 31 2e 31 36 2e 30 2f 75 6d 64 2f 70 6f 70 70 65 72 2e 6d 69 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 6d 57 49 31 4d 48 4b 66 56 44 59 33 37 66 69 4b 32 74 74 48 4f 41 3d 3d 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 34 2e 35 2e 32 2f 6a 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 6d 57 49 31 4d 48 4b 66 56 44 59 33 37 66 69 4b 32 74 74 48 4f 41 3d 3d 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c Data Ascii: er.js/1.16.0/umd/popper.min.js" nonce="mWI1MHKfVDY37fiK2ttHOA=="></script> <script src="https://maxcdn.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js" nonce="mWI1MHKfVDY37fiK2ttHOA=="></script> <link rel="stylesheet" href="https://cdnjs.cl
2024-12-24 15:04:57 UTC	1338	IN	Data Raw: 71 68 51 3d 3d 22 3e 0d 0a 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 20 28 77 2c 20 64 2c 20 73 2c 20 6c 2c 20 69 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 67 74 6d 4e 6f 6e 63 65 20 3d 20 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 5b 64 61 74 61 2d 67 74 6d 2d 6e 6f 6e 63 65 5d 27 29 2e 64 61 74 61 73 65 74 2e 67 74 6d 4e 6f 6e 63 65 3b 0d 0a 20 20 20 20 20 20 20 20 77 5b 6c 5d 20 3d 20 77 5b 6c 5d 20 7c 7c 20 5b 5d 3b 20 77 5b 6c 5d 2e 70 75 73 68 28 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 20 65 76 65 6e 74 3a 20 27 67 74 6d 2e 6a 73 27 0d 0a 20 20 20 20 Data Ascii: qhQ=="> (function (w, d, s, l, i) { const gtmNonce = d.querySelector('[data-gtm-nonce]').dataset.gtmNonce; w[l] = w[l] \|\| []; w[l].push({ 'gtm.start': new Date().getTime(), event: 'gtm.js'
2024-12-24 15:04:57 UTC	12042	IN	Data Raw: 63 74 69 6f 6e 20 66 61 63 74 6f 72 79 28 74 29 20 7b 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 66 28 29 20 7b 20 66 6f 72 20 28 76 61 72 20 5f 6c 65 6e 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 20 61 72 67 73 20 3d 20 6e 65 77 20 41 72 72 61 79 28 5f 6c 65 6e 29 2c 20 5f 6b 65 79 20 3d 20 30 3b 20 5f 6b 65 79 20 3c 20 5f 6c 65 6e 3b 20 5f 6b 65 79 2b 2b 29 20 7b 20 61 72 67 73 5b 5f 6b 65 79 5d 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 5f 6b 65 79 5d 20 7d 20 76 61 72 20 65 20 3d 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 73 29 3b 20 65 2e 75 6e 73 68 69 66 74 28 74 29 3b 20 41 70 70 74 65 6e 74 69 76 65 53 44 4b 2e 70 75 73 68 28 65 29 3b 20 72 65 74 75 72 6e 20 41 70 70 74 65 6e Data Ascii: ction factory(t) { return function f() { for (var _len = arguments.length, args = new Array(_len), _key = 0; _key < _len; _key++) { args[_key] = arguments[_key] } var e = Array.prototype.slice.call(args); e.unshift(t); ApptentiveSDK.push(e); return Appten
2024-12-24 15:04:57 UTC	5352	IN	Data Raw: 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 6e 6f 6e 65 22 20 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 63 6f 6c 6c 61 70 73 65 22 20 68 72 65 66 3d 22 23 63 6f 6c 6c 61 70 73 65 2d 31 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 22 66 61 6c 73 65 22 20 61 72 69 61 2d 63 6f 6e 74 72 6f 6c 73 3d 22 63 6f 6c 6c 61 70 73 65 2d 31 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 63 6f 6c 6c 61 70 73 65 20 6d 65 6e 75 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: xt-decoration-none" data-toggle="collapse" href="#collapse-1" aria-expanded="false" aria-controls="collapse-1" aria-label="collapse menu"> <span></span> </a>
2024-12-24 15:04:57 UTC	4014	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 4e 65 77 2d 43 75 73 74 6f 6d 65 72 73 2f 4d 79 2d 4c 6f 61 6e 2d 57 61 73 2d 54 72 61 6e 73 66 65 72 72 65 64 2d 74 6f 2d 50 48 48 2d 4d 6f 72 74 67 61 67 65 22 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 6e 6f 6e 65 20 64 2d 66 6c 65 78 20 61 6c 69 67 6e 2d 69 74 65 6d 73 2d 63 65 6e 74 65 72 22 20 74 69 74 6c 65 3d 22 4d 79 20 4d 6f 72 74 67 61 67 65 20 57 61 73 20 54 72 61 6e 73 66 65 72 72 65 64 20 74 6f 20 50 48 48 20 4d Data Ascii: <li class="nav-content"> <a href="/New-Customers/My-Loan-Was-Transferred-to-PHH-Mortgage" class="text-decoration-none d-flex align-items-center" title="My Mortgage Was Transferred to PHH M
2024-12-24 15:04:57 UTC	4014	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 63 6f 6c 6c 61 70 73 65 2d 35 22 20 63 6c 61 73 73 3d 22 63 6f 6c 6c 61 70 73 65 20 70 62 2d 33 22 20 64 61 74 61 2d 70 61 72 65 6e 74 3d 22 23 61 63 63 6f 72 64 69 6f 6e 2d 6c 65 66 74 6e 61 76 22 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 22 68 65 61 64 69 6e 67 2d 35 22 20 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 3d 22 68 65 61 64 69 6e 67 2d 35 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </a> </div> <div id="collapse-5" class="collapse pb-3" data-parent="#accordion-leftnav" aria-labelledby="heading-5" aria-describedby="heading-5">
2024-12-24 15:04:57 UTC	1338	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 74 2d 32 20 64 2d 66 6c 65 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 41 72 74 69 63 6c 65 73 2f 50 61 70 65 72 6c 65 73 73 22 20 63 6c 61 73 73 3d 22 73 74 61 72 74 6e 6f 77 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 6e 6f 6e 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 45 Data Ascii: </div> <div class="mt-2 d-flex"> <a href="/Articles/Paperless" class="startnow text-decoration-none"> E
2024-12-24 15:04:57 UTC	8028	IN	Data Raw: 6f 6d 2f 70 68 68 6d 2f 23 2f 6c 6f 67 69 6e 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 6e 6f 6e 65 20 72 65 67 69 73 74 65 72 2d 62 74 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 65 67 69 73 74 65 72 20 4e 6f 77 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: om/phhm/#/login" target="_blank" class="text-decoration-none register-btn"> Register Now </a> </div>
2024-12-24 15:04:57 UTC	4014	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 56 69 65 77 20 6f 72 20 6d 61 6e 61 67 65 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 20 6f 6e 6c 69 6e 65 20 69 6e 20 6a 75 73 74 20 61 20 66 65 77 20 65 61 73 79 20 73 74 65 70 73 2e 20 53 69 67 6e 20 69 6e 20 6f 72 20 72 65 67 69 73 74 65 72 20 74 6f 20 67 65 74 20 73 74 61 72 74 65 64 20 74 6f 64 61 79 2e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: View or manage your account online in just a few easy steps. Sign in or register to get started today. </p> </div> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49717	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:04:58 UTC	718	OUT	GET /Content/styles/MQ-styles.css HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
2024-12-24 15:04:59 UTC	824	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:04:58 GMT Content-Type: text/css Content-Length: 193030 Connection: close Set-Cookie: AWSALB=eBB5EuyhmPfjlo3RWJQfUi/dOCIcsMSIkXcyZMm9J3bJbiezSwfN/3OF1402ixyBBZnDD7eUkf+TqTQvrGgXO0TYQwwwgwwM+3B3z4dCp6sRWZQqaxMEcLRlo+Uh; Expires=Tue, 31 Dec 2024 15:04:58 GMT; Path=/ Set-Cookie: AWSALBCORS=eBB5EuyhmPfjlo3RWJQfUi/dOCIcsMSIkXcyZMm9J3bJbiezSwfN/3OF1402ixyBBZnDD7eUkf+TqTQvrGgXO0TYQwwwgwwM+3B3z4dCp6sRWZQqaxMEcLRlo+Uh; Expires=Tue, 31 Dec 2024 15:04:58 GMT; Path=/; SameSite=None Cache-Control: no-cache Last-Modified: Tue, 17 Dec 2024 21:04:59 GMT Accept-Ranges: bytes ETag: "f6b51c55c750db1:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:04:59 UTC	1847	IN	Data Raw: ef bb bf 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 6f 74 68 61 6d 4c 69 67 68 74 3b 0d 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 47 6f 74 68 61 6d 2f 47 6f 74 68 61 6d 2d 4c 69 67 68 74 2e 77 6f 66 66 22 29 3b 0d 0a 7d 0d 0a 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 6f 74 68 61 6d 4d 65 64 69 75 6d 3b 0d 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 47 6f 74 68 61 6d 2f 47 6f 74 68 61 6d 2d 4d 65 64 69 75 6d 2e 77 6f 66 66 22 29 3b 0d 0a 7d 0d 0a 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 6f 74 68 61 6d 42 6f 6f 6b 3b 0d 0a 20 20 Data Ascii: @font-face { font-family: gothamLight; src: url("../fonts/Gotham/Gotham-Light.woff");}@font-face { font-family: gothamMedium; src: url("../fonts/Gotham/Gotham-Medium.woff");}@font-face { font-family: gothamBook;
2024-12-24 15:04:59 UTC	2676	IN	Data Raw: 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6e 74 65 6e 74 62 74 6d 73 70 61 63 65 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 61 67 65 73 75 62 74 69 74 6c 65 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 41 32 37 35 39 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 6f 74 68 61 6d 4d 65 64 69 75 6d 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 65 61 72 6d 6f 72 65 62 74 6e 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 6f 74 68 61 6d 4d 65 64 69 75 6d 3b 0d 0a 20 20 20 20 62 Data Ascii: ;}.contentbtmspace { padding-bottom: 15px;}.pagesubtitle { color: #0A2759; font-family: gothamMedium;}.learmorebtn { color: #ffffff; font-size: 14px; line-height: 20px; font-family: gothamMedium; b
2024-12-24 15:04:59 UTC	5352	IN	Data Raw: 64 69 76 69 64 65 72 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 43 34 43 39 44 33 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 43 34 43 39 Data Ascii: divider:before { content: ''; display: block; position: absolute; width: 10px; height: 10px; background-color: #ffffff; border-right: 1px solid #C4C9D3; border-bottom: 1px solid #C4C9
2024-12-24 15:04:59 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 73 65 61 72 63 68 63 6f 6e 74 61 69 6e 65 72 20 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 73 65 61 72 63 68 63 6f 6e 74 61 69 6e 65 72 20 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 39 41 39 41 39 41 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 6f 74 68 61 6d 42 6f 6f 6b 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 73 65 61 72 63 68 Data Ascii: border-color: transparent; } .searchcontainer .fa-search:before { color: #ffffff; } .searchcontainer ::-webkit-input-placeholder { color: #9A9A9A; font-family: gothamBook; } .search
2024-12-24 15:04:59 UTC	3103	IN	Data Raw: 20 2d 38 70 78 20 23 38 38 38 3b 0d 0a 20 20 20 20 2d 6d 73 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 35 70 78 20 31 38 70 78 20 32 30 70 78 20 2d 38 70 78 20 23 38 38 38 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 35 70 78 20 31 38 70 78 20 32 30 70 78 20 2d 38 70 78 20 23 38 38 38 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 31 38 70 78 20 32 31 70 78 20 23 30 30 30 30 30 30 31 32 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 31 38 70 78 20 32 31 70 78 20 23 30 30 30 30 30 30 31 32 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 65 61 64 65 72 6e 61 76 5f 6d 65 6e 75 Data Ascii: -8px #888; -ms-box-shadow: 5px 18px 20px -8px #888; box-shadow: 5px 18px 20px -8px #888; -webkit-box-shadow: 0px 18px 21px #00000012; box-shadow: 0px 18px 21px #00000012; position: relative; z-index: 2;}.headernav_menu
2024-12-24 15:04:59 UTC	8028	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 62 61 6e 6e 65 72 73 65 63 74 69 6f 6e 20 2e 73 65 63 74 69 6f 6e 20 2e 62 61 6e 6e 65 72 20 2e 63 61 70 74 69 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 35 38 34 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 32 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 Data Ascii: background-size: cover; } .bannersection .section .banner .caption { text-align: left !important; width: 584px; z-index: 10; opacity: 1; top: 20%; disp
2024-12-24 15:04:59 UTC	4014	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 61 6c 63 75 6c 61 74 6f 72 73 65 63 20 2e 6e 61 76 2d 74 61 62 73 20 2e 6e 61 76 2d 6c 69 6e 6b 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 63 61 6c 63 75 6c 61 74 6f 72 73 65 63 20 2e 66 6f 72 6d 2d 67 72 6f 75 70 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 35 70 78 3b 0d 0a 20 20 20 20 7d 0d Data Ascii: padding: 0; } .calculatorsec .nav-tabs .nav-link:hover { border-color: transparent; } .calculatorsec .form-group { margin-bottom: 35px; line-height: 15px; }
2024-12-24 15:04:59 UTC	1338	IN	Data Raw: 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 39 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 34 31 38 32 31 43 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 6f 74 68 61 6d 4d 65 64 69 75 6d 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 34 31 38 32 31 43 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 Data Ascii: line-height: 19px !important; color: #41821C !important; font-family: gothamMedium; border: 1px solid #41821C !important; border-radius: 3px; padding: 10px 30px !important; background-color: transp
2024-12-24 15:04:59 UTC	14718	IN	Data Raw: 74 69 76 65 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 63 61 6c 63 75 6c 61 74 6f 72 73 65 63 20 2e 63 75 73 74 6f 6d 2d 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 20 2e 63 75 73 74 6f 6d 2d 64 72 6f 70 64 6f 77 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 34 30 25 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 63 61 6c 63 75 6c 61 74 6f 72 73 65 63 20 2e 63 75 73 74 6f 6d 2d 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 46 43 46 43 46 43 20 30 25 20 30 25 20 6e 6f 2d 72 65 70 65 61 74 Data Ascii: tive; } .calculatorsec .custom-modal-dialog .custom-dropdown { width: 40%; } .calculatorsec .custom-modal-dialog .form-control { font-size: 16px; border: none; background: #FCFCFC 0% 0% no-repeat
2024-12-24 15:04:59 UTC	6690	IN	Data Raw: 63 6b 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 39 45 30 30 30 30 3b 0d 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2d 31 2e 35 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 20 20 20 20 74 6f 70 3a 20 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 6f 74 68 61 6d 42 6f 6f 6b 3b 0d 0a 20 20 Data Ascii: ck { font-size: 12px; font-style: italic; color: #9E0000; line-height: 1.5; margin-bottom: -1.5em; margin-top: 0px; position: relative; top: 5px; font-family: gothamBook;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49718	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:04:58 UTC	723	OUT	GET /Content/styles/MortgageKeeper.css HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
2024-12-24 15:04:59 UTC	821	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:04:58 GMT Content-Type: text/css Content-Length: 1266 Connection: close Set-Cookie: AWSALB=tmpzBwW+DUhunPVhWzuNYh1Q/BnZxlA/18d/VbYq/qzrKBIHw0886/YjPWT8z3FluvoibCIIcB3fwHR2Jksjz86DuYB/0Y1mJ2WK2INJSRo4w64kD13l/Jjj8Wmc; Expires=Tue, 31 Dec 2024 15:04:58 GMT; Path=/ Set-Cookie: AWSALBCORS=tmpzBwW+DUhunPVhWzuNYh1Q/BnZxlA/18d/VbYq/qzrKBIHw0886/YjPWT8z3FluvoibCIIcB3fwHR2Jksjz86DuYB/0Y1mJ2WK2INJSRo4w64kD13l/Jjj8Wmc; Expires=Tue, 31 Dec 2024 15:04:58 GMT; Path=/; SameSite=None Cache-Control: no-cache Last-Modified: Fri, 02 Aug 2024 13:41:04 GMT Accept-Ranges: bytes ETag: "018929ee1e4da1:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:04:59 UTC	1266	IN	Data Raw: 0d 0a 2e 6d 6b 54 69 6c 65 20 2a 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 6f 74 68 61 6d 4d 65 64 69 75 6d 3b 0d 0a 7d 0d 0a 2e 6d 6b 46 72 61 6d 65 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 32 30 30 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 32 36 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 6b 54 69 6c 65 20 2e 6d 6b 54 6f 70 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 36 32 62 35 65 37 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0d 0a 20 20 20 20 Data Ascii: .mkTile * { font-family: gothamMedium;}.mkFrame { width: 200px; height: 226px;}.mkTile .mkTop { background-color: #62b5e7; display: flex; justify-content: center; align-items: center; color: black;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49720	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:04:58 UTC	726	OUT	GET /Content/styles/owlcarousel-theme.css HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
2024-12-24 15:04:59 UTC	821	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:04:58 GMT Content-Type: text/css Content-Length: 1279 Connection: close Set-Cookie: AWSALB=WhxM3eOy0Iqy41i6e0kBHbKEaGgegUPkBt/lltfHfHPTfnW/ir6EfJV4Lx1I/V3/pdqcfu83Gzx/d0ysiU+urxQewIR6SC27GDfFpcq0Vmfe2o/Li1V2inXtAfHQ; Expires=Tue, 31 Dec 2024 15:04:58 GMT; Path=/ Set-Cookie: AWSALBCORS=WhxM3eOy0Iqy41i6e0kBHbKEaGgegUPkBt/lltfHfHPTfnW/ir6EfJV4Lx1I/V3/pdqcfu83Gzx/d0ysiU+urxQewIR6SC27GDfFpcq0Vmfe2o/Li1V2inXtAfHQ; Expires=Tue, 31 Dec 2024 15:04:58 GMT; Path=/; SameSite=None Cache-Control: no-cache Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:04:59 UTC	512	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 09 44 65 66 61 75 6c 74 20 74 68 65 6d 65 20 2d 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 43 53 53 20 46 69 6c 65 0d 0a 20 2a 2f 0d 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 6e 61 76 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 6e 61 76 20 5b 63 6c 61 73 73 2a 3d 27 6f 77 6c 2d 27 5d 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 35 Data Ascii: /* * Default theme - Owl Carousel CSS File /.owl-theme .owl-nav { margin-top: 10px; text-align: center; -webkit-tap-highlight-color: transparent;}.owl-theme .owl-nav [class='owl-'] { color: #FFF; font-size: 14px; margin: 5
2024-12-24 15:04:59 UTC	767	IN	Data Raw: 61 76 20 2e 64 69 73 61 62 6c 65 64 20 7b 0d 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 35 3b 0d 0a 20 20 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 6e 61 76 2e 64 69 73 61 62 6c 65 64 20 2b 20 2e 6f 77 6c 2d 64 6f 74 73 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 64 6f 74 73 20 7b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 64 6f 74 73 20 2e 6f 77 6c 2d 64 6f 74 20 Data Ascii: av .disabled { opacity: 0.5; cursor: default;}.owl-theme .owl-nav.disabled + .owl-dots { margin-top: 10px;}.owl-theme .owl-dots { text-align: center; -webkit-tap-highlight-color: transparent;}.owl-theme .owl-dots .owl-dot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49721	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:04:58 UTC	720	OUT	GET /Content/styles/owlcarousel.css HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
2024-12-24 15:04:59 UTC	821	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:04:58 GMT Content-Type: text/css Content-Length: 2604 Connection: close Set-Cookie: AWSALB=Fi5aVx4mAIcyj+UhQG6s9w96eFsfD3cFQ2IHZi+o6f9F3iHqTK9dPGaszTJ0uYZEjeuY5/CHsLmWFp9Ek448XtVOMz2pHw/akFoBH76Ww3CRIiFbw7zxOt/24g4z; Expires=Tue, 31 Dec 2024 15:04:58 GMT; Path=/ Set-Cookie: AWSALBCORS=Fi5aVx4mAIcyj+UhQG6s9w96eFsfD3cFQ2IHZi+o6f9F3iHqTK9dPGaszTJ0uYZEjeuY5/CHsLmWFp9Ek448XtVOMz2pHw/akFoBH76Ww3CRIiFbw7zxOt/24g4z; Expires=Tue, 31 Dec 2024 15:04:58 GMT; Path=/; SameSite=None Cache-Control: no-cache Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:04:59 UTC	512	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 2d 20 43 6f 72 65 0d 0a 20 2a 2f 0d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 20 20 2f 2a 20 70 6f 73 69 74 69 6f 6e 20 72 65 6c 61 74 69 76 65 20 61 6e 64 20 7a 2d 69 6e 64 65 78 20 66 69 78 20 77 65 62 6b 69 74 20 72 65 6e 64 65 72 69 6e 67 20 66 6f 6e 74 73 20 69 73 73 75 65 20 2a 2f 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 3b 0d 0a 7d 0d 0a 0d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 Data Ascii: /* * Owl Carousel - Core /.owl-carousel { display: none; width: 100%; -webkit-tap-highlight-color: transparent; / position relative and z-index fix webkit rendering fonts issue */ position: relative; z-index: 1;}.owl-carou
2024-12-24 15:04:59 UTC	2092	IN	Data Raw: 3a 20 62 6f 74 68 3b 0d 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 73 74 61 67 65 2d 6f 75 74 65 72 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 2f 2a 20 66 69 78 20 66 6f 72 20 66 6c 61 73 68 69 6e 67 20 62 61 63 6b 67 72 6f 75 6e 64 20 2a 2f 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 70 78 2c 20 30 70 78 2c 20 30 70 78 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e Data Ascii: : both; visibility: hidden; line-height: 0; height: 0;}.owl-carousel .owl-stage-outer { position: relative; overflow: hidden; /* fix for flashing background */ -webkit-transform: translate3d(0px, 0px, 0px);}.owl-carousel .

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49724	104.17.24.14	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:04:58 UTC	605	OUT	GET /ajax/libs/bootstrap-slider/10.0.0/css/bootstrap-slider.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:04:59 UTC	932	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:04:59 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03d8e-2420" Last-Modified: Mon, 04 May 2020 16:06:38 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Sun, 14 Dec 2025 15:04:59 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xdjep4hzAurgvc1%2B1mtkVSw5Ffhq1v7pP0W9ls%2F7Un0tuDVZKPao6uBrsU6rUOXojJ2nqIKDWz7V1a6SpHd4r8kRjinOMhUprpV0MmhdJBJJmFpEEzv%2Ba4ojfi8DtOguglYoeuO9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f717ca8ff7843c8-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 15:04:59 UTC	437	IN	Data Raw: 32 34 32 30 0d 0a 2f 2a 21 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 56 45 52 53 49 4f 4e 20 20 31 30 2e 30 2e 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 2f 2a 21 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 20 62 6f 6f 74 73 74 72 61 70 2d 73 Data Ascii: 2420/! ======================================================= VERSION 10.0.0 ========================================================= //! ========================================================= bootstrap-s
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 20 2a 0a 20 2a 20 62 6f 6f 74 73 74 72 61 70 2d 73 6c 69 64 65 72 20 69 73 20 72 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 20 4b 79 6c 65 20 4b 65 6d 70 2c 20 52 6f 68 69 74 20 4b 61 6c 6b 75 72 2c 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 0a 20 2a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 0a 20 2a 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 Data Ascii: =============================================== * * bootstrap-slider is released under the MIT License * Copyright (c) 2017 Kyle Kemp, Rohit Kalkur, and contributors * * Permission is hereby granted, free of charge, to any person * obtaining a cop
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 64 64 6c 65 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 73 6c 69 64 65 72 2e 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 7b 77 69 64 74 68 3a 32 31 30 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 7d 2e 73 6c 69 64 65 72 2e 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 73 6c 69 64 65 72 2d 74 72 61 63 6b 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 35 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 30 7d 2e 73 6c 69 64 65 72 2e 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 73 6c 69 64 65 72 2d 73 65 6c 65 63 74 69 6f 6e 2c 2e 73 6c 69 64 65 72 2e 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 73 6c 69 64 65 72 2d 74 72 61 63 6b 2d 6c 6f 77 2c Data Ascii: ddle;position:relative}.slider.slider-horizontal{width:210px;height:20px}.slider.slider-horizontal .slider-track{height:10px;width:100%;margin-top:-5px;top:50%;left:0}.slider.slider-horizontal .slider-selection,.slider.slider-horizontal .slider-track-low,
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 6c 69 64 65 72 2d 74 69 63 6b 2d 63 6f 6e 74 61 69 6e 65 72 7b 6c 65 66 74 3a 69 6e 69 74 69 61 6c 3b 72 69 67 68 74 3a 30 7d 2e 73 6c 69 64 65 72 2e 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2e 73 6c 69 64 65 72 2d 72 74 6c 20 2e 74 6f 6f 6c 74 69 70 7b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 35 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 35 30 25 29 7d 2e 73 6c 69 64 65 72 2e 73 6c 69 64 65 72 2d 76 65 72 74 69 63 61 6c 7b 68 65 69 67 68 74 3a 32 31 30 70 78 3b 77 69 64 74 68 3a 32 30 70 78 7d 2e 73 6c 69 64 65 72 2e 73 6c 69 64 65 72 2d 76 65 72 74 69 63 61 6c 20 2e 73 6c 69 64 65 72 2d 74 72 61 63 6b 7b 77 69 64 74 68 3a 31 30 70 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 Data Ascii: lider-tick-container{left:initial;right:0}.slider.slider-horizontal.slider-rtl .tooltip{-ms-transform:translateX(50%);transform:translateX(50%)}.slider.slider-vertical{height:210px;width:20px}.slider.slider-vertical .slider-track{width:10px;height:100%;le
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 65 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 6c 69 64 65 72 2d 74 69 63 6b 2d 6c 61 62 65 6c 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 69 6e 69 74 69 61 6c 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 70 78 7d 2e 73 6c 69 64 65 72 2e 73 6c 69 64 65 72 2d 64 69 73 61 62 6c 65 64 20 2e 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 64 66 64 66 64 66 20 30 2c 23 62 65 62 65 62 65 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 64 66 64 66 64 66 20 30 2c 23 62 65 62 65 62 65 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 Data Ascii: el-container .slider-tick-label{padding-left:initial;padding-right:4px}.slider.slider-disabled .slider-handle{background-image:-webkit-linear-gradient(top,#dfdfdf 0,#bebebe 100%);background-image:-o-linear-gradient(top,#dfdfdf 0,#bebebe 100%);background-i
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 39 66 39 66 39 27 2c 47 72 61 64 69 65 6e 74 54 79 70 65 3d 30 29 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 31 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 31 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 7d 2e 73 6c 69 64 65 72 2d 73 65 6c 65 63 74 69 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 39 66 39 66 39 20 30 2c 23 66 35 66 35 66 35 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 Data Ascii: 9f9f9',GradientType=0);-webkit-box-shadow:inset 0 1px 2px rgba(0,0,0,0.1);box-shadow:inset 0 1px 2px rgba(0,0,0,0.1);border-radius:4px}.slider-selection{position:absolute;background-image:-webkit-linear-gradient(top,#f9f9f9 0,#f5f5f5 100%);background-imag
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 33 33 37 61 62 37 20 30 2c 23 32 65 36 64 61 34 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 33 33 37 61 62 37 20 30 2c 23 32 65 36 64 61 34 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 23 33 33 37 61 62 37 20 30 2c 23 32 65 36 64 61 34 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 Data Ascii: ebkit-linear-gradient(top,#337ab7 0,#2e6da4 100%);background-image:-o-linear-gradient(top,#337ab7 0,#2e6da4 100%);background-image:linear-gradient(to bottom,#337ab7 0,#2e6da4 100%);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradie
2024-12-24 15:04:59 UTC	605	IN	Data Raw: 73 6c 69 64 65 72 2d 74 69 63 6b 2e 72 6f 75 6e 64 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 7d 2e 73 6c 69 64 65 72 2d 74 69 63 6b 2e 74 72 69 61 6e 67 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 6e 6f 6e 65 7d 2e 73 6c 69 64 65 72 2d 74 69 63 6b 2e 63 75 73 74 6f 6d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 6e 6f 6e 65 7d 2e 73 6c 69 64 65 72 2d 74 69 63 6b 2e 63 75 73 74 6f 6d 3a 3a 62 65 66 6f 72 65 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 63 6f 6e 74 65 6e 74 3a 27 5c 32 36 30 35 27 3b 63 6f 6c 6f 72 3a 23 37 32 36 32 30 34 7d 2e 73 6c 69 64 65 72 2d 74 69 63 6b 2e 69 6e 2d 73 65 6c 65 63 74 69 6f 6e 7b 62 61 63 6b 67 Data Ascii: slider-tick.round{border-radius:50%}.slider-tick.triangle{background:transparent none}.slider-tick.custom{background:transparent none}.slider-tick.custom::before{line-height:20px;font-size:20px;content:'\2605';color:#726204}.slider-tick.in-selection{backg
2024-12-24 15:04:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49726	104.17.24.14	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:04:58 UTC	604	OUT	GET /ajax/libs/bootstrap-slider/4.5.2/css/bootstrap-slider.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:04:59 UTC	938	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:04:59 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03d8e-1c2b" Last-Modified: Mon, 04 May 2020 16:06:38 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Sun, 14 Dec 2025 15:04:59 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=njrUP8k9T2D%2BI2XNTsI3Ah6UETBpteSWbbwTIyabkrBWbGLl1bNhdKYoabfrLLc%2FCTfGO8XhFUtvy32urW%2F%2FOSOWktgk2odZJ8uZLlJUd3ZuutjNieJHhjOXqf6%2BYgVlM2M%2FUWHo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f717ca90b9641d3-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 15:04:59 UTC	431	IN	Data Raw: 31 63 32 62 0d 0a 2f 2a 21 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 56 45 52 53 49 4f 4e 20 20 34 2e 35 2e 32 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 2f 2a 21 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 20 62 6f 6f 74 73 74 72 61 70 2d 73 6c Data Ascii: 1c2b/! ======================================================= VERSION 4.5.2 ========================================================= //! ========================================================= bootstrap-sl
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 2a 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 20 6f 66 20 74 68 65 20 4c 69 63 65 6e 73 65 20 61 74 0a 20 2a 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 Data Ascii: ==================================================== * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apac
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 2e 73 6c 69 64 65 72 2d 74 69 63 6b 2d 6c 61 62 65 6c 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 73 6c 69 64 65 72 2e 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 73 6c 69 64 65 72 2d 74 69 63 6b 2d 6c 61 62 65 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 6c 69 64 65 72 2d 74 69 63 6b 2d 6c 61 62 65 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 34 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 73 6c 69 64 65 72 2e 73 6c 69 64 65 72 2d 76 65 72 74 69 63 61 6c 7b 68 65 69 67 68 74 3a 32 31 30 70 78 3b 77 69 64 74 68 3a 32 30 70 78 7d 2e 73 6c 69 64 65 72 2e 73 6c 69 64 65 72 2d 76 65 72 74 69 63 61 6c 20 2e 73 6c 69 64 65 Data Ascii: .slider-tick-label-container{white-space:nowrap}.slider.slider-horizontal .slider-tick-label-container .slider-tick-label{margin-top:24px;display:inline-block;text-align:center}.slider.slider-vertical{height:210px;width:20px}.slider.slider-vertical .slide
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 23 65 35 65 35 65 35 20 30 2c 23 65 39 65 39 65 39 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 66 66 65 35 65 35 65 35 27 2c 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 66 66 65 39 65 39 65 39 27 2c 47 72 61 64 69 65 6e 74 54 79 70 65 3d 30 29 3b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 2e 73 6c 69 64 65 72 20 69 6e 70 75 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 73 6c 69 64 65 72 20 2e 74 6f 6f 6c 74 69 70 Data Ascii: linear-gradient(to bottom,#e5e5e5 0,#e9e9e9 100%);background-repeat:repeat-x;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffe5e5e5',endColorstr='#ffe9e9e9',GradientType=0);cursor:not-allowed}.slider input{display:none}.slider .tooltip
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 7d 2e 73 6c 69 64 65 72 2d 73 65 6c 65 63 74 69 6f 6e 2e 74 69 63 6b 2d 73 6c 69 64 65 72 2d 73 65 6c 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 38 39 63 64 65 66 20 30 2c 23 38 31 62 66 64 65 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 38 39 63 64 65 66 20 30 2c 23 38 31 62 66 64 65 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 Data Ascii: rder-box;box-sizing:border-box;border-radius:4px}.slider-selection.tick-slider-selection{background-image:-webkit-linear-gradient(top,#89cdef 0,#81bfde 100%);background-image:-o-linear-gradient(top,#89cdef 0,#81bfde 100%);background-image:linear-gradient(
2024-12-24 15:04:59 UTC	1312	IN	Data Raw: 72 2d 68 61 6e 64 6c 65 2e 63 75 73 74 6f 6d 3a 3a 62 65 66 6f 72 65 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 63 6f 6e 74 65 6e 74 3a 27 5c 32 36 30 35 27 3b 63 6f 6c 6f 72 3a 23 37 32 36 32 30 34 7d 2e 73 6c 69 64 65 72 2d 74 69 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 32 30 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 39 66 39 66 39 20 30 2c 23 66 35 66 35 66 35 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 39 66 39 66 Data Ascii: r-handle.custom::before{line-height:20px;font-size:20px;content:'\2605';color:#726204}.slider-tick{position:absolute;width:20px;height:20px;background-image:-webkit-linear-gradient(top,#f9f9f9 0,#f5f5f5 100%);background-image:-o-linear-gradient(top,#f9f9f
2024-12-24 15:04:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49723	104.17.24.14	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:04:58 UTC	573	OUT	GET /ajax/libs/popper.js/1.16.0/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:04:59 UTC	964	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:04:59 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-5309" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 295237 Expires: Sun, 14 Dec 2025 15:04:59 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=heuUaVt3RGKdXKWk%2FCuQ4X6A6aaaOI0MSiE%2BGnPP8pZz%2BwBFMkeTdgjPoS2pOKkNu1BUBZMQcuPWB9lk8fDjUua6rfuFCT8M2XJws%2B7rSpw%2F0uqfKLbwZjLN%2FpSm9kuAWHnutNk8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f717ca90e678c7d-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 15:04:59 UTC	405	IN	Data Raw: 35 33 30 39 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 39 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 5309/* Copyright (C) Federico Zivolo 2019 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 28 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2c 6e 3d 6f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6e 5b 74 5d 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e Data Ascii: (1!==e.nodeType)return[];var o=e.ownerDocument.defaultView,n=o.getComputedStyle(e,null);return t?n[t]:n}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 61 28 66 2e 68 6f 73 74 2c 74 29 3a 61 28 65 2c 64 28 74 29 2e 68 6f 73 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 76 61 72 20 74 3d 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 27 74 6f 70 27 2c 6f 3d 27 74 6f 70 27 3d 3d 3d 74 3f 27 73 63 72 6f 6c 6c 54 6f 70 27 3a 27 73 63 72 6f 6c 6c 4c 65 66 74 27 2c 6e 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3b 69 66 28 27 42 4f 44 59 27 3d 3d 3d 6e 7c 7c 27 48 54 4d 4c 27 3d 3d 3d 6e 29 7b 76 61 72 20 69 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 73 63 72 6f 6c 6c 69 6e 67 45 6c 65 6d 65 Data Ascii: a(f.host,t):a(e,d(t).host)}function l(e){var t=1<arguments.length&&void 0!==arguments[1]?arguments[1]:'top',o='top'===t?'scrollTop':'scrollLeft',n=e.nodeName;if('BODY'===n\|\|'HTML'===n){var i=e.ownerDocument.documentElement,r=e.ownerDocument.scrollingEleme
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 65 6e 74 57 69 64 74 68 7c 7c 70 2e 77 69 64 74 68 2c 61 3d 73 2e 68 65 69 67 68 74 7c 7c 65 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7c 7c 70 2e 68 65 69 67 68 74 2c 66 3d 65 2e 6f 66 66 73 65 74 57 69 64 74 68 2d 64 2c 68 3d 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2d 61 3b 69 66 28 66 7c 7c 68 29 7b 76 61 72 20 75 3d 74 28 65 29 3b 66 2d 3d 6d 28 75 2c 27 78 27 29 2c 68 2d 3d 6d 28 75 2c 27 79 27 29 2c 70 2e 77 69 64 74 68 2d 3d 66 2c 70 2e 68 65 69 67 68 74 2d 3d 68 7d 72 65 74 75 72 6e 20 67 28 70 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 6f 29 7b 76 61 72 20 69 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 70 3d 72 28 31 30 Data Ascii: entWidth\|\|p.width,a=s.height\|\|e.clientHeight\|\|p.height,f=e.offsetWidth-d,h=e.offsetHeight-a;if(f\|\|h){var u=t(e);f-=m(u,'x'),h-=m(u,'y'),p.width-=f,p.height-=h}return g(p)}function b(e,o){var i=2<arguments.length&&void 0!==arguments[2]&&arguments[2],p=r(10
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 2c 72 2c 70 29 7b 76 61 72 20 73 3d 34 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 34 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 34 5d 2c 64 3d 7b 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 7d 2c 6c 3d 73 3f 45 28 65 29 3a 61 28 65 2c 69 28 74 29 29 3b 69 66 28 27 76 69 65 77 70 6f 72 74 27 3d 3d 3d 70 29 64 3d 77 28 6c 2c 73 29 3b 65 6c 73 65 7b 76 61 72 20 66 3b 27 73 63 72 6f 6c 6c 50 61 72 65 6e 74 27 3d 3d 3d 70 3f 28 66 3d 6e 28 6f 28 74 29 29 2c 27 42 4f 44 59 27 3d 3d 3d 66 2e 6e 6f 64 65 4e 61 6d 65 26 26 28 66 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 Data Ascii: cumentElement}function v(e,t,r,p){var s=4<arguments.length&&void 0!==arguments[4]&&arguments[4],d={top:0,left:0},l=s?E(e):a(e,i(t));if('viewport'===p)d=w(l,s);else{var f;'scrollParent'===p?(f=n(o(t)),'BODY'===f.nodeName&&(f=e.ownerDocument.documentElement
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 3a 61 28 74 2c 69 28 6f 29 29 3b 72 65 74 75 72 6e 20 62 28 6f 2c 72 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2c 6f 3d 74 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 29 2c 6e 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 54 6f 70 7c 7c 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 7c 7c 30 29 2c 69 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 4c 65 66 74 7c 7c 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 52 69 67 68 74 7c 7c 30 29 2c 72 3d 7b 77 69 64 74 68 3a 65 2e 6f 66 66 73 65 74 57 69 64 74 68 2b 69 2c 68 65 69 67 68 74 3a 65 2e 6f 66 66 73 Data Ascii: :a(t,i(o));return b(o,r,n)}function S(e){var t=e.ownerDocument.defaultView,o=t.getComputedStyle(e),n=parseFloat(o.marginTop\|\|0)+parseFloat(o.marginBottom\|\|0),i=parseFloat(o.marginLeft\|\|0)+parseFloat(o.marginRight\|\|0),r={width:e.offsetWidth+i,height:e.offs
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 68 69 73 2e 70 6f 70 70 65 72 2c 74 68 69 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 6f 73 69 74 69 6f 6e 46 69 78 65 64 29 2c 65 2e 70 6c 61 63 65 6d 65 6e 74 3d 4f 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 6c 61 63 65 6d 65 6e 74 2c 65 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 70 6f 70 70 65 72 2c 74 68 69 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 2e 66 6c 69 70 2e 62 6f 75 6e 64 61 72 69 65 73 45 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 2e 66 6c 69 70 2e 70 61 64 64 69 6e 67 29 2c 65 2e 6f 72 69 67 69 6e 61 6c 50 6c 61 63 65 6d 65 6e 74 3d 65 2e 70 6c 61 63 65 6d 65 6e 74 2c 65 2e Data Ascii: his.popper,this.reference,this.options.positionFixed),e.placement=O(this.options.placement,e.offsets.reference,this.popper,this.reference,this.options.modifiers.flip.boundariesElement,this.options.modifiers.flip.padding),e.originalPlacement=e.placement,e.
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 4d 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c 6f 2c 69 29 2c 69 2e 70 75 73 68 28 70 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 74 2c 6f 2c 69 29 7b 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 3d 69 2c 41 28 65 29 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 72 65 73 69 7a 65 27 2c 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 3b 76 61 72 20 72 3d 6e 28 65 29 3b 72 65 74 75 72 6e 20 4d 28 72 2c 27 73 63 72 6f 6c Data Ascii: r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|M(n(p.parentNode),t,o,i),i.push(p)}function F(e,t,o,i){o.updateBound=i,A(e).addEventListener('resize',o.updateBound,{passive:!0});var r=n(e);return M(r,'scrol
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 6e 7b 6c 65 66 74 3a 66 28 31 3d 3d 73 25 32 26 26 31 3d 3d 64 25 32 26 26 21 6c 26 26 74 3f 6e 2e 6c 65 66 74 2d 31 3a 6e 2e 6c 65 66 74 29 2c 74 6f 70 3a 6d 28 6e 2e 74 6f 70 29 2c 62 6f 74 74 6f 6d 3a 6d 28 6e 2e 62 6f 74 74 6f 6d 29 2c 72 69 67 68 74 3a 66 28 6e 2e 72 69 67 68 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 2c 74 2c 6f 29 7b 76 61 72 20 6e 3d 44 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 65 2e 6e 61 6d 65 3b 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 69 3d 21 21 6e 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 6e 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 69 29 7b 76 61 72 20 72 3d 27 60 Data Ascii: n{left:f(1==s%2&&1==d%2&&!l&&t?n.left-1:n.left),top:m(n.top),bottom:m(n.bottom),right:f(n.right)}}function K(e,t,o){var n=D(e,function(e){var o=e.name;return o===t}),i=!!n&&e.some(function(e){return e.name===o&&e.enabled&&e.order<n.order});if(!i){var r='`
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 6c 69 74 28 64 29 5b 30 5d 5d 29 2c 5b 70 5b 73 5d 2e 73 70 6c 69 74 28 64 29 5b 31 5d 5d 2e 63 6f 6e 63 61 74 28 70 2e 73 6c 69 63 65 28 73 2b 31 29 29 5d 3b 72 65 74 75 72 6e 20 61 3d 61 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 69 3d 28 31 3d 3d 3d 6e 3f 21 72 3a 72 29 3f 27 68 65 69 67 68 74 27 3a 27 77 69 64 74 68 27 2c 70 3d 21 31 3b 72 65 74 75 72 6e 20 65 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c Data Ascii: lit(d)[0]]),[p[s].split(d)[1]].concat(p.slice(s+1))];return a=a.map(function(e,n){var i=(1===n?!r:r)?'height':'width',p=!1;return e.reduce(function(e,t){return''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49727	104.18.10.207	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:04:58 UTC	567	OUT	GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:04:59 UTC	967	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:04:59 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"02d223393e00c273efdcb1ade8f4f8b1" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 11/20/2024 23:09:49 CDN-EdgeStorageId: 1070 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: abfc3042f61e0f6fc7cbb18b131e1ea3 CDN-Cache: HIT CF-Cache-Status: HIT Age: 2105299 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f717ca90949f3bb-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 15:04:59 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: 7bec/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 Data Ascii: ine(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.conf
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 6f 61 74 28 69 29 3b 72 65 74 75 72 6e 20 6f 7c 7c 73 3f 28 6e 3d 6e 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 31 65 33 2a 28 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 2c 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 74 29 2e 74 72 69 67 67 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 22 74 72 61 6e 73 69 Data Ascii: oat(i);return o\|\|s?(n=n.split(",")[0],i=i.split(",")[0],1e3*(parseFloat(n)+parseFloat(i))):0},reflow:function(t){return t.offsetHeight},triggerTransitionEnd:function(t){e(t).trigger("transitionend")},supportsTransitionEnd:function(){return Boolean("transi
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 2e 73 70 65 63 69 61 6c 5b 61 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 5d 3d 7b 62 69 6e 64 54 79 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 64 65 6c 65 67 61 74 65 54 79 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 68 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 65 28 74 2e 74 61 72 67 65 74 29 2e 69 73 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 74 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 3b 76 61 72 20 6c 3d 22 61 6c 65 72 74 22 2c 63 3d 65 2e 66 6e 5b 6c 5d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 6f 74 Data Ascii: .special[a.TRANSITION_END]={bindType:"transitionend",delegateType:"transitionend",handle:function(t){if(e(t.target).is(this))return t.handleObj.handler.apply(this,arguments)}};var l="alert",c=e.fn[l],h=function(){function t(t){this._element=t}var n=t.prot
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 2e 32 22 7d 7d 5d 29 2c 74 7d 28 29 3b 65 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 61 6c 65 72 74 2e 64 61 74 61 2d 61 70 69 22 2c 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 61 6c 65 72 74 22 5d 27 2c 68 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 68 29 29 2c 65 2e 66 6e 5b 6c 5d 3d 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 65 2e 66 6e 5b 6c 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 68 2c 65 2e 66 6e 5b 6c 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 6e 5b 6c 5d 3d 63 2c 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 75 3d 65 2e 66 6e 2e 62 75 74 74 6f 6e 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 Data Ascii: .2"}}]),t}();e(document).on("click.bs.alert.data-api",'[data-dismiss="alert"]',h._handleDismiss(new h)),e.fn[l]=h._jQueryInterface,e.fn[l].Constructor=h,e.fn[l].noConflict=function(){return e.fn[l]=c,h._jQueryInterface};var u=e.fn.button,d=function(){func
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 74 29 7b 76 61 72 20 6e 3d 74 2e 74 61 72 67 65 74 2c 69 3d 6e 3b 69 66 28 65 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 22 62 74 6e 22 29 7c 7c 28 6e 3d 65 28 6e 29 2e 63 6c 6f 73 65 73 74 28 22 2e 62 74 6e 22 29 5b 30 5d 29 2c 21 6e 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 29 3b 69 66 28 6f 26 26 28 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6f 2e 63 6c Data Ascii: t){var n=t.target,i=n;if(e(n).hasClass("btn")\|\|(n=e(n).closest(".btn")[0]),!n\|\|n.hasAttribute("disabled")\|\|n.classList.contains("disabled"))t.preventDefault();else{var o=n.querySelector('input:not([type="hidden"])');if(o&&(o.hasAttribute("disabled")\|\|o.cl
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 3a 22 28 6e 75 6d 62 65 72 7c 62 6f 6f 6c 65 61 6e 29 22 2c 6b 65 79 62 6f 61 72 64 3a 22 62 6f 6f 6c 65 61 6e 22 2c 73 6c 69 64 65 3a 22 28 62 6f 6f 6c 65 61 6e 7c 73 74 72 69 6e 67 29 22 2c 70 61 75 73 65 3a 22 28 73 74 72 69 6e 67 7c 62 6f 6f 6c 65 61 6e 29 22 2c 77 72 61 70 3a 22 62 6f 6f 6c 65 61 6e 22 2c 74 6f 75 63 68 3a 22 62 6f 6f 6c 65 61 6e 22 7d 2c 76 3d 7b 54 4f 55 43 48 3a 22 74 6f 75 63 68 22 2c 50 45 4e 3a 22 70 65 6e 22 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 5f 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d Data Ascii: :"(number\|boolean)",keyboard:"boolean",slide:"(boolean\|string)",pause:"(string\|boolean)",wrap:"boolean",touch:"boolean"},v={TOUCH:"touch",PEN:"pen"},b=function(){function t(t,e){this._items=null,this._interval=null,this._activeElement=null,this._isPaused=
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 6e 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 3b 69 66 28 21 28 74 3e 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7c 7c 74 3c 30 29 29 69 66 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 29 65 28 Data Ascii: sible:this.next).bind(this),this._config.interval))},n.to=function(t){var n=this;this._activeElement=this._element.querySelector(".active.carousel-item");var i=this._getItemIndex(this._activeElement);if(!(t>this._items.length-1\|\|t<0))if(this._isSliding)e(
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 29 7b 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 76 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 3f 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 3a 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 28 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 76 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 26 26 28 74 2e 74 6f 75 63 Data Ascii: ){t._pointerEvent&&v[e.originalEvent.pointerType.toUpperCase()]?t.touchStartX=e.originalEvent.clientX:t._pointerEvent\|\|(t.touchStartX=e.originalEvent.touches[0].clientX)},i=function(e){t._pointerEvent&&v[e.originalEvent.pointerType.toUpperCase()]&&(t.touc
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 29 3a 5b 5d 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 74 29 7d 2c 6e 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 6e 65 78 74 22 3d 3d 3d 74 2c 69 3d 22 70 72 65 76 22 3d 3d 3d 74 2c 6f 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 65 29 2c 73 3d 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 Data Ascii: temIndex=function(t){return this._items=t&&t.parentNode?[].slice.call(t.parentNode.querySelectorAll(".carousel-item")):[],this._items.indexOf(t)},n._getItemByDirection=function(t,e){var n="next"===t,i="prev"===t,o=this._getItemIndex(e),s=this._items.lengt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49729	151.101.65.229	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:04:58 UTC	604	OUT	GET /gh/gitbrent/bootstrap4-toggle@3.6.1/css/bootstrap4-toggle.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:04:59 UTC	758	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2795 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 3.6.1 X-JSD-Version-Type: version ETag: W/"aeb-9OKlTatRgkO5Ny6S/WJLckiKL0s" Accept-Ranges: bytes Age: 639433 Date: Tue, 24 Dec 2024 15:04:59 GMT X-Served-By: cache-fra-eddf8230088-FRA, cache-ewr-kewr1740057-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-24 15:04:59 UTC	1378	IN	Data Raw: 2f 2a 5c 0a 7c 2a 7c 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 7c 2a 7c 20 42 6f 6f 74 73 74 72 61 70 20 54 6f 67 67 6c 65 3a 20 62 6f 6f 74 73 74 72 61 70 34 2d 74 6f 67 67 6c 65 2e 63 73 73 20 76 33 2e 36 2e 31 0a 7c 2a 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 62 72 65 6e 74 2e 67 69 74 68 75 62 2e 69 6f 2f 62 6f 6f 74 73 74 72 61 70 34 2d 74 6f 67 67 6c 65 2f 0a 7c 2a 7c 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /\\|\| ========================================================================\|\| Bootstrap Toggle: bootstrap4-toggle.css v3.6.1\|\| https://gitbrent.github.io/bootstrap4-toggle/\|*\| =====================================================================
2024-12-24 15:04:59 UTC	1378	IN	Data Raw: 75 74 6c 69 6e 65 2d 70 72 69 6d 61 72 79 20 2e 74 6f 67 67 6c 65 2d 68 61 6e 64 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 29 7d 2e 74 6f 67 67 6c 65 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 65 63 6f 6e 64 61 72 79 20 2e 74 6f 67 67 6c 65 2d 68 61 6e 64 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 29 7d 2e 74 6f 67 67 6c 65 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 75 63 63 65 73 73 20 2e 74 6f 67 67 6c 65 2d 68 61 6e 64 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f Data Ascii: utline-primary .toggle-handle{background-color:var(--primary);border-color:var(--primary)}.toggle.btn-outline-secondary .toggle-handle{background-color:var(--secondary);border-color:var(--secondary)}.toggle.btn-outline-success .toggle-handle{background-co
2024-12-24 15:04:59 UTC	39	IN	Data Raw: 2e 74 6f 67 67 6c 65 2d 6f 66 66 2e 62 74 6e 2d 78 73 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 38 72 65 6d 7d 0a Data Ascii: .toggle-off.btn-xs{padding-left:.8rem}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49725	104.17.24.14	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:04:58 UTC	585	OUT	GET /ajax/libs/bootstrap-slider/4.5.2/bootstrap-slider.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:04:59 UTC	944	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:04:59 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03d8e-6002" Last-Modified: Mon, 04 May 2020 16:06:38 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Sun, 14 Dec 2025 15:04:59 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qPAVY9tFR6HHbCgB8b05Qnx1THwAsAaJABd5zBNwjp1jmhXfeXuhcctuUbwfUMCgew%2BIsJFXAv3uqLvjLPLBCJ47tyMd7KinZrw8xKPUoDkYj47MsH662IlJ6JdOB%2F1zh5CY8VT6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f717ca90aa0c463-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 15:04:59 UTC	425	IN	Data Raw: 36 30 30 32 0d 0a 2f 2a 21 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 56 45 52 53 49 4f 4e 20 20 34 2e 35 2e 32 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 2f 2a 21 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 20 62 6f 6f 74 73 74 72 61 70 2d 73 6c Data Ascii: 6002/! ======================================================= VERSION 4.5.2 ========================================================= //! ========================================================= bootstrap-sl
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 2a 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 20 6f 66 20 74 68 65 20 4c 69 63 65 6e 73 65 20 61 74 0a 20 2a 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 Data Ascii: ========================================================= * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://ww
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 6d 65 74 68 6f 64 20 27 22 2b 65 2b 22 27 20 66 6f 72 20 22 2b 62 2b 22 20 69 6e 73 74 61 6e 63 65 22 29 3b 65 6c 73 65 20 66 28 22 63 61 6e 6e 6f 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 73 20 6f 6e 20 22 2b 62 2b 22 20 70 72 69 6f 72 20 74 6f 20 69 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 3b 20 61 74 74 65 6d 70 74 65 64 20 74 6f 20 63 61 6c 6c 20 27 22 2b 65 2b 22 27 22 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 76 61 72 20 6d 3d 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 61 2e 64 61 74 61 28 74 68 69 73 2c 62 29 3b 72 65 74 75 72 6e 20 64 3f 28 64 2e 6f 70 74 69 6f 6e 28 65 29 2c 64 2e 5f 69 6e 69 74 28 29 29 3a 28 64 3d 6e 65 77 20 63 28 74 68 69 73 2c 65 29 2c 61 2e 64 61 74 61 28 74 68 69 73 2c 62 2c 64 29 29 2c 61 28 Data Ascii: method '"+e+"' for "+b+" instance");else f("cannot call methods on "+b+" prior to initialization; attempted to call '"+e+"'")}return this}var m=this.map(function(){var d=a.data(this,b);return d?(d.option(e),d._init()):(d=new c(this,e),a.data(this,b,d)),a(
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 6d 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 20 6d 69 6e 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 22 2c 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 6e 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 20 6d 61 78 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 22 2c 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6b 29 2c 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 2c 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6c 29 2c 74 68 69 73 2e 74 69 63 6b 73 3d 5b 5d 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 69 63 6b 73 29 26 26 74 68 69 73 Data Ascii: ument.createElement("div"),m.className="slider-handle min-slider-handle",n=document.createElement("div"),n.className="slider-handle max-slider-handle",r.appendChild(k),r.appendChild(j),r.appendChild(l),this.ticks=[],Array.isArray(this.options.ticks)&&this
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 69 64 65 72 45 6c 65 6d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 76 29 2c 74 68 69 73 2e 73 6c 69 64 65 72 45 6c 65 6d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 77 29 2c 74 68 69 73 2e 73 6c 69 64 65 72 45 6c 65 6d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 78 29 2c 74 68 69 73 2e 74 69 63 6b 4c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 26 26 74 68 69 73 2e 73 6c 69 64 65 72 45 6c 65 6d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 2e 74 69 63 6b 4c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 29 2c 71 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 68 69 73 2e 73 6c 69 64 65 72 45 6c 65 6d 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 7d 69 66 28 61 26 26 28 74 68 69 73 2e Data Ascii: iderElem.appendChild(v),this.sliderElem.appendChild(w),this.sliderElem.appendChild(x),this.tickLabelContainer&&this.sliderElem.appendChild(this.tickLabelContainer),q.insertBefore(this.sliderElem,this.element),this.element.style.display="none"}if(a&&(this.
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 2e 68 61 6e 64 6c 65 31 2c 74 68 69 73 2e 68 61 6e 64 6c 65 32 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 5f 72 65 6d 6f 76 65 50 72 6f 70 65 72 74 79 28 61 2c 22 6c 65 66 74 22 29 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 50 72 6f 70 65 72 74 79 28 61 2c 22 74 6f 70 22 29 7d 2c 74 68 69 73 29 2c 5b 74 68 69 73 2e 74 6f 6f 6c 74 69 70 2c 74 68 69 73 2e 74 6f 6f 6c 74 69 70 5f 6d 69 6e 2c 74 68 69 73 2e 74 6f 6f 6c 74 69 70 5f 6d 61 78 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 5f 72 65 6d 6f 76 65 50 72 6f 70 65 72 74 79 28 61 2c 22 6c 65 66 74 22 29 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 50 72 6f 70 65 72 74 79 28 61 2c 22 74 6f 70 22 29 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 50 72 Data Ascii: .handle1,this.handle2].forEach(function(a){this._removeProperty(a,"left"),this._removeProperty(a,"top")},this),[this.tooltip,this.tooltip_min,this.tooltip_max].forEach(function(a){this._removeProperty(a,"left"),this._removeProperty(a,"top"),this._removePr
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 63 6b 73 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 69 6e 3d 4d 61 74 68 2e 6d 69 6e 2e 61 70 70 6c 79 28 4d 61 74 68 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 69 63 6b 73 29 29 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 29 3f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 61 6e 67 65 3d 21 30 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 61 6e 67 65 26 26 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 3d 5b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 78 5d 29 2c 74 68 69 73 2e 74 72 61 63 6b 4c 6f 77 3d 6b 7c 7c 74 68 69 73 2e 74 72 61 63 6b 4c 6f 77 2c 74 68 69 73 2e 74 72 61 63 6b 53 65 6c 65 63 74 69 6f 6e 3d 6a 7c 7c 74 68 69 Data Ascii: cks),this.options.min=Math.min.apply(Math,this.options.ticks)),Array.isArray(this.options.value)?this.options.range=!0:this.options.range&&(this.options.value=[this.options.value,this.options.max]),this.trackLow=k\|\|this.trackLow,this.trackSelection=j\|\|thi
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 26 26 74 68 69 73 2e 73 6c 69 64 65 72 45 6c 65 6d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 74 68 69 73 2e 6d 6f 75 73 65 64 6f 77 6e 2c 21 31 29 2c 74 68 69 73 2e 73 6c 69 64 65 72 45 6c 65 6d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 74 68 69 73 2e 6d 6f 75 73 65 64 6f 77 6e 2c 21 31 29 2c 22 68 69 64 65 22 3d 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 6f 6f 6c 74 69 70 3f 28 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 74 6f 6f 6c 74 69 70 2c 22 68 69 64 65 22 29 2c 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 74 6f 6f 6c 74 69 70 5f 6d 69 6e 2c 22 68 69 64 65 22 29 2c 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 74 68 Data Ascii: &&this.sliderElem.addEventListener("touchstart",this.mousedown,!1),this.sliderElem.addEventListener("mousedown",this.mousedown,!1),"hide"===this.options.tooltip?(this._addClass(this.tooltip,"hide"),this._addClass(this.tooltip_min,"hide"),this._addClass(th
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 6f 70 74 69 6f 6e 73 2e 6d 69 6e 3a 63 3e 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 78 3f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 78 3a 63 7d 2c 74 6f 50 65 72 63 65 6e 74 61 67 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 78 3d 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 69 6e 3f 30 3a 31 30 30 2a 28 61 2d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 69 6e 29 2f 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 78 2d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 69 6e 29 7d 7d 2c 6c 6f 67 61 72 69 74 68 6d 69 63 3a 7b 74 6f 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3d 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 69 6e 3f 30 3a 4d 61 74 68 2e 6c 6f 67 28 Data Ascii: options.min:c>this.options.max?this.options.max:c},toPercentage:function(a){return this.options.max===this.options.min?0:100*(a-this.options.min)/(this.options.max-this.options.min)}},logarithmic:{toValue:function(a){var b=0===this.options.min?0:Math.log(
2024-12-24 15:04:59 UTC	1369	IN	Data Raw: 73 2e 6d 69 6e 2c 4d 61 74 68 2e 6d 69 6e 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 78 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 5b 30 5d 29 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 5b 31 5d 3d 4d 61 74 68 2e 6d 61 78 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 69 6e 2c 4d 61 74 68 2e 6d 69 6e 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 78 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 5b 31 5d 29 29 29 3a 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 3d 64 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 3d 5b 4d 61 74 68 2e 6d 61 78 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 69 6e 2c 4d 61 74 68 2e 6d 69 6e 28 74 68 69 Data Ascii: s.min,Math.min(this.options.max,this.options.value[0])),this.options.value[1]=Math.max(this.options.min,Math.min(this.options.max,this.options.value[1]))):(this.options.value=d(this.options.value),this.options.value=[Math.max(this.options.min,Math.min(thi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49730	151.101.65.229	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:04:58 UTC	588	OUT	GET /gh/gitbrent/bootstrap4-toggle@3.6.1/js/bootstrap4-toggle.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:04:59 UTC	774	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4431 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 3.6.1 X-JSD-Version-Type: version ETag: W/"114f-S8/fLv/lg0XGntYdE626VBpCgeI" Accept-Ranges: bytes Age: 1154393 Date: Tue, 24 Dec 2024 15:04:59 GMT X-Served-By: cache-fra-eddf8230154-FRA, cache-nyc-kteb1890042-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-24 15:04:59 UTC	1378	IN	Data Raw: 2f 2a 5c 0a 7c 2a 7c 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 7c 2a 7c 20 42 6f 6f 74 73 74 72 61 70 20 54 6f 67 67 6c 65 3a 20 62 6f 6f 74 73 74 72 61 70 34 2d 74 6f 67 67 6c 65 2e 6a 73 20 76 33 2e 36 2e 31 0a 7c 2a 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 62 72 65 6e 74 2e 67 69 74 68 75 62 2e 69 6f 2f 62 6f 6f 74 73 74 72 61 70 34 2d 74 6f 67 67 6c 65 2f 0a 7c 2a 7c 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /\\|\| ========================================================================\|\| Bootstrap Toggle: bootstrap4-toggle.js v3.6.1\|\| https://gitbrent.github.io/bootstrap4-toggle/\|*\| ======================================================================
2024-12-24 15:04:59 UTC	1378	IN	Data Raw: 7a 65 3f 22 62 74 6e 2d 73 6d 22 3a 22 6d 69 6e 69 22 3d 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 69 7a 65 7c 7c 22 78 73 22 3d 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 69 7a 65 3f 22 62 74 6e 2d 78 73 22 3a 22 22 2c 65 3d 61 28 27 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 27 2b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 70 72 6f 70 28 22 69 64 22 29 2b 27 22 20 63 6c 61 73 73 3d 22 62 74 6e 22 3e 27 29 2e 68 74 6d 6c 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 29 2e 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 5f 6f 6e 73 74 79 6c 65 2b 22 20 22 2b 74 29 2c 73 3d 61 28 27 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 27 2b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 70 72 6f 70 28 22 69 64 22 29 2b 27 22 20 63 6c 61 73 73 3d 22 62 74 6e 22 3e 27 29 2e 68 74 Data Ascii: ze?"btn-sm":"mini"===this.options.size\|\|"xs"===this.options.size?"btn-xs":"",e=a('<label for="'+this.$element.prop("id")+'" class="btn">').html(this.options.on).addClass(this._onstyle+" "+t),s=a('<label for="'+this.$element.prop("id")+'" class="btn">').ht
2024-12-24 15:04:59 UTC	1378	IN	Data Raw: 72 6f 74 6f 74 79 70 65 2e 6f 66 66 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 70 72 6f 70 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 21 31 3b 74 68 69 73 2e 24 74 6f 67 67 6c 65 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 5f 6f 6e 73 74 79 6c 65 29 2e 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 5f 6f 66 66 73 74 79 6c 65 2b 22 20 6f 66 66 22 29 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 70 72 6f 70 28 22 63 68 65 63 6b 65 64 22 2c 21 31 29 2c 74 7c 7c 74 68 69 73 2e 74 72 69 67 67 65 72 28 29 7d 2c 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 74 6f 67 67 6c 65 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 64 69 73 61 62 6c 65 Data Ascii: rototype.off=function(t){if(this.$element.prop("disabled"))return!1;this.$toggle.removeClass(this._onstyle).addClass(this._offstyle+" off"),this.$element.prop("checked",!1),t\|\|this.trigger()},l.prototype.enable=function(){this.$toggle.removeClass("disable
2024-12-24 15:04:59 UTC	297	IN	Data Raw: 2c 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 22 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 74 6f 67 67 6c 65 5d 22 29 2e 62 6f 6f 74 73 74 72 61 70 54 6f 67 67 6c 65 28 29 7d 29 2c 61 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 74 6f 67 67 6c 65 22 2c 22 64 69 76 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 74 6f 67 67 6c 65 5d 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 28 74 68 69 73 29 2e 66 69 6e 64 28 22 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 22 29 2e 62 6f 6f 74 73 74 72 61 70 54 6f 67 67 6c 65 28 22 74 6f 67 67 6c 65 22 29 2c 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 29 7d 28 6a 51 75 65 72 79 29 3b 0a 2f 2f 23 20 73 6f 75 72 Data Ascii: ,a(function(){a("input[type=checkbox][data-toggle^=toggle]").bootstrapToggle()}),a(document).on("click.bs.toggle","div[data-toggle^=toggle]",function(t){a(this).find("input[type=checkbox]").bootstrapToggle("toggle"),t.preventDefault()})}(jQuery);//# sour

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49719	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:04:58 UTC	711	OUT	GET /Content/styles/mq.css HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
2024-12-24 15:04:59 UTC	823	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:04:59 GMT Content-Type: text/css Content-Length: 147770 Connection: close Set-Cookie: AWSALB=2GAPZAt3QQGn2jvDeeEzgx+wfKUWZGhjsPCJJxPADYXSADYRUaHSY6w9/160KmGiTkDxfG+evZlqQKwFGes1mvzVJZBEcbaKAjh7JUIeRbdhs0GJGouSC8ajF5/Q; Expires=Tue, 31 Dec 2024 15:04:59 GMT; Path=/ Set-Cookie: AWSALBCORS=2GAPZAt3QQGn2jvDeeEzgx+wfKUWZGhjsPCJJxPADYXSADYRUaHSY6w9/160KmGiTkDxfG+evZlqQKwFGes1mvzVJZBEcbaKAjh7JUIeRbdhs0GJGouSC8ajF5/Q; Expires=Tue, 31 Dec 2024 15:04:59 GMT; Path=/; SameSite=None Cache-Control: no-cache Last-Modified: Tue, 03 Dec 2024 16:43:10 GMT Accept-Ranges: bytes ETag: "0a3c86fa245db1:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:04:59 UTC	15561	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 36 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 32 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 20 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 20 23 36 36 31 30 66 32 3b 2d 2d Data Ascii: /! Bootstrap v4.6.2 (https://getbootstrap.com/) * Copyright 2011-2022 The Bootstrap Authors * Copyright 2011-2022 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--blue: #007bff;--indigo: #6610f2;--
2024-12-24 15:04:59 UTC	11709	IN	Data Raw: 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 39 7b 6d 61 Data Ascii: 33333%}.offset-xl-2{margin-left:16.66667%}.offset-xl-3{margin-left:25%}.offset-xl-4{margin-left:33.33333%}.offset-xl-5{margin-left:41.66667%}.offset-xl-6{margin-left:50%}.offset-xl-7{margin-left:58.33333%}.offset-xl-8{margin-left:66.66667%}.offset-xl-9{ma
2024-12-24 15:04:59 UTC	16384	IN	Data Raw: 6c 3a 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 38 61 37 34 35 7d 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 69 6e 70 75 74 3a 76 61 6c 69 64 20 7e 20 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 6c 61 62 65 6c 2c 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 69 6e 70 75 74 2e 69 73 2d 76 61 6c 69 64 20 7e 20 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 6c 61 62 65 6c 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 38 61 37 34 35 7d 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 69 6e 70 75 74 3a 76 61 6c 69 64 3a 66 6f 63 75 73 20 7e 20 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 6c 61 62 65 6c 2c 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 69 6e 70 75 74 2e 69 73 2d 76 61 6c 69 Data Ascii: l::before{border-color:#28a745}.was-validated .custom-file-input:valid ~ .custom-file-label,.custom-file-input.is-valid ~ .custom-file-label{border-color:#28a745}.was-validated .custom-file-input:valid:focus ~ .custom-file-label,.custom-file-input.is-vali
2024-12-24 15:04:59 UTC	5024	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 6e 67 65 72 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 3a 61 63 74 69 76 65 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 6e 67 65 72 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 2c 2e 73 68 6f 77 3e 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 6e 67 65 72 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 63 33 35 34 35 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 63 33 35 34 35 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 64 61 6e Data Ascii: kground-color:transparent}.btn-outline-danger:not(:disabled):not(.disabled):active,.btn-outline-danger:not(:disabled):not(.disabled).active,.show>.btn-outline-danger.dropdown-toggle{color:#fff;background-color:#dc3545;border-color:#dc3545}.btn-outline-dan
2024-12-24 15:04:59 UTC	8028	IN	Data Raw: 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 31 32 35 72 65 6d 7d 2e 64 72 6f 70 6c 65 66 74 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2e 32 35 35 65 6d 3b 63 6f 6e 74 65 6e 74 3a 22 22 7d 2e 64 72 6f 70 6c 65 66 74 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 64 72 6f 70 6c 65 66 74 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 32 35 35 65 6d 3b 76 65 72 74 69 Data Ascii: argin-right:.125rem}.dropleft .dropdown-toggle::after{display:inline-block;margin-left:.255em;vertical-align:.255em;content:""}.dropleft .dropdown-toggle::after{display:none}.dropleft .dropdown-toggle::before{display:inline-block;margin-right:.255em;verti
2024-12-24 15:04:59 UTC	5352	IN	Data Raw: 68 61 73 2d 76 61 6c 69 64 61 74 69 6f 6e 29 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 70 70 65 6e 64 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 3e 2e 62 74 6e 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 3a 6e 6f 74 28 2e 68 61 73 2d 76 61 6c 69 64 61 74 69 6f 6e 29 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 70 70 65 6e 64 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 74 65 78 74 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2e 68 61 73 2d 76 61 6c 69 64 61 74 69 6f 6e 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 70 70 65 6e 64 3a 6e 74 68 2d 6c 61 73 74 2d 63 68 69 6c 64 28 6e 2b 33 29 3e 2e 62 74 6e 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2e 68 61 73 2d 76 61 6c 69 64 61 74 69 6f 6e 3e 2e 69 6e 70 75 74 2d Data Ascii: has-validation)>.input-group-append:not(:last-child)>.btn,.input-group:not(.has-validation)>.input-group-append:not(:last-child)>.input-group-text,.input-group.has-validation>.input-group-append:nth-last-child(n+3)>.btn,.input-group.has-validation>.input-
2024-12-24 15:04:59 UTC	16384	IN	Data Raw: 68 65 69 67 68 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 37 35 72 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 3a 64 69 73 61 62 6c 65 64 7b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 39 65 63 65 66 7d 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 3a 3a 2d 6d 73 2d 65 78 70 61 6e 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 7b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 23 34 39 35 30 35 37 7d 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 2d 73 6d 7b 68 65 69 67 68 Data Ascii: height:auto;padding-right:.75rem;background-image:none}.custom-select:disabled{color:#6c757d;background-color:#e9ecef}.custom-select::-ms-expand{display:none}.custom-select:-moz-focusring{color:transparent;text-shadow:0 0 0 #495057}.custom-select-sm{heigh
2024-12-24 15:04:59 UTC	16384	IN	Data Raw: 64 2d 67 72 6f 75 70 3e 2e 63 61 72 64 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 20 2e 63 61 72 64 2d 69 6d 67 2d 62 6f 74 74 6f 6d 2c 2e 63 61 72 64 2d 67 72 6f 75 70 3e 2e 63 61 72 64 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 20 2e 63 61 72 64 2d 66 6f 6f 74 65 72 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 63 61 72 64 2d 67 72 6f 75 70 3e 2e 63 61 72 64 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 7d 2e 63 61 72 64 2d 67 72 6f 75 70 3e 2e 63 61 72 64 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 20 2e 63 61 72 64 Data Ascii: d-group>.card:not(:last-child) .card-img-bottom,.card-group>.card:not(:last-child) .card-footer{border-bottom-right-radius:0}.card-group>.card:not(:first-child){border-top-left-radius:0;border-bottom-left-radius:0}.card-group>.card:not(:first-child) .card
2024-12-24 15:04:59 UTC	16384	IN	Data Raw: 65 64 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 31 72 65 6d 29 7d 2e 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 2d 63 65 6e 74 65 72 65 64 3a 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 76 68 20 2d 20 31 72 65 6d 29 3b 68 65 69 67 68 74 3a 6d 69 6e 2d 63 6f 6e 74 65 6e 74 3b 63 6f 6e 74 65 6e 74 3a 22 22 7d 2e 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 2d 63 65 6e 74 65 72 65 64 2e 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 2d 73 63 72 6f 6c 6c 61 62 6c 65 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 Data Ascii: ed{display:flex;align-items:center;min-height:calc(100% - 1rem)}.modal-dialog-centered::before{display:block;height:calc(100vh - 1rem);height:min-content;content:""}.modal-dialog-centered.modal-dialog-scrollable{flex-direction:column;justify-content:cente
2024-12-24 15:04:59 UTC	16384	IN	Data Raw: 69 6e 65 2d 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 78 6c 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 78 6c 2d 74 61 62 6c 65 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 78 6c 2d 74 61 62 6c 65 2d 72 6f 77 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 72 6f 77 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 78 6c 2d 74 61 62 6c 65 2d 63 65 6c 6c 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 65 6c 6c 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 78 6c 2d 66 6c 65 78 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 78 6c 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d Data Ascii: ine-block !important}.d-xl-block{display:block !important}.d-xl-table{display:table !important}.d-xl-table-row{display:table-row !important}.d-xl-table-cell{display:table-cell !important}.d-xl-flex{display:flex !important}.d-xl-inline-flex{display:inline-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49731	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:04:59 UTC	774	OUT	GET /kentico/bundles/pageComponents/styles?v=LvgvfTmKo1fhX4g3xYTHB60npvVe4E6N5OqbdpUwDA01 HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
2024-12-24 15:04:59 UTC	834	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:04:59 GMT Content-Type: text/css; charset=utf-8 Content-Length: 8724 Connection: close Set-Cookie: AWSALB=CAwkRhCyhbzlIXUn/SPJKn3M5GJ+vyXfqUEa8Ms1PGI/XDRNe5o8kFD6nuKGsZdTi8Hnx9j7oawG1quw1+FX4WA7GtzEL63RO/40P4k6eSCOtZSgdon5Y7nVr1uk; Expires=Tue, 31 Dec 2024 15:04:59 GMT; Path=/ Set-Cookie: AWSALBCORS=CAwkRhCyhbzlIXUn/SPJKn3M5GJ+vyXfqUEa8Ms1PGI/XDRNe5o8kFD6nuKGsZdTi8Hnx9j7oawG1quw1+FX4WA7GtzEL63RO/40P4k6eSCOtZSgdon5Y7nVr1uk; Expires=Tue, 31 Dec 2024 15:04:59 GMT; Path=/; SameSite=None Cache-Control: public Expires: Wed, 24 Dec 2025 15:04:59 GMT Last-Modified: Tue, 24 Dec 2024 15:04:59 GMT Vary: User-Agent X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:04:59 UTC	5851	IN	Data Raw: 2e 66 72 2d 63 6c 65 61 72 66 69 78 3a 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 68 65 69 67 68 74 3a 30 7d 2e 66 72 2d 68 69 64 65 2d 62 79 2d 63 6c 69 70 70 69 6e 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 70 78 3b 68 65 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 63 6c 69 70 3a 72 65 63 74 28 30 2c 30 2c 30 2c 30 29 3b 62 6f 72 64 65 72 3a 30 7d 2e 66 72 2d 76 69 65 77 20 69 6d 67 2e 66 72 2d 72 6f 75 6e 64 65 64 2c 2e 66 72 2d 76 69 65 77 20 2e 66 72 2d 69 6d 67 2d 63 61 70 74 69 6f 6e 2e 66 72 2d 72 6f 75 6e 64 65 64 20 69 6d 67 7b Data Ascii: .fr-clearfix::after{clear:both;display:block;content:"";height:0}.fr-hide-by-clipping{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);border:0}.fr-view img.fr-rounded,.fr-view .fr-img-caption.fr-rounded img{
2024-12-24 15:04:59 UTC	2676	IN	Data Raw: 77 20 2e 66 72 2d 69 6d 67 2d 63 61 70 74 69 6f 6e 20 2e 66 72 2d 69 6d 67 2d 77 72 61 70 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 72 2d 76 69 65 77 20 2e 66 72 2d 69 6d 67 2d 63 61 70 74 69 6f 6e 20 2e 66 72 2d 69 6d 67 2d 77 72 61 70 20 61 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 66 72 2d 76 69 65 77 20 2e 66 72 2d 69 6d 67 2d 63 61 70 74 69 6f 6e 20 2e 66 72 2d 69 6d 67 2d 77 72 61 70 20 69 6d 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 72 2d 76 69 65 77 20 2e 66 72 2d 69 6d 67 2d 63 61 70 74 69 6f 6e 20 2e 66 72 2d 69 6d 67 2d 77 72 61 70 3e 73 70 Data Ascii: w .fr-img-caption .fr-img-wrap{padding:0;margin:auto;text-align:center;width:100%}.fr-view .fr-img-caption .fr-img-wrap a{display:block}.fr-view .fr-img-caption .fr-img-wrap img{display:block;margin:auto;width:100%}.fr-view .fr-img-caption .fr-img-wrap>sp
2024-12-24 15:04:59 UTC	197	IN	Data Raw: 7d 62 6f 64 79 7b 7d 23 73 75 63 63 65 73 73 55 52 4c 44 69 73 70 6c 61 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 31 37 65 63 31 7d 62 6f 64 79 7b 7d 73 70 61 6e 2e 68 65 6c 70 2d 62 6c 6f 63 6b 7b 63 6f 6c 6f 72 3a 72 65 64 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 2b 6c 61 62 65 6c 7b 6d 61 72 67 69 6e 3a 32 70 78 3b 70 61 64 64 69 6e 67 3a 32 70 78 7d 23 73 75 63 63 65 73 73 55 52 4c 44 69 73 70 6c 61 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 31 37 65 63 31 7d Data Ascii: }body{}#successURLDisplay{background-color:#117ec1}body{}span.help-block{color:red;font-style:italic}input[type="checkbox"]+label{margin:2px;padding:2px}#successURLDisplay{background-color:#117ec1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49728	172.217.21.36	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:04:59 UTC	684	OUT	GET /recaptcha/api.js?render=6Le4f5AqAAAAACMx6SI8VYM7etmAXowUb1ykbHGZ HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:00 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Tue, 24 Dec 2024 15:04:59 GMT Date: Tue, 24 Dec 2024 15:04:59 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-24 15:05:00 UTC	641	IN	Data Raw: 35 62 63 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 5bc/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-12-24 15:05:00 UTC	834	IN	Data Raw: 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 Data Ascii: YffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecati
2024-12-24 15:05:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49733	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:00 UTC	737	OUT	GET /bundles/jquery?v=N2YlHnRI7it2_JoqUZTYWxPtx-s61zIGkk78Q0eabPM1 HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
2024-12-24 15:05:00 UTC	842	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:00 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 86959 Connection: close Set-Cookie: AWSALB=s2I2cWAONoMtcR8W/kX5wz1n48fgqFWSpZ5WjuMFoVU+pUeR1Tq+Snx8pONmTHdhN058gslMtDcXU6kTjxif8ieb1JNAR8VpSGin+fYDUTSHgrbVwbtFi0wa5GOE; Expires=Tue, 31 Dec 2024 15:05:00 GMT; Path=/ Set-Cookie: AWSALBCORS=s2I2cWAONoMtcR8W/kX5wz1n48fgqFWSpZ5WjuMFoVU+pUeR1Tq+Snx8pONmTHdhN058gslMtDcXU6kTjxif8ieb1JNAR8VpSGin+fYDUTSHgrbVwbtFi0wa5GOE; Expires=Tue, 31 Dec 2024 15:05:00 GMT; Path=/; SameSite=None Cache-Control: public Expires: Wed, 24 Dec 2025 15:05:00 GMT Last-Modified: Tue, 24 Dec 2024 15:05:00 GMT Vary: User-Agent X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:00 UTC	3167	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 6e 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 21 6e 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 74 28 6e 29 7d 3a 74 28 6e 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e Data Ascii: !function(n,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=n.document?t(n,!0):function(n){if(!n.document)throw new Error("jQuery requires a window with a document");return t(n)}:t(n)}("undefined"!=typeof window?win
2024-12-24 15:05:00 UTC	2676	IN	Data Raw: 69 5d 2c 22 67 6c 6f 62 61 6c 45 76 61 6c 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 75 28 6e 2c 74 2c 72 2c 75 2c 66 29 7b 66 6f 72 28 76 61 72 20 65 2c 6f 2c 70 2c 63 2c 77 2c 61 2c 73 3d 74 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 2c 79 3d 5b 5d 2c 68 3d 30 2c 62 3d 6e 2e 6c 65 6e 67 74 68 3b 68 3c 62 3b 68 2b 2b 29 69 66 28 28 65 3d 6e 5b 68 5d 29 7c 7c 30 3d 3d 3d 65 29 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 65 74 28 65 29 29 69 2e 6d 65 72 67 65 28 79 2c 65 2e 6e 6f 64 65 54 79 70 65 3f 5b 65 5d 3a 65 29 3b 65 6c 73 65 20 69 66 28 6b 75 2e 74 65 73 74 28 65 29 29 7b 66 6f 72 28 6f 3d 6f 7c 7c 73 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 70 3d 28 Data Ascii: i],"globalEval"))}function du(n,t,r,u,f){for(var e,o,p,c,w,a,s=t.createDocumentFragment(),y=[],h=0,b=n.length;h<b;h++)if((e=n[h])\|\|0===e)if("object"===et(e))i.merge(y,e.nodeType?[e]:e);else if(ku.test(e)){for(o=o\|\|s.appendChild(t.createElement("div")),p=(
2024-12-24 15:05:00 UTC	1338	IN	Data Raw: 5d 2c 62 75 2e 74 65 73 74 28 73 2e 74 79 70 65 7c 7c 22 22 29 26 26 21 72 2e 61 63 63 65 73 73 28 73 2c 22 67 6c 6f 62 61 6c 45 76 61 6c 22 29 26 26 69 2e 63 6f 6e 74 61 69 6e 73 28 79 2c 73 29 26 26 28 73 2e 73 72 63 26 26 22 6d 6f 64 75 6c 65 22 21 3d 3d 28 73 2e 74 79 70 65 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3f 69 2e 5f 65 76 61 6c 55 72 6c 26 26 21 73 2e 6e 6f 4d 6f 64 75 6c 65 26 26 69 2e 5f 65 76 61 6c 55 72 6c 28 73 2e 73 72 63 2c 7b 6e 6f 6e 63 65 3a 73 2e 6e 6f 6e 63 65 7c 7c 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 79 29 3a 6e 75 28 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 75 6f 2c 22 22 29 2c 73 2c 79 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: ],bu.test(s.type\|\|"")&&!r.access(s,"globalEval")&&i.contains(y,s)&&(s.src&&"module"!==(s.type\|\|"").toLowerCase()?i._evalUrl&&!s.noModule&&i._evalUrl(s.src,{nonce:s.nonce\|\|s.getAttribute("nonce")},y):nu(s.textContent.replace(uo,""),s,y))}return n}function
2024-12-24 15:05:00 UTC	2676	IN	Data Raw: 22 70 61 64 64 69 6e 67 22 2b 6e 74 5b 6f 5d 2c 21 30 2c 66 29 29 2c 22 6d 61 72 67 69 6e 22 21 3d 3d 72 26 26 28 73 2d 3d 69 2e 63 73 73 28 6e 2c 22 62 6f 72 64 65 72 22 2b 6e 74 5b 6f 5d 2b 22 57 69 64 74 68 22 2c 21 30 2c 66 29 29 29 3a 28 73 2b 3d 69 2e 63 73 73 28 6e 2c 22 70 61 64 64 69 6e 67 22 2b 6e 74 5b 6f 5d 2c 21 30 2c 66 29 2c 22 70 61 64 64 69 6e 67 22 21 3d 3d 72 3f 73 2b 3d 69 2e 63 73 73 28 6e 2c 22 62 6f 72 64 65 72 22 2b 6e 74 5b 6f 5d 2b 22 57 69 64 74 68 22 2c 21 30 2c 66 29 3a 68 2b 3d 69 2e 63 73 73 28 6e 2c 22 62 6f 72 64 65 72 22 2b 6e 74 5b 6f 5d 2b 22 57 69 64 74 68 22 2c 21 30 2c 66 29 29 3b 72 65 74 75 72 6e 21 75 26 26 30 3c 3d 65 26 26 28 73 2b 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 63 65 69 6c 28 6e 5b 22 6f 66 Data Ascii: "padding"+nt[o],!0,f)),"margin"!==r&&(s-=i.css(n,"border"+nt[o]+"Width",!0,f))):(s+=i.css(n,"padding"+nt[o],!0,f),"padding"!==r?s+=i.css(n,"border"+nt[o]+"Width",!0,f):h+=i.css(n,"border"+nt[o]+"Width",!0,f));return!u&&0<=e&&(s+=Math.max(0,Math.ceil(n["of
2024-12-24 15:05:00 UTC	1338	IN	Data Raw: 6f 6e 65 28 75 2e 6f 70 74 73 2e 64 6f 6e 65 2c 75 2e 6f 70 74 73 2e 63 6f 6d 70 6c 65 74 65 29 2e 66 61 69 6c 28 75 2e 6f 70 74 73 2e 66 61 69 6c 29 2e 61 6c 77 61 79 73 28 75 2e 6f 70 74 73 2e 61 6c 77 61 79 73 29 2c 69 2e 66 78 2e 74 69 6d 65 72 28 69 2e 65 78 74 65 6e 64 28 6c 2c 7b 65 6c 65 6d 3a 6e 2c 61 6e 69 6d 3a 75 2c 71 75 65 75 65 3a 75 2e 6f 70 74 73 2e 71 75 65 75 65 7d 29 29 2c 75 7d 66 75 6e 63 74 69 6f 6e 20 72 74 28 6e 29 7b 72 65 74 75 72 6e 28 6e 2e 6d 61 74 63 68 28 79 29 7c 7c 5b 5d 29 2e 6a 6f 69 6e 28 22 20 22 29 7d 66 75 6e 63 74 69 6f 6e 20 75 74 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 6e 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 7d 66 75 6e 63 74 69 6f Data Ascii: one(u.opts.done,u.opts.complete).fail(u.opts.fail).always(u.opts.always),i.fx.timer(i.extend(l,{elem:n,anim:u,queue:u.opts.queue})),u}function rt(n){return(n.match(y)\|\|[]).join(" ")}function ut(n){return n.getAttribute&&n.getAttribute("class")\|\|""}functio
2024-12-24 15:05:00 UTC	1338	IN	Data Raw: 50 72 6f 70 65 72 74 79 2c 67 72 3d 64 74 2e 74 6f 53 74 72 69 6e 67 2c 63 65 3d 67 72 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 66 3d 7b 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 6e 2e 6e 6f 64 65 54 79 70 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6e 2e 69 74 65 6d 7d 2c 66 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 6e 26 26 6e 3d 3d 3d 6e 2e 77 69 6e 64 6f 77 7d 2c 75 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2c 6c 65 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 2c 74 75 3d 22 33 2e 37 2e 31 22 Data Ascii: Property,gr=dt.toString,ce=gr.call(Object),f={},e=function(n){return"function"==typeof n&&"number"!=typeof n.nodeType&&"function"!=typeof n.item},ft=function(n){return null!=n&&n===n.window},u=n.document,le={type:!0,src:!0,nonce:!0,noModule:!0},tu="3.7.1"
2024-12-24 15:05:00 UTC	2676	IN	Data Raw: 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 72 3d 31 2c 6c 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 68 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 28 68 3d 6e 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 7c 7c 7b 7d 2c 72 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 7c 7c 65 28 6e 29 7c 7c 28 6e 3d 7b 7d 29 2c 72 3d 3d 3d 6c 26 26 28 6e 3d 74 68 69 73 2c 72 2d 2d 29 3b 72 3c 6c 3b 72 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 73 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 29 29 66 6f 72 28 75 20 69 6e 20 73 29 74 3d 73 5b 75 5d 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 21 3d 3d 75 26 26 6e 21 3d 3d 74 26 26 28 68 26 26 74 26 26 28 69 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 74 29 Data Ascii: =arguments[0]\|\|{},r=1,l=arguments.length,h=!1;for("boolean"==typeof n&&(h=n,n=arguments[r]\|\|{},r++),"object"==typeof n\|\|e(n)\|\|(n={}),r===l&&(n=this,r--);r<l;r++)if(null!=(s=arguments[r]))for(u in s)t=s[u],"__proto__"!==u&&n!==t&&(h&&t&&(i.isPlainObject(t)
2024-12-24 15:05:00 UTC	1338	IN	Data Raw: 29 7b 69 66 28 39 3d 3d 3d 70 29 7b 69 66 28 21 28 61 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 68 29 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 61 2e 69 64 3d 3d 3d 68 29 72 65 74 75 72 6e 20 76 2e 63 61 6c 6c 28 6f 2c 61 29 2c 6f 7d 65 6c 73 65 20 69 66 28 77 26 26 28 61 3d 77 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 68 29 29 26 26 72 2e 63 6f 6e 74 61 69 6e 73 28 74 2c 61 29 26 26 61 2e 69 64 3d 3d 3d 68 29 72 65 74 75 72 6e 20 76 2e 63 61 6c 6c 28 6f 2c 61 29 2c 6f 7d 65 6c 73 65 7b 69 66 28 6b 5b 32 5d 29 72 65 74 75 72 6e 20 76 2e 61 70 70 6c 79 28 6f 2c 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 6e 29 29 2c 6f 3b 69 66 28 28 68 3d 6b 5b 33 5d 29 26 26 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 Data Ascii: ){if(9===p){if(!(a=t.getElementById(h)))return o;if(a.id===h)return v.call(o,a),o}else if(w&&(a=w.getElementById(h))&&r.contains(t,a)&&a.id===h)return v.call(o,a),o}else{if(k[2])return v.apply(o,t.getElementsByTagName(n)),o;if((h=k[3])&&t.getElementsByCla
2024-12-24 15:05:01 UTC	1338	IN	Data Raw: 7c 7c 74 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 6e 26 26 75 72 28 74 29 3d 3d 3d 6e 3a 74 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 6e 3a 22 6c 61 62 65 6c 22 69 6e 20 74 26 26 74 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 6e 29 7b 72 65 74 75 72 6e 20 79 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 2b 74 2c 79 28 66 75 6e 63 74 69 6f 6e 28 69 2c 72 29 7b 66 6f 72 28 76 61 72 20 75 2c 66 3d 6e 28 5b 5d 2c 69 2e 6c 65 6e 67 74 68 2c 74 29 2c 65 3d 66 2e 6c 65 6e 67 74 68 3b 65 2d 2d 3b 29 69 5b 75 3d 66 5b 65 5d 5d 26 26 28 69 5b 75 5d 3d 21 28 72 5b 75 5d 3d 69 5b 75 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 74 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 22 75 6e 64 65 66 69 6e 65 64 22 Data Ascii: \|\|t.isDisabled!==!n&&ur(t)===n:t.disabled===n:"label"in t&&t.disabled===n}}function it(n){return y(function(t){return t=+t,y(function(i,r){for(var u,f=n([],i.length,t),e=f.length;e--;)i[u=f[e]]&&(i[u]=!(r[u]=i[u]))})})}function kt(n){return n&&"undefined"
2024-12-24 15:05:01 UTC	1338	IN	Data Raw: 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 6c 29 7b 76 61 72 20 72 2c 75 2c 66 2c 69 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6e 29 3b 69 66 28 69 29 7b 69 66 28 28 72 3d 69 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 72 2e 76 61 6c 75 65 3d 3d 3d 6e 29 72 65 74 75 72 6e 5b 69 5d 3b 66 6f 72 28 66 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 6e 29 2c 75 3d 30 3b 69 3d 66 5b 75 2b 2b 5d 3b 29 69 66 28 28 72 3d 69 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 72 2e 76 61 6c 75 65 3d 3d 3d 6e 29 72 65 74 75 72 6e 5b 69 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 74 2e 66 69 6e 64 2e 54 41 47 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 Data Ascii: f t.getElementById&&l){var r,u,f,i=t.getElementById(n);if(i){if((r=i.getAttributeNode("id"))&&r.value===n)return[i];for(f=t.getElementsByName(n),u=0;i=f[u++];)if((r=i.getAttributeNode("id"))&&r.value===n)return[i]}return[]}}),t.find.TAG=function(n,t){retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49734	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:00 UTC	754	OUT	GET /bundles/jquery-unobtrusive-ajax?v=yWiSJlfkRWGOtjh38MIfwsmv_b3zyMucdfkOPGDhEoA1 HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
2024-12-24 15:05:00 UTC	841	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:00 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 2782 Connection: close Set-Cookie: AWSALB=ren8mP7SaZEoQ3vUJKYhjn6gABeavhT8utP6OacNhT+QRy28v2So+B7zPVtQwgtu//iQddIOkGVuzpNr7X0+vtr9PW1LvKU7waTsHIA++aaFL0tOyXjSZBVD1Wxz; Expires=Tue, 31 Dec 2024 15:05:00 GMT; Path=/ Set-Cookie: AWSALBCORS=ren8mP7SaZEoQ3vUJKYhjn6gABeavhT8utP6OacNhT+QRy28v2So+B7zPVtQwgtu//iQddIOkGVuzpNr7X0+vtr9PW1LvKU7waTsHIA++aaFL0tOyXjSZBVD1Wxz; Expires=Tue, 31 Dec 2024 15:05:00 GMT; Path=/; SameSite=None Cache-Control: public Expires: Wed, 24 Dec 2025 15:05:00 GMT Last-Modified: Tue, 24 Dec 2024 15:05:00 GMT Vary: User-Agent X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:00 UTC	2782	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 2c 74 29 7b 66 6f 72 28 76 61 72 20 69 3d 77 69 6e 64 6f 77 2c 72 3d 28 6e 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 26 26 72 2e 6c 65 6e 67 74 68 3b 29 69 3d 69 5b 72 2e 73 68 69 66 74 28 29 5d 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 3f 69 3a 28 74 2e 70 75 73 68 28 6e 29 2c 46 75 6e 63 74 69 6f 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 6e 29 7b 72 65 74 75 72 6e 22 47 45 54 22 3d 3d 3d 6e 7c 7c 22 50 4f 53 54 22 3d 3d 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6e 2c 74 29 7b 75 28 74 29 7c 7c 6e 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 Data Ascii: !function(n){function i(n,t){for(var i=window,r=(n\|\|"").split(".");i&&r.length;)i=i[r.shift()];return"function"==typeof i?i:(t.push(n),Function.constructor.apply(null,t))}function u(n){return"GET"===n\|\|"POST"===n}function e(n,t){u(t)\|\|n.setRequestHeader("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49732	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:00 UTC	706	OUT	GET /Content/script/owl.carousel.js HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
2024-12-24 15:05:01 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:00 GMT Content-Type: text/javascript Content-Length: 48231 Connection: close Set-Cookie: AWSALB=tD/q4E5VIo34LJ9jw/NoXPM3b2hOjaFLHuSc/TNrTdSSiAf6jgIjZ9ysIc8+wJf1ssNbLXqA8jw307SC9rw2FE6ugJ0X8NZ2EoSS7lkCGDHwG5SC2vD8MK54jAMN; Expires=Tue, 31 Dec 2024 15:05:00 GMT; Path=/ Set-Cookie: AWSALBCORS=tD/q4E5VIo34LJ9jw/NoXPM3b2hOjaFLHuSc/TNrTdSSiAf6jgIjZ9ysIc8+wJf1ssNbLXqA8jw307SC9rw2FE6ugJ0X8NZ2EoSS7lkCGDHwG5SC2vD8MK54jAMN; Expires=Tue, 31 Dec 2024 15:05:00 GMT; Path=/; SameSite=None Cache-Control: no-cache Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:01 UTC	5856	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 4f 77 6c 20 63 61 72 6f 75 73 65 6c 0d 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 32 2e 33 2e 34 0d 0a 20 2a 20 40 61 75 74 68 6f 72 20 42 61 72 74 6f 73 7a 20 57 6f 6a 63 69 65 63 68 6f 77 73 6b 69 0d 0a 20 2a 20 40 61 75 74 68 6f 72 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0d 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4d 49 54 29 0d 0a 20 2a 20 40 74 6f 64 6f 20 4c 61 7a 79 20 4c 6f 61 64 20 49 63 6f 6e 0d 0a 20 2a 20 40 74 6f 64 6f 20 70 72 65 76 65 6e 74 20 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 20 62 75 62 6c 69 6e 67 0d 0a 20 2a 20 40 74 6f 64 6f 20 69 74 65 6d 73 53 63 61 6c 65 55 70 0d 0a 20 2a 20 40 74 6f 64 6f 20 54 65 73 74 20 5a 65 70 74 6f 0d 0a 20 2a 20 40 74 6f 64 6f 20 73 74 Data Ascii: /** * Owl carousel * @version 2.3.4 * @author Bartosz Wojciechowski * @author David Deutsch * @license The MIT License (MIT) * @todo Lazy Load Icon * @todo prevent animationend bubling * @todo itemsScaleUp * @todo Test Zepto * @todo st
2024-12-24 15:05:01 UTC	5352	IN	Data Raw: 6e 2c 0d 0a 09 09 09 09 6d 65 72 67 65 20 3d 20 6e 75 6c 6c 2c 0d 0a 09 09 09 09 69 74 65 72 61 74 6f 72 20 3d 20 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2c 0d 0a 09 09 09 09 67 72 69 64 20 3d 20 21 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 61 75 74 6f 57 69 64 74 68 2c 0d 0a 09 09 09 09 77 69 64 74 68 73 20 3d 20 5b 5d 3b 0d 0a 0d 0a 09 09 09 63 61 63 68 65 2e 69 74 65 6d 73 20 3d 20 7b 0d 0a 09 09 09 09 6d 65 72 67 65 3a 20 66 61 6c 73 65 2c 0d 0a 09 09 09 09 77 69 64 74 68 3a 20 77 69 64 74 68 0d 0a 09 09 09 7d 3b 0d 0a 0d 0a 09 09 09 77 68 69 6c 65 20 28 69 74 65 72 61 74 6f 72 2d 2d 29 20 7b 0d 0a 09 09 09 09 6d 65 72 67 65 20 3d 20 74 68 69 73 2e 5f 6d 65 72 67 65 72 73 5b 69 74 65 72 61 74 6f 72 5d 3b 0d 0a 09 09 09 09 6d 65 72 67 65 Data Ascii: n,merge = null,iterator = this._items.length,grid = !this.settings.autoWidth,widths = [];cache.items = {merge: false,width: width};while (iterator--) {merge = this._mergers[iterator];merge
2024-12-24 15:05:01 UTC	1338	IN	Data Raw: 7b 0d 0a 09 09 09 09 72 65 74 75 72 6e 20 31 3b 0d 0a 09 09 09 7d 29 3b 0d 0a 0d 0a 09 09 09 74 68 69 73 2e 72 65 66 72 65 73 68 28 29 3b 0d 0a 0d 0a 09 09 09 72 65 74 75 72 6e 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2f 2f 20 61 70 70 65 6e 64 20 63 6f 6e 74 65 6e 74 0d 0a 09 09 74 68 69 73 2e 72 65 70 6c 61 63 65 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 28 29 2e 6e 6f 74 28 74 68 69 73 2e 24 73 74 61 67 65 2e 70 61 72 65 6e 74 28 29 29 29 3b 0d 0a 0d 0a 09 09 2f 2f 20 63 68 65 63 6b 20 76 69 73 69 62 69 6c 69 74 79 0d 0a 09 09 69 66 20 28 74 68 69 73 2e 69 73 56 69 73 69 62 6c 65 28 29 29 20 7b 0d 0a 09 09 09 2f 2f 20 75 70 64 61 74 65 20 76 69 65 77 0d 0a 09 09 09 74 68 69 73 2e 72 65 66 72 65 73 68 28 29 3b 0d 0a 09 09 7d 20 65 Data Ascii: {return 1;});this.refresh();return;}// append contentthis.replace(this.$element.children().not(this.$stage.parent()));// check visibilityif (this.isVisible()) {// update viewthis.refresh();} e
2024-12-24 15:05:01 UTC	1338	IN	Data Raw: 79 6f 75 20 6b 6e 6f 77 20 74 68 65 20 63 61 72 6f 75 73 65 6c 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 62 65 20 76 69 73 69 62 6c 65 20 79 6f 75 20 63 61 6e 20 73 65 74 20 60 63 68 65 63 6b 56 69 73 69 62 69 6c 69 74 79 60 20 74 6f 20 60 66 61 6c 73 65 60 20 74 6f 0d 0a 09 20 2a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 72 65 76 65 6e 74 20 74 68 65 20 65 78 70 65 6e 73 69 76 65 20 62 72 6f 77 73 65 72 20 6c 61 79 6f 75 74 20 66 6f 72 63 65 64 20 72 65 66 6c 6f 77 20 74 68 65 20 24 65 6c 65 6d 65 6e 74 2e 69 73 28 27 3a 76 69 73 69 62 6c 65 27 29 20 64 6f 65 73 0d 0a 09 20 2a 2f 0d 0a 09 4f 77 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 56 69 73 69 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 72 65 74 75 72 6e 20 74 Data Ascii: you know the carousel will always be visible you can set `checkVisibility` to `false` to * prevent the expensive browser layout forced reflow the $element.is(':visible') does */Owl.prototype.isVisible = function() {return t
2024-12-24 15:05:01 UTC	2093	IN	Data Raw: 29 5c 5c 53 2b 5c 5c 73 27 2c 20 27 67 27 29 2c 20 27 24 31 27 20 2b 20 6d 61 74 63 68 29 0d 0a 09 09 09 09 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 74 68 69 73 2e 74 72 69 67 67 65 72 28 27 63 68 61 6e 67 65 27 2c 20 7b 20 70 72 6f 70 65 72 74 79 3a 20 7b 20 6e 61 6d 65 3a 20 27 73 65 74 74 69 6e 67 73 27 2c 20 76 61 6c 75 65 3a 20 73 65 74 74 69 6e 67 73 20 7d 20 7d 29 3b 0d 0a 09 09 74 68 69 73 2e 5f 62 72 65 61 6b 70 6f 69 6e 74 20 3d 20 6d 61 74 63 68 3b 0d 0a 09 09 74 68 69 73 2e 73 65 74 74 69 6e 67 73 20 3d 20 73 65 74 74 69 6e 67 73 3b 0d 0a 09 09 74 68 69 73 2e 69 6e 76 61 6c 69 64 61 74 65 28 27 73 65 74 74 69 6e 67 73 27 29 3b 0d 0a 09 09 74 68 69 73 2e 74 72 69 67 67 65 72 28 27 63 68 61 6e 67 65 64 27 2c 20 7b 20 70 72 6f 70 Data Ascii: )\\S+\\s', 'g'), '$1' + match));}}this.trigger('change', { property: { name: 'settings', value: settings } });this._breakpoint = match;this.settings = settings;this.invalidate('settings');this.trigger('changed', { prop
2024-12-24 15:05:01 UTC	1338	IN	Data Raw: 72 6f 74 6f 74 79 70 65 2e 72 65 66 72 65 73 68 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 74 68 69 73 2e 65 6e 74 65 72 28 27 72 65 66 72 65 73 68 69 6e 67 27 29 3b 0d 0a 09 09 74 68 69 73 2e 74 72 69 67 67 65 72 28 27 72 65 66 72 65 73 68 27 29 3b 0d 0a 0d 0a 09 09 74 68 69 73 2e 73 65 74 75 70 28 29 3b 0d 0a 0d 0a 09 09 74 68 69 73 2e 6f 70 74 69 6f 6e 73 4c 6f 67 69 63 28 29 3b 0d 0a 0d 0a 09 09 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 66 72 65 73 68 43 6c 61 73 73 29 3b 0d 0a 0d 0a 09 09 74 68 69 73 2e 75 70 64 61 74 65 28 29 3b 0d 0a 0d 0a 09 09 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 Data Ascii: rototype.refresh = function() {this.enter('refreshing');this.trigger('refresh');this.setup();this.optionsLogic();this.$element.addClass(this.options.refreshClass);this.update();this.$element.removeClass(this.options.r
2024-12-24 15:05:01 UTC	2676	IN	Data Raw: 2e 24 73 74 61 67 65 2e 6f 6e 28 24 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 2e 65 6e 64 20 2b 20 27 2e 6f 77 6c 2e 63 6f 72 65 27 2c 20 24 2e 70 72 6f 78 79 28 74 68 69 73 2e 6f 6e 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 2c 20 74 68 69 73 29 29 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 69 66 20 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 72 65 73 70 6f 6e 73 69 76 65 20 21 3d 3d 20 66 61 6c 73 65 29 20 7b 0d 0a 09 09 09 74 68 69 73 2e 6f 6e 28 77 69 6e 64 6f 77 2c 20 27 72 65 73 69 7a 65 27 2c 20 74 68 69 73 2e 5f 68 61 6e 64 6c 65 72 73 2e 6f 6e 54 68 72 6f 74 74 6c 65 64 52 65 73 69 7a 65 29 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 69 66 20 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6d 6f 75 73 65 44 72 61 67 29 20 7b 0d 0a 09 09 09 74 68 69 73 Data Ascii: .$stage.on($.support.transition.end + '.owl.core', $.proxy(this.onTransitionEnd, this));}if (this.settings.responsive !== false) {this.on(window, 'resize', this._handlers.onThrottledResize);}if (this.settings.mouseDrag) {this
2024-12-24 15:05:01 UTC	2676	IN	Data Raw: 66 66 65 72 65 6e 63 65 28 74 68 69 73 2e 5f 64 72 61 67 2e 70 6f 69 6e 74 65 72 2c 20 74 68 69 73 2e 70 6f 69 6e 74 65 72 28 65 76 65 6e 74 29 29 2c 0d 0a 09 09 09 73 74 61 67 65 20 3d 20 74 68 69 73 2e 64 69 66 66 65 72 65 6e 63 65 28 74 68 69 73 2e 5f 64 72 61 67 2e 73 74 61 67 65 2e 73 74 61 72 74 2c 20 64 65 6c 74 61 29 3b 0d 0a 0d 0a 09 09 69 66 20 28 21 74 68 69 73 2e 69 73 28 27 64 72 61 67 67 69 6e 67 27 29 29 20 7b 0d 0a 09 09 09 72 65 74 75 72 6e 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0d 0a 0d 0a 09 09 69 66 20 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6c 6f 6f 70 29 20 7b 0d 0a 09 09 09 6d 69 6e 69 6d 75 6d 20 3d 20 74 68 69 73 2e 63 6f 6f 72 64 69 6e 61 74 65 73 28 74 68 69 Data Ascii: fference(this._drag.pointer, this.pointer(event)),stage = this.difference(this._drag.stage.start, delta);if (!this.is('dragging')) {return;}event.preventDefault();if (this.settings.loop) {minimum = this.coordinates(thi
2024-12-24 15:05:01 UTC	2676	IN	Data Raw: 72 65 63 74 69 6f 6e 20 3d 3d 3d 20 27 6c 65 66 74 27 20 26 26 20 63 6f 6f 72 64 69 6e 61 74 65 20 3e 20 76 61 6c 75 65 20 2d 20 70 75 6c 6c 20 26 26 20 63 6f 6f 72 64 69 6e 61 74 65 20 3c 20 76 61 6c 75 65 20 2b 20 70 75 6c 6c 29 20 7b 0d 0a 09 09 09 09 09 70 6f 73 69 74 69 6f 6e 20 3d 20 69 6e 64 65 78 3b 0d 0a 09 09 09 09 2f 2f 20 6f 6e 20 61 20 72 69 67 68 74 20 70 75 6c 6c 2c 20 63 68 65 63 6b 20 6f 6e 20 70 72 65 76 69 6f 75 73 20 69 6e 64 65 78 0d 0a 09 09 09 09 2f 2f 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 74 72 61 63 74 20 77 69 64 74 68 20 66 72 6f 6d 20 76 61 6c 75 65 20 61 6e 64 20 73 65 74 20 70 6f 73 69 74 69 6f 6e 20 3d 20 69 6e 64 65 78 20 2b 20 31 0d 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 64 69 72 65 63 74 69 6f 6e 20 3d 3d 3d Data Ascii: rection === 'left' && coordinate > value - pull && coordinate < value + pull) {position = index;// on a right pull, check on previous index// to do so, subtract width from value and set position = index + 1} else if (direction ===
2024-12-24 15:05:01 UTC	5352	IN	Data Raw: 09 09 76 61 72 20 65 76 65 6e 74 20 3d 20 74 68 69 73 2e 74 72 69 67 67 65 72 28 27 63 68 61 6e 67 65 27 2c 20 7b 20 70 72 6f 70 65 72 74 79 3a 20 7b 20 6e 61 6d 65 3a 20 27 70 6f 73 69 74 69 6f 6e 27 2c 20 76 61 6c 75 65 3a 20 70 6f 73 69 74 69 6f 6e 20 7d 20 7d 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 65 76 65 6e 74 2e 64 61 74 61 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0d 0a 09 09 09 09 70 6f 73 69 74 69 6f 6e 20 3d 20 74 68 69 73 2e 6e 6f 72 6d 61 6c 69 7a 65 28 65 76 65 6e 74 2e 64 61 74 61 29 3b 0d 0a 09 09 09 7d 0d 0a 0d 0a 09 09 09 74 68 69 73 2e 5f 63 75 72 72 65 6e 74 20 3d 20 70 6f 73 69 74 69 6f 6e 3b 0d 0a 0d 0a 09 09 09 74 68 69 73 2e 69 6e 76 61 6c 69 64 61 74 65 28 27 70 6f 73 69 74 69 6f 6e 27 29 3b 0d 0a 0d 0a 09 09 09 74 68 69 Data Ascii: var event = this.trigger('change', { property: { name: 'position', value: position } });if (event.data !== undefined) {position = this.normalize(event.data);}this._current = position;this.invalidate('position');thi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49735	151.101.193.229	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:00 UTC	403	OUT	GET /gh/gitbrent/bootstrap4-toggle@3.6.1/js/bootstrap4-toggle.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:01 UTC	774	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4431 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 3.6.1 X-JSD-Version-Type: version ETag: W/"114f-S8/fLv/lg0XGntYdE626VBpCgeI" Accept-Ranges: bytes Date: Tue, 24 Dec 2024 15:05:00 GMT Age: 1154395 X-Served-By: cache-fra-eddf8230154-FRA, cache-ewr-kewr1740058-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-24 15:05:01 UTC	1378	IN	Data Raw: 2f 2a 5c 0a 7c 2a 7c 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 7c 2a 7c 20 42 6f 6f 74 73 74 72 61 70 20 54 6f 67 67 6c 65 3a 20 62 6f 6f 74 73 74 72 61 70 34 2d 74 6f 67 67 6c 65 2e 6a 73 20 76 33 2e 36 2e 31 0a 7c 2a 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 62 72 65 6e 74 2e 67 69 74 68 75 62 2e 69 6f 2f 62 6f 6f 74 73 74 72 61 70 34 2d 74 6f 67 67 6c 65 2f 0a 7c 2a 7c 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /\\|\| ========================================================================\|\| Bootstrap Toggle: bootstrap4-toggle.js v3.6.1\|\| https://gitbrent.github.io/bootstrap4-toggle/\|*\| ======================================================================
2024-12-24 15:05:01 UTC	1378	IN	Data Raw: 7a 65 3f 22 62 74 6e 2d 73 6d 22 3a 22 6d 69 6e 69 22 3d 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 69 7a 65 7c 7c 22 78 73 22 3d 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 69 7a 65 3f 22 62 74 6e 2d 78 73 22 3a 22 22 2c 65 3d 61 28 27 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 27 2b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 70 72 6f 70 28 22 69 64 22 29 2b 27 22 20 63 6c 61 73 73 3d 22 62 74 6e 22 3e 27 29 2e 68 74 6d 6c 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 29 2e 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 5f 6f 6e 73 74 79 6c 65 2b 22 20 22 2b 74 29 2c 73 3d 61 28 27 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 27 2b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 70 72 6f 70 28 22 69 64 22 29 2b 27 22 20 63 6c 61 73 73 3d 22 62 74 6e 22 3e 27 29 2e 68 74 Data Ascii: ze?"btn-sm":"mini"===this.options.size\|\|"xs"===this.options.size?"btn-xs":"",e=a('<label for="'+this.$element.prop("id")+'" class="btn">').html(this.options.on).addClass(this._onstyle+" "+t),s=a('<label for="'+this.$element.prop("id")+'" class="btn">').ht
2024-12-24 15:05:01 UTC	1378	IN	Data Raw: 72 6f 74 6f 74 79 70 65 2e 6f 66 66 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 70 72 6f 70 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 21 31 3b 74 68 69 73 2e 24 74 6f 67 67 6c 65 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 5f 6f 6e 73 74 79 6c 65 29 2e 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 5f 6f 66 66 73 74 79 6c 65 2b 22 20 6f 66 66 22 29 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 70 72 6f 70 28 22 63 68 65 63 6b 65 64 22 2c 21 31 29 2c 74 7c 7c 74 68 69 73 2e 74 72 69 67 67 65 72 28 29 7d 2c 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 74 6f 67 67 6c 65 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 64 69 73 61 62 6c 65 Data Ascii: rototype.off=function(t){if(this.$element.prop("disabled"))return!1;this.$toggle.removeClass(this._onstyle).addClass(this._offstyle+" off"),this.$element.prop("checked",!1),t\|\|this.trigger()},l.prototype.enable=function(){this.$toggle.removeClass("disable
2024-12-24 15:05:01 UTC	297	IN	Data Raw: 2c 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 22 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 74 6f 67 67 6c 65 5d 22 29 2e 62 6f 6f 74 73 74 72 61 70 54 6f 67 67 6c 65 28 29 7d 29 2c 61 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 74 6f 67 67 6c 65 22 2c 22 64 69 76 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 74 6f 67 67 6c 65 5d 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 28 74 68 69 73 29 2e 66 69 6e 64 28 22 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 22 29 2e 62 6f 6f 74 73 74 72 61 70 54 6f 67 67 6c 65 28 22 74 6f 67 67 6c 65 22 29 2c 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 29 7d 28 6a 51 75 65 72 79 29 3b 0a 2f 2f 23 20 73 6f 75 72 Data Ascii: ,a(function(){a("input[type=checkbox][data-toggle^=toggle]").bootstrapToggle()}),a(document).on("click.bs.toggle","div[data-toggle^=toggle]",function(t){a(this).find("input[type=checkbox]").bootstrapToggle("toggle"),t.preventDefault()})}(jQuery);//# sour

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49737	104.17.25.14	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:00 UTC	400	OUT	GET /ajax/libs/bootstrap-slider/4.5.2/bootstrap-slider.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:01 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:01 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03d8e-6002" Last-Modified: Mon, 04 May 2020 16:06:38 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 2 Expires: Sun, 14 Dec 2025 15:05:01 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cL%2BAzxcWsuLtSDzNyHmOEEvQMe2GxMgBc4%2BbztMPL0AX4MHBbk4Am61hhtGVycfu8moaCaEgMmh5va7kQJq3vPmRLONBgRpKuCvAzYLFFxNAdt1i1VBMTJroFmSKFaBGR93%2FSjPV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f717cb5aa3c42ec-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 15:05:01 UTC	416	IN	Data Raw: 36 30 30 32 0d 0a 2f 2a 21 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 56 45 52 53 49 4f 4e 20 20 34 2e 35 2e 32 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 2f 2a 21 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 20 62 6f 6f 74 73 74 72 61 70 2d 73 6c Data Ascii: 6002/! ======================================================= VERSION 4.5.2 ========================================================= //! ========================================================= bootstrap-sl
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 69 6f 6e 0a 20 2a 0a 20 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 2a 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 20 6f 66 20 74 68 65 20 4c 69 63 65 6e 73 65 20 61 74 0a 20 2a 0a 20 2a 20 Data Ascii: ion * * ========================================================= * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * *
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 22 6e 6f 20 73 75 63 68 20 6d 65 74 68 6f 64 20 27 22 2b 65 2b 22 27 20 66 6f 72 20 22 2b 62 2b 22 20 69 6e 73 74 61 6e 63 65 22 29 3b 65 6c 73 65 20 66 28 22 63 61 6e 6e 6f 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 73 20 6f 6e 20 22 2b 62 2b 22 20 70 72 69 6f 72 20 74 6f 20 69 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 3b 20 61 74 74 65 6d 70 74 65 64 20 74 6f 20 63 61 6c 6c 20 27 22 2b 65 2b 22 27 22 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 76 61 72 20 6d 3d 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 61 2e 64 61 74 61 28 74 68 69 73 2c 62 29 3b 72 65 74 75 72 6e 20 64 3f 28 64 2e 6f 70 74 69 6f 6e 28 65 29 2c 64 2e 5f 69 6e 69 74 28 29 29 3a 28 64 3d 6e 65 77 20 63 28 74 68 69 73 2c 65 29 2c 61 2e 64 61 74 61 28 74 68 69 73 Data Ascii: "no such method '"+e+"' for "+b+" instance");else f("cannot call methods on "+b+" prior to initialization; attempted to call '"+e+"'")}return this}var m=this.map(function(){var d=a.data(this,b);return d?(d.option(e),d._init()):(d=new c(this,e),a.data(this
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 67 68 22 2c 6d 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 6d 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 20 6d 69 6e 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 22 2c 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 6e 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 20 6d 61 78 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 22 2c 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6b 29 2c 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 2c 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6c 29 2c 74 68 69 73 2e 74 69 63 6b 73 3d 5b 5d 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 69 63 Data Ascii: gh",m=document.createElement("div"),m.className="slider-handle min-slider-handle",n=document.createElement("div"),n.className="slider-handle max-slider-handle",r.appendChild(k),r.appendChild(j),r.appendChild(l),this.ticks=[],Array.isArray(this.options.tic
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 29 2c 74 68 69 73 2e 73 6c 69 64 65 72 45 6c 65 6d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 76 29 2c 74 68 69 73 2e 73 6c 69 64 65 72 45 6c 65 6d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 77 29 2c 74 68 69 73 2e 73 6c 69 64 65 72 45 6c 65 6d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 78 29 2c 74 68 69 73 2e 74 69 63 6b 4c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 26 26 74 68 69 73 2e 73 6c 69 64 65 72 45 6c 65 6d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 2e 74 69 63 6b 4c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 29 2c 71 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 68 69 73 2e 73 6c 69 64 65 72 45 6c 65 6d 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 7d 69 66 28 Data Ascii: ),this.sliderElem.appendChild(v),this.sliderElem.appendChild(w),this.sliderElem.appendChild(x),this.tickLabelContainer&&this.sliderElem.appendChild(this.tickLabelContainer),q.insertBefore(this.sliderElem,this.element),this.element.style.display="none"}if(
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 69 73 29 2c 5b 74 68 69 73 2e 68 61 6e 64 6c 65 31 2c 74 68 69 73 2e 68 61 6e 64 6c 65 32 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 5f 72 65 6d 6f 76 65 50 72 6f 70 65 72 74 79 28 61 2c 22 6c 65 66 74 22 29 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 50 72 6f 70 65 72 74 79 28 61 2c 22 74 6f 70 22 29 7d 2c 74 68 69 73 29 2c 5b 74 68 69 73 2e 74 6f 6f 6c 74 69 70 2c 74 68 69 73 2e 74 6f 6f 6c 74 69 70 5f 6d 69 6e 2c 74 68 69 73 2e 74 6f 6f 6c 74 69 70 5f 6d 61 78 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 5f 72 65 6d 6f 76 65 50 72 6f 70 65 72 74 79 28 61 2c 22 6c 65 66 74 22 29 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 50 72 6f 70 65 72 74 79 28 61 2c 22 74 6f 70 22 29 2c 74 68 69 73 2e Data Ascii: is),[this.handle1,this.handle2].forEach(function(a){this._removeProperty(a,"left"),this._removeProperty(a,"top")},this),[this.tooltip,this.tooltip_min,this.tooltip_max].forEach(function(a){this._removeProperty(a,"left"),this._removeProperty(a,"top"),this.
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 70 74 69 6f 6e 73 2e 74 69 63 6b 73 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 69 6e 3d 4d 61 74 68 2e 6d 69 6e 2e 61 70 70 6c 79 28 4d 61 74 68 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 69 63 6b 73 29 29 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 29 3f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 61 6e 67 65 3d 21 30 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 61 6e 67 65 26 26 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 3d 5b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 78 5d 29 2c 74 68 69 73 2e 74 72 61 63 6b 4c 6f 77 3d 6b 7c 7c 74 68 69 73 2e 74 72 61 63 6b 4c 6f 77 2c 74 68 69 73 2e 74 72 61 63 6b 53 65 6c 65 63 74 69 Data Ascii: ptions.ticks),this.options.min=Math.min.apply(Math,this.options.ticks)),Array.isArray(this.options.value)?this.options.range=!0:this.options.range&&(this.options.value=[this.options.value,this.options.max]),this.trackLow=k\|\|this.trackLow,this.trackSelecti
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 63 68 43 61 70 61 62 6c 65 26 26 74 68 69 73 2e 73 6c 69 64 65 72 45 6c 65 6d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 74 68 69 73 2e 6d 6f 75 73 65 64 6f 77 6e 2c 21 31 29 2c 74 68 69 73 2e 73 6c 69 64 65 72 45 6c 65 6d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 74 68 69 73 2e 6d 6f 75 73 65 64 6f 77 6e 2c 21 31 29 2c 22 68 69 64 65 22 3d 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 6f 6f 6c 74 69 70 3f 28 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 74 6f 6f 6c 74 69 70 2c 22 68 69 64 65 22 29 2c 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 74 6f 6f 6c 74 69 70 5f 6d 69 6e 2c 22 68 69 64 65 22 29 2c 74 68 69 73 2e 5f 61 64 Data Ascii: chCapable&&this.sliderElem.addEventListener("touchstart",this.mousedown,!1),this.sliderElem.addEventListener("mousedown",this.mousedown,!1),"hide"===this.options.tooltip?(this._addClass(this.tooltip,"hide"),this._addClass(this.tooltip_min,"hide"),this._ad
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 6d 69 6e 3f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 69 6e 3a 63 3e 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 78 3f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 78 3a 63 7d 2c 74 6f 50 65 72 63 65 6e 74 61 67 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 78 3d 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 69 6e 3f 30 3a 31 30 30 2a 28 61 2d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 69 6e 29 2f 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 78 2d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 69 6e 29 7d 7d 2c 6c 6f 67 61 72 69 74 68 6d 69 63 3a 7b 74 6f 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3d 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 69 6e 3f 30 3a Data Ascii: min?this.options.min:c>this.options.max?this.options.max:c},toPercentage:function(a){return this.options.max===this.options.min?0:100*(a-this.options.min)/(this.options.max-this.options.min)}},logarithmic:{toValue:function(a){var b=0===this.options.min?0:
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 69 6e 2c 4d 61 74 68 2e 6d 69 6e 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 78 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 5b 30 5d 29 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 5b 31 5d 3d 4d 61 74 68 2e 6d 61 78 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 69 6e 2c 4d 61 74 68 2e 6d 69 6e 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 78 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 5b 31 5d 29 29 29 3a 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 3d 64 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 76 61 6c 75 65 3d 5b 4d 61 74 68 2e 6d 61 78 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 69 6e 2c 4d 61 74 Data Ascii: is.options.min,Math.min(this.options.max,this.options.value[0])),this.options.value[1]=Math.max(this.options.min,Math.min(this.options.max,this.options.value[1]))):(this.options.value=d(this.options.value),this.options.value=[Math.max(this.options.min,Mat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49736	104.17.25.14	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:00 UTC	388	OUT	GET /ajax/libs/popper.js/1.16.0/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:01 UTC	956	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:01 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-5309" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 295239 Expires: Sun, 14 Dec 2025 15:05:01 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m4%2BtrTPnIAC5bjy0ZmLIBQkVXb8OBkV8Lgy1AzPgKeIRTJPzhDseyIR58Azc7ONQza38wio4Jx3L0XnBcx292PVexoVTHmkJmBULsW24auMxAV14loTgpA%2FAYJ5oo8rp7YXZ31vv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f717cb5aa19c327-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 15:05:01 UTC	413	IN	Data Raw: 35 33 30 39 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 39 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 5309/* Copyright (C) Federico Zivolo 2019 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2c 6e 3d 6f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6e 5b 74 5d 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 Data Ascii: odeType)return[];var o=e.ownerDocument.defaultView,n=o.getComputedStyle(e,null);return t?n[t]:n}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.owner
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 2c 74 29 3a 61 28 65 2c 64 28 74 29 2e 68 6f 73 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 76 61 72 20 74 3d 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 27 74 6f 70 27 2c 6f 3d 27 74 6f 70 27 3d 3d 3d 74 3f 27 73 63 72 6f 6c 6c 54 6f 70 27 3a 27 73 63 72 6f 6c 6c 4c 65 66 74 27 2c 6e 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3b 69 66 28 27 42 4f 44 59 27 3d 3d 3d 6e 7c 7c 27 48 54 4d 4c 27 3d 3d 3d 6e 29 7b 76 61 72 20 69 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 73 63 72 6f 6c 6c 69 6e 67 45 6c 65 6d 65 6e 74 7c 7c 69 3b 72 65 Data Ascii: ,t):a(e,d(t).host)}function l(e){var t=1<arguments.length&&void 0!==arguments[1]?arguments[1]:'top',o='top'===t?'scrollTop':'scrollLeft',n=e.nodeName;if('BODY'===n\|\|'HTML'===n){var i=e.ownerDocument.documentElement,r=e.ownerDocument.scrollingElement\|\|i;re
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 7c 7c 70 2e 77 69 64 74 68 2c 61 3d 73 2e 68 65 69 67 68 74 7c 7c 65 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7c 7c 70 2e 68 65 69 67 68 74 2c 66 3d 65 2e 6f 66 66 73 65 74 57 69 64 74 68 2d 64 2c 68 3d 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2d 61 3b 69 66 28 66 7c 7c 68 29 7b 76 61 72 20 75 3d 74 28 65 29 3b 66 2d 3d 6d 28 75 2c 27 78 27 29 2c 68 2d 3d 6d 28 75 2c 27 79 27 29 2c 70 2e 77 69 64 74 68 2d 3d 66 2c 70 2e 68 65 69 67 68 74 2d 3d 68 7d 72 65 74 75 72 6e 20 67 28 70 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 6f 29 7b 76 61 72 20 69 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 70 3d 72 28 31 30 29 2c 73 3d 27 48 54 4d Data Ascii: \|\|p.width,a=s.height\|\|e.clientHeight\|\|p.height,f=e.offsetWidth-d,h=e.offsetHeight-a;if(f\|\|h){var u=t(e);f-=m(u,'x'),h-=m(u,'y'),p.width-=f,p.height-=h}return g(p)}function b(e,o){var i=2<arguments.length&&void 0!==arguments[2]&&arguments[2],p=r(10),s='HTM
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 65 6d 65 6e 74 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 2c 72 2c 70 29 7b 76 61 72 20 73 3d 34 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 34 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 34 5d 2c 64 3d 7b 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 7d 2c 6c 3d 73 3f 45 28 65 29 3a 61 28 65 2c 69 28 74 29 29 3b 69 66 28 27 76 69 65 77 70 6f 72 74 27 3d 3d 3d 70 29 64 3d 77 28 6c 2c 73 29 3b 65 6c 73 65 7b 76 61 72 20 66 3b 27 73 63 72 6f 6c 6c 50 61 72 65 6e 74 27 3d 3d 3d 70 3f 28 66 3d 6e 28 6f 28 74 29 29 2c 27 42 4f 44 59 27 3d 3d 3d 66 2e 6e 6f 64 65 4e 61 6d 65 26 26 28 66 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 29 3a 27 77 69 6e 64 Data Ascii: ement}function v(e,t,r,p){var s=4<arguments.length&&void 0!==arguments[4]&&arguments[4],d={top:0,left:0},l=s?E(e):a(e,i(t));if('viewport'===p)d=w(l,s);else{var f;'scrollParent'===p?(f=n(o(t)),'BODY'===f.nodeName&&(f=e.ownerDocument.documentElement)):'wind
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 29 29 3b 72 65 74 75 72 6e 20 62 28 6f 2c 72 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2c 6f 3d 74 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 29 2c 6e 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 54 6f 70 7c 7c 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 7c 7c 30 29 2c 69 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 4c 65 66 74 7c 7c 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 52 69 67 68 74 7c 7c 30 29 2c 72 3d 7b 77 69 64 74 68 3a 65 2e 6f 66 66 73 65 74 57 69 64 74 68 2b 69 2c 68 65 69 67 68 74 3a 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 Data Ascii: ));return b(o,r,n)}function S(e){var t=e.ownerDocument.defaultView,o=t.getComputedStyle(e),n=parseFloat(o.marginTop\|\|0)+parseFloat(o.marginBottom\|\|0),i=parseFloat(o.marginLeft\|\|0)+parseFloat(o.marginRight\|\|0),r={width:e.offsetWidth+i,height:e.offsetHeight
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 65 72 2c 74 68 69 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 6f 73 69 74 69 6f 6e 46 69 78 65 64 29 2c 65 2e 70 6c 61 63 65 6d 65 6e 74 3d 4f 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 6c 61 63 65 6d 65 6e 74 2c 65 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 70 6f 70 70 65 72 2c 74 68 69 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 2e 66 6c 69 70 2e 62 6f 75 6e 64 61 72 69 65 73 45 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 2e 66 6c 69 70 2e 70 61 64 64 69 6e 67 29 2c 65 2e 6f 72 69 67 69 6e 61 6c 50 6c 61 63 65 6d 65 6e 74 3d 65 2e 70 6c 61 63 65 6d 65 6e 74 2c 65 2e 70 6f 73 69 74 69 6f 6e Data Ascii: er,this.reference,this.options.positionFixed),e.placement=O(this.options.placement,e.offsets.reference,this.popper,this.reference,this.options.modifiers.flip.boundariesElement,this.options.modifiers.flip.padding),e.originalPlacement=e.placement,e.position
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 4d 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c 6f 2c 69 29 2c 69 2e 70 75 73 68 28 70 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 74 2c 6f 2c 69 29 7b 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 3d 69 2c 41 28 65 29 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 72 65 73 69 7a 65 27 2c 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 3b 76 61 72 20 72 3d 6e 28 65 29 3b 72 65 74 75 72 6e 20 4d 28 72 2c 27 73 63 72 6f 6c 6c 27 2c 6f 2e 75 70 64 Data Ascii: '===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|M(n(p.parentNode),t,o,i),i.push(p)}function F(e,t,o,i){o.updateBound=i,A(e).addEventListener('resize',o.updateBound,{passive:!0});var r=n(e);return M(r,'scroll',o.upd
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 28 31 3d 3d 73 25 32 26 26 31 3d 3d 64 25 32 26 26 21 6c 26 26 74 3f 6e 2e 6c 65 66 74 2d 31 3a 6e 2e 6c 65 66 74 29 2c 74 6f 70 3a 6d 28 6e 2e 74 6f 70 29 2c 62 6f 74 74 6f 6d 3a 6d 28 6e 2e 62 6f 74 74 6f 6d 29 2c 72 69 67 68 74 3a 66 28 6e 2e 72 69 67 68 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 2c 74 2c 6f 29 7b 76 61 72 20 6e 3d 44 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 65 2e 6e 61 6d 65 3b 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 69 3d 21 21 6e 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 6e 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 69 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b Data Ascii: (1==s%2&&1==d%2&&!l&&t?n.left-1:n.left),top:m(n.top),bottom:m(n.bottom),right:f(n.right)}}function K(e,t,o){var n=D(e,function(e){var o=e.name;return o===t}),i=!!n&&e.some(function(e){return e.name===o&&e.enabled&&e.order<n.order});if(!i){var r='`'+t+'`';
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 5d 5d 29 2c 5b 70 5b 73 5d 2e 73 70 6c 69 74 28 64 29 5b 31 5d 5d 2e 63 6f 6e 63 61 74 28 70 2e 73 6c 69 63 65 28 73 2b 31 29 29 5d 3b 72 65 74 75 72 6e 20 61 3d 61 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 69 3d 28 31 3d 3d 3d 6e 3f 21 72 3a 72 29 3f 27 68 65 69 67 68 74 27 3a 27 77 69 64 74 68 27 2c 70 3d 21 31 3b 72 65 74 75 72 6e 20 65 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e Data Ascii: ]]),[p[s].split(d)[1]].concat(p.slice(s+1))];return a=a.map(function(e,n){var i=(1===n?!r:r)?'height':'width',p=!1;return e.reduce(function(e,t){return''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49738	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:00 UTC	708	OUT	GET /Content/script/owl.navigation.js HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
2024-12-24 15:05:01 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:01 GMT Content-Type: text/javascript Content-Length: 11615 Connection: close Set-Cookie: AWSALB=NrKLvwtm045yUhHr1il3mSv9c+sXsYWk3sGZF/06+sdiIIXm7Qd98haLcEyqp3h4iJEjQWS/pJqic6x0NuyWyi3/lvZVIOADbyE/dVYW5XVpT3+pK1dnfIYaErcB; Expires=Tue, 31 Dec 2024 15:05:01 GMT; Path=/ Set-Cookie: AWSALBCORS=NrKLvwtm045yUhHr1il3mSv9c+sXsYWk3sGZF/06+sdiIIXm7Qd98haLcEyqp3h4iJEjQWS/pJqic6x0NuyWyi3/lvZVIOADbyE/dVYW5XVpT3+pK1dnfIYaErcB; Expires=Tue, 31 Dec 2024 15:05:01 GMT; Path=/; SameSite=None Cache-Control: no-cache Last-Modified: Fri, 12 Apr 2024 12:56:16 GMT Accept-Ranges: bytes ETag: "0d821ced88cda1:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:01 UTC	4518	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 4e 61 76 69 67 61 74 69 6f 6e 20 50 6c 75 67 69 6e 0d 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 32 2e 33 2e 34 0d 0a 20 2a 20 40 61 75 74 68 6f 72 20 41 72 74 75 73 20 4b 6f 6c 61 6e 6f 77 73 6b 69 0d 0a 20 2a 20 40 61 75 74 68 6f 72 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0d 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4d 49 54 29 0d 0a 20 2a 2f 0d 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 24 2c 20 77 69 6e 64 6f 77 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0d 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0d 0a 0d 0a 09 2f 2a 2a 0d 0a 09 20 2a 20 43 72 65 61 74 65 73 20 74 68 65 20 6e 61 76 69 67 61 74 69 6f 6e 20 70 6c 75 67 69 6e 2e 0d 0a 09 20 2a 20 40 63 6c 61 Data Ascii: /** * Navigation Plugin * @version 2.3.4 * @author Artus Kolanowski * @author David Deutsch * @license The MIT License (MIT) /;(function($, window, document, undefined) {'use strict';/* * Creates the navigation plugin. * @cla
2024-12-24 15:05:01 UTC	4014	IN	Data Raw: 28 65 29 20 7b 0d 0a 09 09 09 09 74 68 69 73 2e 6e 65 78 74 28 73 65 74 74 69 6e 67 73 2e 6e 61 76 53 70 65 65 64 29 3b 0d 0a 09 09 09 7d 2c 20 74 68 69 73 29 29 3b 0d 0a 0d 0a 09 09 2f 2f 20 63 72 65 61 74 65 20 44 4f 4d 20 73 74 72 75 63 74 75 72 65 20 66 6f 72 20 61 62 73 6f 6c 75 74 65 20 6e 61 76 69 67 61 74 69 6f 6e 0d 0a 09 09 69 66 20 28 21 73 65 74 74 69 6e 67 73 2e 64 6f 74 73 44 61 74 61 29 20 7b 0d 0a 09 09 09 74 68 69 73 2e 5f 74 65 6d 70 6c 61 74 65 73 20 3d 20 5b 20 24 28 27 3c 62 75 74 74 6f 6e 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 6e 61 76 20 62 75 74 74 6f 6e 73 22 3e 27 29 0d 0a 09 09 09 09 2e 61 64 64 43 6c 61 73 73 28 73 65 74 74 69 6e 67 73 2e 64 6f 74 43 6c 61 73 73 29 0d 0a 09 09 09 09 2e Data Ascii: (e) {this.next(settings.navSpeed);}, this));// create DOM structure for absolute navigationif (!settings.dotsData) {this._templates = [ $('<button role="button" aria-label="nav buttons">').addClass(settings.dotClass).
2024-12-24 15:05:01 UTC	1338	IN	Data Raw: 09 74 68 69 73 2e 5f 63 6f 6e 74 72 6f 6c 73 2e 24 61 62 73 6f 6c 75 74 65 2e 63 68 69 6c 64 72 65 6e 28 29 2e 73 6c 69 63 65 28 64 69 66 66 65 72 65 6e 63 65 29 2e 72 65 6d 6f 76 65 28 29 3b 0d 0a 09 09 09 7d 0d 0a 0d 0a 09 09 09 74 68 69 73 2e 5f 63 6f 6e 74 72 6f 6c 73 2e 24 61 62 73 6f 6c 75 74 65 2e 66 69 6e 64 28 27 2e 61 63 74 69 76 65 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 61 63 74 69 76 65 27 29 3b 0d 0a 09 09 09 74 68 69 73 2e 5f 63 6f 6e 74 72 6f 6c 73 2e 24 61 62 73 6f 6c 75 74 65 2e 63 68 69 6c 64 72 65 6e 28 29 2e 65 71 28 24 2e 69 6e 41 72 72 61 79 28 74 68 69 73 2e 63 75 72 72 65 6e 74 28 29 2c 20 74 68 69 73 2e 5f 70 61 67 65 73 29 29 2e 61 64 64 43 6c 61 73 73 28 27 61 63 74 69 76 65 27 29 3b 0d 0a 09 09 7d 0d 0a 09 7d 3b 0d 0a Data Ascii: this._controls.$absolute.children().slice(difference).remove();}this._controls.$absolute.find('.active').removeClass('active');this._controls.$absolute.children().eq($.inArray(this.current(), this._pages)).addClass('active');}};
2024-12-24 15:05:01 UTC	1745	IN	Data Raw: 69 6f 6e 20 3d 20 24 2e 69 6e 41 72 72 61 79 28 74 68 69 73 2e 63 75 72 72 65 6e 74 28 29 2c 20 74 68 69 73 2e 5f 70 61 67 65 73 29 3b 0d 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 74 68 69 73 2e 5f 70 61 67 65 73 2e 6c 65 6e 67 74 68 3b 0d 0a 09 09 09 73 75 63 63 65 73 73 6f 72 20 3f 20 2b 2b 70 6f 73 69 74 69 6f 6e 20 3a 20 2d 2d 70 6f 73 69 74 69 6f 6e 3b 0d 0a 09 09 09 70 6f 73 69 74 69 6f 6e 20 3d 20 74 68 69 73 2e 5f 70 61 67 65 73 5b 28 28 70 6f 73 69 74 69 6f 6e 20 25 20 6c 65 6e 67 74 68 29 20 2b 20 6c 65 6e 67 74 68 29 20 25 20 6c 65 6e 67 74 68 5d 2e 73 74 61 72 74 3b 0d 0a 09 09 7d 20 65 6c 73 65 20 7b 0d 0a 09 09 09 70 6f 73 69 74 69 6f 6e 20 3d 20 74 68 69 73 2e 5f 63 6f 72 65 2e 72 65 6c 61 74 69 76 65 28 74 68 69 73 2e 5f 63 6f 72 65 2e 63 75 Data Ascii: ion = $.inArray(this.current(), this._pages);length = this._pages.length;successor ? ++position : --position;position = this._pages[((position % length) + length) % length].start;} else {position = this._core.relative(this._core.cu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49739	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:00 UTC	705	OUT	GET /Content/script/owl.support.js HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
2024-12-24 15:05:01 UTC	828	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:01 GMT Content-Type: text/javascript Content-Length: 2095 Connection: close Set-Cookie: AWSALB=Vmnm4vHzpKIQBP8LhJTcHoKihu1/vTdYm0agezAZIJg3d2/Obzy67EDMiXeMSKZO/WII7fblW0ZZvKqBiWrriCU6+9DL6iZC9XmShKAVMgNy+YAYb5uWDgEoM5p3; Expires=Tue, 31 Dec 2024 15:05:01 GMT; Path=/ Set-Cookie: AWSALBCORS=Vmnm4vHzpKIQBP8LhJTcHoKihu1/vTdYm0agezAZIJg3d2/Obzy67EDMiXeMSKZO/WII7fblW0ZZvKqBiWrriCU6+9DL6iZC9XmShKAVMgNy+YAYb5uWDgEoM5p3; Expires=Tue, 31 Dec 2024 15:05:01 GMT; Path=/; SameSite=None Cache-Control: no-cache Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:01 UTC	505	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 53 75 70 70 6f 72 74 20 50 6c 75 67 69 6e 0d 0a 20 2a 0d 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 32 2e 33 2e 34 0d 0a 20 2a 20 40 61 75 74 68 6f 72 20 56 69 76 69 64 20 50 6c 61 6e 65 74 20 53 6f 66 74 77 61 72 65 20 47 6d 62 48 0d 0a 20 2a 20 40 61 75 74 68 6f 72 20 41 72 74 75 73 20 4b 6f 6c 61 6e 6f 77 73 6b 69 0d 0a 20 2a 20 40 61 75 74 68 6f 72 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0d 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4d 49 54 29 0d 0a 20 2a 2f 0d 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 24 2c 20 77 69 6e 64 6f 77 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0d 0a 0d 0a 09 76 61 72 20 73 74 79 6c 65 20 3d 20 24 28 27 3c 73 75 70 70 6f 72 74 3e 27 Data Ascii: /** * Support Plugin * * @version 2.3.4 * @author Vivid Planet Software GmbH * @author Artus Kolanowski * @author David Deutsch * @license The MIT License (MIT) */;(function($, window, document, undefined) {var style = $('<support>'
2024-12-24 15:05:01 UTC	1590	IN	Data Raw: 69 74 69 6f 6e 65 6e 64 27 0d 0a 09 09 09 09 7d 0d 0a 09 09 09 7d 2c 0d 0a 09 09 09 61 6e 69 6d 61 74 69 6f 6e 3a 20 7b 0d 0a 09 09 09 09 65 6e 64 3a 20 7b 0d 0a 09 09 09 09 09 57 65 62 6b 69 74 41 6e 69 6d 61 74 69 6f 6e 3a 20 27 77 65 62 6b 69 74 41 6e 69 6d 61 74 69 6f 6e 45 6e 64 27 2c 0d 0a 09 09 09 09 09 4d 6f 7a 41 6e 69 6d 61 74 69 6f 6e 3a 20 27 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 27 2c 0d 0a 09 09 09 09 09 4f 41 6e 69 6d 61 74 69 6f 6e 3a 20 27 6f 41 6e 69 6d 61 74 69 6f 6e 45 6e 64 27 2c 0d 0a 09 09 09 09 09 61 6e 69 6d 61 74 69 6f 6e 3a 20 27 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 27 0d 0a 09 09 09 09 7d 0d 0a 09 09 09 7d 0d 0a 09 09 7d 2c 0d 0a 09 09 74 65 73 74 73 20 3d 20 7b 0d 0a 09 09 09 63 73 73 74 72 61 6e 73 66 6f 72 6d 73 3a 20 66 75 6e Data Ascii: itionend'}},animation: {end: {WebkitAnimation: 'webkitAnimationEnd',MozAnimation: 'animationend',OAnimation: 'oAnimationEnd',animation: 'animationend'}}},tests = {csstransforms: fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49740	104.18.11.207	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:00 UTC	382	OUT	GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:01 UTC	967	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:01 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"02d223393e00c273efdcb1ade8f4f8b1" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 11/20/2024 23:09:49 CDN-EdgeStorageId: 1070 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: abfc3042f61e0f6fc7cbb18b131e1ea3 CDN-Cache: HIT CF-Cache-Status: HIT Age: 2105301 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f717cb6dd8d4268-EWR alt-svc: h3=":443"; ma=86400
2024-12-24 15:05:01 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: 7bec/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 Data Ascii: ine(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.conf
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 6f 61 74 28 69 29 3b 72 65 74 75 72 6e 20 6f 7c 7c 73 3f 28 6e 3d 6e 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 31 65 33 2a 28 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 2c 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 74 29 2e 74 72 69 67 67 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 22 74 72 61 6e 73 69 Data Ascii: oat(i);return o\|\|s?(n=n.split(",")[0],i=i.split(",")[0],1e3*(parseFloat(n)+parseFloat(i))):0},reflow:function(t){return t.offsetHeight},triggerTransitionEnd:function(t){e(t).trigger("transitionend")},supportsTransitionEnd:function(){return Boolean("transi
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 2e 73 70 65 63 69 61 6c 5b 61 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 5d 3d 7b 62 69 6e 64 54 79 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 64 65 6c 65 67 61 74 65 54 79 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 68 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 65 28 74 2e 74 61 72 67 65 74 29 2e 69 73 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 74 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 3b 76 61 72 20 6c 3d 22 61 6c 65 72 74 22 2c 63 3d 65 2e 66 6e 5b 6c 5d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 6f 74 Data Ascii: .special[a.TRANSITION_END]={bindType:"transitionend",delegateType:"transitionend",handle:function(t){if(e(t.target).is(this))return t.handleObj.handler.apply(this,arguments)}};var l="alert",c=e.fn[l],h=function(){function t(t){this._element=t}var n=t.prot
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 2e 32 22 7d 7d 5d 29 2c 74 7d 28 29 3b 65 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 61 6c 65 72 74 2e 64 61 74 61 2d 61 70 69 22 2c 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 61 6c 65 72 74 22 5d 27 2c 68 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 68 29 29 2c 65 2e 66 6e 5b 6c 5d 3d 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 65 2e 66 6e 5b 6c 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 68 2c 65 2e 66 6e 5b 6c 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 6e 5b 6c 5d 3d 63 2c 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 75 3d 65 2e 66 6e 2e 62 75 74 74 6f 6e 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 Data Ascii: .2"}}]),t}();e(document).on("click.bs.alert.data-api",'[data-dismiss="alert"]',h._handleDismiss(new h)),e.fn[l]=h._jQueryInterface,e.fn[l].Constructor=h,e.fn[l].noConflict=function(){return e.fn[l]=c,h._jQueryInterface};var u=e.fn.button,d=function(){func
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 74 29 7b 76 61 72 20 6e 3d 74 2e 74 61 72 67 65 74 2c 69 3d 6e 3b 69 66 28 65 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 22 62 74 6e 22 29 7c 7c 28 6e 3d 65 28 6e 29 2e 63 6c 6f 73 65 73 74 28 22 2e 62 74 6e 22 29 5b 30 5d 29 2c 21 6e 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 29 3b 69 66 28 6f 26 26 28 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6f 2e 63 6c Data Ascii: t){var n=t.target,i=n;if(e(n).hasClass("btn")\|\|(n=e(n).closest(".btn")[0]),!n\|\|n.hasAttribute("disabled")\|\|n.classList.contains("disabled"))t.preventDefault();else{var o=n.querySelector('input:not([type="hidden"])');if(o&&(o.hasAttribute("disabled")\|\|o.cl
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 3a 22 28 6e 75 6d 62 65 72 7c 62 6f 6f 6c 65 61 6e 29 22 2c 6b 65 79 62 6f 61 72 64 3a 22 62 6f 6f 6c 65 61 6e 22 2c 73 6c 69 64 65 3a 22 28 62 6f 6f 6c 65 61 6e 7c 73 74 72 69 6e 67 29 22 2c 70 61 75 73 65 3a 22 28 73 74 72 69 6e 67 7c 62 6f 6f 6c 65 61 6e 29 22 2c 77 72 61 70 3a 22 62 6f 6f 6c 65 61 6e 22 2c 74 6f 75 63 68 3a 22 62 6f 6f 6c 65 61 6e 22 7d 2c 76 3d 7b 54 4f 55 43 48 3a 22 74 6f 75 63 68 22 2c 50 45 4e 3a 22 70 65 6e 22 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 5f 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d Data Ascii: :"(number\|boolean)",keyboard:"boolean",slide:"(boolean\|string)",pause:"(string\|boolean)",wrap:"boolean",touch:"boolean"},v={TOUCH:"touch",PEN:"pen"},b=function(){function t(t,e){this._items=null,this._interval=null,this._activeElement=null,this._isPaused=
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 6e 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 3b 69 66 28 21 28 74 3e 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7c 7c 74 3c 30 29 29 69 66 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 29 65 28 Data Ascii: sible:this.next).bind(this),this._config.interval))},n.to=function(t){var n=this;this._activeElement=this._element.querySelector(".active.carousel-item");var i=this._getItemIndex(this._activeElement);if(!(t>this._items.length-1\|\|t<0))if(this._isSliding)e(
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 29 7b 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 76 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 3f 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 3a 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 28 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 76 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 26 26 28 74 2e 74 6f 75 63 Data Ascii: ){t._pointerEvent&&v[e.originalEvent.pointerType.toUpperCase()]?t.touchStartX=e.originalEvent.clientX:t._pointerEvent\|\|(t.touchStartX=e.originalEvent.touches[0].clientX)},i=function(e){t._pointerEvent&&v[e.originalEvent.pointerType.toUpperCase()]&&(t.touc
2024-12-24 15:05:01 UTC	1369	IN	Data Raw: 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 29 3a 5b 5d 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 74 29 7d 2c 6e 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 6e 65 78 74 22 3d 3d 3d 74 2c 69 3d 22 70 72 65 76 22 3d 3d 3d 74 2c 6f 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 65 29 2c 73 3d 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 Data Ascii: temIndex=function(t){return this._items=t&&t.parentNode?[].slice.call(t.parentNode.querySelectorAll(".carousel-item")):[],this._items.indexOf(t)},n._getItemByDirection=function(t,e){var n="next"===t,i="prev"===t,o=this._getItemIndex(e),s=this._items.lengt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49741	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:01 UTC	696	OUT	GET /Content/script/MQ.js HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rFOBvej1pdOLmZ1QDGDEsJpZymcDBYNEbLbyo6H7e7+R4P1747P+186gfBJbQ7m09ZQZTvz8BCgyCd8nIqkNbZbHPmV7x/WbPqSyS8ftHbarrJuAv+HowhTB7C92
2024-12-24 15:05:01 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:01 GMT Content-Type: text/javascript Content-Length: 112739 Connection: close Set-Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x; Expires=Tue, 31 Dec 2024 15:05:01 GMT; Path=/ Set-Cookie: AWSALBCORS=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x; Expires=Tue, 31 Dec 2024 15:05:01 GMT; Path=/; SameSite=None Cache-Control: no-cache Last-Modified: Mon, 04 Nov 2024 11:52:40 GMT Accept-Ranges: bytes ETag: "0f4b6cb02edb1:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:01 UTC	1842	IN	Data Raw: 2f 2f 20 68 61 6d 62 75 72 67 65 72 0d 0a 66 75 6e 63 74 69 6f 6e 20 6f 70 65 6e 4e 61 76 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 79 53 69 64 65 6e 61 76 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 77 31 30 30 22 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 79 53 69 64 65 6e 61 76 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 31 30 30 22 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 79 53 69 64 65 6e 61 76 22 29 2e 63 6c 61 73 73 4c 69 Data Ascii: // hamburgerfunction openNav() { if (document.getElementById("mySidenav").classList.contains("w100")) { document.getElementById("mySidenav").classList.remove("w100"); } else { document.getElementById("mySidenav").classLi
2024-12-24 15:05:01 UTC	1338	IN	Data Raw: 65 50 61 79 6d 65 6e 74 52 65 73 75 6d 70 74 69 6f 6e 43 6f 6e 73 65 6e 74 53 65 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 24 28 27 23 63 6f 6e 73 65 6e 74 2d 73 65 63 74 69 6f 6e 27 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 27 64 2d 6e 6f 6e 65 27 29 3b 0d 0a 20 20 20 20 24 28 27 2e 61 63 6b 69 66 63 61 6e 61 66 66 6f 72 64 2d 63 6f 6e 74 65 6e 74 27 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 27 64 2d 6e 6f 6e 65 27 29 3b 0d 0a 20 20 20 20 24 28 27 23 70 72 65 73 75 62 6d 69 74 2d 63 6f 6e 74 65 6e 74 27 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 27 64 2d 6e 6f 6e 65 27 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 6f 6e 6c 6f 61 64 43 61 6c 6c 62 61 63 6b 28 29 20 7b 0d 0a 20 20 20 20 24 28 27 23 67 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 Data Ascii: ePaymentResumptionConsentSection() { $('#consent-section').toggleClass('d-none'); $('.ackifcanafford-content').toggleClass('d-none'); $('#presubmit-content').toggleClass('d-none');}function onloadCallback() { $('#g-recaptcha-resp
2024-12-24 15:05:01 UTC	1338	IN	Data Raw: 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 69 66 20 28 75 43 6f 64 65 2e 6c 65 6e 67 74 68 20 3d 3d 20 36 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 72 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 49 46 52 41 4d 45 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 43 6f 64 65 20 3d 3d 20 22 34 37 33 36 32 31 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 69 66 72 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 20 22 68 74 74 70 73 3a 2f 2f 73 74 61 67 65 73 70 72 69 6e 67 66 6f 75 72 2e 61 7a 75 72 65 77 65 62 73 69 74 65 73 2e 6e 65 74 2f 4d 4b 33 30 2f 4d 4b 33 31 52 50 2e 61 73 70 3f 75 43 6f 64 65 3d 22 20 2b 20 75 43 6f 64 65 29 3b 0d 0a 20 Data Ascii: ; } } if (uCode.length == 6) { ifrm = document.createElement("IFRAME"); if (uCode == "473621") { //ifrm.setAttribute("src", "https://stagespringfour.azurewebsites.net/MK30/MK31RP.asp?uCode=" + uCode);
2024-12-24 15:05:01 UTC	1338	IN	Data Raw: 61 74 65 45 6c 65 6d 65 6e 74 28 22 44 49 56 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 67 4d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 20 22 62 67 4d 52 6f 75 6e 64 50 6f 69 6e 74 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 67 4d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 44 49 56 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 67 4d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 20 22 62 67 4d 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 66 74 4d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 44 49 56 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 66 74 4d 2e Data Ascii: ateElement("DIV"); bgM.setAttribute("id", "bgMRoundPoint"); } else { bgM = document.createElement("DIV"); bgM.setAttribute("id", "bgM"); } ftM = document.createElement("DIV"); ftM.
2024-12-24 15:05:01 UTC	1338	IN	Data Raw: 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 20 22 66 61 6c 73 65 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 62 67 4d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 20 22 74 72 75 65 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 66 74 4d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 20 22 74 72 75 65 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 62 67 43 72 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 20 22 74 72 75 65 22 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 67 43 72 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e Data Ascii: bute("aria-hidden", "false"); bgM.setAttribute("aria-hidden", "true"); ftM.setAttribute("aria-hidden", "true"); bgCrt.setAttribute("aria-hidden", "true"); document.body.appendChild(bgCrt); document.body.appen
2024-12-24 15:05:01 UTC	1338	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 62 67 43 72 74 22 29 2e 73 63 72 6f 6c 6c 49 6e 74 6f 56 69 65 77 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 2c 20 35 30 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 61 64 61 66 6c 61 67 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 76 65 6e 74 2e 64 61 74 61 20 3d 3d 3d 20 22 63 6c 6f 73 65 77 69 6e 64 6f 77 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 6b 43 6c 6f 73 65 57 69 6e 64 6f 77 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: getElementById("bgCrt").scrollIntoView(); }, 500); if (adaflag) { window.addEventListener("message", function (event) { if (event.data === "closewindow") { mkCloseWindow();
2024-12-24 15:05:01 UTC	2676	IN	Data Raw: 65 62 73 69 74 65 73 2e 6e 65 74 2f 4d 4b 33 30 2f 4d 4b 33 31 2d 6e 65 77 2e 61 73 70 3f 75 43 6f 64 65 3d 22 20 2b 20 75 43 6f 64 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 69 66 72 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 63 72 6f 6c 6c 69 6e 67 22 2c 20 22 6e 6f 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 72 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 54 72 61 6e 73 70 61 72 65 6e 63 79 22 2c 20 22 74 72 75 65 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 72 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 72 61 6d 65 42 6f 72 64 65 72 22 2c 20 22 30 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 72 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 20 22 69 66 72 6d 22 29 3b 0d Data Ascii: ebsites.net/MK30/MK31-new.asp?uCode=" + uCode); } ifrm.setAttribute("scrolling", "no"); ifrm.setAttribute("allowTransparency", "true"); ifrm.setAttribute("frameBorder", "0"); ifrm.setAttribute("id", "ifrm");
2024-12-24 15:05:01 UTC	1338	IN	Data Raw: 6c 64 28 62 67 4d 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 67 4d 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 67 43 72 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 66 72 6d 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 66 74 4d 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 63 6c 42 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ld(bgM); } else { document.body.appendChild(bgM); } document.body.appendChild(bgCrt); document.body.appendChild(ifrm); document.body.appendChild(ftM); if (clB) {
2024-12-24 15:05:01 UTC	2676	IN	Data Raw: 38 32 31 32 30 22 20 7c 7c 20 75 43 6f 64 65 20 3d 3d 20 22 39 39 32 33 32 30 22 20 7c 7c 20 75 43 6f 64 65 20 3d 3d 20 22 31 32 30 32 32 30 22 29 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 61 64 61 66 6c 61 67 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 76 65 6e 74 2e 64 61 74 61 20 3d 3d 3d 20 22 63 6c 6f 73 65 77 69 6e 64 6f 77 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 6b 43 6c 6f 73 65 57 69 6e 64 6f 77 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 Data Ascii: 82120" \|\| uCode == "992320" \|\| uCode == "120220") if (adaflag) { window.addEventListener("message", function (event) { if (event.data === "closewindow") { mkCloseWindow(); }
2024-12-24 15:05:01 UTC	9366	IN	Data Raw: 5b 69 5d 2e 46 69 65 6c 64 4e 61 6d 65 29 2e 70 61 72 65 6e 74 73 28 27 2e 73 68 61 72 65 2d 69 6e 66 6f 2d 74 79 70 65 27 29 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 73 68 61 72 65 2d 69 6e 66 6f 2d 74 79 70 65 27 29 2e 66 69 6e 64 28 27 2e 68 65 6c 70 2d 62 6c 6f 63 6b 27 29 2e 72 65 6d 6f 76 65 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 73 68 61 72 65 2d 69 6e 66 6f 2d 74 79 70 65 27 29 2e 61 74 74 72 28 22 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 22 2c 20 27 56 61 6c 69 64 61 74 65 27 20 2b 20 24 28 27 2e 73 68 61 72 65 2d 69 6e 66 6f 2d 74 79 70 65 27 29 2e 61 74 74 72 28 27 69 64 27 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: [i].FieldName).parents('.share-info-type').length > 0) { $('.share-info-type').find('.help-block').remove(); $('.share-info-type').attr("aria-describedby", 'Validate' + $('.share-info-type').attr('id'));

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49742	142.250.181.68	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:01 UTC	499	OUT	GET /recaptcha/api.js?render=6Le4f5AqAAAAACMx6SI8VYM7etmAXowUb1ykbHGZ HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:02 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Tue, 24 Dec 2024 15:05:02 GMT Date: Tue, 24 Dec 2024 15:05:02 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-24 15:05:02 UTC	641	IN	Data Raw: 35 62 63 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 5bc/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-12-24 15:05:02 UTC	834	IN	Data Raw: 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 Data Ascii: YffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecati
2024-12-24 15:05:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49744	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:02 UTC	568	OUT	GET /bundles/jquery-unobtrusive-ajax?v=yWiSJlfkRWGOtjh38MIfwsmv_b3zyMucdfkOPGDhEoA1 HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=s2I2cWAONoMtcR8W/kX5wz1n48fgqFWSpZ5WjuMFoVU+pUeR1Tq+Snx8pONmTHdhN058gslMtDcXU6kTjxif8ieb1JNAR8VpSGin+fYDUTSHgrbVwbtFi0wa5GOE
2024-12-24 15:05:02 UTC	841	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:02 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 2782 Connection: close Set-Cookie: AWSALB=rWsCfwPTRqH9t3fap6jtrPj8VI7vkGnklYn+MgDvJMcpVKP9C0jYVSL26zhIxQdhcKlnPDm+MWrH3VqmchdumrOPcD/LzDgQVhtoTS5qsLj2UyrC7PlU1CeCvBBQ; Expires=Tue, 31 Dec 2024 15:05:02 GMT; Path=/ Set-Cookie: AWSALBCORS=rWsCfwPTRqH9t3fap6jtrPj8VI7vkGnklYn+MgDvJMcpVKP9C0jYVSL26zhIxQdhcKlnPDm+MWrH3VqmchdumrOPcD/LzDgQVhtoTS5qsLj2UyrC7PlU1CeCvBBQ; Expires=Tue, 31 Dec 2024 15:05:02 GMT; Path=/; SameSite=None Cache-Control: public Expires: Wed, 24 Dec 2025 15:05:02 GMT Last-Modified: Tue, 24 Dec 2024 15:05:02 GMT Vary: User-Agent X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:02 UTC	2782	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 2c 74 29 7b 66 6f 72 28 76 61 72 20 69 3d 77 69 6e 64 6f 77 2c 72 3d 28 6e 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 26 26 72 2e 6c 65 6e 67 74 68 3b 29 69 3d 69 5b 72 2e 73 68 69 66 74 28 29 5d 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 3f 69 3a 28 74 2e 70 75 73 68 28 6e 29 2c 46 75 6e 63 74 69 6f 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 6e 29 7b 72 65 74 75 72 6e 22 47 45 54 22 3d 3d 3d 6e 7c 7c 22 50 4f 53 54 22 3d 3d 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6e 2c 74 29 7b 75 28 74 29 7c 7c 6e 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 Data Ascii: !function(n){function i(n,t){for(var i=window,r=(n\|\|"").split(".");i&&r.length;)i=i[r.shift()];return"function"==typeof i?i:(t.push(n),Function.constructor.apply(null,t))}function u(n){return"GET"===n\|\|"POST"===n}function e(n,t){u(t)\|\|n.setRequestHeader("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49750	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:02 UTC	551	OUT	GET /bundles/jquery?v=N2YlHnRI7it2_JoqUZTYWxPtx-s61zIGkk78Q0eabPM1 HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=NrKLvwtm045yUhHr1il3mSv9c+sXsYWk3sGZF/06+sdiIIXm7Qd98haLcEyqp3h4iJEjQWS/pJqic6x0NuyWyi3/lvZVIOADbyE/dVYW5XVpT3+pK1dnfIYaErcB
2024-12-24 15:05:03 UTC	842	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:02 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 86959 Connection: close Set-Cookie: AWSALB=pSeLWmc2pyE+ZPm/qS823rZeJj0WgLY2FbTrtElvQ4NcdO8zwVRwGiHR7PTr0nSrTpRFFFlFeue/WwRVreM/78ZTQej6sCSQTVX9htjnjtZ2cJrt603Ob1uqvOcD; Expires=Tue, 31 Dec 2024 15:05:02 GMT; Path=/ Set-Cookie: AWSALBCORS=pSeLWmc2pyE+ZPm/qS823rZeJj0WgLY2FbTrtElvQ4NcdO8zwVRwGiHR7PTr0nSrTpRFFFlFeue/WwRVreM/78ZTQej6sCSQTVX9htjnjtZ2cJrt603Ob1uqvOcD; Expires=Tue, 31 Dec 2024 15:05:02 GMT; Path=/; SameSite=None Cache-Control: public Expires: Wed, 24 Dec 2025 15:05:02 GMT Last-Modified: Tue, 24 Dec 2024 15:05:02 GMT Vary: User-Agent X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:03 UTC	491	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 6e 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 21 6e 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 74 28 6e 29 7d 3a 74 28 6e 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e Data Ascii: !function(n,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=n.document?t(n,!0):function(n){if(!n.document)throw new Error("jQuery requires a window with a document");return t(n)}:t(n)}("undefined"!=typeof window?win
2024-12-24 15:05:03 UTC	1338	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 3f 6e 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 6f 69 5b 64 72 2e 63 61 6c 6c 28 6e 29 5d 7c 7c 22 6f 62 6a 65 63 74 22 3a 74 79 70 65 6f 66 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6b 69 28 6e 29 7b 76 61 72 20 74 3d 21 21 6e 26 26 22 6c 65 6e 67 74 68 22 69 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 2c 69 3d 65 74 28 6e 29 3b 72 65 74 75 72 6e 21 65 28 6e 29 26 26 21 66 74 28 6e 29 26 26 28 22 61 72 72 61 79 22 3d 3d 3d 69 7c 7c 30 3d 3d 3d 74 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 30 3c 74 26 26 74 2d 31 20 69 6e 20 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 73 Data Ascii: }function et(n){return null==n?n+"":"object"==typeof n\|\|"function"==typeof n?oi[dr.call(n)]\|\|"object":typeof n}function ki(n){var t=!!n&&"length"in n&&n.length,i=et(n);return!e(n)&&!ft(n)&&("array"===i\|\|0===t\|\|"number"==typeof t&&0<t&&t-1 in n)}function s
2024-12-24 15:05:03 UTC	4014	IN	Data Raw: 26 28 22 6e 75 6c 6c 22 3d 3d 3d 72 3f 6e 75 6c 6c 3a 72 3d 3d 3d 2b 72 2b 22 22 3f 2b 72 3a 67 65 2e 74 65 73 74 28 72 29 3f 4a 53 4f 4e 2e 70 61 72 73 65 28 72 29 3a 72 29 7d 63 61 74 63 68 28 6e 29 7b 7d 63 2e 73 65 74 28 6e 2c 74 2c 69 29 7d 65 6c 73 65 20 69 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 69 7d 66 75 6e 63 74 69 6f 6e 20 70 75 28 6e 2c 74 2c 72 2c 75 29 7b 76 61 72 20 73 2c 68 2c 63 3d 32 30 2c 6c 3d 75 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 2e 63 75 72 28 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 63 73 73 28 6e 2c 74 2c 22 22 29 7d 2c 6f 3d 6c 28 29 2c 65 3d 72 26 26 72 5b 33 5d 7c 7c 28 69 2e 63 73 73 4e 75 6d 62 65 72 5b 74 5d 3f 22 22 3a 22 70 78 22 29 2c 66 3d 6e 2e 6e 6f 64 65 54 79 Data Ascii: &("null"===r?null:r===+r+""?+r:ge.test(r)?JSON.parse(r):r)}catch(n){}c.set(n,t,i)}else i=void 0;return i}function pu(n,t,r,u){var s,h,c=20,l=u?function(){return u.cur()}:function(){return i.css(n,t,"")},o=l(),e=r&&r[3]\|\|(i.cssNumber[t]?"":"px"),f=n.nodeTy
2024-12-24 15:05:03 UTC	1338	IN	Data Raw: 5d 2c 62 75 2e 74 65 73 74 28 73 2e 74 79 70 65 7c 7c 22 22 29 26 26 21 72 2e 61 63 63 65 73 73 28 73 2c 22 67 6c 6f 62 61 6c 45 76 61 6c 22 29 26 26 69 2e 63 6f 6e 74 61 69 6e 73 28 79 2c 73 29 26 26 28 73 2e 73 72 63 26 26 22 6d 6f 64 75 6c 65 22 21 3d 3d 28 73 2e 74 79 70 65 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3f 69 2e 5f 65 76 61 6c 55 72 6c 26 26 21 73 2e 6e 6f 4d 6f 64 75 6c 65 26 26 69 2e 5f 65 76 61 6c 55 72 6c 28 73 2e 73 72 63 2c 7b 6e 6f 6e 63 65 3a 73 2e 6e 6f 6e 63 65 7c 7c 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 79 29 3a 6e 75 28 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 75 6f 2c 22 22 29 2c 73 2c 79 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: ],bu.test(s.type\|\|"")&&!r.access(s,"globalEval")&&i.contains(y,s)&&(s.src&&"module"!==(s.type\|\|"").toLowerCase()?i._evalUrl&&!s.noModule&&i._evalUrl(s.src,{nonce:s.nonce\|\|s.getAttribute("nonce")},y):nu(s.textContent.replace(uo,""),s,y))}return n}function
2024-12-24 15:05:03 UTC	2676	IN	Data Raw: 22 70 61 64 64 69 6e 67 22 2b 6e 74 5b 6f 5d 2c 21 30 2c 66 29 29 2c 22 6d 61 72 67 69 6e 22 21 3d 3d 72 26 26 28 73 2d 3d 69 2e 63 73 73 28 6e 2c 22 62 6f 72 64 65 72 22 2b 6e 74 5b 6f 5d 2b 22 57 69 64 74 68 22 2c 21 30 2c 66 29 29 29 3a 28 73 2b 3d 69 2e 63 73 73 28 6e 2c 22 70 61 64 64 69 6e 67 22 2b 6e 74 5b 6f 5d 2c 21 30 2c 66 29 2c 22 70 61 64 64 69 6e 67 22 21 3d 3d 72 3f 73 2b 3d 69 2e 63 73 73 28 6e 2c 22 62 6f 72 64 65 72 22 2b 6e 74 5b 6f 5d 2b 22 57 69 64 74 68 22 2c 21 30 2c 66 29 3a 68 2b 3d 69 2e 63 73 73 28 6e 2c 22 62 6f 72 64 65 72 22 2b 6e 74 5b 6f 5d 2b 22 57 69 64 74 68 22 2c 21 30 2c 66 29 29 3b 72 65 74 75 72 6e 21 75 26 26 30 3c 3d 65 26 26 28 73 2b 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 63 65 69 6c 28 6e 5b 22 6f 66 Data Ascii: "padding"+nt[o],!0,f)),"margin"!==r&&(s-=i.css(n,"border"+nt[o]+"Width",!0,f))):(s+=i.css(n,"padding"+nt[o],!0,f),"padding"!==r?s+=i.css(n,"border"+nt[o]+"Width",!0,f):h+=i.css(n,"border"+nt[o]+"Width",!0,f));return!u&&0<=e&&(s+=Math.max(0,Math.ceil(n["of
2024-12-24 15:05:03 UTC	2676	IN	Data Raw: 6f 6e 65 28 75 2e 6f 70 74 73 2e 64 6f 6e 65 2c 75 2e 6f 70 74 73 2e 63 6f 6d 70 6c 65 74 65 29 2e 66 61 69 6c 28 75 2e 6f 70 74 73 2e 66 61 69 6c 29 2e 61 6c 77 61 79 73 28 75 2e 6f 70 74 73 2e 61 6c 77 61 79 73 29 2c 69 2e 66 78 2e 74 69 6d 65 72 28 69 2e 65 78 74 65 6e 64 28 6c 2c 7b 65 6c 65 6d 3a 6e 2c 61 6e 69 6d 3a 75 2c 71 75 65 75 65 3a 75 2e 6f 70 74 73 2e 71 75 65 75 65 7d 29 29 2c 75 7d 66 75 6e 63 74 69 6f 6e 20 72 74 28 6e 29 7b 72 65 74 75 72 6e 28 6e 2e 6d 61 74 63 68 28 79 29 7c 7c 5b 5d 29 2e 6a 6f 69 6e 28 22 20 22 29 7d 66 75 6e 63 74 69 6f 6e 20 75 74 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 6e 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 7d 66 75 6e 63 74 69 6f Data Ascii: one(u.opts.done,u.opts.complete).fail(u.opts.fail).always(u.opts.always),i.fx.timer(i.extend(l,{elem:n,anim:u,queue:u.opts.queue})),u}function rt(n){return(n.match(y)\|\|[]).join(" ")}function ut(n){return n.getAttribute&&n.getAttribute("class")\|\|""}functio
2024-12-24 15:05:03 UTC	1338	IN	Data Raw: 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 72 3d 31 2c 6c 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 68 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 28 68 3d 6e 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 7c 7c 7b 7d 2c 72 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 7c 7c 65 28 6e 29 7c 7c 28 6e 3d 7b 7d 29 2c 72 3d 3d 3d 6c 26 26 28 6e 3d 74 68 69 73 2c 72 2d 2d 29 3b 72 3c 6c 3b 72 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 73 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 29 29 66 6f 72 28 75 20 69 6e 20 73 29 74 3d 73 5b 75 5d 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 21 3d 3d 75 26 26 6e 21 3d 3d 74 26 26 28 68 26 26 74 26 26 28 69 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 74 29 Data Ascii: =arguments[0]\|\|{},r=1,l=arguments.length,h=!1;for("boolean"==typeof n&&(h=n,n=arguments[r]\|\|{},r++),"object"==typeof n\|\|e(n)\|\|(n={}),r===l&&(n=this,r--);r<l;r++)if(null!=(s=arguments[r]))for(u in s)t=s[u],"__proto__"!==u&&n!==t&&(h&&t&&(i.isPlainObject(t)
2024-12-24 15:05:03 UTC	1338	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 3d 6e 26 26 6e 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 74 3d 6e 26 26 28 6e 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 6e 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 21 61 65 2e 74 65 73 74 28 69 7c 7c 74 26 26 74 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 48 54 4d 4c 22 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 6f 72 28 76 61 72 20 75 3d 2b 74 2e 6c 65 6e 67 74 68 2c 69 3d 30 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 69 3c 75 3b 69 2b 2b 29 6e 5b 72 2b 2b 5d 3d 74 5b 69 5d 3b 72 65 74 75 72 6e 20 6e 2e 6c 65 6e 67 74 68 3d 72 2c 6e 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 66 6f 72 28 76 61 72 20 75 3d 5b 5d 2c 72 3d 30 2c Data Ascii: :function(n){var i=n&&n.namespaceURI,t=n&&(n.ownerDocument\|\|n).documentElement;return!ae.test(i\|\|t&&t.nodeName\|\|"HTML")},merge:function(n,t){for(var u=+t.length,i=0,r=n.length;i<u;i++)n[r++]=t[i];return n.length=r,n},grep:function(n,t,i){for(var u=[],r=0,
2024-12-24 15:05:03 UTC	1338	IN	Data Raw: 29 7b 69 66 28 39 3d 3d 3d 70 29 7b 69 66 28 21 28 61 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 68 29 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 61 2e 69 64 3d 3d 3d 68 29 72 65 74 75 72 6e 20 76 2e 63 61 6c 6c 28 6f 2c 61 29 2c 6f 7d 65 6c 73 65 20 69 66 28 77 26 26 28 61 3d 77 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 68 29 29 26 26 72 2e 63 6f 6e 74 61 69 6e 73 28 74 2c 61 29 26 26 61 2e 69 64 3d 3d 3d 68 29 72 65 74 75 72 6e 20 76 2e 63 61 6c 6c 28 6f 2c 61 29 2c 6f 7d 65 6c 73 65 7b 69 66 28 6b 5b 32 5d 29 72 65 74 75 72 6e 20 76 2e 61 70 70 6c 79 28 6f 2c 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 6e 29 29 2c 6f 3b 69 66 28 28 68 3d 6b 5b 33 5d 29 26 26 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 Data Ascii: ){if(9===p){if(!(a=t.getElementById(h)))return o;if(a.id===h)return v.call(o,a),o}else if(w&&(a=w.getElementById(h))&&r.contains(t,a)&&a.id===h)return v.call(o,a),o}else{if(k[2])return v.apply(o,t.getElementsByTagName(n)),o;if((h=k[3])&&t.getElementsByCla
2024-12-24 15:05:03 UTC	1338	IN	Data Raw: 7c 7c 74 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 6e 26 26 75 72 28 74 29 3d 3d 3d 6e 3a 74 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 6e 3a 22 6c 61 62 65 6c 22 69 6e 20 74 26 26 74 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 6e 29 7b 72 65 74 75 72 6e 20 79 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 2b 74 2c 79 28 66 75 6e 63 74 69 6f 6e 28 69 2c 72 29 7b 66 6f 72 28 76 61 72 20 75 2c 66 3d 6e 28 5b 5d 2c 69 2e 6c 65 6e 67 74 68 2c 74 29 2c 65 3d 66 2e 6c 65 6e 67 74 68 3b 65 2d 2d 3b 29 69 5b 75 3d 66 5b 65 5d 5d 26 26 28 69 5b 75 5d 3d 21 28 72 5b 75 5d 3d 69 5b 75 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 74 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 22 75 6e 64 65 66 69 6e 65 64 22 Data Ascii: \|\|t.isDisabled!==!n&&ur(t)===n:t.disabled===n:"label"in t&&t.disabled===n}}function it(n){return y(function(t){return t=+t,y(function(i,r){for(var u,f=n([],i.length,t),e=f.length;e--;)i[u=f[e]]&&(i[u]=!(r[u]=i[u]))})})}function kt(n){return n&&"undefined"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49751	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:02 UTC	522	OUT	GET /Content/script/owl.navigation.js HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=NrKLvwtm045yUhHr1il3mSv9c+sXsYWk3sGZF/06+sdiIIXm7Qd98haLcEyqp3h4iJEjQWS/pJqic6x0NuyWyi3/lvZVIOADbyE/dVYW5XVpT3+pK1dnfIYaErcB
2024-12-24 15:05:03 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:02 GMT Content-Type: text/javascript Content-Length: 11615 Connection: close Set-Cookie: AWSALB=cdrHTJ1R3//pwzYGpMUNN5kRQAM2oQpPTBz+6RWOUZ0XKdPRNKmePFL9BrCi9qnzLzraTeHbQ0in+92zmP3FW+gwSAxUMvMzjvyxCl9QiF4pmtgBLAl/NeqFSATy; Expires=Tue, 31 Dec 2024 15:05:02 GMT; Path=/ Set-Cookie: AWSALBCORS=cdrHTJ1R3//pwzYGpMUNN5kRQAM2oQpPTBz+6RWOUZ0XKdPRNKmePFL9BrCi9qnzLzraTeHbQ0in+92zmP3FW+gwSAxUMvMzjvyxCl9QiF4pmtgBLAl/NeqFSATy; Expires=Tue, 31 Dec 2024 15:05:02 GMT; Path=/; SameSite=None Cache-Control: no-cache Last-Modified: Fri, 12 Apr 2024 12:56:16 GMT Accept-Ranges: bytes ETag: "0d821ced88cda1:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:03 UTC	4518	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 4e 61 76 69 67 61 74 69 6f 6e 20 50 6c 75 67 69 6e 0d 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 32 2e 33 2e 34 0d 0a 20 2a 20 40 61 75 74 68 6f 72 20 41 72 74 75 73 20 4b 6f 6c 61 6e 6f 77 73 6b 69 0d 0a 20 2a 20 40 61 75 74 68 6f 72 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0d 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4d 49 54 29 0d 0a 20 2a 2f 0d 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 24 2c 20 77 69 6e 64 6f 77 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0d 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0d 0a 0d 0a 09 2f 2a 2a 0d 0a 09 20 2a 20 43 72 65 61 74 65 73 20 74 68 65 20 6e 61 76 69 67 61 74 69 6f 6e 20 70 6c 75 67 69 6e 2e 0d 0a 09 20 2a 20 40 63 6c 61 Data Ascii: /** * Navigation Plugin * @version 2.3.4 * @author Artus Kolanowski * @author David Deutsch * @license The MIT License (MIT) /;(function($, window, document, undefined) {'use strict';/* * Creates the navigation plugin. * @cla
2024-12-24 15:05:03 UTC	7097	IN	Data Raw: 28 65 29 20 7b 0d 0a 09 09 09 09 74 68 69 73 2e 6e 65 78 74 28 73 65 74 74 69 6e 67 73 2e 6e 61 76 53 70 65 65 64 29 3b 0d 0a 09 09 09 7d 2c 20 74 68 69 73 29 29 3b 0d 0a 0d 0a 09 09 2f 2f 20 63 72 65 61 74 65 20 44 4f 4d 20 73 74 72 75 63 74 75 72 65 20 66 6f 72 20 61 62 73 6f 6c 75 74 65 20 6e 61 76 69 67 61 74 69 6f 6e 0d 0a 09 09 69 66 20 28 21 73 65 74 74 69 6e 67 73 2e 64 6f 74 73 44 61 74 61 29 20 7b 0d 0a 09 09 09 74 68 69 73 2e 5f 74 65 6d 70 6c 61 74 65 73 20 3d 20 5b 20 24 28 27 3c 62 75 74 74 6f 6e 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 6e 61 76 20 62 75 74 74 6f 6e 73 22 3e 27 29 0d 0a 09 09 09 09 2e 61 64 64 43 6c 61 73 73 28 73 65 74 74 69 6e 67 73 2e 64 6f 74 43 6c 61 73 73 29 0d 0a 09 09 09 09 2e Data Ascii: (e) {this.next(settings.navSpeed);}, this));// create DOM structure for absolute navigationif (!settings.dotsData) {this._templates = [ $('<button role="button" aria-label="nav buttons">').addClass(settings.dotClass).

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49749	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:02 UTC	766	OUT	GET /Content/images/right-arrow.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x
2024-12-24 15:05:03 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:02 GMT Content-Type: image/svg+xml Content-Length: 350 Connection: close Set-Cookie: AWSALB=phpqX53+QdkCf0ZrFxYP+R7ZlA8M4YMRmE3sB20LM8emaAGMZObFJdcDpgrC/53udfZErij5EtAvsh4WvA5urCxYQ315d6QY37eiVuJZnayqQkOCBeq1NGXsofcZ; Expires=Tue, 31 Dec 2024 15:05:02 GMT; Path=/ Set-Cookie: AWSALBCORS=phpqX53+QdkCf0ZrFxYP+R7ZlA8M4YMRmE3sB20LM8emaAGMZObFJdcDpgrC/53udfZErij5EtAvsh4WvA5urCxYQ315d6QY37eiVuJZnayqQkOCBeq1NGXsofcZ; Expires=Tue, 31 Dec 2024 15:05:02 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:03 UTC	350	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 2e 30 30 34 22 20 68 65 69 67 68 74 3d 22 31 30 2e 30 30 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 2e 30 30 34 20 31 30 2e 30 30 33 22 3e 0d 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 6c 65 66 74 2d 61 72 72 6f 77 22 20 64 3d 22 4d 31 39 2e 35 2c 31 36 2e 35 48 39 2e 35 32 36 6c 33 2e 38 32 31 2d 33 2e 36 33 39 61 2e 35 2e 35 2c 30 2c 30 2c 30 2d 2e 36 39 2d 2e 37 32 34 4c 38 2e 32 39 33 2c 31 36 2e 32 39 34 41 31 2c 31 2c 30 2c 30 2c 30 2c 38 2e 33 2c 31 37 2e 37 31 37 6c 34 2e 33 35 35 2c 34 2e 31 34 38 61 2e 35 2e 35 2c 30 2c 31 2c 30 2c 2e 36 39 2d 2e 37 32 34 4c 39 2e 35 31 2c 31 37 2e 35 48 31 39 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="12.004" height="10.003" viewBox="0 0 12.004 10.003"> <path id="left-arrow" d="M19.5,16.5H9.526l3.821-3.639a.5.5,0,0,0-.69-.724L8.293,16.294A1,1,0,0,0,8.3,17.717l4.355,4.148a.5.5,0,1,0,.69-.724L9.51,17.5H19

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49746	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:02 UTC	519	OUT	GET /Content/script/owl.support.js HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=Vmnm4vHzpKIQBP8LhJTcHoKihu1/vTdYm0agezAZIJg3d2/Obzy67EDMiXeMSKZO/WII7fblW0ZZvKqBiWrriCU6+9DL6iZC9XmShKAVMgNy+YAYb5uWDgEoM5p3
2024-12-24 15:05:03 UTC	828	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:02 GMT Content-Type: text/javascript Content-Length: 2095 Connection: close Set-Cookie: AWSALB=Z+V+HRbgIWaITBSCdcf9VdqrZC2/gkbU5txia2DnkEFHRGseCBio3rDwy043+STfzBdnD9AXh4iJdI+C5fpXW5FRBd+qJeWx987FlEXVegZ2si7Pijcyw4Gl7OuU; Expires=Tue, 31 Dec 2024 15:05:02 GMT; Path=/ Set-Cookie: AWSALBCORS=Z+V+HRbgIWaITBSCdcf9VdqrZC2/gkbU5txia2DnkEFHRGseCBio3rDwy043+STfzBdnD9AXh4iJdI+C5fpXW5FRBd+qJeWx987FlEXVegZ2si7Pijcyw4Gl7OuU; Expires=Tue, 31 Dec 2024 15:05:02 GMT; Path=/; SameSite=None Cache-Control: no-cache Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:03 UTC	505	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 53 75 70 70 6f 72 74 20 50 6c 75 67 69 6e 0d 0a 20 2a 0d 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 32 2e 33 2e 34 0d 0a 20 2a 20 40 61 75 74 68 6f 72 20 56 69 76 69 64 20 50 6c 61 6e 65 74 20 53 6f 66 74 77 61 72 65 20 47 6d 62 48 0d 0a 20 2a 20 40 61 75 74 68 6f 72 20 41 72 74 75 73 20 4b 6f 6c 61 6e 6f 77 73 6b 69 0d 0a 20 2a 20 40 61 75 74 68 6f 72 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0d 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4d 49 54 29 0d 0a 20 2a 2f 0d 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 24 2c 20 77 69 6e 64 6f 77 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0d 0a 0d 0a 09 76 61 72 20 73 74 79 6c 65 20 3d 20 24 28 27 3c 73 75 70 70 6f 72 74 3e 27 Data Ascii: /** * Support Plugin * * @version 2.3.4 * @author Vivid Planet Software GmbH * @author Artus Kolanowski * @author David Deutsch * @license The MIT License (MIT) */;(function($, window, document, undefined) {var style = $('<support>'
2024-12-24 15:05:03 UTC	1338	IN	Data Raw: 69 74 69 6f 6e 65 6e 64 27 0d 0a 09 09 09 09 7d 0d 0a 09 09 09 7d 2c 0d 0a 09 09 09 61 6e 69 6d 61 74 69 6f 6e 3a 20 7b 0d 0a 09 09 09 09 65 6e 64 3a 20 7b 0d 0a 09 09 09 09 09 57 65 62 6b 69 74 41 6e 69 6d 61 74 69 6f 6e 3a 20 27 77 65 62 6b 69 74 41 6e 69 6d 61 74 69 6f 6e 45 6e 64 27 2c 0d 0a 09 09 09 09 09 4d 6f 7a 41 6e 69 6d 61 74 69 6f 6e 3a 20 27 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 27 2c 0d 0a 09 09 09 09 09 4f 41 6e 69 6d 61 74 69 6f 6e 3a 20 27 6f 41 6e 69 6d 61 74 69 6f 6e 45 6e 64 27 2c 0d 0a 09 09 09 09 09 61 6e 69 6d 61 74 69 6f 6e 3a 20 27 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 27 0d 0a 09 09 09 09 7d 0d 0a 09 09 09 7d 0d 0a 09 09 7d 2c 0d 0a 09 09 74 65 73 74 73 20 3d 20 7b 0d 0a 09 09 09 63 73 73 74 72 61 6e 73 66 6f 72 6d 73 3a 20 66 75 6e Data Ascii: itionend'}},animation: {end: {WebkitAnimation: 'webkitAnimationEnd',MozAnimation: 'animationend',OAnimation: 'oAnimationEnd',animation: 'animationend'}}},tests = {csstransforms: fun
2024-12-24 15:05:03 UTC	252	IN	Data Raw: 75 70 70 6f 72 74 2e 61 6e 69 6d 61 74 69 6f 6e 20 5d 3b 0d 0a 09 7d 0d 0a 0d 0a 09 69 66 20 28 74 65 73 74 73 2e 63 73 73 74 72 61 6e 73 66 6f 72 6d 73 28 29 29 20 7b 0d 0a 09 09 2f 2a 20 6a 73 68 69 6e 74 20 2d 57 30 35 33 20 2a 2f 0d 0a 09 09 24 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 66 6f 72 6d 20 3d 20 6e 65 77 20 53 74 72 69 6e 67 28 70 72 65 66 69 78 65 64 28 27 74 72 61 6e 73 66 6f 72 6d 27 29 29 3b 0d 0a 09 09 24 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 66 6f 72 6d 33 64 20 3d 20 74 65 73 74 73 2e 63 73 73 74 72 61 6e 73 66 6f 72 6d 73 33 64 28 29 3b 0d 0a 09 7d 0d 0a 0d 0a 7d 29 28 77 69 6e 64 6f 77 2e 5a 65 70 74 6f 20 7c 7c 20 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 20 77 69 6e 64 6f 77 2c 20 64 6f 63 75 6d 65 6e 74 29 3b 0d 0a Data Ascii: upport.animation ];}if (tests.csstransforms()) {/* jshint -W053 */$.support.transform = new String(prefixed('transform'));$.support.transform3d = tests.csstransforms3d();}})(window.Zepto \|\| window.jQuery, window, document);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49748	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:02 UTC	810	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/home-owner_1.svg?ext=.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x
2024-12-24 15:05:03 UTC	830	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:02 GMT Content-Type: image/svg+xml Content-Length: 2360 Connection: close Set-Cookie: AWSALB=kiz+PYSZGBZFisN+WtlNUIkuxrbtMg15beUGs/C7adJukhBKKy6YoGTVBEgru1ucFHS9DCRZQk2FMAooTncPJdRygnJKoN5xoc1Vu8MTd3+S326bBzMAyXHxnVoG; Expires=Tue, 31 Dec 2024 15:05:02 GMT; Path=/ Set-Cookie: AWSALBCORS=kiz+PYSZGBZFisN+WtlNUIkuxrbtMg15beUGs/C7adJukhBKKy6YoGTVBEgru1ucFHS9DCRZQk2FMAooTncPJdRygnJKoN5xoc1Vu8MTd3+S326bBzMAyXHxnVoG; Expires=Tue, 31 Dec 2024 15:05:02 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 01 Jun 2021 16:26:56 GMT Accept-Ranges: bytes ETag: "f0a43af0257d71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:03 UTC	2360	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 35 37 2e 36 32 22 20 68 65 69 67 68 74 3d 22 36 32 2e 33 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 37 2e 36 32 20 36 32 2e 33 39 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 30 30 37 64 63 35 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 34 34 2e 34 33 20 2d 39 2e 35 34 39 29 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 37 32 39 2e 35 39 2c 31 30 37 2e 31 36 68 2d 32 56 39 39 2e 35 38 63 30 2d 37 2e 32 33 2d 37 2e 32 34 2d 31 35 2e 33 32 2d 31 36 2e 39 33 2d 31 35 2e 33 32 73 2d Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="57.62" height="62.39" viewBox="0 0 57.62 62.39"><defs><style>.a{fill:#007dc5;}</style></defs><g transform="translate(-644.43 -9.549)"><path class="a" d="M729.59,107.16h-2V99.58c0-7.23-7.24-15.32-16.93-15.32s-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49747	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:02 UTC	520	OUT	GET /Content/script/owl.carousel.js HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=Vmnm4vHzpKIQBP8LhJTcHoKihu1/vTdYm0agezAZIJg3d2/Obzy67EDMiXeMSKZO/WII7fblW0ZZvKqBiWrriCU6+9DL6iZC9XmShKAVMgNy+YAYb5uWDgEoM5p3
2024-12-24 15:05:03 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:02 GMT Content-Type: text/javascript Content-Length: 48231 Connection: close Set-Cookie: AWSALB=quigMccOROte1/POHd0LaU2oC09UCExPoXT44bOhFvEj/FtiiYkbs5s7wLM/6azaGZWa5KikqCUuLtdVhGjL1sOor0NQmUND60PqfwQ6HRAjsVlz2Uq10kysudma; Expires=Tue, 31 Dec 2024 15:05:02 GMT; Path=/ Set-Cookie: AWSALBCORS=quigMccOROte1/POHd0LaU2oC09UCExPoXT44bOhFvEj/FtiiYkbs5s7wLM/6azaGZWa5KikqCUuLtdVhGjL1sOor0NQmUND60PqfwQ6HRAjsVlz2Uq10kysudma; Expires=Tue, 31 Dec 2024 15:05:02 GMT; Path=/; SameSite=None Cache-Control: no-cache Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:03 UTC	4518	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 4f 77 6c 20 63 61 72 6f 75 73 65 6c 0d 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 32 2e 33 2e 34 0d 0a 20 2a 20 40 61 75 74 68 6f 72 20 42 61 72 74 6f 73 7a 20 57 6f 6a 63 69 65 63 68 6f 77 73 6b 69 0d 0a 20 2a 20 40 61 75 74 68 6f 72 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0d 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4d 49 54 29 0d 0a 20 2a 20 40 74 6f 64 6f 20 4c 61 7a 79 20 4c 6f 61 64 20 49 63 6f 6e 0d 0a 20 2a 20 40 74 6f 64 6f 20 70 72 65 76 65 6e 74 20 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 20 62 75 62 6c 69 6e 67 0d 0a 20 2a 20 40 74 6f 64 6f 20 69 74 65 6d 73 53 63 61 6c 65 55 70 0d 0a 20 2a 20 40 74 6f 64 6f 20 54 65 73 74 20 5a 65 70 74 6f 0d 0a 20 2a 20 40 74 6f 64 6f 20 73 74 Data Ascii: /** * Owl carousel * @version 2.3.4 * @author Bartosz Wojciechowski * @author David Deutsch * @license The MIT License (MIT) * @todo Lazy Load Icon * @todo prevent animationend bubling * @todo itemsScaleUp * @todo Test Zepto * @todo st
2024-12-24 15:05:03 UTC	4014	IN	Data Raw: 09 20 2a 2f 0d 0a 09 4f 77 6c 2e 57 69 64 74 68 20 3d 20 7b 0d 0a 09 09 44 65 66 61 75 6c 74 3a 20 27 64 65 66 61 75 6c 74 27 2c 0d 0a 09 09 49 6e 6e 65 72 3a 20 27 69 6e 6e 65 72 27 2c 0d 0a 09 09 4f 75 74 65 72 3a 20 27 6f 75 74 65 72 27 0d 0a 09 7d 3b 0d 0a 0d 0a 09 2f 2a 2a 0d 0a 09 20 2a 20 45 6e 75 6d 65 72 61 74 69 6f 6e 20 66 6f 72 20 74 79 70 65 73 2e 0d 0a 09 20 2a 20 40 70 75 62 6c 69 63 0d 0a 09 20 2a 20 40 72 65 61 64 6f 6e 6c 79 0d 0a 09 20 2a 20 40 65 6e 75 6d 20 7b 53 74 72 69 6e 67 7d 0d 0a 09 20 2a 2f 0d 0a 09 4f 77 6c 2e 54 79 70 65 20 3d 20 7b 0d 0a 09 09 45 76 65 6e 74 3a 20 27 65 76 65 6e 74 27 2c 0d 0a 09 09 53 74 61 74 65 3a 20 27 73 74 61 74 65 27 0d 0a 09 7d 3b 0d 0a 0d 0a 09 2f 2a 2a 0d 0a 09 20 2a 20 43 6f 6e 74 61 69 6e 73 20 Data Ascii: /Owl.Width = {Default: 'default',Inner: 'inner',Outer: 'outer'};/* * Enumeration for types. * @public * @readonly * @enum {String} /Owl.Type = {Event: 'event',State: 'state'};/* * Contains
2024-12-24 15:05:03 UTC	1338	IN	Data Raw: 68 73 5b 74 68 69 73 2e 72 65 6c 61 74 69 76 65 28 69 74 65 72 61 74 6f 72 29 5d 3b 0d 0a 09 09 09 09 09 69 74 65 6d 73 2e 65 71 28 69 74 65 72 61 74 6f 72 29 2e 63 73 73 28 63 61 63 68 65 2e 63 73 73 29 3b 0d 0a 09 09 09 09 7d 0d 0a 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 67 72 69 64 29 20 7b 0d 0a 09 09 09 09 63 61 63 68 65 2e 63 73 73 2e 77 69 64 74 68 20 3d 20 63 61 63 68 65 2e 69 74 65 6d 73 2e 77 69 64 74 68 3b 0d 0a 09 09 09 09 69 74 65 6d 73 2e 63 73 73 28 63 61 63 68 65 2e 63 73 73 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 0d 0a 09 7d 2c 20 7b 0d 0a 09 09 66 69 6c 74 65 72 3a 20 5b 20 27 69 74 65 6d 73 27 20 5d 2c 0d 0a 09 09 72 75 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 09 74 68 69 73 2e 5f 63 6f 6f 72 64 69 6e 61 74 65 73 2e 6c Data Ascii: hs[this.relative(iterator)];items.eq(iterator).css(cache.css);}} else if (grid) {cache.css.width = cache.items.width;items.css(cache.css);}}}, {filter: [ 'items' ],run: function() {this._coordinates.l
2024-12-24 15:05:03 UTC	1338	IN	Data Raw: 69 29 3b 0d 0a 09 09 09 09 7d 0d 0a 09 09 09 7d 0d 0a 0d 0a 09 09 09 74 68 69 73 2e 24 73 74 61 67 65 2e 63 68 69 6c 64 72 65 6e 28 27 2e 61 63 74 69 76 65 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 61 63 74 69 76 65 27 29 3b 0d 0a 09 09 09 74 68 69 73 2e 24 73 74 61 67 65 2e 63 68 69 6c 64 72 65 6e 28 27 3a 65 71 28 27 20 2b 20 6d 61 74 63 68 65 73 2e 6a 6f 69 6e 28 27 29 2c 20 3a 65 71 28 27 29 20 2b 20 27 29 27 29 2e 61 64 64 43 6c 61 73 73 28 27 61 63 74 69 76 65 27 29 3b 0d 0a 0d 0a 09 09 09 74 68 69 73 2e 24 73 74 61 67 65 2e 63 68 69 6c 64 72 65 6e 28 27 2e 63 65 6e 74 65 72 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 63 65 6e 74 65 72 27 29 3b 0d 0a 09 09 09 69 66 20 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 63 65 6e 74 65 72 29 20 7b Data Ascii: i);}}this.$stage.children('.active').removeClass('active');this.$stage.children(':eq(' + matches.join('), :eq(') + ')').addClass('active');this.$stage.children('.center').removeClass('center');if (this.settings.center) {
2024-12-24 15:05:03 UTC	1338	IN	Data Raw: 7b 0d 0a 09 09 09 09 72 65 74 75 72 6e 20 31 3b 0d 0a 09 09 09 7d 29 3b 0d 0a 0d 0a 09 09 09 74 68 69 73 2e 72 65 66 72 65 73 68 28 29 3b 0d 0a 0d 0a 09 09 09 72 65 74 75 72 6e 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2f 2f 20 61 70 70 65 6e 64 20 63 6f 6e 74 65 6e 74 0d 0a 09 09 74 68 69 73 2e 72 65 70 6c 61 63 65 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 28 29 2e 6e 6f 74 28 74 68 69 73 2e 24 73 74 61 67 65 2e 70 61 72 65 6e 74 28 29 29 29 3b 0d 0a 0d 0a 09 09 2f 2f 20 63 68 65 63 6b 20 76 69 73 69 62 69 6c 69 74 79 0d 0a 09 09 69 66 20 28 74 68 69 73 2e 69 73 56 69 73 69 62 6c 65 28 29 29 20 7b 0d 0a 09 09 09 2f 2f 20 75 70 64 61 74 65 20 76 69 65 77 0d 0a 09 09 09 74 68 69 73 2e 72 65 66 72 65 73 68 28 29 3b 0d 0a 09 09 7d 20 65 Data Ascii: {return 1;});this.refresh();return;}// append contentthis.replace(this.$element.children().not(this.$stage.parent()));// check visibilityif (this.isVisible()) {// update viewthis.refresh();} e
2024-12-24 15:05:03 UTC	1338	IN	Data Raw: 79 6f 75 20 6b 6e 6f 77 20 74 68 65 20 63 61 72 6f 75 73 65 6c 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 62 65 20 76 69 73 69 62 6c 65 20 79 6f 75 20 63 61 6e 20 73 65 74 20 60 63 68 65 63 6b 56 69 73 69 62 69 6c 69 74 79 60 20 74 6f 20 60 66 61 6c 73 65 60 20 74 6f 0d 0a 09 20 2a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 72 65 76 65 6e 74 20 74 68 65 20 65 78 70 65 6e 73 69 76 65 20 62 72 6f 77 73 65 72 20 6c 61 79 6f 75 74 20 66 6f 72 63 65 64 20 72 65 66 6c 6f 77 20 74 68 65 20 24 65 6c 65 6d 65 6e 74 2e 69 73 28 27 3a 76 69 73 69 62 6c 65 27 29 20 64 6f 65 73 0d 0a 09 20 2a 2f 0d 0a 09 4f 77 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 56 69 73 69 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 72 65 74 75 72 6e 20 74 Data Ascii: you know the carousel will always be visible you can set `checkVisibility` to `false` to * prevent the expensive browser layout forced reflow the $element.is(':visible') does */Owl.prototype.isVisible = function() {return t
2024-12-24 15:05:03 UTC	1338	IN	Data Raw: 29 5c 5c 53 2b 5c 5c 73 27 2c 20 27 67 27 29 2c 20 27 24 31 27 20 2b 20 6d 61 74 63 68 29 0d 0a 09 09 09 09 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 74 68 69 73 2e 74 72 69 67 67 65 72 28 27 63 68 61 6e 67 65 27 2c 20 7b 20 70 72 6f 70 65 72 74 79 3a 20 7b 20 6e 61 6d 65 3a 20 27 73 65 74 74 69 6e 67 73 27 2c 20 76 61 6c 75 65 3a 20 73 65 74 74 69 6e 67 73 20 7d 20 7d 29 3b 0d 0a 09 09 74 68 69 73 2e 5f 62 72 65 61 6b 70 6f 69 6e 74 20 3d 20 6d 61 74 63 68 3b 0d 0a 09 09 74 68 69 73 2e 73 65 74 74 69 6e 67 73 20 3d 20 73 65 74 74 69 6e 67 73 3b 0d 0a 09 09 74 68 69 73 2e 69 6e 76 61 6c 69 64 61 74 65 28 27 73 65 74 74 69 6e 67 73 27 29 3b 0d 0a 09 09 74 68 69 73 2e 74 72 69 67 67 65 72 28 27 63 68 61 6e 67 65 64 27 2c 20 7b 20 70 72 6f 70 Data Ascii: )\\S+\\s', 'g'), '$1' + match));}}this.trigger('change', { property: { name: 'settings', value: settings } });this._breakpoint = match;this.settings = settings;this.invalidate('settings');this.trigger('changed', { prop
2024-12-24 15:05:03 UTC	755	IN	Data Raw: 5d 2e 66 69 6c 74 65 72 2c 20 66 69 6c 74 65 72 29 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 7b 0d 0a 09 09 09 09 74 68 69 73 2e 5f 70 69 70 65 5b 69 5d 2e 72 75 6e 28 63 61 63 68 65 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 09 69 2b 2b 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 74 68 69 73 2e 5f 69 6e 76 61 6c 69 64 61 74 65 64 20 3d 20 7b 7d 3b 0d 0a 0d 0a 09 09 21 74 68 69 73 2e 69 73 28 27 76 61 6c 69 64 27 29 20 26 26 20 74 68 69 73 2e 65 6e 74 65 72 28 27 76 61 6c 69 64 27 29 3b 0d 0a 09 7d 3b 0d 0a 0d 0a 09 2f 2a 2a 0d 0a 09 20 2a 20 47 65 74 73 20 74 68 65 20 77 69 64 74 68 20 6f 66 20 74 68 65 20 76 69 65 77 2e 0d 0a 09 20 2a 20 40 70 75 62 6c 69 63 0d 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 4f 77 6c 2e 57 69 64 74 68 7d 20 5b 64 69 6d 65 6e 73 69 6f 6e 3d 4f 77 Data Ascii: ].filter, filter).length > 0) {this._pipe[i].run(cache);}i++;}this._invalidated = {};!this.is('valid') && this.enter('valid');};/** * Gets the width of the view. * @public * @param {Owl.Width} [dimension=Ow
2024-12-24 15:05:03 UTC	6690	IN	Data Raw: 72 6f 74 6f 74 79 70 65 2e 72 65 66 72 65 73 68 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 74 68 69 73 2e 65 6e 74 65 72 28 27 72 65 66 72 65 73 68 69 6e 67 27 29 3b 0d 0a 09 09 74 68 69 73 2e 74 72 69 67 67 65 72 28 27 72 65 66 72 65 73 68 27 29 3b 0d 0a 0d 0a 09 09 74 68 69 73 2e 73 65 74 75 70 28 29 3b 0d 0a 0d 0a 09 09 74 68 69 73 2e 6f 70 74 69 6f 6e 73 4c 6f 67 69 63 28 29 3b 0d 0a 0d 0a 09 09 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 66 72 65 73 68 43 6c 61 73 73 29 3b 0d 0a 0d 0a 09 09 74 68 69 73 2e 75 70 64 61 74 65 28 29 3b 0d 0a 0d 0a 09 09 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 Data Ascii: rototype.refresh = function() {this.enter('refreshing');this.trigger('refresh');this.setup();this.optionsLogic();this.$element.addClass(this.options.refreshClass);this.update();this.$element.removeClass(this.options.r
2024-12-24 15:05:03 UTC	1338	IN	Data Raw: 72 65 63 74 69 6f 6e 20 3d 3d 3d 20 27 6c 65 66 74 27 20 26 26 20 63 6f 6f 72 64 69 6e 61 74 65 20 3e 20 76 61 6c 75 65 20 2d 20 70 75 6c 6c 20 26 26 20 63 6f 6f 72 64 69 6e 61 74 65 20 3c 20 76 61 6c 75 65 20 2b 20 70 75 6c 6c 29 20 7b 0d 0a 09 09 09 09 09 70 6f 73 69 74 69 6f 6e 20 3d 20 69 6e 64 65 78 3b 0d 0a 09 09 09 09 2f 2f 20 6f 6e 20 61 20 72 69 67 68 74 20 70 75 6c 6c 2c 20 63 68 65 63 6b 20 6f 6e 20 70 72 65 76 69 6f 75 73 20 69 6e 64 65 78 0d 0a 09 09 09 09 2f 2f 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 74 72 61 63 74 20 77 69 64 74 68 20 66 72 6f 6d 20 76 61 6c 75 65 20 61 6e 64 20 73 65 74 20 70 6f 73 69 74 69 6f 6e 20 3d 20 69 6e 64 65 78 20 2b 20 31 0d 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 64 69 72 65 63 74 69 6f 6e 20 3d 3d 3d Data Ascii: rection === 'left' && coordinate > value - pull && coordinate < value + pull) {position = index;// on a right pull, check on previous index// to do so, subtract width from value and set position = index + 1} else if (direction ===

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49752	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:03 UTC	762	OUT	GET /content/images/warning.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x
2024-12-24 15:05:04 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:03 GMT Content-Type: image/svg+xml Content-Length: 636 Connection: close Set-Cookie: AWSALB=MSbranHF0w0ir6lKrahxn5TAgzTXuhVbrkqiFmJAsrPs0rhMIAWqt69aTmab+MRi6zUR4nm4xIQkwZuyGP+6co8nnJfmOQaoHn8/r4l/EiqhH24d5DT9BxkMnS2i; Expires=Tue, 31 Dec 2024 15:05:03 GMT; Path=/ Set-Cookie: AWSALBCORS=MSbranHF0w0ir6lKrahxn5TAgzTXuhVbrkqiFmJAsrPs0rhMIAWqt69aTmab+MRi6zUR4nm4xIQkwZuyGP+6co8nnJfmOQaoHn8/r4l/EiqhH24d5DT9BxkMnS2i; Expires=Tue, 31 Dec 2024 15:05:03 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:04 UTC	504	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 34 2e 39 30 34 22 20 68 65 69 67 68 74 3d 22 31 34 2e 30 34 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 2e 39 30 34 20 31 34 2e 30 34 35 22 3e 0d 0a 20 20 3c 67 20 69 64 3d 22 77 61 72 6e 69 6e 67 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 2d 31 34 2e 37 35 39 29 22 20 6f 70 61 63 69 74 79 3d 22 30 2e 37 22 3e 0d 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 31 32 37 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 31 32 37 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 31 34 2e 37 35 39 29 22 3e 0d 0a 20 20 20 20 20 20 3c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="14.904" height="14.045" viewBox="0 0 14.904 14.045"> <g id="warning" transform="translate(0 -14.759)" opacity="0.7"> <g id="Group_1127" data-name="Group 1127" transform="translate(0 14.759)"> <
2024-12-24 15:05:04 UTC	132	IN	Data Raw: 2e 34 39 33 61 2e 38 37 33 2e 38 37 33 2c 30 2c 30 2c 31 2d 31 2e 37 34 37 2c 30 56 31 39 2e 32 61 2e 38 37 33 2e 38 37 33 2c 30 2c 30 2c 31 2c 31 2e 37 34 37 2c 30 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 2d 31 34 2e 37 35 39 29 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 0d 0a 20 20 20 20 3c 2f 67 3e 0d 0a 20 20 3c 2f 67 3e 0d 0a 3c 2f 73 76 67 3e 0d 0a Data Ascii: .493a.873.873,0,0,1-1.747,0V19.2a.873.873,0,0,1,1.747,0Z" transform="translate(0 -14.759)" fill="#fff"/> </g> </g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49753	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:03 UTC	810	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/loan-option1.svg?ext=.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x
2024-12-24 15:05:04 UTC	830	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:03 GMT Content-Type: image/svg+xml Content-Length: 2796 Connection: close Set-Cookie: AWSALB=s3MHoVCVTRO4QeAxFFgmSNt/JwcFnqBh4CaY9WQRlC+oWytQjRs2HFGrP/miTpHZeNklBBaF8R0Kxo9ll53sXJSbbaNeL1H7FP/knbkI8v8N2kFXQCaGBGkrgvLa; Expires=Tue, 31 Dec 2024 15:05:03 GMT; Path=/ Set-Cookie: AWSALBCORS=s3MHoVCVTRO4QeAxFFgmSNt/JwcFnqBh4CaY9WQRlC+oWytQjRs2HFGrP/miTpHZeNklBBaF8R0Kxo9ll53sXJSbbaNeL1H7FP/knbkI8v8N2kFXQCaGBGkrgvLa; Expires=Tue, 31 Dec 2024 15:05:03 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 01 Jun 2021 16:26:56 GMT Accept-Ranges: bytes ETag: "ce265ff0257d71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:04 UTC	1841	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 36 35 2e 37 31 32 22 20 68 65 69 67 68 74 3d 22 36 35 2e 37 30 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 35 2e 37 31 32 20 36 35 2e 37 30 32 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 31 31 37 65 63 31 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 30 2e 30 36 31 20 2d 30 2e 30 31 38 29 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 34 30 30 2e 35 32 37 2c 39 33 2e 37 31 33 61 35 2e 38 31 36 2c 35 2e 38 31 36 2c 30 2c 31 2c 31 2c 35 2e 38 30 36 2d 35 2e 38 30 36 2c 35 2e 38 31 36 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="65.712" height="65.702" viewBox="0 0 65.712 65.702"><defs><style>.a{fill:#117ec1;}</style></defs><g transform="translate(-0.061 -0.018)"><path class="a" d="M400.527,93.713a5.816,5.816,0,1,1,5.806-5.806,5.816,
2024-12-24 15:05:04 UTC	955	IN	Data Raw: 36 33 2d 2e 36 2d 2e 35 33 35 2d 31 2e 33 33 33 2d 2e 38 2d 32 2e 31 61 31 30 2e 35 2c 31 30 2e 35 2c 30 2c 30 2c 30 2d 2e 36 2d 31 2e 32 31 38 63 2d 2e 38 36 31 2d 31 2e 36 31 37 2d 32 2e 31 37 33 2d 34 2e 30 36 33 2d 2e 34 38 33 2d 35 2e 34 39 31 61 32 2e 36 31 34 2c 32 2e 36 31 34 2c 30 2c 30 2c 31 2c 31 2e 37 31 31 2d 2e 36 33 2c 33 2e 32 37 36 2c 33 2e 32 37 36 2c 30 2c 30 2c 31 2c 32 2e 33 2c 31 2e 30 35 76 2d 38 2e 32 34 32 61 32 2e 35 38 33 2c 32 2e 35 38 33 2c 30 2c 31 2c 31 2c 35 2e 31 35 35 2c 30 76 36 2e 35 30 39 61 32 2e 36 37 37 2c 32 2e 36 37 37 2c 30 2c 30 2c 31 2c 32 2e 31 36 33 2c 31 2e 32 34 39 2c 32 2e 36 38 38 2c 32 2e 36 38 38 2c 30 2c 30 2c 31 2c 32 2e 34 31 35 2c 31 2e 30 35 2c 32 2e 36 32 35 2c 32 2e 36 32 35 2c 30 2c 30 2c 31 2c Data Ascii: 63-.6-.535-1.333-.8-2.1a10.5,10.5,0,0,0-.6-1.218c-.861-1.617-2.173-4.063-.483-5.491a2.614,2.614,0,0,1,1.711-.63,3.276,3.276,0,0,1,2.3,1.05v-8.242a2.583,2.583,0,1,1,5.155,0v6.509a2.677,2.677,0,0,1,2.163,1.249,2.688,2.688,0,0,1,2.415,1.05,2.625,2.625,0,0,1,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49754	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:03 UTC	819	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/homebuyer-checklist_1.svg?ext=.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x
2024-12-24 15:05:04 UTC	831	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:03 GMT Content-Type: image/svg+xml Content-Length: 5913 Connection: close Set-Cookie: AWSALB=Bt8eoKvQFSS9gzT2YLH176zsrU9Te3myvwe8OQfrCvR6RcRfHnyyRupO7GDWUAMDizag9x3qeweBs3X1+j4kqTTtWJ6gvMZwGgFGORtyrDJbeJsBN/0+quBxMbIq; Expires=Tue, 31 Dec 2024 15:05:03 GMT; Path=/ Set-Cookie: AWSALBCORS=Bt8eoKvQFSS9gzT2YLH176zsrU9Te3myvwe8OQfrCvR6RcRfHnyyRupO7GDWUAMDizag9x3qeweBs3X1+j4kqTTtWJ6gvMZwGgFGORtyrDJbeJsBN/0+quBxMbIq; Expires=Tue, 31 Dec 2024 15:05:03 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Mon, 20 Dec 2021 17:49:09 GMT Accept-Ranges: bytes ETag: "da99fee3c9f5d71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:04 UTC	502	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 39 2e 31 39 33 22 20 68 65 69 67 68 74 3d 22 36 33 2e 38 36 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 39 2e 31 39 33 20 36 33 2e 38 36 39 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 30 30 37 64 63 35 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 35 35 35 2e 30 30 39 20 2d 39 2e 36 34 39 29 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 36 32 30 2e 38 34 38 2c 31 31 32 2e 34 48 36 31 36 2e 32 32 61 31 2e 32 33 35 2c 31 2e 32 33 35 2c 30 2c 30 2c 31 2d 31 2e 32 33 35 2d 31 2e 32 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="49.193" height="63.869" viewBox="0 0 49.193 63.869"><defs><style>.a{fill:#007dc5;}</style></defs><g transform="translate(-555.009 -9.649)"><path class="a" d="M620.848,112.4H616.22a1.235,1.235,0,0,1-1.235-1.24
2024-12-24 15:05:04 UTC	2676	IN	Data Raw: 32 34 36 2d 2e 31 34 35 48 36 32 30 2e 37 76 2d 37 2e 38 38 36 6c 2d 36 2e 37 38 36 2d 36 2e 38 2d 36 2e 38 36 39 2c 36 2e 38 34 39 76 37 2e 38 34 35 68 34 2e 33 33 37 76 2d 33 2e 34 36 36 68 35 5a 4d 36 31 33 2e 38 31 33 2c 39 36 2e 32 32 38 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 34 2e 35 35 35 20 2d 37 32 2e 32 34 38 29 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 36 32 33 2e 33 38 38 2c 39 34 2e 32 33 31 48 36 30 34 2e 39 61 2e 37 33 37 2e 37 33 37 2c 30 2c 30 2c 31 2d 2e 37 32 36 2d 2e 37 32 36 76 2d 35 2e 37 38 61 2e 37 30 36 2e 37 30 36 2c 30 2c 30 2c 31 2c 2e 37 32 36 2d 2e 37 31 36 68 33 2e 39 34 33 61 35 2e 33 34 34 2c 35 2e 33 34 34 2c 30 2c 30 2c 31 2c 31 30 2e 35 39 35 2c 30 68 33 Data Ascii: 246-.145H620.7v-7.886l-6.786-6.8-6.869,6.849v7.845h4.337v-3.466h5ZM613.813,96.228Z" transform="translate(-34.555 -72.248)"/><path class="a" d="M623.388,94.231H604.9a.737.737,0,0,1-.726-.726v-5.78a.706.706,0,0,1,.726-.716h3.943a5.344,5.344,0,0,1,10.595,0h3
2024-12-24 15:05:04 UTC	2735	IN	Data Raw: 39 32 76 2d 2e 37 35 37 48 36 30 39 2e 36 38 32 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 33 2e 35 38 20 2d 37 31 2e 34 32 29 22 2f 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 31 36 2e 31 37 37 22 20 68 65 69 67 68 74 3d 22 31 2e 34 34 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 35 37 35 2e 37 36 20 35 33 2e 30 33 36 29 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 36 32 35 2e 37 2c 31 32 35 2e 38 30 36 48 36 30 39 2e 31 37 56 31 32 34 48 36 32 35 2e 37 5a 6d 2d 31 36 2e 31 37 37 2d 2e 33 35 33 68 31 35 2e 38 33 35 76 2d 31 2e 30 39 48 36 30 39 2e 35 32 33 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 33 2e 35 Data Ascii: 92v-.757H609.682Z" transform="translate(-33.58 -71.42)"/><rect class="a" width="16.177" height="1.442" transform="translate(575.76 53.036)"/><path class="a" d="M625.7,125.806H609.17V124H625.7Zm-16.177-.353h15.835v-1.09H609.523Z" transform="translate(-33.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49755	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:03 UTC	817	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/refinance-checklist.svg?ext=.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x
2024-12-24 15:05:04 UTC	830	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:03 GMT Content-Type: image/svg+xml Content-Length: 2369 Connection: close Set-Cookie: AWSALB=7VjOb5nhBOaPJdygSedwMH4adH/eesj6bvjla0eY0nIHVRjCckHS3LWOo4rStooYH17fCn+2fCO3/nXhl8nViCWyE5T842D8cUGohFl/hm1oUdHggy7G5zzRVJUR; Expires=Tue, 31 Dec 2024 15:05:03 GMT; Path=/ Set-Cookie: AWSALBCORS=7VjOb5nhBOaPJdygSedwMH4adH/eesj6bvjla0eY0nIHVRjCckHS3LWOo4rStooYH17fCn+2fCO3/nXhl8nViCWyE5T842D8cUGohFl/hm1oUdHggy7G5zzRVJUR; Expires=Tue, 31 Dec 2024 15:05:03 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 01 Jun 2021 16:26:56 GMT Accept-Ranges: bytes ETag: "61b87af0257d71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:04 UTC	503	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 36 34 2e 34 39 31 22 20 68 65 69 67 68 74 3d 22 36 32 2e 35 32 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 2e 34 39 31 20 36 32 2e 35 32 37 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 30 30 37 63 63 35 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 34 34 31 2e 34 31 38 20 2d 39 2e 36 37 36 29 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 35 33 33 2e 34 33 32 2c 31 31 37 2e 32 36 61 2e 38 2e 38 2c 30 2c 30 2c 31 2d 2e 35 38 2d 2e 32 34 36 4c 35 30 39 2e 30 39 31 2c 39 33 2e 32 36 33 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="64.491" height="62.527" viewBox="0 0 64.491 62.527"><defs><style>.a{fill:#007cc5;}</style></defs><g transform="translate(-441.418 -9.676)"><path class="a" d="M533.432,117.26a.8.8,0,0,1-.58-.246L509.091,93.263
2024-12-24 15:05:04 UTC	1866	IN	Data Raw: 31 2c 32 33 2e 37 36 31 4c 35 33 36 2e 37 2c 31 31 32 2c 35 30 39 2e 30 32 32 2c 38 34 2e 33 34 36 2c 34 38 31 2e 35 2c 31 31 32 6c 33 2e 32 35 34 2c 33 2e 32 36 34 4c 35 30 38 2e 35 2c 39 31 2e 35 61 2e 38 33 36 2e 38 33 36 2c 30 2c 30 2c 31 2c 31 2e 31 37 2c 30 68 30 6d 2d 31 2e 32 32 39 2d 38 2e 37 38 39 2e 35 38 2e 35 39 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 38 2e 30 37 20 2d 37 32 2e 37 32 31 29 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 35 33 31 2e 36 36 39 2c 39 39 2e 38 38 37 68 2d 31 2e 36 36 31 56 38 37 2e 34 34 31 68 2d 36 2e 30 33 36 76 34 2e 37 48 35 32 32 2e 33 31 56 38 36 2e 36 31 36 61 2e 38 33 36 2e 38 33 36 2c 30 2c 30 2c 31 2c 2e 38 33 36 2d 2e 38 33 36 68 37 2e 37 30 37 Data Ascii: 1,23.761L536.7,112,509.022,84.346,481.5,112l3.254,3.264L508.5,91.5a.836.836,0,0,1,1.17,0h0m-1.229-8.789.58.59Z" transform="translate(-38.07 -72.721)"/><path class="a" d="M531.669,99.887h-1.661V87.441h-6.036v4.7H522.31V86.616a.836.836,0,0,1,.836-.836h7.707

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49760	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:04 UTC	510	OUT	GET /Content/script/MQ.js HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rWsCfwPTRqH9t3fap6jtrPj8VI7vkGnklYn+MgDvJMcpVKP9C0jYVSL26zhIxQdhcKlnPDm+MWrH3VqmchdumrOPcD/LzDgQVhtoTS5qsLj2UyrC7PlU1CeCvBBQ
2024-12-24 15:05:04 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:04 GMT Content-Type: text/javascript Content-Length: 112739 Connection: close Set-Cookie: AWSALB=hgwGei5HXOEpiigeBi4ZKTNvT6M+Ha2cxcXX7wuI4YqNzLLHBu08mVoogANEkZ3KLxjX9XdElxS4R3LtUkzgytX5C7P3iFmVg5hFN3CHLxlTeF04iUYIxv4YKQHO; Expires=Tue, 31 Dec 2024 15:05:04 GMT; Path=/ Set-Cookie: AWSALBCORS=hgwGei5HXOEpiigeBi4ZKTNvT6M+Ha2cxcXX7wuI4YqNzLLHBu08mVoogANEkZ3KLxjX9XdElxS4R3LtUkzgytX5C7P3iFmVg5hFN3CHLxlTeF04iUYIxv4YKQHO; Expires=Tue, 31 Dec 2024 15:05:04 GMT; Path=/; SameSite=None Cache-Control: no-cache Last-Modified: Mon, 04 Nov 2024 11:52:40 GMT Accept-Ranges: bytes ETag: "0f4b6cb02edb1:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:04 UTC	504	IN	Data Raw: 2f 2f 20 68 61 6d 62 75 72 67 65 72 0d 0a 66 75 6e 63 74 69 6f 6e 20 6f 70 65 6e 4e 61 76 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 79 53 69 64 65 6e 61 76 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 77 31 30 30 22 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 79 53 69 64 65 6e 61 76 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 31 30 30 22 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 79 53 69 64 65 6e 61 76 22 29 2e 63 6c 61 73 73 4c 69 Data Ascii: // hamburgerfunction openNav() { if (document.getElementById("mySidenav").classList.contains("w100")) { document.getElementById("mySidenav").classList.remove("w100"); } else { document.getElementById("mySidenav").classLi
2024-12-24 15:05:04 UTC	5352	IN	Data Raw: 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 32 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 6e 65 78 74 20 3d 20 6e 65 78 74 2e 6e 65 78 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 6e 65 78 74 2e 6c 65 6e 67 74 68 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 78 74 20 3d 20 24 28 74 68 69 73 29 2e 73 69 62 6c 69 6e 67 73 28 27 3a 66 69 72 73 74 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 6e 65 78 74 2e 63 68 69 6c 64 72 65 6e 28 27 3a 66 69 72 73 74 2d 63 68 69 6c 64 27 29 2e 63 6c 6f 6e 65 28 29 2e 61 70 70 65 6e 64 54 6f 28 24 28 74 68 69 73 29 29 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 29 3b 0d 0a 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 6d 79 41 6c 65 72 74 28 29 20 7b 0d 0a 20 20 20 20 Data Ascii: (var i = 0; i < 2; i++) { next = next.next(); if (!next.length) { next = $(this).siblings(':first'); } next.children(':first-child').clone().appendTo($(this)); }});function myAlert() {
2024-12-24 15:05:04 UTC	6690	IN	Data Raw: 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 20 22 66 61 6c 73 65 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 62 67 4d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 20 22 74 72 75 65 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 66 74 4d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 20 22 74 72 75 65 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 62 67 43 72 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 20 22 74 72 75 65 22 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 67 43 72 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e Data Ascii: bute("aria-hidden", "false"); bgM.setAttribute("aria-hidden", "true"); ftM.setAttribute("aria-hidden", "true"); bgCrt.setAttribute("aria-hidden", "true"); document.body.appendChild(bgCrt); document.body.appen
2024-12-24 15:05:04 UTC	6690	IN	Data Raw: 38 32 31 32 30 22 20 7c 7c 20 75 43 6f 64 65 20 3d 3d 20 22 39 39 32 33 32 30 22 20 7c 7c 20 75 43 6f 64 65 20 3d 3d 20 22 31 32 30 32 32 30 22 29 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 61 64 61 66 6c 61 67 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 76 65 6e 74 2e 64 61 74 61 20 3d 3d 3d 20 22 63 6c 6f 73 65 77 69 6e 64 6f 77 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 6b 43 6c 6f 73 65 57 69 6e 64 6f 77 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 Data Ascii: 82120" \|\| uCode == "992320" \|\| uCode == "120220") if (adaflag) { window.addEventListener("message", function (event) { if (event.data === "closewindow") { mkCloseWindow(); }
2024-12-24 15:05:04 UTC	1338	IN	Data Raw: 57 20 4c 45 53 53 22 29 3b 0d 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 28 22 23 73 70 6e 53 68 6f 72 74 44 65 73 63 72 69 70 74 69 6f 6e 2d 22 20 2b 20 63 6f 75 6e 74 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 27 64 2d 6e 6f 6e 65 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 28 22 23 73 70 6e 4d 6f 72 65 44 65 73 63 72 69 70 74 69 6f 6e 2d 22 20 2b 20 63 6f 75 6e 74 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 27 64 2d 6e 6f 6e 65 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 28 22 23 73 70 6e 4d 65 73 73 61 67 65 2d 22 20 2b 20 63 6f 75 6e 74 29 2e 74 65 78 74 28 22 52 45 41 44 20 4d 4f 52 45 22 29 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 46 6f 72 6d 61 74 43 Data Ascii: W LESS"); } else { jQuery("#spnShortDescription-" + count).toggleClass('d-none'); jQuery("#spnMoreDescription-" + count).toggleClass('d-none'); jQuery("#spnMessage-" + count).text("READ MORE"); }}function FormatC
2024-12-24 15:05:04 UTC	5352	IN	Data Raw: 2b 20 63 61 72 65 74 5f 70 6f 73 3b 0d 0a 20 20 20 20 76 61 72 20 63 6f 75 6e 74 20 3d 20 30 3b 0d 0a 20 20 20 20 69 66 20 28 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 20 21 3d 3d 20 36 35 20 26 26 20 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 20 21 3d 3d 20 31 37 20 26 26 20 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 20 21 3d 3d 20 38 20 26 26 20 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 20 21 3d 3d 20 34 36 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 75 6e 74 20 3d 20 65 76 65 6e 74 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 76 65 6e 74 2e 73 65 74 53 65 6c 65 63 74 69 6f 6e 52 61 6e 67 65 28 63 61 72 65 74 5f 70 6f 73 2c 20 63 61 72 65 74 5f 70 6f 73 20 2b 20 63 6f 75 6e 74 29 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 66 Data Ascii: + caret_pos; var count = 0; if (event.keyCode !== 65 && event.keyCode !== 17 && event.keyCode !== 8 && event.keyCode !== 46) { count = event.value.length; } event.setSelectionRange(caret_pos, caret_pos + count);}function f
2024-12-24 15:05:04 UTC	2676	IN	Data Raw: 63 6b 65 64 27 29 2e 76 61 6c 28 29 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 69 6e 70 75 74 5b 6e 61 6d 65 3d 4c 6f 61 6e 54 79 70 65 5d 27 29 2e 70 61 72 65 6e 74 28 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 27 2e 68 65 6c 70 2d 62 6c 6f 63 6b 27 29 2e 72 65 6d 6f 76 65 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 69 6e 70 75 74 5b 6e 61 6d 65 3d 4c 6f 61 6e 54 79 70 65 5d 27 29 2e 61 64 64 43 6c 61 73 73 28 27 68 65 6c 70 2d 62 6c 6f 63 6b 2d 62 6f 72 64 65 72 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 69 6e 70 75 74 5b 6e 61 6d 65 3d 4c 6f 61 6e 54 79 70 65 5d 27 29 2e 61 74 74 72 28 22 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 22 2c 20 27 56 61 6c Data Ascii: cked').val() === undefined) { $('input[name=LoanType]').parent().parent().find('.help-block').remove(); $('input[name=LoanType]').addClass('help-block-border'); $('input[name=LoanType]').attr("aria-describedby", 'Val
2024-12-24 15:05:04 UTC	2676	IN	Data Raw: 69 6e 76 61 6c 69 64 22 2c 20 27 66 61 6c 73 65 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 24 28 66 72 6f 6d 63 61 6c 63 75 6c 61 74 6f 72 29 2e 66 69 6e 64 28 27 74 65 78 74 61 72 65 61 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 24 28 74 68 69 73 29 2e 64 61 74 61 28 27 76 61 6c 2d 72 65 71 75 69 72 65 64 27 29 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 7c 7c 20 24 28 74 68 69 73 29 2e 64 61 74 61 28 27 76 61 6c 2d 72 65 71 75 69 72 65 64 27 29 20 3d 3d 3d 20 27 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 24 28 27 74 65 78 74 61 72 65 61 27 29 Data Ascii: invalid", 'false'); } } $(fromcalculator).find('textarea').each(function () { if ($(this).data('val-required') === undefined \|\| $(this).data('val-required') === '') { return; } if ($('textarea')
2024-12-24 15:05:04 UTC	5097	IN	Data Raw: 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 43 68 65 63 6b 4e 75 6d 65 72 69 63 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 20 3e 3d 20 34 38 20 26 26 20 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 20 3c 3d 20 35 37 20 7c 7c 20 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 20 3d 3d 3d 20 34 36 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 76 65 72 69 66 79 50 68 6f 6e 65 4e 75 6d 62 65 72 28 70 68 6f 6e 65 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 70 68 6f 6e 65 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0d 0a 20 20 20 20 76 61 72 20 70 68 6f 6e 65 6e 75 6d 62 65 72 20 3d 20 70 68 6f 6e 65 2e 72 65 70 6c 61 63 65 28 27 28 27 2c 20 27 27 29 2e 72 65 70 Data Ascii: }function CheckNumeric(event) { return event.keyCode >= 48 && event.keyCode <= 57 \|\| event.keyCode === 46;}function verifyPhoneNumber(phone) { if (phone === undefined) return; var phonenumber = phone.replace('(', '').rep
2024-12-24 15:05:04 UTC	4014	IN	Data Raw: 62 6c 6f 63 6b 27 29 2e 72 65 6d 6f 76 65 28 29 3b 0d 0a 0d 0a 20 20 20 20 24 28 6a 71 50 72 69 6d 61 72 79 52 65 73 69 64 65 6e 63 65 41 6e 73 77 65 72 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 68 65 6c 70 2d 62 6c 6f 63 6b 2d 62 6f 72 64 65 72 27 29 3b 0d 0a 20 20 20 20 24 28 6a 71 50 72 69 6d 61 72 79 52 65 73 69 64 65 6e 63 65 41 6e 73 77 65 72 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 27 2e 68 65 6c 70 2d 62 6c 6f 63 6b 27 29 2e 72 65 6d 6f 76 65 28 29 3b 0d 0a 0d 0a 20 20 20 20 24 28 6a 71 52 65 70 61 79 6d 65 6e 74 50 6c 61 6e 41 6e 73 77 65 72 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 68 65 6c 70 2d 62 6c 6f 63 6b 2d 62 6f 72 64 65 72 27 29 3b 0d 0a 20 20 20 20 24 28 6a 71 52 65 70 61 79 6d 65 6e 74 50 6c 61 6e 41 6e 73 77 65 72 29 2e Data Ascii: block').remove(); $(jqPrimaryResidenceAnswer).removeClass('help-block-border'); $(jqPrimaryResidenceAnswer).parent().find('.help-block').remove(); $(jqRepaymentPlanAnswer).removeClass('help-block-border'); $(jqRepaymentPlanAnswer).

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49762	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:04 UTC	770	OUT	GET /Content/images/nextarrow-covid.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x
2024-12-24 15:05:04 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:04 GMT Content-Type: image/svg+xml Content-Length: 408 Connection: close Set-Cookie: AWSALB=hmV2Ey3+ml6WOwCZXJQM1FVp36hIzbLrjgL/0fUOhpZCRjnPYJfsFc0DnNWdDNyhn6X0Txckv5HGVByD6yHMHJibEa2yE0UDN2Pz5mvyrYS79gWGtH1qJ3HhIbdb; Expires=Tue, 31 Dec 2024 15:05:04 GMT; Path=/ Set-Cookie: AWSALBCORS=hmV2Ey3+ml6WOwCZXJQM1FVp36hIzbLrjgL/0fUOhpZCRjnPYJfsFc0DnNWdDNyhn6X0Txckv5HGVByD6yHMHJibEa2yE0UDN2Pz5mvyrYS79gWGtH1qJ3HhIbdb; Expires=Tue, 31 Dec 2024 15:05:04 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:04 UTC	408	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 35 2e 31 32 38 22 20 68 65 69 67 68 74 3d 22 39 2e 35 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 2e 31 32 38 20 39 2e 35 32 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 66 36 66 37 66 64 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 31 30 32 2e 32 39 37 20 30 29 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 30 32 2e 32 39 37 20 30 29 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 31 30 37 2e 33 31 38 2c 34 2e 35 6c 2d 34 2e 34 2d 34 2e 34 61 2e 33 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="5.128" height="9.52" viewBox="0 0 5.128 9.52"><defs><style>.a{fill:#f6f7fd;}</style></defs><g transform="translate(-102.297 0)"><g transform="translate(102.297 0)"><path class="a" d="M107.318,4.5l-4.4-4.4a.36

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49761	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:04 UTC	813	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/MQ-app-logo-new.png?ext=.png HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=Vmnm4vHzpKIQBP8LhJTcHoKihu1/vTdYm0agezAZIJg3d2/Obzy67EDMiXeMSKZO/WII7fblW0ZZvKqBiWrriCU6+9DL6iZC9XmShKAVMgNy+YAYb5uWDgEoM5p3
2024-12-24 15:05:04 UTC	827	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:04 GMT Content-Type: image/png Content-Length: 4768 Connection: close Set-Cookie: AWSALB=G0B1Qo2LzbfqnQd2b6mDtqQXuX/xktDg3pQiO8As3E8AV9ZI6pjoXRrPOzgwbwrolNiS3tKbwMKmWS8WWPHz1fhcESLAcMDrzQ2fmhsGtWRA/eOo/Ul0HtnjH7lM; Expires=Tue, 31 Dec 2024 15:05:04 GMT; Path=/ Set-Cookie: AWSALBCORS=G0B1Qo2LzbfqnQd2b6mDtqQXuX/xktDg3pQiO8As3E8AV9ZI6pjoXRrPOzgwbwrolNiS3tKbwMKmWS8WWPHz1fhcESLAcMDrzQ2fmhsGtWRA/eOo/Ul0HtnjH7lM; Expires=Tue, 31 Dec 2024 15:05:04 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 08 Jun 2021 18:46:27 GMT Accept-Ranges: bytes ETag: "e4d69296965cd71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:04 UTC	3182	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 38 08 02 00 00 00 c2 7a 69 25 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 fa 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR@8zi%pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD
2024-12-24 15:05:04 UTC	1586	IN	Data Raw: 81 30 19 d4 f8 89 fa 3b 97 4c d8 70 f3 82 4c dc a7 d6 61 82 6f 9f ec 79 a6 be 15 40 ca 71 e3 3b c7 76 9c 88 0d 88 c5 02 bd 88 65 5f 7c 09 83 d1 00 a7 e0 aa 19 89 cd 5f 5e b1 76 88 f4 00 ae af 1e f7 b3 fb 56 ae ab 2e 87 f5 55 7b 03 bf f5 74 9b 0e 76 f4 9a 85 72 51 6b cb 0f 4f f9 ce 4b f5 1d 3e 6e ee 89 be bb e5 b8 17 38 75 81 4a 26 18 6e 19 61 14 41 ec 4c 67 96 f8 ef df b6 34 74 d2 3d 44 7a 00 5d 19 43 da 1e be 6d d1 c2 89 45 b0 90 b9 1d ac 50 5b bb d2 cf ec 6d 21 09 8e 84 80 53 69 ca 14 6d 78 61 ff 37 9e af ef 4e ab 41 c8 c8 a8 d4 e1 4e c7 0c 10 0d 62 e2 ab eb e6 56 15 4b 57 ba 10 f3 22 c8 a6 7b ae 01 22 5a 4e 54 35 88 a7 7b 66 47 63 6c 30 cb ef c4 34 28 15 1a 90 9e 26 b1 33 08 1c f4 c9 7d 1d 24 41 75 06 45 40 18 a1 30 f1 04 40 1a 98 df 1f 08 35 b2 22 48 Data Ascii: 0;LpLaoy@q;ve_\|_^vV.U{tvrQkOK>n8uJ&naALg4t=Dz]CmEP[m!Simxa7NANbVKW"{"ZNT5{fGcl04(&3}$AuE@0@5"H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49763	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:04 UTC	564	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/home-owner_1.svg?ext=.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=pSeLWmc2pyE+ZPm/qS823rZeJj0WgLY2FbTrtElvQ4NcdO8zwVRwGiHR7PTr0nSrTpRFFFlFeue/WwRVreM/78ZTQej6sCSQTVX9htjnjtZ2cJrt603Ob1uqvOcD
2024-12-24 15:05:04 UTC	830	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:04 GMT Content-Type: image/svg+xml Content-Length: 2360 Connection: close Set-Cookie: AWSALB=Dpk1PlUXwjtQ+9DsBKZZxvxJQom7Oy6m+uvW/I11Tg139SW3jfVG1I/PYH41q87Kmp6HX4c88m+8YVbJU/t56BXz7RqU/7xQ3EjP4Gj7bzx7wZuTlKrp+rBDPrmJ; Expires=Tue, 31 Dec 2024 15:05:04 GMT; Path=/ Set-Cookie: AWSALBCORS=Dpk1PlUXwjtQ+9DsBKZZxvxJQom7Oy6m+uvW/I11Tg139SW3jfVG1I/PYH41q87Kmp6HX4c88m+8YVbJU/t56BXz7RqU/7xQ3EjP4Gj7bzx7wZuTlKrp+rBDPrmJ; Expires=Tue, 31 Dec 2024 15:05:04 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 01 Jun 2021 16:26:56 GMT Accept-Ranges: bytes ETag: "f0a43af0257d71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:04 UTC	503	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 35 37 2e 36 32 22 20 68 65 69 67 68 74 3d 22 36 32 2e 33 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 37 2e 36 32 20 36 32 2e 33 39 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 30 30 37 64 63 35 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 34 34 2e 34 33 20 2d 39 2e 35 34 39 29 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 37 32 39 2e 35 39 2c 31 30 37 2e 31 36 68 2d 32 56 39 39 2e 35 38 63 30 2d 37 2e 32 33 2d 37 2e 32 34 2d 31 35 2e 33 32 2d 31 36 2e 39 33 2d 31 35 2e 33 32 73 2d Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="57.62" height="62.39" viewBox="0 0 57.62 62.39"><defs><style>.a{fill:#007dc5;}</style></defs><g transform="translate(-644.43 -9.549)"><path class="a" d="M729.59,107.16h-2V99.58c0-7.23-7.24-15.32-16.93-15.32s-
2024-12-24 15:05:04 UTC	1338	IN	Data Raw: 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 38 2e 30 37 20 2d 37 32 2e 37 32 31 29 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 37 32 35 2e 39 34 2c 31 30 39 2e 34 39 63 2d 37 2e 38 2c 30 2d 32 33 2e 35 37 2d 31 30 2d 32 33 2e 35 37 2d 31 38 2e 32 36 68 32 63 30 2c 36 2e 35 34 2c 31 34 2e 31 35 2c 31 36 2e 32 36 2c 32 31 2e 35 38 2c 31 36 2e 32 36 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 38 2e 30 37 20 2d 37 32 2e 37 32 31 29 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 37 30 35 2e 32 2c 31 32 33 2e 38 31 63 2d 35 2e 37 32 2d 32 2e 35 35 2d 39 2e 34 34 2d 37 2e 35 32 2d 39 2e 34 37 2d 31 32 2e 36 36 76 2d 34 63 30 2d 34 2e 39 34 2c 33 2e 37 36 2d 38 2e 37 36 2c 37 Data Ascii: orm="translate(-38.07 -72.721)"/><path class="a" d="M725.94,109.49c-7.8,0-23.57-10-23.57-18.26h2c0,6.54,14.15,16.26,21.58,16.26Z" transform="translate(-38.07 -72.721)"/><path class="a" d="M705.2,123.81c-5.72-2.55-9.44-7.52-9.47-12.66v-4c0-4.94,3.76-8.76,7
2024-12-24 15:05:04 UTC	519	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 38 2e 30 37 20 2d 37 32 2e 37 32 31 29 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 37 31 35 2e 33 31 2c 31 34 34 2e 34 32 2c 37 30 39 2e 39 32 2c 31 33 39 6c 31 30 2e 37 31 2d 31 30 2e 37 2c 35 2e 33 39 2c 35 2e 33 39 5a 4d 37 31 32 2e 37 34 2c 31 33 39 6c 32 2e 35 37 2c 32 2e 35 38 2c 37 2e 38 39 2d 37 2e 38 39 2d 32 2e 35 37 2d 32 2e 35 37 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 38 2e 30 37 20 2d 37 32 2e 37 32 31 29 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 36 38 34 2e 33 39 2c 31 34 34 2e 36 36 2c 36 38 32 2e 35 2c 31 34 34 6c 31 2e 32 33 2d 33 2e 36 39 61 39 2c 39 2c 30 2c 30 2c 31 2c 36 2e 35 Data Ascii: transform="translate(-38.07 -72.721)"/><path class="a" d="M715.31,144.42,709.92,139l10.71-10.7,5.39,5.39ZM712.74,139l2.57,2.58,7.89-7.89-2.57-2.57Z" transform="translate(-38.07 -72.721)"/><path class="a" d="M684.39,144.66,682.5,144l1.23-3.69a9,9,0,0,1,6.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49764	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:04 UTC	520	OUT	GET /Content/images/right-arrow.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=pSeLWmc2pyE+ZPm/qS823rZeJj0WgLY2FbTrtElvQ4NcdO8zwVRwGiHR7PTr0nSrTpRFFFlFeue/WwRVreM/78ZTQej6sCSQTVX9htjnjtZ2cJrt603Ob1uqvOcD
2024-12-24 15:05:04 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:04 GMT Content-Type: image/svg+xml Content-Length: 350 Connection: close Set-Cookie: AWSALB=3oU3jg0W6LpMjZuWz+Aqq1qA6zBnUX2Hd25c8WJ6Ocw7kRLrQTWcwF6kC9C1Es7H7JFnb3xgvq7n6S9BnAggDVANHecywzPhRoPVavOYA0Yi5wLFo8dGHXGpn+rx; Expires=Tue, 31 Dec 2024 15:05:04 GMT; Path=/ Set-Cookie: AWSALBCORS=3oU3jg0W6LpMjZuWz+Aqq1qA6zBnUX2Hd25c8WJ6Ocw7kRLrQTWcwF6kC9C1Es7H7JFnb3xgvq7n6S9BnAggDVANHecywzPhRoPVavOYA0Yi5wLFo8dGHXGpn+rx; Expires=Tue, 31 Dec 2024 15:05:04 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:04 UTC	350	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 2e 30 30 34 22 20 68 65 69 67 68 74 3d 22 31 30 2e 30 30 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 2e 30 30 34 20 31 30 2e 30 30 33 22 3e 0d 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 6c 65 66 74 2d 61 72 72 6f 77 22 20 64 3d 22 4d 31 39 2e 35 2c 31 36 2e 35 48 39 2e 35 32 36 6c 33 2e 38 32 31 2d 33 2e 36 33 39 61 2e 35 2e 35 2c 30 2c 30 2c 30 2d 2e 36 39 2d 2e 37 32 34 4c 38 2e 32 39 33 2c 31 36 2e 32 39 34 41 31 2c 31 2c 30 2c 30 2c 30 2c 38 2e 33 2c 31 37 2e 37 31 37 6c 34 2e 33 35 35 2c 34 2e 31 34 38 61 2e 35 2e 35 2c 30 2c 31 2c 30 2c 2e 36 39 2d 2e 37 32 34 4c 39 2e 35 31 2c 31 37 2e 35 48 31 39 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="12.004" height="10.003" viewBox="0 0 12.004 10.003"> <path id="left-arrow" d="M19.5,16.5H9.526l3.821-3.639a.5.5,0,0,0-.69-.724L8.293,16.294A1,1,0,0,0,8.3,17.717l4.355,4.148a.5.5,0,1,0,.69-.724L9.51,17.5H19

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49757	3.160.196.72	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:04 UTC	566	OUT	GET /v1/apps/6567c1c6a2ec72132b15f3af/websdk HTTP/1.1 Host: sdk.apptentive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:05 UTC	399	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Location: https://api.apptentive.com/v1/apps/6567c1c6a2ec72132b15f3af/websdk Date: Tue, 24 Dec 2024 15:05:04 GMT Server: envoy X-Cache: Miss from cloudfront Via: 1.1 5a0ad779aa83ccbf74d4770007973f3a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P6 X-Amz-Cf-Id: 1_fEv_fPxezwXyawmQzGhYB8dZd8sY3TCUEZMUtE-lpM4QZJce2Qhg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49766	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:05 UTC	759	OUT	GET /Content/images/next.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=Vmnm4vHzpKIQBP8LhJTcHoKihu1/vTdYm0agezAZIJg3d2/Obzy67EDMiXeMSKZO/WII7fblW0ZZvKqBiWrriCU6+9DL6iZC9XmShKAVMgNy+YAYb5uWDgEoM5p3
2024-12-24 15:05:05 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:05 GMT Content-Type: image/svg+xml Content-Length: 419 Connection: close Set-Cookie: AWSALB=hcVFg5GlNgRFbz7ZnIVG2uRAshFQy/SUfeGz4NAmZX5/7PIEphwZyXciL9s+60Cq3xWO71Y5uO3/XpFsjlkHIZ3I7ESGQPhCb9s45kHBnuIKUry5K7HQt3+Y/yrB; Expires=Tue, 31 Dec 2024 15:05:05 GMT; Path=/ Set-Cookie: AWSALBCORS=hcVFg5GlNgRFbz7ZnIVG2uRAshFQy/SUfeGz4NAmZX5/7PIEphwZyXciL9s+60Cq3xWO71Y5uO3/XpFsjlkHIZ3I7ESGQPhCb9s45kHBnuIKUry5K7HQt3+Y/yrB; Expires=Tue, 31 Dec 2024 15:05:05 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:05 UTC	419	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 35 2e 34 31 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 30 34 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 2e 34 31 31 20 31 30 2e 30 34 35 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 33 33 33 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 31 30 32 2e 32 39 37 20 30 29 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 30 32 2e 32 39 37 20 30 29 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 31 30 37 2e 36 2c 34 2e 37 34 37 2c 31 30 32 2e 39 35 37 2e 31 30 39 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="5.411" height="10.045" viewBox="0 0 5.411 10.045"><defs><style>.a{fill:#333;}</style></defs><g transform="translate(-102.297 0)"><g transform="translate(102.297 0)"><path class="a" d="M107.6,4.747,102.957.109

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49767	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:05 UTC	761	OUT	GET /kentico/bundles/pageComponents/scripts?v=-JgURDK_xbjjD0-dkM5RgHCtLKu5Bs3tXGW1Fj3x1-E1 HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x
2024-12-24 15:05:05 UTC	842	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:05 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 17343 Connection: close Set-Cookie: AWSALB=cNTnHiD0QoSbt+9U1Tce+IOn3j20UrIQNobqCnRrE1WM8U07YjFE0zTvUbKPbwXG5c3t162uYCWNs5ZMNY4byivveGtY6dXmluZHRqIUq1alleL1Bftvdty10dQW; Expires=Tue, 31 Dec 2024 15:05:05 GMT; Path=/ Set-Cookie: AWSALBCORS=cNTnHiD0QoSbt+9U1Tce+IOn3j20UrIQNobqCnRrE1WM8U07YjFE0zTvUbKPbwXG5c3t162uYCWNs5ZMNY4byivveGtY6dXmluZHRqIUq1alleL1Bftvdty10dQW; Expires=Tue, 31 Dec 2024 15:05:05 GMT; Path=/; SameSite=None Cache-Control: public Expires: Wed, 24 Dec 2025 15:05:05 GMT Last-Modified: Tue, 24 Dec 2024 15:05:05 GMT Vary: User-Agent X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:05 UTC	1829	IN	Data Raw: 0d 0a 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 46 61 69 6c 65 64 41 50 49 43 61 6c 6c 28 72 65 73 70 6f 6e 73 65 29 20 7b 0d 0a 20 20 20 20 24 28 27 23 65 78 63 65 70 74 69 6f 6e 4d 65 73 73 61 67 65 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 64 2d 6e 6f 6e 65 27 29 3b 0d 0a 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 60 46 61 69 6c 65 64 20 41 50 49 20 52 65 73 70 6f 6e 73 65 3a 20 24 7b 72 65 73 70 6f 6e 73 65 7d 60 29 0d 0a 7d 0d 0a 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 45 72 72 6f 72 52 65 73 70 6f 6e 73 65 28 72 65 73 70 6f 6e 73 65 29 20 7b 0d 0a 20 20 20 20 24 28 27 23 65 72 72 6f 72 4d 65 73 73 61 67 65 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 64 2d 6e 6f 6e 65 27 29 3b 0d 0a 20 20 20 20 63 6f 6e 73 6f Data Ascii: function handleFailedAPICall(response) { $('#exceptionMessage').removeClass('d-none'); console.error(`Failed API Response: ${response}`)}function handleErrorResponse(response) { $('#errorMessage').removeClass('d-none'); conso
2024-12-24 15:05:05 UTC	1338	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 70 6f 6e 73 65 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 72 65 73 70 6f 6e 73 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 6f 72 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 61 6e 64 6c 65 46 61 69 6c 65 64 41 50 49 43 61 6c 6c 28 72 65 73 70 6f 6e 73 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 67 2e 65 72 72 6f 72 28 65 72 72 6f 72 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 Data Ascii: response = JSON.parse(response); } catch (error) { handleFailedAPICall(response); log.error(error); }
2024-12-24 15:05:05 UTC	1338	IN	Data Raw: 6e 64 6c 65 46 61 69 6c 65 64 41 50 49 43 61 6c 6c 28 72 65 73 70 6f 6e 73 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 0d 0a 20 20 20 20 7d 0d 0a 7d 29 3b 0d 0a 0d 0a 24 28 27 23 66 72 6d 41 73 73 69 73 74 61 6e 63 65 4c 6f 63 61 74 6f 72 20 2e 72 65 73 65 74 2d 62 74 6e 27 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 28 65 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 24 28 27 23 66 72 6d 41 73 73 69 73 74 61 6e 63 65 4c 6f 63 61 74 6f 72 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 77 61 73 2d 76 61 6c 69 64 61 74 65 64 27 29 3b 0d 0a 20 20 20 20 24 28 27 23 73 75 63 63 65 73 73 4d 65 73 73 61 67 65 53 44 27 29 2e 61 64 64 43 6c Data Ascii: ndleFailedAPICall(response); }); }); }); }});$('#frmAssistanceLocator .reset-btn').on('click', (e) => { $('#frmAssistanceLocator').removeClass('was-validated'); $('#successMessageSD').addCl
2024-12-24 15:05:05 UTC	1338	IN	Data Raw: 68 6f 77 53 53 4e 20 73 70 61 6e 2e 66 61 27 29 2e 61 64 64 43 6c 61 73 73 28 27 66 61 2d 65 79 65 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 74 6f 67 67 6c 65 53 68 6f 77 53 53 4e 27 29 2e 61 74 74 72 28 27 61 72 69 61 2d 6c 61 62 65 6c 27 2c 20 27 48 69 64 65 20 53 6f 63 69 61 6c 20 53 65 63 75 72 69 74 79 20 4e 75 6d 62 65 72 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 29 3b 0d 0a 0d 0a 0d 0a 20 20 20 20 24 28 27 23 66 72 6d 4c 6f 61 6e 4e 75 6d 62 65 72 4c 6f 63 61 74 6f 72 27 29 2e 6f 6e 28 27 73 75 62 6d 69 74 27 2c 20 28 65 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 23 73 75 63 63 65 73 73 4d 65 73 73 61 67 65 Data Ascii: howSSN span.fa').addClass('fa-eye'); $('#toggleShowSSN').attr('aria-label', 'Hide Social Security Number'); } }); $('#frmLoanNumberLocator').on('submit', (e) => { e.preventDefault(); $('#successMessage
2024-12-24 15:05:05 UTC	1338	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 66 72 6d 4c 6f 61 6e 4e 75 6d 62 65 72 4c 6f 63 61 74 6f 72 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 70 6f 73 69 74 69 6f 6e 72 65 6c 61 74 69 76 65 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 70 6f 6e 73 65 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 72 65 73 70 6f 6e 73 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 6f 72 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 61 6e 64 6c 65 Data Ascii: $('#frmLoanNumberLocator').removeClass('positionrelative'); try { response = JSON.parse(response); } catch (error) { handle
2024-12-24 15:05:05 UTC	1338	IN	Data Raw: 20 20 20 24 28 27 23 66 72 6d 4c 6f 61 6e 4e 75 6d 62 65 72 4c 6f 63 61 74 6f 72 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 77 61 73 2d 76 61 6c 69 64 61 74 65 64 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 23 73 75 63 63 65 73 73 4d 65 73 73 61 67 65 27 29 2e 61 64 64 43 6c 61 73 73 28 27 64 2d 6e 6f 6e 65 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 23 65 72 72 6f 72 4d 65 73 73 61 67 65 27 29 2e 61 64 64 43 6c 61 73 73 28 27 64 2d 6e 6f 6e 65 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 23 65 78 63 65 70 74 69 6f 6e 4d 65 73 73 61 67 65 27 29 2e 61 64 64 43 6c 61 73 73 28 27 64 2d 6e 6f 6e 65 27 29 3b 0d 0a 20 20 20 20 7d 29 3b 0d 0a 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 46 61 69 6c 65 64 41 50 49 43 61 6c 6c 50 61 79 Data Ascii: $('#frmLoanNumberLocator').removeClass('was-validated'); $('#successMessage').addClass('d-none'); $('#errorMessage').addClass('d-none'); $('#exceptionMessage').addClass('d-none'); });function handleFailedAPICallPay
2024-12-24 15:05:05 UTC	1338	IN	Data Raw: 3a 76 61 6c 69 64 27 29 2e 6c 65 6e 67 74 68 20 21 3d 3d 20 24 28 27 66 6f 72 6d 20 69 6e 70 75 74 3a 72 65 71 75 69 72 65 64 27 29 2e 6c 65 6e 67 74 68 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 68 74 6d 6c 2c 20 62 6f 64 79 27 29 2e 61 6e 69 6d 61 74 65 28 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 63 72 6f 6c 6c 54 6f 70 3a 20 28 24 28 27 69 6e 70 75 74 3a 69 6e 76 61 6c 69 64 27 29 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 20 2d 20 32 30 30 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: :valid').length !== $('form input:required').length) { e.preventDefault(); $('html, body').animate({ scrollTop: ($('input:invalid').offset().top - 200) }, 0); } else {
2024-12-24 15:05:05 UTC	6690	IN	Data Raw: 20 20 20 20 20 20 20 24 28 27 23 70 61 79 4d 65 73 73 61 67 65 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 64 2d 6e 6f 6e 65 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 70 61 79 4d 65 73 73 61 67 65 27 29 2e 73 68 6f 77 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 24 28 27 23 66 69 66 74 68 51 75 65 73 74 69 6f 6e 59 65 73 27 29 2e 70 72 6f 70 28 27 63 68 65 63 6b 65 64 27 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 72 65 Data Ascii: $('#payMessage').removeClass('d-none'); $('#payMessage').show(); } else if ($('#fifthQuestionYes').prop('checked')) { $('#re
2024-12-24 15:05:05 UTC	796	IN	Data Raw: 27 64 2d 6e 6f 6e 65 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 29 3b 0d 0a 0d 0a 20 20 20 20 24 28 27 23 68 61 72 64 73 68 69 70 54 79 70 65 4f 74 68 65 72 54 78 74 27 29 2e 6f 6e 28 27 63 68 61 6e 67 65 27 2c 20 28 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 23 68 61 72 64 73 68 69 70 54 79 70 65 4f 74 68 65 72 43 68 6b 27 29 2e 76 61 6c 28 27 4f 74 68 65 72 3a 20 27 20 2b 20 24 28 27 23 68 61 72 64 73 68 69 70 54 79 70 65 4f 74 68 65 72 54 78 74 27 29 2e 76 61 6c 28 29 29 3b 0d 0a 20 20 20 20 7d 29 3b 0d 0a 0d 0a 20 20 20 20 24 28 27 23 69 6e 63 6f 6d 65 54 79 70 65 4f 74 68 65 72 43 68 6b 27 29 2e 6f 6e 28 27 63 68 61 6e 67 65 27 2c 20 28 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 24 28 27 23 69 6e 63 Data Ascii: 'd-none'); } }); $('#hardshipTypeOtherTxt').on('change', () => { $('#hardshipTypeOtherChk').val('Other: ' + $('#hardshipTypeOtherTxt').val()); }); $('#incomeTypeOtherChk').on('change', () => { if ($('#inc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49768	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:05 UTC	752	OUT	GET /kentico/bundles/forms/scripts?v=Gt4GbgwtDKK0sTC0YrvKBwgsxuk25Gpe2t6-p5hD_A81 HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x
2024-12-24 15:05:05 UTC	843	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:05 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 143253 Connection: close Set-Cookie: AWSALB=yD7KJ0BO76gssvFbQ1RmY2HVI7fFaWOWRTeaWXOQtKzsCoEnUp5SV0EX5U55dVAo+tghrfPlBfmRb7qBgkQSSrsb5tghvMCJFucv3MFHgwE1wrmplJy2SDkzapvb; Expires=Tue, 31 Dec 2024 15:05:05 GMT; Path=/ Set-Cookie: AWSALBCORS=yD7KJ0BO76gssvFbQ1RmY2HVI7fFaWOWRTeaWXOQtKzsCoEnUp5SV0EX5U55dVAo+tghrfPlBfmRb7qBgkQSSrsb5tghvMCJFucv3MFHgwE1wrmplJy2SDkzapvb; Expires=Tue, 31 Dec 2024 15:05:05 GMT; Path=/; SameSite=None Cache-Control: public Expires: Wed, 24 Dec 2025 15:05:05 GMT Last-Modified: Tue, 24 Dec 2024 15:05:05 GMT Vary: User-Agent X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:05 UTC	490	IN	Data Raw: 77 69 6e 64 6f 77 2e 6b 65 6e 74 69 63 6f 20 3d 20 77 69 6e 64 6f 77 2e 6b 65 6e 74 69 63 6f 20 7c 7c 20 7b 7d 3b 0d 0a 77 69 6e 64 6f 77 2e 6b 65 6e 74 69 63 6f 2e 5f 66 6f 72 6d 73 20 3d 20 77 69 6e 64 6f 77 2e 6b 65 6e 74 69 63 6f 2e 5f 66 6f 72 6d 73 20 7c 7c 20 7b 7d 3b 0d 0a 77 69 6e 64 6f 77 2e 6b 65 6e 74 69 63 6f 2e 5f 66 6f 72 6d 73 2e 66 6f 72 6d 46 69 6c 65 55 70 6c 6f 61 64 65 72 43 6f 6d 70 6f 6e 65 6e 74 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 64 6f 63 75 6d 65 6e 74 29 20 7b 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 69 73 61 62 6c 65 45 6c 65 6d 65 6e 74 73 28 66 6f 72 6d 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 72 6d 2e 66 69 6c 65 55 70 6c 6f 61 64 65 72 44 69 73 61 62 6c 65 64 45 6c 65 6d 65 6e 74 73 20 3d 20 5b 5d 3b Data Ascii: window.kentico = window.kentico \|\| {};window.kentico._forms = window.kentico._forms \|\| {};window.kentico._forms.formFileUploaderComponent = (function (document) { function disableElements(form) { form.fileUploaderDisabledElements = [];
2024-12-24 15:05:05 UTC	4014	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 2e 64 69 73 61 62 6c 65 64 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 65 6e 61 62 6c 65 45 6c 65 6d 65 6e 74 73 28 66 6f 72 6d 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 72 6d 2e 66 69 6c 65 55 70 6c 6f 61 64 65 72 44 69 73 61 62 6c 65 64 45 6c 65 6d 65 6e 74 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 64 69 73 61 62 6c 65 64 45 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 6d 2e 65 6c 65 6d 65 6e 74 73 5b 64 69 73 61 62 6c 65 64 45 6c 65 6d 65 6e 74 5d 2e 64 69 73 61 62 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 Data Ascii: element.disabled = true; } } } function enableElements(form) { form.fileUploaderDisabledElements.forEach(function (disabledElement) { form.elements[disabledElement].disabled = false;
2024-12-24 15:05:05 UTC	4014	IN	Data Raw: 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 49 6e 20 49 45 31 31 20 63 68 61 6e 67 65 20 66 69 72 65 73 20 61 6c 73 6f 20 77 68 65 6e 20 73 65 74 74 69 6e 67 20 66 69 6c 65 49 6e 70 75 74 20 76 61 6c 75 65 20 74 6f 20 6e 75 6c 6c 2e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 66 69 6c 65 49 6e 70 75 74 2e 76 61 6c 75 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 54 65 78 74 42 75 74 74 6f 6e 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 68 69 64 64 65 6e 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 49 63 6f 6e 42 75 74 74 6f 6e 2e 73 65 74 41 74 74 72 69 62 Data Ascii: { // In IE11 change fires also when setting fileInput value to null. if (!fileInput.value) { return; } inputTextButton.removeAttribute("hidden"); inputIconButton.setAttrib
2024-12-24 15:05:05 UTC	2676	IN	Data Raw: 29 20 7b 20 69 66 20 28 22 6f 62 6a 65 63 74 22 20 3d 3d 20 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 26 26 20 22 6f 62 6a 65 63 74 22 20 3d 3d 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 29 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 74 28 29 3b 20 65 6c 73 65 20 69 66 20 28 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 29 20 64 65 66 69 6e 65 28 5b 5d 2c 20 74 29 3b 20 65 6c 73 65 20 7b 20 76 61 72 20 69 20 3d 20 74 28 29 3b 20 66 6f 72 20 28 76 61 72 20 6e 20 69 6e 20 69 29 20 28 22 6f 62 6a 65 63 74 22 20 3d 3d 20 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3f 20 65 78 70 6f 72 74 73 20 3a 20 65 29 5b 6e 5d 20 3d 20 69 5b 6e 5d 20 7d 20 7d 28 22 75 6e 64 65 66 69 Data Ascii: ) { if ("object" == typeof exports && "object" == typeof module) module.exports = t(); else if ("function" == typeof define && define.amd) define([], t); else { var i = t(); for (var n in i) ("object" == typeof exports ? exports : e)[n] = i[n] } }("undefi
2024-12-24 15:05:05 UTC	1338	IN	Data Raw: 5c 75 66 66 31 39 5d 22 2c 20 64 65 66 69 6e 69 74 69 6f 6e 53 79 6d 62 6f 6c 3a 20 22 2a 22 20 7d 2c 20 61 3a 20 7b 20 76 61 6c 69 64 61 74 6f 72 3a 20 22 5b 41 2d 5a 61 2d 7a 5c 75 30 34 31 30 2d 5c 75 30 34 34 66 5c 75 30 34 30 31 5c 75 30 34 35 31 5c 78 63 30 2d 5c 78 66 66 5c 78 62 35 5d 22 2c 20 64 65 66 69 6e 69 74 69 6f 6e 53 79 6d 62 6f 6c 3a 20 22 2a 22 20 7d 2c 20 22 2a 22 3a 20 7b 20 76 61 6c 69 64 61 74 6f 72 3a 20 22 5b 30 2d 39 5c 75 66 66 31 30 2d 5c 75 66 66 31 39 41 2d 5a 61 2d 7a 5c 75 30 34 31 30 2d 5c 75 30 34 34 66 5c 75 30 34 30 31 5c 75 30 34 35 31 5c 78 63 30 2d 5c 78 66 66 5c 78 62 35 5d 22 20 7d 20 7d 20 7d 2c 20 32 35 33 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f Data Ascii: \uff19]", definitionSymbol: "" }, a: { validator: "[A-Za-z\u0410-\u044f\u0401\u0451\xc0-\xff\xb5]", definitionSymbol: "" }, "*": { validator: "[0-9\uff10-\uff19A-Za-z\u0410-\u044f\u0401\u0451\xc0-\xff\xb5]" } } }, 253: function (e, t) { Object.definePro
2024-12-24 15:05:05 UTC	1338	IN	Data Raw: 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 20 3f 20 6e 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 20 61 2c 20 21 31 29 20 3a 20 6e 2e 64 65 74 61 63 68 45 76 65 6e 74 20 26 26 20 6e 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2e 63 6f 6e 63 61 74 28 65 29 2c 20 61 29 2c 20 22 67 6c 6f 62 61 6c 22 20 3d 3d 3d 20 74 29 20 66 6f 72 20 28 76 61 72 20 72 20 69 6e 20 69 5b 65 5d 29 20 69 5b 65 5d 5b 72 5d 2e 73 70 6c 69 63 65 28 69 5b 65 5d 5b 72 5d 2e 69 6e 64 65 78 4f 66 28 61 29 2c 20 31 29 3b 20 65 6c 73 65 20 69 5b 65 5d 5b 74 5d 2e 73 70 6c 69 63 65 28 69 5b 65 5d 5b 74 5d 2e 69 6e 64 65 78 4f 66 28 61 29 2c 20 31 29 20 7d 28 74 2c 20 65 2e 6e 61 6d 65 73 70 61 63 65 2c 20 61 29 20 7d 29 29 20 7d 29 29 29 3b 20 72 65 74 Data Ascii: veEventListener ? n.removeEventListener(e, a, !1) : n.detachEvent && n.detachEvent("on".concat(e), a), "global" === t) for (var r in i[e]) i[e][r].splice(i[e][r].indexOf(a), 1); else i[e][t].splice(i[e][t].indexOf(a), 1) }(t, e.namespace, a) })) }))); ret
2024-12-24 15:05:05 UTC	1338	IN	Data Raw: 74 63 68 45 76 65 6e 74 28 64 29 20 7d 20 65 6c 73 65 20 28 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 4f 62 6a 65 63 74 28 29 29 2e 65 76 65 6e 74 54 79 70 65 20 3d 20 63 2c 20 64 2e 64 65 74 61 69 6c 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 20 65 2e 74 79 70 65 20 26 26 20 28 30 2c 20 61 2e 64 65 66 61 75 6c 74 29 28 64 2c 20 65 29 2c 20 6e 2e 66 69 72 65 45 76 65 6e 74 28 22 6f 6e 22 20 2b 20 64 2e 65 76 65 6e 74 54 79 70 65 2c 20 64 29 20 7d 20 65 6c 73 65 20 69 66 20 28 76 6f 69 64 20 30 20 21 3d 3d 20 69 5b 63 5d 29 20 7b 20 61 72 67 75 6d 65 6e 74 73 5b 30 5d 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 74 79 70 65 20 3f 20 61 72 67 75 6d 65 6e 74 73 5b 30 5d 20 3a 20 6f 2e 64 65 66 61 75 6c 74 2e 45 76 65 6e Data Ascii: tchEvent(d) } else (d = document.createEventObject()).eventType = c, d.detail = arguments[1], e.type && (0, a.default)(d, e), n.fireEvent("on" + d.eventType, d) } else if (void 0 !== i[c]) { arguments[0] = arguments[0].type ? arguments[0] : o.default.Even
2024-12-24 15:05:05 UTC	1338	IN	Data Raw: 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 3b 20 69 66 20 28 22 41 72 67 75 6d 65 6e 74 73 22 20 3d 3d 3d 20 69 20 7c 7c 20 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 69 29 29 20 72 65 74 75 72 6e 20 63 28 65 2c 20 74 29 20 7d 28 65 2c 20 74 29 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 Data Ascii: eturn Array.from(e); if ("Arguments" === i \|\| /^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(i)) return c(e, t) }(e, t) \|\| function () { throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array object
2024-12-24 15:05:05 UTC	1338	IN	Data Raw: 7c 20 7b 7d 2c 20 63 20 3d 20 31 2c 20 75 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 20 66 20 3d 20 21 31 3b 20 22 62 6f 6f 6c 65 61 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 6c 20 26 26 20 28 66 20 3d 20 6c 2c 20 6c 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 63 5d 20 7c 7c 20 7b 7d 2c 20 63 2b 2b 29 3b 20 22 6f 62 6a 65 63 74 22 20 21 3d 3d 20 69 28 6c 29 20 26 26 20 22 66 75 6e 63 74 69 6f 6e 22 20 21 3d 20 74 79 70 65 6f 66 20 6c 20 26 26 20 28 6c 20 3d 20 7b 7d 29 3b 20 66 6f 72 20 28 3b 20 63 20 3c 20 75 3b 20 63 2b 2b 29 69 66 20 28 6e 75 6c 6c 20 21 3d 20 28 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 63 5d 29 29 20 66 6f 72 20 28 6e 20 69 6e 20 74 29 20 61 20 3d 20 6c 5b 6e 5d 2c 20 6c 20 21 3d 3d 20 28 72 20 3d 20 74 5b 6e 5d 29 20 26 26 Data Ascii: \| {}, c = 1, u = arguments.length, f = !1; "boolean" == typeof l && (f = l, l = arguments[c] \|\| {}, c++); "object" !== i(l) && "function" != typeof l && (l = {}); for (; c < u; c++)if (null != (t = arguments[c])) for (n in t) a = l[n], l !== (r = t[n]) &&
2024-12-24 15:05:05 UTC	1338	IN	Data Raw: 6f 62 69 6c 65 20 3d 20 74 2e 69 70 68 6f 6e 65 20 3d 20 74 2e 69 65 20 3d 20 76 6f 69 64 20 30 3b 20 76 61 72 20 6e 2c 20 61 20 3d 20 28 6e 20 3d 20 69 28 39 33 38 30 29 29 20 26 26 20 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 20 3f 20 6e 20 3a 20 7b 20 64 65 66 61 75 6c 74 3a 20 6e 20 7d 3b 20 76 61 72 20 72 20 3d 20 61 2e 64 65 66 61 75 6c 74 2e 6e 61 76 69 67 61 74 6f 72 20 26 26 20 61 2e 64 65 66 61 75 6c 74 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 20 7c 7c 20 22 22 2c 20 6f 20 3d 20 72 2e 69 6e 64 65 78 4f 66 28 22 4d 53 49 45 20 22 29 20 3e 20 30 20 7c 7c 20 72 2e 69 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 2f 22 29 20 3e 20 30 2c 20 73 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 20 26 26 20 6e 61 Data Ascii: obile = t.iphone = t.ie = void 0; var n, a = (n = i(9380)) && n.__esModule ? n : { default: n }; var r = a.default.navigator && a.default.navigator.userAgent \|\| "", o = r.indexOf("MSIE ") > 0 \|\| r.indexOf("Trident/") > 0, s = navigator.userAgentData && na

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49770	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:05 UTC	564	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/loan-option1.svg?ext=.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=Bt8eoKvQFSS9gzT2YLH176zsrU9Te3myvwe8OQfrCvR6RcRfHnyyRupO7GDWUAMDizag9x3qeweBs3X1+j4kqTTtWJ6gvMZwGgFGORtyrDJbeJsBN/0+quBxMbIq
2024-12-24 15:05:05 UTC	830	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:05 GMT Content-Type: image/svg+xml Content-Length: 2796 Connection: close Set-Cookie: AWSALB=sTcCioot6izSZIUTPIF3VlaOSYn4zVfvik6CW+E8LkWKkVjZoY5aMNvyYqIpnI4lPGvypZsZQO/+kyBW+Df30NGs187fAhGFcn/VBffhOrDd7nHTZ6z3KWGKwZi0; Expires=Tue, 31 Dec 2024 15:05:05 GMT; Path=/ Set-Cookie: AWSALBCORS=sTcCioot6izSZIUTPIF3VlaOSYn4zVfvik6CW+E8LkWKkVjZoY5aMNvyYqIpnI4lPGvypZsZQO/+kyBW+Df30NGs187fAhGFcn/VBffhOrDd7nHTZ6z3KWGKwZi0; Expires=Tue, 31 Dec 2024 15:05:05 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 01 Jun 2021 16:26:56 GMT Accept-Ranges: bytes ETag: "ce265ff0257d71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:05 UTC	503	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 36 35 2e 37 31 32 22 20 68 65 69 67 68 74 3d 22 36 35 2e 37 30 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 35 2e 37 31 32 20 36 35 2e 37 30 32 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 31 31 37 65 63 31 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 30 2e 30 36 31 20 2d 30 2e 30 31 38 29 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 34 30 30 2e 35 32 37 2c 39 33 2e 37 31 33 61 35 2e 38 31 36 2c 35 2e 38 31 36 2c 30 2c 31 2c 31 2c 35 2e 38 30 36 2d 35 2e 38 30 36 2c 35 2e 38 31 36 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="65.712" height="65.702" viewBox="0 0 65.712 65.702"><defs><style>.a{fill:#117ec1;}</style></defs><g transform="translate(-0.061 -0.018)"><path class="a" d="M400.527,93.713a5.816,5.816,0,1,1,5.806-5.806,5.816,
2024-12-24 15:05:05 UTC	2293	IN	Data Raw: 32 2c 34 2e 32 2c 30 2c 30 2c 30 2d 34 2e 32 2d 34 2e 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 36 37 2e 36 30 34 20 2d 37 39 2e 34 39 33 29 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 34 32 36 2e 32 37 36 2c 31 31 39 2e 34 36 33 61 35 2e 38 31 36 2c 35 2e 38 31 36 2c 30 2c 31 2c 31 2c 35 2e 38 31 36 2d 35 2e 38 30 36 2c 35 2e 38 31 36 2c 35 2e 38 31 36 2c 30 2c 30 2c 31 2d 35 2e 38 31 36 2c 35 2e 38 30 36 6d 30 2d 31 30 2e 30 30 35 61 34 2e 32 2c 34 2e 32 2c 30 2c 31 2c 30 2c 34 2e 32 2c 34 2e 32 2c 34 2e 32 2c 34 2e 32 2c 30 2c 30 2c 30 2d 34 2e 32 2d 34 2e 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 36 36 2e 33 31 39 20 2d 38 30 2e 37 37 38 29 22 2f 3e 3c 70 Data Ascii: 2,4.2,0,0,0-4.2-4.2" transform="translate(-367.604 -79.493)"/><path class="a" d="M426.276,119.463a5.816,5.816,0,1,1,5.816-5.806,5.816,5.816,0,0,1-5.816,5.806m0-10.005a4.2,4.2,0,1,0,4.2,4.2,4.2,4.2,0,0,0-4.2-4.2" transform="translate(-366.319 -80.778)"/><p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49769	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:05 UTC	516	OUT	GET /content/images/warning.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=Bt8eoKvQFSS9gzT2YLH176zsrU9Te3myvwe8OQfrCvR6RcRfHnyyRupO7GDWUAMDizag9x3qeweBs3X1+j4kqTTtWJ6gvMZwGgFGORtyrDJbeJsBN/0+quBxMbIq
2024-12-24 15:05:05 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:05 GMT Content-Type: image/svg+xml Content-Length: 636 Connection: close Set-Cookie: AWSALB=70ECkz+U1pCjyJgKYX5WQZVYXs8I909y7PsaNyxosWNf/2u0phdmolGFafh8KpANEhjV7TjFzcms98S4e9D0xNJz/ufd4drtRb2eXe3fqdsNTPyjGgWe09j4Oglk; Expires=Tue, 31 Dec 2024 15:05:05 GMT; Path=/ Set-Cookie: AWSALBCORS=70ECkz+U1pCjyJgKYX5WQZVYXs8I909y7PsaNyxosWNf/2u0phdmolGFafh8KpANEhjV7TjFzcms98S4e9D0xNJz/ufd4drtRb2eXe3fqdsNTPyjGgWe09j4Oglk; Expires=Tue, 31 Dec 2024 15:05:05 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:05 UTC	504	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 34 2e 39 30 34 22 20 68 65 69 67 68 74 3d 22 31 34 2e 30 34 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 2e 39 30 34 20 31 34 2e 30 34 35 22 3e 0d 0a 20 20 3c 67 20 69 64 3d 22 77 61 72 6e 69 6e 67 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 2d 31 34 2e 37 35 39 29 22 20 6f 70 61 63 69 74 79 3d 22 30 2e 37 22 3e 0d 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 31 32 37 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 31 32 37 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 31 34 2e 37 35 39 29 22 3e 0d 0a 20 20 20 20 20 20 3c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="14.904" height="14.045" viewBox="0 0 14.904 14.045"> <g id="warning" transform="translate(0 -14.759)" opacity="0.7"> <g id="Group_1127" data-name="Group 1127" transform="translate(0 14.759)"> <
2024-12-24 15:05:05 UTC	132	IN	Data Raw: 2e 34 39 33 61 2e 38 37 33 2e 38 37 33 2c 30 2c 30 2c 31 2d 31 2e 37 34 37 2c 30 56 31 39 2e 32 61 2e 38 37 33 2e 38 37 33 2c 30 2c 30 2c 31 2c 31 2e 37 34 37 2c 30 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 2d 31 34 2e 37 35 39 29 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 0d 0a 20 20 20 20 3c 2f 67 3e 0d 0a 20 20 3c 2f 67 3e 0d 0a 3c 2f 73 76 67 3e 0d 0a Data Ascii: .493a.873.873,0,0,1-1.747,0V19.2a.873.873,0,0,1,1.747,0Z" transform="translate(0 -14.759)" fill="#fff"/> </g> </g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49772	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:05 UTC	835	OUT	GET /getmedia/a1f01d8f-56be-4d2b-b8a2-46ef8e8b6de0/iStock-1285205214.jpg?width=2000&height=1181&ext=.jpg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x
2024-12-24 15:05:05 UTC	933	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:05 GMT Content-Type: image/jpeg Content-Length: 125774 Connection: close Set-Cookie: AWSALB=EikTfrwu2Uh1lbAYSZzshvJM0Kz1MfDl/1jnSXfWGTx5LvGRIMXiZhGgwCx5eKZKCyZrc2U+FVKDRNYEWO7I0XujwnrtXFv7vJ+ZHBwj/Qh+yPEvATlmMzYxpoVW; Expires=Tue, 31 Dec 2024 15:05:05 GMT; Path=/ Set-Cookie: AWSALBCORS=EikTfrwu2Uh1lbAYSZzshvJM0Kz1MfDl/1jnSXfWGTx5LvGRIMXiZhGgwCx5eKZKCyZrc2U+FVKDRNYEWO7I0XujwnrtXFv7vJ+ZHBwj/Qh+yPEvATlmMzYxpoVW; Expires=Tue, 31 Dec 2024 15:05:05 GMT; Path=/; SameSite=None Cache-Control: public, must-revalidate Expires: Tue, 24 Dec 2024 15:05:05 GMT Last-Modified: Tue, 30 May 2023 15:52:44 GMT Accept-Ranges: bytes ETag: "638210587641384697" Content-Disposition: inline; filename=iStock-1285205214.jpg X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:05 UTC	2676	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff db 00 43 00 05 04 04 04 04 03 05 04 04 04 06 05 05 06 08 0d 08 08 07 07 08 10 0b 0c 09 0d 13 10 14 13 12 10 12 12 14 17 1d 19 14 16 1c 16 12 12 1a 23 1a 1c 1e 1f 21 21 21 14 19 24 27 24 20 26 1d 20 21 20 ff db 00 43 01 05 06 06 08 07 08 0f 08 08 0f 20 15 12 15 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 ff c0 00 11 08 04 9d 07 d0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF,,C#!!!$'$ & ! C "}!1AQa"q2
2024-12-24 15:05:05 UTC	5352	IN	Data Raw: 61 8d 22 98 45 49 48 45 73 ce 9d ca 4c 88 8a 6d 4a 45 34 d7 9f 2a 76 2d 31 29 c2 99 4b 9a 23 2b 0c 7d 14 80 d2 d7 47 35 c4 26 28 db 4b 4b 42 82 60 37 6d 2e da 5a 5a b5 49 08 68 14 f1 48 05 3c 56 f4 e3 62 58 a2 9d 49 de 96 ba 4c c5 a2 8a 28 01 68 a4 a5 a0 04 a5 a4 a5 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 04 a2 8a 4a 00 29 28 34 94 00 51 9a 43 4d a4 02 e6 8c f3 4d cd 26 69 5c 43 b3 4b 9a 66 68 cd 2b 80 fa 5a 66 69 73 45 c6 3a 8a 6e 68 a2 e0 2d 19 a4 a4 a9 6c 05 a4 a3 34 99 ac a5 21 85 25 26 69 2b 09 48 62 e6 92 8a 2b 16 c6 14 94 51 48 61 45 14 50 01 45 14 52 10 52 51 49 40 05 30 d3 8d 36 90 0d 34 c3 52 1a 61 a9 02 23 4c 35 23 54 66 99 03 29 a6 9e 69 a6 98 86 9a 61 a7 d3 0d 5a 64 b1 8d 4c 34 e6 a6 56 a8 86 14 52 52 66 98 87 51 9a 66 ea 33 52 d8 c9 81 a9 14 Data Ascii: a"EIHEsLmJE4*v-1)K#+}G5&(KKB`7m.ZZIhH<VbXIL(h(((J)(4QCMM&i\CKfh+ZfisE:nh-l4!%&i+Hb+QHaEPERRQI@064Ra#L5#Tf)iaZdL4VRRfQf3R
2024-12-24 15:05:05 UTC	5352	IN	Data Raw: 21 5a 93 14 11 4c 45 72 b5 0b 8a b4 c2 a1 91 78 a6 4d 8c b9 87 cd 50 1a b5 38 f9 aa be 2b 44 48 cc 52 11 52 53 69 80 cc 52 53 f1 49 8a 04 25 2d 18 a5 a4 02 52 d2 e2 8a 91 05 2e 28 a5 a4 02 8a 70 a4 14 e1 40 0a 29 69 29 68 10 b4 ea 6d 2d 30 1d 4e 06 99 4b 48 09 01 a7 83 51 52 83 4a c3 26 06 9c 0f 15 10 34 e0 68 2d 13 06 a7 e6 a1 06 9d 9a 0a b9 2e ea 76 ea 83 34 bb a8 2a e4 e1 e8 df 50 6e a3 75 05 a6 4f ba 90 bd 41 ba 93 75 16 2a e4 db a9 a5 f8 a8 b7 53 19 f8 a7 62 ae 4e ad cd 4e ad 54 91 aa ca b7 15 b4 56 84 5c 9f 34 d3 49 9a 43 43 25 91 b5 41 27 43 56 1a a0 93 a1 ae 5a 84 99 f2 75 aa ed 56 a5 1c d5 66 eb 5e 5c 99 68 8f 14 b4 b8 a5 15 ce d9 aa 0c 52 e2 9c 29 71 49 32 86 53 a8 a5 ed 54 31 28 c5 2d 14 c0 4c 51 8a 5a 28 01 8c 2a 33 53 1a 8d 85 30 22 34 c6 a9 Data Ascii: !ZLErxMP8+DHRRSiRSI%-R.(p@)i)hm-0NKHQRJ&4h-.v4PnuOAuSbNNTV\4ICC%A'CVZuVf^\hR)qI2ST1(-LQZ(*3S0"4
2024-12-24 15:05:05 UTC	5680	IN	Data Raw: 69 b8 a9 5a 9b 8a c2 e2 b0 ca 29 f8 a6 91 4a e3 01 52 ad 46 2a 45 a0 68 9d 6a 75 a8 13 ad 4e b4 1a a2 55 a9 56 a3 5a 95 6a 8d 10 ea 5a 41 4e 14 c6 18 a2 96 97 14 c6 36 8a 76 28 c7 14 c4 26 29 08 a7 d2 1a 62 21 61 51 b0 a9 d8 54 64 50 49 01 5a 4c 54 c5 69 9b 6a 91 04 78 a5 db 4f db 46 29 88 66 da 69 5a 97 14 84 52 02 12 29 08 a9 08 e6 93 14 84 33 14 f5 a4 a7 ad 5a 21 8f 51 52 28 e6 9a b5 2a d5 a1 12 a8 a9 54 53 54 71 52 0a d0 a1 45 48 29 82 9e 29 94 38 53 a9 05 38 53 18 a2 96 8a 5a 63 16 8a 29 68 18 94 52 d1 40 c4 a4 a5 a2 81 09 8a 29 69 28 01 a6 90 d3 a9 b4 80 61 a6 1a 90 d3 0d 21 11 37 4a ab 27 5a b4 fd 2a ac 9d 6b 36 22 b4 95 52 43 56 a4 aa 72 1a 91 32 07 aa ef 53 31 a8 1e a9 12 53 9e ab 1a b1 3f 5a aa 4d 68 88 11 8d 44 c6 9c 4d 30 d3 25 8d 34 94 a6 92 Data Ascii: iZ)JRFEhjuNUVZjZAN6v(&)b!aQTdPIZLTijxOF)fiZR)3Z!QR(TSTqREH))8S8SZc)hR@)i(a!7J'Z*k6"RCVr2S1S?ZMhDM0%4
2024-12-24 15:05:05 UTC	5352	IN	Data Raw: b5 57 92 90 99 59 ea 06 35 34 86 ab b5 04 15 a6 aa a6 ac 4c 6a a9 34 5c cd 88 69 a4 d2 e6 9b 4e e2 1a 69 28 3d 29 33 4e e2 0a 69 a0 9a 4a 77 00 a4 a4 cd 26 68 01 73 49 9a 4c d2 66 80 0c d1 49 45 02 0a 5e f4 51 40 0b 4b 49 45 20 16 92 96 92 98 05 14 51 54 01 49 45 25 52 01 29 29 69 2a c6 25 34 d3 a9 a6 a9 00 da 69 a5 ed 4d 26 a8 04 a2 8e d4 52 01 28 a2 8a 06 58 87 a8 ad 38 7b 56 64 1d 45 6a 43 da a9 07 52 da 54 bd aa 34 a9 3b 54 b3 42 37 aa 53 fd d3 57 5a a9 5c 74 35 94 81 98 d7 27 93 59 92 1a d1 ba ea 6b 2a 53 cd 72 32 48 24 35 16 69 5c d4 75 93 45 22 40 69 e1 aa 10 69 77 54 d8 b4 4d ba 97 75 41 9a 70 6a 56 19 36 ea 6e ea 66 69 bb a9 58 63 f7 52 6e a6 66 93 34 58 63 f7 53 73 4d cd 26 69 d8 07 66 9a 4d 26 78 a6 d3 18 b4 66 92 92 81 0a 69 28 a2 98 09 45 14 Data Ascii: WY54Lj4\iNi(=)3NiJw&hsILfIE^Q@KIE QTIE%R))i%4iM&R(X8{VdEjCRT4;TB7SWZ\t5'YkSr2H$5i\uE"@iiwTMuApjV6nfiXcRnf4XcSsM&ifM&xfi(E
2024-12-24 15:05:05 UTC	5352	IN	Data Raw: b0 18 d5 0b 54 a6 a2 6a c6 40 42 d5 09 a9 da a1 6a c1 88 ae e3 9a 81 85 59 7a ae d5 9b 25 90 1e b4 52 9a 2a 09 15 69 c2 90 53 85 03 16 8a 5a 29 8c 29 c2 93 1c 53 87 5a 63 1c 2a 45 a6 0a 70 a6 51 28 a9 05 44 2a 45 ab 28 90 53 c5 46 29 e2 ad 0c 90 52 d3 45 3a a8 05 a5 a6 d2 d5 20 1d 4b 4d a5 ab 42 1c 29 69 b4 b5 62 16 8a 4a 2a 84 2e 68 cd 37 34 66 80 1d 45 37 34 66 80 1d 49 4d cd 26 69 00 ad 4c 63 41 35 1b 1a 96 20 cd 19 a6 13 46 6a 44 3e 8a 6d 19 a0 05 cd 25 27 7a 2a 40 33 45 25 14 08 5a 33 49 48 68 01 49 a4 cd 36 8a 42 1d 9a 70 34 ca 50 69 00 fa 29 b4 76 a0 62 1a 69 a5 a6 9a 64 8d 34 d3 4e 34 c3 48 4c 63 54 2d 52 b5 44 d4 12 55 93 a5 52 97 bd 5d 92 a9 4b 48 96 66 cf de a9 b5 5c 9a a9 b5 52 32 2b 4d d2 aa 35 5b 97 a5 55 35 44 91 9a 61 a9 08 a6 9a a1 91 9a Data Ascii: Tj@BjYz%RiSZ))SZcEpQ(DE(SF)RE: KMB)ibJ.h74fE74fIM&iLcA5 FjD>m%'z*@3E%Z3IHhI6Bp4Pi)vbid4N4HLcT-RDUR]KHf\R2+M5[U5Da
2024-12-24 15:05:05 UTC	4342	IN	Data Raw: 80 b4 52 52 d6 6c 05 a0 d0 28 a8 01 29 68 a5 a4 30 5a 90 53 16 a4 14 c6 38 53 85 34 53 d6 ad 14 3d 6a 45 a8 d6 a4 15 a2 18 f1 4f 5a 65 38 56 88 a2 41 d2 9c 29 ab 4e aa 40 2d 21 a5 a6 d3 18 d3 4c 34 f3 4c 35 2c 64 6c 78 a8 5c d4 ad 50 3d 66 04 4c 6a 07 6a 91 8d 56 91 a9 5c 86 31 9a a2 66 e6 91 da a0 2f cd 17 32 64 bb b9 a3 75 40 5a 80 d4 c9 27 dd 4b ba a0 dd 46 ea 60 59 0f cd 4c ad 54 95 f9 a9 55 ea a2 49 79 5b 35 2a b5 52 57 a9 d1 b3 5a 01 69 4d 48 0d 57 0d 52 a9 aa 19 32 d4 82 a1 5a 91 4d 03 24 a5 a6 e6 96 a8 63 a9 d4 c1 4e 14 c0 43 4d a7 d2 62 90 86 e2 93 14 fa 29 08 66 29 69 d4 50 03 69 1a 9f 8a 6b 0a 6c 44 46 98 d5 29 15 13 54 92 46 d5 0b 54 ad 51 35 32 4a d2 55 39 7a 55 b9 2a 9c bd e9 10 ca 33 55 46 eb 56 a6 aa 8d 4c 82 29 3a 55 7a 9e 4e 95 01 34 00 Data Ascii: RRl()h0ZS8S4S=jEOZe8VA)N@-!L4L5,dlx\P=fLjjV\1f/2du@Z'KF`YLTUIy[5RWZiMHWR2ZM$cNCMb)f)iPiklDF)TFTQ52JU9zU3UFVL):UzN4
2024-12-24 15:05:05 UTC	2676	IN	Data Raw: d2 66 99 ba 94 1a 43 25 53 52 af 4a 85 4d 48 b5 48 09 85 38 54 62 9e 2a 86 48 29 c2 99 4e 14 c0 7f 6a 50 69 a2 96 a8 09 01 a7 8a 8c 53 c5 5a 18 fa 70 a6 8a 70 ad 90 89 05 3c 53 16 a4 15 aa 10 e1 4e a6 8a 70 a6 31 69 69 29 69 8c 29 a6 9d 4d 34 c0 69 a8 9a a5 35 1b 54 31 10 b5 42 f5 3b 54 2f 5c d3 02 2e f4 a2 92 96 b8 9b 29 0e 06 a4 06 a2 14 f5 a9 28 94 54 8b 4c 5a 94 55 14 28 a7 0a 4e f5 22 8a a4 52 1c a2 9e 05 0a 29 f5 45 80 14 f1 4d a7 0a a4 31 c2 9c 29 a2 9e 2a d0 c7 0a 5a 41 45 50 05 31 a9 d4 c6 a1 8c 63 54 2d 52 31 a8 9b ad 43 11 13 55 79 2a 77 aa d2 1a 86 05 79 2a 8c dd 4d 5c 92 a9 4d de a4 86 67 cc 6a 8b 75 ab b3 77 aa 2f d4 d3 46 6c 61 34 dc d0 5a 98 4d 50 c5 26 9b 9a 42 79 a6 6e a6 03 f3 53 44 6a ae ea 9e 26 e2 9a 26 45 9c d4 88 79 a8 73 c5 3d 0d Data Ascii: fC%SRJMHH8TbH)NjPiSZpp<SNp1ii)i)M4i5T1B;T/\.)(TLZU(N"R)EM1)ZAEP1cT-R1CUywyM\Mgjuw/Fla4ZMP&BynSDj&&Eys=
2024-12-24 15:05:05 UTC	4014	IN	Data Raw: 52 d1 40 c4 a2 96 92 82 44 a4 ef 4b 45 00 25 14 51 40 09 45 14 50 31 29 68 a3 b5 21 0c 6a 8d aa 56 e9 51 35 00 56 92 a8 cd d0 d5 f9 2a 8c a3 83 48 96 64 dc 0a a0 c2 b4 e7 5e b5 49 93 83 49 93 63 3a 55 ac f9 96 b5 e5 8c d5 19 62 eb c5 65 71 18 f2 a7 5a a5 24 7c d6 cc 90 d5 49 20 a9 b8 24 65 14 a5 11 d5 c3 0f b5 37 ca 35 37 34 b1 5c 25 3f 65 4e 23 a7 79 74 ae 3b 15 c2 53 84 75 60 47 4e 11 d2 b8 ec 40 ab cd 4a a2 a4 d9 4a 16 a5 8c 40 38 a9 02 d2 85 a7 aa d4 0c 6e da 5d b4 fc 51 8a 92 88 f1 4e 14 b8 a3 14 00 0a 29 69 28 01 0d 19 a0 d3 69 80 b4 66 93 34 94 c4 2d 34 9a 29 a4 d3 01 73 4d 2d 48 4d 33 34 ec 21 49 a6 93 46 69 a6 a8 42 13 4d 26 82 69 84 d0 01 9a 69 34 66 9b 4c 00 9e 29 b4 b4 94 c0 43 49 45 25 00 04 d2 66 90 d3 69 08 53 4d 34 66 9a 68 00 cd 34 9a 42 Data Ascii: R@DKE%Q@EP1)h!jVQ5V*Hd^IIc:UbeqZ$\|I $e7574\%?eN#yt;Su`GN@JJ@8n]QN)i(if4-4)sM-HM34!IFiBM&ii4fL)CIE%fiSM4fh4B
2024-12-24 15:05:06 UTC	2676	IN	Data Raw: 14 d6 14 16 56 7a 85 aa 77 15 0b 50 49 03 75 a6 54 8d 48 05 26 8c c4 03 9a 91 45 34 0a 95 47 35 36 1a 15 45 4a a2 9a 05 48 a2 95 8b 43 d4 54 c2 98 a2 a4 14 58 b1 45 3a 8a 5a 76 18 51 4b 45 16 18 52 52 d1 40 09 4b 45 25 16 18 66 93 34 1a 4a 2c 31 45 2d 25 06 95 80 43 51 91 4f a4 34 ac 32 22 29 a6 a5 c5 30 8a 9b 01 03 74 a8 58 55 96 15 0b 0a 56 11 59 c5 55 91 6a eb 0a ac eb 4e c4 b3 3e 45 aa ae b5 7e 45 e6 ab 32 f3 45 8c ee 56 db 46 da 9f 6d 1b 69 58 65 62 94 d2 95 64 ad 34 a5 2b 0c 85 53 9a 9e 35 a1 56 a7 8d 69 58 96 3d 16 ad 42 bc 8a 8d 17 8a bb 04 7c 8a 76 24 b5 0a 63 15 7a 34 a8 a2 8f a5 5c 8d 6a d2 29 21 ca b5 20 5a 50 b4 fd b5 a5 8a 1a 05 3b 6d 38 0a 5c 53 b0 0d 0b 4e a7 62 97 15 49 00 82 96 97 14 55 00 a2 96 90 53 a9 8c 4a 5a 29 68 00 a4 a5 a2 80 19 Data Ascii: VzwPIuTH&E4G56EJHCTXE:ZvQKERR@KE%f4J,1E-%CQO42")0tXUVYUjN>E~E2EVFmiXebd4+S5ViX=B\|v$cz4\j)! ZP;m8\SNbIUSJZ)h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49771	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:05 UTC	571	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/refinance-checklist.svg?ext=.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=Bt8eoKvQFSS9gzT2YLH176zsrU9Te3myvwe8OQfrCvR6RcRfHnyyRupO7GDWUAMDizag9x3qeweBs3X1+j4kqTTtWJ6gvMZwGgFGORtyrDJbeJsBN/0+quBxMbIq
2024-12-24 15:05:05 UTC	830	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:05 GMT Content-Type: image/svg+xml Content-Length: 2369 Connection: close Set-Cookie: AWSALB=je+pjncVJbg69j/9UY4+1QohiOiZ1RBX6viM/RlL9P2DZSlKLRL4o9DutqXQ2igMTTC05zNlJnbvf9pG/1zWJ3wPwQ5NWci4QZeK7Zh2Xe3A2yHgGKJ0201tZRXe; Expires=Tue, 31 Dec 2024 15:05:05 GMT; Path=/ Set-Cookie: AWSALBCORS=je+pjncVJbg69j/9UY4+1QohiOiZ1RBX6viM/RlL9P2DZSlKLRL4o9DutqXQ2igMTTC05zNlJnbvf9pG/1zWJ3wPwQ5NWci4QZeK7Zh2Xe3A2yHgGKJ0201tZRXe; Expires=Tue, 31 Dec 2024 15:05:05 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 01 Jun 2021 16:26:56 GMT Accept-Ranges: bytes ETag: "61b87af0257d71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:05 UTC	2369	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 36 34 2e 34 39 31 22 20 68 65 69 67 68 74 3d 22 36 32 2e 35 32 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 2e 34 39 31 20 36 32 2e 35 32 37 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 30 30 37 63 63 35 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 34 34 31 2e 34 31 38 20 2d 39 2e 36 37 36 29 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 35 33 33 2e 34 33 32 2c 31 31 37 2e 32 36 61 2e 38 2e 38 2c 30 2c 30 2c 31 2d 2e 35 38 2d 2e 32 34 36 4c 35 30 39 2e 30 39 31 2c 39 33 2e 32 36 33 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="64.491" height="62.527" viewBox="0 0 64.491 62.527"><defs><style>.a{fill:#007cc5;}</style></defs><g transform="translate(-441.418 -9.676)"><path class="a" d="M533.432,117.26a.8.8,0,0,1-.58-.246L509.091,93.263

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49774	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:05 UTC	813	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/MQ-Background45.png?ext=.png HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=pfQkyGazfBG1klfJnzVOeBf7Kxo9scs3lg0yKmIDww41yrCf/jc3M4AY/njiLqpsJ4sVpLSyA3/ihqkv+uFU9yFWh8oBj6Sa9ZzHnaLIj5ZrEwA6U1g9w2KVsz2x
2024-12-24 15:05:06 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:06 GMT Content-Type: image/png Content-Length: 661830 Connection: close Set-Cookie: AWSALB=P9vhUkJnmDYhZbBvFVwwAGs0uc/n5F4WAtQtdCEPGSHQR+Fd7R0c0lOa1ahd/rIPk5fAA4XXRidMoNNNI/6gP21cMea9TLi640MLAJ5RWuPp+LFIwJYeYb1cLdUG; Expires=Tue, 31 Dec 2024 15:05:06 GMT; Path=/ Set-Cookie: AWSALBCORS=P9vhUkJnmDYhZbBvFVwwAGs0uc/n5F4WAtQtdCEPGSHQR+Fd7R0c0lOa1ahd/rIPk5fAA4XXRidMoNNNI/6gP21cMea9TLi640MLAJ5RWuPp+LFIwJYeYb1cLdUG; Expires=Tue, 31 Dec 2024 15:05:06 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Wed, 14 Jun 2023 13:49:42 GMT Accept-Ranges: bytes ETag: "47c35d12c79ed91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:06 UTC	504	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0b b8 00 00 02 f1 08 06 00 00 00 cc da eb 0e 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 2e 22 00 00 2e 22 01 aa e2 dd 92 00 00 07 80 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 32 2d 63 30 30 30 20 37 39 2e 35 36 36 65 62 63 35 2c 20 32 30 32 32 2f 30 35 Data Ascii: PNGIHDRsRGBgAMAapHYs."."iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5, 2022/05
2024-12-24 15:05:06 UTC	16384	IN	Data Raw: 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 32 2d 30 35 2d 31 30 54 31 33 3a 32 39 3a 33 34 2d 30 35 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 33 2d 30 35 2d 33 30 54 31 31 3a 32 36 3a 31 34 2d 30 35 3a 30 30 22 20 78 6d 70 Data Ascii: p/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.4 (Windows)" xmp:CreateDate="2022-05-10T13:29:34-05:00" xmp:ModifyDate="2023-05-30T11:26:14-05:00" xmp
2024-12-24 15:05:06 UTC	16384	IN	Data Raw: 6e 58 dc 5d d2 2f 8c 34 e9 eb 2e 15 da 96 44 58 69 e1 82 4e fe e7 fa 21 f7 95 72 d4 32 c6 18 93 a4 b2 e1 3a 79 86 ea cf e1 30 94 50 1e 95 73 72 78 b2 1b 68 ab c5 0e ea 5d ea cf e8 6a 1f aa 90 cc 2a 5f 20 99 51 a6 27 ff 50 9f 8f 50 f5 42 87 b1 78 b8 66 d2 fc 18 dc 63 f2 d4 e9 3d 4f d8 9c f2 2f 3d 9c 3e b5 00 60 06 5a a7 53 5f 59 c0 74 b7 24 43 fa 5c d2 cd 61 48 1e ee 79 37 93 7a ee f3 3a ed 35 87 5a ce 12 af ab a7 5e 03 c7 ba 33 50 f7 e1 a5 5f 59 81 69 ce bd 79 2f 00 00 00 00 00 00 00 00 00 00 00 00 80 d7 ce 9b 30 70 af 3e e3 d3 11 bc 3d 63 c9 37 67 c5 0f 70 2d 68 1d d6 c6 a1 3a 75 5b eb 53 eb d4 82 b5 eb ad 53 cf 1a a7 a4 5b 78 30 d3 00 ca 73 4c be e7 58 5b 85 a1 fb 2e 9d 7e 9e 43 3d 22 6d c8 39 b9 dd 43 f8 de 15 e9 72 55 df b4 c4 5e e7 4e 79 dd c8 d6 9c Data Ascii: nX]/4.DXiN!r2:y0Psrxh]j*_ Q'PPBxfc=O/=>`ZS_Yt$C\aHy7z:5Z^3P_Yiy/0p>=c7gp-h:u[SS[x0sLX[.~C="m9CrU^Ny
2024-12-24 15:05:06 UTC	16384	IN	Data Raw: 71 ce 80 e0 a1 31 6b fb 27 da 2d 83 c0 5b 3c c1 3d 90 ae 22 f4 0d dd d5 7e ad 13 f9 65 6d e4 74 e1 a7 b5 ab 0f 77 d6 32 fb 29 d7 46 9c e8 de 52 f7 c9 2c c6 9a 9e fb 3f 18 cc a6 76 55 e3 53 f2 8c 95 6d e2 55 5e 4d 2b 27 b8 db 1e 22 62 bf 51 39 fd 37 89 5f e4 13 dc 75 82 ba fa f0 1c 27 b8 9b 98 bb 95 55 f3 f4 64 33 7a fb e8 3a a8 8c e4 cb ff f2 e5 d1 af 3d de fc ef 7e f8 e1 ee e1 dd bb bb 6f bf fb ce e6 f2 fd dd 17 9d f0 ee a7 f2 a7 ba 1e 75 84 bb b5 72 97 f7 4c 6b 95 ff 8e 2a eb 75 a3 56 bb 8e 39 7c 32 56 4c e5 a7 a0 1a b7 6a f8 95 32 b1 c7 5e 07 cd 1c 84 eb 60 ce 33 c1 4d 33 6d 8b 5a 9e 19 fb 2b 4c 27 dd 9b e6 ad 33 7f 7f 94 af e1 7a e8 3c c7 9d 88 9e d3 e0 b6 38 c7 5e b1 24 53 f7 a9 a5 f7 c8 a5 fb 7d ee fe be e4 7f 95 99 fb 4c 71 cd ff 11 07 2e 0b cf af Data Ascii: q1k'-[<="~emtw2)FR,?vUSmU^M+'"bQ97_u'Ud3z:=~ourLk*uV9\|2VLj2^`3M3mZ+L'3z<8^$S}Lq.
2024-12-24 15:05:06 UTC	16384	IN	Data Raw: 52 7e e9 95 ae 4d 6b db bf be e6 78 85 53 99 bd 31 7c 92 a9 fe d7 2b b5 34 a7 15 19 ca 10 5e be 68 48 e5 fc 22 7b a6 bb 5e 56 be a4 89 bd 0a 4e c8 77 b9 8d 68 e9 30 d8 c6 36 63 13 0c 42 f5 29 0c d5 7b 12 ad ee 52 46 c1 ac d3 58 3f 46 f4 68 fd 6d fc 48 23 43 7e 8c 43 c8 8b f1 28 e3 6a 74 d2 06 ae 4f 41 e5 62 7d 2c 45 ef 3d d2 91 a8 9f 7a ef 7f cf 81 fa ba ea 13 f5 bc b4 3b 5d c3 97 63 d1 71 53 87 2c 3b 65 e6 a1 ed 79 ea 60 5e 7b db 6f 99 39 e3 0e 00 00 00 00 f0 da e1 bd 0a dc 02 bc af 03 00 78 b3 e8 33 d0 29 9f 6f 00 5c 0b 3c c6 00 5c 1e de 22 9f 03 76 2e 78 41 64 f0 a0 87 c0 e4 ef dc 97 8b 87 42 f9 e1 7a 93 d1 f2 cb 88 30 4e 89 4c f9 92 21 b2 96 bf 89 b9 53 92 e4 4b 76 38 ff 03 9a 91 e2 93 4b f5 26 7d 64 9a 23 a2 4e 97 1b 7e e5 84 44 d5 ce f1 40 8a 49 32 Data Ascii: R~MkxS1\|+4^hH"{^VNwh06cB){RFX?FhmH#C~C(jtOAb},E=z;]cqS,;ey`^{o9x3)o\<\"v.xAdBz0NL!SKv8K&}d#N~D@I2
2024-12-24 15:05:06 UTC	1364	IN	Data Raw: 07 32 fa ac 88 5a 3b 61 05 2d 7c fa 74 79 ef 1d fc 24 2f 43 c2 e4 15 70 46 f2 fb 9e ec ca 49 a2 65 b1 6c 8e 5d 20 74 ae f6 0b 03 22 b4 62 3f 91 dd d2 51 69 84 f1 fc 88 2c 6f 9b e5 d1 9f 02 e6 8b d0 b7 ed a3 4c 10 0f d6 4a 07 f7 5d f4 d1 57 27 36 40 bd ad 58 64 a7 23 59 cf 57 fb 67 50 f5 0c 37 e1 66 da 79 ca 09 f1 cc 59 e6 28 70 4b e9 93 3c a9 af fb 98 ce a7 7d 59 5f 17 42 fa e2 c2 af 47 75 ea 22 bc a7 23 c7 bd fb a2 ef db 16 8c 65 8f ed b0 bf 8a b5 fa 10 30 54 c3 dc d8 d4 c1 6b 5d 06 b0 53 a0 e2 1b e5 3d 14 3d a4 17 76 58 87 83 fb 7b f7 b1 6d 5b 8e 90 d7 a6 5d c8 fd 26 b1 79 7d 61 a7 b8 e7 de f9 64 e0 e1 1b 9c 5f 07 fb ad f7 b4 c7 69 cd cc 0e 70 70 9c 74 3f fd fc 27 c7 ff c7 3f fd 2f 3e 4d 78 af 5b 78 1f fc cb 5f ff a5 3b 39 39 ee 5e 7f f3 a2 5b 2d 75 dd Data Ascii: 2Z;a-\|ty$/CpFIel] t"b?Qi,oLJ]W'6@Xd#YWgP7fyY(pK<}Y_BGu"#e0Tk]S==vX{m[]&y}ad_ippt?'?/>Mx[x_;99^[-u
2024-12-24 15:05:06 UTC	1338	IN	Data Raw: 7d c0 36 8c fd f6 72 85 32 e7 1c 26 4a 4f 72 fe 88 4e fd e2 97 28 96 76 f0 0c 77 b7 58 23 d8 24 d2 b1 fe 37 37 01 d7 95 90 88 b4 de f5 97 bc 72 7f 2c 1b a4 aa a2 95 f9 46 83 60 9d e1 03 88 f6 03 92 bf 9d 4a 15 d8 bf 79 58 cf e3 92 40 14 f2 7a b9 9b 3c 4c 60 ce a5 3e d1 27 77 28 57 fa 34 46 f6 2d 58 55 fc 92 5e 51 ea 3d 04 28 83 16 c7 65 ca 00 63 e4 87 12 2a bd a2 ae f0 da d0 ab 92 95 28 7c c0 96 5a 83 f2 5d 75 60 c3 26 86 f2 a3 32 f4 4c e7 79 f4 0f 87 57 be 2c a5 4e d7 d5 72 4d 1d 03 de 7d 88 12 bf df 46 dd 67 52 f1 ea cb d4 2c cb 5c 4a bf 4b c8 34 2f 54 4c 79 59 ce 07 ad 70 54 0e c7 d7 e8 0b 7b 36 6b 08 c6 70 24 8a 18 61 c9 63 1b 5c 57 5e 81 6c 27 54 49 00 8b a4 22 46 06 f6 0b 9d 06 47 e9 44 cf db d7 9a a1 71 3e 74 07 06 b9 3b 50 aa 1d ed 22 ad ca fb 64 Data Ascii: }6r2&JOrN(vwX#$77r,F`JyX@z<L`>'w(W4F-XU^Q=(ec*(\|Z]u`&2LyW,NrM}FgR,\JK4/TLyYpT{6kp$ac\W^l'TI"FGDq>t;P"d
2024-12-24 15:05:06 UTC	16384	IN	Data Raw: 55 1a b5 7c e2 b5 5e 53 ed eb cc bb b9 ee 4d 10 c6 7c c0 6e 3e 3d 5d 6d 97 0b b8 6b cd 1f 9f b8 7f 13 d9 84 fb 6b 1e 56 61 ae 7a be f9 c1 96 7d e9 a1 9c 64 aa 58 b4 c3 9c 4c c3 c5 2f cf 88 de 94 0c 75 3a 16 23 a1 ea cb 94 b9 c5 70 40 45 45 c4 e6 4d ec d3 eb 19 27 7e f9 41 3a 38 8f 26 ba 17 52 bf 4f 8e 8e 6d f3 93 93 13 c8 25 b7 7c 46 99 5f 4b 16 0f 72 a0 5b f4 8b 39 ef 5f be b1 12 d8 0b 3b 33 57 b1 13 fa ba 33 31 67 a8 d7 be 96 fa 00 74 44 af 0c 73 4e 0a 57 1b 7f a6 10 4f fa 0c a2 af d8 5d 73 40 79 c6 0b 24 2b da ba be 18 83 de 90 2a cd 03 aa 8b d3 ee b1 59 d0 01 da d2 5f 19 d0 fb 26 bf 0e c4 89 ee 13 cf f3 9b ee f4 ec c4 7b c4 91 e6 5f e8 c4 2f 37 b0 2e d5 58 fa 4f 75 ff c8 25 f1 a6 ec b3 c1 5a 74 b6 8b d9 06 8a 48 df 2b d3 58 7b bd 1b f0 ae 7c 04 ee 9d Data Ascii: U\|^SM\|n>=]mkkVaz}dXL/u:#p@EEM'~A:8&ROm%\|F_Kr[9_;3W31gtDsNWO]s@y$+*Y_&{_/7.XOu%ZtH+X{\|
2024-12-24 15:05:06 UTC	16384	IN	Data Raw: 6d 1d 1e f8 da c2 53 c5 25 90 26 21 a0 68 2a 5b a1 27 fd c4 c1 a8 74 7e 4e e1 49 30 36 c8 7d c3 63 b0 8d df a7 0c 0d 0d 0d 0d 0d 3d b6 5d 67 5a 68 e1 4b 0e 7a 8b b9 df 42 0b 2d b4 d0 c2 b3 0e 46 ee eb 2d b4 f0 d5 04 e6 3d c9 ed f7 39 2d b4 f0 25 84 61 93 7f 5e b8 f9 c4 2f 20 8b 3d bf d7 96 31 ff 9a 82 de ca d8 f1 16 f9 6d 74 2d 3c d3 8d 40 d8 d6 97 16 22 7c 6e 4c fe e1 1f fe fe 3f 39 c5 1e 2a 7d fa 2f 61 0b d8 5c f9 49 ed 58 a1 15 1e a9 3b cd f9 62 db 31 5f 92 56 32 33 85 33 02 c0 39 04 a0 97 d5 34 3d 7f 41 99 fa e2 98 ea 38 f3 3d a7 dd 70 ff a0 2b fd 4f ec 2c 2f f6 d9 55 7f 78 10 3f c1 9f 27 3c e2 78 60 b2 b4 6b a1 1f b7 1f db 7d cc f7 29 d0 b3 b4 fd 8a 2d 9d 1d c9 2e d8 56 f6 18 ec 92 73 17 f8 10 bd 2d 4d 7b 3b 26 ee 69 b7 3b b7 df a2 40 f4 87 84 de f4 Data Ascii: mS%&!h['t~NI06}c=]gZhKzB-F-=9-%a^/ =1mt-<@"\|nL?9}/a\IX;b1_V23394=A8=p+O,/Ux?'<x`k})-.Vs-M{;&i;@
2024-12-24 15:05:06 UTC	16384	IN	Data Raw: 7a 22 fa 10 56 48 f1 c8 26 84 a9 62 9f a1 8e 5b c1 ac a3 df bd 5c 7a 40 9d c6 80 fb d5 03 8d c9 e5 e5 95 c7 84 87 3f 00 b4 c0 7c d5 86 18 b8 3d 2c 08 82 6d a1 17 ce ea 1b 74 45 86 e9 35 1f f3 be 94 77 37 a7 58 63 12 7d 87 4b 3c 20 c3 b8 cd e7 5c 43 6e 14 af ba b9 ae 2b df bc fe 9d af 99 d4 4f 39 7d 7e c9 1c e5 ba 03 8f 94 11 4c ad 6f ca c9 7c 1d 17 f9 34 cc eb 80 f3 40 f9 3e 90 f5 7b 05 e8 b7 d4 53 36 a6 75 59 d2 97 7c 24 aa 40 e4 b6 f1 aa 61 fa 0c 51 10 51 09 f1 a6 de c8 0e f4 8d 07 f1 1c 93 97 ed bc 2e 59 eb 5c 4b 54 3e ac d5 12 0a 2d eb 32 ea 78 e8 35 68 fc b0 03 f6 29 a1 46 dd 1f 6f 33 52 24 69 68 1b 6d 30 2f ab 21 f6 32 d6 1a aa c6 89 ed b1 06 dd 9e 3a 77 48 e5 43 a7 2a d4 79 13 96 50 c0 bd 1c 0c 1e 1b 2a c4 78 28 8e ec 10 53 fe 14 01 8e fc 29 fd 50 Data Ascii: z"VH&b[\z@?\|=,mtE5w7Xc}K< \Cn+O9}~Lo\|4@>{S6uY\|$@aQQ.Y\KT>-2x5h)Fo3R$ihm0/!2:wHCyPx(S)P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49775	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:05 UTC	573	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/homebuyer-checklist_1.svg?ext=.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=Bt8eoKvQFSS9gzT2YLH176zsrU9Te3myvwe8OQfrCvR6RcRfHnyyRupO7GDWUAMDizag9x3qeweBs3X1+j4kqTTtWJ6gvMZwGgFGORtyrDJbeJsBN/0+quBxMbIq
2024-12-24 15:05:06 UTC	831	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:06 GMT Content-Type: image/svg+xml Content-Length: 5913 Connection: close Set-Cookie: AWSALB=wZtmFIcAJ3D23nT+Ph9qg4WCyIJN3RkMIfAuVjGGIa41llGEA6tsxiSyiXh43fEphuxlgMwfOeDvcIsPTvcUn92Q8d+L1gW7C3SGaE5GR4mPFnAJmmaKQ30HQ3RA; Expires=Tue, 31 Dec 2024 15:05:06 GMT; Path=/ Set-Cookie: AWSALBCORS=wZtmFIcAJ3D23nT+Ph9qg4WCyIJN3RkMIfAuVjGGIa41llGEA6tsxiSyiXh43fEphuxlgMwfOeDvcIsPTvcUn92Q8d+L1gW7C3SGaE5GR4mPFnAJmmaKQ30HQ3RA; Expires=Tue, 31 Dec 2024 15:05:06 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Mon, 20 Dec 2021 17:49:09 GMT Accept-Ranges: bytes ETag: "da99fee3c9f5d71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:06 UTC	502	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 39 2e 31 39 33 22 20 68 65 69 67 68 74 3d 22 36 33 2e 38 36 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 39 2e 31 39 33 20 36 33 2e 38 36 39 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 30 30 37 64 63 35 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 35 35 35 2e 30 30 39 20 2d 39 2e 36 34 39 29 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 36 32 30 2e 38 34 38 2c 31 31 32 2e 34 48 36 31 36 2e 32 32 61 31 2e 32 33 35 2c 31 2e 32 33 35 2c 30 2c 30 2c 31 2d 31 2e 32 33 35 2d 31 2e 32 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="49.193" height="63.869" viewBox="0 0 49.193 63.869"><defs><style>.a{fill:#007dc5;}</style></defs><g transform="translate(-555.009 -9.649)"><path class="a" d="M620.848,112.4H616.22a1.235,1.235,0,0,1-1.235-1.24
2024-12-24 15:05:06 UTC	5411	IN	Data Raw: 32 34 36 2d 2e 31 34 35 48 36 32 30 2e 37 76 2d 37 2e 38 38 36 6c 2d 36 2e 37 38 36 2d 36 2e 38 2d 36 2e 38 36 39 2c 36 2e 38 34 39 76 37 2e 38 34 35 68 34 2e 33 33 37 76 2d 33 2e 34 36 36 68 35 5a 4d 36 31 33 2e 38 31 33 2c 39 36 2e 32 32 38 5a 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 34 2e 35 35 35 20 2d 37 32 2e 32 34 38 29 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 36 32 33 2e 33 38 38 2c 39 34 2e 32 33 31 48 36 30 34 2e 39 61 2e 37 33 37 2e 37 33 37 2c 30 2c 30 2c 31 2d 2e 37 32 36 2d 2e 37 32 36 76 2d 35 2e 37 38 61 2e 37 30 36 2e 37 30 36 2c 30 2c 30 2c 31 2c 2e 37 32 36 2d 2e 37 31 36 68 33 2e 39 34 33 61 35 2e 33 34 34 2c 35 2e 33 34 34 2c 30 2c 30 2c 31 2c 31 30 2e 35 39 35 2c 30 68 33 Data Ascii: 246-.145H620.7v-7.886l-6.786-6.8-6.869,6.849v7.845h4.337v-3.466h5ZM613.813,96.228Z" transform="translate(-34.555 -72.248)"/><path class="a" d="M623.388,94.231H604.9a.737.737,0,0,1-.726-.726v-5.78a.706.706,0,0,1,.726-.716h3.943a5.344,5.344,0,0,1,10.595,0h3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49776	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:05 UTC	524	OUT	GET /Content/images/nextarrow-covid.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=3oU3jg0W6LpMjZuWz+Aqq1qA6zBnUX2Hd25c8WJ6Ocw7kRLrQTWcwF6kC9C1Es7H7JFnb3xgvq7n6S9BnAggDVANHecywzPhRoPVavOYA0Yi5wLFo8dGHXGpn+rx
2024-12-24 15:05:06 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:06 GMT Content-Type: image/svg+xml Content-Length: 408 Connection: close Set-Cookie: AWSALB=7PAghP7O2rJiL6XNXIOb2ZPZlAzThx1ONxYZTp7FmYIKdzTYwrLx9w/mhuEH302TBoGHU0OgqcjbtTYYnUlQnD/bq3JSWEKDl42ImtBaLjyIuZpiqQeft0eLdaSi; Expires=Tue, 31 Dec 2024 15:05:06 GMT; Path=/ Set-Cookie: AWSALBCORS=7PAghP7O2rJiL6XNXIOb2ZPZlAzThx1ONxYZTp7FmYIKdzTYwrLx9w/mhuEH302TBoGHU0OgqcjbtTYYnUlQnD/bq3JSWEKDl42ImtBaLjyIuZpiqQeft0eLdaSi; Expires=Tue, 31 Dec 2024 15:05:06 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:06 UTC	408	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 35 2e 31 32 38 22 20 68 65 69 67 68 74 3d 22 39 2e 35 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 2e 31 32 38 20 39 2e 35 32 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 66 36 66 37 66 64 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 31 30 32 2e 32 39 37 20 30 29 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 30 32 2e 32 39 37 20 30 29 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 31 30 37 2e 33 31 38 2c 34 2e 35 6c 2d 34 2e 34 2d 34 2e 34 61 2e 33 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="5.128" height="9.52" viewBox="0 0 5.128 9.52"><defs><style>.a{fill:#f6f7fd;}</style></defs><g transform="translate(-102.297 0)"><g transform="translate(102.297 0)"><path class="a" d="M107.318,4.5l-4.4-4.4a.36

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49777	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:06 UTC	567	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/MQ-app-logo-new.png?ext=.png HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=3oU3jg0W6LpMjZuWz+Aqq1qA6zBnUX2Hd25c8WJ6Ocw7kRLrQTWcwF6kC9C1Es7H7JFnb3xgvq7n6S9BnAggDVANHecywzPhRoPVavOYA0Yi5wLFo8dGHXGpn+rx
2024-12-24 15:05:06 UTC	827	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:06 GMT Content-Type: image/png Content-Length: 4768 Connection: close Set-Cookie: AWSALB=VSQZEcOrMPPKchQKR0FWD1VBBoGKVSEDtM8uYIwBYEDqgotI3DBKtajIh38xegYE3fwuYN+UtwcPqCB1flBUzGsAuh+NqkLs6ugqlKVczDBmBEfa8NBzfsCR3vLY; Expires=Tue, 31 Dec 2024 15:05:06 GMT; Path=/ Set-Cookie: AWSALBCORS=VSQZEcOrMPPKchQKR0FWD1VBBoGKVSEDtM8uYIwBYEDqgotI3DBKtajIh38xegYE3fwuYN+UtwcPqCB1flBUzGsAuh+NqkLs6ugqlKVczDBmBEfa8NBzfsCR3vLY; Expires=Tue, 31 Dec 2024 15:05:06 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 08 Jun 2021 18:46:27 GMT Accept-Ranges: bytes ETag: "e4d69296965cd71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:06 UTC	506	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 38 08 02 00 00 00 c2 7a 69 25 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 fa 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR@8zi%pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD
2024-12-24 15:05:06 UTC	4262	IN	Data Raw: 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 39 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 31 2d 30 36 2d 30 38 54 31 33 3a 33 38 3a 31 30 2d 30 35 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 31 2d 30 36 2d 30 38 54 31 33 3a 34 36 3a 30 32 2d 30 35 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 31 2d 30 36 2d 30 38 54 31 33 3a Data Ascii: dobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmp:CreateDate="2021-06-08T13:38:10-05:00" xmp:ModifyDate="2021-06-08T13:46:02-05:00" xmp:MetadataDate="2021-06-08T13:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49779	23.20.35.169	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:07 UTC	566	OUT	GET /v1/apps/6567c1c6a2ec72132b15f3af/websdk HTTP/1.1 Host: api.apptentive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:07 UTC	884	IN	HTTP/1.1 200 OK Server: envoy Date: Tue, 24 Dec 2024 15:05:07 GMT Content-Type: application/javascript X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Content-Disposition: attachment; filename="websdk.6567c1c6a2ec72132b15f3af.en-US.js" Content-Transfer-Encoding: binary Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self'; font-src 'self'; img-src 'self'; frame-src 'self'; Cache-Control: max-age=0, public ETag: W/"e99978840fe57edbc920673cc57913d9" X-Request-Id: 17bb8fea-6f92-437e-8d3b-d3e2777743a1 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin,Accept-Encoding X-Frame-Options: SAMEORIGIN x-envoy-upstream-service-time: 13 Connection: close Transfer-Encoding: chunked
2024-12-24 15:05:07 UTC	3114	IN	Data Raw: 63 31 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 41 70 70 74 65 6e 74 69 76 65 53 44 4b 28 29 20 7b 0a 20 20 76 61 72 20 6d 61 6e 69 66 65 73 74 20 3d 20 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 5f 69 64 22 3a 22 36 35 36 37 63 31 63 36 61 32 65 63 37 32 31 33 32 62 31 35 66 33 61 66 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 36 35 36 37 63 31 63 36 61 32 65 63 37 32 31 33 32 62 31 35 66 33 62 36 22 2c 22 64 69 73 70 6c 61 79 5f 74 79 70 65 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 4d 65 73 73 61 67 65 43 65 6e 74 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 32 2c 22 61 70 69 5f 76 65 72 73 69 6f 6e 22 3a 38 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 74 69 74 6c 65 22 3a 22 4d 65 73 73 61 67 65 20 43 65 Data Ascii: c1e(function initApptentiveSDK() { var manifest = {"application_id":"6567c1c6a2ec72132b15f3af","interactions":[{"id":"6567c1c6a2ec72132b15f3b6","display_type":null,"type":"MessageCenter","version":2,"api_version":8,"configuration":{"title":"Message Ce

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49780	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:07 UTC	513	OUT	GET /Content/images/next.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=hcVFg5GlNgRFbz7ZnIVG2uRAshFQy/SUfeGz4NAmZX5/7PIEphwZyXciL9s+60Cq3xWO71Y5uO3/XpFsjlkHIZ3I7ESGQPhCb9s45kHBnuIKUry5K7HQt3+Y/yrB
2024-12-24 15:05:07 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:07 GMT Content-Type: image/svg+xml Content-Length: 419 Connection: close Set-Cookie: AWSALB=reQW2ERpASBaCimSoFC5sIu9e7pW1Zu5y2vWgbnp/ZKWSx4EKy/WO3QqM97+aItc8ciXPuQe/ryxAbCo3zQqTGyOQdQ0hkbAjKajzCKA5l6X88gZtXflEluVqsHx; Expires=Tue, 31 Dec 2024 15:05:07 GMT; Path=/ Set-Cookie: AWSALBCORS=reQW2ERpASBaCimSoFC5sIu9e7pW1Zu5y2vWgbnp/ZKWSx4EKy/WO3QqM97+aItc8ciXPuQe/ryxAbCo3zQqTGyOQdQ0hkbAjKajzCKA5l6X88gZtXflEluVqsHx; Expires=Tue, 31 Dec 2024 15:05:07 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:07 UTC	419	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 35 2e 34 31 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 30 34 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 2e 34 31 31 20 31 30 2e 30 34 35 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 33 33 33 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 31 30 32 2e 32 39 37 20 30 29 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 30 32 2e 32 39 37 20 30 29 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 31 30 37 2e 36 2c 34 2e 37 34 37 2c 31 30 32 2e 39 35 37 2e 31 30 39 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="5.411" height="10.045" viewBox="0 0 5.411 10.045"><defs><style>.a{fill:#333;}</style></defs><g transform="translate(-102.297 0)"><g transform="translate(102.297 0)"><path class="a" d="M107.6,4.747,102.957.109

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49781	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:07 UTC	815	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/App_Upgrade_home8.jpg?ext=.jpg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=EikTfrwu2Uh1lbAYSZzshvJM0Kz1MfDl/1jnSXfWGTx5LvGRIMXiZhGgwCx5eKZKCyZrc2U+FVKDRNYEWO7I0XujwnrtXFv7vJ+ZHBwj/Qh+yPEvATlmMzYxpoVW
2024-12-24 15:05:07 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:07 GMT Content-Type: image/jpeg Content-Length: 21744 Connection: close Set-Cookie: AWSALB=TY5u3GuVg8wosEzR0bro4BcODpmB9k9JIRoo6bU2PxJeADkkf1EHHJonejcsr2JuRibkm+tZ6a8T+pQUzip+Ygmd/D1hHQH6R8K4LHntLMbmkkhrTuV7nKiG7ohb; Expires=Tue, 31 Dec 2024 15:05:07 GMT; Path=/ Set-Cookie: AWSALBCORS=TY5u3GuVg8wosEzR0bro4BcODpmB9k9JIRoo6bU2PxJeADkkf1EHHJonejcsr2JuRibkm+tZ6a8T+pQUzip+Ygmd/D1hHQH6R8K4LHntLMbmkkhrTuV7nKiG7ohb; Expires=Tue, 31 Dec 2024 15:05:07 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Wed, 14 Jun 2023 13:52:09 GMT Accept-Ranges: bytes ETag: "27b2fb69c79ed91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:07 UTC	504	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 04 b9 04 b9 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 01 02 05 14 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 Data Ascii: JFIF"ExifMM*CC"
2024-12-24 15:05:07 UTC	6690	IN	Data Raw: 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fc c1 49 57 fe 03 5a 5a 7c 8b 54 2e 23 58 aa c5 b9 e5 63 fe 2a fd 00 f9 33 aa f0 fe a0 d6 f3 2c 9b ab a5 d6 2c fe d1 b6 e2 36 dc af 5c 36 9f 27 fe 3b 5d af 85 b5 0f b4 5b 7d 9e 4a da 06 33 33 6e 3f d1 df 72 fd da de f0 5f 89 2e bc 3f a9 45 75 6b 71 35 bc b0 be f8 a5 57 fb 8f 55 f5 4d 3f cb 87 75 41 Data Ascii: B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?IWZZ\|T.#Xc3,,6\6';][}J33n?r_.?Eukq5WUM?uA
2024-12-24 15:05:07 UTC	14550	IN	Data Raw: 78 f5 25 f0 fe 8d e5 6c 6b 6d 31 f6 3c c9 ff 00 4d 65 fb ed ff 00 8e 57 e6 1c 49 c4 d8 0e 6e 6a 52 e6 97 f7 4f b1 c9 f8 67 1f 53 e3 8f 2c 7f bc 7d 63 f1 d3 f6 d8 f0 8f c1 7f b4 58 db dc 27 88 fc 40 9f f3 0f b1 95 36 5b 3f fd 35 97 ee 2f fb 9f 3b d7 c6 ff 00 18 3f 6b cf 18 7c 68 bc 68 f5 0d 43 fd 17 fe 59 69 56 7f b9 b3 87 fd ff 00 ef 7f c0 eb c5 2d f5 49 3c 40 ed 1d 9a fd 9e d7 fe 7a af df 7a f5 5f 83 ff 00 0a fe d9 e5 34 9b 1b 7d 7e 73 8e ce 2b e2 7d d5 ee 9f a1 e0 72 5c 2e 13 de 7e f4 8e 8f f6 6b b7 d5 2e 35 5b 5b 8b c9 9e 56 9a 5f 9d 76 6c 44 4a fb 2f c3 7f 0d f4 fb 7f b2 ea 96 f0 fd 96 57 ff 00 8f 85 5f b8 ff 00 ed d7 8e fc 3f f0 3c 3e 13 45 b8 9b e4 54 f9 fe 6a f7 af 87 fe 38 b5 d5 34 d5 b7 6d 9b 52 b9 70 f1 8f c3 33 bb 17 29 ca 1c d4 8e fe ce e2 38 Data Ascii: x%lkm1<MeWInjROgS,}cX'@6[?5/;?k\|hhCYiV-I<@zz_4}~s+}r\.~k.5[[V_vlDJ/W_?<>ETj84mRp3)8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49782	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:07 UTC	575	OUT	GET /kentico/bundles/pageComponents/scripts?v=-JgURDK_xbjjD0-dkM5RgHCtLKu5Bs3tXGW1Fj3x1-E1 HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=EikTfrwu2Uh1lbAYSZzshvJM0Kz1MfDl/1jnSXfWGTx5LvGRIMXiZhGgwCx5eKZKCyZrc2U+FVKDRNYEWO7I0XujwnrtXFv7vJ+ZHBwj/Qh+yPEvATlmMzYxpoVW
2024-12-24 15:05:07 UTC	842	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:07 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 17343 Connection: close Set-Cookie: AWSALB=n3Y/lBv+tDRqwL2vW45bjESJvHPqcmpFqe9VOMJFqxk1e77DgSKszLNb25fAodEWGYjCp+8Vhu2QU6j8riEtC25ISUUxz9pAuqqN3lfpBWAz/raWefmQOsP5xAX6; Expires=Tue, 31 Dec 2024 15:05:07 GMT; Path=/ Set-Cookie: AWSALBCORS=n3Y/lBv+tDRqwL2vW45bjESJvHPqcmpFqe9VOMJFqxk1e77DgSKszLNb25fAodEWGYjCp+8Vhu2QU6j8riEtC25ISUUxz9pAuqqN3lfpBWAz/raWefmQOsP5xAX6; Expires=Tue, 31 Dec 2024 15:05:07 GMT; Path=/; SameSite=None Cache-Control: public Expires: Wed, 24 Dec 2025 15:05:07 GMT Last-Modified: Tue, 24 Dec 2024 15:05:07 GMT Vary: User-Agent X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:07 UTC	4505	IN	Data Raw: 0d 0a 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 46 61 69 6c 65 64 41 50 49 43 61 6c 6c 28 72 65 73 70 6f 6e 73 65 29 20 7b 0d 0a 20 20 20 20 24 28 27 23 65 78 63 65 70 74 69 6f 6e 4d 65 73 73 61 67 65 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 64 2d 6e 6f 6e 65 27 29 3b 0d 0a 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 60 46 61 69 6c 65 64 20 41 50 49 20 52 65 73 70 6f 6e 73 65 3a 20 24 7b 72 65 73 70 6f 6e 73 65 7d 60 29 0d 0a 7d 0d 0a 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 45 72 72 6f 72 52 65 73 70 6f 6e 73 65 28 72 65 73 70 6f 6e 73 65 29 20 7b 0d 0a 20 20 20 20 24 28 27 23 65 72 72 6f 72 4d 65 73 73 61 67 65 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 64 2d 6e 6f 6e 65 27 29 3b 0d 0a 20 20 20 20 63 6f 6e 73 6f Data Ascii: function handleFailedAPICall(response) { $('#exceptionMessage').removeClass('d-none'); console.error(`Failed API Response: ${response}`)}function handleErrorResponse(response) { $('#errorMessage').removeClass('d-none'); conso
2024-12-24 15:05:07 UTC	9366	IN	Data Raw: 68 6f 77 53 53 4e 20 73 70 61 6e 2e 66 61 27 29 2e 61 64 64 43 6c 61 73 73 28 27 66 61 2d 65 79 65 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 74 6f 67 67 6c 65 53 68 6f 77 53 53 4e 27 29 2e 61 74 74 72 28 27 61 72 69 61 2d 6c 61 62 65 6c 27 2c 20 27 48 69 64 65 20 53 6f 63 69 61 6c 20 53 65 63 75 72 69 74 79 20 4e 75 6d 62 65 72 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 29 3b 0d 0a 0d 0a 0d 0a 20 20 20 20 24 28 27 23 66 72 6d 4c 6f 61 6e 4e 75 6d 62 65 72 4c 6f 63 61 74 6f 72 27 29 2e 6f 6e 28 27 73 75 62 6d 69 74 27 2c 20 28 65 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 23 73 75 63 63 65 73 73 4d 65 73 73 61 67 65 Data Ascii: howSSN span.fa').addClass('fa-eye'); $('#toggleShowSSN').attr('aria-label', 'Hide Social Security Number'); } }); $('#frmLoanNumberLocator').on('submit', (e) => { e.preventDefault(); $('#successMessage
2024-12-24 15:05:07 UTC	3472	IN	Data Raw: 75 74 3a 72 65 71 75 69 72 65 64 3a 76 61 6c 69 64 27 29 2e 6c 65 6e 67 74 68 20 21 3d 3d 20 24 28 27 66 6f 72 6d 20 69 6e 70 75 74 3a 72 65 71 75 69 72 65 64 27 29 2e 6c 65 6e 67 74 68 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 68 74 6d 6c 2c 20 62 6f 64 79 27 29 2e 61 6e 69 6d 61 74 65 28 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 63 72 6f 6c 6c 54 6f 70 3a 20 28 24 28 27 69 6e 70 75 74 3a 69 6e 76 61 6c 69 64 27 29 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 20 2d 20 32 30 30 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: ut:required:valid').length !== $('form input:required').length) { e.preventDefault(); $('html, body').animate({ scrollTop: ($('input:invalid').offset().top - 200) }, 0); } else {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49786	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:08 UTC	821	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/shutterstock_234728809d.jpg?ext=.jpg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=7PAghP7O2rJiL6XNXIOb2ZPZlAzThx1ONxYZTp7FmYIKdzTYwrLx9w/mhuEH302TBoGHU0OgqcjbtTYYnUlQnD/bq3JSWEKDl42ImtBaLjyIuZpiqQeft0eLdaSi
2024-12-24 15:05:08 UTC	830	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:08 GMT Content-Type: image/jpeg Content-Length: 168182 Connection: close Set-Cookie: AWSALB=spsRd1PM5roQ6lB5mIEeZbZ8FGd/KRbFVDrn7TgoQIKcQ1QHMNdaX+Iqh4UPgdTyQVcvKT2ymFht95F0Rk8GtBGG9f8n1ogugQI/JFcbBZFajPB28NiCnE8ZQKfd; Expires=Tue, 31 Dec 2024 15:05:08 GMT; Path=/ Set-Cookie: AWSALBCORS=spsRd1PM5roQ6lB5mIEeZbZ8FGd/KRbFVDrn7TgoQIKcQ1QHMNdaX+Iqh4UPgdTyQVcvKT2ymFht95F0Rk8GtBGG9f8n1ogugQI/JFcbBZFajPB28NiCnE8ZQKfd; Expires=Tue, 31 Dec 2024 15:05:08 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Fri, 09 Sep 2022 21:02:19 GMT Accept-Ranges: bytes ETag: "d4882e738fc4d81:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:08 UTC	3179	IN	Data Raw: ff d8 ff e1 07 81 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0e 01 00 00 03 00 00 00 01 0e e2 00 00 01 01 00 03 00 00 00 01 03 20 00 00 01 02 00 03 00 00 00 03 00 00 00 b6 01 06 00 03 00 00 00 01 00 02 00 00 01 0e 00 02 00 00 00 3b 00 00 00 bc 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 f7 01 1b 00 05 00 00 00 01 00 00 00 ff 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 01 07 01 32 00 02 00 00 00 14 00 00 01 26 82 98 00 02 00 00 00 44 00 00 01 3a 87 69 00 04 00 00 00 01 00 00 01 80 00 00 01 b8 00 08 00 08 00 08 4c 6f 61 6e 20 63 6f 6e 63 65 70 74 2e 20 59 6f 75 6e 67 20 63 6f 75 70 6c 65 20 68 6f 6c 64 69 6e 67 20 61 20 77 68 69 74 65 20 6d 69 6e 69 61 74 75 72 65 20 68 6f Data Ascii: ExifMM* ;(12&D:iLoan concept. Young couple holding a white miniature ho
2024-12-24 15:05:08 UTC	10704	IN	Data Raw: 00 00 00 00 00 00 01 00 38 42 49 4d 04 0b 00 00 00 00 00 66 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 68 75 74 74 65 72 73 74 6f 63 6b 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 69 70 74 63 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 67 6f 6f 67 6c 65 69 6d 61 67 65 73 26 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 77 65 62 73 74 61 74 65 6d 65 6e 74 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 01 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 00 a1 99 9a 00 06 00 00 00 00 00 01 00 32 00 00 00 01 00 5a 00 00 00 06 00 00 00 00 00 01 00 35 00 00 00 01 00 2d 00 00 00 06 00 00 00 00 00 01 38 42 49 4d 03 f8 00 00 00 00 00 70 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: 8BIMfhttps://www.shutterstock.com/license?utm_source=iptc&utm_medium=googleimages&utm_campaign=webstatement8BIM'8BIMH/fflff/ff2Z5-8BIMp
2024-12-24 15:05:09 UTC	4769	IN	Data Raw: 6e b8 ab b1 57 62 ae 03 15 6e 98 ab ab 8a b8 62 ad e0 57 62 ae c5 5d 8a bb 0a ba b8 ab b0 2b b1 56 c6 2a ec 55 d8 ab 63 15 76 2a ec 55 d8 ab b0 ab b1 56 e9 8a 5d 8a b5 8a 5d 8a 1d 81 5d 8a b5 85 0e a6 2a dd 31 57 62 ae a6 2a ea 62 ad 62 ad d3 15 75 31 56 a9 8a ba 98 ab b1 57 62 ad e2 ab b1 4b b1 57 53 15 5c 31 55 d8 19 37 8a bb 15 6f 02 b7 8a 5d be 29 75 71 56 f1 56 f0 21 a3 8a 5d 8a b6 b8 ab 78 ab b1 57 62 ae ae 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d5 c5 5d 8a bb 15 76 2a ec 55 d8 ab 8e 2a ea e2 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 Data Ascii: nWbnbWb]+VUcvUV]]]1Wbbbu1VWbKWS\1U7o])uqVV!]xWbUWb]vUWb]vUWb]vUWb]vU]vU]vUWb]v*UWb]v
2024-12-24 15:05:09 UTC	13708	IN	Data Raw: 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab a9 8a ba 98 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 ff d6 f4 da e4 50 ec 55 bc 50 df 4c 55 ac 55 bc 52 d8 c5 5b c5 2e c5 5a 38 ab 86 28 71 c5 5a 38 ab 43 14 bb 15 76 15 5e 8d c4 e2 84 4a 37 21 85 2d e2 ae c5 5d 8a a1 ae 46 44 a5 08 72 2a a4 d8 55 61 c2 85 84 e2 ab 4e 14 2c 6c 09 5b 5c 50 b5 b1 55 36 38 50 b0 9c 50 bd 0e 25 90 55 56 c8 b2 5e 0e 06 6b c3 60 4b ab 81 21 d5 c0 96 8b 62 96 b9 61 57 72 c0 ae e5 8a 5c 5b 02 56 16 c5 56 97 c5 54 da 4c 16 95 86 4c 6d 56 b4 d8 6d 54 25 9e 83 05 a6 92 db cb 9d b1 54 8e f2 e2 b9 20 94 b6 59 30 a1 0b 23 57 24 10 54 4e e7 0b 15 64 5d f2 05 90 47 db 8c 83 25 73 b0 c2 a8 56 6d f1 55 68 4e f8 15 32 85 ba 64 4a a7 5a 74 b4 38 43 5c 99 8e 9d 27 34 cb e2 e3 14 c9 72 6a de 2a ec 55 d8 Data Ascii: b]vUWb]vUPUPLUUR[.Z8(qZ8Cv^J7!-]FDrUaN,l[\PU68PP%UV^k`K!baWr\[VVTLLmVmT%T Y0#W$TNd]G%sVmUhN2dJZt8C\'4rjU
2024-12-24 15:05:09 UTC	16384	IN	Data Raw: bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d4 c5 5d 8a bb 15 76 2a ff 00 ff d3 f4 9e 54 c5 b1 81 57 0c 52 de 2a ec 2a ec 55 d8 aa cc 8a ae 18 55 bc 55 b1 85 5d 8a b4 70 2b b1 57 61 57 62 ad 53 14 34 71 55 a7 14 ac 61 8a a9 9c 09 69 0e f8 12 15 ca 6d 81 92 94 d1 ed 91 2c c2 4b 36 c4 8c 43 35 32 d9 24 a9 97 c5 2b 19 f1 60 54 cb 62 c5 63 36 2a a6 5f 14 35 cf 15 5a cd 8a a8 ca 6b 85 04 21 5f 6c 58 d3 5c b1 48 45 40 77 c0 d8 98 db b6 44 a4 23 23 6c 8b 25 60 d4 c5 2a 8a f8 a5 50 35 70 a5 7d 71 57 1c 55 61 c5 56 93 8b 25 84 e2 ad 13 81 5a c1 4a d1 38 13 4a 12 9d b2 25 20 25 d7 4d 91 2d 81 21 bc 6d f2 21 b1 07 21 c3 69 43 4a 6a 08 c2 82 97 97 20 ee 46 4d 0a 95 db 2a 2c c2 8c ef 51 8c 4a 69 28 9c 9d e9 bd 05 76 ec 06 5a 0b 5c a9 2e 67 e2 d5 ae Data Ascii: vUWb]vU]vTWRUUU]p+WaWbS4qUaim,K6C52$+`Tbc6_5Zk!_lX\HE@wD##l%`P5p}qWUaV%ZJ8J% %M-!m!!iCJj FM,QJi(vZ\.g
2024-12-24 15:05:09 UTC	16056	IN	Data Raw: 3f 2f b4 3d 69 07 61 d1 7e ff 00 87 fc 9c 69 36 0f 45 a5 1a 82 ac be 94 7f e4 ec 5b db f9 b1 a2 b7 13 d1 b2 b3 83 d4 7a d2 74 db 70 bf e5 7f 2e 1e 13 cd 78 87 25 9c 1c af 1a 8f 4e 3d c9 a5 05 7e fd ff 00 e6 ac 14 4a 45 31 b9 12 4f 36 6a 3f 51 07 fd 0e 22 1a 76 1b 54 0f b3 12 ff 00 c6 df f0 7f b1 99 58 31 f1 96 39 b2 0c 31 24 7f 12 23 f3 3e f6 38 a1 b6 d1 a3 a2 ab 9f 51 d4 7f be e3 fe ed 3f d9 49 ff 00 26 b3 65 9e 5c 11 74 fa 38 78 b3 b6 3d a5 40 22 8c cb 40 59 b6 fb fa e6 8b 34 ad ea 22 3a 27 2a 9c 55 60 a0 04 83 53 ff 00 0d 98 b6 ca eb 75 5f 59 4b b4 86 9c 57 fc ff 00 13 80 a7 87 87 fc e5 e2 45 51 52 47 23 d3 00 63 4d 99 12 81 2a 28 3e d7 f9 fc f0 ad 17 19 92 a5 89 1b 6c 31 4d 5a d2 e1 90 28 22 a4 d4 fc b0 5a 40 70 95 39 16 a8 e2 a2 8b f3 c6 d6 95 6d 14 Data Ascii: ?/=ia~i6E[ztp.x%N=~JE1O6j?Q"vTX191$#>8Q?I&e\t8x=@"@Y4":'U`Su_YKWEQRG#cM(>l1MZ("Z@p9m
2024-12-24 15:05:09 UTC	8356	IN	Data Raw: 6d 94 ec ae 38 74 14 1d be 9f d9 ca fc 12 d9 c4 1a ff 00 11 da b0 e2 39 82 fb 93 41 b7 80 eb fc b8 f8 45 3c 41 55 75 fb 66 21 fe 22 07 41 4e ff 00 7e 3e 14 91 c4 17 0d 5e 02 bc 2a 49 63 56 34 c8 9c 52 5b 0b d7 56 b7 67 e4 cf 45 1b 0d be fc 7c 29 2f 10 70 d4 21 e3 42 ff 00 11 3b ec 71 f0 e4 bc 41 df 5d 8a bc b9 0a 0c 1c 05 22 41 c2 e1 0a f1 04 56 be f8 f0 14 f1 07 1b a4 e5 c8 9d 87 4c 1c 25 36 b4 4c 02 95 a8 15 dc e0 e1 29 77 d6 e2 a8 25 87 15 f7 c8 90 59 06 9a e5 29 42 cb 53 d3 7c 14 ad 19 23 24 7c 40 8f f3 18 d2 5c 68 01 ad 30 24 2d 20 1a 60 64 d5 01 27 a6 2a d0 51 d3 a9 c5 5b 31 1a 95 23 e2 ed 8a 2d af 4c 53 a6 dd f0 a4 16 b6 a9 34 c6 d0 1d c1 7a 78 e1 1b a9 28 dd 22 dc cb 75 1a a0 a9 ad 07 cc ed 99 fa 38 f1 cf dc e0 eb 32 f8 70 27 bd ec f6 90 08 23 58 Data Ascii: m8t9AE<AUuf!"AN~>^IcV4R[VgE\|)/p!B;qA]"AVL%6L)w%Y)BS\|#$\|@\h0$- `d'Q[1#-LS4zx("u82p'#X
2024-12-24 15:05:09 UTC	16384	IN	Data Raw: 23 14 16 b1 43 b1 56 b1 57 53 0a ba 98 ab 86 2a de 2a d5 31 56 a9 8a b7 8a b5 8a ba 98 ab 54 c5 5d 4c 55 d8 ab 54 c2 ad 8c 55 d8 15 d8 ab a9 85 0e a6 2a ea 60 57 53 14 bb 15 75 31 57 53 15 75 31 57 53 15 75 31 57 62 ad 8c 55 d8 ab b1 57 62 ae a6 2a ea 62 ad e2 ae c5 5a a6 2a ea 62 ad e2 ad 62 ae c5 5d 4c 55 d8 ab a9 8a ba 98 ab a9 8a b7 8a ba 98 a5 d4 c5 0d 53 15 75 31 56 e9 8a b7 8a b5 4c 52 ea 62 ae c5 5a a6 2a ea 62 87 62 ae c5 2d e2 ad 53 14 3a 98 ab b1 57 62 97 62 ae c5 5d 8a bb 14 3b 15 76 2a ec 55 d8 ab b1 4b b1 57 62 ae c5 5d 8a b6 31 56 f1 56 8e 2a d5 0e 2a ea 62 ae c5 5b c5 5d 5c 55 d5 c5 5d 5c 55 d5 c5 5d 5c 55 d5 c5 5d 5c 55 d5 c5 5d 8a b7 5c 0a ea e3 4a ea e1 a5 75 71 a5 75 71 a5 75 71 a5 75 71 a5 76 05 75 70 2b ab 8a b6 31 a4 b4 71 a5 76 2a Data Ascii: #CVWS*1VT]LUTU`WSu1WSu1WSu1WbUWbbZbb]LUSu1VLRbZbb-S:Wbb];vUKWb]1VV*b[]\U]\U]\U]\U]\Juquququqvup+1qv
2024-12-24 15:05:09 UTC	16384	IN	Data Raw: 1c 97 e5 d7 85 59 34 df 13 96 8d 38 4f 0a b2 69 e8 be f9 60 d3 80 9a 56 16 c8 3b 65 a3 10 0b 4e 21 57 a5 32 5c 01 34 84 bc 95 54 10 7a d0 9f bb 23 26 71 8a fd 3a e0 49 10 6e e7 fa 60 89 d9 99 8a 24 c9 d3 ee c3 6a 02 d6 b8 de 9d c6 14 d2 f1 27 6c 6d 14 a8 a7 24 18 b9 8f 7c 16 90 1a eb 8b 35 a5 31 a5 b6 82 e1 0a 4b 74 27 24 c6 d4 e7 97 d2 5a f8 03 90 9c ba 36 63 16 a3 66 01 4a 9e e3 f5 e5 91 14 18 4c 9b 53 7b 01 1b 55 7e c9 eb 92 66 32 13 cd 11 1b 28 14 38 b1 2e 2e 0f d9 c0 50 1a 49 38 37 21 f4 e4 59 73 43 5d c6 15 88 1f 64 ee 32 a9 86 fc 65 8f ea 01 ba 9e 95 cc 29 ec e7 c3 77 92 fe 62 79 93 50 f2 94 d1 eb 7a 5b ec 5c 47 71 0b 7d 89 17 fd d7 c8 7f 30 ff 00 7e 7e ce 5f a5 c9 7b 34 6b 31 dc 41 44 e8 5f 9a 36 1e 65 21 6c d9 ad ef 1b ad bc a6 95 3d fd 09 7e cc Data Ascii: Y48Oi`V;eN!W2\4Tz#&q:In`$j'lm$\|51Kt'$Z6cfJLS{U~f2(8..PI87!YsC]d2e)wbyPz[\Gq}0~~_{4k1AD_6e!l=~
2024-12-24 15:05:09 UTC	16384	IN	Data Raw: 36 0d 92 8b 9f 2c 47 23 73 a5 0e 34 cf 8e 90 b0 3b e9 d2 04 97 ec 9e 8d 88 34 da 25 c4 19 6e 99 ab 47 40 6b 5c be 33 70 a7 8a d3 29 b5 88 dd 68 0d 4e 5a 67 6d 31 c2 42 57 3d f2 05 25 76 23 c7 31 65 27 2a 11 29 55 c6 ae 90 d0 16 0c 5b a2 af 8e 50 65 6d fe 1b 0a d5 e5 bf d7 75 75 82 c6 a2 08 d3 8b b1 e9 53 d6 99 97 01 b3 8f 54 f4 bf 2d 68 4b a6 c4 ab e0 00 cc b8 1a 0e bf 2e ec cf 4b b9 0e 42 8e a3 32 01 b7 03 24 29 33 bc d2 6d f5 15 02 e9 03 11 f6 5e 9f 12 ff 00 aa df e7 cb 27 4e 20 95 25 30 d8 b5 9c be 83 d0 8a 55 48 14 ae 42 db 24 6c 23 cc 85 29 4e 99 6c 5c 59 9d d1 31 30 61 8b 5a 9c d0 81 b8 c2 14 a9 44 78 9c 91 40 46 c6 d5 19 59 66 bf 22 ad 8c 52 d8 c5 5b c5 2e c0 ae c5 5a c5 5b 03 15 6e 98 ab 54 c5 5b c5 5b c5 5d 8a 5b c5 5d 8a bb 15 76 2a ec 0a ea e2 Data Ascii: 6,G#s4;4%nG@k\3p)hNZgm1BW=%v#1e')U[PemuuST-hK.KB2$)3m^'N %0UHB$l#)Nl\Y10aZDx@FYf"R[.Z[nT[[][]v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49785	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:08 UTC	773	OUT	GET /Content/images/header-right-arrow.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=7PAghP7O2rJiL6XNXIOb2ZPZlAzThx1ONxYZTp7FmYIKdzTYwrLx9w/mhuEH302TBoGHU0OgqcjbtTYYnUlQnD/bq3JSWEKDl42ImtBaLjyIuZpiqQeft0eLdaSi
2024-12-24 15:05:08 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:08 GMT Content-Type: image/svg+xml Content-Length: 583 Connection: close Set-Cookie: AWSALB=9g6Wq7dUMhdowFnayCa+DxaO9NV2/CUu8KKOH1L1Fn+HQdlXPlq0CfNGah0YoedDFLwWDPO0ffGG1MSYHurqldOqtn4D2nCVVqMXx+AJleXJBn+9sLNYT1YuE//r; Expires=Tue, 31 Dec 2024 15:05:08 GMT; Path=/ Set-Cookie: AWSALBCORS=9g6Wq7dUMhdowFnayCa+DxaO9NV2/CUu8KKOH1L1Fn+HQdlXPlq0CfNGah0YoedDFLwWDPO0ffGG1MSYHurqldOqtn4D2nCVVqMXx+AJleXJBn+9sLNYT1YuE//r; Expires=Tue, 31 Dec 2024 15:05:08 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:08 UTC	583	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 38 22 20 68 65 69 67 68 74 3d 22 31 34 2e 32 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 20 31 34 2e 32 35 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 66 64 66 65 66 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 2d 35 33 2e 33 33 33 29 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 31 37 2e 39 37 31 2c 36 30 2e 36 61 2e 33 37 35 2e 33 37 35 2c 30 2c 30 2c 30 2d 2e 30 38 32 2d 2e 34 30 39 6c 2d 36 2e 37 35 2d 36 2e 37 35 61 2e 33 37 35 2e 33 37 35 2c 30 2c 30 2c 30 2d 2e 35 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="18" height="14.25" viewBox="0 0 18 14.25"><defs><style>.a{fill:#fdfefe;}</style></defs><g transform="translate(0 -53.333)"><path class="a" d="M17.971,60.6a.375.375,0,0,0-.082-.409l-6.75-6.75a.375.375,0,0,0-.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49788	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:08 UTC	812	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/SD-mobile-2023.png?ext=.png HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=VSQZEcOrMPPKchQKR0FWD1VBBoGKVSEDtM8uYIwBYEDqgotI3DBKtajIh38xegYE3fwuYN+UtwcPqCB1flBUzGsAuh+NqkLs6ugqlKVczDBmBEfa8NBzfsCR3vLY
2024-12-24 15:05:08 UTC	828	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:08 GMT Content-Type: image/png Content-Length: 53993 Connection: close Set-Cookie: AWSALB=MglaXGQBwpZHJ26k6ubp7YZuUWNefardtRmE2hVdTTjyqkfeiCyWlZW5g8oH2mCVTZX7+7Q2mA9aTs6PmC8BsuJpZCO/k8ETFIzWkTo1t1bgVsmNWNbLT4vgVmVA; Expires=Tue, 31 Dec 2024 15:05:08 GMT; Path=/ Set-Cookie: AWSALBCORS=MglaXGQBwpZHJ26k6ubp7YZuUWNefardtRmE2hVdTTjyqkfeiCyWlZW5g8oH2mCVTZX7+7Q2mA9aTs6PmC8BsuJpZCO/k8ETFIzWkTo1t1bgVsmNWNbLT4vgVmVA; Expires=Tue, 31 Dec 2024 15:05:08 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Wed, 14 Jun 2023 13:50:41 GMT Accept-Ranges: bytes ETag: "d2138835c79ed91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:08 UTC	505	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ec 00 00 01 2d 08 02 00 00 00 84 72 1b e6 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 09 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 32 2d 63 30 30 30 20 37 39 2e 35 36 36 65 62 63 35 2c 20 32 30 32 32 2f 30 35 2f 30 39 2d 30 37 3a 32 32 3a 32 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 Data Ascii: PNGIHDR-rpHYs+#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5, 2022/05/09-07:22:29 "> <rdf:R
2024-12-24 15:05:08 UTC	1338	IN	Data Raw: 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 33 2d 30 35 2d 33 30 54 31 31 3a 35 30 3a 31 31 2d 30 35 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 33 2d 30 35 2d 33 30 54 31 31 3a 35 36 3a 32 32 2d 30 35 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 33 2d 30 35 2d 33 30 54 31 31 3a 35 Data Ascii: .adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.4 (Windows)" xmp:CreateDate="2023-05-30T11:50:11-05:00" xmp:ModifyDate="2023-05-30T11:56:22-05:00" xmp:MetadataDate="2023-05-30T11:5
2024-12-24 15:05:08 UTC	1338	IN	Data Raw: 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 42 61 67 3e 20 3c 2f 70 68 6f 74 6f 73 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 72 65 61 74 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 65 63 33 38 63 38 30 34 2d 63 38 61 36 2d 65 33 34 38 2d 39 38 62 65 2d 38 64 31 34 30 65 61 38 64 61 39 64 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 33 2d 30 35 2d 33 30 54 31 31 3a 35 30 3a 31 31 2d 30 35 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 57 69 6e 64 Data Ascii: f:li> </rdf:Bag> </photoshop:DocumentAncestors> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:ec38c804-c8a6-e348-98be-8d140ea8da9d" stEvt:when="2023-05-30T11:50:11-05:00" stEvt:softwareAgent="Adobe Photoshop 23.4 (Wind
2024-12-24 15:05:08 UTC	1338	IN	Data Raw: 28 ad 23 10 b1 75 5a b6 2b 6b 86 08 17 34 88 98 9d 89 d4 3a 98 a8 75 20 e1 bc 48 67 df 01 00 fa 9e d7 59 cc 0f 2d 5f 3e bc 6e 63 58 e8 3c f0 e2 a1 47 1e 79 f8 d0 a1 23 97 5e 7a e9 af fc ea ff 75 c7 1d ef 5a e2 2b fe 7a c5 d9 12 e2 5d bb 76 dd 79 e7 9d 2f ec dc b9 f5 d2 ab 4a a5 8e a7 9f 7a 24 89 a3 02 80 1a 58 c9 cb 36 af dc 76 ed 74 9d 1d cb 86 a1 d2 5c b9 6e 04 8a a1 97 18 4e ad eb c8 fb a3 b3 0d 16 59 3b 50 8a 52 6b 04 66 66 9b 1d 39 2f 2c 78 be 56 d5 5a ac 94 aa 35 92 62 c1 9f 6d a4 1d 39 4f 89 43 94 d4 70 a9 e0 cd 94 63 24 f4 3d 95 a6 4e 6b 85 8a e6 6a 91 c4 0d 74 09 72 8a 00 e2 e5 d9 cb b1 0a 04 24 9b 5e 51 18 98 db 53 32 82 40 77 10 75 07 4d 64 cd 00 88 2e 65 35 11 95 ac 10 88 28 c2 42 e8 01 4b c3 38 9e 9f c4 d9 2e 1c b8 47 a8 15 25 c6 f9 9e 27 6c Data Ascii: (#uZ+k4:u HgY-_>ncX<Gy#^zuZ+z]vy/Jz$X6vt\nNY;PRkff9/,xVZ5bm9OCpc$=Nkjtr$^QS2@wuMd.e5(BK8.G%'l
2024-12-24 15:05:08 UTC	2676	IN	Data Raw: d2 17 71 14 4b ac 13 df 73 f7 3d d6 da 30 2c 32 80 24 89 ac de 9a 2e bb 14 9c 9b 3f 60 de ad 25 ad b7 fb 51 37 57 fb ef 51 ff 59 fb 04 59 78 e6 fc 11 0b f5 83 05 ad cd 9f ba c0 7a fc 32 74 a6 63 0f 7c 39 ba 56 fb 50 86 9c b7 77 26 fa ed ff fd 24 20 02 03 e4 7d f0 3d 70 d2 72 0a 6a 7f cd ed 1f fa c6 3d f7 bc ff ce f7 bf e7 fb be ef 9e 6f 7e eb 81 fb 1f bc f3 fb 3f a0 b4 3a 65 f3 17 71 52 2c a5 10 3b e7 1e 7f e2 71 44 2c 14 3b 2b 95 39 02 30 1b de a4 1a f6 a5 cf 7c 8d 21 f3 42 6b 0d 00 a8 11 8c 03 b3 f0 31 96 35 d7 bf ed 85 3f ff a5 7d bb 77 6e de bc a5 bf af 67 f7 9e dd a3 63 a3 2b 57 ae 3c 7f 3d 7e 75 63 29 85 78 6e ae 7c e4 c8 88 e7 07 83 43 c3 b3 53 e3 5d c3 2b 7f f0 a3 3f ec eb d7 25 51 0e 5b 6f 04 9c 77 f7 b5 21 20 5b 57 f4 3c f0 59 73 60 df de b5 9b Data Ascii: qKs=0,2$.?`%Q7WQYYxz2tc\|9VPw&$ }=prj=o~?:eqR,;qD,;+90\|!Bk15?}wngc+W<=~uc)xn\|CS]+?%Q[ow! [W<Ys`
2024-12-24 15:05:09 UTC	1338	IN	Data Raw: 6d 13 c2 22 b5 68 e6 ee a7 ff f9 b1 43 df 65 b4 84 24 48 c4 0e c5 63 22 38 bd 1c 75 00 20 e4 80 3d 40 8b 22 02 f6 b9 f1 47 9f 1b 7d ea ea 15 37 be f3 aa 1f ea 29 0c 9d ce 8c 7e f6 b0 94 42 9c a4 86 59 08 09 01 d2 b6 51 36 33 88 46 ee 74 2f d6 6b 1f 88 88 b8 b6 a7 50 89 4c 5b 80 97 40 86 5b 6b 37 60 c8 1c 80 02 00 52 77 f5 7f 7b fc 6f 9e 3c f4 bd d4 25 40 82 00 92 f9 ba 91 04 5f a6 3d 44 10 30 53 ac 01 b2 db aa a2 a7 46 ee df 31 fa e4 e6 81 2b df 7f eb 4f 14 54 07 22 82 10 90 60 ab 1b ea dc c8 f5 92 09 b1 b5 f6 1b f7 7c 2b 49 12 ad 15 2c 78 2a b3 b9 d9 da 97 5e 40 bc 4e a0 94 02 80 d8 3a 6a e9 12 8c 48 67 3e 15 23 3a 00 12 c9 c2 68 a4 66 e6 be fb fc 97 9f 3a f8 bd 72 32 8b a2 da 5a 03 e2 22 8c ba 57 00 41 40 11 0d e8 12 a9 3c 33 f9 bd 3d 77 6d bf 7a d5 2d Data Ascii: m"hCe$Hc"8u =@"G}7)~BYQ63Ft/kPL[@[k7`Rw{o<%@_=D0SF1+OT"`\|+I,x*^@N:jHg>#:hf:r2Z"WA@<3=wmz-
2024-12-24 15:05:09 UTC	6690	IN	Data Raw: 12 c5 ca 29 b5 b0 5c 8f a0 93 56 39 77 7e 66 a2 f1 73 7f f3 d0 f6 46 01 45 10 b5 53 2e 33 7e 64 4b 21 47 44 6c 33 1b 1c 02 08 e2 68 cc ff ed 6b 7b fe d7 bd 7b 3e fb fe 8d 6f d9 30 84 64 18 35 c9 92 71 10 96 4c 88 33 2e 40 ab 5f f3 2c b6 96 2c b7 3e 18 63 36 6d da 84 88 7f f0 07 7f 70 e5 95 57 16 8b c5 cf 7c e6 33 d7 5d 77 dd e7 3e f7 b9 2d 5b b6 d4 eb f5 07 1f 7c 30 9f cf 5f 72 c9 25 3d 3d 3d 61 18 ce cc cc dc 7b ef bd 5b b6 6c 79 fa e9 a7 3f ff f9 cf 6f df be fd c6 1b 6f 8c e3 78 6c 6c 6c f7 ee dd f5 7a dd 39 b7 6f df be 03 07 0e 78 9e f7 17 7f f1 17 23 23 23 cb 96 2d fb cb bf fc 4b 6b ed 07 3f f8 c1 6f 7f fb db 9d 9d 9d 7b f6 ec b1 d6 46 51 74 d3 4d 37 f5 f7 f7 27 49 f2 99 cf 7c e6 ad 6f 7d eb 9e 3d 7b f6 ec d9 33 36 36 66 8c f9 d6 b7 be 35 39 39 59 28 Data Ascii: )\V9w~fsFES.3~dK!GDl3hk{{>o0d5qL3.@_,,>c6mpW\|3]w>-[\|0_r%===a{[ly?ooxlllz9ox###-Kk?o{FQtM7'I\|o}={366f599Y(
2024-12-24 15:05:09 UTC	4014	IN	Data Raw: bd 90 20 0c 67 9a 37 e4 68 5b ed 12 18 08 9c 79 30 5e 41 23 28 0a 00 00 59 16 49 63 9c 29 b5 dc 0a 85 5e f0 0d 67 ac d9 f9 5c 08 c8 f3 32 80 ed f7 40 fb 78 27 59 d6 04 76 72 66 0e 8e 85 38 89 10 fb c5 70 d9 ba e6 73 3b d2 c4 2a 42 60 51 4a 21 a0 72 e2 85 9e 46 a7 2d 6a 04 4c 04 28 27 0e c1 88 13 ee 0d 51 13 31 64 34 62 a0 16 29 7e c1 75 68 79 7d 29 4d 5c 18 84 1f ff d8 c7 00 49 44 aa d5 da 15 db ae 28 97 cb 9d 5b 2e 79 ea a9 c7 57 af 5a dd d9 d5 1d 04 5e d4 8c d7 ad 5d d7 db db 7b e5 15 57 76 75 f7 1a eb de f2 96 b7 ec da b5 eb ba eb ae f3 03 ff d2 4b 2f eb ea ec b2 d6 71 db cc d8 97 f7 ae 5b d9 91 f3 3d ad d4 96 7e d7 95 f3 7a f3 d9 5d b9 a0 d6 7d ed 29 49 80 1d 4b 46 9b 5a 82 46 e7 db 38 83 e9 ad d5 c6 62 eb bf f6 57 70 42 6f e9 98 03 8e 3f fd 58 8b 7d Data Ascii: g7h[y0^A#(YIc)^g\2@x'Yvrf8ps;*B`QJ!rF-jL('Q1d4b)~uhy})M\ID([.yWZ^]{WvuK/q[=~z]})IKFZF8bWpBo?X}
2024-12-24 15:05:09 UTC	5352	IN	Data Raw: 76 6d d8 b0 21 13 e2 76 d8 4b 96 69 46 e6 aa 0d 04 27 22 2e 6e 82 e7 20 c8 83 d6 92 24 62 8d c4 16 b5 12 14 e0 54 05 79 74 56 44 28 cc 79 0a f3 e2 9a d6 a6 b5 d9 c9 e7 1f ee dd 78 b9 1f bc ae 23 46 4f 14 02 69 ce 4d 99 5a d9 35 eb 28 0e 9d 31 f5 0a a6 91 54 eb 98 24 36 3c 2c 95 b9 fc 9a cb 55 5f 41 94 46 ca 83 e3 cc 05 65 e6 ca c5 81 fc 5b 6f d9 7c d7 83 23 8d 46 53 91 2e 14 8a ce b9 05 32 0c 71 1c 67 d3 6d a5 52 59 b3 66 cd ea d5 ab eb f5 fa e8 e8 68 57 57 57 5f 5f 5f 3e 9f 47 c4 65 cb 96 11 d1 d8 d8 98 b5 76 d9 b2 65 1d 1d 1d f5 7a 7d f9 f2 e5 85 42 81 99 97 2d 5b 36 33 33 e3 9c eb ea ea 9a 57 a3 cf 0d 32 f5 26 0c c3 ab af be 7a 72 72 72 c3 86 0d 23 23 23 41 10 f4 f6 f6 f6 f5 f5 ad 5b b7 ae 5c 2e c7 71 bc 77 ef de 4d 9b 36 01 80 88 8c 8d 8d e5 f3 79 cf Data Ascii: vm!vKiF'".n $bTytVD(yx#FOiMZ5(1T$6<,U_AFe[o\|#FS.2qgmRYfhWWW___>Gevez}B-[633W2&zrrr###A[\.qwM6y
2024-12-24 15:05:09 UTC	5352	IN	Data Raw: 02 08 5b 11 01 f2 3d d2 a4 42 2f df 11 74 45 6c 1d 20 b3 f5 b4 b1 60 a2 04 04 15 91 00 7a 9e ce b2 4d 2c 2a c2 49 92 dc 7f ff fd 33 33 33 cd 66 73 62 62 22 8a 22 11 c9 32 fd 64 31 39 73 73 73 5a eb e1 e1 e1 66 b3 99 a6 e9 f0 f0 70 a3 d1 d8 b1 63 47 96 47 1e 11 89 28 4b c4 96 91 84 d2 34 25 a2 c9 c9 49 00 e8 ef ef 3f 67 42 7c 3a 60 e6 c9 c9 c9 bd 7b f7 be e1 0d 6f 98 9a 9a 9a 9b 9b cb 84 18 b1 95 4f 46 44 18 04 84 c3 5c be 5a ae 0c 0f 0e e8 7c 3e 6a 46 a8 34 8a 41 b1 a0 42 04 94 a4 41 a4 c0 0b d8 39 64 03 cc 08 40 8a 2c 29 02 74 6c d8 39 14 06 16 52 be 4d 13 27 a2 3d 1f 9b 89 4d d2 e9 03 2f a4 cd 7a 50 78 15 64 c5 3d 13 1c 23 c4 71 6d b6 36 79 b0 a3 a3 04 ec d8 19 88 1b 02 00 4a 73 12 01 20 01 fb 81 ef 8a f9 4e a6 20 a7 fa 4a 2a 4d 4c 62 b9 5e 4b e6 1a b5 Data Ascii: [=B/tEl `zM,I333fsbb""2d19sssZfpcGG(K4%I?gB\|:`{oOFD\Z\|>jF4ABA9d@,)tl9RM'=M/zPxd=#qm6yJs N JMLb^K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49789	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:08 UTC	807	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/App-store.png?ext=.png HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=VSQZEcOrMPPKchQKR0FWD1VBBoGKVSEDtM8uYIwBYEDqgotI3DBKtajIh38xegYE3fwuYN+UtwcPqCB1flBUzGsAuh+NqkLs6ugqlKVczDBmBEfa8NBzfsCR3vLY
2024-12-24 15:05:08 UTC	826	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:08 GMT Content-Type: image/png Content-Length: 4120 Connection: close Set-Cookie: AWSALB=pf9FWRx6CmT2Iu2ybzm1IPB4kopdgnx2oUDSO4yxxyULGzYijTHo3raNJeyg00bYakAwD7fUNqisV/Qa7aaWHSN7FyicnMY4nWQYpFVDQgaFyGEauwxgzaJK8xIi; Expires=Tue, 31 Dec 2024 15:05:08 GMT; Path=/ Set-Cookie: AWSALBCORS=pf9FWRx6CmT2Iu2ybzm1IPB4kopdgnx2oUDSO4yxxyULGzYijTHo3raNJeyg00bYakAwD7fUNqisV/Qa7aaWHSN7FyicnMY4nWQYpFVDQgaFyGEauwxgzaJK8xIi; Expires=Tue, 31 Dec 2024 15:05:08 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 01 Jun 2021 16:26:55 GMT Accept-Ranges: bytes ETag: "503fb1ef257d71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:08 UTC	507	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 aa 00 00 00 32 08 06 00 00 00 cc 43 40 ac 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 aa a0 03 00 04 00 00 00 01 00 00 00 32 00 00 00 00 1d ce 90 9a 00 00 0f 8e 49 44 41 54 78 01 ed 9d 77 a8 5d c5 13 c7 f7 3d a3 b1 26 44 c5 ae 89 31 0a 62 ec b1 a0 46 14 44 63 89 98 80 82 15 c1 f6 8f a2 58 50 14 41 c5 0e a2 e6 0f b1 0b 2a 06 35 b1 04 35 04 92 58 41 ac 58 62 4f c4 82 bd 61 8d 89 e5 fd f6 33 fe be c7 b9 27 e7 dc f2 ce de f7 ae 7a 06 ee 3b 7b 76 67 67 67 e7 cc ee d9 99 9d 3d af 6f 20 42 88 f0 f3 cf 3f 87 37 de 78 23 7c f8 e1 87 e1 bb ef be 23 2b f4 f7 f7 db b5 d9 9f 3f Data Ascii: PNGIHDR2C@sRGB8eXIfMMi2IDATxw]=&D1bFDcXPA55XAXbOa3'z;{vggg=o B?7x#\|#+?
2024-12-24 15:05:08 UTC	3613	IN	Data Raw: b2 f0 d9 67 9f 85 07 1e 78 20 1c 76 d8 61 c9 44 b9 fe fa eb 07 16 e3 f7 dd 77 9f fd 68 07 97 c7 50 c3 3b ef bc 13 8e 39 e6 98 a4 cd 9e 72 ca 29 01 ba c3 01 6f be f9 66 40 96 43 0d c3 aa a8 78 1a ce 3f ff fc b0 c1 06 1b 58 bf df 7f ff fd 64 fd 1f 37 6e 5c 38 f3 cc 33 8d de f7 df 7f 1f 0e 3e f8 60 33 1a 87 5a c8 5b 6c b1 45 58 63 8d 35 92 f5 0b 42 eb ae bb 6e 18 3b 76 6c 52 9a 45 c4 18 d8 0c 76 0f 1b 6f bc b1 b5 ef f3 86 22 3d 6c 8a fa e4 93 4f 86 5d 77 dd 35 eb 23 46 dd cc 99 33 b3 fb aa 89 df 7f ff dd 48 1c 71 c4 11 e1 a4 93 4e 32 27 f2 55 57 5d 65 03 63 e7 9d 77 6e 20 cf 0c 75 fa e9 a7 37 e4 f1 90 3c de 01 07 1c 90 95 4f 98 30 21 e8 9e e5 0a 78 ab ac b2 4a 88 7e bf 15 96 2f e2 23 ab 1c 13 47 1e 79 a4 e1 32 eb 7b e0 1e 3e f2 bc 08 07 3e a9 fb d3 4f 3f b5 Data Ascii: gx vaDwhP;9r)of@Cx?Xd7n\83>`3Z[lEXc5Bn;vlREvo"=lO]w5#F3HqN2'UW]ecwn u7<O0!xJ~/#Gy2{>>O?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49799	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:08 UTC	566	OUT	GET /kentico/bundles/forms/scripts?v=Gt4GbgwtDKK0sTC0YrvKBwgsxuk25Gpe2t6-p5hD_A81 HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=TY5u3GuVg8wosEzR0bro4BcODpmB9k9JIRoo6bU2PxJeADkkf1EHHJonejcsr2JuRibkm+tZ6a8T+pQUzip+Ygmd/D1hHQH6R8K4LHntLMbmkkhrTuV7nKiG7ohb
2024-12-24 15:05:09 UTC	843	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:09 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 143253 Connection: close Set-Cookie: AWSALB=jOm0fkppPqQ48mDKu/N2P/ZHB8CYqnzTcLm4Qw299sbHF7ULoWT1IpDBf1TV5CjVBVNcm3qXLf7gorWtrNMdz94Iv9B8qSaKmwPPO5MLX2+3eKWw2HqGdTPtAD/g; Expires=Tue, 31 Dec 2024 15:05:09 GMT; Path=/ Set-Cookie: AWSALBCORS=jOm0fkppPqQ48mDKu/N2P/ZHB8CYqnzTcLm4Qw299sbHF7ULoWT1IpDBf1TV5CjVBVNcm3qXLf7gorWtrNMdz94Iv9B8qSaKmwPPO5MLX2+3eKWw2HqGdTPtAD/g; Expires=Tue, 31 Dec 2024 15:05:09 GMT; Path=/; SameSite=None Cache-Control: public Expires: Wed, 24 Dec 2025 15:05:09 GMT Last-Modified: Tue, 24 Dec 2024 15:05:09 GMT Vary: User-Agent X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:09 UTC	490	IN	Data Raw: 77 69 6e 64 6f 77 2e 6b 65 6e 74 69 63 6f 20 3d 20 77 69 6e 64 6f 77 2e 6b 65 6e 74 69 63 6f 20 7c 7c 20 7b 7d 3b 0d 0a 77 69 6e 64 6f 77 2e 6b 65 6e 74 69 63 6f 2e 5f 66 6f 72 6d 73 20 3d 20 77 69 6e 64 6f 77 2e 6b 65 6e 74 69 63 6f 2e 5f 66 6f 72 6d 73 20 7c 7c 20 7b 7d 3b 0d 0a 77 69 6e 64 6f 77 2e 6b 65 6e 74 69 63 6f 2e 5f 66 6f 72 6d 73 2e 66 6f 72 6d 46 69 6c 65 55 70 6c 6f 61 64 65 72 43 6f 6d 70 6f 6e 65 6e 74 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 64 6f 63 75 6d 65 6e 74 29 20 7b 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 69 73 61 62 6c 65 45 6c 65 6d 65 6e 74 73 28 66 6f 72 6d 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 72 6d 2e 66 69 6c 65 55 70 6c 6f 61 64 65 72 44 69 73 61 62 6c 65 64 45 6c 65 6d 65 6e 74 73 20 3d 20 5b 5d 3b Data Ascii: window.kentico = window.kentico \|\| {};window.kentico._forms = window.kentico._forms \|\| {};window.kentico._forms.formFileUploaderComponent = (function (document) { function disableElements(form) { form.fileUploaderDisabledElements = [];
2024-12-24 15:05:09 UTC	1338	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 2e 64 69 73 61 62 6c 65 64 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 65 6e 61 62 6c 65 45 6c 65 6d 65 6e 74 73 28 66 6f 72 6d 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 72 6d 2e 66 69 6c 65 55 70 6c 6f 61 64 65 72 44 69 73 61 62 6c 65 64 45 6c 65 6d 65 6e 74 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 64 69 73 61 62 6c 65 64 45 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 6d 2e 65 6c 65 6d 65 6e 74 73 5b 64 69 73 61 62 6c 65 64 45 6c 65 6d 65 6e 74 5d 2e 64 69 73 61 62 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 Data Ascii: element.disabled = true; } } } function enableElements(form) { form.fileUploaderDisabledElements.forEach(function (disabledElement) { form.elements[disabledElement].disabled = false;
2024-12-24 15:05:09 UTC	1338	IN	Data Raw: 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 74 65 6d 70 46 69 6c 65 49 64 65 6e 74 69 66 69 65 72 49 6e 70 75 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 63 6f 6e 66 69 67 2e 74 65 6d 70 46 69 6c 65 49 64 65 6e 74 69 66 69 65 72 49 6e 70 75 74 49 64 29 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 79 73 74 65 6d 46 69 6c 65 4e 61 6d 65 49 6e 70 75 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 63 6f 6e 66 69 67 2e 73 79 73 74 65 6d 46 69 6c 65 4e 61 6d 65 49 6e 70 75 74 49 64 29 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 6f 72 69 67 69 6e 61 6c 46 69 6c 65 4e 61 6d 65 49 6e 70 75 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 63 Data Ascii: ); var tempFileIdentifierInput = document.getElementById(config.tempFileIdentifierInputId); var systemFileNameInput = document.getElementById(config.systemFileNameInputId); var originalFileNameInput = document.getElementById(c
2024-12-24 15:05:09 UTC	1338	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 49 66 20 66 69 6c 65 20 68 61 73 20 6e 6f 74 20 79 65 74 20 62 65 65 6e 20 70 65 72 73 69 73 74 65 64 2c 20 73 65 6e 64 20 61 20 72 65 71 75 65 73 74 20 74 6f 20 64 65 6c 65 74 65 20 69 74 2e 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 65 6c 65 74 65 54 65 6d 70 46 69 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 65 6d 70 46 69 6c 65 49 64 65 6e 74 69 66 69 65 72 49 6e 70 75 74 2e 76 61 6c 75 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 65 6c 65 74 65 52 65 71 75 65 73 74 20 3d 20 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: } // If file has not yet been persisted, send a request to delete it. var deleteTempFile = function () { if (tempFileIdentifierInput.value) { var deleteRequest = new XMLHttpRequest();
2024-12-24 15:05:09 UTC	1338	IN	Data Raw: 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 49 6e 20 49 45 31 31 20 63 68 61 6e 67 65 20 66 69 72 65 73 20 61 6c 73 6f 20 77 68 65 6e 20 73 65 74 74 69 6e 67 20 66 69 6c 65 49 6e 70 75 74 20 76 61 6c 75 65 20 74 6f 20 6e 75 6c 6c 2e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 66 69 6c 65 49 6e 70 75 74 2e 76 61 6c 75 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 54 65 78 74 42 75 74 74 6f 6e 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 68 69 64 64 65 6e 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 49 63 6f 6e 42 75 74 74 6f 6e 2e 73 65 74 41 74 74 72 69 62 Data Ascii: { // In IE11 change fires also when setting fileInput value to null. if (!fileInput.value) { return; } inputTextButton.removeAttribute("hidden"); inputIconButton.setAttrib
2024-12-24 15:05:09 UTC	2676	IN	Data Raw: 20 20 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 20 3d 20 73 75 62 6d 69 74 52 65 71 75 65 73 74 2e 72 65 73 70 6f 6e 73 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 49 45 31 31 20 61 6e 64 20 45 64 67 65 20 64 6f 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 72 65 73 70 6f 6e 73 65 20 74 79 70 65 20 27 6a 73 6f 6e 27 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 72 65 73 75 6c 74 20 3d 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 72 65 73 75 6c 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: var result = submitRequest.response; // IE11 and Edge do not support response type 'json' if (typeof result === "string") { result = JSON.parse(result);
2024-12-24 15:05:09 UTC	1338	IN	Data Raw: 29 20 7b 20 69 66 20 28 22 6f 62 6a 65 63 74 22 20 3d 3d 20 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 26 26 20 22 6f 62 6a 65 63 74 22 20 3d 3d 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 29 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 74 28 29 3b 20 65 6c 73 65 20 69 66 20 28 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 29 20 64 65 66 69 6e 65 28 5b 5d 2c 20 74 29 3b 20 65 6c 73 65 20 7b 20 76 61 72 20 69 20 3d 20 74 28 29 3b 20 66 6f 72 20 28 76 61 72 20 6e 20 69 6e 20 69 29 20 28 22 6f 62 6a 65 63 74 22 20 3d 3d 20 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3f 20 65 78 70 6f 72 74 73 20 3a 20 65 29 5b 6e 5d 20 3d 20 69 5b 6e 5d 20 7d 20 7d 28 22 75 6e 64 65 66 69 Data Ascii: ) { if ("object" == typeof exports && "object" == typeof module) module.exports = t(); else if ("function" == typeof define && define.amd) define([], t); else { var i = t(); for (var n in i) ("object" == typeof exports ? exports : e)[n] = i[n] } }("undefi
2024-12-24 15:05:09 UTC	1338	IN	Data Raw: 20 21 30 2c 20 73 68 6f 77 4d 61 73 6b 4f 6e 48 6f 76 65 72 3a 20 21 30 2c 20 6f 6e 4b 65 79 56 61 6c 69 64 61 74 69 6f 6e 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 7d 2c 20 73 6b 69 70 4f 70 74 69 6f 6e 61 6c 50 61 72 74 43 68 61 72 61 63 74 65 72 3a 20 22 20 22 2c 20 6e 75 6d 65 72 69 63 49 6e 70 75 74 3a 20 21 31 2c 20 72 69 67 68 74 41 6c 69 67 6e 3a 20 21 31 2c 20 75 6e 64 6f 4f 6e 45 73 63 61 70 65 3a 20 21 30 2c 20 72 61 64 69 78 50 6f 69 6e 74 3a 20 22 22 2c 20 5f 72 61 64 69 78 44 61 6e 63 65 3a 20 21 31 2c 20 67 72 6f 75 70 53 65 70 61 72 61 74 6f 72 3a 20 22 22 2c 20 6b 65 65 70 53 74 61 74 69 63 3a 20 6e 75 6c 6c 2c 20 70 6f 73 69 74 69 6f 6e 43 61 72 65 74 4f 6e 54 61 62 3a 20 21 30 2c 20 74 61 62 54 68 72 6f 75 67 68 3a 20 21 31 2c 20 Data Ascii: !0, showMaskOnHover: !0, onKeyValidation: function () { }, skipOptionalPartCharacter: " ", numericInput: !1, rightAlign: !1, undoOnEscape: !0, radixPoint: "", _radixDance: !1, groupSeparator: "", keepStatic: null, positionCaretOnTab: !0, tabThrough: !1,
2024-12-24 15:05:09 UTC	2676	IN	Data Raw: 5c 75 66 66 31 39 5d 22 2c 20 64 65 66 69 6e 69 74 69 6f 6e 53 79 6d 62 6f 6c 3a 20 22 2a 22 20 7d 2c 20 61 3a 20 7b 20 76 61 6c 69 64 61 74 6f 72 3a 20 22 5b 41 2d 5a 61 2d 7a 5c 75 30 34 31 30 2d 5c 75 30 34 34 66 5c 75 30 34 30 31 5c 75 30 34 35 31 5c 78 63 30 2d 5c 78 66 66 5c 78 62 35 5d 22 2c 20 64 65 66 69 6e 69 74 69 6f 6e 53 79 6d 62 6f 6c 3a 20 22 2a 22 20 7d 2c 20 22 2a 22 3a 20 7b 20 76 61 6c 69 64 61 74 6f 72 3a 20 22 5b 30 2d 39 5c 75 66 66 31 30 2d 5c 75 66 66 31 39 41 2d 5a 61 2d 7a 5c 75 30 34 31 30 2d 5c 75 30 34 34 66 5c 75 30 34 30 31 5c 75 30 34 35 31 5c 78 63 30 2d 5c 78 66 66 5c 78 62 35 5d 22 20 7d 20 7d 20 7d 2c 20 32 35 33 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f Data Ascii: \uff19]", definitionSymbol: "" }, a: { validator: "[A-Za-z\u0410-\u044f\u0401\u0451\xc0-\xff\xb5]", definitionSymbol: "" }, "*": { validator: "[0-9\uff10-\uff19A-Za-z\u0410-\u044f\u0401\u0451\xc0-\xff\xb5]" } } }, 253: function (e, t) { Object.definePro
2024-12-24 15:05:09 UTC	1338	IN	Data Raw: 74 63 68 45 76 65 6e 74 28 64 29 20 7d 20 65 6c 73 65 20 28 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 4f 62 6a 65 63 74 28 29 29 2e 65 76 65 6e 74 54 79 70 65 20 3d 20 63 2c 20 64 2e 64 65 74 61 69 6c 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 20 65 2e 74 79 70 65 20 26 26 20 28 30 2c 20 61 2e 64 65 66 61 75 6c 74 29 28 64 2c 20 65 29 2c 20 6e 2e 66 69 72 65 45 76 65 6e 74 28 22 6f 6e 22 20 2b 20 64 2e 65 76 65 6e 74 54 79 70 65 2c 20 64 29 20 7d 20 65 6c 73 65 20 69 66 20 28 76 6f 69 64 20 30 20 21 3d 3d 20 69 5b 63 5d 29 20 7b 20 61 72 67 75 6d 65 6e 74 73 5b 30 5d 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 74 79 70 65 20 3f 20 61 72 67 75 6d 65 6e 74 73 5b 30 5d 20 3a 20 6f 2e 64 65 66 61 75 6c 74 2e 45 76 65 6e Data Ascii: tchEvent(d) } else (d = document.createEventObject()).eventType = c, d.detail = arguments[1], e.type && (0, a.default)(d, e), n.fireEvent("on" + d.eventType, d) } else if (void 0 !== i[c]) { arguments[0] = arguments[0].type ? arguments[0] : o.default.Even

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49798	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:08 UTC	589	OUT	GET /getmedia/a1f01d8f-56be-4d2b-b8a2-46ef8e8b6de0/iStock-1285205214.jpg?width=2000&height=1181&ext=.jpg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=TY5u3GuVg8wosEzR0bro4BcODpmB9k9JIRoo6bU2PxJeADkkf1EHHJonejcsr2JuRibkm+tZ6a8T+pQUzip+Ygmd/D1hHQH6R8K4LHntLMbmkkhrTuV7nKiG7ohb
2024-12-24 15:05:09 UTC	933	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:09 GMT Content-Type: image/jpeg Content-Length: 125774 Connection: close Set-Cookie: AWSALB=4926Bf85ikpfqi5qr0rlfPhxDylAqb8+3q9NDdUyghzNEqqkNN616EnJYkhY+6iAMFrpZBvyjO5iwsA1zyDIv6eU2Gt58bQgUGevLWUmDz8K39qUGWQosHKidL6p; Expires=Tue, 31 Dec 2024 15:05:09 GMT; Path=/ Set-Cookie: AWSALBCORS=4926Bf85ikpfqi5qr0rlfPhxDylAqb8+3q9NDdUyghzNEqqkNN616EnJYkhY+6iAMFrpZBvyjO5iwsA1zyDIv6eU2Gt58bQgUGevLWUmDz8K39qUGWQosHKidL6p; Expires=Tue, 31 Dec 2024 15:05:09 GMT; Path=/; SameSite=None Cache-Control: public, must-revalidate Expires: Tue, 24 Dec 2024 15:05:09 GMT Last-Modified: Tue, 30 May 2023 15:52:44 GMT Accept-Ranges: bytes ETag: "638210587641384697" Content-Disposition: inline; filename=iStock-1285205214.jpg X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:09 UTC	1338	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff db 00 43 00 05 04 04 04 04 03 05 04 04 04 06 05 05 06 08 0d 08 08 07 07 08 10 0b 0c 09 0d 13 10 14 13 12 10 12 12 14 17 1d 19 14 16 1c 16 12 12 1a 23 1a 1c 1e 1f 21 21 21 14 19 24 27 24 20 26 1d 20 21 20 ff db 00 43 01 05 06 06 08 07 08 0f 08 08 0f 20 15 12 15 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 ff c0 00 11 08 04 9d 07 d0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF,,C#!!!$'$ & ! C "}!1AQa"q2
2024-12-24 15:05:09 UTC	2676	IN	Data Raw: 8a 5c 53 b1 46 3f 3a 96 04 64 53 18 54 c4 54 6c 29 08 81 85 44 56 ac 15 e2 a3 22 9a 02 02 29 8d 53 32 d4 64 73 54 26 57 65 a8 8a d5 a6 15 11 1c d3 b8 ac 45 b7 8a 50 b4 fc 71 4e 55 a9 65 58 68 5a 76 da 91 56 9d b7 9a cc a2 3d b4 6d a9 31 c5 04 52 1d 88 b6 d3 71 52 91 c5 34 d3 19 1e 28 c5 3e 90 0a 06 37 14 62 9f 8a 08 a4 21 86 a3 3d 6a 52 29 84 73 54 21 05 4a 8d cd 43 d2 a4 5e b5 69 8a c5 d8 8d 59 57 aa 31 b7 15 30 6a 39 82 c5 f4 90 fa d4 eb 27 bd 66 ab f1 53 2c 94 73 85 8d 0f 33 de 8f 32 a9 79 9e f4 e1 25 43 98 ec 5b f3 29 a6 4a ad e6 53 4c b5 9b a8 57 29 3b 49 55 65 96 9a f2 d5 76 6c d6 6e a1 6a 23 64 7c d5 76 eb 52 1a 6e 2b 3e 62 ac 34 75 a9 92 9a 16 a4 51 5a c5 92 d1 2a d4 ca 2a 25 e9 53 a8 ad 53 20 91 6a c2 54 2b 56 16 ae e0 4a b4 f1 4c 5a 78 a6 21 68 Data Ascii: \SF?:dSTTl)DV")S2dsT&WeEPqNUeXhZvV=m1RqR4(>7b!=jR)sT!JC^iYW10j9'fS,s32y%C[)JSLW);IUevlnj#d\|vRn+>b4uQZ**%SS jT+VJLZx!h
2024-12-24 15:05:09 UTC	1338	IN	Data Raw: 50 31 47 5a 78 a6 81 4f 15 48 42 d2 d2 81 4b 56 21 b8 a6 11 52 53 48 a6 04 24 54 6c 2a 62 39 a6 11 41 0c 80 8a 69 5a 98 ad 34 ad 21 58 ae cb 51 32 d5 a2 b5 1b 2d 02 b1 45 d6 aa c8 bc 56 83 ad 55 95 69 13 63 2e 41 cd 57 61 57 64 5e 6a ab 8a 81 58 22 15 61 45 41 1d 59 5a 09 1c 05 28 a3 14 b4 00 a3 ad 59 4e 95 58 75 ab 09 d2 98 13 0e 95 1b d3 fb 54 72 53 01 a2 97 34 ca 5a 68 42 93 51 39 e2 9c 6a 26 34 ec 49 5a 43 f3 54 79 a2 43 cd 47 ba aa c4 8e 26 8c d3 33 45 31 8f cd 25 25 14 c0 5a 29 33 45 30 1c 29 69 b4 b4 80 75 2e 69 a2 96 90 12 0a 91 4d 44 29 c2 81 16 14 d4 aa d8 35 59 4d 48 0d 31 97 e2 96 af 45 27 4e 6b 1d 5a ad c7 25 52 65 23 66 39 3d ea c2 c9 59 51 c9 d2 ad 24 95 69 9a 26 69 2c 95 32 bd 67 2c 95 3a c9 55 72 d1 79 5e 9e 1a a9 ac 95 2a bd 3b 95 72 d0 Data Ascii: P1GZxOHBKV!RSH$Tlb9AiZ4!XQ2-EVUic.AWaWd^jX"aEAYZ(YNXuTrS4ZhBQ9j&4IZCTyCG&3E1%%Z)3E0)iu.iMD)5YMH1E'NkZ%Re#f9=YQ$i&i,2g,:Ury^;r
2024-12-24 15:05:09 UTC	5352	IN	Data Raw: 6a 84 8b 5c 97 11 4d ba d3 3b d4 cc 9c d2 08 f9 ac db 2d 0a 83 35 61 16 9b 1a 55 85 5f 6a c9 c8 d5 02 ad 3f 6d 2a af 4a 90 2d 43 65 8c db 4b b6 a4 0b 4b b6 95 c6 47 b6 8c 54 9b 68 c5 2b 8c 8e 92 a4 db 4d c5 02 18 69 29 c6 93 14 80 29 84 d3 8d 34 d4 8c 69 a6 d3 a9 28 01 b4 52 d1 48 04 a4 a5 34 9d a9 0c 5a 51 49 4e 14 86 2d 2d 25 39 7a d2 29 0b 4b 45 15 05 09 8e 69 ac 29 f4 c6 a4 31 8c 2a 16 1c d4 a6 a3 6a 00 85 aa 33 52 b0 e2 a2 6a 64 91 d2 53 8d 36 81 0b 4a 29 29 6a 18 0e 14 f0 6a 3a 78 a8 68 64 82 9e 2a 31 4f 15 36 19 20 a7 53 05 38 52 68 a1 69 71 40 14 ea 2c 34 26 da 69 5a 7d 2d 05 58 8c 47 cd 3c 25 38 0a 7d 34 c2 c0 ab 53 2d 44 29 e0 d6 88 2c 48 29 73 4c 06 97 35 57 13 1f 4e 14 ca 70 ab b9 0c 90 53 81 a8 e9 73 5a 26 43 44 c0 d3 b3 51 06 a5 dd 5a 22 47 Data Ascii: j\M;-5aU_j?mJ-CeKKGTh+Mi))4i(RH4ZQIN--%9z)KEi)1j3RjdS6J))jj:xhd*1O6 S8Rhiq@,4&iZ}-XG<%8}4S-D),H)sL5WNpSsZ&CDQZ"G
2024-12-24 15:05:09 UTC	2676	IN	Data Raw: ab 0a 2b 44 22 55 15 2a 8a 62 d4 cb 5a 58 a4 3d 45 48 05 35 45 4a 05 50 c0 0a 7e 28 02 9d 8a 63 1b 8a 5e f4 ec 52 e2 9d 86 36 8c 53 b1 4b 8a 06 33 14 62 9f 8a 31 40 86 62 93 6d 49 8a 31 40 11 6d a0 ad 49 8a 08 a2 c0 57 2b 4c 65 ab 18 a6 b2 d4 d8 45 46 5a 66 da b2 cb 4c 2b 52 05 76 15 0c 8b c5 5a 61 50 b8 a9 63 29 b0 a8 58 55 96 5a 85 85 21 15 98 54 2f d2 ac 30 a8 1e ad 12 cc f9 c7 35 59 85 5b 98 73 55 4d 5a 24 8c 8a 6e 2a 43 4d c5 32 46 53 08 a9 48 a6 11 40 0c a5 51 4b 8a 70 15 0c 91 29 d8 a3 14 b5 00 25 2d 14 b4 80 29 68 a2 98 0b 45 14 b4 c0 4a 28 a2 ad 00 c3 4d a7 35 34 d5 a1 05 25 25 15 56 10 ec d1 9a 6d 19 a7 61 8e 26 93 34 da 33 4e c0 2e 69 33 4d 26 93 34 58 05 2d 4c 26 82 69 84 d3 b0 c0 9a 69 34 13 4c 34 00 a4 d3 09 a5 a6 d0 32 68 4f 35 a1 17 6a ce Data Ascii: +D"UbZX=EH5EJP~(c^R6SK3b1@bmI1@mIW+LeEFZfL+RvZaPc)XUZ!T/05Y[sUMZ$nCM2FSH@QKp)%-)hEJ(M54%%Vma&43N.i3M&4X-L&ii4L42hO5j
2024-12-24 15:05:09 UTC	5352	IN	Data Raw: 69 b8 a9 5a 9b 8a c2 e2 b0 ca 29 f8 a6 91 4a e3 01 52 ad 46 2a 45 a0 68 9d 6a 75 a8 13 ad 4e b4 1a a2 55 a9 56 a3 5a 95 6a 8d 10 ea 5a 41 4e 14 c6 18 a2 96 97 14 c6 36 8a 76 28 c7 14 c4 26 29 08 a7 d2 1a 62 21 61 51 b0 a9 d8 54 64 50 49 01 5a 4c 54 c5 69 9b 6a 91 04 78 a5 db 4f db 46 29 88 66 da 69 5a 97 14 84 52 02 12 29 08 a9 08 e6 93 14 84 33 14 f5 a4 a7 ad 5a 21 8f 51 52 28 e6 9a b5 2a d5 a1 12 a8 a9 54 53 54 71 52 0a d0 a1 45 48 29 82 9e 29 94 38 53 a9 05 38 53 18 a2 96 8a 5a 63 16 8a 29 68 18 94 52 d1 40 c4 a4 a5 a2 81 09 8a 29 69 28 01 a6 90 d3 a9 b4 80 61 a6 1a 90 d3 0d 21 11 37 4a ab 27 5a b4 fd 2a ac 9d 6b 36 22 b4 95 52 43 56 a4 aa 72 1a 91 32 07 aa ef 53 31 a8 1e a9 12 53 9e ab 1a b1 3f 5a aa 4d 68 88 11 8d 44 c6 9c 4d 30 d3 25 8d 34 94 a6 92 Data Ascii: iZ)JRFEhjuNUVZjZAN6v(&)b!aQTdPIZLTijxOF)fiZR)3Z!QR(TSTqREH))8S8SZc)hR@)i(a!7J'Z*k6"RCVr2S1S?ZMhDM0%4
2024-12-24 15:05:09 UTC	8028	IN	Data Raw: 9a 33 58 37 70 1d 9a 33 4c cd 00 d4 8c 92 8c d3 37 51 ba a8 77 1f 9a 72 9a 87 75 3d 5a ae 1b 85 c9 d4 d4 cb 55 d0 d4 ea 6b be 99 24 a3 ad 3a 98 a6 9d 5d 48 07 0a 75 30 53 eb 44 03 85 3c 53 05 3a b5 42 1e 29 d4 d1 4e ad 10 05 2d 25 2d 50 05 2d 14 55 00 51 45 14 00 51 45 14 80 43 49 4e a4 a4 03 69 a6 9e 69 86 a5 80 c2 2a 36 1c 54 a6 98 d5 9b 11 01 15 13 54 cd d6 a2 7a cd 92 55 92 aa 35 5a 96 aa b5 64 c9 2b b7 5a 8c d3 db a9 a8 cd 66 48 94 52 1a 4a 42 1d 4f 53 51 8a 7a d3 02 75 a9 96 a0 53 53 2d 06 88 9d 6a 45 a8 96 a5 5a a3 42 55 a9 05 46 b5 20 aa 28 90 53 a9 82 9f 4c 63 a9 69 05 2d 50 05 2d 25 2d 50 85 a2 8a 29 80 51 45 38 0e 2a 84 25 2e 29 71 4b 8a 62 1b 8a 31 4e c5 18 a7 60 19 8a 4c 53 e8 a5 60 23 c5 18 a7 e2 93 14 80 66 29 0d 3e 82 28 11 1d 14 e3 49 48 Data Ascii: 3X7p3L7Qwru=ZUk$:]Hu0SD<S:B)N-%-P-UQEQECINii6TTzU5Zd+ZfHRJBOSQzuSS-jEZBUF (SLci-P-%-P)QE8%.)qKb1N`LS`#f)>(IH
2024-12-24 15:05:09 UTC	4014	IN	Data Raw: 05 3a 90 53 85 48 21 c2 9c 29 a2 9f 52 30 a7 52 52 d0 30 a5 a4 a5 ab 42 0e d4 94 52 76 ab 43 12 92 96 92 b5 40 25 2d 14 b5 48 62 52 d1 45 58 09 46 39 a5 c5 14 00 94 76 a5 c7 14 52 18 9d e8 c5 2d 14 01 24 23 9a d2 88 71 59 f0 8e 6b 4a 1e 94 fa 02 2c 2d 3b b5 22 8e 29 7b 54 9b 22 29 3a 55 1b 8e 86 af 3f 4a a3 3f 43 52 c1 98 17 bd 4d 63 4d d6 b6 6f 7b d6 34 d5 89 9b 28 49 50 1e b5 62 4a ae d4 02 10 75 a7 8a 68 a7 ad 22 c7 af 5a 95 45 31 45 4a 3a 54 32 90 a2 9e 29 14 54 80 54 8c 00 a7 0a 05 3c 0a 91 88 b4 e0 39 a5 c7 14 b4 8a 13 14 98 a7 f6 a2 90 0d 02 96 97 14 b8 a4 50 98 e2 97 b5 2e da 78 5a 40 33 6d 1b 6a 4c 52 e2 a4 64 58 a7 63 8a 76 28 c5 02 19 46 29 d8 a2 90 0d c5 18 a7 ed a3 14 0c 8c 8a 69 15 29 5e 29 a4 73 54 22 22 b4 98 a9 31 46 28 02 32 38 a6 e2 a5 Data Ascii: :SH!)R0RR0BRvC@%-HbREXF9vR-$#qYkJ,-;"){T"):U?J?CRMcMo{4(IPbJuh"ZE1EJ:T2)TT<9P.xZ@3mjLRdXcv(F)i)^)sT""1F(28
2024-12-24 15:05:09 UTC	5352	IN	Data Raw: 93 75 19 a8 b7 52 ee a2 c3 25 dd 46 6a 3d d4 bb a8 01 f4 53 73 46 6a 80 75 14 66 92 98 01 a4 ef 4b 4d 35 42 16 9c 0d 47 9a 5c d3 02 51 4e a8 81 a7 83 54 80 90 53 c5 46 29 e2 a8 63 c5 3a 9a 29 d4 0c 5a 28 a4 a6 31 db a8 dd 4d a6 d3 02 61 25 3d 5f de ab 52 83 56 80 b8 1f 34 fd d5 4f 75 48 1a b4 42 b9 64 35 3f 35 59 5a 9e 1c d5 a4 17 26 cd 3b 75 42 1a 9f ba aa c3 1f 9a 6b 35 37 34 c6 eb 45 80 09 a6 35 29 35 1b 1c d6 72 40 34 d3 09 a5 34 d3 5c cc 62 e7 9a 75 30 53 b3 59 30 1f 4b 4d 14 bd aa 46 2d 2d 25 28 a4 50 e0 29 e2 90 53 a9 8c 5a 70 a6 d3 85 59 44 8b 52 0a 8d 69 e2 ad 0c 78 a7 8a 60 a7 8a d1 0c 7a d3 a9 a2 96 ad 0c 75 25 14 86 80 1a 6a 36 a9 0f 4a 89 aa 58 c8 da a0 73 52 b5 40 f5 0c 08 1e aa 48 6a d4 95 4e 53 52 43 2a c8 dd 6a b1 92 a5 94 d5 27 6a 0c 99 Data Ascii: uR%Fj=SsFjufKM5BG\QNTSF)c:)Z(1Ma%=_RV4OuHBd5?5YZ&;uBk574E5)5r@44\bu0SY0KMF--%(P)SZpYDRix`zu%j6JXsR@HjNSRC*j'j
2024-12-24 15:05:09 UTC	4014	IN	Data Raw: 8a 00 28 a2 8a 00 69 e9 4c 35 25 30 d6 52 57 29 11 9a 8c d4 ad 4c 35 cb 28 9a a6 44 c2 9a 69 e6 a3 6a e4 9c 4d 11 03 d4 75 23 d4 75 87 29 42 8a 75 36 9d 54 90 85 14 ea 60 a7 55 00 1a 6d 29 a6 d3 b0 84 26 9a d4 b4 d3 54 26 44 f5 5d ea c3 54 0e 38 a9 33 65 59 3a 55 19 85 68 38 aa 73 2d 34 73 cc cd 92 a3 15 62 45 a8 71 49 9c 6c 51 45 14 76 a4 02 8a 70 a6 66 9c 0d 31 a1 d4 d3 4b 49 4c a1 86 9a 69 c6 9a 68 18 d3 4c cd 38 d3 2a 80 5a 51 4d a5 a0 07 d2 66 8a 4e f5 20 14 0a 28 a4 03 97 ad 4a a6 a2 1d 6a 45 ab 24 9d 4f 15 32 d4 0b da a6 15 45 12 8a 78 a8 c5 3c 53 02 41 4a 29 a2 96 a8 64 82 9c 2a 3c d3 c1 ab 43 1f 4f 5a 8a 9e a6 b4 42 25 06 a4 15 08 35 20 3c d6 a8 44 a2 a4 5a 8d 6a 55 15 63 1e 05 48 29 05 3c 0e 29 94 34 d4 6d 52 35 46 d4 03 21 7a 81 aa 67 35 03 1a Data Ascii: (iL5%0RW)L5(DijMu#u)Bu6T`Um)&T&D]T83eY:Uh8s-4sbEqIlQEvpf1KILihL8ZQMfN (JjE$O2Ex<SAJ)d<COZB%5 <DZjUcH)<)4mR5F!zg5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49801	23.20.35.169	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:08 UTC	381	OUT	GET /v1/apps/6567c1c6a2ec72132b15f3af/websdk HTTP/1.1 Host: api.apptentive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:09 UTC	884	IN	HTTP/1.1 200 OK Server: envoy Date: Tue, 24 Dec 2024 15:05:09 GMT Content-Type: application/javascript X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Content-Disposition: attachment; filename="websdk.6567c1c6a2ec72132b15f3af.en-US.js" Content-Transfer-Encoding: binary Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self'; font-src 'self'; img-src 'self'; frame-src 'self'; Cache-Control: max-age=0, public ETag: W/"5ca4b8f31488a9932a185d0376f354de" X-Request-Id: cc9a5e1d-5d6d-4803-8bac-38fd39411729 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin,Accept-Encoding X-Frame-Options: SAMEORIGIN x-envoy-upstream-service-time: 11 Connection: close Transfer-Encoding: chunked
2024-12-24 15:05:09 UTC	3114	IN	Data Raw: 63 31 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 41 70 70 74 65 6e 74 69 76 65 53 44 4b 28 29 20 7b 0a 20 20 76 61 72 20 6d 61 6e 69 66 65 73 74 20 3d 20 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 5f 69 64 22 3a 22 36 35 36 37 63 31 63 36 61 32 65 63 37 32 31 33 32 62 31 35 66 33 61 66 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 36 35 36 37 63 31 63 36 61 32 65 63 37 32 31 33 32 62 31 35 66 33 62 36 22 2c 22 64 69 73 70 6c 61 79 5f 74 79 70 65 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 4d 65 73 73 61 67 65 43 65 6e 74 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 32 2c 22 61 70 69 5f 76 65 72 73 69 6f 6e 22 3a 38 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 74 69 74 6c 65 22 3a 22 4d 65 73 73 61 67 65 20 43 65 Data Ascii: c1e(function initApptentiveSDK() { var manifest = {"application_id":"6567c1c6a2ec72132b15f3af","interactions":[{"id":"6567c1c6a2ec72132b15f3b6","display_type":null,"type":"MessageCenter","version":2,"api_version":8,"configuration":{"title":"Message Ce

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49803	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:08 UTC	569	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/App_Upgrade_home8.jpg?ext=.jpg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=n3Y/lBv+tDRqwL2vW45bjESJvHPqcmpFqe9VOMJFqxk1e77DgSKszLNb25fAodEWGYjCp+8Vhu2QU6j8riEtC25ISUUxz9pAuqqN3lfpBWAz/raWefmQOsP5xAX6
2024-12-24 15:05:09 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:09 GMT Content-Type: image/jpeg Content-Length: 21744 Connection: close Set-Cookie: AWSALB=c38whLe5PvhtK2l/FqeeiwHmKBT4BBpRjkBcPCLGRK77K3hafR91V1wbcjHbFakLBpqtjKlrEx6uCly0moAfn5T0iZYElTEaZPyVioMLsogDpHFg4pE47hIWNv3c; Expires=Tue, 31 Dec 2024 15:05:09 GMT; Path=/ Set-Cookie: AWSALBCORS=c38whLe5PvhtK2l/FqeeiwHmKBT4BBpRjkBcPCLGRK77K3hafR91V1wbcjHbFakLBpqtjKlrEx6uCly0moAfn5T0iZYElTEaZPyVioMLsogDpHFg4pE47hIWNv3c; Expires=Tue, 31 Dec 2024 15:05:09 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Wed, 14 Jun 2023 13:52:09 GMT Accept-Ranges: bytes ETag: "27b2fb69c79ed91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:09 UTC	504	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 04 b9 04 b9 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 01 02 05 14 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 Data Ascii: JFIF"ExifMM*CC"
2024-12-24 15:05:09 UTC	2676	IN	Data Raw: 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fc c1 49 57 fe 03 5a 5a 7c 8b 54 2e 23 58 aa c5 b9 e5 63 fe 2a fd 00 f9 33 aa f0 fe a0 d6 f3 2c 9b ab a5 d6 2c fe d1 b6 e2 36 dc af 5c 36 9f 27 fe 3b 5d af 85 b5 0f b4 5b 7d 9e 4a da 06 33 33 6e 3f d1 df 72 fd da de f0 5f 89 2e bc 3f a9 45 75 6b 71 35 bc b0 be f8 a5 57 fb 8f 55 f5 4d 3f cb 87 75 41 Data Ascii: B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?IWZZ\|T.#Xc3,,6\6';][}J33n?r_.?Eukq5WUM?uA
2024-12-24 15:05:09 UTC	1338	IN	Data Raw: 43 e8 16 c3 a2 fb 95 62 2f b9 51 47 1d 4f 59 80 ff 00 e0 fc 29 f1 d3 6a 48 ff 00 d6 50 04 95 25 bf 4a 87 fd 65 4d 1f ee d2 82 f5 1d 1d 3a 8a 72 74 a0 62 c7 1f cf 4f f2 e9 b5 62 80 0a 29 b1 7d fa b1 1c 7f 25 06 83 3c af ad 49 f3 7b 51 f3 7b 52 d0 02 c5 fd 29 f4 51 40 11 d4 94 ef 2e 9b 41 98 54 94 53 bf e5 a5 00 3a a4 b7 e9 51 d4 d6 9f 7e 83 43 52 13 f2 53 a9 b1 7d ca 75 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 62 8a 28 00 c6 3b 53 71 fe cd 3a 8a 00 40 3d a9 68 a2 80 0a 28 a2 80 0a 6b 47 93 ba 9d 46 33 40 11 19 0a 9e 29 7c c6 a9 36 8c f4 a2 80 1b 1b 16 eb 4e a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 Data Ascii: Cb/QGOY)jHP%JeM:rtbOb)}%<I{Q{R)Q@.ATS:Q~CRS}uQEQEQEQEQEQEQEb(;Sq:@=h(kGF3@)\|6N((((((((((((
2024-12-24 15:05:09 UTC	4014	IN	Data Raw: a8 75 4b 6f fd 69 2a 68 e8 2f 51 d4 ed 94 da 9a 3a 06 36 a6 ff 00 96 74 d8 bb 53 bc ba 0d 07 5b fd ca 9f e6 f6 a4 f2 e8 8e 3f 9e 80 1f 17 f4 a4 a9 29 d1 c7 40 07 97 4d a2 a4 f2 bd a8 01 bf f2 d2 9d e5 7b 53 bc ba 75 00 47 e5 7b 54 94 54 91 c7 40 0e 8e 9d 45 49 40 0d d9 53 41 51 d3 a3 a0 0b 91 7d ca 75 36 2f b9 4e a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 Data Ascii: uKoi*h/Q:6tS[?)@M{SuG{TT@EI@SAQ}u6/N(((((((((((((((((((((((((((((((((((((
2024-12-24 15:05:09 UTC	2676	IN	Data Raw: 14 a9 25 4c 80 92 9b 25 38 1c d3 64 a9 01 b4 51 45 68 01 45 14 52 7b 00 51 45 15 00 14 51 45 54 40 28 a2 8a a0 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 a7 94 02 8a 28 a5 cb 60 0a 28 a2 90 05 14 51 55 10 0a 28 a2 a8 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 55 1b 8d 2f 97 40 0d 1d 6a 4c 52 05 c0 a5 a0 02 8a 28 a0 07 30 f9 69 b4 66 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 3a d1 8a 28 a0 03 14 51 45 00 7f 21 3a cc 7f 68 46 ff 00 62 b9 79 3f e3 e7 6f dd 5a ea 24 b8 fb 45 b6 ef bd b3 ef d7 2f ac 48 d6 f3 2d 7d e5 43 e7 a1 b9 3e 8f 71 f6 3d 49 7e 6a f5 ad 5e 4f ed 0f 07 db c8 bf 36 c4 fb d5 e2 d6 f7 1e 63 af f0 d7 b2 78 1e e3 fb 63 c1 ed 1f de f9 2a b0 d3 15 6d Data Ascii: %L%8dQEhER{QEQET@((((((`(QU((((U/@jLR(0if(((((((((((:(QE!:hFby?oZ$E/H-}C>q=I~j^O6cxc*m
2024-12-24 15:05:09 UTC	1338	IN	Data Raw: 97 fe 9d ed f7 3f f7 de 2a f9 df f6 c0 f8 89 e2 6f 89 1e 2d ba d3 fc 41 e3 cb fb 3f 04 5b 26 cb 8d 23 4f ff 00 89 7b de 37 f1 fd a2 e1 5f 7f d9 ff 00 d8 4d 9f ed bd 73 3f 01 fc 3f a7 fc 51 d4 ad 74 bd 3e 38 74 df 0f d8 7e ea 28 ac d3 c9 b6 44 ff 00 63 6d 70 e2 33 da 51 8d a0 7a 78 3e 15 c5 54 97 2c ff 00 c4 4d a8 45 e2 0f 8a 9e 35 5f 13 78 a3 56 bf f1 87 8a 3f d5 45 a8 dc c5 b2 1d 35 1f fe 59 58 5a af c9 6a 9f ee 7c ef fc 6e f5 f4 af ec e7 ff 00 04 e7 be f1 43 c5 ac 78 db ce d2 ec 1f f7 a9 62 bf f1 f9 73 fe ff 00 fc f2 ff 00 d0 eb d9 be 0d 7c 38 f0 df c1 96 d3 be cf 05 9e a1 34 d1 2c b1 5c ed de e9 fd fd 9b ab d6 7c 51 e2 48 ed f4 45 92 19 13 fd 27 ee 37 fb 15 d1 83 7e d3 df aa 70 e3 a8 3a 73 e4 87 c2 73 df 67 d2 fc 0f a2 47 a1 f8 76 ce db 4d d2 ed 7f e5 Data Ascii: ?*o-A?[&#O{7_Ms??Qt>8t~(Dcmp3Qzx>T,ME5_xV?E5YXZj\|nCxbs\|84,\\|QHE'7~p:ssgGvM
2024-12-24 15:05:09 UTC	1338	IN	Data Raw: c7 a4 e9 f6 3a 5c 53 7d f5 b3 b7 4b 74 7f fb e6 a5 ab 16 f1 ff 00 15 71 e0 72 f8 61 e3 cb 13 d3 cd b3 ca d9 8d 5f 69 51 72 92 c5 fd 29 77 d4 7e 64 71 fe f2 46 da 89 f3 bb 7f 71 2b e1 71 fb 7a 78 c3 e2 c6 ab ac ea 1a 3e a1 73 a1 db c3 2b ff 00 65 69 91 22 22 25 ba 7d c7 97 72 7e f6 67 4f 9f fb 9f 3d 5e 33 1d 0c 37 2f 37 da 23 2b c9 6b e6 1c de cb ec 9e f1 fb 68 7e d5 17 9f 03 ee 74 1f 0d e8 3e 4a f8 8f c4 89 2d df db 27 4d e9 a6 da a3 ec df b3 f8 9d df e4 4f f7 2b ca f4 ff 00 da 63 c5 da 1f 86 2e 2f 3f b7 2f ee 25 4f f5 bf 69 6f 3b e4 fe fe ca f9 67 f6 9c fd b0 3f e1 a5 3c 7f a0 cd a8 5b d9 e8 de 23 d3 74 f7 d2 b7 2c bf 24 b7 11 4a f2 ee db fc 28 e8 d5 db 7c 13 f1 84 df 13 74 7f b1 cd 1b ad e7 fa a9 62 6f e0 af 99 a9 8a ab 5a bc a7 19 7f 84 fd 27 07 90 d0 Data Ascii: :\S}Ktqra_iQr)w~dqFq+qzx>s+ei""%}r~gO=^37/7#+kh~t>J-'MO+c./?/%Oio;g?<[#t,$J(\|tboZ'
2024-12-24 15:05:09 UTC	5352	IN	Data Raw: f1 c7 fc 2c 8f 07 da ea 0c df bd 74 d8 eb fe dd 77 5e 1f f0 fc 76 6f e6 7d e9 5f f8 bf b9 5f 35 fe c1 fe 2c fe d0 b0 97 4f 9a 4f f8 0d 7d 87 e1 bf 0b fd a2 3f f6 9f 67 cb 5f 8e e7 d8 77 84 c5 4a 9c 7e 13 f6 1c 97 17 f5 8c 2c 6a 48 7f 86 f4 f6 93 6a fd dd ff 00 de af 44 f0 5e 87 f6 97 5d db 1b f8 1d 6b 2f 47 f0 bf 99 78 bf 2f dc 7a f6 0f 03 f8 2f cb 45 dc bf 33 ff 00 76 be 7a 10 e7 3d 6a d5 a0 5d f0 5f c3 f5 92 e6 de 45 8f 6a ff 00 72 be 87 f8 47 e1 35 d2 dd 5b f8 7f ba d5 c7 fc 3e f0 ba dc 5c a4 7b 7e 6f ee ff 00 72 bd 92 e2 4d 37 c0 fe 0c d4 b5 ad 5a e3 ec 7a 6e 83 65 2d ed ec ed f2 24 31 44 9b dd ff 00 ef 8a f6 f0 58 5f e4 3c da d5 2d a9 e7 ff 00 b5 67 ed 61 a2 fc 17 d5 7c 33 e0 7b 59 92 e3 c5 be 36 b8 44 f2 22 7f 9e c2 cb f8 e5 7f ee ef fb 89 ff 00 03 Data Ascii: ,tw^vo}__5,OO}?g_wJ~,jHjD^]k/Gx/z/E3vz=j]_EjrG5[>\{~orM7Zzne-$1DX_<-ga\|3{Y6D"
2024-12-24 15:05:09 UTC	2508	IN	Data Raw: 00 a2 8a 28 00 a2 8a 2a a2 01 45 14 55 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 67 14 67 34 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 35 fa 53 a8 eb 40 11 d1 52 62 98 df 7a 80 12 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 07 2b 60 52 ee 14 c3 d2 9c 94 00 ea 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a6 b9 c0 a0 07 51 51 ee a2 80 3f 8f 6d 53 47 93 54 d6 22 86 38 dd 99 ff 00 bb 5e 8d a2 68 7a 6f c2 bd 3a de e2 fb 65 fe b3 32 7e ea cd 7f e5 8f fb 72 ff 00 f1 15 9d 1e a1 0f 87 ed 9b fb 3d 7f d2 bf e7 e6 54 de ff 00 f0 0a c6 8c fd d9 a6 91 da 56 fb ec cf f3 bd 7e 8d 08 72 9f 2d f1 1a 7e 20 d4 1b 5c d4 be d5 75 6b 6d 2c af fd e4 fb 8b 57 63 f1 06 a1 71 a5 4b 66 d7 1e 55 9f fc f2 89 36 7f e8 Data Ascii: (*EUQEQEQEQEQEgg4Q@Q@Q@Q@Q@5S@Rbz((((((+`R(((((QQ?mSGT"8^hzo:e2~r=TV~r-~ \ukm,WcqKfU6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49802	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:08 UTC	808	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/google-pay.png?ext=.png HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=n3Y/lBv+tDRqwL2vW45bjESJvHPqcmpFqe9VOMJFqxk1e77DgSKszLNb25fAodEWGYjCp+8Vhu2QU6j8riEtC25ISUUxz9pAuqqN3lfpBWAz/raWefmQOsP5xAX6
2024-12-24 15:05:09 UTC	825	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:09 GMT Content-Type: image/png Content-Length: 4378 Connection: close Set-Cookie: AWSALB=jvA7UsMkOf7N1DLER183Ed6qwwbjIm03Wdwlt5RaxbIDsJZFeashVeNl85yGqhG+vwhapkkxnM1V/GWwJ3XH4vVdPwJQDiSuPeHqEWf66gTfKNhZ0t+WqaNiCV58; Expires=Tue, 31 Dec 2024 15:05:09 GMT; Path=/ Set-Cookie: AWSALBCORS=jvA7UsMkOf7N1DLER183Ed6qwwbjIm03Wdwlt5RaxbIDsJZFeashVeNl85yGqhG+vwhapkkxnM1V/GWwJ3XH4vVdPwJQDiSuPeHqEWf66gTfKNhZ0t+WqaNiCV58; Expires=Tue, 31 Dec 2024 15:05:09 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 01 Jun 2021 16:26:56 GMT Accept-Ranges: bytes ETag: "7f52ff0257d71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:09 UTC	1846	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ae 00 00 00 32 08 06 00 00 00 c5 a8 e0 d6 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 ae a0 03 00 04 00 00 00 01 00 00 00 32 00 00 00 00 6e c6 b7 55 00 00 10 90 49 44 41 54 78 01 ed 9d 09 ac 54 e5 15 c7 0f 8f 7d 79 ec 8a 85 22 a8 28 2a 56 b0 2c 6a 8b 24 15 03 02 49 01 cb 22 4b 4c 24 36 da 14 a2 a9 16 10 a8 02 61 b5 b1 d5 a0 15 90 34 b4 a0 44 a1 8a 11 10 1b 10 10 a5 20 05 54 b6 07 95 5d 41 94 7d df a7 e7 f7 bd 77 86 3b 77 ee cc 9b 37 33 f0 1e 70 4f 72 e7 bb f7 fb ce fd b6 fb bf e7 3b df f9 ce 77 a7 54 44 49 0a e8 c8 91 23 92 97 97 27 3b 76 ec 90 c3 87 0f 5b 74 18 86 Data Ascii: PNGIHDR2sRGB8eXIfMMi2nUIDATxT}y"(V,j$I"KL$6a4D T]A}w;w73pOr;wTDI#';v[t
2024-12-24 15:05:09 UTC	2532	IN	Data Raw: ff e5 b8 47 cd 6f ce ff 02 07 1d da 93 49 99 f8 4f d0 1f 38 17 05 1d f8 51 f8 fb 83 38 1c 88 c0 4b 26 65 67 e3 de f4 7d 15 b4 74 47 41 d2 d6 24 2d 0c 5e 73 d9 69 95 bc eb 87 78 d4 86 32 12 95 b4 f9 b9 c5 fd b6 f8 85 c8 fc 09 22 73 26 c6 25 a5 1c 81 89 09 1b 2a cb c0 d8 6d 0f 1e 3c 28 ec 68 e6 38 7d fa b4 b3 bf e2 a6 88 2d 57 9d 70 52 ce b7 38 18 59 b0 c0 4c 57 a5 8a 0e 4d 19 10 f6 61 96 a2 c9 2f e8 e8 d2 a5 8b eb 0f af 5d 9b 72 6b d4 a8 e1 ca cf a0 e8 ac dd 9a 9e 8e 7b 38 c1 3a 7a 10 68 bd 71 a2 ba ee e6 97 1c 78 3b ef ff 4f be 7a 90 ac 29 05 ab a1 9d 3a a8 d5 6c 46 32 c6 e0 34 c0 f8 f0 c3 0f bb 44 80 ca f2 2e 0f e0 ce 3b ef 74 07 86 ff a7 9e 7a ca d9 71 f1 0d f8 ec 33 35 cf 5d 63 34 66 cc 18 79 e4 91 47 a2 c7 73 cf 3d 27 df 7f ff bd eb 85 51 a3 46 89 39 Data Ascii: GoIO8Q8K&eg}tGA$-^six2"s&%*m<(h8}-WpR8YLWMa/]rk{8:zhqx;Oz):lF24D.;tzq35]c4fyGs='QF9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49804	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:09 UTC	807	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/call_help.svg?ext=.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=n3Y/lBv+tDRqwL2vW45bjESJvHPqcmpFqe9VOMJFqxk1e77DgSKszLNb25fAodEWGYjCp+8Vhu2QU6j8riEtC25ISUUxz9pAuqqN3lfpBWAz/raWefmQOsP5xAX6
2024-12-24 15:05:09 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:09 GMT Content-Type: image/svg+xml Content-Length: 1712 Connection: close Set-Cookie: AWSALB=mQu/6HkDebaEHjrrWxvDRw+2zBVksh9fssWV0WILhP9cmC5rkKLJkx+/5OnHmiQBzsIu+ytnzcQAmJggl5X+KgC4D17HQ2SNoj9iwkmIn1EXQU5uzjo85zXm3Sx5; Expires=Tue, 31 Dec 2024 15:05:09 GMT; Path=/ Set-Cookie: AWSALBCORS=mQu/6HkDebaEHjrrWxvDRw+2zBVksh9fssWV0WILhP9cmC5rkKLJkx+/5OnHmiQBzsIu+ytnzcQAmJggl5X+KgC4D17HQ2SNoj9iwkmIn1EXQU5uzjo85zXm3Sx5; Expires=Tue, 31 Dec 2024 15:05:09 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 01 Jun 2021 16:26:55 GMT Accept-Ranges: bytes ETag: "a4ff4ef257d71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:09 UTC	504	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 34 2e 31 35 20 34 30 2e 30 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 37 64 63 35 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 33 30 2c 33 31 2e 37 35 63 2d 2e 30 36 2c 30 2d 2e 32 2d 2e 30 39 2d 37 2e 32 2d 31 2e 37 34 2d 2e 30 37 2c 30 2d 31 2e 35 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 34.15 40.06"><defs><style>.cls-1{fill:#007dc5;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path class="cls-1" d="M30,31.75c-.06,0-.2-.09-7.2-1.74-.07,0-1.52
2024-12-24 15:05:09 UTC	1208	IN	Data Raw: 30 2c 30 2c 30 2c 33 2e 38 35 2c 35 63 30 2c 31 2e 32 2c 30 2c 32 2e 34 39 2c 30 2c 33 6c 30 2c 2e 33 33 63 30 2c 31 2e 32 38 2d 31 2e 34 36 2c 31 2e 36 34 2d 31 2e 35 32 2c 31 2e 36 35 2d 37 2c 31 2e 36 35 2d 37 2e 31 35 2c 31 2e 37 32 2d 37 2e 31 35 2c 31 2e 37 32 43 2d 2e 33 34 2c 33 33 2e 30 39 2c 30 2c 33 36 2e 34 34 2c 30 2c 33 36 2e 34 34 76 33 2e 36 32 48 32 34 2e 34 35 61 2e 35 2e 35 2c 30 2c 30 2c 30 2c 2e 35 2d 2e 35 2e 35 31 2e 35 31 2c 30 2c 30 2c 30 2d 2e 35 2d 2e 35 48 31 56 33 36 2e 33 38 73 2d 2e 32 37 2d 32 2e 35 37 2c 33 2e 35 2d 33 2e 37 63 2e 32 34 2d 2e 30 38 2c 33 2e 36 37 2d 2e 38 39 2c 36 2e 33 31 2d 31 2e 35 32 6c 36 2e 38 31 2c 34 2e 31 34 2c 36 2e 35 34 2d 33 2e 39 34 63 32 2e 34 39 2e 35 39 2c 35 2e 32 38 2c 31 2e 32 35 2c 35 Data Ascii: 0,0,0,3.85,5c0,1.2,0,2.49,0,3l0,.33c0,1.28-1.46,1.64-1.52,1.65-7,1.65-7.15,1.72-7.15,1.72C-.34,33.09,0,36.44,0,36.44v3.62H24.45a.5.5,0,0,0,.5-.5.51.51,0,0,0-.5-.5H1V36.38s-.27-2.57,3.5-3.7c.24-.08,3.67-.89,6.31-1.52l6.81,4.14,6.54-3.94c2.49.59,5.28,1.25,5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49805	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:09 UTC	567	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/MQ-Background45.png?ext=.png HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=n3Y/lBv+tDRqwL2vW45bjESJvHPqcmpFqe9VOMJFqxk1e77DgSKszLNb25fAodEWGYjCp+8Vhu2QU6j8riEtC25ISUUxz9pAuqqN3lfpBWAz/raWefmQOsP5xAX6
2024-12-24 15:05:09 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:09 GMT Content-Type: image/png Content-Length: 661830 Connection: close Set-Cookie: AWSALB=vZQk/1i9XWT/Yvxuftg5YkIrn+hpZcrKzfcSsG8as6vZOWW/ta6YeywlLTe7wPCB7K59+UaqFoZwIuEhW1B5IlJU6XlVm4iPdAvUGQdg//cqXvcicpVLJ6YXpCSb; Expires=Tue, 31 Dec 2024 15:05:09 GMT; Path=/ Set-Cookie: AWSALBCORS=vZQk/1i9XWT/Yvxuftg5YkIrn+hpZcrKzfcSsG8as6vZOWW/ta6YeywlLTe7wPCB7K59+UaqFoZwIuEhW1B5IlJU6XlVm4iPdAvUGQdg//cqXvcicpVLJ6YXpCSb; Expires=Tue, 31 Dec 2024 15:05:09 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Wed, 14 Jun 2023 13:49:42 GMT Accept-Ranges: bytes ETag: "47c35d12c79ed91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:09 UTC	504	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0b b8 00 00 02 f1 08 06 00 00 00 cc da eb 0e 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 2e 22 00 00 2e 22 01 aa e2 dd 92 00 00 07 80 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 32 2d 63 30 30 30 20 37 39 2e 35 36 36 65 62 63 35 2c 20 32 30 32 32 2f 30 35 Data Ascii: PNGIHDRsRGBgAMAapHYs."."iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5, 2022/05
2024-12-24 15:05:09 UTC	1338	IN	Data Raw: 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 32 2d 30 35 2d 31 30 54 31 33 3a 32 39 3a 33 34 2d 30 35 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 33 2d 30 35 2d 33 30 54 31 31 3a 32 36 3a 31 34 2d 30 35 3a 30 30 22 20 78 6d 70 Data Ascii: p/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.4 (Windows)" xmp:CreateDate="2022-05-10T13:29:34-05:00" xmp:ModifyDate="2023-05-30T11:26:14-05:00" xmp
2024-12-24 15:05:09 UTC	1338	IN	Data Raw: 35 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e c3 e4 57 b3 00 00 f8 19 49 44 41 54 78 5e ec fd 89 76 2b 4b 72 a6 89 12 00 b9 87 b3 cf a0 93 92 32 25 dd be ef a8 bc 4f a0 b7 ab a1 6b a9 bb 6a 95 ee ba dd ab ab 55 9d 52 ab aa ba 06 4d 27 33 cf de 9b 04 ae fd e6 6e 0e 0f 8f 08 10 88 00 11 04 f1 7d a0 d3 c3 Data Ascii: 5:00" stEvt:softwareAgent="Adobe Photoshop 23.4 (Windows)" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>WIDATx^v+Kr2%OkjURM'3n}
2024-12-24 15:05:09 UTC	1338	IN	Data Raw: 86 27 3e 98 f3 58 a5 e9 4d d1 76 eb 8d 72 19 56 26 0e d6 55 dc 56 ae aa af 38 e5 b3 f8 c8 eb 4e e5 7b 4e 52 d2 1b af fb fb fb bb cd 66 53 d2 14 f7 f4 f4 a4 d4 f4 92 2e e6 b6 a6 cf 6e bb f3 bc 12 1c e9 c1 da 64 ca ad 36 6a af c9 57 33 aa 97 7e dc c1 b2 68 f2 34 e3 60 23 df 79 f5 c8 63 a7 39 20 17 79 b6 3b 0b 9b 13 f5 fc 8a 39 b3 59 6f ee d6 9b 75 ce b3 ec e0 87 06 ad 6b a9 db 71 c8 d9 2f 77 5a 6f 65 1d ca 57 f8 8c a8 1f b5 67 b4 f5 6b 8d ed 56 56 97 86 42 4e 2a ec 2c ad f7 d2 de b1 df 13 7c e5 4b d7 46 9e ef 31 1a b7 9c 56 dc d0 9e 72 82 2b 64 79 2b ed 35 26 73 6b 7b cc d3 e3 a3 cd 8f cd dd c6 f6 a0 98 5b 9e d5 9c e2 a5 97 da bf 14 be e7 a9 4f 1a d7 23 fa aa 76 73 e7 82 8a d6 c5 75 6d 62 7d 00 0f a1 3c e6 1e 1e 1e ee de bd 7b 77 f7 68 7d 2c 57 e6 90 ed cf Data Ascii: '>XMvrV&UV8N{NRfS.nd6jW3~h4`#yc9 y;9Youkq/wZoeWgkVVBN*,\|KF1Vr+dy+5&sk{[O#vsumb}<{wh},W
2024-12-24 15:05:09 UTC	2676	IN	Data Raw: c6 94 09 ad c3 9d c8 40 11 97 64 bf 6a d7 a9 42 0e 66 e1 eb ae c3 f2 9d 5a 0f 6f b8 b9 d4 72 ca 75 99 54 5d 62 8f d2 2b 47 ec 9d 7b f6 b2 72 b5 3b 1b 92 15 4e 41 ff 6d 0c c4 c9 af dd 8b a0 ff e4 20 97 f1 f6 e6 eb 20 c2 3d 5d da 36 3c 43 5d be 94 89 76 57 b2 6a 77 36 06 04 ab a5 ed f8 7a 5c f5 d2 4f 4e c8 5e ba 08 5f 94 bc 23 9c 75 fe 9c ca 81 aa 43 af ba 25 2d cf b5 cd a9 92 9f c9 79 32 45 5e 67 7e 54 3a 15 cf 5e cd 58 ce 22 55 d4 75 ee f5 eb 69 b3 ed dd fe e5 d4 89 ee 1d ff ca 05 fa e5 b3 2e ad 4e c7 50 8b 0b 37 1b 17 64 bf a6 b8 82 ae 4f 75 6f 80 a1 66 bd 75 77 e5 0c 4d e3 5b 71 b7 4e bb f7 5e c2 2d 8d 34 58 d2 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9c 83 d5 6f 7e f3 d7 fe 39 b4 3e 8c 97 21 76 fb a1 fc 4e af 9c 56 b3 dd 6d ef 56 95 a1 e5 64 54 5f Data Ascii: @djBfZoruT]b+G{r;NAm =]6<C]vWjw6z\ON^_#uC%-y2E^g~T:^X"Uui.NP7dOuofuwM[qN^-4Xo~9>!vNVmVdT_
2024-12-24 15:05:09 UTC	8783	IN	Data Raw: 00 00 00 00 00 00 00 00 80 d7 cd 3c 03 f7 dd 6e 9a 3b 80 52 eb 1c bb 67 f2 f7 38 31 fb 39 38 64 38 19 fa 1f 3a e9 b6 94 7f 56 77 65 b0 dc 26 b3 b8 94 a0 8a f6 4e c1 03 ee 24 5c de c9 a5 06 e9 e8 7d 92 4b 6a f4 e2 b3 dc 9c 98 9c 82 03 ee da 88 d6 e5 26 1d df 86 ba 2f c2 bd 10 92 5c 4b ef 8d 4f b8 9c 3e 4a 95 27 ca 4c 41 52 9e 7b 05 7b dd 72 9c bc d6 9d 03 b5 a5 76 2f 48 2b bd f4 65 ae 77 a8 f6 88 93 5f bb 25 49 2a e7 f1 c9 2e d0 78 e9 95 03 5d 37 86 a5 75 ca 0d 91 93 da fa 4e 61 6a b9 b3 22 15 5a 35 1a bd 3a fd 70 4e 9d 25 2b cb 2b 52 75 11 ce bd 92 52 47 db 85 5d b5 4e d1 ee d2 ab 8a e8 3a f7 ec 65 65 6a 17 54 d9 ec c2 ae 3a 4e 71 03 ce bd fd 2b 47 1c ef 4e 64 4c f7 d7 4e ea 9d 69 af 2c e0 3a 9d 7b f6 6a c6 ed 52 6e 49 86 f4 39 de 65 21 33 18 96 fb bc 83 Data Ascii: <n;Rg8198d8:Vwe&N$\}Kj&/\KO>J'LAR{{rv/H+ew_%I*.x]7uNaj"Z5:pN%++RuRG]N:eejT:Nq+GNdLNi,:{jRnI9e!3
2024-12-24 15:05:09 UTC	16384	IN	Data Raw: 00 00 00 6f e8 04 f7 11 e3 c3 88 c5 1c 0d e0 f2 1c 63 8c ec 6b f3 90 f1 70 f6 65 54 da 1a 1d d7 ec cd 92 d3 6b 2e aa ba 76 32 82 76 37 44 a4 b5 e9 6a 97 b9 21 63 ed 82 d2 cd eb a4 8e f5 c7 31 e4 3a 6b d7 93 5f 11 69 72 aa 55 4e c4 f5 5c 17 d4 7d d0 31 1c 56 5c d5 37 91 d2 f6 59 89 cf ce 69 da e9 ae a1 1f b3 a7 a7 c7 01 94 77 74 0c c5 a1 8a e0 aa d0 38 0f 19 b8 6b 5f c1 c0 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 e5 79 3b 06 ee 03 e8 44 de b5 39 37 94 94 71 a2 c5 1d 36 61 04 80 97 a4 ac 41 19 0a cb 88 b4 5a a3 ba 0e 03 65 cf a7 4b db a1 76 76 b1 5a 5b be 0b 6e 57 b9 ea a2 af ae c7 4c 5a 7b 69 6a 47 ed d6 6a c4 48 e9 26 dd 42 be 57 79 9c a5 f9 de 65 4e a9 ee 2c cd 8d 6e e5 b6 5b 15 d9 23 59 43 ee 40 fd 6b 4b ab 8d 78 d5 16 2b 71 36 27 79 6d Data Ascii: ockpeTk.v2v7Dj!c1:k_irUN\}1V\7Yiwt8k_y;D97q6aAZeKvvZ[nWLZ{ijGjH&BWyeN,n[#YC@kKx+q6'ym
2024-12-24 15:05:09 UTC	9366	IN	Data Raw: ac f5 26 cf 6b 7b a9 1a 95 97 0e 4f 79 1f 7f d2 5e aa ea 35 ce f6 ea e9 7e 22 ea 87 e9 fb d4 f5 92 da 7d 9d 68 2e 5f ab ee b7 cc dc b5 7a 8b 68 8f b9 e6 3e bb e6 7d e6 9a d1 bd 71 fa cc 99 7e 4f 84 e5 f0 11 af 9f cd 4e 84 b5 0a 00 00 00 70 1b cc 7b af 00 00 00 00 00 00 00 00 00 a7 c2 e7 70 00 97 07 03 77 73 a5 ee 4e bb 53 7c db 1f 91 0f 03 f7 d3 d0 1f dc 7b ed 31 7a 32 07 95 e9 8f 63 e1 c4 b6 07 6d 1f 04 5e be 89 73 06 04 0f 8d 59 db 3f d1 6e cd 85 9b 33 70 b7 a2 6e c0 5e 97 cf 97 d1 57 47 19 b8 1b de 5f 9a 03 79 62 96 f0 01 da fe 39 99 b1 a6 e7 fe 0f 06 b3 f5 da 93 f3 8c 95 6d e3 15 36 26 19 b8 2b d9 64 ed a5 19 59 7e db 27 5e 7f 4e 2b 94 3e 4e 06 ee ca 2f a7 79 2b ff c9 e6 a7 50 9a a7 67 9d 92 81 fb f6 ee 97 bf fc 53 d7 33 8d 97 ed 89 95 81 bb 48 06 ee Data Ascii: &k{Oy^5~"}h._zh>}q~ONp{pwsNS\|{1z2cm^sY?n3pn^WG_yb9m6&+dY~'^N+>N/y+PgS3H
2024-12-24 15:05:09 UTC	7018	IN	Data Raw: 15 f9 fa 42 93 ea 2f 4e fa 24 35 bc 2d ba 4c 2e ad c7 e2 22 be c4 a5 15 27 a7 0a 7d 8b 52 83 a5 a3 d5 23 57 da 92 9d b4 12 e9 b7 91 05 b8 a6 be fe 5d 88 c7 a5 fe b1 90 f2 88 c8 57 bd 3c bf 3b a5 5b 38 0f 43 72 d6 96 da 29 52 46 e6 79 8c 92 60 8d 49 f2 fd 0b 42 f9 cb 01 25 2e 7c d3 45 ad 4d 2e bf 2c cd fb 79 d4 29 4f 5c 5b 7f ac 74 72 fe 11 4e f9 7c 1c cf e4 7c de c8 d7 5c 1a 72 4a ab dc 40 fd 69 22 57 ce 72 d6 ce f7 da 12 4c fd b7 77 16 a9 2f 50 8d 39 ab b3 eb d2 1c 1a 77 62 5f f7 f3 0c c9 38 ce e9 cb 20 bb 55 76 4d 9a 5c ea db 7e fc 9d e5 97 f3 b1 2f f3 e6 18 57 b7 4c e1 f6 d5 e6 af 5c af df 35 26 a6 47 c7 59 ff c6 75 d1 37 fa b0 5b fb e1 7b 9d fd 2a 7e 76 15 29 d8 8d bb 1c 4b d5 0b 8b 62 c3 9e ee 5e 00 00 00 00 00 00 00 f0 da d0 5f 6b 5e ca f9 67 8a 97 Data Ascii: B/N$5-L."'}R#W]W<;[8Cr)RFy`IB%.\|EM.,y)O\[trN\|\|\rJ@i"WrLw/P9wb_8 UvM\~/WL\5&GYu7[{*~v)Kb^_k^g
2024-12-24 15:05:10 UTC	16384	IN	Data Raw: 53 70 19 a5 e1 97 46 7b ff 0c dd ed 35 7b ec 87 68 fa 44 bd bc 54 0f 8d 91 c6 2d 07 2e 4d 9a 76 93 79 91 31 3b 96 e9 d3 2d 31 b3 ed b3 58 7a 12 b6 fb d9 05 79 f6 de f4 0c e5 79 09 e0 19 e6 ce 35 00 00 78 9d 2c fa fc 09 70 29 5e ea 8d eb 1b 7a 3c ba c6 67 bd ab db bf 5e 4a 5d 0d dd dc f7 f3 00 57 48 67 df e2 ed 2a bc 61 e6 7c be 01 f0 da f1 c7 98 f8 cc 10 00 2e 06 06 ee 6a 9f 37 dc 02 55 1b c7 e2 7b 06 ee 6e e0 95 8d 36 0d 19 a7 e9 fa 4f 7e 85 81 fb 51 34 75 87 6e 35 07 a7 5b 53 a0 8c 5b cb 90 60 63 a8 df 8f 2d df cb 3b 90 c7 e7 e3 0c 03 77 95 78 ca 73 a8 18 45 a9 1e a5 58 1e 55 b7 ab f4 f7 93 cc 72 58 e9 ea 3b 37 90 d4 dc b1 d7 fd e6 c1 ea 4b f2 15 29 43 31 97 a9 a0 62 ec 42 7d e2 86 8d ab f5 dd 76 f7 73 4a 30 bc be 6c 04 b8 ca b2 dd c0 4c be ff 36 2a 5d Data Ascii: SpF{5{hDT-.Mvy1;-1Xzyy5x,p)^z<g^J]WHga\|.j7U{n6O~Q4un5[S[`c-;wxsEXUrX;7K)C1bB}vsJ0lL6]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49806	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:10 UTC	806	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/email-us.svg?ext=.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=spsRd1PM5roQ6lB5mIEeZbZ8FGd/KRbFVDrn7TgoQIKcQ1QHMNdaX+Iqh4UPgdTyQVcvKT2ymFht95F0Rk8GtBGG9f8n1ogugQI/JFcbBZFajPB28NiCnE8ZQKfd
2024-12-24 15:05:10 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:10 GMT Content-Type: image/svg+xml Content-Length: 1758 Connection: close Set-Cookie: AWSALB=RaVcUuyEZgL3LUZe1sO8ECO0vuq3GcfsRSFfcd3wvlUi6Jlg+s7tK+Citcr7nS3vZ3uvIlsJiECm+8UesNYDDlkjLaQ6clrUTugeKi4RFFGlmI458Rw568w/xSl2; Expires=Tue, 31 Dec 2024 15:05:10 GMT; Path=/ Set-Cookie: AWSALBCORS=RaVcUuyEZgL3LUZe1sO8ECO0vuq3GcfsRSFfcd3wvlUi6Jlg+s7tK+Citcr7nS3vZ3uvIlsJiECm+8UesNYDDlkjLaQ6clrUTugeKi4RFFGlmI458Rw568w/xSl2; Expires=Tue, 31 Dec 2024 15:05:10 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 01 Jun 2021 16:26:55 GMT Accept-Ranges: bytes ETag: "49789f0257d71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:10 UTC	1758	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 31 2e 30 33 32 22 20 68 65 69 67 68 74 3d 22 34 31 2e 31 30 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 31 2e 30 33 32 20 34 31 2e 31 30 32 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 66 66 66 3b 73 74 72 6f 6b 65 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 2e 34 39 39 20 30 2e 35 36 36 29 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 2e 30 30 31 20 30 2e 30 30 34 29 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="41.032" height="41.102" viewBox="0 0 41.032 41.102"><defs><style>.a{fill:#fff;stroke:#fff;}</style></defs><g transform="translate(0.499 0.566)"><g transform="translate(0.001 0.004)"><g transform="translate(0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49807	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:10 UTC	527	OUT	GET /Content/images/header-right-arrow.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=spsRd1PM5roQ6lB5mIEeZbZ8FGd/KRbFVDrn7TgoQIKcQ1QHMNdaX+Iqh4UPgdTyQVcvKT2ymFht95F0Rk8GtBGG9f8n1ogugQI/JFcbBZFajPB28NiCnE8ZQKfd
2024-12-24 15:05:10 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:10 GMT Content-Type: image/svg+xml Content-Length: 583 Connection: close Set-Cookie: AWSALB=rVefZYSxYwLraDB2NQwq6h05fSU4xNhsw658JM0ixcHJ/ASVzc8BoluzOj1g8vP/70mIgwSC1f7nfuUhGOnbnWj6iwoX1IzoNi+cF3N+wlBtvJ0ApPbWS0eXk4hT; Expires=Tue, 31 Dec 2024 15:05:10 GMT; Path=/ Set-Cookie: AWSALBCORS=rVefZYSxYwLraDB2NQwq6h05fSU4xNhsw658JM0ixcHJ/ASVzc8BoluzOj1g8vP/70mIgwSC1f7nfuUhGOnbnWj6iwoX1IzoNi+cF3N+wlBtvJ0ApPbWS0eXk4hT; Expires=Tue, 31 Dec 2024 15:05:10 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:10 UTC	583	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 38 22 20 68 65 69 67 68 74 3d 22 31 34 2e 32 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 20 31 34 2e 32 35 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 66 64 66 65 66 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 2d 35 33 2e 33 33 33 29 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 31 37 2e 39 37 31 2c 36 30 2e 36 61 2e 33 37 35 2e 33 37 35 2c 30 2c 30 2c 30 2d 2e 30 38 32 2d 2e 34 30 39 6c 2d 36 2e 37 35 2d 36 2e 37 35 61 2e 33 37 35 2e 33 37 35 2c 30 2c 30 2c 30 2d 2e 35 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="18" height="14.25" viewBox="0 0 18 14.25"><defs><style>.a{fill:#fdfefe;}</style></defs><g transform="translate(0 -53.333)"><path class="a" d="M17.971,60.6a.375.375,0,0,0-.082-.409l-6.75-6.75a.375.375,0,0,0-.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49808	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:10 UTC	807	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/Feedbacks.svg?ext=.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=pf9FWRx6CmT2Iu2ybzm1IPB4kopdgnx2oUDSO4yxxyULGzYijTHo3raNJeyg00bYakAwD7fUNqisV/Qa7aaWHSN7FyicnMY4nWQYpFVDQgaFyGEauwxgzaJK8xIi
2024-12-24 15:05:10 UTC	830	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:10 GMT Content-Type: image/svg+xml Content-Length: 2420 Connection: close Set-Cookie: AWSALB=ePgbN69bQl7dL/Zbngdx7/mXTinmJZkNZ4vnJfZGzyIeU4q8urIH6zt2QXJceZ4f7CSAgNht3OnJSu948yO52oguukXhT2f8ut/SXFarNGKDsAptOjm217AkJ8eu; Expires=Tue, 31 Dec 2024 15:05:10 GMT; Path=/ Set-Cookie: AWSALBCORS=ePgbN69bQl7dL/Zbngdx7/mXTinmJZkNZ4vnJfZGzyIeU4q8urIH6zt2QXJceZ4f7CSAgNht3OnJSu948yO52oguukXhT2f8ut/SXFarNGKDsAptOjm217AkJ8eu; Expires=Tue, 31 Dec 2024 15:05:10 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 01 Jun 2021 16:26:56 GMT Accept-Ranges: bytes ETag: "d0f21bf0257d71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:10 UTC	2420	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 39 2e 38 36 31 22 20 68 65 69 67 68 74 3d 22 34 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 39 2e 38 36 31 20 34 33 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 66 66 66 3b 73 74 72 6f 6b 65 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 2e 35 20 2d 33 35 2e 34 34 38 29 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 33 35 2e 39 34 38 29 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 34 36 2e 35 2c 34 35 2e 39 32 37 68 2d 36 2e 31 38 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="49.861" height="43" viewBox="0 0 49.861 43"><defs><style>.a{fill:#fff;stroke:#fff;}</style></defs><g transform="translate(0.5 -35.448)"><g transform="translate(0 35.948)"><path class="a" d="M46.5,45.927h-6.18

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49810	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:10 UTC	828	OUT	GET /getmedia/51975178-32b0-44bf-babc-5af804f69e62/WereOnity5.png?width=2000&height=1174&ext=.png HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=jOm0fkppPqQ48mDKu/N2P/ZHB8CYqnzTcLm4Qw299sbHF7ULoWT1IpDBf1TV5CjVBVNcm3qXLf7gorWtrNMdz94Iv9B8qSaKmwPPO5MLX2+3eKWw2HqGdTPtAD/g
2024-12-24 15:05:11 UTC	925	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:10 GMT Content-Type: image/png Content-Length: 915125 Connection: close Set-Cookie: AWSALB=QoW2qdocMCYpQJE0tmtMJJ2TLLjPNeH+Hz3W8NqDO4iDNYOpmwkudQxY+5g/hRp/Pg47cEHLnZag87zkv/VzrbGmXgI8TSol/vijOUA/I59cTmcRmDJIMHNFZU6l; Expires=Tue, 31 Dec 2024 15:05:10 GMT; Path=/ Set-Cookie: AWSALBCORS=QoW2qdocMCYpQJE0tmtMJJ2TLLjPNeH+Hz3W8NqDO4iDNYOpmwkudQxY+5g/hRp/Pg47cEHLnZag87zkv/VzrbGmXgI8TSol/vijOUA/I59cTmcRmDJIMHNFZU6l; Expires=Tue, 31 Dec 2024 15:05:10 GMT; Path=/; SameSite=None Cache-Control: public, must-revalidate Expires: Tue, 24 Dec 2024 15:05:10 GMT Last-Modified: Fri, 27 Sep 2024 14:02:33 GMT Accept-Ranges: bytes ETag: "638630425531563232" Content-Disposition: inline; filename=WereOnity5.png X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:11 UTC	1338	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 d0 00 00 04 96 08 02 00 00 01 8a b4 90 54 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0a 4b 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 54 69 a2 12 92 00 a1 84 18 12 40 ec 88 a8 c0 88 a2 22 82 15 19 14 71 c0 d1 11 90 b1 22 8a 85 41 b1 f7 01 79 08 28 e3 e0 28 36 54 de 0f de 1a 7d b3 e6 bd 37 6f f6 af bd f6 39 67 9d ef 9c 7d 3e 00 46 60 b0 44 9a 85 aa 01 64 4a 15 f2 88 00 1f 3c 36 2e 1e 27 77 03 0a 54 20 81 03 80 40 98 2d 0b 89 f4 8f 02 00 e0 fb f1 f0 ec 88 00 1f f8 02 04 e0 cd 6d 40 00 00 6e d8 04 86 e1 38 fc 7f 50 17 ca e4 0a 00 24 0c 00 a6 8b c4 d9 42 00 a4 10 00 32 72 15 32 05 00 Data Ascii: PNGIHDRTgAMAaKiCCPsRGB IEC61966-2.1HSgTS=BKKoR RBTi@"q"Ay((6T}7o9g}>F`DdJ<6.'wT @-m@n8P$B2r2
2024-12-24 15:05:11 UTC	1338	IN	Data Raw: f7 a9 c2 a9 c5 53 8f 4c bd af 8b ea 5a e9 46 e8 2e d1 dd a7 db a5 3b a6 a7 af 17 a0 27 d3 db ae 77 4e 6f 44 9f a3 ef a5 9f a6 bf 45 ff 94 fe b0 01 cb 60 96 81 c4 60 8b c1 69 83 67 b8 26 ee 8d 67 e0 95 78 07 3e 6a a8 6b 18 68 a8 34 dc 6b d8 6d 38 6e 64 6e 34 d7 a8 c0 a8 c9 e8 91 31 cd 98 6b 9c 6c bc c5 b8 dd 78 d4 c4 c0 24 c4 64 a9 49 83 c9 7d 53 aa 29 d7 34 d5 74 9b 69 a7 e9 5b 33 73 b3 18 b3 b5 66 2d 66 43 e6 5a e6 7c f3 7c f3 06 f3 87 16 4c 0b 4f 8b 45 16 35 16 37 2d 49 96 5c cb 74 cb 9d 96 d7 ac 50 2b 27 ab 54 ab 6a ab ab d6 a8 b5 b3 b5 c4 7a a7 75 cf 34 e2 34 d7 69 d2 69 35 d3 ee d8 30 6c bc 6d 72 6c 1a 6c fa 6c 39 b6 c1 b6 05 b6 2d b6 2f ec 4c ec e2 ed 36 d9 75 da 7d b6 77 b2 cf b0 af b5 7f e0 a0 e1 30 db a1 c0 a1 cd e1 37 47 2b 47 a1 63 b5 e3 cd e9 Data Ascii: SLZF.;'wNoDE``ig&gx>jkh4km8ndn41klx$dI}S)4ti[3sf-fCZ\|\|LOE57-I\tP+'Tjzu44ii50lmrlll9-/L6u}w07G+Gc
2024-12-24 15:05:11 UTC	2676	IN	Data Raw: a7 b6 cf 41 9f 1f 4e 64 4e 4c fc 13 03 98 f3 fc 8c c5 75 a5 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 09 70 48 59 73 00 00 19 a2 00 00 19 a2 01 c3 31 39 c8 00 00 07 43 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 32 2d 63 30 30 30 20 37 39 2e 35 36 36 65 62 63 35 2c 20 32 30 32 32 2f Data Ascii: ANdNLu cHRMz&u0`:pQ<pHYs19CiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5, 2022/
2024-12-24 15:05:11 UTC	2676	IN	Data Raw: 33 20 42 01 13 03 48 b2 59 bb ff b3 76 c1 5c 9c 82 5e 78 83 49 a9 97 4f f2 f0 4c 31 82 64 ce d8 e2 88 41 28 25 32 88 4b 91 14 61 be c2 64 8e 75 c6 82 10 a6 f2 4b 30 04 0a 13 44 64 8a 92 12 c9 31 94 49 9f 33 65 ac e5 23 99 fe b9 a5 91 49 3f 65 2e 4d d1 cb bb 76 bd 78 13 23 05 4a 69 19 08 d6 bc 2c b8 8a 09 29 29 e6 da 09 22 05 20 05 0b c6 a6 a1 75 b0 43 4d d3 a9 cc 2c 49 14 60 12 24 83 21 29 33 8b 02 ea 3d cd 49 a5 f3 57 cf 95 c0 97 c1 6b 6a 1d 89 a2 e3 c8 fa b6 c4 50 6d 74 ed 68 f3 2f 49 60 8c bd 83 7e 60 20 a4 34 99 5f b3 8e 98 9f d5 e3 18 a3 b6 17 14 90 4a 92 62 00 98 92 c8 a4 b9 3e 27 13 04 14 cd e9 21 f5 16 64 89 39 41 45 6c 59 44 a1 a9 43 62 ea 64 f9 40 0e 7a 9e 8b 49 6b 30 06 31 18 a4 06 10 40 04 29 45 80 00 03 a1 a4 40 2a 04 02 92 46 60 b1 ab e2 c7 Data Ascii: 3 BHYv\^xIOL1dA(%2KaduK0Dd1I3e#I?e.Mvx#Ji,))" uCM,I`$!)3=IWkjPmth/I`~` 4_Jb>'!d9AElYDCbd@zIk01@)E@*F`
2024-12-24 15:05:11 UTC	16384	IN	Data Raw: 9c 38 60 b1 b0 c2 74 98 19 05 d8 50 19 64 e6 f2 63 5e b5 38 fd ca 3c 66 fb e2 63 5e ea 9a e0 c8 0b 5b 93 7c 0c 65 00 b3 85 6a 2a cb 1a 50 59 cd cf d5 2c ed 70 f3 a4 8a a7 34 ef 5c 0a 3c 36 17 87 e5 6f 73 42 2f ef 30 d1 5b 7a b4 af f0 7d bb 7e 74 2f 7f c1 75 ea a3 59 4a 01 0e 65 47 cd 6a 8b c9 86 34 4b e1 86 80 c1 b8 1d 50 02 ae fa 99 85 fe 6b ef 42 9f dc d2 f4 54 c6 c2 7e 6f 11 01 93 22 83 5a ba 5c 31 c2 05 1b a4 7f 2f c5 06 9c ca 41 ef e0 b1 7b 47 a8 d8 d7 ec d3 15 78 5c 27 8f 97 64 10 62 29 db 07 6e 2c 18 51 5f f5 21 7a fd 2e 6a 98 75 95 d5 d0 4f b8 18 52 21 e5 1e cc 31 04 68 04 cf 93 c0 8e 57 65 e4 3c 0c 10 4f 0b 65 71 0b c0 65 05 26 df ce 50 b6 b5 ea a1 8a 4c 65 82 62 28 31 21 c7 c4 6d 6a 8d d8 51 37 b1 a4 92 77 c9 e4 ec ad 8b a5 94 d5 34 7c bb 2d d4 Data Ascii: 8`tPdc^8<fc^[\|ej*PY,p4\<6osB/0[z}~t/uYJeGj4KPkBT~o"Z\1/A{Gx\'db)n,Q_!z.juOR!1hWe<Oeqe&PLeb(1!mjQ7w4\|-
2024-12-24 15:05:11 UTC	3686	IN	Data Raw: e9 5c d8 7a c6 72 db 65 af be 8d 90 5f a5 d0 d0 f1 9d 46 13 b9 2e cb c3 d4 0e b5 9b db f0 3c 47 21 14 c4 af 4c 93 cd 46 98 fa 52 f3 dd cc 99 0e ad da da c1 02 8c d5 15 2e 7b d1 b2 38 a2 0e 67 30 26 72 54 d5 68 7c 45 8e 65 af ed 98 1d 00 a5 0c 09 8b 3b cf aa 07 8f b6 ea 59 02 bf c0 36 42 23 09 b4 b4 1e 1b 57 ac dc 52 0a c0 a0 82 91 99 42 c4 52 01 9d fb a3 34 e4 8b 24 75 2b 02 d2 87 4c eb 12 62 3a 34 d9 a0 e5 0b 54 20 20 31 be 1b 79 b9 80 e5 4a f0 a1 ff 0a 75 c5 60 91 a5 8a 8e a0 6b db 08 5a 91 e4 2c 20 92 db d2 58 90 2d d3 14 9d b6 88 32 a0 2d d3 ed 80 21 ec ba 27 a9 90 17 2f c4 71 d8 31 b5 73 4f 82 38 b9 7e 69 54 65 ee 94 ce df 9f f9 e6 57 f2 00 d0 a9 4c 3a ce ca af d6 df 01 02 57 10 78 20 70 96 a2 5c bf 1e 9f db 5d f1 2b 13 07 ad 6e 3e 5c 4d b5 6d 4e 45 Data Ascii: \zre_F.<G!LFR.{8g0&rTh\|Ee;Y6B#WRBR4$u+Lb:4T 1yJu`kZ, X-2-!'/q1sO8~iTeWL:Wx p\]+n>\MmNE
2024-12-24 15:05:11 UTC	16384	IN	Data Raw: 08 25 43 17 86 80 36 bf 9c 67 de 2e 37 9f 1a 4c fd 00 03 36 4a 3b 0c 2b 4b b2 48 04 7a 1b bd 47 6c 21 68 74 c7 ca 16 8b 25 b5 7b 00 81 c3 da 50 6b ea f5 2b 1a a6 82 a8 83 af 42 62 16 35 68 76 0a a6 32 b3 d5 83 b2 f1 d5 c9 b2 5e 4c 9f fc e8 d0 89 ac 74 d6 34 47 61 22 92 ae 8d 42 e1 96 96 d7 4f 6b 73 0b b8 64 b1 02 2e 26 05 74 c9 a7 3a a8 66 45 bb 15 a6 45 f0 62 b1 cb fe 2e 6a f1 13 ec 6b 9b de 08 03 b2 44 dd c0 b5 5a 49 b3 5d df 1c c0 9c c0 e0 9d ca 1b 37 f5 ea de 4d c8 30 a4 94 16 96 09 8e 67 2a 1c df 9e ea c8 9d d5 f1 da 54 b3 a7 b1 1c af ad e7 04 30 37 30 bb b4 7c 00 a1 3d 00 ac 5e d3 a3 0f bf f9 a0 24 ba 61 40 c5 33 27 80 2a 6a 74 ea 52 c1 e1 16 78 10 b0 0a af de 45 fa ce d9 26 40 5c 76 d0 d4 ca 08 89 e9 6a f0 51 f1 86 b4 3c b2 11 4d fb b4 2a c3 9f 80 Data Ascii: %C6g.7L6J;+KHzGl!ht%{Pk+Bb5hv2^Lt4Ga"BOksd.&t:fEEb.jkDZI]7M0gT070\|=^$a@3'jtRxE&@\vjQ<M*
2024-12-24 15:05:11 UTC	16384	IN	Data Raw: fb a7 e5 d1 a1 ad b2 a5 1a 84 14 a9 c2 ab 7d c5 aa d1 f6 ef 8a 2c b0 ee f1 85 dc cb b2 bd 91 5d 20 a6 ca 3e 6c 66 58 07 7a 61 1f 94 98 99 cb 20 ac 96 09 68 ca 60 15 e5 70 59 da 0c 60 44 59 ae bd 2b f4 6b af a0 f1 7e fa 8d e0 18 0c ca 8c 2a b9 aa 22 76 42 c6 73 6a 1c 3a 2d 7a 27 d5 9d 95 46 5c e2 43 37 4e bf dc 26 dc 7b f4 ec b7 22 11 67 59 cc 97 75 54 ec 71 9a 9b 61 74 7b dc a9 f1 d7 87 2f 1e f4 ed e3 9f fe 9f bc 3d bf 08 4e aa ad 1f 76 a1 44 d4 1a ba 5b fc 70 09 c8 10 96 c5 af 9a ed cc cc ae d8 5c 0c de c7 b6 79 07 c3 29 c5 5d fa 8f 24 71 66 87 20 75 ab bc f5 34 f6 b9 e5 a6 ca fe a0 b1 7f 65 dd 40 aa 28 fe ae 83 f4 0f f5 0f 8b 19 6e 42 a0 e7 10 4b 26 c8 9e f1 6a e9 97 ea 7e bc 49 c3 12 cb 01 8c ea a5 61 5b 04 55 13 66 6c e2 a6 3d 92 e7 39 59 34 e1 73 d2 Data Ascii: },] >lfXza h`pY`DY+k~*"vBsj:-z'F\C7N&{"gYuTqat{/=NvD[p\y)]$qf u4e@(nBK&j~Ia[Ufl=9Y4s
2024-12-24 15:05:11 UTC	15400	IN	Data Raw: 46 7e 33 3e b5 e4 55 6b 62 0e 5c 49 e4 b0 8c 5e d0 7d a7 0f f8 80 ad 5e d5 f6 cd 33 cb ac 34 10 38 c0 55 9d 08 a8 46 a0 39 dd 6c 88 50 d8 b5 8c 2c 24 4b 67 5e 6b 79 42 02 c2 f4 51 e4 e9 c9 e1 e6 c2 1f 80 a6 de 51 5c f9 f7 68 87 20 02 b8 c0 30 51 7c 74 a9 fb 94 30 22 8e cc 40 0a 0f 09 e1 58 1b 30 62 18 c8 49 ba a2 63 ba 08 8d 17 27 a1 2a 12 a4 20 47 fb 96 f7 0a d4 a7 b5 79 3e ba eb f2 79 31 d4 2a 6c 29 ed 6a b7 a0 1d da 61 59 11 76 28 ce 4c 2f f1 d9 e0 1b 68 ff 8a 4f 05 da ee 80 70 30 5c 45 26 1e 84 f3 54 d0 8a bb 54 9e ec c8 d4 72 fb 14 b5 f7 fc 5c 5e 9e 08 f1 68 07 b5 46 8c 23 05 e7 8f a7 ba 7f 43 5b 45 45 38 02 a7 8c a7 64 08 e9 c0 17 da b2 89 f6 b8 db 6d a0 7a e5 04 32 f0 c8 65 d2 f9 bc d4 05 9e a7 9f 94 e0 4c 24 e8 96 0f d6 2e b4 3c 18 96 12 59 fa 7a Data Ascii: F~3>Ukb\I^}^348UF9lP,$Kg^kyBQQ\h 0Q\|t0"@X0bIc'* Gy>y1*l)jaYv(L/hOp0\E&TTr\^hF#C[EE8dmz2eL$.<Yz
2024-12-24 15:05:11 UTC	16384	IN	Data Raw: ee 9e d4 c5 4a 2c 84 25 13 c0 83 6b ce 04 c5 c6 62 3a a9 91 d6 e9 cb ab 98 0b 39 73 4a 1f b3 64 fb 52 2f ef d8 08 9f fb be ee 26 85 57 e6 35 f7 5f e3 5e 1e fa 3a 96 21 b2 f4 a0 2f 0c dd 9f 52 56 79 f6 59 5e 02 66 db af 53 b9 db c7 de e5 f5 e5 b3 16 f9 ed 38 f4 fb 98 55 b0 a5 bd 04 90 f4 f7 fe 47 fe 74 bf e4 7f f9 7f fa c3 7f ff 7f 60 17 6c 5c 8b 3a b7 59 75 25 92 ba c9 56 3a b8 5b 7c a8 8a 82 09 1d 52 ee da 35 40 35 ab 41 a7 80 ae 30 78 3f 22 b0 d5 4d 5c 6e 74 01 5a 2d 21 5b b2 36 60 5c 41 c2 89 a8 51 d1 a5 d1 ef 41 d2 aa 8c 90 a3 56 6b d3 e0 36 5d 1e 5b 6d 80 f5 89 7a 35 6e ba 3c 96 68 57 d5 9c 7a 38 2d 2e 15 03 7d 5e 26 c9 51 9a b9 06 c8 6d df 97 8b f2 76 5b ff 79 25 3f 4a 67 b7 45 0b 07 3b 0c 03 44 d5 da d3 2d 67 e2 7a b7 44 47 4d 3f 14 ff aa d7 99 bd Data Ascii: J,%kb:9sJdR/&W5_^:!/RVyY^fS8UGt`l\:Yu%V:[\|R5@5A0x?"M\ntZ-![6`\AQAVk6][mz5n<hWz8-.}^&Qmv[y%?JgE;D-gzDGM?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49809	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:10 UTC	773	OUT	GET /Content/images/read-article-arrow.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=c38whLe5PvhtK2l/FqeeiwHmKBT4BBpRjkBcPCLGRK77K3hafR91V1wbcjHbFakLBpqtjKlrEx6uCly0moAfn5T0iZYElTEaZPyVioMLsogDpHFg4pE47hIWNv3c
2024-12-24 15:05:11 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:10 GMT Content-Type: image/svg+xml Content-Length: 366 Connection: close Set-Cookie: AWSALB=/IFQH7vmnKlNUzNUaXsZUNz0UmeFxzzIWKDcfOkUjxJ7Wro0x7eAZn+5h/BRQyMcmDN44Bn2PKKsgcBsjGJf63lFIXzcKfEzzcAY07ZOIv6EqnSahzBJuOQBis9A; Expires=Tue, 31 Dec 2024 15:05:10 GMT; Path=/ Set-Cookie: AWSALBCORS=/IFQH7vmnKlNUzNUaXsZUNz0UmeFxzzIWKDcfOkUjxJ7Wro0x7eAZn+5h/BRQyMcmDN44Bn2PKKsgcBsjGJf63lFIXzcKfEzzcAY07ZOIv6EqnSahzBJuOQBis9A; Expires=Tue, 31 Dec 2024 15:05:10 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:11 UTC	366	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 2e 30 30 34 22 20 68 65 69 67 68 74 3d 22 31 30 2e 30 30 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 2e 30 30 34 20 31 30 2e 30 30 33 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 37 32 61 39 35 31 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 31 39 2e 35 2c 31 36 2e 35 48 39 2e 35 32 36 6c 33 2e 38 32 31 2d 33 2e 36 33 39 61 2e 35 2e 35 2c 30 2c 30 2c 30 2d 2e 36 39 2d 2e 37 32 34 4c 38 2e 32 39 33 2c 31 36 2e 32 39 34 41 31 2c 31 2c 30 2c 30 2c 30 2c 38 2e 33 2c 31 37 2e 37 31 37 6c 34 2e 33 35 35 2c 34 2e 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="12.004" height="10.003" viewBox="0 0 12.004 10.003"><defs><style>.a{fill:#72a951;}</style></defs><path class="a" d="M19.5,16.5H9.526l3.821-3.639a.5.5,0,0,0-.69-.724L8.293,16.294A1,1,0,0,0,8.3,17.717l4.355,4.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49811	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:10 UTC	561	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/App-store.png?ext=.png HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=c38whLe5PvhtK2l/FqeeiwHmKBT4BBpRjkBcPCLGRK77K3hafR91V1wbcjHbFakLBpqtjKlrEx6uCly0moAfn5T0iZYElTEaZPyVioMLsogDpHFg4pE47hIWNv3c
2024-12-24 15:05:11 UTC	826	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:10 GMT Content-Type: image/png Content-Length: 4120 Connection: close Set-Cookie: AWSALB=uG8t5IYOzTPzciI/KmMWKdp6X6QY8yW1ug7J0ZPJaCsCoUr72LOcCgdE1NFmfSBSPNpL7LHJVLTpd/tzw0Z8WmzxtVJYIAZQTA/CLED0SSsZaqL3GbtmmCoaHpMK; Expires=Tue, 31 Dec 2024 15:05:10 GMT; Path=/ Set-Cookie: AWSALBCORS=uG8t5IYOzTPzciI/KmMWKdp6X6QY8yW1ug7J0ZPJaCsCoUr72LOcCgdE1NFmfSBSPNpL7LHJVLTpd/tzw0Z8WmzxtVJYIAZQTA/CLED0SSsZaqL3GbtmmCoaHpMK; Expires=Tue, 31 Dec 2024 15:05:10 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 01 Jun 2021 16:26:55 GMT Accept-Ranges: bytes ETag: "503fb1ef257d71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:11 UTC	507	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 aa 00 00 00 32 08 06 00 00 00 cc 43 40 ac 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 aa a0 03 00 04 00 00 00 01 00 00 00 32 00 00 00 00 1d ce 90 9a 00 00 0f 8e 49 44 41 54 78 01 ed 9d 77 a8 5d c5 13 c7 f7 3d a3 b1 26 44 c5 ae 89 31 0a 62 ec b1 a0 46 14 44 63 89 98 80 82 15 c1 f6 8f a2 58 50 14 41 c5 0e a2 e6 0f b1 0b 2a 06 35 b1 04 35 04 92 58 41 ac 58 62 4f c4 82 bd 61 8d 89 e5 fd f6 33 fe be c7 b9 27 e7 dc f2 ce de f7 ae 7a 06 ee 3b 7b 76 67 67 67 e7 cc ee d9 99 9d 3d af 6f 20 42 88 f0 f3 cf 3f 87 37 de 78 23 7c f8 e1 87 e1 bb ef be 23 2b f4 f7 f7 db b5 d9 9f 3f Data Ascii: PNGIHDR2C@sRGB8eXIfMMi2IDATxw]=&D1bFDcXPA55XAXbOa3'z;{vggg=o B?7x#\|#+?
2024-12-24 15:05:11 UTC	3613	IN	Data Raw: b2 f0 d9 67 9f 85 07 1e 78 20 1c 76 d8 61 c9 44 b9 fe fa eb 07 16 e3 f7 dd 77 9f fd 68 07 97 c7 50 c3 3b ef bc 13 8e 39 e6 98 a4 cd 9e 72 ca 29 01 ba c3 01 6f be f9 66 40 96 43 0d c3 aa a8 78 1a ce 3f ff fc b0 c1 06 1b 58 bf df 7f ff fd 64 fd 1f 37 6e 5c 38 f3 cc 33 8d de f7 df 7f 1f 0e 3e f8 60 33 1a 87 5a c8 5b 6c b1 45 58 63 8d 35 92 f5 0b 42 eb ae bb 6e 18 3b 76 6c 52 9a 45 c4 18 d8 0c 76 0f 1b 6f bc b1 b5 ef f3 86 22 3d 6c 8a fa e4 93 4f 86 5d 77 dd 35 eb 23 46 dd cc 99 33 b3 fb aa 89 df 7f ff dd 48 1c 71 c4 11 e1 a4 93 4e 32 27 f2 55 57 5d 65 03 63 e7 9d 77 6e 20 cf 0c 75 fa e9 a7 37 e4 f1 90 3c de 01 07 1c 90 95 4f 98 30 21 e8 9e e5 0a 78 ab ac b2 4a 88 7e bf 15 96 2f e2 23 ab 1c 13 47 1e 79 a4 e1 32 eb 7b e0 1e 3e f2 bc 08 07 3e a9 fb d3 4f 3f b5 Data Ascii: gx vaDwhP;9r)of@Cx?Xd7n\83>`3Z[lEXc5Bn;vlREvo"=lO]w5#F3HqN2'UW]ecwn u7<O0!xJ~/#Gy2{>>O?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49812	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:10 UTC	810	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/Banner_Covid.jpg?ext=.jpg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=c38whLe5PvhtK2l/FqeeiwHmKBT4BBpRjkBcPCLGRK77K3hafR91V1wbcjHbFakLBpqtjKlrEx6uCly0moAfn5T0iZYElTEaZPyVioMLsogDpHFg4pE47hIWNv3c
2024-12-24 15:05:11 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:11 GMT Content-Type: image/jpeg Content-Length: 83605 Connection: close Set-Cookie: AWSALB=QQ048UTdQE7SO8Cbr6QtvXC7ZPJGZsP8NVOVZCaX/Strq5++Z4+YV9qYbjV0obvnzZF7QaOrVmjwYXXz/Ka7H0TysF8VRybyA3NFcn7JvG+mnNO/kIbLMxRZNm8V; Expires=Tue, 31 Dec 2024 15:05:11 GMT; Path=/ Set-Cookie: AWSALBCORS=QQ048UTdQE7SO8Cbr6QtvXC7ZPJGZsP8NVOVZCaX/Strq5++Z4+YV9qYbjV0obvnzZF7QaOrVmjwYXXz/Ka7H0TysF8VRybyA3NFcn7JvG+mnNO/kIbLMxRZNm8V; Expires=Tue, 31 Dec 2024 15:05:11 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 08 Jun 2021 18:32:10 GMT Accept-Ranges: bytes ETag: "2e38c597945cd71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:11 UTC	504	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 05 04 04 04 04 03 05 04 04 04 06 05 05 06 08 0d 08 08 07 07 08 10 0b 0c 09 0d 13 10 14 13 12 10 12 12 14 17 1d 19 14 16 1c 16 12 12 1a 23 1a 1c 1e 1f 21 21 21 14 19 24 27 24 20 26 1d 20 21 20 ff db 00 43 01 05 06 06 08 07 08 0f 08 08 0f 20 15 12 15 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 ff c0 00 11 08 01 84 07 6c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFHHC#!!!$'$ & ! C l"}!1AQa"q2
2024-12-24 15:05:11 UTC	8028	IN	Data Raw: 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f4 d7 b0 62 df bb bb 56 ff 00 79 45 44 f6 92 ac bf 3f 91 b7 fb d5 3f 9f 62 5b 73 c2 ca 87 ee ed a4 69 74 f3 fe ad 1b fe 05 5e 6e 87 ab a9 54 d8 49 24 bb 63 f2 19 69 a9 67 86 fd cc 32 f9 bf c5 b5 aa d2 9d 31 be 56 b8 68 ff 00 e0 35 61 61 58 57 75 9d da b7 fc 0a 95 87 72 93 5a de 2f cc f3 4f 1a ff 00 7a 97 67 dd dd 7d 2c 8c bf c5 5a 2a b3 cb 06 e7 bb 8b fd d6 61 51 86 58 be 64 f2 9b fd da 76 27 98 ad e5 c4 Data Ascii: :CDEFGHIJSTUVWXYZcdefghijstuvwxyz?bVyED??b[sit^nTI$cig21Vh5aaXWurZ/Ozg},Z*aQXdv'
2024-12-24 15:05:11 UTC	10704	IN	Data Raw: 59 b4 91 af f7 a3 93 72 d3 34 8f 02 d8 e9 9a 82 ea 0d 76 f7 46 3f b8 ad fc 26 9f 32 b0 24 74 5f f1 ef 63 04 3f dc 40 b5 4a 33 be e9 9f ef 31 a9 ae 5e 49 a6 f2 d3 e6 26 ad c1 a7 f9 6b fe f7 de ae 59 b3 b2 92 ea 2a 0c 7f b3 4a 0f f0 d4 a2 d1 87 f1 54 89 6d 8f bd 59 9b 11 a2 ff 00 77 e6 a7 e3 15 21 87 14 84 6d a0 44 4c 2a 09 19 52 a7 63 8a ab 26 df bd 49 96 86 e7 77 cc b5 17 fb 5f c3 4a ee a3 ee d3 0b 7f e3 d5 05 a1 8d b6 a2 76 f9 b6 d3 9d ff 00 87 f8 aa b3 ca b1 ee 66 a9 2c 49 64 c5 54 92 6c 7c d4 c7 99 9b e6 ac fb ab b5 82 06 67 7f f7 68 dc 2f 62 0d 52 fd 91 36 43 f3 39 ac 0d f2 16 ff 00 8f 7d cc 7e f3 54 a5 99 dd 9d e6 56 2d 49 f3 06 dc 7e 65 fe ed 6c b4 47 3c a4 e4 34 34 bf f3 c5 7e 5f ef 52 6d 91 be 6f 25 56 a6 32 c6 57 e5 85 57 fd a6 a8 be 53 f3 79 df Data Ascii: Yr4vF?&2$t_c?@J31^I&kYJTmYw!mDLRc&Iw_Jvf,IdTl\|gh/bR6C9}~TV-I~elG<44~_Rmo%V2WWSy
2024-12-24 15:05:11 UTC	10704	IN	Data Raw: e7 ee d3 b6 e7 ef 53 18 ac 7d 7e ed 00 18 c5 31 e5 58 fa d4 52 5c 67 e5 4a ac 79 fb d4 00 f9 ee 64 2b b9 6a a8 82 4b 8d af 23 ed ff 00 66 ad 24 6c d5 6a 38 55 68 02 18 ad b0 9f 2f ca b5 6d 63 55 a7 0a 5a 68 4c 82 f1 d6 2b 29 a4 6f e1 5f 96 b3 6d e3 f2 74 b5 6f 97 77 de 6a b3 aa 6e 74 b7 b4 5f bd 2b fe 94 6a db 6d f4 ed 8a 9f 31 f9 6a 40 e3 e6 1e 65 d3 7c fb b2 d5 cf dc f8 ca da ce fa 4b 54 d3 fc e8 62 f9 5a 4d d5 b1 7f 2f d9 34 eb 8b 81 f7 95 08 5f c6 bc fb 45 b3 fe d2 f1 15 8d 8b ba a8 9e 71 bf 77 dd c7 7a 69 5c 1b b1 da 5a 78 e7 48 91 76 79 b3 da ee fe f2 ee 5a d5 13 e9 1a c2 ff 00 aa b1 bc ff 00 80 ed 6a 4f 11 fc 2b d3 ee 26 92 e3 c3 3a 84 16 72 6d f9 ad 2e 24 1b 58 e3 f8 4d 79 5c d0 4f a6 dd 4d 6f 26 eb 7b a8 58 ab 79 6d dc 7d 28 b0 ae 7a dd b5 9e 9f Data Ascii: S}~1XR\gJyd+jK#f$lj8Uh/mcUZhL+)o_mtowjnt_+jm1j@e\|KTbZM/4_Eqwzi\ZxHvyZjO+&:rm.$XMy\OMo&{Xym}(z
2024-12-24 15:05:11 UTC	10449	IN	Data Raw: 04 9f c3 33 50 05 dd ab fd ea 43 e5 8f 94 bd 55 36 12 7f cf c3 52 8b 1f ef 4c d4 01 61 da 38 fe f3 d2 97 89 57 7b 3f cb 55 ce 9e ad f7 9d a8 fe ce 8f 6e c6 76 65 a0 0b 06 48 82 ef df f2 d0 24 80 fc db ea 05 d3 e2 55 d9 f3 6d a7 8b 08 87 f7 a8 01 cf 75 02 fc bf 7a a4 13 db 7d e5 7a 8c d8 c0 df 33 25 49 1d ac 51 fd d4 fb d4 0a e2 9b 8b 65 5d db fe 5a 45 bb b7 6f f8 15 2f d8 e0 fe 24 a5 16 d0 0f 97 62 d3 01 0d f5 b0 f9 69 16 fe 26 6d a8 9f 35 3f ec f0 7f cf 15 a7 ac 50 af cc a8 b4 01 0b 6a 11 85 fb b4 c3 7f e6 af ee d7 6d 5b d9 19 f9 9b 6d 28 11 0f bb b6 80 2b ad e4 bf 77 c9 dd b6 94 5e cb ff 00 3c 6a c8 31 8a 78 31 d0 04 06 e6 7f 95 92 1f 95 a9 44 d7 2d f2 aa 6d ff 00 6a a7 dc b4 f5 6c ff 00 05 31 15 7c cb e0 db 76 54 92 a5 d3 2f ca dc d5 95 2b 4c 92 49 17 Data Ascii: 3PCU6RLa8W{?UnveH$Umuz}z3%IQe]ZEo/$bi&m5?Pjm[m(+w^<j1x1D-mjl1\|vT/+LI
2024-12-24 15:05:11 UTC	12042	IN	Data Raw: d1 db ef 5a 4f ff 00 02 5a 89 bc 6f a5 0f bb 69 2d 20 3a 30 3e 6f 9a 6d cd 4e 23 fe 9b 57 2f ff 00 09 c6 9f fc 36 32 d3 0f 8e 6d 47 dc b1 6a 2e 07 62 a3 e5 a7 01 5c 67 fc 27 51 ff 00 0d a5 33 fe 13 a6 fe 1b 4a 2e 1a 9d a1 f3 b7 7c bd 29 41 9f fb 95 c4 9f 1c ca 7e ed ba d2 c5 e3 2b eb 86 d9 0d ba ee a2 e1 a9 db 7e f2 8f de ee fb f5 c5 49 e2 5d 68 ff 00 cb a2 d3 5b 5f d7 3f e7 dd 69 8e c7 73 fb c3 c6 fa 10 62 b8 51 ad 6b cd fc 0a b5 07 f6 de b8 7e ee da 02 c7 a1 95 ff 00 6e 97 0d fd fa f3 f6 d4 b5 a1 12 bf 9c bf 35 3c 5e 6b 47 e6 6b 85 55 a0 47 a0 08 d8 fc db e9 7c bf f6 eb 82 f3 f5 83 f2 fd ae 93 76 ae 7e f5 f5 01 63 d0 53 6a fd e7 5a 76 f8 ff 00 bc b5 e7 bb 75 03 ff 00 2f cd 44 90 5e 18 f7 7d b9 a9 dc 56 3b f7 92 26 ff 00 96 cb ff 00 7d 53 0c 91 7f cf 65 Data Ascii: ZOZoi- :0>omN#W/62mGj.b\g'Q3J.\|)A~+~I]h[_?isbQk~n5<^kGkUG\|v~cSjZvu/D^}V;&}Se
2024-12-24 15:05:11 UTC	12042	IN	Data Raw: 2f 75 49 a0 58 ac 98 ed f2 ff 00 8b 3e a2 bd 11 2f a3 3f eb 11 97 ff 00 1e a7 b4 1a 7d cf de 45 6d df f0 1a 05 63 ca ad 6e d7 40 f1 16 b5 2e ad 14 b1 8b dc 9b 79 95 77 23 71 d2 ba 5f 86 f6 8c 9a 17 9d 22 6d 79 24 2f b5 bd eb a9 93 44 82 45 d8 8f c7 f7 64 50 cb 56 34 fb 16 b1 8d 81 75 6c ff 00 76 80 2e 2a fc d5 cf 6a d2 fe fe 43 5d 28 18 5d d5 c8 6a 4c cd 2b 05 ea ed 49 8d 13 d8 47 e5 58 29 fe 27 f9 aa c5 27 fa b8 62 8c 76 5a 4c 31 fb d5 25 0b 9c fd da 70 18 a0 52 13 40 0e a6 9e 7e 5a 41 b8 d3 80 c5 02 10 1f e1 6a 08 ca ed a0 8a 01 cd 03 2b c5 66 91 ca d2 b7 ef 0d 5a f7 a0 0a 6b ca b1 fd ea 00 ae 56 69 f7 2b 7e ed 69 52 48 a2 6f 26 3f 99 a9 44 8d 2b 6d d9 f2 d1 98 a2 6f 91 37 35 00 84 fb 3c 8d 2e f9 9f e5 fe 15 a9 3e 63 f2 42 bb 69 12 39 9a 5d f2 7d da b4 Data Ascii: /uIX>/?}Emcn@.yw#q_"my$/DEdPV4ulv.*jC](]jL+IGX)''bvZL1%pR@~ZAj+fZkVi+~iRHo&?D+mo75<.>cBi9]}
2024-12-24 15:05:11 UTC	12042	IN	Data Raw: 2e 9a 5f de 7c aa b5 75 21 8e 3f bb f7 aa 63 49 48 06 91 48 69 d8 a6 d0 03 48 a6 9a 92 98 45 00 30 8a 4e 69 f5 19 14 00 bc d2 8a 6d 3c 1a 43 1c 0d 38 d3 2a 29 e7 6b 78 99 d5 59 9a a4 a1 f2 48 b1 2e e7 fb b5 42 5b e6 99 bc bb 6f bd fd ea 23 8e 5b b5 f3 a6 6d ab fd da 95 8c 48 bf e8 e8 ac f4 00 91 c3 14 31 79 97 2f b9 bf da a4 6b 87 9d 76 c2 bb 53 fb d4 b1 59 31 5f f4 86 dd fe cd 5c 44 58 d7 6a fd da 00 8a 1b 75 8d 3e 6f 99 bf da ab 1c d1 cd 26 68 10 62 82 2a 16 9f e6 d8 9f 35 3e 35 90 7c cf 40 31 8f bb 76 c5 fb b4 cc 45 0f de f9 9a a7 60 db 7e 5f bd 55 d2 dd bc dd f2 7c cd 40 0c 26 5b 86 fe ea 54 f1 c4 aa bb 56 a4 0b 4b 40 c0 0d b4 51 9a 6b 36 17 73 7c ab 40 0a 4f f7 6a 19 ee 23 85 7e 7f 99 bf bb 51 b4 f2 33 62 14 ff 00 81 54 be 52 33 6f 7f 99 e8 01 d1 3f Data Ascii: ._\|u!?cIHHiHE0Nim<C8)kxYH.B[o#[mH1y/kvSY1_\DXju>o&hb5>5\|@1vE`~_U\|@&[TVK@Qk6s\|@Oj#~Q3bTR3o?
2024-12-24 15:05:11 UTC	7090	IN	Data Raw: ff 00 96 6b 4e 54 96 65 f9 fe 55 fe 1a 74 16 ab 1b ef 7f 99 ff 00 bd 57 40 a0 06 46 9b 17 6f 6a 90 71 4b cd 02 80 16 8a 28 a6 84 86 ba 2c 8b b5 aa 89 89 63 7d b5 a3 4d 68 d6 4f bd 40 cc e4 b4 f3 25 df 5a 11 41 1c 4b f2 d3 c2 a8 fb b4 ea 00 86 79 1d 42 ac 6b f7 aa 35 b7 66 6f 31 9f e6 ab 60 51 cd 02 00 31 41 65 55 f9 aa 27 9b f8 53 ef 54 44 e5 be 6f 99 a8 b8 d1 38 93 75 3c 1a a8 cd b7 e6 fe 2f ee d5 88 4f 98 bb 9a 90 35 62 51 4e a4 c5 2d 31 05 2e 68 e6 a9 5f 6a 76 ba 7c 5b e6 7e 7f bb 43 76 1a 4d ec 43 ad 69 ab a9 69 ed b7 e5 9a 35 dc ad 5c 1c 6b b8 b0 93 72 b2 ff 00 76 b4 ef b5 eb cd 45 b6 7c d0 c1 fd c8 fe f3 7d 6b 35 bc bf e2 49 56 b8 6a c9 49 e8 77 d2 8b 8a d4 91 62 88 fc df 36 68 58 94 6e da ed 50 83 19 f9 13 73 53 c3 c4 bd 21 97 75 62 6c 4f e5 2a ed Data Ascii: kNTeUtW@FojqK(,c}MhO@%ZAKyBk5fo1`Q1AeU'STDo8u</O5bQN-1.h_jv\|[~CvMCii5\krvE\|}k5IVjIwb6hXnPsS!ublO*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49813	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:10 UTC	566	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/SD-mobile-2023.png?ext=.png HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=c38whLe5PvhtK2l/FqeeiwHmKBT4BBpRjkBcPCLGRK77K3hafR91V1wbcjHbFakLBpqtjKlrEx6uCly0moAfn5T0iZYElTEaZPyVioMLsogDpHFg4pE47hIWNv3c
2024-12-24 15:05:11 UTC	828	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:11 GMT Content-Type: image/png Content-Length: 53993 Connection: close Set-Cookie: AWSALB=vx6fwusUcOGkKRpXNWuVSqfLqLfh7Us315FVnD6P7BPNJgf7mjIxDQRdeU2frR4AoGodQ8dG5VhuixSjuqAEc9VG44yRYsrIERjUjUh6/mSF0naGmK7DIlxGKo5/; Expires=Tue, 31 Dec 2024 15:05:11 GMT; Path=/ Set-Cookie: AWSALBCORS=vx6fwusUcOGkKRpXNWuVSqfLqLfh7Us315FVnD6P7BPNJgf7mjIxDQRdeU2frR4AoGodQ8dG5VhuixSjuqAEc9VG44yRYsrIERjUjUh6/mSF0naGmK7DIlxGKo5/; Expires=Tue, 31 Dec 2024 15:05:11 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Wed, 14 Jun 2023 13:50:41 GMT Accept-Ranges: bytes ETag: "d2138835c79ed91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:11 UTC	505	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ec 00 00 01 2d 08 02 00 00 00 84 72 1b e6 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 09 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 32 2d 63 30 30 30 20 37 39 2e 35 36 36 65 62 63 35 2c 20 32 30 32 32 2f 30 35 2f 30 39 2d 30 37 3a 32 32 3a 32 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 Data Ascii: PNGIHDR-rpHYs+#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5, 2022/05/09-07:22:29 "> <rdf:R
2024-12-24 15:05:11 UTC	1338	IN	Data Raw: 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 33 2d 30 35 2d 33 30 54 31 31 3a 35 30 3a 31 31 2d 30 35 3a 30 30 22 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 33 2d 30 35 2d 33 30 54 31 31 3a 35 36 3a 32 32 2d 30 35 3a 30 30 22 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 33 2d 30 35 2d 33 30 54 31 31 3a 35 Data Ascii: .adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.4 (Windows)" xmp:CreateDate="2023-05-30T11:50:11-05:00" xmp:ModifyDate="2023-05-30T11:56:22-05:00" xmp:MetadataDate="2023-05-30T11:5
2024-12-24 15:05:11 UTC	4014	IN	Data Raw: 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 42 61 67 3e 20 3c 2f 70 68 6f 74 6f 73 68 6f 70 3a 44 6f 63 75 6d 65 6e 74 41 6e 63 65 73 74 6f 72 73 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 72 65 61 74 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 65 63 33 38 63 38 30 34 2d 63 38 61 36 2d 65 33 34 38 2d 39 38 62 65 2d 38 64 31 34 30 65 61 38 64 61 39 64 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 33 2d 30 35 2d 33 30 54 31 31 3a 35 30 3a 31 31 2d 30 35 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 57 69 6e 64 Data Ascii: f:li> </rdf:Bag> </photoshop:DocumentAncestors> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:ec38c804-c8a6-e348-98be-8d140ea8da9d" stEvt:when="2023-05-30T11:50:11-05:00" stEvt:softwareAgent="Adobe Photoshop 23.4 (Wind
2024-12-24 15:05:11 UTC	8028	IN	Data Raw: f6 bd 10 19 80 ed 13 f5 9b d6 77 3c 7a a4 ba 79 79 21 00 f7 ec 44 73 28 1f c4 2c 0a 03 8f 64 dd 40 7e 6d 77 ae e8 dc d6 95 c5 4e c5 77 e5 75 02 70 ef 8e c9 43 87 2a 3f 76 eb 60 1e d5 08 a8 dd a3 8d 35 3d c1 70 8f 8f 80 fb a7 92 b1 86 c5 57 74 55 10 c1 28 fa ab 87 27 7f f5 8e 55 c6 c0 a7 be 71 38 12 21 75 e2 5c 7c 0c 8b 54 da c9 2a 2e e2 15 63 89 85 58 00 94 52 74 92 89 05 09 9c c0 fd fb 2b ff fb b9 c9 ee 50 7f f9 f9 19 c8 79 18 10 b0 a0 ef 55 1d ff c1 77 8e a4 56 6a 08 b5 54 ee 7a 7e 8e 54 f5 cd 5b ba ff fc 7b a3 e4 a9 88 d9 27 e8 2b 05 f7 3d 3d d3 9b f3 02 9a 3e 54 b5 0d ad fe ea 89 89 3f 7c 64 dc 27 2c 12 84 81 37 19 d9 b5 9d 41 dd d8 80 d0 d7 ca da c9 be ce e0 23 57 0d fe fe 3d 87 cb 4d b3 ab 61 3b 7c da fd dd 91 7d d3 c9 38 22 33 1f ac a6 53 56 fa 7d Data Ascii: w<zyy!Ds(,d@~mwNwupC?v`5=pWtU('Uq8!u\\|T.cXRt+PyUwVjTz~T[{'+==>T?\|d',7A#W=Ma;\|}8"3SV}
2024-12-24 15:05:11 UTC	4769	IN	Data Raw: 16 6a ed 4b f6 53 4b 39 6e 47 88 bf 7a c7 d6 a1 ee c3 9f ba 7b 4f 95 b5 c7 2c 48 a7 a6 b3 67 79 bd 49 ac 80 12 c9 58 19 0a c0 32 68 25 00 60 37 f4 f9 d7 ac 1f e4 33 4b cd 76 bc 10 db 7a 39 89 9b 6e 7a cc 2f ae 08 fb 87 b9 39 0b 5a a3 aa 60 54 03 52 22 4e 6c 82 8a 80 b4 88 03 97 82 a7 01 51 0c 41 9a 08 0b 10 1d cd 7c ce e7 7a 06 bc d0 2c c1 8b a2 9d 55 04 10 11 05 11 24 4e e2 1b 6e bc 71 60 60 e0 7c 77 ed 54 20 56 48 a2 45 7e f2 c6 95 97 0f 77 fd f6 57 9f 7b 64 dc 58 d0 1e bb 53 b1 1f c4 11 88 43 1d 8a b9 66 75 b7 02 f7 c0 c1 3a 65 59 99 91 2f ed d1 7f fe 13 37 2d 0f 61 3e 7a ef 95 e1 84 99 38 89 54 1a 47 4d 0e 3a 06 c5 36 6d 5c a3 20 14 9b 88 10 91 42 c7 e2 0c 6a 85 be 07 22 40 0a ad 03 a9 58 5f 89 49 b3 60 29 99 97 62 94 b3 cd 6c 39 0e 17 b8 f8 66 98 ef Data Ascii: jKSK9nGz{O,HgyIX2h%`73Kvz9nz/9Z`TR"NlQA\|z,U$Nnq``\|wT VHE~wW{dXSCfu:eY/7-a>z8TGM:6m\ Bj"@X_I`)bl9f
2024-12-24 15:05:11 UTC	16384	IN	Data Raw: 97 9c 93 91 5d d0 58 dc 3a 31 b5 e7 71 8f 93 b4 5e e1 66 d5 45 4d db ac a7 71 6c a2 9a 8b 2a ec 0c 5b 06 15 02 69 60 10 eb c0 5a d4 1e e4 4b c6 59 66 6e 2b c4 f3 b9 d8 8e 01 33 9f ac 74 e6 c2 e3 e7 b3 0c ce e3 02 c9 ba 27 22 ce 39 00 58 38 8a 6c 67 d6 c3 28 8a b2 31 a6 69 6a 8c c9 fe 1a 63 4e 34 bf 78 8a e6 2a 8d d1 e9 19 0d e2 92 18 3d 5f 84 c1 a4 2e 6a b8 24 71 26 65 16 06 14 06 71 a9 33 09 5b 06 4f fb c5 62 2e 50 dc a8 6b 97 1e 7a f4 9b e7 78 f8 17 26 16 99 89 e3 d9 d1 c6 d8 1e 65 6a ae 59 55 cc 64 53 61 eb 1a 73 90 0b 75 ff 72 71 a9 f8 9d 88 59 05 3b 87 62 45 29 04 82 7c 50 ea 0a ab 95 b2 73 d2 66 b0 2d 82 cc 70 76 e9 a5 97 ce cc cc 54 ab d5 55 ab 56 65 0a 6e ad 56 43 c4 be be be 91 91 91 34 4d 57 af 5e 6d 8c 89 a2 a8 50 28 68 ad 0f 1f 3e 1c 04 41 a1 Data Ascii: ]X:1q^fEMql[i`ZKYfn+3t'"9X8lg(1ijcN4x=_.j$q&eq3[Ob.Pkzx&ejYUdSasurqY;bE)\|Psf-pvTUVenVC4MW^mP(h>A
2024-12-24 15:05:11 UTC	3686	IN	Data Raw: 3f a8 aa a5 94 d3 a7 4f ff c0 0f fc c0 05 57 d3 3f 1e 2f b6 cd 5b 2e 97 63 5a ff 65 79 e9 b9 fb fd f7 df 9f 73 be eb ae bb 5e 6c 0a 36 de 05 38 96 d7 70 d5 81 4e 95 73 d4 a1 f7 22 54 4f 88 6b 29 2d 8e 1d 3d 2d 66 02 ae 60 6a e0 66 0a cc a0 02 94 80 d9 72 06 33 53 41 0e 40 51 55 00 c9 57 2a 71 e4 80 0a 94 73 9e 5f a6 a5 09 f8 4a 04 05 29 1c be e9 b6 c3 37 dd f6 47 ef d9 38 72 ac a9 eb b2 af b9 fb 12 3c f2 c8 23 3f fc c3 3f bc 5c 2e df fa d6 b7 1e 3a 74 e8 03 1f f8 c0 e9 d3 a7 ff fe df ff fb 7f f9 2f ff e5 97 7d cd 0f 7f f8 c3 cf 3c f3 cc 05 4b 43 11 d9 de de 7e c3 1b de 70 d3 4d 37 bd ec ef 0e c3 f0 c8 23 8f 74 5d 97 52 da dd dd fd 99 9f f9 99 bf f2 57 fe ca da da 2b a5 10 a8 ea 6f fc c6 6f 3c f0 c0 03 df fd dd df 7d c7 1d 77 7c 59 a9 d1 fd f7 df ff e0 83 Data Ascii: ?OW?/[.cZeys^l68pNs"TOk)-=-f`jfr3SA@QUW*qs_J)7G8r<#??\.:t/}<KC~pM7#t]RW+oo<}w\|Y
2024-12-24 15:05:11 UTC	15269	IN	Data Raw: 7f e2 c0 b1 eb bf ca b3 f9 0d 8b af f9 e4 e6 fd f7 df ff 3f fe 3f ff c7 8f fe ff 3e 7a cf 3d 6f ff de 77 7f ef cd b7 dc 52 55 a9 ef 87 ae eb d4 f4 42 14 fa 8b f0 62 0b a6 91 52 68 ab a0 7b 41 98 da c6 ef cc d5 1f fb da 0d 17 fe 58 dd 33 ce 47 b9 bf f0 1a e3 0b c1 fe 4f 00 ab 07 ba bb c3 a8 e8 67 6e 3e fe e4 7e e1 5e 5b bd f2 ea 9f 71 34 63 7c f2 fd eb cd 6c 9f 0a 3c a6 b4 88 bb bb bb a7 4f 9d 3e 75 ea d4 d3 cf 3d f3 e4 b3 cf ed 76 fd a1 8d f5 d7 6d 55 af ad 07 26 c7 6a b2 b6 b1 7e f4 aa 03 9b 87 0f cd b6 0e 34 6b eb c4 88 60 e8 ee a6 d2 b7 60 0a 9c 4c cd dd dc d1 9c 8c d8 dc 35 67 62 27 00 cd 59 b5 94 dc af a4 d6 a6 b5 ab 5b 91 e5 de de 62 d9 ee 6e b7 52 8c 18 e7 07 0f ff f9 bf f5 8f e6 07 2f cf d9 24 f8 3a 04 31 00 e4 9c 7f e7 b7 7f e7 e7 7f ee 5f 3c f4 Data Ascii: ??>z=owRUBbRh{AX3GOgn>~^[q4c\|l<O>u=vmU&j~4k``L5gb'Y[bnR/$:1_<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49814	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:10 UTC	802	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/FAQs.jpg?ext=.jpg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=mQu/6HkDebaEHjrrWxvDRw+2zBVksh9fssWV0WILhP9cmC5rkKLJkx+/5OnHmiQBzsIu+ytnzcQAmJggl5X+KgC4D17HQ2SNoj9iwkmIn1EXQU5uzjo85zXm3Sx5
2024-12-24 15:05:11 UTC	828	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:11 GMT Content-Type: image/jpeg Content-Length: 82487 Connection: close Set-Cookie: AWSALB=bY4x/HXVUZwnq2OYm25ZyjdaHPG0WE9P0oHDNAbLBwR0I3G8k+lBKdGI9qlUg+Km99Cfdj5n6D9GEnazdm6IgDsMh05FnY81a1XJYetj0+SRS/jAOfNj9jEBEugl; Expires=Tue, 31 Dec 2024 15:05:11 GMT; Path=/ Set-Cookie: AWSALBCORS=bY4x/HXVUZwnq2OYm25ZyjdaHPG0WE9P0oHDNAbLBwR0I3G8k+lBKdGI9qlUg+Km99Cfdj5n6D9GEnazdm6IgDsMh05FnY81a1XJYetj0+SRS/jAOfNj9jEBEugl; Expires=Tue, 31 Dec 2024 15:05:11 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 10 Jun 2021 15:28:05 GMT Accept-Ranges: bytes ETag: "6767a835d5ed71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:11 UTC	505	IN	Data Raw: ff d8 ff e1 1e 24 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0e 01 00 00 03 00 00 00 01 14 d4 00 00 01 01 00 03 00 00 00 01 0d e3 00 00 01 02 00 03 00 00 00 03 00 00 00 b6 01 06 00 03 00 00 00 01 00 02 00 00 01 0e 00 02 00 00 00 44 00 00 00 bc 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 01 00 01 1b 00 05 00 00 00 01 00 00 01 08 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 22 00 00 01 10 01 32 00 02 00 00 00 14 00 00 01 32 82 98 00 02 00 00 00 49 00 00 01 46 87 69 00 04 00 00 00 01 00 00 01 90 00 00 01 c8 00 08 00 08 00 08 46 41 51 73 20 28 20 66 72 65 71 75 65 6e 74 6c 79 20 61 73 6b 65 64 20 71 75 65 73 74 69 6f 6e 73 20 29 20 77 6f 6f 64 20 6c 65 74 74 65 72 73 20 6f 6e 20 77 6f 6f Data Ascii: $ExifMM*D(1"22IFiFAQs ( frequently asked questions ) wood letters on woo
2024-12-24 15:05:11 UTC	1338	IN	Data Raw: 1e 01 28 00 03 00 00 00 01 00 02 00 00 02 01 00 04 00 00 00 01 00 00 02 26 02 02 00 04 00 00 00 01 00 00 1b f6 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 6b 00 a0 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 Data Ascii: (&HHAdobe_CMAdobedk"?
2024-12-24 15:05:11 UTC	6690	IN	Data Raw: e8 21 97 32 25 cc a9 ae 90 5b 27 76 9f ca 97 3d bf 9b fb 8a cb ee b1 ec 05 82 97 0d c4 06 ef 77 30 df e4 7b bf 92 9e 56 28 1c a0 f2 fa 2a 78 2e 91 f4 5a fd df d5 76 43 37 fb 51 1c cb 9e 03 6d ad c0 9d 1f ed b0 13 3c 7f 45 77 a2 a0 ca ce e6 b1 fb 20 c9 d5 a0 93 13 f4 65 df f7 f4 ed 15 3b dc 4d 45 a3 4f 6d 52 ef 80 db fc 94 d4 a4 6d 36 0d 8f 1b 8c 19 00 ba dd 07 8e d7 b2 cd fc 7d 0f 62 b1 53 1c 5c 44 54 de fb 87 31 f9 df 45 b4 fb 75 43 6e d6 b4 b9 c4 96 b7 49 f4 8b 47 8f b0 3d ae 46 a5 f4 b9 c7 69 79 81 20 6d 69 99 fe 5b 9c dd 89 a4 a4 2d 6d 97 96 bb 80 5c 25 be e7 b4 13 3d a7 d4 4d 39 66 3d 46 40 1f 46 cf 68 ed a6 df d0 d6 ac f4 ec 5c ee a7 90 fa f0 2a 6b 9b 58 fd 23 9c e1 5b 5b bb e8 ef 74 58 e7 ef db f9 8b 48 7d 58 eb ac 0e 3b a9 70 88 2c 6d ee 20 eb f4 Data Ascii: !2%['v=w0{V(x.ZvC7Qm<Ew e;MEOmRm6}bS\DT1EuCnIG=Fiy mi[-m\%=M9f=F@Fh\kX#[[tXH}X;p,m
2024-12-24 15:05:11 UTC	16384	IN	Data Raw: 00 01 00 00 00 00 00 00 52 47 42 43 00 00 00 03 00 00 00 00 52 64 20 20 64 6f 75 62 40 6f e0 00 00 00 00 00 00 00 00 00 47 72 6e 20 64 6f 75 62 40 6f e0 00 00 00 00 00 00 00 00 00 42 6c 20 20 64 6f 75 62 40 6f e0 00 00 00 00 00 00 00 00 00 42 72 64 54 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 42 6c 64 20 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 52 73 6c 74 55 6e 74 46 23 50 78 6c 40 52 00 00 00 00 00 00 00 00 00 0a 76 65 63 74 6f 72 44 61 74 61 62 6f 6f 6c 01 00 00 00 00 50 67 50 73 65 6e 75 6d 00 00 00 00 50 67 50 73 00 00 00 00 50 67 50 43 00 00 00 00 4c 65 66 74 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 54 6f 70 20 55 6e 74 46 23 52 6c 74 00 00 00 00 00 00 00 00 00 00 00 00 53 63 6c 20 55 6e 74 46 Data Ascii: RGBCRd doub@oGrn doub@oBl doub@oBrdTUntF#RltBld UntF#RltRsltUntF#Pxl@RvectorDataboolPgPsenumPgPsPgPCLeftUntF#RltTop UntF#RltScl UntF
2024-12-24 15:05:11 UTC	427	IN	Data Raw: d0 53 7a 0a 74 18 f1 79 2d 28 5c c9 e6 48 63 28 c8 b3 45 5d dc 75 a0 c2 38 51 ba b5 95 d6 8f b8 bd 8b d3 60 2b f1 86 5c 12 07 a2 45 22 45 a6 9b 79 11 5b 69 90 c6 7e c8 93 a6 0e 22 39 a6 82 1e db ca b6 b3 b6 d1 95 de 9c e0 90 9d fc 69 5c 4e 4a 40 8a 29 f4 eb dd 3c 52 de e0 ba a7 40 ec 77 c0 24 24 9a a5 df a7 2f 2d ee 18 5d 69 e2 e3 92 8e 0c ac a4 7e 38 38 01 1b 15 e2 75 cb 69 b7 11 85 93 cb f2 47 23 ee 65 07 8f dd 4c 40 23 f8 94 d7 72 b4 1a 1e 9f 24 47 85 c5 cd b3 53 e1 4f 50 9a 7d f8 0c c8 e8 91 10 dd 9d 8d d5 bc a4 5a 6a fe ab ae de 94 c3 96 f8 ca 40 f3 0a 07 71 55 30 f9 90 4d c0 35 ac f5 dc d4 f1 a6 0b 87 9a 77 52 97 55 d7 ad a6 55 97 4d 93 88 a8 69 22 60 c3 e8 c2 21 13 d5 16 42 22 df 5f b6 98 88 e7 82 64 35 dc c9 19 20 7d 39 13 8c f4 48 92 f6 b9 d3 a5 Data Ascii: Szty-(\Hc(E]u8Q`+\E"Ey[i~"9i\NJ@)<R@w$$/-]i~88uiG#eL@#r$GSOP}Zj@qU0M5wRUUMi"`!B"_d5 }9H
2024-12-24 15:05:11 UTC	7018	IN	Data Raw: b4 8a e3 96 02 63 de b4 55 ae 1e e5 80 e3 1b a3 1d 9b 9a 82 30 00 12 50 ce fc 1b 8d c2 a3 2a ee 29 b1 c9 0f 24 21 64 93 76 92 28 9c f8 a8 22 87 26 03 15 08 a7 bd a8 92 65 92 15 4e c5 4b 0a 61 20 2e ed cb ac 86 e2 f1 db 89 d5 4d 19 b8 8a fd c7 11 05 e2 44 db dd 79 79 90 bc b6 d1 99 1b a8 02 86 b9 13 19 f7 a4 10 ba 18 74 29 09 a4 64 78 81 50 3f 8e 02 64 bb 28 1f 2e e9 2f 21 96 29 4c 35 dc 70 7a 10 7e 58 7c 42 bc 21 19 a7 68 57 b1 9e 49 a8 c8 1a b5 1c 80 6c 8c b2 0e e4 88 9e f4 44 d6 ba dc 25 98 dd 45 20 ad 41 65 a6 44 4a 27 a2 48 28 4b f8 7c c6 e5 1a 06 81 78 ee e7 c7 e5 92 89 82 0d a1 9a e7 58 08 d1 cf 6d 14 ae 7f 66 bb d3 27 51 e8 51 65 0f 1c d6 e8 58 dc 69 ec bb 6f c3 7a 64 88 3d 0b 17 5b 5d 68 fc cf c3 24 40 f6 60 46 f8 08 92 41 08 fb 47 d1 64 42 16 63 Data Ascii: cU0P*)$!dv("&eNKa .MDyyt)dxP?d(./!)L5pz~X\|B!hWIlD%E AeDJ'H(K\|xXmf'QQeXiozd=[]h$@`FAGdBc
2024-12-24 15:05:11 UTC	16384	IN	Data Raw: 8f f2 ba e1 89 b0 a5 42 e6 c1 25 1e a7 d5 83 ab 90 05 01 04 e1 12 f3 41 0e 87 42 43 0b 32 c1 32 57 ec b9 1c 80 ff 00 82 18 9c 8a 22 8b 36 2a b1 ac 73 34 ac 56 84 14 51 bd 3c 40 5e 99 1e 2e e4 d3 73 e9 d6 66 34 67 8e ac 37 07 80 50 7e ee 98 04 ca 90 16 2a 1e 06 18 91 8c 07 ed 83 cb 7a f8 10 70 df 55 74 ba 7c 0e 54 5b c8 f1 28 5e 26 34 95 87 d3 b9 c4 4c f5 5a 56 b7 b5 9a 2a aa dd 4a 28 28 5d 98 31 1f 2a e0 32 07 a2 40 50 95 e6 8a 8b 2d f7 aa 2b 4a b9 e2 49 f0 af 4c 90 00 f4 47 c5 0d 75 26 8c a5 0d cd 8d cd c3 96 a2 7a 72 a5 2b ee 2b 84 71 74 21 06 96 cf 75 22 5a 70 b7 d2 2e 19 4b 15 7b 79 52 84 ad 2b c9 59 79 6f 88 1b ee 42 df 92 5d 6f 0b c8 bc af ed ae 6d f9 1f 85 91 4c 81 7c 05 29 96 93 dc 43 1a ef 45 c0 ba 1a 5c 32 a5 ed c9 8e 83 e2 fa ac 84 57 ba ec 72 Data Ascii: B%ABC22W"6s4VQ<@^.sf4g7P~zpUt\|T[(^&4LZVJ((]12@P-+JILGu&zr++qt!u"Zp.K{yR+YyoB]omL\|)CE\2Wr
2024-12-24 15:05:11 UTC	16384	IN	Data Raw: fd 1b 3d 2e 18 e7 b9 17 37 f7 92 f1 a3 71 7b 99 91 ba 28 55 8b 68 d3 c0 b6 0b 24 f7 05 aa 5d 1e a3 e6 4b e1 eb 5b e9 96 d0 59 57 8c 33 5f 9f ab c9 23 0f b4 cf 1a 82 7a 72 fd be 5f ea e0 a8 8e a6 d6 c9 40 6a 70 de c5 aa 69 3a ac fa 8d b5 cc d6 77 76 ee 91 5a c3 22 d6 29 1c 47 20 e4 e7 75 3c bf 63 ed 7e d6 55 a8 88 9e 19 46 ab d2 5b f4 b3 31 cb 13 e6 f6 59 8a ac 8c a3 a1 35 a0 f0 ce 56 de 91 48 86 24 6f 4f 1f 1a 9c 55 50 b5 07 cb 0a 12 8f 36 cb c7 cb 1a b3 15 0d 4b 49 7e 1a 90 0d 56 86 a4 6e 29 d7 2d d3 ef 96 1f d7 8b 5e 7f ee e5 fd 52 f0 1d 7f 42 9a fe ca de ea 00 e6 68 23 50 ce 51 51 08 22 a1 15 49 0c 47 d1 9d a5 ee f2 63 93 5e 40 fc cd d6 bc 9f 70 f6 73 44 f7 9a 31 6a dc 69 52 b1 56 88 9f f7 64 0d fb 0d fe 4f d8 6c a7 36 11 3f 29 36 42 66 2f 7a f2 ef 9c Data Ascii: =.7q{(Uh$]K[YW3_#zr_@jpi:wvZ")G u<c~UF[1Y5VH$oOUP6KI~Vn)-^RBh#PQQ"IGc^@psD1jiRVdOl6?)6Bf/z
2024-12-24 15:05:11 UTC	16384	IN	Data Raw: 3a 6b 69 90 8f 45 1a 3b 85 01 d9 de cd a5 2a 3c 46 e0 6d d7 a6 19 0d 9a 83 2b 6f 31 ea b2 c4 60 63 13 4a 6b ca 47 82 75 14 e3 40 fc 47 c2 a7 f6 b2 af 08 73 67 c6 50 86 f7 ce 8d 1f a6 da b5 a9 89 95 42 2c b6 66 a7 7d 95 49 03 7a 61 e0 8d f2 5b 28 3d 53 cc 3e 65 d3 e3 f4 e7 fa 9d c5 4d 1d 9a da 48 d4 8a 6c 39 ab 1f f8 5c 23 18 28 32 2f 5a f2 fe b1 73 f9 8f f9 59 24 6b 66 a7 cd de 58 5f dc 5b 16 20 dc c0 17 e1 e0 d4 2e 04 d1 af a7 ff 00 19 a3 5f e6 c8 ca 34 52 0b c9 97 ce 97 2c db 5a 5c c0 87 fb be 51 92 c1 bf 94 b7 02 57 89 fb 55 c9 f8 6c 78 96 c9 e7 1d 56 2a 01 77 04 76 cf c4 b4 ad 05 d3 49 1f c5 e0 54 05 f9 af da c7 c3 0b c4 56 ff 00 8e 6e e3 bc 79 24 d5 2d a3 42 a4 17 92 09 4b 30 ea 00 42 bf 16 ff 00 f0 18 3c 38 d7 24 f1 15 af e7 bb e9 e6 79 24 be b5 f5 Data Ascii: :kiE;<Fm+o1`cJkGu@GsgPB,f}Iza[(=S>eMHl9\#(2/ZsY$kfX_[ ._4R,Z\QWUlxVwvITVny$-BK0B<8$y$
2024-12-24 15:05:11 UTC	973	IN	Data Raw: b3 b9 df 15 69 af 62 1c 6a 3d 37 fe 63 b1 fc 71 55 48 ae 22 62 3e 30 58 9e a7 14 2a cb 6d b7 c4 81 81 de a3 15 43 7d 5a 0f 53 db c7 14 bf ff d0 82 b1 d4 68 b5 55 af 6a 37 f5 19 7b 42 0e 4f ad fa 9b 71 af ed 73 a5 30 aa 85 e1 b1 e5 fe 90 ab 5e fe 99 3f c0 61 55 b0 9b 4e 2b e8 87 eb f0 d0 b7 f1 18 aa c9 83 7d 60 fa cf 70 0e dc 68 aa 57 f1 61 8a ac 98 37 ac 38 b4 65 fb fa 8a a3 f5 36 28 54 80 d8 d4 fd 68 5b 17 ed 42 c0 fe 00 e2 a9 9d a1 b0 a1 e0 18 7f aa 58 8a 7b 54 60 36 94 56 97 f5 e3 7e ff 00 a2 0b 2d c7 a6 7d 5e 54 61 c3 fd 95 37 c8 ca ab 74 8b e8 8f f2 cf e9 10 b7 14 fa bb 1a 9d e6 d8 d7 bd 3a 8c 86 5a 65 1b 75 c9 b9 fa d3 f2 16 ff 00 58 fd 9e 24 d2 9f 40 c2 39 20 a9 d6 eb fe 3e 16 d4 c7 53 d5 98 37 ea c2 a8 66 fd 19 ea 74 88 0f da a1 aa d3 e9 18 77 42 Data Ascii: ibj=7cqUH"b>0X*mC}ZShUj7{BOqs0^?aUN+}`phWa78e6(Th[BX{T`6V~-}^Ta7t:ZeuX$@9 >S7ftwB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49820	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:11 UTC	562	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/google-pay.png?ext=.png HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=c38whLe5PvhtK2l/FqeeiwHmKBT4BBpRjkBcPCLGRK77K3hafR91V1wbcjHbFakLBpqtjKlrEx6uCly0moAfn5T0iZYElTEaZPyVioMLsogDpHFg4pE47hIWNv3c
2024-12-24 15:05:11 UTC	825	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:11 GMT Content-Type: image/png Content-Length: 4378 Connection: close Set-Cookie: AWSALB=/zHoiU1Q9fjnXX28nqi0/HUvHkFUJJci0TXwlSmpAl8MxAI80fSljkppBy1+/NYjUvxeJT6gBqyMWlewb/c0H9N+g/xINY4BfzFztwex2v6s+oKF0K0Kh7J/OfhA; Expires=Tue, 31 Dec 2024 15:05:11 GMT; Path=/ Set-Cookie: AWSALBCORS=/zHoiU1Q9fjnXX28nqi0/HUvHkFUJJci0TXwlSmpAl8MxAI80fSljkppBy1+/NYjUvxeJT6gBqyMWlewb/c0H9N+g/xINY4BfzFztwex2v6s+oKF0K0Kh7J/OfhA; Expires=Tue, 31 Dec 2024 15:05:11 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 01 Jun 2021 16:26:56 GMT Accept-Ranges: bytes ETag: "7f52ff0257d71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:11 UTC	4378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ae 00 00 00 32 08 06 00 00 00 c5 a8 e0 d6 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 ae a0 03 00 04 00 00 00 01 00 00 00 32 00 00 00 00 6e c6 b7 55 00 00 10 90 49 44 41 54 78 01 ed 9d 09 ac 54 e5 15 c7 0f 8f 7d 79 ec 8a 85 22 a8 28 2a 56 b0 2c 6a 8b 24 15 03 02 49 01 cb 22 4b 4c 24 36 da 14 a2 a9 16 10 a8 02 61 b5 b1 d5 a0 15 90 34 b4 a0 44 a1 8a 11 10 1b 10 10 a5 20 05 54 b6 07 95 5d 41 94 7d df a7 e7 f7 bd 77 86 3b 77 ee cc 9b 37 33 f0 1e 70 4f 72 e7 bb f7 fb ce fd b6 fb bf e7 3b df f9 ce 77 a7 54 44 49 0a e8 c8 91 23 92 97 97 27 3b 76 ec 90 c3 87 0f 5b 74 18 86 Data Ascii: PNGIHDR2sRGB8eXIfMMi2nUIDATxT}y"(V,j$I"KL$6a4D T]A}w;w73pOr;wTDI#';v[t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49821	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:11 UTC	575	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/shutterstock_234728809d.jpg?ext=.jpg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=c38whLe5PvhtK2l/FqeeiwHmKBT4BBpRjkBcPCLGRK77K3hafR91V1wbcjHbFakLBpqtjKlrEx6uCly0moAfn5T0iZYElTEaZPyVioMLsogDpHFg4pE47hIWNv3c
2024-12-24 15:05:11 UTC	830	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:11 GMT Content-Type: image/jpeg Content-Length: 168182 Connection: close Set-Cookie: AWSALB=LAaXOyaLY2+yhHM3WMJRtuOIJK9fxpYa6DpeFoQfIIQH8gkLEg47EYUN093hb4ZShGo0Xmso5Uy3pUEd7KsVlaBeT+2YSsxVjrR/KDf/ZTsKU/dv/bh5WjvKvC+Y; Expires=Tue, 31 Dec 2024 15:05:11 GMT; Path=/ Set-Cookie: AWSALBCORS=LAaXOyaLY2+yhHM3WMJRtuOIJK9fxpYa6DpeFoQfIIQH8gkLEg47EYUN093hb4ZShGo0Xmso5Uy3pUEd7KsVlaBeT+2YSsxVjrR/KDf/ZTsKU/dv/bh5WjvKvC+Y; Expires=Tue, 31 Dec 2024 15:05:11 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Fri, 09 Sep 2022 21:02:19 GMT Accept-Ranges: bytes ETag: "d4882e738fc4d81:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:11 UTC	1841	IN	Data Raw: ff d8 ff e1 07 81 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0e 01 00 00 03 00 00 00 01 0e e2 00 00 01 01 00 03 00 00 00 01 03 20 00 00 01 02 00 03 00 00 00 03 00 00 00 b6 01 06 00 03 00 00 00 01 00 02 00 00 01 0e 00 02 00 00 00 3b 00 00 00 bc 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 f7 01 1b 00 05 00 00 00 01 00 00 00 ff 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 01 07 01 32 00 02 00 00 00 14 00 00 01 26 82 98 00 02 00 00 00 44 00 00 01 3a 87 69 00 04 00 00 00 01 00 00 01 80 00 00 01 b8 00 08 00 08 00 08 4c 6f 61 6e 20 63 6f 6e 63 65 70 74 2e 20 59 6f 75 6e 67 20 63 6f 75 70 6c 65 20 68 6f 6c 64 69 6e 67 20 61 20 77 68 69 74 65 20 6d 69 6e 69 61 74 75 72 65 20 68 6f Data Ascii: ExifMM* ;(12&D:iLoan concept. Young couple holding a white miniature ho
2024-12-24 15:05:11 UTC	4014	IN	Data Raw: 0b 9f a6 38 f8 2f 9c d2 56 fa 2c 97 47 e9 d0 9d 7c c2 92 08 0f d4 2d 4e 57 cb a9 20 b9 fa 79 dc a6 3c 2f 98 92 45 69 7e 99 3f 49 4c 2f 98 d2 45 68 7e 9c 29 97 cc 89 24 a7 e9 a2 99 7c cc 92 2a 7e 97 29 97 cd 29 22 b5 fa 5c 7c d3 fd eb e6 74 90 53 ff d9 ff ed 10 36 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 01 05 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 04 1c 02 78 00 3a 4c 6f 61 6e 20 63 6f 6e 63 65 70 74 2e 20 59 6f 75 6e 67 20 63 6f 75 70 6c 65 20 68 6f 6c 64 69 6e 67 20 61 20 77 68 69 74 65 20 6d 69 6e 69 61 74 75 72 65 20 68 6f 75 73 65 1c 02 69 00 3a 4c 6f 61 6e 2c 43 6f 6e 63 65 70 74 2e 2c 59 6f 75 6e 67 2c 43 6f 75 70 6c 65 2c 48 6f 6c 64 69 6e 67 2c 41 2c 57 68 69 74 65 2c 4d 69 6e 69 61 74 75 72 65 2c 48 6f 75 73 65 Data Ascii: 8/V,G\|-NW y</Ei~?IL/Eh~)$\|*~))"\\|tS6Photoshop 3.08BIMZ%Gx:Loan concept. Young couple holding a white miniature housei:Loan,Concept.,Young,Couple,Holding,A,White,Miniature,House
2024-12-24 15:05:11 UTC	1338	IN	Data Raw: cf 89 28 39 3f e6 fe a5 05 f7 83 c8 e3 95 a9 81 fe 0b 9f a6 38 f8 2f 9c d2 56 fa 2c 97 47 e9 d0 9d 7c c2 92 08 0f d4 2d 4e 57 cb a9 20 b9 fa 79 dc a6 3c 2f 98 92 45 69 7e 99 3f 49 4c 2f 98 d2 45 68 7e 9c 29 97 cc 89 24 a7 e9 a2 99 7c cc 92 2a 7e 97 29 97 cd 29 22 b5 fa 5c 7c d3 fd eb e6 74 90 53 ff d9 00 38 42 49 4d 04 21 00 00 00 00 00 57 00 00 00 01 01 00 00 00 0f 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 00 00 14 00 41 00 64 00 6f 00 62 00 65 00 20 00 50 00 68 00 6f 00 74 00 6f 00 73 00 68 00 6f 00 70 00 20 00 32 00 30 00 32 00 32 00 00 00 01 00 38 42 49 4d 04 06 00 00 00 00 00 07 00 04 00 00 00 01 01 00 ff e1 12 6f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 Data Ascii: (9?8/V,G\|-NW y</Ei~?IL/Eh~)$\|*~))"\\|tS8BIM!WAdobe PhotoshopAdobe Photoshop 20228BIMohttp://ns.adobe.com/xap/1.0/
2024-12-24 15:05:11 UTC	2676	IN	Data Raw: 61 74 65 3d 22 32 30 32 32 2d 30 39 2d 30 39 54 31 35 3a 35 37 3a 35 39 2d 30 35 3a 30 30 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 66 37 64 31 39 66 64 38 2d 38 38 36 64 2d 62 39 34 66 2d 39 35 37 62 2d 34 36 35 64 66 64 66 66 33 38 62 63 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 38 37 36 37 63 34 63 2d 64 65 34 65 2d 61 66 34 61 2d 38 38 39 61 2d 62 33 30 35 31 62 34 34 61 62 32 33 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 38 35 38 43 35 38 Data Ascii: ate="2022-09-09T15:57:59-05:00" xmp:CreatorTool="Adobe Photoshop 23.4 (Windows)" xmpMM:DocumentID="adobe:docid:photoshop:f7d19fd8-886d-b94f-957b-465dfdff38bc" xmpMM:InstanceID="xmp.iid:78767c4c-de4e-af4a-889a-b3051b44ab23" xmpMM:OriginalDocumentID="858C58
2024-12-24 15:05:11 UTC	1338	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-12-24 15:05:11 UTC	4014	IN	Data Raw: 9a aa ba ca da ea fa 11 00 02 02 01 02 03 05 05 04 05 06 04 08 03 03 6d 01 00 02 11 03 04 21 12 31 41 05 51 13 61 22 06 71 81 91 32 a1 b1 f0 14 c1 d1 e1 23 42 15 52 62 72 f1 33 24 34 43 82 16 92 53 25 a2 63 b2 c2 07 73 d2 35 e2 44 83 17 54 93 08 09 0a 18 19 26 36 45 1a 27 64 74 55 37 f2 a3 b3 c3 28 29 d3 e3 f3 84 94 a4 b4 c4 d4 e4 f4 65 75 85 95 a5 b5 c5 d5 e5 f5 46 56 66 76 86 96 a6 b6 c6 d6 e6 f6 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 38 48 58 68 78 88 98 a8 b8 c8 d8 e8 f8 39 49 59 69 79 89 99 a9 b9 c9 d9 e9 f9 2a 3a 4a 5a 6a 7a 8a 9a aa ba ca da ea fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f4 90 19 53 05 45 19 25 5e 30 ab 8e 2a ec 6d 57 03 8a af 46 f8 87 cf 14 a2 eb 92 64 ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ab 65 1b 60 2a Data Ascii: m!1AQa"q2#BRbr3$4CS%cs5DT&6E'dtU7()euFVfvGWgw8HXhx9IYiy:JZjz?SE%^0mWFdUWb]vUWbe`
2024-12-24 15:05:11 UTC	1338	IN	Data Raw: 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 57 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 5c 55 d5 c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a b4 71 56 c6 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab Data Ascii: Wb]vUWb]vUWWvUWb]vUWb]vUWb]vUWb]vUWb]vUWb]vUWb]\U]vUWb]vUWb]qVUWb]vUWb]vUWb]vUWb]vUWb]v*U
2024-12-24 15:05:11 UTC	2676	IN	Data Raw: 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 57 15 75 71 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bf ff d4 f4 d8 c8 a1 bc 2a ec 08 6c e2 87 0c 52 bb 14 bb 15 75 30 a5 d8 ab b1 57 62 ae ae 04 3b 0a b5 5c 55 b5 34 c5 2a c9 25 76 c2 aa 98 ab b1 57 62 ae c5 5d 8a a1 27 c8 94 a1 db 22 85 87 0a ac 6c 2a b0 e2 ab 0e 28 58 d8 42 16 36 15 58 70 2a dc 55 72 35 30 28 44 23 60 2c c2 f0 72 2c db 27 14 bb 02 5d 5c 55 d5 c5 5c 71 4a c3 81 2b 48 c5 5d 8a 5d 8a b6 30 a1 a3 8a 5a 38 a1 a3 85 0d 13 8a 56 31 db 15 42 ce d4 19 12 90 94 5e cb d7 22 c9 25 b9 97 ae 10 a9 7c d2 e4 95 05 34 95 c9 06 25 0d 5a 9c 2c 42 3e d4 74 c8 16 c4 Data Ascii: ]vUWWuqWb]vUWb]vUWb]vUWb]vUWb]lRu0Wb;\U4%vWb]'"l(XB6Xp*Ur50(D#`,r,']\U\qJ+H]]0Z8V1B^"%\|4%Z,B>t
2024-12-24 15:05:11 UTC	16384	IN	Data Raw: ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae 38 ab 86 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab a9 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d5 c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5a a6 2a ea 62 ad e2 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec 55 d8 ab b1 57 62 ae c5 5d 4c 55 d8 ab b1 57 62 ae c5 5d 8a bb 15 76 2a ec Data Ascii: ]vUWb8UWb]vUWb]vUWb]vUWb]vUWb]vUvUWb]vU]vUWb]vUWb]vUWb]vUWbZb]vUWb]vUWb]vUWb]LUWb]v
2024-12-24 15:05:11 UTC	755	IN	Data Raw: 3b f6 1b 1c c7 72 5a fb 35 db f5 60 4a d6 15 6a f1 ed 82 d2 d5 49 14 23 af be 36 95 95 2b 52 06 ff 00 3c 09 77 0a 10 68 39 7c f0 2b 5b f8 0d fd ff 00 e6 dc 2b b2 d2 5b 91 6a 0f 84 6f 53 d3 f0 c4 25 cc 0b a8 04 7c 47 70 49 3f d3 24 81 b2 c9 09 6a b5 01 15 a7 5f ec c0 59 f2 68 23 72 03 6f 86 84 7f 03 81 56 1e 45 41 14 f8 8d 07 5c 09 73 72 a9 24 80 14 53 a7 f9 fd 9f f8 db 1d d4 10 a6 55 a8 ab b0 a9 e9 4e df f0 5f 25 c0 cd 69 2d c9 dc b2 d1 36 24 03 4a fe d7 ed 7f ab 8a b8 2b 0e 29 50 6b b9 db bf fc 17 f3 e1 56 b9 38 56 7a 8a 56 83 6e b4 fa 7c 71 46 c5 70 46 0c 10 11 50 2b 5a 7e bd ff 00 6b 0a dd b9 58 85 32 57 72 68 2a 3e 8c 79 29 dd 7f 03 c8 20 3d 37 03 e8 f8 7f 8e 4e 4c 41 eb e6 f5 0f 28 ff 00 c7 2e d8 83 c8 15 24 1f 9b 1c e8 70 fd 23 dc f2 5a a3 79 25 fd Data Ascii: ;rZ5`JjI#6+R<wh9\|+[+[joS%\|GpI?$j_Yh#roVEA\sr$SUN_%i-6$J+)PkV8VzVn\|qFpFP+Z~kX2Wrh*>y) =7NLA(.$p#Zy%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49822	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:11 UTC	823	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/shutterstock_234728809_sm.jpg?ext=.jpg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=RaVcUuyEZgL3LUZe1sO8ECO0vuq3GcfsRSFfcd3wvlUi6Jlg+s7tK+Citcr7nS3vZ3uvIlsJiECm+8UesNYDDlkjLaQ6clrUTugeKi4RFFGlmI458Rw568w/xSl2
2024-12-24 15:05:12 UTC	828	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:12 GMT Content-Type: image/jpeg Content-Length: 33986 Connection: close Set-Cookie: AWSALB=Ese5RyvldH7yIt8qdott7CL+4ePAZthlGyuYOOM+weq2HbqP5CR7GboWZAIGL9I+jR/+ZvIYt9luFQ4MryFjzn6WinnJDF6YT6VBrfrmVqJxpSFbZf1elvZXyy8J; Expires=Tue, 31 Dec 2024 15:05:12 GMT; Path=/ Set-Cookie: AWSALBCORS=Ese5RyvldH7yIt8qdott7CL+4ePAZthlGyuYOOM+weq2HbqP5CR7GboWZAIGL9I+jR/+ZvIYt9luFQ4MryFjzn6WinnJDF6YT6VBrfrmVqJxpSFbZf1elvZXyy8J; Expires=Tue, 31 Dec 2024 15:05:12 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Fri, 09 Sep 2022 21:02:18 GMT Accept-Ranges: bytes ETag: "0b894728fc4d81:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:12 UTC	505	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff ed 00 da 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 be 1c 02 69 00 3a 4c 6f 61 6e 2c 43 6f 6e 63 65 70 74 2e 2c 59 6f 75 6e 67 2c 43 6f 75 70 6c 65 2c 48 6f 6c 64 69 6e 67 2c 41 2c 57 68 69 74 65 2c 4d 69 6e 69 61 74 75 72 65 2c 48 6f 75 73 65 1c 02 6e 00 0c 53 68 75 74 74 65 72 73 74 6f 63 6b 1c 02 73 00 0c 53 68 75 74 74 65 72 73 74 6f 63 6b 1c 02 74 00 43 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 62 61 72 61 6e 71 2f 53 68 75 74 74 65 72 73 74 6f 63 6b 2e 20 20 4e 6f 20 75 73 65 20 77 69 74 68 6f 75 74 20 70 65 72 6d 69 73 73 69 6f 6e 2e Data Ascii: JFIF,,"ExifMM*Photoshop 3.08BIMi:Loan,Concept.,Young,Couple,Holding,A,White,Miniature,HousenShutterstocksShutterstocktCCopyright (c) 2014 baranq/Shutterstock. No use without permission.
2024-12-24 15:05:12 UTC	8028	IN	Data Raw: 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 3e 0d 0a 09 09 09 3c 64 63 3a 64 65 73 63 72 69 70 74 69 6f 6e 3e 0d 0a 09 09 09 09 3c 72 64 66 3a 41 6c 74 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 20 78 6d 6c 3a 6c 61 6e 67 3d 22 78 2d 64 65 66 61 75 6c 74 22 3e 4c 6f 61 6e 20 63 6f 6e 63 65 70 74 2e 20 59 6f 75 6e 67 20 63 6f 75 70 6c 65 20 68 6f 6c 64 69 6e 67 20 61 20 77 68 69 74 65 20 6d 69 6e 69 61 74 75 72 65 20 68 6f 75 73 65 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 3c 2f 72 64 66 3a 41 6c 74 3e 0d 0a 09 09 09 3c 2f 64 63 3a 64 65 73 63 72 69 70 74 69 6f 6e 3e 0d 0a 09 09 3c Data Ascii: rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/"><dc:description><rdf:Alt><rdf:li xml:lang="x-default">Loan concept. Young couple holding a white miniature house</rdf:li></rdf:Alt></dc:description><
2024-12-24 15:05:12 UTC	10704	IN	Data Raw: d7 e4 4f c5 7f 11 f8 8b e1 57 c0 f9 3e 25 69 30 af d9 7c 21 e2 bd 0d b5 27 0b f3 0b 5f b6 2c 92 84 20 fd e3 30 b5 5c ff 00 cf 39 9f b1 15 fa 4d fd bf 07 89 ec ec 6f ad 24 59 ac ef 61 4b 88 1d 5b 2a c8 ea 19 48 3f 42 2b ed 38 5f 1d 5b 1f 85 55 f1 49 26 f5 56 56 f7 6e d2 eb dd 3f 95 8f ce b8 fb 22 c2 e5 38 a5 4b 2f 72 71 f8 5d da 76 92 51 93 d5 25 d2 4b 4e e9 9d 8e 91 f1 6a fe 09 07 da 16 39 d7 bf 1b 4f e9 5d df 87 7c 4f 6d e2 3b 7d d0 b6 d7 5f bd 19 fb cb 5e 30 cd e4 8a d1 f0 b7 88 25 d2 75 18 e6 43 f3 29 e4 7f 78 77 15 f5 53 c3 46 71 f7 74 67 e7 b1 c5 4e 9c ac f5 47 b3 1e 95 83 7e 71 77 27 d6 b6 2c 6f e3 d4 6c e3 9a 33 f2 c8 b9 15 91 a8 8f f4 b7 fa d7 9f 0d 1d 99 e9 4d a6 93 45 09 8f cf 4d c5 3e 53 86 a6 1e 6b 53 8c 33 9a 42 49 a5 c6 69 31 9a 00 4e 86 97 Data Ascii: OW>%i0\|!'_, 0\9Mo$YaK[*H?B+8_[UI&VVn?"8K/rq]vQ%KNj9O]\|Om;}_^0%uC)xwSFqtgNG~qw',ol3MEM>SkS3BIi1N
2024-12-24 15:05:12 UTC	9366	IN	Data Raw: ed c7 54 bd 1d 9f cf 4e a7 dc bf 09 be 2e 5b f8 ab 50 ba 75 90 72 fe 5b 44 7e fc 32 21 c3 a9 fa 71 ec 41 04 64 1c 9e f2 ef e2 04 50 c9 e5 43 b7 18 cb b7 6e 7a 57 e4 7f ed 41 fb 7c eb 1f b0 f7 ed 2a be 24 b2 b1 9f 5a f0 d5 e0 11 6b 56 50 b8 49 3e 42 76 cf 1e 78 de ab 95 60 71 b8 05 e4 6c c1 fa db e0 17 fc 14 8b e1 5f ed 13 e1 8b 7d 5b 44 f1 4e 9a b2 5c 45 ba 5d 3e f5 fe cd 7d 6c 7b 87 89 88 38 07 8d cb 95 38 e1 88 e6 ba 32 ec e6 4e 82 ab 5f 4d 77 e9 ff 00 03 fc 8f 2f 38 e1 78 d1 c4 38 53 57 4d 26 97 55 75 db f5 ee 7d 1d f1 1f e2 42 d8 e9 37 50 ee cb c8 80 a7 1f c6 08 23 9f ad 73 f7 5f 1f 6d 7c 41 f0 f5 6f a1 97 12 41 2a ab a0 fb c8 c1 b6 3a 9f a7 3f 95 79 2f 8e 7f 68 0d 1a fc 81 67 7d 6e e8 b8 2c db fa fd 7f ae 6b c2 3e 26 fe df 9f 07 7e 0d c5 75 fd b7 25 Data Ascii: TN.[Pur[D~2!qAdPCnzWA\|$ZkVPI>Bvx`ql_}[DN\E]>}l{882N_Mw/8x8SWM&Uu}B7P#s_m\|AoA:?y/hg}n,k>&~u%
2024-12-24 15:05:12 UTC	5097	IN	Data Raw: 3f da 47 c4 36 7a 96 a0 da b5 bd de 9e 19 13 fb 3a 6f 2d 67 56 c6 55 cf 2a 70 40 20 83 c1 cf 5e 95 eb 62 b1 92 c4 d4 74 f0 b4 95 49 5d 6b 6b af 9b 56 fc 59 d1 c3 78 8c 0e 11 c5 e6 d5 e5 42 8e bb 3b cb fe dd 8c 9d b5 f2 5f 23 e7 8f f8 29 17 ec 15 a8 68 9a 96 9b 75 e1 9f 15 ea 5e 38 f0 7d bd d0 97 50 d2 9a f9 19 a6 8d 8a 04 6d c0 aa 4a aa 40 da 08 27 2e 70 49 c0 a9 fe 0c fe c1 3e 15 f1 ed e6 96 b7 fe 1f 93 43 d1 ee 98 af 99 0e a9 09 d5 ac 42 c2 ef f6 86 85 15 bc b8 c3 20 40 ce e8 fb e4 8c 04 20 92 be a9 f0 f7 e1 de 8b f0 f2 da 6b 7d 2e c7 ec f0 dc 30 32 b3 b9 96 59 70 08 1b 9c f5 e0 9e 00 03 93 c0 ae af 43 8a 4b 2b 8c 5a b2 c3 06 ec 95 d9 9c fa 77 af 7e 59 7e 2e 34 57 2a 4d ad 79 53 b7 ca ed 6b f3 b7 ab 3c 3c 77 1a 64 f3 c4 d6 a5 87 8c b9 25 64 aa ca 29 4b Data Ascii: ?G6z:o-gVUp@ ^btI]kkVYxB;_#)hu^8}PmJ@'.pI>CB @ k}.02YpCK+Zw~Y~.4WMySk<<wd%d)K
2024-12-24 15:05:12 UTC	286	IN	Data Raw: de 8b 0b 36 7e e8 35 c3 51 68 7a 51 96 cc e8 ae 64 da d5 03 4a 7f c8 a7 dc 9c b5 42 47 35 9c 76 36 93 03 26 7b fe 94 d2 fc d0 4e 68 cd 51 37 60 cf 91 d7 f0 34 dd df 4a 71 e4 d1 da 82 41 5e 9d e6 53 71 c5 3b 18 14 17 11 ca f8 34 ef 32 98 88 49 eb 4f 54 a9 76 18 07 03 db f1 a3 76 3b 53 c4 5c 52 88 73 52 52 23 1f 4a 05 4a 61 db 41 8e 95 d1 44 47 f0 14 a1 73 ff 00 ea a9 76 0a 50 b9 e9 4b 98 08 c2 63 b5 28 5e 7a 54 de 4d 38 c6 b9 ef 53 71 d8 8d 52 a5 8d 30 0f 14 a8 a0 54 c2 3f f3 9a 9b 96 35 46 07 4a 72 52 63 34 ec 52 1e a2 81 cf 5a 90 0c 53 11 72 29 ea 9f 2e 7d e9 95 a8 bb b1 dc 52 f3 8a 00 c8 a3 61 a9 18 d2 dc 7d ea 69 6f 71 43 64 36 3f ad 21 eb 54 84 d8 31 fa 53 1a 86 06 9a 4e 28 b1 20 c7 8a 8e 4a 71 92 9a cd 93 54 4d d1 14 9c ad 44 fc 0e d5 24 a7 27 15 14 Data Ascii: 6~5QhzQdJBG5v6&{NhQ7`4JqA^Sq;42IOTvv;S\RsRR#JJaADGsvPKc(^zTM8SqR0T?5FJrRc4RZSr).}Ra}ioqCd6?!T1SN( JqTMD$'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49823	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:11 UTC	561	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/call_help.svg?ext=.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=mQu/6HkDebaEHjrrWxvDRw+2zBVksh9fssWV0WILhP9cmC5rkKLJkx+/5OnHmiQBzsIu+ytnzcQAmJggl5X+KgC4D17HQ2SNoj9iwkmIn1EXQU5uzjo85zXm3Sx5
2024-12-24 15:05:12 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:12 GMT Content-Type: image/svg+xml Content-Length: 1712 Connection: close Set-Cookie: AWSALB=Lhk3hd4PrAxHphhp8FtQ5f0gRomUenAjA0xbjxFkBPl+RZL8JcaMqj/nfzxr6THe/ctFVUw5Q6IzEr9YDdC6d5kE4l6sLUIF7yZDq8odBKnjc02OPV+Z29dLrYAh; Expires=Tue, 31 Dec 2024 15:05:12 GMT; Path=/ Set-Cookie: AWSALBCORS=Lhk3hd4PrAxHphhp8FtQ5f0gRomUenAjA0xbjxFkBPl+RZL8JcaMqj/nfzxr6THe/ctFVUw5Q6IzEr9YDdC6d5kE4l6sLUIF7yZDq8odBKnjc02OPV+Z29dLrYAh; Expires=Tue, 31 Dec 2024 15:05:12 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 01 Jun 2021 16:26:55 GMT Accept-Ranges: bytes ETag: "a4ff4ef257d71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:12 UTC	1712	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 34 2e 31 35 20 34 30 2e 30 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 37 64 63 35 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 33 30 2c 33 31 2e 37 35 63 2d 2e 30 36 2c 30 2d 2e 32 2d 2e 30 39 2d 37 2e 32 2d 31 2e 37 34 2d 2e 30 37 2c 30 2d 31 2e 35 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 34.15 40.06"><defs><style>.cls-1{fill:#007dc5;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path class="cls-1" d="M30,31.75c-.06,0-.2-.09-7.2-1.74-.07,0-1.52

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49824	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:11 UTC	821	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/shutterstock_1662151927.jpg?ext=.jpg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=ePgbN69bQl7dL/Zbngdx7/mXTinmJZkNZ4vnJfZGzyIeU4q8urIH6zt2QXJceZ4f7CSAgNht3OnJSu948yO52oguukXhT2f8ut/SXFarNGKDsAptOjm217AkJ8eu
2024-12-24 15:05:12 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:12 GMT Content-Type: image/jpeg Content-Length: 96938 Connection: close Set-Cookie: AWSALB=GqHFSMk9lrLS4k/trn3efumq47Orho5Yy2wLIIOLED+CeILID8xF1dYqTV483oJR4ay8wIfuZNHRcyQxmtvWEPr5wiLgiLcUjZkxGVtPeLeL1Vilxx2gXPcSjVo/; Expires=Tue, 31 Dec 2024 15:05:12 GMT; Path=/ Set-Cookie: AWSALBCORS=GqHFSMk9lrLS4k/trn3efumq47Orho5Yy2wLIIOLED+CeILID8xF1dYqTV483oJR4ay8wIfuZNHRcyQxmtvWEPr5wiLgiLcUjZkxGVtPeLeL1Vilxx2gXPcSjVo/; Expires=Tue, 31 Dec 2024 15:05:12 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 16 Aug 2022 13:54:23 GMT Accept-Ranges: bytes ETag: "2288f2b077b1d81:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:12 UTC	504	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 00 be 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 66 00 00 00 00 00 00 01 2c 00 00 00 01 00 00 01 2c 00 00 00 01 00 06 90 00 00 07 00 00 00 04 30 32 31 30 91 01 00 07 00 00 00 04 01 02 03 00 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 17 6f a0 03 00 04 00 00 00 01 00 00 0a c5 00 00 00 00 00 00 ff ed 00 e6 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 c9 1c 02 69 00 3e 43 6c 6f 73 65 2c 55 70 Data Ascii: JFIF,,ExifMM*V^(if,,02100100oPhotoshop 3.08BIMi>Close,Up
2024-12-24 15:05:12 UTC	1338	IN	Data Raw: 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 27 3f 3e 0d 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 49 6d 61 67 65 3a 3a 45 78 69 66 54 6f 6f 6c 20 31 32 2e 33 38 22 3e 0d 0a 09 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 0d 0a 09 09 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 3e 0d 0a 09 09 09 3c 64 63 3a 64 65 73 63 Data Ascii: 5M0MpCehiHzreSzNTczkc9d'?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Image::ExifTool 12.38"><rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"><rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/"><dc:desc
2024-12-24 15:05:12 UTC	2676	IN	Data Raw: 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 52 69 67 68 74 73 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 72 69 67 68 74 73 2f 22 3e 0d 0a 09 09 09 3c 78 6d 70 52 69 67 68 74 73 3a 57 65 62 53 74 61 74 65 6d 65 6e 74 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 68 75 74 74 65 72 73 74 6f 63 6b 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 69 70 74 63 26 61 6d 70 3b 75 74 6d 5f 6d 65 64 69 75 6d 3d 67 6f 6f 67 6c 65 69 6d 61 67 65 73 26 61 6d 70 3b 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 77 65 62 73 74 61 74 65 6d 65 6e 74 3c 2f 78 6d 70 52 69 67 68 74 73 3a 57 65 62 53 74 61 74 65 6d 65 6e 74 3e 0d 0a 09 09 3c 2f 72 64 66 3a 44 65 73 63 72 Data Ascii: cription rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/"><xmpRights:WebStatement>https://www.shutterstock.com/license?utm_source=iptc&utm_medium=googleimages&utm_campaign=webstatement</xmpRights:WebStatement></rdf:Descr
2024-12-24 15:05:12 UTC	4014	IN	Data Raw: 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 27 77 27 3f 3e ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 02 b1 05 dc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 Data Ascii: ?xpacket end='w'?>CC"}!1AQa"q2#B
2024-12-24 15:05:12 UTC	6690	IN	Data Raw: 74 ab b7 72 6e 3f e1 59 d7 5d 6a 0d a2 8a b2 bf cd e9 f5 a6 a1 dd 8a 59 46 ea 44 a7 10 96 c5 8b 71 ba 45 f7 35 f4 87 ec ff 00 a4 62 da 16 db d8 75 af 9d b4 38 bc fd 4a 15 c6 77 37 6a fa c7 e0 5e 93 e5 58 c6 71 db 8a fb de 12 a3 79 39 9f 07 c5 d5 ad 05 03 d8 bc 2b 67 84 5f f0 ae a6 68 b1 6f fa 56 47 85 ed 3e 55 ae 82 ea 2c 42 2b f4 45 a1 f9 8c 9d d9 cd ea 10 64 b7 15 8d 7d 6d c1 fd 45 74 b7 96 f9 35 95 7d 6b c5 36 82 2c e4 b5 7b 3c 66 b9 4d 5e df 04 d7 75 ab 41 c1 e2 b9 2d 6a df 21 be b5 cf 34 75 53 67 2f 24 78 7e 29 d1 a5 58 9e df e6 a6 a4 58 35 cd d4 ea be 84 90 2d 5c 88 64 55 78 87 35 6a 15 cd 51 24 d1 71 53 47 d0 7d 2a 24 1c d4 d1 8e 6b 43 32 64 e9 cd 4a 8d 83 50 a7 5a 90 0a a4 4c 8b 08 6a 45 6c 9a 81 3a f5 a9 53 83 4c 92 65 f9 6a 40 d5 0c 66 a4 1c 01 Data Ascii: trn?Y]jYFDqE5bu8Jw7j^Xqy9+g_hoVG>U,B+Ed}mEt5}k6,{<fM^uA-j!4uSg/$x~)XX5-\dUx5jQ$qSG}*$kC2dJPZLjEl:SLej@f
2024-12-24 15:05:12 UTC	5352	IN	Data Raw: 9a 72 d7 0c 8f 46 c3 a9 c8 39 c9 e9 4d 53 4e 41 da 90 c9 10 74 a7 0e b4 d5 e9 c5 38 52 01 47 22 9e 39 a6 63 34 f1 40 0a a6 9e a3 14 d1 52 28 e2 80 15 79 a7 af 4a 6d 48 38 14 00 a0 e2 9c a7 23 da 90 0e 69 ca b8 a6 02 83 c5 28 34 9f e7 eb 4a b4 80 76 70 28 1d 68 c5 14 00 e0 78 fa d0 29 3b 52 81 c5 00 18 a5 02 8d b9 a5 03 02 80 14 74 a0 1c 7b 52 53 b1 cd 00 03 a5 2d 20 e0 d2 8f 9a 80 10 73 45 1c 0c d2 f4 fc e9 80 01 46 73 48 3a 52 9e 45 20 0c d2 f6 a0 0e 28 c5 32 b7 0c e6 81 d2 8c 73 46 33 48 03 a0 a2 97 1c 7f f5 a8 a0 62 83 8a 31 c5 07 81 46 38 a0 40 39 a7 76 a1 46 68 ef 40 0a 68 e8 69 28 e9 40 0e 0d 91 46 72 7e 94 dc e6 94 50 03 85 2e 71 4c ce 05 2f 23 a5 03 1d 9f 96 8d d4 83 83 49 9c 50 31 d9 e6 9b bb fc 4d 14 75 14 00 87 93 40 ff 00 3c 51 b7 26 94 2f 14 Data Ascii: rF9MSNAt8RG"9c4@R(yJmH8#i(4Jvp(hx);Rt{RS- sEFsH:RE (2sF3Hb1F8@9vFh@hi(@Fr~P.qL/#IP1Mu@<Q&/
2024-12-24 15:05:12 UTC	5352	IN	Data Raw: 7c b4 d6 18 14 fc 60 53 1b 81 42 63 48 8a 5a ca d5 64 c2 9f a5 69 4e f8 15 83 ae 5d 6c 46 a9 6c b8 98 97 1f bd ba 3f 5a db d0 20 f9 87 d6 b0 ed 7f 7d 35 75 1a 04 3c 2d 78 d8 d9 6b 63 d3 c2 c7 4b 9d 36 8d 16 71 f4 ad 6c 60 7d 2a 96 91 09 d8 0f b5 5f ce 3f 3a e0 89 da c9 2c 13 74 ff 00 4a af e2 9b 8f 26 d5 bb 71 57 b4 d4 f9 4b 57 3f e3 bb df 2a d9 87 b7 a5 7b 99 7c 6d 1b 9e 1e 61 36 e5 63 82 bf 7f 3e ee 46 f5 6e 2a b3 27 15 33 fc c6 a3 ea 2b b4 f3 59 13 0a 6b 0a 95 97 8a 8d b9 a4 49 19 14 11 4e 61 cf f5 a6 b2 f7 a0 63 76 e6 9a cb 4f eb 48 46 68 28 85 97 14 d2 bc d4 c5 71 51 e3 14 01 1b 2e 78 a6 b2 f3 53 11 c5 46 57 8a 81 32 26 5e 69 36 d4 98 e6 9a cb 81 48 92 36 5c 53 1d 72 2a 62 9b 69 8c 28 02 16 19 a6 b2 54 a4 6e 14 cc e3 f2 a0 a4 44 eb 4c 75 a9 98 54 65 Data Ascii: \|`SBcHZdiN]lFl?Z }5u<-xkcK6ql`}_?:,tJ&qWKW?{\|ma6c>Fn'3+YkINacvOHFh(qQ.xSFW2&^i6H6\Srbi(TnDLuTe
2024-12-24 15:05:12 UTC	5352	IN	Data Raw: c0 cf 35 f4 0f 83 35 7f 3e 25 e6 bf 57 e6 53 8a 9a ea 7e 3d 28 ba 73 70 67 56 01 c7 d6 a3 75 c3 66 a6 44 f3 23 0c 38 c8 a4 92 3a 92 8a b2 2e 2a 09 62 e2 ad ca 98 38 fc aa 02 be d4 c9 96 c5 19 e1 cd 53 9a db 77 f2 ad 49 a2 cd 57 96 2e 39 a6 67 e4 62 4f 65 d7 8a a7 73 65 ed 5b f2 5b 71 55 e6 b2 cf 6a a5 22 6c 73 93 d9 11 9e 2a a4 d6 75 d1 cd 61 8a a7 3d 8e 2a f7 03 9e 9a db 02 a8 dc 43 83 5d 0d d5 8d 66 5d da e2 93 41 7b 18 ee b8 6f c2 a3 ab 57 10 ec aa ac 71 58 c8 e8 84 83 bd 2e 33 4c 56 e2 9c 1b 9a ce fa 9a 0e f2 f8 a0 c5 c5 00 d0 1b 8a ae 66 16 18 f1 54 52 41 93 56 37 71 de 9b d4 51 cc 4f 29 51 e0 f6 a4 10 73 57 36 66 9b e5 2e 6a 94 89 e4 2b ac 79 14 e1 1e d1 53 18 b3 d0 50 12 a9 32 5c 46 a2 f3 f8 d4 d1 35 34 2d 03 83 55 72 79 59 65 24 cd 4b 19 c9 aa 6a Data Ascii: 55>%WS~=(spgVufD#8:.b8SwIW.9gbOese[[qUj"lsua=*C]f]A{oWqX.3LVfTRAV7qQO)QsW6f.j+ySP2\F54-UryYe$Kj
2024-12-24 15:05:12 UTC	3759	IN	Data Raw: 89 ec d0 4e 0d 4c d3 61 6b 86 d2 fc 7d 14 89 9f 30 1a b8 fe 39 84 2f df 1f 9d 3e 56 4b 68 e9 2e 6e c2 f7 ac f9 f5 25 43 f7 85 72 9a c7 c4 28 e3 8f fd 60 fc eb 93 d5 3e 2b c6 8e 47 98 b5 5c ac 8e 65 73 d4 1f 59 55 3f 7a a3 3a ec 63 f8 bb 7a d7 8d dc fc 5d 8d 3f e5 af eb 54 67 f8 c3 1e 7f d6 af e7 47 b3 63 f6 88 f6 e6 f1 04 63 f8 c7 e7 4d ff 00 84 92 3c 7d e5 fc eb c2 25 f8 cd 1a 7f cb 61 d7 d6 ab 4f f1 ae 30 31 e7 af d7 34 fd 93 27 da 23 df 8f 89 e3 1f f2 d0 53 47 8a 23 fe f2 d7 cf 52 7c 6e 87 3f f1 f0 bf 9d 20 f8 dd 1f fc f7 5f fb ea 9f b2 61 ed 4f a2 17 c4 f1 67 ef af e7 52 27 89 23 3f c4 bf 9d 7c ee 9f 1b a3 27 fd 70 ff 00 be aa c4 5f 1b a3 ff 00 9e cb f9 d4 ba 76 29 54 4c fa 1a 3d 7a 32 bf 79 7f 3a 91 35 94 6e 8d 5e 07 67 f1 aa 29 02 fe f7 3f 8d 6a 5a Data Ascii: NLak}09/>VKh.n%Cr(`>+G\esYU?z:cz]?TgGccM<}%aO014'#SG#R\|n? _aOgR'#?\|'p_v)TL=z2y:5n^g)?jZ
2024-12-24 15:05:12 UTC	6690	IN	Data Raw: a3 3f 8d 76 bf 12 3c 0d fd 97 72 d7 56 e8 7c a7 3f 38 1f c2 6b 8d 2b b4 d7 cc 55 a4 e9 cb 96 47 d0 51 ac aa 46 e8 00 c0 a5 22 8a 0f 5a c4 d0 31 9a 22 95 ad a4 56 53 82 b4 a0 52 11 91 d2 9a 76 07 a9 e8 1e 03 f1 8f 9c 8b 1c 87 91 c1 15 da 2b 89 10 11 dc 57 87 59 de 3e 9d 70 b2 26 47 3d 2b d3 bc 11 e2 a4 d4 ad 55 19 b9 c5 7a 58 7c 45 fd d6 71 d6 a5 d5 1d 28 3c 51 9e 68 eb 46 30 2b b8 e6 2b de db 89 54 f1 da b9 9d 73 4b fb dc 57 5d d7 f9 56 7e ad 64 24 8c f1 58 ca 26 b0 96 a7 9b de 41 e4 49 4e 86 e3 20 56 b6 b7 a6 e0 b7 f8 56 0b 66 19 3d 2b 09 2b 33 ba 9c ae ac 69 43 71 8c 55 c8 2e 39 ac 78 a7 e7 35 66 de e7 9a b8 cc a9 53 37 6d e7 ab 91 3d 62 db 5c ee ad 08 27 dd 5d 10 9d ce 69 42 c5 f0 db a8 db 50 c7 2d 4a a7 9a d0 c8 6b c7 91 54 2f e0 c8 ad 36 19 5a ab 76 Data Ascii: ?v<rV\|?8k+UGQF"Z1"VSRv+WY>p&G=+UzX\|Eq(<QhF0++TsKW]V~d$X&AIN VVf=++3iCqU.9x5fS7m=b\']iBP-JkT/6Zv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49828	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:12 UTC	560	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/email-us.svg?ext=.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=RaVcUuyEZgL3LUZe1sO8ECO0vuq3GcfsRSFfcd3wvlUi6Jlg+s7tK+Citcr7nS3vZ3uvIlsJiECm+8UesNYDDlkjLaQ6clrUTugeKi4RFFGlmI458Rw568w/xSl2
2024-12-24 15:05:12 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:12 GMT Content-Type: image/svg+xml Content-Length: 1758 Connection: close Set-Cookie: AWSALB=rFikzQzQXlVv8X/S4DMGx27r0jMnBgTedTjSVFyleVadAlaA0xE6ede5XIAKupPAmCLgG4tViDruNqZK99nsGr1WjyLIKyOIN0mr2Gd2Hvx2eqGa6psZuv0dME5p; Expires=Tue, 31 Dec 2024 15:05:12 GMT; Path=/ Set-Cookie: AWSALBCORS=rFikzQzQXlVv8X/S4DMGx27r0jMnBgTedTjSVFyleVadAlaA0xE6ede5XIAKupPAmCLgG4tViDruNqZK99nsGr1WjyLIKyOIN0mr2Gd2Hvx2eqGa6psZuv0dME5p; Expires=Tue, 31 Dec 2024 15:05:12 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 01 Jun 2021 16:26:55 GMT Accept-Ranges: bytes ETag: "49789f0257d71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:12 UTC	1758	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 31 2e 30 33 32 22 20 68 65 69 67 68 74 3d 22 34 31 2e 31 30 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 31 2e 30 33 32 20 34 31 2e 31 30 32 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 66 66 66 3b 73 74 72 6f 6b 65 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 2e 34 39 39 20 30 2e 35 36 36 29 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 2e 30 30 31 20 30 2e 30 30 34 29 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="41.032" height="41.102" viewBox="0 0 41.032 41.102"><defs><style>.a{fill:#fff;stroke:#fff;}</style></defs><g transform="translate(0.499 0.566)"><g transform="translate(0.001 0.004)"><g transform="translate(0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49829	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:12 UTC	561	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/Feedbacks.svg?ext=.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=ePgbN69bQl7dL/Zbngdx7/mXTinmJZkNZ4vnJfZGzyIeU4q8urIH6zt2QXJceZ4f7CSAgNht3OnJSu948yO52oguukXhT2f8ut/SXFarNGKDsAptOjm217AkJ8eu
2024-12-24 15:05:12 UTC	830	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:12 GMT Content-Type: image/svg+xml Content-Length: 2420 Connection: close Set-Cookie: AWSALB=sSZMZdA94O1IGK0TphnKCeBBwUMSfhk9y7fxM+s8if6MWGSsxi5nxo2HpMY+v0VUBO73Rv+aZ3WR6N1sVdPFYhk7DQeutQ/PxtDu7zcFdEMo4fc1M8z73bvEWzLR; Expires=Tue, 31 Dec 2024 15:05:12 GMT; Path=/ Set-Cookie: AWSALBCORS=sSZMZdA94O1IGK0TphnKCeBBwUMSfhk9y7fxM+s8if6MWGSsxi5nxo2HpMY+v0VUBO73Rv+aZ3WR6N1sVdPFYhk7DQeutQ/PxtDu7zcFdEMo4fc1M8z73bvEWzLR; Expires=Tue, 31 Dec 2024 15:05:12 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 01 Jun 2021 16:26:56 GMT Accept-Ranges: bytes ETag: "d0f21bf0257d71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:12 UTC	503	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 39 2e 38 36 31 22 20 68 65 69 67 68 74 3d 22 34 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 39 2e 38 36 31 20 34 33 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 66 66 66 3b 73 74 72 6f 6b 65 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 2e 35 20 2d 33 35 2e 34 34 38 29 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 33 35 2e 39 34 38 29 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 34 36 2e 35 2c 34 35 2e 39 32 37 68 2d 36 2e 31 38 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="49.861" height="43" viewBox="0 0 49.861 43"><defs><style>.a{fill:#fff;stroke:#fff;}</style></defs><g transform="translate(0.5 -35.448)"><g transform="translate(0 35.948)"><path class="a" d="M46.5,45.927h-6.18
2024-12-24 15:05:12 UTC	1917	IN	Data Raw: 36 35 2d 32 2e 33 36 35 56 35 35 2e 31 36 37 61 2e 37 31 36 2e 37 31 36 2c 30 2c 31 2c 30 2d 31 2e 34 33 31 2c 30 76 35 2e 30 38 36 61 2e 39 33 35 2e 39 33 35 2c 30 2c 30 2c 31 2d 2e 39 33 34 2e 39 33 34 48 37 2e 32 33 33 61 2e 37 31 35 2e 37 31 35 2c 30 2c 30 2c 30 2d 2e 35 30 36 2e 32 31 4c 31 2e 36 31 38 2c 36 36 2e 35 30 35 61 2e 31 30 39 2e 31 30 39 2c 30 2c 30 2c 31 2d 2e 31 38 36 2d 2e 30 37 37 56 33 38 2e 33 31 33 61 2e 39 33 35 2e 39 33 35 2c 30 2c 30 2c 31 2c 2e 39 33 34 2d 2e 39 33 34 48 33 37 2e 39 35 61 2e 39 33 35 2e 39 33 35 2c 30 2c 30 2c 31 2c 2e 39 33 34 2e 39 33 34 76 31 33 2e 37 61 2e 37 31 36 2e 37 31 36 2c 30 2c 30 2c 30 2c 31 2e 34 33 31 2c 30 76 2d 34 2e 36 36 48 34 36 2e 35 61 2e 39 33 35 2e 39 33 35 2c 30 2c 30 2c 31 2c 2e 39 33 Data Ascii: 65-2.365V55.167a.716.716,0,1,0-1.431,0v5.086a.935.935,0,0,1-.934.934H7.233a.715.715,0,0,0-.506.21L1.618,66.505a.109.109,0,0,1-.186-.077V38.313a.935.935,0,0,1,.934-.934H37.95a.935.935,0,0,1,.934.934v13.7a.716.716,0,0,0,1.431,0v-4.66H46.5a.935.935,0,0,1,.93

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49833	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:12 UTC	614	OUT	GET /Content/images/read-article-arrow.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=uG8t5IYOzTPzciI/KmMWKdp6X6QY8yW1ug7J0ZPJaCsCoUr72LOcCgdE1NFmfSBSPNpL7LHJVLTpd/tzw0Z8WmzxtVJYIAZQTA/CLED0SSsZaqL3GbtmmCoaHpMK
2024-12-24 15:05:13 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:13 GMT Content-Type: image/svg+xml Content-Length: 366 Connection: close Set-Cookie: AWSALB=i+v+70DzV7K9VlhVwlzcbT4VpOWTr3wWbr6BGOsGrVmpXcZnmI5XIMxjUuLsot6aFDCmGnW7zyMvd/S823BuSm2FEKfaWDPUbcBqRKyxSSsbgY51kyD+Yi1l1T5p; Expires=Tue, 31 Dec 2024 15:05:13 GMT; Path=/ Set-Cookie: AWSALBCORS=i+v+70DzV7K9VlhVwlzcbT4VpOWTr3wWbr6BGOsGrVmpXcZnmI5XIMxjUuLsot6aFDCmGnW7zyMvd/S823BuSm2FEKfaWDPUbcBqRKyxSSsbgY51kyD+Yi1l1T5p; Expires=Tue, 31 Dec 2024 15:05:13 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:13 UTC	366	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 2e 30 30 34 22 20 68 65 69 67 68 74 3d 22 31 30 2e 30 30 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 2e 30 30 34 20 31 30 2e 30 30 33 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 37 32 61 39 35 31 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 31 39 2e 35 2c 31 36 2e 35 48 39 2e 35 32 36 6c 33 2e 38 32 31 2d 33 2e 36 33 39 61 2e 35 2e 35 2c 30 2c 30 2c 30 2d 2e 36 39 2d 2e 37 32 34 4c 38 2e 32 39 33 2c 31 36 2e 32 39 34 41 31 2c 31 2c 30 2c 30 2c 30 2c 38 2e 33 2c 31 37 2e 37 31 37 6c 34 2e 33 35 35 2c 34 2e 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="12.004" height="10.003" viewBox="0 0 12.004 10.003"><defs><style>.a{fill:#72a951;}</style></defs><path class="a" d="M19.5,16.5H9.526l3.821-3.639a.5.5,0,0,0-.69-.724L8.293,16.294A1,1,0,0,0,8.3,17.717l4.355,4.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49830	142.250.181.68	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:13 UTC	972	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Le4f5AqAAAAACMx6SI8VYM7etmAXowUb1ykbHGZ&co=aHR0cHM6Ly93d3cubW9ydGdhZ2VxdWVzdGlvbnMuY29tOjQ0Mw..&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=6zhzv74on36j HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:13 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 24 Dec 2024 15:05:13 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-D0qlN9VRPH5PVVMwrl2X1w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-24 15:05:13 UTC	229	IN	Data Raw: 35 37 39 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 Data Ascii: 579f<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cy
2024-12-24 15:05:13 UTC	1390	IN	Data Raw: 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 41 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 Data Ascii: rillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A64
2024-12-24 15:05:13 UTC	1390	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 42 41 2c 20 55 2b 30 32 42 44 2d 30 32 43 35 2c 20 55 2b 30 32 43 37 2d 30 32 43 43 2c 20 55 2b 30 32 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02
2024-12-24 15:05:13 UTC	1390	IN	Data Raw: 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 Data Ascii: font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-12-24 15:05:13 UTC	1390	IN	Data Raw: 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 Data Ascii: ormat('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* cyrillic-ext */@font-face { font-family: '
2024-12-24 15:05:13 UTC	1390	IN	Data Raw: 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a Data Ascii: /s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */
2024-12-24 15:05:13 UTC	1390	IN	Data Raw: 33 75 6a 35 56 70 6b 6e 76 74 5f 4c 6e 66 4e 62 46 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 44 30 71 6c 4e 39 56 52 50 48 35 50 56 56 4d 77 72 6c 32 58 31 77 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 20 63 6c 61 73 73 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 3e 3c 2f 64 69 76 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 2d 74 6f 6b 65 6e 22 20 76 61 6c 75 65 3d 22 30 33 41 46 63 57 65 41 37 4d 72 4a 42 34 74 53 30 41 38 59 41 61 2d 59 38 75 34 4f 4e 77 39 39 73 55 48 6c 37 36 34 6c 6e 53 72 77 56 6c 6b Data Ascii: 3uj5Vpknvt_LnfNbF/recaptcha__en.js" nonce="D0qlN9VRPH5PVVMwrl2X1w"> </script></head><body><div id="rc-anchor-alert" class="rc-anchor-alert"></div><input type="hidden" id="recaptcha-token" value="03AFcWeA7MrJB4tS0A8YAa-Y8u4ONw99sUHl764lnSrwVlk
2024-12-24 15:05:13 UTC	1390	IN	Data Raw: 6d 56 5a 50 33 46 5f 47 4b 6b 66 30 38 44 2d 58 42 4c 63 2d 38 46 38 51 5a 78 45 76 2d 54 38 32 57 39 41 62 47 69 49 79 33 73 48 33 6f 4d 32 54 34 6a 57 57 5a 51 63 69 46 35 35 32 57 57 42 45 36 4e 75 44 53 48 62 66 48 39 65 4b 35 4a 36 78 35 50 4f 67 38 47 56 39 54 43 4f 63 74 6d 44 64 73 33 6c 71 49 61 6a 31 31 4f 78 33 45 62 7a 53 72 6d 42 38 4d 70 75 46 51 37 4b 6c 4e 6d 61 2d 39 34 38 59 79 34 61 75 4a 51 5f 71 67 45 71 50 4c 75 4a 2d 32 42 6e 44 43 7a 47 72 69 52 70 44 36 38 39 6d 78 64 78 33 42 6e 54 6f 35 31 2d 70 50 44 62 5f 53 70 67 62 41 4e 56 63 45 63 61 34 56 70 5f 55 4d 33 57 4a 61 38 6c 35 55 50 79 64 4a 63 66 36 56 53 4b 79 78 6a 50 48 6f 2d 75 46 7a 33 63 5a 58 70 78 32 34 71 6f 35 7a 4e 6d 61 43 31 71 6d 76 35 36 75 2d 37 43 32 52 6b 6a Data Ascii: mVZP3F_GKkf08D-XBLc-8F8QZxEv-T82W9AbGiIy3sH3oM2T4jWWZQciF552WWBE6NuDSHbfH9eK5J6x5POg8GV9TCOctmDds3lqIaj11Ox3EbzSrmB8MpuFQ7KlNma-948Yy4auJQ_qgEqPLuJ-2BnDCzGriRpD689mxdx3BnTo51-pPDb_SpgbANVcEca4Vp_UM3WJa8l5UPydJcf6VSKyxjPHo-uFz3cZXpx24qo5zNmaC1qmv56u-7C2Rkj
2024-12-24 15:05:13 UTC	1390	IN	Data Raw: 70 4b 62 33 5a 58 64 7a 51 33 59 57 52 6d 59 7a 63 77 55 56 64 71 57 46 4a 4f 51 6b 4a 7a 64 54 5a 42 61 47 68 68 52 58 5a 79 4c 31 42 68 4c 30 70 32 65 48 4a 31 4e 69 39 51 53 33 64 56 64 57 45 32 56 6d 31 6b 54 58 5a 6b 59 57 30 35 56 6c 4e 71 54 46 42 7a 64 47 56 4f 4d 30 35 7a 53 46 49 76 4e 6b 39 6f 61 56 56 6f 61 58 45 31 4e 32 35 52 53 48 4e 52 52 47 4a 4e 62 47 49 32 63 33 6b 7a 54 32 74 36 59 30 46 6f 5a 48 68 69 63 32 6c 77 4c 33 68 4a 52 44 49 34 5a 57 6c 4e 54 56 52 47 5a 31 4e 6b 52 57 74 6a 57 6d 49 77 53 6d 78 72 51 6d 5a 32 53 47 6b 78 64 56 68 61 4c 31 56 50 57 57 4d 34 52 56 70 30 4e 30 4a 45 53 30 56 32 62 30 34 30 61 44 42 54 62 6d 68 79 56 57 5a 4b 64 47 64 43 59 55 35 49 57 56 56 51 61 32 6c 36 54 6b 64 52 56 30 46 6e 53 46 4a 6c 4d Data Ascii: pKb3ZXdzQ3YWRmYzcwUVdqWFJOQkJzdTZBaGhhRXZyL1BhL0p2eHJ1Ni9QS3dVdWE2Vm1kTXZkYW05VlNqTFBzdGVOM05zSFIvNk9oaVVoaXE1N25RSHNRRGJNbGI2c3kzT2t6Y0FoZHhic2lwL3hJRDI4ZWlNTVRGZ1NkRWtjWmIwSmxrQmZ2SGkxdVhaL1VPWWM4RVp0N0JES0V2b040aDBTbmhyVWZKdGdCYU5IWVVQa2l6TkdRV0FnSFJlM
2024-12-24 15:05:13 UTC	1390	IN	Data Raw: 53 45 6b 33 4e 44 42 48 52 54 4e 47 61 54 63 31 56 33 6f 79 64 54 46 31 4f 54 45 34 62 45 5a 4d 57 55 46 4c 5a 6e 6c 30 55 7a 42 4c 56 57 4e 43 62 6b 52 54 59 33 6c 53 55 57 70 79 64 6d 74 4c 64 7a 68 31 63 30 46 52 65 47 4a 48 4c 31 6f 31 4d 56 46 53 5a 57 59 77 52 54 68 53 65 6b 4a 4e 54 45 31 4f 61 55 4a 52 64 56 68 70 64 47 4a 31 61 33 45 78 4e 33 59 32 55 6d 49 30 65 48 63 7a 57 6a 4e 6d 52 45 6b 79 51 33 55 34 4d 6b 5a 6f 65 6b 4a 5a 52 6a 4a 57 53 30 6c 4e 4e 48 52 75 4d 6d 78 76 57 6d 52 54 63 6c 64 4c 57 6c 6c 53 51 6e 6c 6e 52 6d 55 7a 65 58 4a 4c 62 6c 41 35 5a 44 64 79 65 6c 6c 45 61 47 4a 56 55 32 46 6d 4e 33 68 74 4d 58 46 36 64 32 68 48 65 6d 35 51 52 6d 6c 72 63 6c 70 77 55 57 56 44 56 32 55 35 53 6b 52 49 4b 30 56 55 59 32 52 5a 65 6a 4a Data Ascii: SEk3NDBHRTNGaTc1V3oydTF1OTE4bEZMWUFLZnl0UzBLVWNCbkRTY3lSUWpydmtLdzh1c0FReGJHL1o1MVFSZWYwRThSekJNTE1OaUJRdVhpdGJ1a3ExN3Y2UmI0eHczWjNmREkyQ3U4MkZoekJZRjJWS0lNNHRuMmxvWmRTcldLWllSQnlnRmUzeXJLblA5ZDdyellEaGJVU2FmN3htMXF6d2hHem5QRmlrclpwUWVDV2U5SkRIK0VUY2RZejJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49837	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:13 UTC	912	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/shutterstock_1070766050-2_1.jpg?ext=.jpg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=/zHoiU1Q9fjnXX28nqi0/HUvHkFUJJci0TXwlSmpAl8MxAI80fSljkppBy1+/NYjUvxeJT6gBqyMWlewb/c0H9N+g/xINY4BfzFztwex2v6s+oKF0K0Kh7J/OfhA
2024-12-24 15:05:13 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:13 GMT Content-Type: image/jpeg Content-Length: 76073 Connection: close Set-Cookie: AWSALB=CMt0wvOCiwKnjDlGgjsGqVCngJntNeTz9CMP5yikwBvz5qpOKYoSoklgyY+D+vzwvVhfdvvGt6Lpz3DlmZBMrZRRnIN8ilUouv14xrnNJ7nbgk/Fx9/H3IxkV82Q; Expires=Tue, 31 Dec 2024 15:05:13 GMT; Path=/ Set-Cookie: AWSALBCORS=CMt0wvOCiwKnjDlGgjsGqVCngJntNeTz9CMP5yikwBvz5qpOKYoSoklgyY+D+vzwvVhfdvvGt6Lpz3DlmZBMrZRRnIN8ilUouv14xrnNJ7nbgk/Fx9/H3IxkV82Q; Expires=Tue, 31 Dec 2024 15:05:13 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 16 Aug 2022 13:54:24 GMT Accept-Ranges: bytes ETag: "b7c287b177b1d81:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:13 UTC	3180	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 00 82 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 01 2c 00 00 00 01 00 00 01 2c 00 00 00 01 00 02 a0 02 00 04 00 00 00 01 00 00 15 60 a0 03 00 04 00 00 00 01 00 00 0e 40 00 00 00 00 00 00 ff ed 00 e8 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 cc 1c 02 69 00 37 59 6f 75 6e 67 2c 42 6c 61 63 6b 2c 43 6f 75 70 6c 65 2c 55 73 69 6e 67 2c 4c 61 70 74 6f 70 2c 53 69 74 74 69 6e 67 2c 4f 6e 2c 54 68 65 2c 46 6c 6f 6f 72 2c 41 74 1c 02 6e 00 0c 53 68 75 74 74 65 72 73 Data Ascii: JFIF,,ExifMM*JR(iZ,,`@Photoshop 3.08BIMi7Young,Black,Couple,Using,Laptop,Sitting,On,The,Floor,AtnShutters
2024-12-24 15:05:13 UTC	1338	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-12-24 15:05:13 UTC	8028	IN	Data Raw: 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 Data Ascii: }!1AQa"q2#BR$3br%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
2024-12-24 15:05:13 UTC	2676	IN	Data Raw: ae aa c2 d7 05 7b d4 36 96 b8 c5 6b 59 43 fc f9 a3 94 9e 66 5a b0 b7 e0 56 a5 b4 7f e7 d6 aa da a7 22 b4 2d c7 cb 54 49 2a 47 85 ff 00 3c d4 17 f6 fe 64 6c b8 f6 ab 91 1c d3 66 8b 72 9a 4c 71 dc e1 f5 9d 06 39 89 dc 8a df 51 9a e7 75 0f 02 69 f7 6c 7c cb 1b 76 cf 7d 95 e9 57 76 02 4e bd eb 3e 6d 21 4f 6f d2 b2 94 4d e3 23 cb 6f 7e 0d 68 d7 07 2b 6e d0 b1 ef 1b e2 b3 e6 f8 37 f6 7c b5 9e a7 79 07 b1 39 15 eb 13 68 b9 fe 1a ab 2e 8f ed 59 ca 99 b4 66 79 4b 78 3b c4 ba 5a ff 00 a3 ea 51 dc 01 d0 48 30 6a 09 f5 df 17 68 c9 f3 58 47 73 b7 ba 3f 5a f5 59 f4 8c 2f 4a a3 75 a4 90 b9 db 59 4a 1d 8d 23 24 79 0c 3f 16 3c 65 25 ea c2 b6 f1 69 cc c4 8d c2 36 dc 3f 1a ed 74 39 35 ef 18 5b 43 0e b1 ab 5e 5f 40 ae 24 11 48 fb 90 37 a8 1f 8d 6c dc 68 fb 90 fc bd 88 e9 5b Data Ascii: {6kYCfZV"-TI*G<dlfrLq9Quil\|v}WvN>m!OoM#o~h+n7\|y9h.YfyKx;ZQH0jhXGs?ZY/JuYJ#$y?<e%i6?t95[C^_@$H7lh[
2024-12-24 15:05:13 UTC	2093	IN	Data Raw: 36 54 1c d7 c1 3f 12 af 6e 35 9b 0b ab a6 9a f2 e2 f3 52 92 4b 99 cc 88 02 bc 8e ec ec c0 8e 09 6c 64 70 07 c9 8c 74 cf 9b ed 15 49 f3 2d 8f 7e 18 79 50 a3 c9 2d f7 67 43 ff 00 04 e1 d1 2d fc 6b fb 51 f8 0e 3b d5 f3 6d cd f1 8b cb 77 d8 19 82 39 c7 07 d1 54 e4 76 04 7a 01 fd 0c f8 23 48 d3 bc 23 e0 88 6d 6d 6d e2 8d 76 00 8a 80 2a 46 30 38 03 3e a3 d7 b0 1c 62 bf 9b bf f8 27 f7 c4 1f f8 57 7f b6 8f c3 33 23 b0 b7 9b c4 b6 50 1c b7 01 65 94 42 71 c7 75 95 87 6f d6 bf a1 5d 67 f6 89 f8 63 e0 3b 05 b5 d7 bc 65 65 a0 df b7 ee d2 3d 5e de 6d 3e 39 8f ac 72 cc 88 8c 0f a8 62 3e a0 d7 8b 9c 39 aa eb 95 69 cb fa b3 e9 b8 71 c1 e1 1a 7b f3 7e 8a c7 3b f1 71 6d ef 25 69 5a 35 db c8 c3 74 3c 1a f9 d7 e2 9d c4 7e 41 8e 34 5d ca 9f 2e de d5 ed 3e 3c f1 76 99 ae 5a 34 Data Ascii: 6T?n5RKldptI-~yP-gC-kQ;mw9Tvz#H#mmmv*F08>b'W3#PeBquo]gc;ee=^m>9rb>9iq{~;qm%iZ5t<~A4].><vZ4
2024-12-24 15:05:13 UTC	6690	IN	Data Raw: 3e b8 15 34 ed b9 ee 3f eb a4 4b fc cd 53 b3 93 72 c5 fe d4 cc 6a 64 93 cc 9a e3 de e9 07 d7 09 9f eb 5e c4 4e 27 b9 b5 e5 63 4e 55 fe f4 8b 5a 11 47 b3 43 00 7f cb 42 01 fc ea 8c 8c 12 0b 70 38 cb 93 f9 0a d7 f2 82 e9 d6 ab fd e7 5f e7 56 23 4b 4f 5f 28 dc b7 f7 40 1f 4e 29 9e 09 b7 f3 bc 67 6a df f3 c6 19 24 fa 74 1f d6 a6 45 db 61 72 de ac 68 f0 3d ed bc 57 ed 71 27 9a 8f 24 5e 52 82 a3 81 9e bc 7d 2a 25 24 b4 64 d9 b4 cd 0f 13 1f f8 9e 42 df f4 c7 a7 e2 6b e4 5f f8 2a c7 ed b3 e1 3f 00 7c 1a bc f0 2e 9e d7 1e 28 f1 4c 93 d8 36 a5 a5 69 b0 99 c5 b4 10 df 5b 5c 4d 0d c3 fd c8 fc c8 81 52 ac 78 56 62 fb 57 93 f4 57 ed 3d e3 29 3e 1f fc 3e 9b 5c b3 d5 2d 34 f9 37 6c 17 13 29 65 b7 89 23 79 66 93 01 1f 76 c8 a3 92 4d b8 1b b6 6d 0c a5 83 0f cd bf db 63 e2 Data Ascii: >4?KSrjd^N'cNUZGCBp8_V#KO_(@N)gj$tEarh=Wq'$^R}%$dBk_?\|.(L6i[\MRxVbWW=)>>\-47l)e#yfvMmc
2024-12-24 15:05:13 UTC	8028	IN	Data Raw: b8 28 f8 eb fc 2b 86 c7 bf 15 af e0 ed 2d 2c 34 a5 b7 f2 d5 65 b5 1e 43 be 77 34 98 e8 cc 7a 92 46 0e 4d 5c d7 f4 34 d6 34 49 ad d9 a4 5d c3 72 b2 70 ca c0 e4 11 f8 81 5a 46 d1 91 12 8c a5 0d cb 1a 3d 9c 5a 64 1e 5c 7b b9 39 2e cc 59 dc fa 93 d6 ae e9 d7 9e 45 e4 b6 e5 b9 1f bc 5f 70 7a fe 47 f9 d6 2d ae ae b2 da 43 e4 ab 5d 4f b1 49 10 9d f8 27 83 96 e9 eb f9 55 1d 56 7d 54 5e d8 cc cf 6f 63 f3 34 4c a8 be 73 61 97 23 9e 9f 78 7e 95 51 bd fd e1 ca 51 b2 71 fc 0d 1f 8a 5f 12 2c be 1b e8 12 6a 97 b7 10 c1 0d be 4c 9b db 1b 87 60 3d 4e 71 81 5e 7b a0 dc cd a9 69 71 5c 5d e4 dc 4f 99 a5 cf 67 6e 48 fc 33 8f c2 bc c3 f6 c8 f1 bd 9d ce ab e1 7f 08 ac ad 77 aa f8 93 57 85 d9 a4 3b 9a 3b 68 19 65 90 e3 b0 c8 44 e3 fb e2 bd 23 4b ba f2 ec 57 91 5e 6d 6a ca 75 39 Data Ascii: (+-,4eCw4zFM\44I]rpZF=Zd\{9.YE_pzG-C]OI'UV}T^oc4Lsa#x~QQq_,jL`=Nq^{iq\]OgnH3wW;;heD#KW^mju9
2024-12-24 15:05:13 UTC	5352	IN	Data Raw: a7 dd 58 11 d7 eb 5b fd 6a 06 6b 2f a9 d2 df 99 e6 70 fe d6 da 5e 8b aa f8 ba 5d 5b 58 d1 74 5d 26 2b b4 4b 79 2e 2e 50 2e 41 3b c0 04 fd e3 c9 38 07 a5 79 6e b7 fb 7f e9 3a 96 98 b6 be 1f 6b 8d 7a e0 12 12 79 a3 30 5a c0 a4 b1 c0 c8 dc fc 60 60 70 6b d3 ad 3f 62 af 80 d6 37 51 cd 1f c2 0f 07 79 ca 72 b2 c9 03 c8 ea 7e ac e4 d7 4b 6b fb 39 7c 2c b1 40 2d fe 1c f8 66 25 ea 04 70 b2 ff 00 26 ae 59 56 9d ad 1b 23 ba 9e 12 92 77 a9 76 7c ef 07 c6 2b ef 15 df 9b cd 62 fb 79 93 fe 59 29 db 10 18 fb a1 73 d2 bb 3f 0e 78 a2 ff 00 55 55 fe cd d1 ef af 33 8c 79 76 e7 0d f8 e3 1f ad 7b 66 93 f0 9b c0 9a 34 82 6b 3f 05 68 56 f2 2f 01 d6 13 b9 7f 12 6b a6 b1 3a 75 9f cd 6f 61 0c 7f 46 6e 3f 5a e3 74 5b 77 94 8f 43 db 46 2a d1 89 e3 76 5e 10 f1 b6 ad 01 68 f4 68 74 f8 Data Ascii: X[jk/p^][Xt]&+Ky..P.A;8yn:kzy0Z``pk?b7Qyr~Kk9\|,@-f%p&YV#wv\|+byY)s?xUU3yv{f4k?hV/k:uoaFn?Zt[wCF*v^hht
2024-12-24 15:05:13 UTC	8028	IN	Data Raw: be 11 f0 42 78 07 44 f0 cf 86 ed e1 b7 5b 8d 67 59 4b 78 a4 9b 66 d8 64 79 0d ba b1 dd 91 b8 35 c2 11 9c 0c e4 66 b9 3f db ff 00 c1 96 bf 0d 7e 2e f8 17 43 d7 af 20 7f b1 f8 97 4d d7 64 d8 be 62 dd 08 ec 35 19 14 9f 94 7c cf 73 69 28 21 80 3b 62 42 46 18 16 cb f1 df ed b5 e1 5f 10 78 e2 ce c3 42 5b cd 62 38 ac 27 92 27 b5 70 b1 bc c9 2d b2 b2 85 25 77 6d f3 15 88 c8 24 29 3c 02 33 f3 9f ed b3 f1 72 f3 c4 ba 76 87 73 7f a9 5c 5d 6a 57 be 2d 59 a5 12 da ac 05 08 d3 ee c2 fc ca 09 93 0a 42 65 9d b0 02 81 81 8c 45 4a 35 2e a7 f6 7a af 9a 1d 37 1d 9e fd 19 6b e2 e7 c5 7d 5b f6 9c f8 d3 6b a1 86 6b 7d 1e 19 e2 8e 68 d4 f9 58 40 32 4b 73 f9 f3 c1 cd 7a d7 8a bc 6b 3f c3 af 85 4d 6f e1 fb 5b 51 ab ea 42 1d 2b 46 b7 8b e6 0f 71 30 44 5d b8 ed 1c 64 31 27 80 49 af Data Ascii: BxD[gYKxfdy5f?~.C Mdb5\|si(!;bBF_xB[b8''p-%wm$)<3rvs\]jW-YBeEJ5.z7k}[kk}hX@2Kszk?Mo[QB+Fq0D]d1'I
2024-12-24 15:05:14 UTC	9366	IN	Data Raw: 39 ca 91 24 52 2e ff 00 b5 bc 6c 41 0c 5f e5 23 06 bd 46 fb e2 a7 c4 6d 27 e3 ef ed 05 f1 46 67 b5 d4 74 cf 84 be 12 d6 0f 83 e7 71 1d ed ac b7 d6 ba 75 e1 83 73 8d 92 98 c4 96 17 72 b8 75 38 8e fc ed 7e 49 36 3e 02 69 d3 68 df b3 77 c5 af da 3b c3 3a a2 da 6b de 3d bb ba bc d0 5a 79 09 48 ad 6d 77 58 e9 36 a6 54 f9 d4 2c c4 a1 c8 75 2a ea 76 9e 33 9b fb 39 78 6b 5e f0 a7 fc 12 ab e2 c5 f7 8e a5 8e 4b 8d 5b c1 7a e5 f4 37 93 c7 13 7d b2 1b a8 3f b3 ad 77 cb 1e d0 e1 ed 60 81 cb 6c 47 1f 6a 7c e4 b1 ae 3a 73 b2 93 6f 57 ee fc f7 7f d7 63 b2 71 d9 25 a6 e7 cb 5f b1 4f 87 fc 63 f0 b3 f6 31 fd a7 be 23 e8 97 4f aa 58 cd a9 7f c2 3d 71 79 34 90 cc f7 89 a6 69 b1 66 63 e6 90 df 33 dd 3b ee 46 c1 3b b8 e9 5f 3c 7e c6 7e 15 d6 bf 67 ef d9 d5 74 9d 36 28 6e 35 4f Data Ascii: 9$R.lA_#Fm'Fgtqusru8~I6>ihw;:k=ZyHmwX6T,u*v39xk^K[z7}?w`lGj\|:soWcq%_Oc1#OX=qy4ifc3;F;_<~~gt6(n5O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49840	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:13 UTC	651	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/Banner_Covid.jpg?ext=.jpg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=/zHoiU1Q9fjnXX28nqi0/HUvHkFUJJci0TXwlSmpAl8MxAI80fSljkppBy1+/NYjUvxeJT6gBqyMWlewb/c0H9N+g/xINY4BfzFztwex2v6s+oKF0K0Kh7J/OfhA
2024-12-24 15:05:13 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:13 GMT Content-Type: image/jpeg Content-Length: 83605 Connection: close Set-Cookie: AWSALB=Yza8gYuDJoNf64UNwliny830rMfMV76tyrJqIzI5AmP+pCsFYD9xWMMpv2h5I3hnlIDa3cw97yC4pG5eKanxEsvIbzzbIiSsfId8Z4ClyoC5H/B0sKAL4lSRKXRE; Expires=Tue, 31 Dec 2024 15:05:13 GMT; Path=/ Set-Cookie: AWSALBCORS=Yza8gYuDJoNf64UNwliny830rMfMV76tyrJqIzI5AmP+pCsFYD9xWMMpv2h5I3hnlIDa3cw97yC4pG5eKanxEsvIbzzbIiSsfId8Z4ClyoC5H/B0sKAL4lSRKXRE; Expires=Tue, 31 Dec 2024 15:05:13 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 08 Jun 2021 18:32:10 GMT Accept-Ranges: bytes ETag: "2e38c597945cd71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:13 UTC	3180	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 05 04 04 04 04 03 05 04 04 04 06 05 05 06 08 0d 08 08 07 07 08 10 0b 0c 09 0d 13 10 14 13 12 10 12 12 14 17 1d 19 14 16 1c 16 12 12 1a 23 1a 1c 1e 1f 21 21 21 14 19 24 27 24 20 26 1d 20 21 20 ff db 00 43 01 05 06 06 08 07 08 0f 08 08 0f 20 15 12 15 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 ff c0 00 11 08 01 84 07 6c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFHHC#!!!$'$ & ! C l"}!1AQa"q2
2024-12-24 15:05:13 UTC	5352	IN	Data Raw: f0 9e 95 a5 2a c9 32 7d b2 e4 7c de 74 8b f2 a9 f6 15 d0 12 cd d6 93 39 a0 b2 aa ee 6a d5 2b 6c 61 76 f7 0d b5 14 b2 ac 6b f2 fc cd 55 ee 6f 3c b8 f7 c9 fb b4 5a e4 75 ed 56 ea e6 c6 44 b1 7f 24 2f de fe f3 53 11 b9 7b ae 5b 5b f9 9e 5c df 68 9d 3e f4 6b fc 35 97 6b ab 4b 7d 2b 41 72 fb 63 97 e6 89 97 f8 4d 70 b6 97 32 89 56 55 7f f4 88 bf f1 e1 5d 04 06 39 55 65 b6 dd e5 cb d1 57 ef 46 fe 94 08 da bd b6 6f 2e 49 15 36 ce 8b b5 d7 fb d5 9d a7 c7 e5 c5 1c 2b d1 9b 73 56 d5 cc 57 3f d8 ab 3d e7 ee ee 17 e5 ff 00 78 56 75 b2 ed 8d a6 6f e1 5a 4c 19 9d ab 15 92 f7 ca 5e d5 e7 da d5 cf da f5 99 1b f8 63 f9 15 7f bb 8a ee 86 d9 6f bc c9 1f e5 2c 6b 91 d6 7c 3f a9 d8 dd 49 70 6d 1a 4b 77 6d cb 34 3f 38 6f c0 74 a7 10 65 7f 0d 69 89 ac 78 c7 4c d3 65 87 74 32 ca Data Ascii: *2}\|t9j+lavkUo<ZuVD$/S{[[\h>k5kK}+ArcMp2VU]9UeWFo.I6+sVW?=xVuoZL^co,k\|?IpmKwm4?8oteixLet2
2024-12-24 15:05:13 UTC	11459	IN	Data Raw: 59 b4 91 af f7 a3 93 72 d3 34 8f 02 d8 e9 9a 82 ea 0d 76 f7 46 3f b8 ad fc 26 9f 32 b0 24 74 5f f1 ef 63 04 3f dc 40 b5 4a 33 be e9 9f ef 31 a9 ae 5e 49 a6 f2 d3 e6 26 ad c1 a7 f9 6b fe f7 de ae 59 b3 b2 92 ea 2a 0c 7f b3 4a 0f f0 d4 a2 d1 87 f1 54 89 6d 8f bd 59 9b 11 a2 ff 00 77 e6 a7 e3 15 21 87 14 84 6d a0 44 4c 2a 09 19 52 a7 63 8a ab 26 df bd 49 96 86 e7 77 cc b5 17 fb 5f c3 4a ee a3 ee d3 0b 7f e3 d5 05 a1 8d b6 a2 76 f9 b6 d3 9d ff 00 87 f8 aa b3 ca b1 ee 66 a9 2c 49 64 c5 54 92 6c 7c d4 c7 99 9b e6 ac fb ab b5 82 06 67 7f f7 68 dc 2f 62 0d 52 fd 91 36 43 f3 39 ac 0d f2 16 ff 00 8f 7d cc 7e f3 54 a5 99 dd 9d e6 56 2d 49 f3 06 dc 7e 65 fe ed 6c b4 47 3c a4 e4 34 34 bf f3 c5 7e 5f ef 52 6d 91 be 6f 25 56 a6 32 c6 57 e5 85 57 fd a6 a8 be 53 f3 79 df Data Ascii: Yr4vF?&2$t_c?@J31^I&kYJTmYw!mDLRc&Iw_Jvf,IdTl\|gh/bR6C9}~TV-I~elG<44~_Rmo%V2WWSy
2024-12-24 15:05:13 UTC	5352	IN	Data Raw: f9 99 e9 bf 6b 51 fc 7f 35 62 cb 73 6b 1c 9e 5b 5c 45 bd be ef cd 56 d3 4d d4 64 f9 fc 95 8d 1b ee b6 ed d4 d2 6c 1b 8a dd 97 24 bc cd 30 dc c6 7e f3 d5 5b 8d 3a 78 97 74 97 0b bb fb ab 58 57 22 5f ef fc d5 4a 9b 33 f6 b1 e8 74 6f 72 bf df da b5 59 af 55 7a 6e 6f f7 56 bc db 58 ba ba 37 be 4f da 19 54 7f 75 ab b7 f8 77 7d 2d cd 94 fa 75 d2 ee 10 b6 e8 a6 6f 4f 4a a7 49 a5 7b 93 1a c9 bb 58 b9 fd a7 9f b8 8c c1 7f bb 4d 6d 46 e9 97 72 42 cb 5a fa 86 8d fe 93 f6 db 37 f2 e4 fe 38 ff 00 85 aa 0f b3 67 e7 6f 97 fd 9a c9 ab 1b 27 73 12 69 ee e5 65 0f bb e6 fe 1a bf 69 61 f7 5d fe 6a b2 2d b1 2f cd 57 50 61 76 ad 26 50 cf 21 57 f8 29 8d 1e 2a c8 dd fc 55 0c 8d 40 91 52 43 55 24 7c 2d 4f 2b 29 aa 92 ac 92 fc 89 f2 ff 00 b5 49 0c ac c3 73 6e 64 66 a5 df 17 cb f3 Data Ascii: kQ5bsk[\EVMdl$0~[:xtXW"_J3torYUznoVX7OTuw}-uoOJI{XMmFrBZ78go'sieia]j-/WPav&P!W)*U@RCU$\|-O+)Isndf
2024-12-24 15:05:13 UTC	7018	IN	Data Raw: ab 13 33 7d d5 a0 01 46 51 6a 09 55 7c 86 dd fc 35 24 b7 0a b6 de 72 26 e5 a6 a9 f3 22 dd fd e5 a0 08 40 cc aa f4 ef 3d 64 95 a1 d9 f3 53 4f fa a5 66 fe 16 ab 0b 04 65 bc cf e2 a0 0a b3 8c 4b 04 9f c3 52 ba b0 9d 59 7f 8a 92 75 cc 1f 37 f0 b5 39 99 4a c6 f4 00 be 53 2a b6 e7 dd 4a 46 62 a9 b1 95 a6 a8 fd d6 da 00 a6 24 8c b6 c5 7f 9a 88 ed e3 8e 5f 31 7a 9a a5 95 5d 57 e5 4d aa d5 6a 77 92 1b 98 cb 3f c8 df c3 40 17 f1 46 29 57 95 a7 50 03 32 bb b1 49 b9 77 6c fe 2a 82 56 f2 ee 57 fd aa 5b 82 cb 2c 6e bf c5 40 0e 91 e4 59 55 47 dd 6a 8a f0 c8 ad 1b 27 dd dd 52 dc ae 76 bd 25 c0 53 6d bd be ea d0 04 a2 96 9b 11 56 89 59 69 f8 a0 06 e2 8c 53 b1 46 28 01 b8 a0 0a 5c 51 40 0d 22 99 8a 96 90 8a 00 88 8a e5 bc 71 06 ed 2a d2 e5 7f e5 84 9b 5b e9 5d 59 15 97 af Data Ascii: 3}FQjU\|5$r&"@=dSOfeKRYu79JSJFb$_1z]WMjw?@F)WP2IwlVW[,n@YUGj'Rv%SmVYiSF(\Q@"q*[]Y
2024-12-24 15:05:13 UTC	6690	IN	Data Raw: 97 fe 5e ff 00 f1 da 43 b8 d3 6f 23 7c af 34 ad ff 00 02 a4 5b 08 83 6e f2 be 6a 53 a8 5a f9 9c dc 6e 4f ef 6d 35 34 57 90 6e dd 26 df 2f fd 9a 00 8d 6d 22 1f 76 1d b5 27 d9 a0 1f c2 bf f7 cd 41 3d e9 12 b7 d9 26 e3 fb bb 69 89 7b 77 f2 b1 9a 26 43 f7 97 6f dd a2 c1 72 ef 94 a3 f8 29 0a ae ea 68 d4 22 8d b0 9e 6b 1f e2 f9 7e 5a 43 a8 a9 f9 9a dd 9b fe 03 45 82 e3 fc a6 3f 77 e6 a4 f2 73 f2 ba 37 35 0b 5e cb bb 7d bc 3b 47 f7 68 6b cb b9 3e 67 85 72 b4 58 09 c4 5f 36 d5 ff 00 c7 a8 77 8a 16 d9 33 f9 75 4d 96 e6 66 dc ad b6 9f b2 76 5d 8e ff 00 35 02 2c e6 32 bb 91 d6 4a 83 ed 36 e8 fb 5f ef 53 56 d5 87 de dd b6 99 25 b4 43 87 45 db 45 82 e4 ca d1 b3 61 7a b5 59 16 ee 3e 67 db 55 96 0c 41 bc 36 d5 ff 00 66 99 ba 21 f7 ae 29 81 39 dc bb bf 74 cb 8f ef 7d da Data Ascii: ^Co#\|4[njSZnOm54Wn&/m"v'A=&i{w&Cor)h"k~ZCE?ws75^};Ghk>grX_6w3uMfv]5,2J6_SV%CEEazY>gUA6f!)9t}
2024-12-24 15:05:13 UTC	9694	IN	Data Raw: b1 56 46 8e 25 6d 9a 9a aa 8f e1 db ba aa 7d be 26 e5 2e 19 99 7f bc b5 a4 f6 76 c1 76 94 a8 9a de d4 7d ea 2e 16 29 b6 a5 62 d1 2a cd 6f 2c ce b5 51 f5 5d df 22 e9 fb 53 f8 7e 6a d5 36 d0 32 fc a9 b8 ff 00 b3 4c fb 1c 7f c5 0b 2d 55 d0 58 a1 1e a3 7c bf 2c 30 c5 1f fe 3d 4e 37 da 94 8b f3 32 af fb 4a b5 a2 2d 23 dd fe a6 9d f6 25 fb df 67 f9 68 b8 58 c4 91 27 97 fd 74 de 67 fb d4 e5 49 62 fb a9 5a 86 18 95 be 58 7f f1 da 95 42 af f0 52 e6 0b 19 aa b3 7f 73 6d 3d 63 c3 56 80 45 66 f9 92 ac a5 a4 4d f3 79 3f 2d 2b 81 9d 0d b5 c5 c1 65 b7 8b cc c7 cc db 7f 86 81 0c 85 6a e4 a9 14 3c 36 e8 f3 fc 4a df 7a 8d b6 2b 16 e6 5d d9 fe 2a 00 a6 b1 fc dc 3e da 90 ac e7 ee 3e ef f6 56 9c e6 d5 7e 55 9a 26 ff 00 65 7e 6a 90 7d 9a 44 db bd 94 ff 00 b2 b4 0e e5 70 b3 ab Data Ascii: VF%m}&.vv}.)bo,Q]"S~j62L-UX\|,0=N72J-#%ghX'tgIbZXBRsm=cVEfMy?-+ej<6Jz+]>>V~U&e~j}Dp
2024-12-24 15:05:14 UTC	8028	IN	Data Raw: 68 b6 3a c5 74 9f 7b 6b 53 11 82 da 5c 37 fa 54 16 17 88 cd 17 96 15 b6 fc ac a7 d6 b0 3c 2b 69 1d be b1 ab db ab b4 cb 6e 42 2c cd f7 b1 e9 5d 1e a7 a6 eb 04 29 b2 ba 6b 19 53 fb cb b9 5a a9 68 7a 4d c6 93 15 ec d7 53 2d c5 d5 d3 ef 6d bf d2 80 b1 85 e2 c1 ab ae 9c 2d 2f bc 8f ec fb 89 42 a4 d1 fd f5 fa d7 45 3d e5 ae 8b 61 68 f7 be 6f 90 aa 17 cc 8d 4b 6d e3 bd 73 de 22 d4 7f b5 ff 00 b3 f4 f8 ec 6e 6d da 3b 80 d2 f9 8b f2 e3 d6 bb 80 22 20 ab 3c 6c be 5f dd 6c 6d 6e 3d e9 09 9e 77 6a de 6c 3e 29 d6 23 f9 a2 78 f6 c5 27 f7 85 74 7e 17 b4 45 f0 76 9a ce 8a db 97 72 c9 b7 d7 de ab f8 2e 2d f6 5a ab 32 ab 42 f7 0c ab 1f f0 e3 d2 9b 71 07 fc 23 1e 20 d3 a3 d3 66 95 ed 75 19 36 c9 67 27 cc a9 ee b4 fc 86 cd 6b ed 16 d7 56 db 1d c3 4f 0b a7 dc 9a 16 da cb 58 Data Ascii: h:t{kS\7T<+inB,])kSZhzMS-m-/BE=ahoKms"nm;" <l_lmn=wjl>)#x't~Evr.-Z2Bq# fu6g'kVOX
2024-12-24 15:05:14 UTC	6690	IN	Data Raw: 35 44 60 5f e1 56 5a 2e 2b 09 26 b3 24 bf f2 ee aa bf ec af cd 50 ff 00 69 dc 7f b5 ff 00 7c d4 de 43 17 f9 3e 5a 6f 95 28 e3 e5 a7 70 b1 db ad d5 cc 4b f3 3a c8 cd fd e6 a7 0b 99 ca 6e fb bf f0 2a b6 f6 52 32 ed 6f 2b fd 96 a8 5b 4e 95 97 67 da 15 7f dd 6a bb 32 2e 88 cd e4 9b 76 ad c6 d6 a4 12 5f 37 fc bd ae da 95 2c 24 8f fe 5b 2b 7f bd 52 9b 59 4f fc f2 65 a2 cd 8e e8 48 cd c8 5f 9b e6 a5 dd 2d 06 d2 75 fe eb 2f fb d5 1f 92 df c4 8c bf f0 2a 64 e8 3c 9d bd 52 ac e9 d2 ac 77 d1 ec 76 db bb ee b5 56 68 d8 2e 53 e6 a7 a1 65 78 dd be 5d ad 4d 68 c4 d5 d1 dc 1a 4a 6a 36 e8 95 bf bc b4 b5 de 79 c2 d5 6e 92 b2 b7 dd 6a b3 50 b2 e2 75 6a a4 4b 1f 0f dc aa 17 c6 48 ef a0 65 fb b5 a1 18 60 cc 1a aa ea 1f 2c 0b 22 fd e5 6a 06 8b c3 95 a4 5f b9 4c 85 b7 c0 ad fd Data Ascii: 5D`_VZ.+&$Pi\|C>Zo(pK:nR2o+[Ngj2.v_7,$[+RYOeH_-u/d<RwvVh.Sex]MhJj6ynjPujKHe`,"j_L
2024-12-24 15:05:14 UTC	14718	IN	Data Raw: b7 92 3f bb f3 2d 00 5e 8e 78 6e 3e 5f e2 fe ed 28 89 a3 6d c8 ff 00 2f f7 6b 30 0f f8 0b 55 98 ae e4 8f e5 93 e6 5a 00 9d 8c 6d f2 b7 ee da ac 20 f9 6a 3c c1 70 bb 57 e6 a9 a3 5d b1 6d a9 02 16 5c cf 4b b0 54 8c 8a df 7a 9a 62 5a 00 6e 16 93 11 d3 bc b5 a3 62 d0 02 62 3a 4d 91 7d ea 7e c5 fe e5 36 42 b1 ae ed 9b a8 01 02 c0 29 71 17 f7 29 8b 33 1f f9 63 4d 69 e4 0d b5 61 a0 09 7f 75 fd ca 76 63 fe e5 45 e7 4b e5 6e f2 7e 6a 62 4f 72 5b 6b 43 f2 d0 04 f9 5f ee 53 5c b1 5f 91 2a 23 2d c1 66 5d 8b 8a 9e 36 63 17 cf f7 a8 02 0d 92 d2 79 72 ff 00 15 4d 33 36 df dd fd ea af 1b 5e 6e dd 26 dd b4 00 ab 14 ab 4c 30 48 68 cd cf cd f3 ae ea 4f f4 af ef ad 03 40 60 93 fb f4 9f 66 ff 00 6e a4 8c 4a 17 f7 8f b9 aa bb 43 21 97 7f 9c db 69 0c 90 db ff 00 b7 48 b0 ed fe Data Ascii: ?-^xn>_(m/k0UZm j<pW]m\KTzbZnbb:M}~6B)q)3cMiauvcEKn~jbOr[kC_S\_*#-f]6cyrM36^n&L0HhO@`fnJC!iH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49841	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:13 UTC	643	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/FAQs.jpg?ext=.jpg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=/zHoiU1Q9fjnXX28nqi0/HUvHkFUJJci0TXwlSmpAl8MxAI80fSljkppBy1+/NYjUvxeJT6gBqyMWlewb/c0H9N+g/xINY4BfzFztwex2v6s+oKF0K0Kh7J/OfhA
2024-12-24 15:05:13 UTC	828	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:13 GMT Content-Type: image/jpeg Content-Length: 82487 Connection: close Set-Cookie: AWSALB=sDTSi2sNM6GOSimtOoaubmLEhjAZdw+OvunMFaHHvSks9Ufh7X3pWZCTT5u1ig4jiZ7FOMIvhuYq6aEfl4IsdPT9/U4SUdRbVZmognAm3D7zFtHJ7J+aeH6lNMHf; Expires=Tue, 31 Dec 2024 15:05:13 GMT; Path=/ Set-Cookie: AWSALBCORS=sDTSi2sNM6GOSimtOoaubmLEhjAZdw+OvunMFaHHvSks9Ufh7X3pWZCTT5u1ig4jiZ7FOMIvhuYq6aEfl4IsdPT9/U4SUdRbVZmognAm3D7zFtHJ7J+aeH6lNMHf; Expires=Tue, 31 Dec 2024 15:05:13 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 10 Jun 2021 15:28:05 GMT Accept-Ranges: bytes ETag: "6767a835d5ed71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:13 UTC	7195	IN	Data Raw: ff d8 ff e1 1e 24 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0e 01 00 00 03 00 00 00 01 14 d4 00 00 01 01 00 03 00 00 00 01 0d e3 00 00 01 02 00 03 00 00 00 03 00 00 00 b6 01 06 00 03 00 00 00 01 00 02 00 00 01 0e 00 02 00 00 00 44 00 00 00 bc 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 01 00 01 1b 00 05 00 00 00 01 00 00 01 08 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 22 00 00 01 10 01 32 00 02 00 00 00 14 00 00 01 32 82 98 00 02 00 00 00 49 00 00 01 46 87 69 00 04 00 00 00 01 00 00 01 90 00 00 01 c8 00 08 00 08 00 08 46 41 51 73 20 28 20 66 72 65 71 75 65 6e 74 6c 79 20 61 73 6b 65 64 20 71 75 65 73 74 69 6f 6e 73 20 29 20 77 6f 6f 64 20 6c 65 74 74 65 72 73 20 6f 6e 20 77 6f 6f Data Ascii: $ExifMM*D(1"22IFiFAQs ( frequently asked questions ) wood letters on woo
2024-12-24 15:05:13 UTC	2676	IN	Data Raw: f7 7a 7e 93 bf 35 c1 ce 0c 33 cb bd 7a 7d d5 ef fe bf a4 ab b3 66 bb 63 b4 ed df b7 f3 bf 7f fe f8 ae 3b 74 d9 bb cb 8d b3 c7 f8 4f 4f fd 76 20 a6 bc b4 c3 9a c7 8b 4b 76 bc 02 64 cf 8d d5 6d f5 6a ff 00 ad 29 d7 64 56 e6 32 aa e9 69 fe 71 ac 6b 5c d2 7f 3d cd ae 5f f4 bf 97 b1 47 db b5 91 b3 b7 33 1c fe 66 e4 3b 23 d5 76 dd 9d e7 d5 9d 9f db f5 3f ef 88 a9 23 72 5d 5b da 71 18 5c c6 9d c5 96 54 5e c0 e9 e0 3b df 91 43 de df cf a5 e8 b7 e7 57 77 b5 b5 8d b7 72 db 0f aa 1b 3e 6d 15 3f db fc aa 95 27 fa 7d f9 93 3f 67 df b7 9f 2f 67 f9 88 96 ee 83 e3 03 f9 ed bb a3 4f a5 fc a4 34 b5 6a ca b3 8b 8e 62 c6 8b 1c 09 2d 61 8d bb c7 d0 73 3d df 9b fe 86 c7 a7 fb 51 b2 97 6d 0c 06 0b 06 84 34 9f f8 46 b1 db bd 8a 18 d1 ea d5 1c 6b 3b 67 77 1f e0 f7 7b b6 7f 55 43 Data Ascii: z~53z}fc;tOOv Kvdmj)dV2iqk\=_G3f;#v?#r][q\T^;CWwr>m?'}?g/gO4jb-as=Qm4Fk;gw{UC
2024-12-24 15:05:13 UTC	8028	IN	Data Raw: 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 01 4d 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 01 f4 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 54 00 00 00 01 00 00 00 00 00 06 61 6c 74 54 61 67 54 45 58 54 00 00 00 01 00 00 00 00 00 0e 63 65 6c 6c 54 65 78 74 49 73 48 54 4d 4c 62 6f 6f 6c 01 00 00 00 08 63 65 6c 6c 54 65 78 74 54 45 58 54 00 00 00 01 00 00 00 00 00 09 68 6f 72 7a 41 6c 69 67 6e 65 6e 75 6d 00 00 00 0f 45 53 6c 69 63 65 48 6f 72 7a 41 6c 69 67 6e 00 00 00 07 64 65 66 61 75 6c 74 00 00 00 09 76 65 72 74 41 6c 69 67 6e 65 Data Ascii: Rct1Top longLeftlongBtomlongMRghtlongurlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHTMLboolcellTextTEXThorzAlignenumESliceHorzAligndefaultvertAligne
2024-12-24 15:05:13 UTC	2676	IN	Data Raw: 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 70 6c 75 73 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 75 73 65 70 6c 75 73 2e 6f 72 67 2f 6c 64 66 2f 78 6d 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 52 69 67 68 74 73 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 Data Ascii: /www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:plus="http://ns.useplus.org/ldf/xmp/1.0/" xmlns:xmpRights="http://ns.adobe.com/xap
2024-12-24 15:05:13 UTC	2676	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-12-24 15:05:13 UTC	2676	IN	Data Raw: d0 1e b2 5b 94 a5 36 a0 27 ee c6 24 8e f5 21 cb a0 e8 8f 6f fb b8 ca cb d0 3a 39 18 3c 49 5a f0 85 08 fc bc 54 9a 5d cb 1f 80 26 b9 23 97 c9 1c 2b 1e c7 5a 8a 50 90 5e 2b 8a ef ea 2e 1e 28 9e 8b 45 10 13 59 87 93 49 04 53 b1 1d 41 a6 46 e2 7a a7 74 9e 5d 6c 44 ed f5 bd 29 d3 f9 9d 37 19 6f 07 71 63 c5 e4 bd b5 dd 29 e2 f4 f8 4b 19 23 a1 53 83 80 af 10 51 b6 9f 4f b8 e4 8a e0 ad 77 a9 a1 fb 8d 32 44 10 80 99 2e 99 6d c1 0f a9 22 03 f6 5a bb 7e bc af 8c b2 a5 e2 c9 03 85 7d 40 d0 f4 07 7c 78 bc 96 bc d6 cd 01 78 dd 21 bb 4a 74 a9 18 83 e4 b4 86 8e d0 db 3a 99 2e bd 43 d5 a9 d2 99 2b be 88 aa 46 5c 47 eb 1e 2b 32 98 58 54 54 fc 55 c8 83 49 2a 6d a6 aa aa f0 9d f9 9e a2 b5 c7 8d 78 51 09 44 86 9f 58 64 3e 2c 2b 83 e0 95 06 d4 55 14 d6 e0 12 bf b6 57 0f 07 92 Data Ascii: [6'$!o:9<IZT]&#+ZP^+.(EYISAFzt]lD)7oqc)K#SQOw2D.m"Z~}@\|xx!Jt:.C+F\G+2XTTUI*mxQDXd>,+UW
2024-12-24 15:05:14 UTC	5352	IN	Data Raw: 8e c6 41 27 16 fa 01 c8 8c 97 de 9e 1a 42 7f 85 ec 6e 26 56 92 79 ad cc 64 6e 84 32 fd e3 09 c8 42 f0 a2 ef 34 34 b5 b6 66 3a 94 93 23 9d e3 a0 af 11 e1 82 39 2c f2 53 1a ea 83 6b 5d 2e e6 26 90 dc cb 0c 91 8f f7 62 f3 14 1e 34 c9 59 1d 11 41 ab 78 ec a6 3c 56 ee d8 6d 4f 8a a9 f7 57 09 24 74 2a ad a7 da dc 5a 5d 3c ee fe ad b7 12 aa 2d 9c 11 5f 1c 8c 8d 84 81 4a 62 e3 52 8a 4a 0b b6 58 2b 5e 13 46 0e df 3c 34 3b 91 65 12 4d ae a0 58 bd b4 33 3a 2d 57 84 bc 18 9f 60 70 72 ea 9e 6b a2 d5 66 85 5d 1e d6 e3 d3 41 45 06 8d 4f 96 03 0b 5b 44 e9 fa f5 a4 ae 41 2f ca 84 32 c8 bc 48 3f 4e 46 58 ca 44 90 d3 6a 7a 6a 4b c6 78 8f 27 3f de 2a ef f7 ae 4b 84 a2 c2 c4 7f 2e b4 c4 fd 6a 48 5b a6 e5 81 fc 71 3c 5d cb b2 65 6d 76 a0 52 1b f5 b8 55 db d3 34 e9 f3 c8 18 f7 Data Ascii: A'Bn&Vydn2B44f:#9,Sk].&b4YAx<VmOW$tZ]<-_JbRJX+^F<4;eMX3:-W`prkf]AEO[DA/2H?NFXDjzjKx'?K.jH[q<]emvRU4
2024-12-24 15:05:14 UTC	6435	IN	Data Raw: c2 41 e6 8b 51 d6 fc eb ac df 3e 93 69 65 64 9a 4e 97 a4 cc 2e 6d 34 eb 62 ce 19 f9 72 3e a4 8e dc 88 ea bc 47 f3 62 00 5d d1 10 f9 a7 cc e3 cd 77 7e 63 8a 26 0f 7e ee 67 d3 9e 92 db b4 0e 02 9b 79 06 dc e3 20 7f c1 7c 59 13 c2 9d d1 f3 f9 83 ca d0 d9 5e cb a2 e9 f7 16 5a dd e2 7a 49 05 fb 47 35 a5 90 e4 19 9a d8 53 93 1d bf 77 cb ec 7f 93 82 93 69 9b 79 cf 44 96 e5 b5 b8 3c bf eb 79 9e 6e 2e cd 35 c0 7b 14 9d 54 03 3a 47 5e 75 db e1 4e 38 0d 25 0d a3 79 cf 57 d3 2c 92 de 7d 12 0b db db 49 a7 b9 d3 75 39 1b 97 a1 25 c9 e5 33 08 80 dd b9 6e 9b fc 38 38 87 7a d1 4a ad f5 bb b8 ac b5 8b 59 ec 85 f0 d7 a8 f7 cd 76 3d 4a 4e a4 95 b8 1f f1 62 d7 e1 fe 5f 87 f9 70 83 e6 b4 94 5b 69 fa 68 a9 2f c4 a8 a5 79 50 8a 7b 62 65 24 00 1b 36 7a 5c d1 d2 4b 8f 49 46 ef 27 Data Ascii: AQ>iedN.m4br>Gb]w~c&~gy \|Y^ZzIG5SwiyD<yn.5{T:G^uN8%yW,}Iu9%3n88zJYv=JNb_p[ih/yP{be$6z\KIF'
2024-12-24 15:05:14 UTC	8028	IN	Data Raw: bc a2 91 b1 db 5e 88 e4 89 e6 80 7a bf 0b 24 16 71 ad 29 d0 fc 72 73 39 0b 1f 82 ca 93 ab 2b 68 23 6f ab ad dc 8c 15 39 3b aa 43 12 35 37 34 50 49 1b fd aa 9f 8b 2a 94 8f 3a fb d9 80 b6 58 4c 90 88 4c b2 c9 0f 3e 41 83 fa 74 a0 d8 d4 0f b2 3f 97 10 7a a1 00 9a 26 91 22 bc 96 7c 67 99 58 b7 27 96 69 01 1d 49 f8 4a f5 f0 c9 9c 92 1c d1 c2 3a 3d db c8 5e 5b 5d 0f cb 76 f6 e5 02 dd 5d 7f a5 dd 85 52 a0 48 e0 10 a0 12 c7 e1 5a 77 cc 69 1e 23 6d d1 14 19 1c 8c 14 b0 a7 12 69 f7 78 e0 29 5c 7e 15 07 ab 0e a4 f8 61 55 a1 a9 26 db 8c 0a d1 40 5e 4a 11 b5 68 a7 b6 34 af 23 fc ed d3 ae a3 d6 34 fb bb 6b 38 ee 63 bc 88 c5 3b 3c 82 3a 3c 24 15 51 5e a7 89 ae 5d 84 80 4e ed 79 1e 75 f5 09 62 74 92 6b fb 2b 59 15 81 11 ba 35 d3 20 3d 81 41 f0 b6 5f c7 7d 25 fe e5 ae bc Data Ascii: ^z$q)rs9+h#o9;C574PI*:XLL>At?z&"\|gX'iIJ:=^[]v]RHZwi#mix)\~aU&@^Jh4#4k8c;<:<$Q^]Nyubtk+Y5 =A_}%
2024-12-24 15:05:14 UTC	6690	IN	Data Raw: 89 57 2f 5a d3 a7 df 8a b1 4f cd 2b 36 9b c9 1a 8b ab 98 e4 b5 43 2f 30 2a 42 f4 7a 7d e3 71 9b 0e cb c9 c1 9c 0f e7 fa 7f e2 5c 1e d1 c7 c5 84 9f e6 fa 93 bf 23 79 b1 bc d3 e4 ad 37 53 8c 87 bc 11 2d b5 d2 72 52 eb 3c 14 47 d9 bf 61 87 c5 fe cb 36 59 b1 f0 cc 87 55 09 58 56 d4 56 69 20 60 25 f4 2e 50 16 81 94 fc 00 d7 be df 12 7f 35 7f d8 e4 62 92 87 d1 ee f5 2b a2 c3 51 b3 46 2a b5 5a 55 89 03 e1 6d 9b a3 d3 7c 33 00 72 28 89 27 9a 67 2d 9d 84 48 14 c0 21 89 50 b4 41 05 00 1d 16 a4 30 df d8 e4 2c b2 a6 29 e6 3f 27 69 da a5 f9 d4 ac dd 2d b5 85 8f 83 89 1a 82 68 47 4a d2 8d f0 57 ed 7f b1 cc 8c 59 cc 45 1f a5 ae 78 c1 df ab 13 9f 4c ba b1 62 da 96 8b 74 fe 93 84 8e e5 62 5b 88 db 8a 93 c9 4f 33 f0 ff 00 b1 cc a1 31 2e 45 ab 84 8e 61 2e 9e f6 0d 4e d5 e5 Data Ascii: W/ZO+6C/0Bz}q\#y7S-rR<Ga6YUXVVi `%.P5b+QFZUm\|3r('g-H!PA0,)?'i-hGJWYExLbtb[O31.Ea.N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49843	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:13 UTC	664	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/shutterstock_234728809_sm.jpg?ext=.jpg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=GqHFSMk9lrLS4k/trn3efumq47Orho5Yy2wLIIOLED+CeILID8xF1dYqTV483oJR4ay8wIfuZNHRcyQxmtvWEPr5wiLgiLcUjZkxGVtPeLeL1Vilxx2gXPcSjVo/
2024-12-24 15:05:14 UTC	828	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:14 GMT Content-Type: image/jpeg Content-Length: 33986 Connection: close Set-Cookie: AWSALB=tJw5zWrvDpj/r0NIc+KVd8Daotip1av07FYQ+oAzrJGkFPlvBW8E5dbZ1lcWgDz1dVQ5lAv6M4ua11gg+QAnmDvdiYmTuama/hoZuDu/QSGnS22Zwbrfi4OAORTl; Expires=Tue, 31 Dec 2024 15:05:14 GMT; Path=/ Set-Cookie: AWSALBCORS=tJw5zWrvDpj/r0NIc+KVd8Daotip1av07FYQ+oAzrJGkFPlvBW8E5dbZ1lcWgDz1dVQ5lAv6M4ua11gg+QAnmDvdiYmTuama/hoZuDu/QSGnS22Zwbrfi4OAORTl; Expires=Tue, 31 Dec 2024 15:05:14 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Fri, 09 Sep 2022 21:02:18 GMT Accept-Ranges: bytes ETag: "0b894728fc4d81:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:14 UTC	3181	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff ed 00 da 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 be 1c 02 69 00 3a 4c 6f 61 6e 2c 43 6f 6e 63 65 70 74 2e 2c 59 6f 75 6e 67 2c 43 6f 75 70 6c 65 2c 48 6f 6c 64 69 6e 67 2c 41 2c 57 68 69 74 65 2c 4d 69 6e 69 61 74 75 72 65 2c 48 6f 75 73 65 1c 02 6e 00 0c 53 68 75 74 74 65 72 73 74 6f 63 6b 1c 02 73 00 0c 53 68 75 74 74 65 72 73 74 6f 63 6b 1c 02 74 00 43 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 62 61 72 61 6e 71 2f 53 68 75 74 74 65 72 73 74 6f 63 6b 2e 20 20 4e 6f 20 75 73 65 20 77 69 74 68 6f 75 74 20 70 65 72 6d 69 73 73 69 6f 6e 2e Data Ascii: JFIF,,"ExifMM*Photoshop 3.08BIMi:Loan,Concept.,Young,Couple,Holding,A,White,Miniature,HousenShutterstocksShutterstocktCCopyright (c) 2014 baranq/Shutterstock. No use without permission.
2024-12-24 15:05:14 UTC	1338	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-12-24 15:05:14 UTC	1338	IN	Data Raw: 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 Data Ascii: JSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
2024-12-24 15:05:14 UTC	5352	IN	Data Raw: 03 e6 8a 37 66 8a 00 f1 5d 2b 4a 6b 46 ec df ce b6 ed ec fc f5 05 be e8 ed 50 47 61 b0 f1 91 57 20 dd 19 e7 35 e4 c5 e9 63 47 8f 93 8d 9a d4 b9 6c 9e 48 18 a9 95 f1 55 d5 fe 5a 72 3e 4f 5a d8 e2 52 2c 46 d8 7a 7c cf b5 d6 a1 1c 0c d3 a5 6c e3 e9 54 9b 35 e9 72 ea b6 7f 1e 6a 45 6c 55 78 1f 74 6b fa d4 8a d9 ad 6f 72 59 6e 39 3e 5a 7e 46 2a aa c9 81 41 9b 0f 4c a5 22 66 7c 77 a8 cb ef a8 e6 97 0d f5 a6 89 70 9f e7 8a 2e 31 c4 e5 8d 69 68 9a a7 97 20 86 43 f2 b7 dd 3e 95 97 bf 68 e6 a1 92 72 5b 83 4f 9e da b2 91 d7 5c a7 99 6e e3 d4 62 bc eb 58 7d af 8f 7a ee 74 ad 54 5f 58 8d df 7d 7e 56 fa d7 05 e2 76 f2 b5 09 97 b2 b9 a7 52 5b 32 e2 62 df cd 92 7d bb 56 36 a3 3e 17 8a bf a8 4b bb 75 62 6a 73 ed 8b 3c fa 54 a6 67 52 36 26 d2 75 4d 97 1e 5e ea dc fe d1 2a Data Ascii: 7f]+JkFPGaW 5cGlHUZr>OZR,Fz\|lT5rjElUxtkorYn9>Z~FAL"f\|wp.1ih C>hr[O\nbX}ztT_X}~VvR[2b}V6>Kubjs<TgR6&uM^
2024-12-24 15:05:14 UTC	1338	IN	Data Raw: 78 dc 41 24 76 63 51 b6 a1 24 72 ab 43 34 f1 cc a7 29 22 17 47 46 ce 01 07 3f 29 dd df b3 00 6a 8b dc 64 9c 2a fa e5 95 71 e9 cf 3f 81 fc 0d 57 79 88 7f f5 6a 4e 7a 32 2f 3d b9 e7 bf dd 27 b1 c1 af c4 9d 79 4e 4e 72 7a b7 73 f7 6a 78 58 c6 0a 11 d9 2b 1e a3 fb 58 e8 5a 17 ec b7 ff 00 04 f8 b5 f8 c6 f2 f8 d3 5b be 86 df 4f 79 74 f5 d6 fe c8 b3 1b 87 58 ce d2 23 25 71 b8 90 39 00 12 3b d7 3f ff 00 04 c8 7f 0e ff 00 c1 45 34 6f 17 5f dd db fc 40 f0 8a f8 65 74 b6 89 61 f1 40 ba 5b a1 79 6f 24 b8 21 a0 18 d8 a8 aa 47 39 07 1d 06 2b d6 be 3e 78 07 e1 df ed 85 ff 00 04 f1 d0 fe 14 eb ff 00 16 3c 2f e0 39 2f ed 34 e9 6e 67 b8 bd b6 6b 88 4d bb 87 31 98 64 9a 3c 31 2b 83 cf cb cf 06 ac ff 00 c1 3a fe 07 7c 2f fd 83 74 5f 15 d9 d9 fc 6e f0 4f 8b 97 c5 12 d8 c9 bf Data Ascii: xA$vcQ$rC4)"GF?)jd*q?WyjNz2/='yNNrzsjxX+XZ[OytX#%q9;?E4o_@eta@[yo$!G9+>x</9/4ngkM1d<1+:\|/t_nO
2024-12-24 15:05:14 UTC	4014	IN	Data Raw: db 54 c0 a0 d1 ca 1c cc b9 fd a0 df de fd 69 c3 52 2b de a9 0c e2 90 f1 53 64 1e d1 97 4e a6 de b4 55 1d d4 51 a0 bd a4 8f 8f 3c 17 e2 d9 a1 58 ed ee b3 1c f0 fc ae a7 d6 bd 2f 4b d7 16 e2 35 f9 bb 7a d7 9e fc 54 f0 0d e5 a6 af fd a1 61 b5 d0 7d f4 1c 13 50 78 4f c7 3b 91 63 72 52 45 38 65 3d 41 af ca f9 a5 46 5c 92 3a a3 69 2b a3 db 34 bd 4b cd 1b 77 51 ad dd 05 b7 f4 ae 63 c3 3a ea cb 1a e1 bf 5a b7 e2 bd 5c 45 a7 b3 67 b5 77 53 c5 5e 2d 89 c4 b9 a0 6a 22 61 20 cf e1 50 fc 3b d6 04 9a c6 a1 6f bb fd 5b 9e 3f 1a c5 f0 76 a5 e7 87 6c f5 ac bf 87 9a e7 93 f1 7b 56 b3 cf 50 18 0f ad 63 4f 11 76 99 6d 68 7a 86 a7 2f 19 cd 32 de eb 74 7f 7b eb 50 6a d7 1b 61 ac db 4b ed ae 57 35 d7 2a ba 8a 3b 1a 97 77 58 e9 5c fe b9 7f b1 49 ab d7 37 79 ae 7f c4 13 ed 89 8f Data Ascii: TiR+SdNUQ<X/K5zTa}PxO;crRE8e=AF\:i+4KwQc:Z\EgwS^-j"a P;o[?vl{VPcOvmhz/2t{PjaKW5*;wX\I7y
2024-12-24 15:05:14 UTC	6690	IN	Data Raw: 3c 55 16 a7 04 6c 84 67 1c d6 dd 9e b2 27 48 fe 6c 81 5c c7 87 ff 00 66 df 1b 1d 66 32 3e c3 67 62 dc c8 65 90 b3 0f a0 1f e3 5d 0f 8b 34 0f 0d fc 12 b0 fb 67 8b 3c 57 15 aa 92 16 38 21 8c b4 d2 93 d0 2a 0c b1 fc 05 28 65 98 d9 2e 77 0b 2e ee cb f3 39 b9 a2 df 2c 35 7e 46 e5 86 a4 d0 a3 ba b6 3b 70 6b 5e d7 c4 b2 43 12 f3 bb 8e 6b 86 d1 f5 c8 7c 4b 6f f6 8d 1e 2b c9 ad 1b 04 2c 89 89 57 3d 37 0a e8 34 ed 0b 54 be 55 65 b3 90 29 e8 58 85 fe 66 95 3a 38 a8 ca d4 e2 df a2 6c a9 53 92 dd 1d 3c 1e 20 59 5d 77 2f d7 9e 95 d0 f8 7d 96 ea 4c c7 f7 54 65 8f a7 a7 e7 cf e5 5c ae 9f e0 fb e8 c0 69 8d bc 43 be e7 cd 6c 78 47 58 8e d4 6a 16 ed 34 4d e4 c8 14 95 ed c7 ff 00 58 d7 d3 64 f8 7c 44 6a a9 e2 22 d2 f3 ee 6f 85 c3 b7 52 f6 3a bb bb f2 f0 15 f9 44 78 fb bb 73 Data Ascii: <Ulg'Hl\ff2>gbe]4g<W8!*(e.w.9,5~F;pk^Ck\|Ko+,W=74TUe)Xf:8lS< Y]w/}LTe\iClxGXj4MXd\|Dj"oR:Dxs
2024-12-24 15:05:14 UTC	5352	IN	Data Raw: e5 49 55 9a de f6 e5 6f cd 6f 6f 2b db ba 3a 6f d9 2b f6 44 f0 bf ec f9 f0 dc 78 7f c2 7a 16 9f a0 da c9 89 26 5b 58 42 99 db b3 bb 1f 9a 46 3f de 62 6a 2f 18 fe cd da 3d b7 89 e6 d6 ac 23 b5 d2 fc 49 29 3f e9 49 18 8d 67 2b f7 7c d0 38 70 7a 64 f2 3b 52 fc 24 fd ba b4 0f 13 69 52 49 67 7b 67 6e 3c b2 77 5d 4a b0 ab 46 14 30 74 2c 40 2a 54 83 c7 23 b8 af 0c fd a1 3f 6e 2d 43 e2 94 b7 1e 1a f8 50 7f e1 23 f1 5e a0 1a 01 a8 db 44 d2 69 fa 36 ee 0c ac e4 00 f2 0e 4a a0 ee 32 c7 03 07 cd 75 a8 d4 8c 64 ae e4 fb dd 1f 41 47 0f 8b 8d 59 46 9a 49 25 a5 ad a7 e8 91 d4 78 5f fe 0a 8f e1 3f 11 fc 26 ba bd be d4 34 0d 16 df 41 59 16 f6 5b 8b a4 8c c0 f1 b1 8d b2 49 cb 00 f8 03 00 f5 18 04 91 5d cf ec ed e0 0b ef da 79 34 9f 88 7e 30 b0 96 eb c3 d1 a0 9b 40 d0 35 1b Data Ascii: IUooo+:o+Dxz&[XBF?bj/=#I)?Ig+\|8pzd;R$iRIg{gn<w]JF0t,@*T#?n-CP#^Di6J2udAGYFI%x_?&4AY[I]y4~0@5
2024-12-24 15:05:14 UTC	5383	IN	Data Raw: 3f da 47 c4 36 7a 96 a0 da b5 bd de 9e 19 13 fb 3a 6f 2d 67 56 c6 55 cf 2a 70 40 20 83 c1 cf 5e 95 eb 62 b1 92 c4 d4 74 f0 b4 95 49 5d 6b 6b af 9b 56 fc 59 d1 c3 78 8c 0e 11 c5 e6 d5 e5 42 8e bb 3b cb fe dd 8c 9d b5 f2 5f 23 e7 8f f8 29 17 ec 15 a8 68 9a 96 9b 75 e1 9f 15 ea 5e 38 f0 7d bd d0 97 50 d2 9a f9 19 a6 8d 8a 04 6d c0 aa 4a aa 40 da 08 27 2e 70 49 c0 a9 fe 0c fe c1 3e 15 f1 ed e6 96 b7 fe 1f 93 43 d1 ee 98 af 99 0e a9 09 d5 ac 42 c2 ef f6 86 85 15 bc b8 c3 20 40 ce e8 fb e4 8c 04 20 92 be a9 f0 f7 e1 de 8b f0 f2 da 6b 7d 2e c7 ec f0 dc 30 32 b3 b9 96 59 70 08 1b 9c f5 e0 9e 00 03 93 c0 ae af 43 8a 4b 2b 8c 5a b2 c3 06 ec 95 d9 9c fa 77 af 7e 59 7e 2e 34 57 2a 4d ad 79 53 b7 ca ed 6b f3 b7 ab 3c 3c 77 1a 64 f3 c4 d6 a5 87 8c b9 25 64 aa ca 29 4b Data Ascii: ?G6z:o-gVUp@ ^btI]kkVYxB;_#)hu^8}PmJ@'.pI>CB @ k}.02YpCK+Zw~Y~.4WMySk<<wd%d)K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49842	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:13 UTC	894	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/couch-pic.jpg?ext=.jpg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=GqHFSMk9lrLS4k/trn3efumq47Orho5Yy2wLIIOLED+CeILID8xF1dYqTV483oJR4ay8wIfuZNHRcyQxmtvWEPr5wiLgiLcUjZkxGVtPeLeL1Vilxx2gXPcSjVo/
2024-12-24 15:05:14 UTC	827	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:14 GMT Content-Type: image/jpeg Content-Length: 39386 Connection: close Set-Cookie: AWSALB=zu/OMxpCckjJ5WV5b3BOWIaAtchQ8MHel5DC6suZaynhp3b2p/BhqLPYLOmoqBtGkgJ4griSuXQ7FLbtEc5sXHhy6TpaIO6NTaw4U3f7WXfeSDmbdCVKxpNdBXxR; Expires=Tue, 31 Dec 2024 15:05:14 GMT; Path=/ Set-Cookie: AWSALBCORS=zu/OMxpCckjJ5WV5b3BOWIaAtchQ8MHel5DC6suZaynhp3b2p/BhqLPYLOmoqBtGkgJ4griSuXQ7FLbtEc5sXHhy6TpaIO6NTaw4U3f7WXfeSDmbdCVKxpNdBXxR; Expires=Tue, 31 Dec 2024 15:05:14 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 10 Jun 2021 15:25:09 GMT Accept-Ranges: bytes ETag: "e0fcaccc5ed71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:14 UTC	506	IN	Data Raw: ff d8 ff e1 15 de 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0e 01 00 00 03 00 00 00 01 16 cc 00 00 01 01 00 03 00 00 00 01 0f 23 00 00 01 02 00 03 00 00 00 03 00 00 00 b6 01 06 00 03 00 00 00 01 00 02 00 00 01 0e 00 02 00 00 00 bc 00 00 00 bc 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 01 78 01 1b 00 05 00 00 00 01 00 00 01 80 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 22 00 00 01 88 01 32 00 02 00 00 00 14 00 00 01 aa 82 98 00 02 00 00 00 42 00 00 01 be 87 69 00 04 00 00 00 01 00 00 02 00 00 00 02 38 00 08 00 08 00 08 59 6f 75 6e 67 20 73 6d 69 6c 69 6e 67 20 77 6f 6d 61 6e 20 73 69 74 74 69 6e 67 20 6f 6e 20 73 6f 66 61 20 61 6e 64 20 6c 6f 6f 6b 69 6e 67 20 75 70 20 77 68 69 6c Data Ascii: ExifMM*#x(1"2Bi8Young smiling woman sitting on sofa and looking up whil
2024-12-24 15:05:14 UTC	1338	IN	Data Raw: 74 68 6f 75 74 20 70 65 72 6d 69 73 73 69 6f 6e 2e 00 00 04 90 00 00 07 00 00 00 04 30 32 32 31 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 01 7e a0 03 00 04 00 00 00 01 00 00 01 16 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 02 86 01 1b 00 05 00 00 00 01 00 00 02 8e 01 28 00 03 00 00 00 01 00 02 00 00 02 01 00 04 00 00 00 01 00 00 02 96 02 02 00 04 00 00 00 01 00 00 13 40 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c Data Ascii: thout permission.0221~(@HHAdobe_CMAdobed
2024-12-24 15:05:14 UTC	4014	IN	Data Raw: ad c1 fb 72 18 c1 3e 93 b1 dc cb 6b be fa ff 00 c0 58 9a 4f 45 c0 75 73 3a 67 d7 be 97 6b 9d 67 52 a9 d4 65 31 8e 6b c3 1e 4d 56 07 38 59 63 5b b8 ec de ed 8c f5 77 b7 f3 3f 3d 5b ea 18 9d 57 ab 62 37 2f 2a ec 7e 9f 89 9a cd d8 94 b9 ee 97 35 cd df 56 ea eb 63 ed 7f b5 db fd 3f a6 89 d2 fe a1 f4 9c 0e a0 cb ad ad 99 6d c7 0d b0 9b 05 8d 2d bc 6d 75 5e 83 1b 77 a1 66 27 f8 4b 19 97 45 b6 ff 00 37 fa 6b 77 d9 e9 ea 75 0c bf 4d cf b4 fa c6 c7 08 b1 d8 f5 d6 c2 e0 7f c1 7d ab 2b 75 fb 3f 7b d1 50 4c 44 1d 3f 1e 8d a8 4a 52 1e af f7 de 7f 03 03 a9 fd 5e e8 65 96 e4 57 95 8c d7 59 6d 2d 6e ea 6e 60 0c 37 e4 45 59 21 96 3d 9b 2a 7e 4f e8 3f 4d 55 7e b5 be 9d b5 ff 00 33 b1 f5 5d fd 0a db dd 73 8b b3 3a 85 0e 0e 0d b6 a7 56 ca 09 d7 f5 66 5c 0b 1d 6e ef e7 2d f5 Data Ascii: r>kXOEus:gkgRe1kMV8Yc[w?=[Wb7/~5Vc?m-mu^wf'KE7kwuM}+u?{PLD?JR^eWYm-nn`7EY!=~O?MU~3]s:Vf\n-
2024-12-24 15:05:14 UTC	4014	IN	Data Raw: 74 74 69 6e 67 2c 4f 6e 2c 53 6f 66 61 2c 41 6e 64 2c 4c 6f 6f 6b 69 6e 67 2c 55 70 2c 57 68 69 6c 65 1c 02 6e 00 0c 53 68 75 74 74 65 72 73 74 6f 63 6b 1c 02 73 00 0c 53 68 75 74 74 65 72 73 74 6f 63 6b 1c 02 19 00 40 77 6f 6d 61 6e 2c 64 61 79 64 72 65 61 6d 2c 68 61 70 70 79 2c 63 6f 75 63 68 2c 77 69 6e 74 65 72 2c 63 6f 6c 64 2c 62 72 75 6e 65 74 74 65 2c 68 69 73 70 61 6e 69 63 2c 6c 61 74 69 6e 2c 64 1c 02 74 00 41 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 20 52 69 64 6f 2f 53 68 75 74 74 65 72 73 74 6f 63 6b 2e 20 20 4e 6f 20 75 73 65 20 77 69 74 68 6f 75 74 20 70 65 72 6d 69 73 73 69 6f 6e 2e 1c 02 b8 00 09 35 35 35 30 34 35 32 37 31 00 38 42 49 4d 04 25 00 00 00 00 00 10 43 d1 db 18 35 d6 bd fb 7e 19 fc db 28 9f 7c ce 38 42 49 4d 04 Data Ascii: tting,On,Sofa,And,Looking,Up,WhilenShutterstocksShutterstock@woman,daydream,happy,couch,winter,cold,brunette,hispanic,latin,dtACopyright (c) 2017 Rido/Shutterstock. No use without permission.5550452718BIM%C5~(\|8BIM
2024-12-24 15:05:14 UTC	4014	IN	Data Raw: 2e 1d 14 82 c6 d3 43 46 eb b6 31 de ef b5 6d 6b 7d ff 00 cd d6 cf 46 aa 14 b8 fd 64 01 f3 12 d7 cb e8 12 24 7a 43 ab 97 d7 70 df 71 b3 10 6f a8 9f d1 ec 01 b5 9d b3 bd ec 31 fa 4f 51 ff 00 e1 76 20 74 47 36 ee ae dc a7 92 e6 d0 3d 57 87 40 32 41 6d 5f c9 fe 73 ff 00 3d ac 87 13 e8 32 f8 0d 73 a3 70 6e 9e e2 3f ea 7d 3d 8a 7d 12 fb 2b ea 55 34 13 ee df 5b 87 8d 6e 6b ac 83 ff 00 15 91 55 36 33 fe ba ac e5 c1 11 0b 1b 8d 5a 98 b3 c8 ce 8e c7 47 be 1d 49 9d 9b 3f 34 ff 00 6f 71 fa 2d 1f 1d 56 65 41 ce 89 d0 78 ab 4d 10 02 80 12 d8 21 b0 73 2d 3c 86 9f 28 8f c8 ac 57 68 b1 ad 78 d0 38 4c 78 78 85 44 f8 25 d3 ae b2 dc 76 bf 5d af 2e 7d 60 e9 fa 32 e7 7a 3f e7 d7 fa 5f fa e2 20 a1 d1 73 b4 51 2e d1 05 e5 e4 0d a5 c0 cf 23 8f c5 33 9e ed be 68 a9 26 ed 0a 62 ef Data Ascii: .CF1mk}Fd$zCpqo1OQv tG6=W@2Am_s=2spn?}=}+U4[nkU63ZGI?4oq-VeAxM!s-<(Whx8LxxD%v].}`2z?_ sQ.#3h&b
2024-12-24 15:05:14 UTC	1338	IN	Data Raw: 78 6d 70 52 69 67 68 74 73 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 72 69 67 68 74 73 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 6a 70 65 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 72 65 64 69 74 3d 22 53 68 75 74 74 65 72 73 74 6f 63 6b 22 20 70 68 Data Ascii: xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" dc:format="image/jpeg" photoshop:Credit="Shutterstock" ph
2024-12-24 15:05:14 UTC	7445	IN	Data Raw: 3e 20 3c 64 63 3a 72 69 67 68 74 73 3e 20 3c 72 64 66 3a 41 6c 74 3e 20 3c 72 64 66 3a 6c 69 20 78 6d 6c 3a 6c 61 6e 67 3d 22 78 2d 64 65 66 61 75 6c 74 22 3e 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 20 52 69 64 6f 2f 53 68 75 74 74 65 72 73 74 6f 63 6b 2e 20 20 4e 6f 20 75 73 65 20 77 69 74 68 6f 75 74 20 70 65 72 6d 69 73 73 69 6f 6e 2e 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 41 6c 74 3e 20 3c 2f 64 63 3a 72 69 67 68 74 73 3e 20 3c 70 6c 75 73 3a 4c 69 63 65 6e 73 6f 72 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 70 6c 75 73 3a 4c 69 63 65 6e 73 6f 72 4e 61 6d 65 3d 22 53 68 75 74 74 65 72 73 74 6f 63 6b 22 20 70 6c 75 73 3a 4c 69 63 65 6e 73 6f 72 55 52 4c 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 68 75 74 74 65 Data Ascii: > <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">Copyright (c) 2017 Rido/Shutterstock. No use without permission.</rdf:li> </rdf:Alt> </dc:rights> <plus:Licensor> <rdf:Seq> <rdf:li plus:LicensorName="Shutterstock" plus:LicensorURL="https://www.shutte
2024-12-24 15:05:14 UTC	9366	IN	Data Raw: 0e df 8e 36 b4 a4 da b4 75 f8 56 b8 f1 2d 34 75 59 80 af 10 3c 0e 0b 5a 53 3a ac e7 b0 23 1e 25 a7 0d 5e 32 28 ea 7e 6b 87 89 69 1f 0c c9 24 28 f1 9e 48 c3 63 85 5b 0d f1 e1 42 a7 2c 42 b8 b6 2a a4 cf f1 60 4b 61 b6 c2 85 ae fb 62 aa 4e fd 31 56 d5 f6 c5 56 86 c2 ad 33 fc 27 15 51 e7 f0 9c 55 ff d2 f4 7f 35 c0 ad 7a 8b e3 8a b7 13 02 ad 5e e6 b8 ab b9 28 ae f8 aa d8 8d 05 3c 37 27 df 15 6c 91 db 7c 55 aa d5 86 c6 9e 18 15 b3 5f 03 85 5a a7 7a 1d fa e2 ad 50 d3 a6 05 58 ca 78 81 d8 74 c5 2d 95 a0 ae fe f8 aa 87 13 52 77 1e 06 95 df 15 7c 89 f9 d5 e5 8b 5d 0f cf 37 f0 c5 c6 0b 7d 4d 85 fd 98 6a 88 83 49 51 34 61 ba 0a 49 bf fb 3c 01 98 3b 3c fe 56 68 97 94 8b c0 ad 05 5a 94 65 ff 00 9a b0 a5 11 a1 79 c3 54 d1 6e 84 b6 f3 48 2d 52 bc e2 e6 4a f1 af f2 9d b2 Data Ascii: 6uV-4uY<ZS:#%^2(~ki$(Hc[B,B*`KabN1VV3'QU5z^(<7'l\|U_ZzPXxt-Rw\|]7}MjIQ4aI<;<VhZeyTnH-RJ
2024-12-24 15:05:14 UTC	4014	IN	Data Raw: e7 1d ec 65 81 9b ca fa fc f6 2e bf 66 ce fc 0b 98 49 3d 69 2a 85 99 09 a6 ff 00 6f 00 52 5e 75 71 a6 ea 3a 6d db e9 77 d1 3c 3a 9c 3b c8 ad fd dc b4 1f ee 82 05 19 4f da 46 af c7 f6 7e d6 6d 31 66 05 d6 65 c2 47 25 31 3a 71 a9 24 7b 6e 73 23 88 38 dc 05 1d 6b 3d 1d 77 0a a7 7a 75 eb 91 25 90 08 e6 ba 84 ad 39 05 1d c1 3b 1f 96 40 b2 01 09 34 f0 87 1c 59 69 e3 c8 7d 3b 64 49 66 02 1e 6b 98 0a d3 98 e3 d7 a8 fe 19 02 59 00 95 dc 29 96 a7 92 ac 67 a6 e3 20 4b 60 48 f5 8d 6f 4d d2 61 2d 23 09 ae 08 3e 95 ba 9d d8 ff 00 94 7b 2f 8e 42 52 a6 c8 c0 96 07 79 a9 5e ea 77 66 ea ed f9 bf 44 51 b2 a2 ff 00 2a 8e c3 29 26 dc 80 00 44 5a a8 a8 c2 03 12 53 28 9c 0a 57 bf 7c 93 12 8e 8e 50 07 5d bc 31 43 9a e1 55 69 5a 8f 1a f5 c5 50 f2 5e 3c ad c2 05 79 9f a0 48 94 b9 Data Ascii: e.fI=ioR^uq:mw<:;OF~m1feG%1:q${ns#8k=wzu%9;@4Yi};dIfkY)g K`HoMa-#>{/BRy^wfDQ)&DZS(W\|P]1CUiZP^<yH
2024-12-24 15:05:14 UTC	3337	IN	Data Raw: 55 6b 30 c5 2a 0e d5 c8 b2 51 9f e1 15 ae 02 90 f0 cf cf 4d 46 5b 5f 34 d9 34 26 85 ed c3 78 7d 96 20 fe bc 88 16 ce e8 20 7c a3 f9 a7 61 6c 91 db 5e 96 59 83 05 40 aa 00 a9 3b 12 e4 d0 6f 87 84 86 37 6f 54 1e 6d 4b bb 32 4c 0d 14 a8 68 d0 38 2b c8 ff 00 30 3f ef b6 eb 90 24 96 71 14 92 4d 34 d7 13 34 f3 1e 52 39 a9 3d 07 b0 03 b0 1d b0 d2 ad e0 df 49 c5 5f ff d5 f4 ad 31 43 a8 71 57 71 38 ab 80 c5 5d 4c 52 d5 0e 28 75 31 56 8a e2 96 b8 e2 85 a5 31 56 b8 e2 ad 15 38 aa e0 36 c0 97 62 ae a6 05 75 06 2a a7 c0 72 c2 ab fd 38 ca ef 4c 6d 14 a0 f6 f1 fb 63 6a a6 6d 60 3d 69 86 d5 09 3e 85 a3 4a 6b 24 08 5b f9 80 00 e3 6a a0 fe 5c d0 8a f1 2a 40 f0 06 98 2c 27 74 14 9e 4e f2 79 7e 72 db 24 8e 3a 17 3c a9 f7 e0 e2 09 a9 37 06 81 e4 fb 39 84 d0 db 43 14 83 a3 a8 Data Ascii: Uk0QMF[_44&x} \|al^Y@;o7oTmK2Lh8+0?$qM44R9=I_1CqWq8]LR(u1V1V86bur8Lmcjm`=i>Jk$[j\*@,'tNy~r$:<79C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49844	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:14 UTC	900	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/Paperless-small.jpg?ext=.jpg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=sSZMZdA94O1IGK0TphnKCeBBwUMSfhk9y7fxM+s8if6MWGSsxi5nxo2HpMY+v0VUBO73Rv+aZ3WR6N1sVdPFYhk7DQeutQ/PxtDu7zcFdEMo4fc1M8z73bvEWzLR
2024-12-24 15:05:14 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:14 GMT Content-Type: image/jpeg Content-Length: 163486 Connection: close Set-Cookie: AWSALB=LZOLvjwoO78e5ZTjilpyfYexkTm5O33iAAhauFag301OuNTYF4C7R265C1dVkqbhViYHA7F7zPIOo9t9AL01d5JqT1/xKv2xnO0YNQX/e0r6H1mXlG9qKii0myoQ; Expires=Tue, 31 Dec 2024 15:05:14 GMT; Path=/ Set-Cookie: AWSALBCORS=LZOLvjwoO78e5ZTjilpyfYexkTm5O33iAAhauFag301OuNTYF4C7R265C1dVkqbhViYHA7F7zPIOo9t9AL01d5JqT1/xKv2xnO0YNQX/e0r6H1mXlG9qKii0myoQ; Expires=Tue, 31 Dec 2024 15:05:14 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 22 Jun 2021 18:48:05 GMT Accept-Ranges: bytes ETag: "e9722239767d71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:14 UTC	1842	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 00 be 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 66 00 00 00 00 00 00 01 2c 00 00 00 01 00 00 01 2c 00 00 00 01 00 06 90 00 00 07 00 00 00 04 30 32 31 30 91 01 00 07 00 00 00 04 01 02 03 00 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 16 80 a0 03 00 04 00 00 00 01 00 00 0f 00 00 00 00 00 00 00 ff ed 01 2e 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 01 11 1c 02 19 00 40 73 65 6c 66 20 65 6d 70 Data Ascii: JFIF,,ExifMM*V^(if,,02100100.Photoshop 3.08BIM@self emp
2024-12-24 15:05:14 UTC	1338	IN	Data Raw: 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 52 69 67 68 74 73 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 72 69 67 68 74 73 2f 22 3e 0d 0a 09 09 09 3c 78 6d 70 52 69 67 68 74 73 3a 57 65 62 53 74 61 74 65 6d 65 6e 74 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 68 75 74 74 65 72 73 74 6f 63 6b 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 69 70 74 63 26 61 6d 70 3b 75 74 6d 5f 6d 65 64 69 75 6d 3d 67 6f 6f 67 6c 65 69 6d 61 67 65 73 26 61 6d 70 3b 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 77 65 62 73 74 61 74 65 6d 65 6e 74 3c 2f 78 6d 70 52 69 67 68 74 73 3a 57 65 62 53 74 61 74 65 6d 65 6e 74 3e 0d 0a 09 09 3c 2f 72 64 66 3a 44 65 Data Ascii: Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/"><xmpRights:WebStatement>https://www.shutterstock.com/license?utm_source=iptc&utm_medium=googleimages&utm_campaign=webstatement</xmpRights:WebStatement></rdf:De
2024-12-24 15:05:14 UTC	2676	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-12-24 15:05:14 UTC	1338	IN	Data Raw: c8 fb e2 5f 30 0c 63 0d bc 90 49 03 1f 95 3f 10 3e 38 ea 1e 33 d3 75 06 be ba be ba b8 d5 24 33 cf 71 6d ba 4b 44 94 22 c4 c5 f7 28 dd b8 22 92 70 70 4e 02 e4 f1 a4 61 27 e8 55 3a 6a 4e f2 db e7 ff 00 0d fd 6a 76 7f 1f bf 68 6f 0f f8 ff 00 5e 92 ea e6 2b 8b cd 5b 56 d4 65 be bf d4 55 a7 0a cb 21 2c a8 b1 cb 9c 10 36 75 da 01 c9 e7 15 e5 9e 26 fd a5 af 22 d1 90 c9 72 d6 b1 ce b9 78 ec 26 64 59 5c 0c 07 91 4b 32 96 20 37 61 80 fd 48 e2 bc bf c5 5f 12 4d f4 51 d9 cb 25 e3 1b 74 68 c1 2f b7 cb 7c b7 23 39 18 04 f4 18 07 92 70 49 af 3e d6 f5 d9 b5 29 8f 93 0b b4 90 c6 3e 63 83 9c 71 9e 00 eb e9 8a de 30 48 da 55 34 b4 4e cf c5 3f 14 67 d5 a5 56 37 0f 32 c2 89 1e d0 d8 cf 03 68 c2 9c 71 93 c0 c0 eb 8c 73 9e 46 6d 4a 14 48 d9 82 2b 0d db b2 b8 11 9c 71 fe 70 3a Data Ascii: _0cI?>83u$3qmKD"("ppNa'U:jNjvho^+[VeU!,6u&"rx&dY\K2 7aH_MQ%th/\|#9pI>)>cq0HU4N?gV72hqsFmJH+qp:
2024-12-24 15:05:14 UTC	5352	IN	Data Raw: 12 f5 6f 8a 9f b3 67 84 3c 41 af 69 e3 4b d4 b5 8d 32 1b b7 89 41 58 f3 22 ef 1b 41 24 8c a9 53 b7 2d 8c 91 b9 b1 b8 fa 81 18 35 e6 ff 00 00 7e 28 e8 3e 35 d3 1b 49 d1 e4 d3 d7 fb 05 16 de 7b 58 24 04 5a e0 ba 85 da 49 3f 29 42 87 24 90 55 81 39 52 07 a5 ed da 7f 4a c5 98 52 b7 2a 49 df a0 c0 29 71 8a 5c 60 51 de 83 40 03 8a 3e 94 63 9a 3a d0 30 c6 4d 07 8a 75 18 c0 a0 2c 37 b5 18 e6 9d 8e 69 08 e6 82 84 c7 34 8a 31 4b 8e 28 ef 48 00 8e 69 31 4b da 8d b8 a4 03 4f 22 9a 39 a9 08 a6 e3 15 20 27 7a 4c 52 b1 a4 a0 00 0a 09 e2 8e 94 50 00 47 34 11 47 6a 3b d0 00 0e 69 08 e2 97 1c 7f 4a 42 78 a0 04 3d 7f 9d 38 73 48 78 a5 a0 06 9e 94 0a 75 20 eb 40 0a 4d 05 73 40 a2 80 13 34 bd 68 a3 a8 a0 00 f2 68 cd 04 66 8a 00 0d 14 75 34 50 33 d9 a5 1f e1 53 5a 8f dd d3 25 Data Ascii: og<AiK2AX"A$S-5~(>5I{X$ZI?)B$U9RJR*I)q\`Q@>c:0Mu,7i41K(Hi1KO"9 'zLRPG4Gj;iJBx=8sHxu @Ms@4hhfu4P3SZ%
2024-12-24 15:05:14 UTC	7445	IN	Data Raw: e8 66 91 5a 6f 2a 51 2a a9 53 b3 39 c8 53 8c 9c 67 3e 9d 71 9a ca f1 05 fa df eb 32 c9 02 cc 91 b9 2f f3 f2 cb d0 73 8e 9d 07 03 8c 60 70 2a 1b 6b 75 21 9a 28 f7 16 e5 63 0d f3 00 06 58 e3 a8 e3 eb 8f c6 a5 bd 48 de 2d b1 c9 ba 46 19 20 8c fc a0 e7 39 04 e7 eb 81 52 67 d0 cf 9e 49 35 4d 41 77 79 92 36 07 51 e9 ff 00 ea 1f ca a9 b4 ac c8 bc 71 cf 53 f9 d5 f6 31 0b 79 7e 56 59 17 6f 18 f9 89 e7 27 3e 9d 4f e3 df 19 aa 12 ae df 7d dd bb 7f 9f fe b5 48 10 32 b3 37 a1 3d 31 48 a3 12 e3 1d b2 29 ce de 54 83 6f a1 c8 a9 67 47 49 8b 32 c9 10 91 46 78 23 e5 20 7d 3b 73 52 21 83 74 a1 57 a6 d2 40 e7 e9 ff 00 d7 ad 4d 12 c5 a6 4d be 57 99 df 03 3c 7a f2 3b d5 0d 3a d3 cf 93 e6 61 18 00 65 89 af 43 f0 57 81 ee 2e e2 f3 23 68 fc c6 3f 71 a4 64 62 bb 33 9f a7 e3 fe 15 Data Ascii: fZoQS9Sg>q2/s`p*ku!(cXH-F 9RgI5MAwy6QqS1y~VYo'>O}H27=1H)TogGI2Fx# };sR!tW@MMW<z;:aeCW.#h?qdb3
2024-12-24 15:05:14 UTC	2676	IN	Data Raw: f8 c9 fb 13 6a 7e 73 5b f8 8b c2 f6 ea ca eb 7d 64 df 6b d2 26 c7 23 2e b9 88 75 3c 36 c7 eb 90 05 7e a9 7c 2f f0 bc 76 7a 74 2d b5 7e 55 fb c4 73 8c 0f 5e fd 3f cf 5e ea fb 5e d3 bc 2b a6 96 b8 90 2a e0 ab 2b 72 a4 63 2d 9f cf 9e 31 f4 af 33 2e cd eb aa 5f ed 0d 4a 3e 7f e7 fe 77 3e 8f 13 88 84 2a f2 2a 7c cb ee fe be e3 f3 af e1 9f fc 14 cf c5 de 11 d2 71 e3 4d 1c 6a da 74 36 af 2c da 9e 9b f3 18 a3 44 2e d2 4b 0b 64 a8 54 0c 49 52 d8 00 93 81 5e e9 e1 0f db cf e1 ef c4 ef 06 c3 7d 6f e2 4d 2c 2c ca 25 8c 19 02 c8 dc 13 8d bd 58 f3 df 1f 77 27 38 ad 6f da 4f f6 51 f8 63 f1 cf e1 d7 8a 2d 74 7f b2 f8 17 c4 3e 22 d3 6e 2c 23 d5 b4 c8 57 ca 8c 4a bb 24 32 5b 06 58 df 72 92 09 e1 86 e2 77 67 8a fc f2 f8 95 fb 3a f8 df c7 1f b6 4f 88 b4 ff 00 b2 c7 06 9f a5 Data Ascii: j~s[}dk&#.u<6~\|/vzt-~Us^?^^++rc-13._J>w>*\|qMjt6,D.KdTIR^}oM,,%Xw'8oOQc-t>"n,#WJ$2[Xrwg:O
2024-12-24 15:05:14 UTC	16384	IN	Data Raw: be d1 28 f3 32 df 79 79 e8 47 62 09 e8 38 e6 b8 6f 89 1f 09 2c 75 bf 89 5a 83 49 14 d7 12 3e d4 58 50 10 84 6f 00 82 de 83 03 1e 84 71 d4 d7 d4 df 07 7e 1d c3 e1 bf 0d e9 c3 cb 45 30 c2 15 f1 c9 cf 1d 7e 9f d6 bc 9c 76 26 58 9a 70 a4 f7 47 7d 0a 70 c3 ca 55 63 f6 8f 5a f0 15 92 c1 a6 72 bb 55 13 76 4f 23 3f fd 6f d2 bc 2b f6 a6 f8 a9 a8 78 76 e2 45 86 1b a6 0b f2 a8 83 0c d8 07 3c 29 18 e7 eb d8 8e bc d7 bd 78 72 e1 6d cf 93 9d bb 86 dc 82 33 f8 57 ce df b5 2e 85 3c fa f3 0f 39 ed 56 e1 c6 d6 ce d2 3a 63 f1 3c fa 66 a7 14 ed 42 31 e8 65 96 c2 32 c5 39 4c f1 8b ef 8b 9a 1b ea 96 b6 77 de 20 8f 4d fb 41 5f f4 6b d0 f6 db c9 3c 85 79 02 fe 40 91 e9 9c d7 7f f0 57 4c f0 4f 82 ff 00 e1 3e d6 3c 43 a8 4b 27 f6 fe b7 a7 e9 76 1f 67 81 e7 77 16 f6 b2 ca 63 4d bb Data Ascii: (2yyGb8o,uZI>XPoq~E0~v&XpG}pUcZrUvO#?o+xvE<)xrm3W.<9V:c<fB1e29Lw MA_k<y@WLO><CK'vgwcM
2024-12-24 15:05:14 UTC	16384	IN	Data Raw: ab 7a 3e 53 53 c3 c1 a8 af 79 aa 7b 01 8b 70 30 f4 45 da 96 f0 7e f3 f4 a4 88 e0 0a cc 09 e3 ce 29 eb d3 fc 69 91 9a 7a 8a 00 08 c8 a0 f0 29 47 02 9a dd 69 5c 04 ce 29 ad d6 9c 78 15 1b 1c 9a 40 04 f3 51 93 4f 73 81 4c ef 4c 00 9c 8a 0f 4a 3a 0a 61 6c d3 01 09 cd 04 fa d2 d2 33 0c 54 dc 06 9e 29 bd 45 29 e4 d2 1e 2a 80 6b 1a 43 d6 86 3b 8d 23 1c 0e d5 2c 00 be 0d 30 9c d1 9c 9a 4d d8 35 20 23 36 da a1 e2 6d 62 3f 0e e9 be 64 89 34 d7 53 ab 2d ad ac 25 44 d7 2c 06 4e 37 7c aa aa 3e 66 76 c2 a2 f2 c4 71 96 fc 46 f1 ce 9f f0 7b c0 b2 78 83 55 86 6b a9 24 9e 2b 2d 33 4e 83 fe 3e 35 5b c9 9c 47 6f 6d 10 3f c7 23 90 01 3c 28 dc ed 85 52 47 ce 1f 15 be 22 6b 1a ee b9 ac 68 e1 6c 7c 41 ad 59 ea 36 3e 1b be 81 4b 0d 37 5e f1 1d e2 f9 f0 68 aa 71 bb fb 2f 4f b7 3f Data Ascii: z>SSy{p0E~)iz)Gi\)x@QOsLLJ:al3T)E)*kC;#,0M5 #6mb?d4S-%D,N7\|>fvqF{xUk$+-3N>5[Gom?#<(RG"khl\|AY6>K7^hq/O?
2024-12-24 15:05:14 UTC	8028	IN	Data Raw: b4 31 5f 94 08 9c fc aa 87 3e 8d fb 41 fc 5b b7 f0 ff 00 ed 97 a5 7c 11 b0 d4 16 c2 c7 c5 bf 0c d6 7d 02 39 09 31 d8 eb 5a 65 fb dd 69 73 e0 1e ab f6 39 38 00 96 2a 83 be 2a a5 27 74 e5 e6 fe 5a 21 7b 35 cb 68 f9 2f 9f fc 39 fa 19 fb 40 e9 3e 55 c3 4c 3f 89 7f fa f5 f9 65 ff 00 05 fa b4 5b bf d8 cf c3 73 63 73 5b 78 ce db 07 d0 35 95 e8 3f c8 57 ea af 8d 7c 4b 0f c5 2f 84 fa 1f 89 ad e1 7b 78 35 ed 3e 1d 41 20 93 ef c2 26 89 64 f2 db fd a5 ce 0f b8 af c9 5f f8 2f f6 bf f6 4f d9 5f c2 3a 7f 19 bb f1 7c 73 9c f7 11 59 dd 7f 2f 30 57 3c 57 fb 44 5a 3a 22 ef 45 a2 9f fc 14 62 ed af bf e0 83 9f 06 db 23 74 70 78 59 94 01 d0 ff 00 64 4e bf d6 be a6 b5 f1 32 e8 7f b4 34 de 19 66 0a da a7 c3 af 0e 78 8e 15 0c 42 b3 2c 97 76 77 0c 3f e0 2b 66 33 e9 8a f9 3f fe 0a Data Ascii: 1_>A[\|}91Zeis98**'tZ!{5h/9@>UL?e[scs[x5?W\|K/{x5>A &d_/O_:\|sY/0W<WDZ:"Eb#tpxYdN24fxB,vw?+f3?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49845	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:14 UTC	669	OUT	GET /getmedia/51975178-32b0-44bf-babc-5af804f69e62/WereOnity5.png?width=2000&height=1174&ext=.png HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=sSZMZdA94O1IGK0TphnKCeBBwUMSfhk9y7fxM+s8if6MWGSsxi5nxo2HpMY+v0VUBO73Rv+aZ3WR6N1sVdPFYhk7DQeutQ/PxtDu7zcFdEMo4fc1M8z73bvEWzLR
2024-12-24 15:05:14 UTC	925	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:14 GMT Content-Type: image/png Content-Length: 915125 Connection: close Set-Cookie: AWSALB=fz5I7Wxce+E9IRnUboFVUhso2z6oaCcfKl+A7r7E3QGJtDU+Pf5S+fQr0zM5pZel24TntQX0U4jCWiV7TCXWl/L8aBw8Url9cqFXv0vyMKyCD5YlkL/Mvh4crAWq; Expires=Tue, 31 Dec 2024 15:05:14 GMT; Path=/ Set-Cookie: AWSALBCORS=fz5I7Wxce+E9IRnUboFVUhso2z6oaCcfKl+A7r7E3QGJtDU+Pf5S+fQr0zM5pZel24TntQX0U4jCWiV7TCXWl/L8aBw8Url9cqFXv0vyMKyCD5YlkL/Mvh4crAWq; Expires=Tue, 31 Dec 2024 15:05:14 GMT; Path=/; SameSite=None Cache-Control: public, must-revalidate Expires: Tue, 24 Dec 2024 15:05:14 GMT Last-Modified: Fri, 27 Sep 2024 14:02:33 GMT Accept-Ranges: bytes ETag: "638630425531563232" Content-Disposition: inline; filename=WereOnity5.png X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:14 UTC	1338	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 d0 00 00 04 96 08 02 00 00 01 8a b4 90 54 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0a 4b 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 54 69 a2 12 92 00 a1 84 18 12 40 ec 88 a8 c0 88 a2 22 82 15 19 14 71 c0 d1 11 90 b1 22 8a 85 41 b1 f7 01 79 08 28 e3 e0 28 36 54 de 0f de 1a 7d b3 e6 bd 37 6f f6 af bd f6 39 67 9d ef 9c 7d 3e 00 46 60 b0 44 9a 85 aa 01 64 4a 15 f2 88 00 1f 3c 36 2e 1e 27 77 03 0a 54 20 81 03 80 40 98 2d 0b 89 f4 8f 02 00 e0 fb f1 f0 ec 88 00 1f f8 02 04 e0 cd 6d 40 00 00 6e d8 04 86 e1 38 fc 7f 50 17 ca e4 0a 00 24 0c 00 a6 8b c4 d9 42 00 a4 10 00 32 72 15 32 05 00 Data Ascii: PNGIHDRTgAMAaKiCCPsRGB IEC61966-2.1HSgTS=BKKoR RBTi@"q"Ay((6T}7o9g}>F`DdJ<6.'wT @-m@n8P$B2r2
2024-12-24 15:05:14 UTC	1338	IN	Data Raw: f7 a9 c2 a9 c5 53 8f 4c bd af 8b ea 5a e9 46 e8 2e d1 dd a7 db a5 3b a6 a7 af 17 a0 27 d3 db ae 77 4e 6f 44 9f a3 ef a5 9f a6 bf 45 ff 94 fe b0 01 cb 60 96 81 c4 60 8b c1 69 83 67 b8 26 ee 8d 67 e0 95 78 07 3e 6a a8 6b 18 68 a8 34 dc 6b d8 6d 38 6e 64 6e 34 d7 a8 c0 a8 c9 e8 91 31 cd 98 6b 9c 6c bc c5 b8 dd 78 d4 c4 c0 24 c4 64 a9 49 83 c9 7d 53 aa 29 d7 34 d5 74 9b 69 a7 e9 5b 33 73 b3 18 b3 b5 66 2d 66 43 e6 5a e6 7c f3 7c f3 06 f3 87 16 4c 0b 4f 8b 45 16 35 16 37 2d 49 96 5c cb 74 cb 9d 96 d7 ac 50 2b 27 ab 54 ab 6a ab ab d6 a8 b5 b3 b5 c4 7a a7 75 cf 34 e2 34 d7 69 d2 69 35 d3 ee d8 30 6c bc 6d 72 6c 1a 6c fa 6c 39 b6 c1 b6 05 b6 2d b6 2f ec 4c ec e2 ed 36 d9 75 da 7d b6 77 b2 cf b0 af b5 7f e0 a0 e1 30 db a1 c0 a1 cd e1 37 47 2b 47 a1 63 b5 e3 cd e9 Data Ascii: SLZF.;'wNoDE``ig&gx>jkh4km8ndn41klx$dI}S)4ti[3sf-fCZ\|\|LOE57-I\tP+'Tjzu44ii50lmrlll9-/L6u}w07G+Gc
2024-12-24 15:05:14 UTC	1338	IN	Data Raw: a7 b6 cf 41 9f 1f 4e 64 4e 4c fc 13 03 98 f3 fc 8c c5 75 a5 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 09 70 48 59 73 00 00 19 a2 00 00 19 a2 01 c3 31 39 c8 00 00 07 43 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 32 2d 63 30 30 30 20 37 39 2e 35 36 36 65 62 63 35 2c 20 32 30 32 32 2f Data Ascii: ANdNLu cHRMz&u0`:pQ<pHYs19CiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.566ebc5, 2022/
2024-12-24 15:05:14 UTC	2676	IN	Data Raw: 2d 39 39 63 64 2d 65 61 37 35 37 34 64 33 39 63 36 38 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 34 2d 30 39 2d 32 36 54 30 38 3a 32 32 3a 30 31 2d 30 35 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 34 20 28 57 69 6e 64 6f 77 73 29 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 38 35 63 35 38 63 63 34 2d 63 63 39 63 2d 36 62 34 33 2d 61 33 63 32 2d 65 34 38 31 39 62 30 64 61 65 35 38 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 34 2d 30 39 2d 32 36 54 30 39 3a 31 32 3a 34 36 2d 30 35 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 Data Ascii: -99cd-ea7574d39c68" stEvt:when="2024-09-26T08:22:01-05:00" stEvt:softwareAgent="Adobe Photoshop 23.4 (Windows)"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:85c58cc4-cc9c-6b43-a3c2-e4819b0dae58" stEvt:when="2024-09-26T09:12:46-05:00" stEvt:sof
2024-12-24 15:05:14 UTC	10704	IN	Data Raw: 64 40 b0 63 ae 0f d8 c1 43 5b 8d b1 a6 7f fe 49 99 57 df 74 d8 e3 80 cf c0 0b 4f 54 26 31 52 65 99 d8 b0 f0 30 9f fa 7a 94 86 23 c1 9e 08 c6 5c a7 ed e0 ac 17 d8 1a 5e c9 89 ac 0f ca 0a 09 c8 06 8a 0f 80 79 b9 dd 2c 60 5a 8d f1 66 07 96 66 47 9e 3e 97 5a a0 e7 ae f4 af e5 05 b2 e6 fb 66 86 d6 96 41 d1 d4 8c f7 45 a9 87 2c ab b7 b8 50 4a 03 ba 95 e0 80 a6 8a 40 00 60 50 93 41 a5 cd 6c 04 6d aa da 22 4f 70 22 43 a5 50 06 7c ea 36 53 5c 4a 14 ca 97 b2 c7 23 02 f2 51 8f 99 18 01 25 67 e4 00 ed 22 b4 37 49 eb ac b6 02 c9 38 16 0f 5b bc 97 f3 31 4e 9b 8a 59 a4 de 92 ea 90 39 a8 a7 b5 6b 0c 54 2a 08 35 73 a1 92 59 f4 cd 78 18 46 b5 e0 54 20 ae b0 4d b8 3f 1f cd 79 31 6c a8 80 e5 37 ec af 2d 36 cd fd ad de 97 d2 63 49 5e 6d 79 5b a7 bc cb aa e6 58 aa ae 49 7f 96 Data Ascii: d@cC[IWtOT&1Re0z#\^y,`ZffG>ZfAE,PJ@`PAlm"Op"CP\|6S\J#Q%g"7I8[1NY9kT*5sYxFT M?y1l7-6cI^my[XI
2024-12-24 15:05:14 UTC	5352	IN	Data Raw: a4 ee e4 47 a9 28 9b 60 24 24 76 77 8c ec ba 7f 92 66 0b a5 cc f2 5a 4a 9a 53 00 67 56 00 4b 42 ce 7a d1 ca 1d 01 00 44 58 e9 5b 35 95 97 ac b1 81 4c d2 86 70 ba 3d 95 eb 34 00 83 b8 82 a3 71 60 16 ac 99 49 50 d3 0e 59 ea c8 16 ab 75 79 42 a2 4f 0d 8e e8 3e d1 c5 ec f3 3c 60 51 b2 40 2b 44 ee 2b 1a df ec 0a a0 ab 48 a5 0e 03 17 75 f6 88 88 ae 41 0e 57 a9 57 4d f0 cf 99 b9 03 c0 bf 7d 64 f7 a9 d6 a3 7f 3d fc 51 00 e7 86 c4 95 2b d9 70 2a 83 7e 09 0c 62 10 2b af 33 97 f3 27 9d fe 65 d4 76 81 c5 d7 f3 4b 7b 74 24 db 1e ea 76 48 58 01 7e e9 07 78 8e ea b9 ba ce b5 e3 4c 7e 24 d2 85 5a 3b c0 ab 3a 12 91 70 01 57 2a 91 8c 86 82 61 42 99 39 13 33 95 c6 17 b8 26 14 79 37 e0 cf 01 b1 5c 09 03 7d 32 7d 60 ae ec c6 82 cf be 62 4a ac 8a 18 c5 06 f2 53 9f 47 97 fb 20 Data Ascii: G(`$$vwfZJSgVKBzDX[5Lp=4q`IPYuyBO><`Q@+D+HuAWWM}d=Q+p~b+3'evK{t$vHX~xL~$Z;:pWaB93&y7\}2}`bJSG
2024-12-24 15:05:14 UTC	5352	IN	Data Raw: 33 6c e5 88 25 07 0b 59 2a 95 b7 be 15 8b ee 26 50 47 19 01 b9 17 4e d0 2d 4f 44 52 99 b9 fb 5a 15 77 69 8f 42 9e 45 e2 5f 75 fa 07 29 d8 2b b2 5d 8d 4c 3b 49 94 2c 27 97 03 69 f1 8d 27 fc cc 8b 88 a8 ba 87 fa 49 08 03 00 39 d4 25 d7 d3 fa 75 14 5f 14 9d 4b 96 05 87 bd 11 14 10 d3 84 58 38 78 41 23 ec 11 8f ee 8c 1b 65 1a 25 11 49 22 85 30 9a c5 95 13 51 98 f4 a8 3a 88 02 72 75 d7 28 59 2f 17 f3 9a d4 9c d6 5d 28 64 b7 6f 74 e1 59 b7 c6 58 a3 16 00 0d e2 ce 4e dd d0 c2 ad 0b ce 99 15 cb a3 d1 dc 4e fa 50 5e 31 a0 8c 18 b3 ab f8 cd 56 21 d6 90 40 a6 14 30 01 c4 c7 ed d2 7f ba a4 bd eb 7b 11 a9 40 3a 55 af 34 8f f1 dc 95 c4 28 2b 56 82 13 5a 0c a1 a9 4a 02 87 6c df 7a b4 a5 6a 90 d9 60 74 f4 6d 56 26 b3 c5 dd f9 b2 ac b2 24 0f 9e f4 dc 71 e1 1b f4 6a 4f ed Data Ascii: 3l%Y*&PGN-ODRZwiBE_u)+]L;I,'i'I9%u_KX8xA#e%I"0Q:ru(Y/](dotYXNNP^1V!@0{@:U4(+VZJlzj`tmV&$qjO
2024-12-24 15:05:14 UTC	4014	IN	Data Raw: 08 25 43 17 86 80 36 bf 9c 67 de 2e 37 9f 1a 4c fd 00 03 36 4a 3b 0c 2b 4b b2 48 04 7a 1b bd 47 6c 21 68 74 c7 ca 16 8b 25 b5 7b 00 81 c3 da 50 6b ea f5 2b 1a a6 82 a8 83 af 42 62 16 35 68 76 0a a6 32 b3 d5 83 b2 f1 d5 c9 b2 5e 4c 9f fc e8 d0 89 ac 74 d6 34 47 61 22 92 ae 8d 42 e1 96 96 d7 4f 6b 73 0b b8 64 b1 02 2e 26 05 74 c9 a7 3a a8 66 45 bb 15 a6 45 f0 62 b1 cb fe 2e 6a f1 13 ec 6b 9b de 08 03 b2 44 dd c0 b5 5a 49 b3 5d df 1c c0 9c c0 e0 9d ca 1b 37 f5 ea de 4d c8 30 a4 94 16 96 09 8e 67 2a 1c df 9e ea c8 9d d5 f1 da 54 b3 a7 b1 1c af ad e7 04 30 37 30 bb b4 7c 00 a1 3d 00 ac 5e d3 a3 0f bf f9 a0 24 ba 61 40 c5 33 27 80 2a 6a 74 ea 52 c1 e1 16 78 10 b0 0a af de 45 fa ce d9 26 40 5c 76 d0 d4 ca 08 89 e9 6a f0 51 f1 86 b4 3c b2 11 4d fb b4 2a c3 9f 80 Data Ascii: %C6g.7L6J;+KHzGl!ht%{Pk+Bb5hv2^Lt4Ga"BOksd.&t:fEEb.jkDZI]7M0gT070\|=^$a@3'jtRxE&@\vjQ<M*
2024-12-24 15:05:14 UTC	1338	IN	Data Raw: f5 2d 0a be e4 58 87 55 9a c5 74 0e 26 a0 f4 3a 47 c5 63 a5 bc 6d 2b 18 89 bd e9 be 88 3f 22 1a 64 b6 67 06 92 17 22 35 8d e9 22 48 34 a0 c7 a6 3c c7 17 f0 4e ca 85 8e 0a ec 75 07 44 8e 4b fa d8 e7 87 90 6e f0 96 a6 70 d7 49 b5 ce d4 eb 92 4d 28 05 81 64 b4 2b b3 62 75 a3 42 f9 01 cc 2c 70 04 8e 65 5d e7 24 19 bc c4 8f bc 3b 17 2c 91 51 c7 c1 2d 41 79 d9 3b 06 c0 b0 64 eb cf 55 bd c5 61 c5 bc 19 b7 e5 9e 53 30 81 14 3e 8a 58 57 74 bd 59 7c f1 f2 d2 87 28 14 23 5f dc 48 ba 19 91 f9 d5 c9 7b 22 a9 c1 ee 44 31 9d e9 85 12 7e 13 77 b4 b6 a6 c6 5d 49 1f 99 a4 a1 12 6d 92 4a ca fc 10 be 32 7e 03 16 46 cd 52 ab 95 ae dc 3f 68 02 c9 90 83 3b 0e ab 91 23 ac a9 bb 65 5e 5b 54 40 a9 ce c2 5c ea f2 00 2b d5 0e d5 6a b2 01 54 84 3b e1 21 95 23 a2 bc c9 c1 48 7d 04 72 Data Ascii: -XUt&:Gcm+?"dg"5"H4<NuDKnpIM(d+buB,pe]$;,Q-Ay;dUaS0>XWtY\|(#_H{"D1~w]ImJ2~FR?h;#e^[T@\+jT;!#H}r
2024-12-24 15:05:14 UTC	8028	IN	Data Raw: 53 82 79 65 fe 50 64 13 d5 32 3e c0 80 42 91 bc 77 14 4d 47 e9 33 45 7b d5 7b 30 25 13 3f b8 80 18 3e 56 6a ff 0a 62 67 e1 cd 7b f2 c3 df 0a 84 38 80 0f 58 c4 d3 7c 27 18 23 d4 c4 0b 10 42 e4 46 66 9a 25 17 14 5e d2 0f 69 6d 58 33 02 d0 4c cc 3b 67 f1 1b 8f ba 91 ee c0 79 0a fb ff a9 cc a9 42 66 ac 63 70 a1 dc cf 51 25 be ab de 91 a4 56 23 a2 f6 b5 be 58 62 c4 c7 e6 43 fc 0e ba 95 5f c7 48 97 dc 74 c8 42 8f bd 14 70 57 33 0d 64 40 42 de 71 b7 a7 15 64 44 a1 01 97 a8 72 e9 7e 03 c4 07 80 5d 71 32 55 c6 71 79 7b 21 cd e0 17 d5 96 15 65 67 0a 8c 16 29 82 53 6a 04 70 0a 3f 40 03 fc 28 ca d5 07 a8 2a 13 2f f3 b0 43 5d d9 a1 80 6c da 9b e4 a5 02 10 ad 23 2b 80 99 73 db 96 01 61 06 a1 bc d9 91 0d 3f 6f 55 22 30 a7 06 da c5 5c 16 c4 1d 60 f2 ee dd 8c bd 93 9b dc Data Ascii: SyePd2>BwMG3E{{0%?>Vjbg{8X\|'#BFf%^imX3L;gyBfcpQ%V#XbC_HtBpW3d@BqdDr~]q2Uqy{!eg)Sjp?@(*/C]l#+sa?oU"0\`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49846	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:14 UTC	883	OUT	GET /Content/images/article-img-1.png HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/Content/styles/MQ-styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=sSZMZdA94O1IGK0TphnKCeBBwUMSfhk9y7fxM+s8if6MWGSsxi5nxo2HpMY+v0VUBO73Rv+aZ3WR6N1sVdPFYhk7DQeutQ/PxtDu7zcFdEMo4fc1M8z73bvEWzLR
2024-12-24 15:05:14 UTC	827	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:14 GMT Content-Type: image/png Content-Length: 69678 Connection: close Set-Cookie: AWSALB=8cLuqLXw4s4vC7fvUkcrM57rGllbK2dZ0a8trxPvtFxAlBq52unT74TAfrT6FuplCffPnUwQ4uG8W1Z1MNBa4wA6wN5AX1+165WvDv5aK55f384sXR7LYJWsyQWb; Expires=Tue, 31 Dec 2024 15:05:14 GMT; Path=/ Set-Cookie: AWSALBCORS=8cLuqLXw4s4vC7fvUkcrM57rGllbK2dZ0a8trxPvtFxAlBq52unT74TAfrT6FuplCffPnUwQ4uG8W1Z1MNBa4wA6wN5AX1+165WvDv5aK55f384sXR7LYJWsyQWb; Expires=Tue, 31 Dec 2024 15:05:14 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:14 UTC	506	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 1a 00 00 00 bc 08 06 00 00 00 a7 81 61 fd 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 40 00 49 44 41 54 78 01 ec bd 69 93 25 c9 75 a6 77 2b 33 6b ed 0d 5b 83 1c 8e 46 a3 31 99 64 fa 79 f3 03 f4 2f 47 1f 64 63 46 0e 87 02 49 ac bd 57 d7 92 4b e9 79 de d7 4f 44 dc ac aa 06 d0 00 38 c4 10 9e 15 d7 dd cf 7e 8e 1f f7 f0 58 ee ad 07 ff f7 7f fe cf 6f ae ae 1e 9e 1e 3d 7a 7c b2 be b8 bc 3a 5d 5c 5c 9c 1e 5c 5e 9c 2e 1f 3c 38 5d 3c a0 be bc ec 71 75 95 fa 8a 3a 34 e2 a5 b5 be 2a cd 49 3e e8 af 1e b4 af bc 4b 70 0f d5 f1 f0 92 e3 61 da 0f a5 bf 78 80 0e f9 ef 4e 77 b7 77 a7 87 4f ee 4e 1f 7c f2 f4 f4 f8 e9 47 a7 cb 47 1f 9d 2e 1e 3e 41 ff e5 e9 01 74 10 45 cf 89 f2 e6 cd 1b 3e 00 d9 f9 37 56 70 fb 8f e2 f8 Data Ascii: PNGIHDRasRGB@IDATxi%uw+3k[F1dy/GdcFIWKyOD8~Xo=z\|:]\\\^.<8]<qu:4*I>KpaxNwwON\|GG.>AtE>7Vp
2024-12-24 15:05:14 UTC	2676	IN	Data Raw: c8 5c b5 0c 9d f9 70 4b 6c 6f 99 9b fa 58 ab 91 aa cf 11 8c 2e 8c 26 d4 a7 8b 37 17 1b 9f 56 de 3a 1e 1c 21 43 c6 d5 08 0d 20 46 d5 58 c6 bb 05 65 3b 4d 81 d3 5f 14 ad 14 ca e0 f1 8f 24 cc 07 8c a0 6c 1b 5d ea 37 18 7c aa 2f 1b ab b2 d4 e5 c0 48 43 cc 30 90 44 c6 38 8f 37 89 be 41 53 18 74 04 e4 2f e5 0f 8f 80 f1 7e 40 c6 26 fe df 27 a4 1d 0e 47 24 e3 3d e3 b2 81 63 22 38 27 f5 9d 0a aa 64 26 51 26 2a 27 91 bb bb 2b ec 30 21 c9 1d c7 9a c9 61 42 8f bc 88 91 1b 5b 6f ef 32 c3 38 41 61 b7 c9 0d ff e9 0d 0b 48 88 e0 63 51 b0 6c 3a c8 15 c4 6e 7d 6d 28 8e 49 8d 4e 17 80 a1 b7 96 36 76 b0 10 3c 50 2e 13 77 ec d0 c6 9c f0 90 f1 86 85 57 fc c5 85 f6 2b b3 7a 23 6c 09 8a 7f 2c 2e 27 d6 cb 39 19 2b 8b b5 0c 5e fc 48 38 b4 79 8f 4b bc c7 88 42 14 a4 6c a1 7a 58 db Data Ascii: \pKloX.&7V:!C FXe;M_$l]7\|/HC0D87ASt/~@&'G$=c"8'd&Q&*'+0!aB[o28AaHcQl:n}m(IN6v<P.wW+z#l,.'9+^H8yKBlzX
2024-12-24 15:05:14 UTC	4014	IN	Data Raw: 47 06 ff b9 10 4a 6f 8d 4c 9b e6 50 76 0b e0 9b 49 a3 ac f9 c5 7b e5 d0 70 3f 0f 79 13 d3 08 03 62 6d 3e 46 25 ad b9 04 48 ad e2 0d 27 ef 52 ac 21 39 ca e7 34 2e 48 bd 3e 42 17 ed 84 d4 97 1e 95 5f 3b e7 ab 11 92 75 e1 d3 07 35 45 1b a2 fc b3 48 af 34 fb ad 97 a2 54 f9 aa 05 34 be 8d fc 20 ef fc 57 a7 ba ba e3 0a 6b 17 af 98 58 c9 59 74 62 9f 8f d0 79 7b 2a 0c d2 aa 35 d6 d3 54 96 fd 5a 42 63 2b c5 2d 72 a0 21 d3 56 da 1d a6 44 34 ac 6b d8 8a d3 06 88 dc 0d 27 2e 99 dc 30 66 c5 5c 63 96 76 54 19 91 01 56 f7 86 5b f0 ad 0f 7a da d6 67 6d 59 a5 df e0 4d 91 58 27 6e fc 5b 32 05 4d 59 da a7 fb 97 fa 8f 16 81 f5 ee 06 63 ef a5 46 86 e0 3d c1 16 97 35 e8 4c f7 0c da 0e 74 54 8f 63 bf 63 da 6a 32 37 15 0a 91 7e ef 4f ce 88 9b 4b a6 d0 2d bb 36 fe 05 cc 65 0d 96 Data Ascii: GJoLPvI{p?ybm>F%H'R!94.H>B_;u5EH4T4 WkXYtby{*5TZBc+-r!VD4k'.0f\cvTV[zgmYMX'n[2MYcF=5LtTccj27~OK-6e
2024-12-24 15:05:14 UTC	10704	IN	Data Raw: cd b8 65 2c 32 18 a1 91 ae be 00 db 32 96 76 07 2c 95 60 77 ca 6a 5b 1a 81 94 bc e2 a4 6f 99 e4 9c ba 98 ee 34 14 26 dc 45 a7 f6 03 51 00 65 6c e8 4b 69 d2 b9 6b e1 6f fd 3e cd 4e 53 23 95 13 0b ac d7 84 18 98 98 5e 9a 2c da 50 f6 e9 49 69 94 46 41 75 d9 17 1d 95 7c 02 f7 6f 70 d7 66 f9 8e 47 05 14 d6 f6 f9 e7 e8 19 ff 7c a4 ef e1 6e 63 8a 34 e3 77 8c d1 a0 14 eb 39 16 28 95 51 1b 9d b6 12 81 2d 96 e5 91 b0 fe 84 25 1f 7b 7f 7c 18 dc d8 37 fd b1 7b 6a 65 f9 ad ba cd 9e 30 30 68 fb c0 db 26 48 02 e2 50 52 6a c3 97 5e 03 1c 4e 0a 34 36 84 bb bd ed a5 50 30 62 37 5c 3b a5 6d fb f8 59 87 22 31 72 6a 43 98 11 9e d0 44 47 d5 1d 39 df db 3e 98 b0 d1 54 cd d6 fd d3 35 0e ca d3 d4 f8 a5 6d 92 64 c5 2d 50 ed 1a fc 7b 8c fa 2d e8 f7 70 dd 03 23 64 22 5d 85 ed c5 14 Data Ascii: e,22v,`wj[o4&EQelKiko>NS#^,PIiFAu\|opfG\|nc4w9(Q-%{\|7{je00h&HPRj^N46P0b7\;mY"1rjCDG9>T5md-P{-p#d"]
2024-12-24 15:05:14 UTC	14463	IN	Data Raw: b2 2e 89 e3 64 94 66 c0 76 29 26 c5 9c 09 9b 83 33 b8 98 9c 41 76 70 d7 21 9b a5 63 b7 da e8 c1 2b 13 d7 c0 64 90 5c 6c f4 74 1d f9 e2 a4 d4 01 f1 f1 3d ca 0c ce 31 70 4a 3a 0b da 41 ee d0 07 74 54 89 2f 5b 39 34 07 76 04 1d d9 c4 07 37 c0 a9 87 f1 1d 75 26 b5 77 2a d1 79 fd ed f5 e9 f9 6f 9e 9f be f9 e5 f3 d3 f3 5f 7d c1 25 d2 67 a7 9b a7 dc ad f0 a6 d8 28 75 32 32 08 4c 4b 0e e1 ee 6e 98 f4 c6 3f f2 87 90 7b 39 37 d7 dc 03 71 21 e0 75 7f e8 12 ea a1 ca 98 ba 90 2a c2 9b c7 8e 5f 2f 4d 14 e3 58 31 42 81 99 bc 86 44 33 be e6 32 e7 1f 7e f1 c5 e9 9f 7e c5 d3 a3 e7 3c 21 82 f6 19 4f 89 7e fa c3 0f 4f 7f fd c3 27 a7 4f 78 f1 ce cb b5 29 91 0f b3 f7 7f 94 91 3a 09 c8 25 3a 93 55 de 1f fd e0 a3 d3 eb 5f 7f 76 e2 a1 13 36 6a 67 17 91 37 dc 08 64 ad 3c 7d f6 c5 Data Ascii: .dfv)&3Avp!c+d\lt=1pJ:AtT/[94v7u&wyo_}%g(u22LKn?{97q!u_/MX1BD32~~<!O~O'Ox):%:U_v6jg7d<}
2024-12-24 15:05:14 UTC	16384	IN	Data Raw: 8e 2a c9 66 8d 45 34 d3 ce 64 69 5b 3e 98 a6 1a 21 74 53 0e ab 49 8b 0a 79 09 ef de 9f 49 da 4b 27 db cc 9b 3e 43 77 8f 6f 00 b2 29 ec da 86 dd d4 6f d1 59 b4 53 bd 43 cc b8 38 d0 99 4d 25 50 f5 2d 1b 15 3d af b5 93 0c 34 3e 1f f3 84 cb 7c 3a 9a f7 18 e0 72 c9 4b 5c 79 c5 4f 9e 9c 1d a9 ac 2a 90 1f 79 f1 0c 26 c1 a7 33 f2 05 42 fb 55 e5 85 17 56 1a e9 6b a8 51 b0 46 e9 dc 2b 0f 3b f6 76 fc e2 45 dd 4c e5 1f 0a d4 48 91 ad f0 44 1c 67 0b 0a f8 94 60 23 7f e5 85 6d 9d 42 c4 0e 8d e0 99 2f 76 8b bd ac 29 8c c4 dc 55 ce d4 6c 55 d4 91 97 cd 3a dd 74 1a 2c d3 e8 23 73 90 c3 4a 44 05 40 ae fd 0e f2 b9 9e 26 a2 3f af e4 b8 7f 7c 07 bb 7b da c3 51 4e be a4 d8 61 e6 53 de cb 07 c0 cd 04 d6 79 3d 4d 2d 0f 79 d3 87 b0 cd 03 b2 f6 03 03 d3 59 de 13 5e a4 eb bb 86 1c Data Ascii: fE4di[>!tSIyIK'>Cwo)oYSC8M%P-=4>\|:rK\yOy&3BUVkQF+;vELHDg`#mB/v)UlU:t,#sJD@&?\|{QNaSy=M-yY^
2024-12-24 15:05:14 UTC	16384	IN	Data Raw: d5 6b c3 d5 03 ea ba 6c 17 c2 29 03 be d7 c7 20 52 6e 9d f9 90 49 a6 b4 a4 ac 4c dd a6 77 36 9a 1d 80 c5 ed 2c 6c c1 06 21 9b 04 01 fd 63 52 90 97 4c 0c 2a 59 03 51 26 3a 44 1b 78 4a e8 27 72 db 67 d6 29 58 c8 ec 6d 96 af 61 db bd d9 a8 00 25 3d db 53 26 e0 43 5b de 82 be e8 0b 2a 3e c5 49 b0 52 2e 61 e3 5b 0c 76 f7 9b fd a4 07 7c db 6a 07 aa 82 9f 53 a3 1a 31 e5 7d 1c 61 76 29 d4 29 56 a9 05 b7 f6 c2 45 c6 45 de 3d a0 3d e5 92 ff 0c 02 d4 af 21 52 89 17 c5 93 f8 41 57 47 65 db 4b fb b8 9e fa c3 a3 84 9d 32 36 0a ee 41 27 5b 43 48 c8 c1 b3 9b c9 28 54 7f 82 95 91 b0 29 cd 7d cb 9a 7a 4d bd f7 e5 11 47 70 85 52 19 07 d5 67 d3 67 eb da 11 e2 28 ff 2e 85 de a4 69 6d 64 8a 8c 85 9a 5d 4e 0b 98 c0 89 bf 3a 5a d8 d2 8d 44 62 6f 83 99 c2 67 13 f0 53 c9 ca 50 16 Data Ascii: kl) RnILw6,l!cRLYQ&:DxJ'rg)Xma%=S&C[>IR.a[v\|jS1}av))VEE==!RAWGeK26A'[CH(T)}zMGpRgg(.imd]N:ZDbogSP
2024-12-24 15:05:14 UTC	4547	IN	Data Raw: db 9f c1 ed 67 be f2 da 47 1f c0 82 a8 4e a5 45 a8 72 67 73 92 cd 84 31 f6 0b 76 a2 89 bc d1 29 97 25 52 dc 49 c4 ae 3e 3d 91 1d 14 b6 02 16 5f d5 32 e0 f9 41 aa e7 4e db 82 ad 53 22 ac b9 d8 66 79 a2 75 84 25 f6 43 9a 05 88 02 e1 6b 9e b8 ea ee 7d ae e6 83 f6 55 46 f6 51 ce 17 5f bd e7 bb 4a 54 9d 7b 2d f0 a7 7b 5d 4d 64 e5 02 29 4c 0f 4c 02 49 a4 cc d4 9e 75 6a b9 7b 95 bd 1f 4f ce 01 12 93 dd a5 ac a1 e2 db 71 e5 5f 7c 8e 0c 26 27 e9 58 c0 31 93 1d c7 75 2c bc 5a 2e c5 c8 f1 b8 6d 2c c1 d4 73 40 04 f1 64 a7 1d d5 5f 41 77 fc ea d4 2f 45 82 be c3 01 da 76 44 0e 59 88 8f ba 18 99 cf 43 e5 14 d0 6f 67 4b 74 0f 59 ca bc 6e a1 1c d8 d6 6b 0c 7b 3b 36 1d 28 a6 6d 8f 13 82 90 6d 23 13 0c 08 a6 ec 80 62 fb da 39 0c 63 a9 22 52 72 a6 65 a2 79 96 27 2a f4 37 fd Data Ascii: gGNErgs1v)%RI>=_2ANS"fyu%Ck}UFQ_JT{-{]Md)LLIuj{Oq_\|&'X1u,Z.m,s@d_Aw/EvDYCogKtYnk{;6(mm#b9c"Rrey'*7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49847	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:14 UTC	662	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/shutterstock_1662151927.jpg?ext=.jpg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=sSZMZdA94O1IGK0TphnKCeBBwUMSfhk9y7fxM+s8if6MWGSsxi5nxo2HpMY+v0VUBO73Rv+aZ3WR6N1sVdPFYhk7DQeutQ/PxtDu7zcFdEMo4fc1M8z73bvEWzLR
2024-12-24 15:05:14 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:14 GMT Content-Type: image/jpeg Content-Length: 96938 Connection: close Set-Cookie: AWSALB=y3RtJdmCtNHkzLvJDD5uehWSDRfY1W0caEynae8Sb8v6xF7kBdTzqD5PGuhZy9y4NWejgNDNe3w+pF1b2Lm9mOiHjP+Z0ws6ku9jIbelObfCIspn934wHg1dAloS; Expires=Tue, 31 Dec 2024 15:05:14 GMT; Path=/ Set-Cookie: AWSALBCORS=y3RtJdmCtNHkzLvJDD5uehWSDRfY1W0caEynae8Sb8v6xF7kBdTzqD5PGuhZy9y4NWejgNDNe3w+pF1b2Lm9mOiHjP+Z0ws6ku9jIbelObfCIspn934wHg1dAloS; Expires=Tue, 31 Dec 2024 15:05:14 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 16 Aug 2022 13:54:23 GMT Accept-Ranges: bytes ETag: "2288f2b077b1d81:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:14 UTC	504	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 00 be 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 66 00 00 00 00 00 00 01 2c 00 00 00 01 00 00 01 2c 00 00 00 01 00 06 90 00 00 07 00 00 00 04 30 32 31 30 91 01 00 07 00 00 00 04 01 02 03 00 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 17 6f a0 03 00 04 00 00 00 01 00 00 0a c5 00 00 00 00 00 00 ff ed 00 e6 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 c9 1c 02 69 00 3e 43 6c 6f 73 65 2c 55 70 Data Ascii: JFIF,,ExifMM*V^(if,,02100100oPhotoshop 3.08BIMi>Close,Up
2024-12-24 15:05:14 UTC	4014	IN	Data Raw: 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 27 3f 3e 0d 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 49 6d 61 67 65 3a 3a 45 78 69 66 54 6f 6f 6c 20 31 32 2e 33 38 22 3e 0d 0a 09 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 0d 0a 09 09 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 3e 0d 0a 09 09 09 3c 64 63 3a 64 65 73 63 Data Ascii: 5M0MpCehiHzreSzNTczkc9d'?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Image::ExifTool 12.38"><rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"><rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/"><dc:desc
2024-12-24 15:05:14 UTC	1338	IN	Data Raw: 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 27 77 27 3f 3e ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 02 b1 05 dc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 Data Ascii: ?xpacket end='w'?>CC"}!1AQa"q2#B
2024-12-24 15:05:14 UTC	6690	IN	Data Raw: 81 cd 43 19 e6 a4 46 e6 a4 a2 54 39 a5 1c d3 50 d3 a8 01 ae 30 2a 37 19 a9 9b 91 50 b0 c5 44 8a 44 4f f2 b5 35 86 69 ee 30 69 8d 59 b2 88 9c e0 54 67 8a 95 cf 15 13 52 01 ac 3f 0a 69 3c d3 a9 b8 c8 a9 29 0d cd 21 e9 4b d0 d0 7a 7f 2a 4d 14 46 4f cd f5 a3 ad 2b 0f 9a 8c 60 d6 32 89 a4 65 a0 98 e2 a3 75 cd 4b da 98 d5 00 34 53 94 d3 7a d3 93 83 5d 10 33 91 62 3e 6a 45 1f e7 d2 a3 8b 93 53 46 bc d6 e8 ca 44 88 9c d5 88 a3 c5 47 12 71 56 62 4a be 52 2e 4b 0a 64 d5 a8 d2 a1 86 3e 3f 5a b2 06 6a 91 98 f4 4a 99 56 9b 1a e0 54 a1 70 2b 40 05 14 b9 a0 7d 28 23 34 05 c4 dd 8a 61 e4 53 9b 8c 75 a6 16 a0 06 b1 c1 aa d3 1e b5 3b f2 3b 75 a8 27 6c d4 b2 a2 53 9b 9a ab 31 c5 5a 9b 9a a9 2f 15 9c 8d 22 41 25 46 46 0f f9 e2 a4 7a 8c 8e 6a 4a 10 53 a3 5c 9a 44 5e 7f a5 4d Data Ascii: CFT9P07PDDO5i0iYTgR?i<)!KzMFO+`2euK4Sz]3b>jESFDGqVbJR.Kd>?ZjJVTp+@}(#4aSu;;u'lS1Z/"A%FFzjJS\D^M
2024-12-24 15:05:14 UTC	5352	IN	Data Raw: ab 40 08 46 07 34 01 4e db c5 2f 5a 00 68 14 ec 73 45 14 0c 07 14 66 83 c8 a0 9c d0 31 a7 8a 33 83 4a 46 29 0f 34 00 76 a0 70 28 14 0e b4 00 74 34 a3 a5 26 70 68 c6 68 02 39 fa 55 39 fa d5 c9 ba 55 59 a8 05 b9 55 fe f5 43 3f 2b 53 37 06 ab dc b6 56 83 48 99 77 ed c9 fe 95 8b a8 36 33 5b 17 ed 9d d5 87 a8 1c 83 5c 95 99 e8 50 89 8b a8 c9 82 45 60 ea 52 64 35 6d 6a 2b f7 ab 07 52 6c 83 ef 5e 2d 73 dc c3 98 7a ac db 43 57 2b ab 5d 72 6b a2 d6 a4 c2 35 71 fa dc f8 dd 5e 4d 53 da c3 c4 cf be bd da 4d 65 5c ea 14 cd 4a f3 0c 6b 1e e7 50 ae 0a 95 7a 1e 94 69 e8 5e 9e fb 3d ea 9c b7 bc fe 95 97 73 aa ed ef 54 e5 d5 b3 fc 5e f5 cf ed 2e cb f6 66 e3 dd e0 55 5b 9b ce 2b 28 ea bb 85 45 71 a9 6f 1d 68 e7 d0 7c a3 af ee f0 4d 66 4d 71 97 34 97 97 41 fb d5 29 26 c1 ac Data Ascii: @F4N/ZhsEf13JF)4vp(t4&phh9U9UYUC?+S7VHw63[\PE`Rd5mj+Rl^-szCW+]rk5q^MSMe\JkPzi^=sT^.fU[+(Eqoh\|MfMq4A)&
2024-12-24 15:05:14 UTC	4014	IN	Data Raw: c3 22 98 63 c5 4e 53 9a 6e dc 50 05 76 4a 69 5a 98 af 14 d7 5a 0a 21 23 14 c2 9c 54 a5 79 3c 52 15 e2 82 48 59 71 4d 64 fd 2a 52 b8 fc 29 8c b8 e2 a4 08 8a e4 d3 4a 54 a4 73 48 c3 9a 00 80 ad 34 c7 c5 4c 53 3d 69 ac 99 ff 00 f5 50 04 25 73 4c 23 8a 99 92 9a c3 35 25 a2 16 4c 9a 8d d2 a7 2b 93 8f e5 4c f2 e8 19 09 4e 6a 37 4c d5 86 4a 8f 65 00 42 cb 91 8a 8c af cb fe 15 60 c7 93 51 11 fe 71 40 10 ba 72 6a 37 8f 35 39 5c f1 4c 65 a0 0a ec 87 35 13 ae 2a d6 da 86 51 40 10 91 51 b2 54 9d 0d 05 71 40 10 ec e2 a3 91 31 56 0a fb f7 a8 e4 5a 0d 22 40 cb cd 31 86 4d 4c cb 8a 8f 6f 34 01 1b 27 35 1e cc f6 a9 b6 d3 42 63 d6 81 a3 eb ae 94 a2 90 7f 4a 07 15 e7 9e 99 20 3c 53 90 d3 41 a5 07 03 de 80 24 06 9e bc d4 69 4e 5a 00 70 e2 a4 43 9a 8c 1a 72 70 28 02 50 70 29 Data Ascii: "cNSnPvJiZZ!#Ty<RHYqMdR)JTsH4LS=iP%sL#5%L+LNj7LJeB`Qq@rj759\Le5Q@QTq@1VZ"@1MLo4'5BcJ <SA$iNZpCrp(Pp)
2024-12-24 15:05:14 UTC	10449	IN	Data Raw: 14 0e 29 c1 73 57 71 58 6e 38 a6 94 dd 52 79 79 34 bb 29 91 62 2d 94 85 2a 5d 94 14 aa 4c 08 82 93 4e 0b c5 3f 67 34 04 c1 a2 e0 34 0a 70 5a 70 4a 5d bc 53 b8 0c 09 c5 38 70 29 76 f1 ff 00 d6 a5 2b 8a 60 36 8c d0 45 04 71 41 37 01 49 8a 5e 86 8a 09 1b 8c 8a 31 4e 34 50 02 29 a7 a8 c9 a6 e3 9a 72 8a 00 70 e4 d3 94 60 fd 28 5a 76 29 8d 0d 3d 2a 19 1b 02 a6 73 9a ab 74 d8 14 8b 2a df 4f b4 1f d2 b9 5f 10 5e e4 ed f5 ad ad 5a ef 62 9a e2 f5 9b ff 00 32 e7 6e 7b d6 75 25 64 69 05 73 4b 4a 3b dc 7d 6b b2 d0 21 c8 5f e9 da b8 ff 00 0e a6 f6 06 bb cf 0f 43 f7 6b e7 f1 13 e6 91 ec 51 8d a2 74 56 11 6d 84 7d 2a 40 32 df ce 88 86 d8 b1 4e 41 b9 c7 ad 4c 51 52 2f 5b af 97 6b ee 79 35 c2 f8 f6 ef 7c db 73 de bb 9b e7 f2 6d 7f 0a f3 4f 14 5c fd a7 51 6f f6 4d 7d 16 1e Data Ascii: )sWqXn8Ryy4)b-]LN?g44pZpJ]S8p)v+`6EqA7I^1N4P)rp`(Zv)=stO_^Zb2n{u%disKJ;}k!_CkQtVm}@2NALQR/[ky5\|smO\QoM}
2024-12-24 15:05:14 UTC	16384	IN	Data Raw: 89 55 78 0a 2b a2 94 2f a9 c3 52 57 64 91 5b f9 70 ed fe 1a e3 7e 23 fc 38 8b c4 d6 af 24 6a a9 74 a3 20 81 f7 eb b8 03 03 d2 a3 9a 2f 35 39 fc eb 4a d4 63 56 3c b2 15 3a 92 84 b9 a2 7c c9 7f a6 cd a4 dd 34 32 a9 46 43 82 0d 32 3e 45 7b 17 c4 df 87 ab ae db b5 c4 28 16 ea 31 9e 07 df 15 e4 73 5a b5 ac ad 1b 2b 2b 29 c1 1e 95 f2 f8 ac 2b a3 2b 3d 8f a1 c2 e2 95 58 f9 8c 11 f3 4f 55 e2 80 37 0a 70 5a e5 e5 37 e6 1a 23 c5 0d 1f 39 ee 2a 41 9c 52 91 c5 52 11 d3 f8 1b c5 ef 61 3a c5 2b 71 d3 93 5e 99 61 7a b7 f0 2b a9 ea 3f 2a f0 c5 cc 6f b8 70 7d 6b b5 f0 27 8c 0c 4e b0 c8 dc ff 00 3a f4 30 d8 8b 7b ac e3 ad 4f aa 3d 0f a8 a7 63 8a 8e de 75 9e 15 65 e4 1a 7d 7a 69 dd 5c e5 06 e4 7f 8d 66 ea d6 7e 6a b5 69 0a 64 a8 1d 79 a8 94 6e 82 32 b3 38 4d 6b 4e c1 6a c6 Data Ascii: Ux+/RWd[p~#8$jt /59JcV<:\|42FC2>E{(1sZ++)++=XOU7pZ7#9ARRa:+q^az+?op}k'N:0{O=cue}zi\f~jidyn28MkNj
2024-12-24 15:05:14 UTC	2348	IN	Data Raw: 26 43 4b 71 4d 63 8a 56 fd 69 8d c2 d0 21 ac 70 69 a7 9a 53 d6 98 79 14 16 35 ba 53 18 e0 53 8b 73 4c 63 8a 00 69 39 a6 1e b4 ad 4d 63 c5 20 1a e7 9a 8d 8d 39 8d 46 c7 8a 43 1b 21 e6 a3 6f f3 ed 4e 27 15 19 3c 50 21 a7 e5 35 1b 9f f3 9a 73 1a 63 1a 40 35 8e 6a 27 3c d4 8d cd 46 d4 d0 0d 66 e2 a2 63 cd 3d 8e 2a 36 38 39 a0 06 9e 95 1b f0 38 a7 9a 8d b8 aa 01 85 b8 a6 e7 1e 9f 8d 39 be 6a 8d ba d4 ee 59 f4 62 13 4e 07 26 9a 1a 9d 9a f2 cf 6c 72 9a 92 3a 89 4d 3c 71 54 22 68 ce 2a 45 3f fe ba 85 1b 9e 6a 65 e4 74 a2 e1 62 54 35 2a 36 7e 95 02 54 a1 aa ae 04 8a 6a 50 78 a8 90 d3 95 aa 4a 25 4c e3 f9 d3 94 e4 d4 60 f1 4e 1c 8a 06 4a 39 14 f5 e9 fd 2a 25 6a 78 6e 29 08 78 3c 62 a4 43 85 a8 c3 e6 9e af c5 31 12 8e 28 ef 4c 0f cd 2a 9c d0 26 3c 1a 52 6a 3d d8 34 Data Ascii: &CKqMcVi!piSy5SSsLci9Mc 9FC!oN'<P!5sc@5j'<Ffc=68989jYbN&lr:M<qT"hE?jetbT56~TjPxJ%L`NJ9%jxn)x<bC1(L*&<Rj=4
2024-12-24 15:05:14 UTC	16384	IN	Data Raw: ef c5 56 9a eb 35 4e 6b ac 1a 71 62 e5 26 9a f0 e7 ff 00 af 54 6e 6e b9 c6 7f fa d4 db 8b af 94 fb d5 09 ae b2 dd 73 5b c6 42 e5 d4 7c f7 05 41 6a c9 d5 2e 37 f4 fd 4d 5c 9a 6c 8f e7 59 b7 63 ff 00 af 5a 73 77 0b 74 32 52 e4 c3 33 2f bf e5 5e a5 f0 e3 52 df 6c 80 36 ee 2b c9 ee d8 47 73 ec 7d eb d0 3e 1a 5d 62 05 15 15 3e 11 25 a9 ed 9e 15 bb fb bf 95 68 6b 57 3f 21 eb ea 6b 9e f0 b5 d8 01 7a 56 9e bd 75 88 7b 74 ae 0a 92 3a e9 c7 53 36 e2 5f 30 37 cd de b0 ef c7 ef b8 ab 92 6a 01 b7 7c c3 ad 67 dc dc 02 f5 c1 d4 ea 96 c6 4e af 0e e8 bf a5 73 b7 76 c0 37 7c e6 ba ed 42 3d f1 7e b5 ce dd c2 3d b8 ab 52 33 4b 53 12 e5 36 ff 00 9e 95 5b 68 c9 e9 57 af 00 c6 6a 98 5c f0 2a a3 22 a5 b0 d0 31 fc fe b5 62 d8 74 e6 98 ab c5 4f 02 1d d5 a6 e6 26 a6 9e 79 ec 7b 57 Data Ascii: V5Nkqb&Tnns[B\|Aj.7M\lYcZswt2R3/^Rl6+Gs}>]b>%hkW?!kzVu{t:S6_07j\|gNsv7\|B=~=R3KS6[hWj\*"1btO&y{W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49848	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:14 UTC	883	OUT	GET /Content/images/previous-icon.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/Content/styles/MQ-styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=i+v+70DzV7K9VlhVwlzcbT4VpOWTr3wWbr6BGOsGrVmpXcZnmI5XIMxjUuLsot6aFDCmGnW7zyMvd/S823BuSm2FEKfaWDPUbcBqRKyxSSsbgY51kyD+Yi1l1T5p
2024-12-24 15:05:15 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:15 GMT Content-Type: image/svg+xml Content-Length: 378 Connection: close Set-Cookie: AWSALB=4hAA9EpE4q3LqqOBDJGLLHrgeJA6NQOO8ySKvfuOkI/itRt0+dp00R/tAJN67AJ+NbA+jNqrot9t3EhLtqbzPG9KwMzm73QCl1dNzInid7nwaUarJG5f80D7x0YV; Expires=Tue, 31 Dec 2024 15:05:15 GMT; Path=/ Set-Cookie: AWSALBCORS=4hAA9EpE4q3LqqOBDJGLLHrgeJA6NQOO8ySKvfuOkI/itRt0+dp00R/tAJN67AJ+NbA+jNqrot9t3EhLtqbzPG9KwMzm73QCl1dNzInid7nwaUarJG5f80D7x0YV; Expires=Tue, 31 Dec 2024 15:05:15 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:15 UTC	378	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 37 2e 38 38 32 22 20 68 65 69 67 68 74 3d 22 31 34 2e 36 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 2e 38 38 32 20 31 34 2e 36 33 32 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 39 39 39 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 37 2e 38 38 32 20 31 34 2e 36 33 32 29 20 72 6f 74 61 74 65 28 31 38 30 29 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 30 29 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 37 2e 37 31 37 2c 36 2e 39 31 34 2e 39 36 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="7.882" height="14.632" viewBox="0 0 7.882 14.632"><defs><style>.a{fill:#999;}</style></defs><g transform="translate(7.882 14.632) rotate(180)"><g transform="translate(0 0)"><path class="a" d="M7.717,6.914.961

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49849	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:14 UTC	881	OUT	GET /Content/images/arroew-next.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/Content/styles/MQ-styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.1.2079666217.1735052710; AWSALB=i+v+70DzV7K9VlhVwlzcbT4VpOWTr3wWbr6BGOsGrVmpXcZnmI5XIMxjUuLsot6aFDCmGnW7zyMvd/S823BuSm2FEKfaWDPUbcBqRKyxSSsbgY51kyD+Yi1l1T5p
2024-12-24 15:05:15 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:15 GMT Content-Type: image/svg+xml Content-Length: 448 Connection: close Set-Cookie: AWSALB=Xs9pmadfCjB/S+rUcCNCjbDPUK01cHNFyTUog+6Ri2jtCeC2nlx/HigRlZlULsnqbDcZU8HqT+8XMZVneVr8/8PurBmhloW4TrmtEyKSibJCQMY+WnsNPcfctUy4; Expires=Tue, 31 Dec 2024 15:05:15 GMT; Path=/ Set-Cookie: AWSALBCORS=Xs9pmadfCjB/S+rUcCNCjbDPUK01cHNFyTUog+6Ri2jtCeC2nlx/HigRlZlULsnqbDcZU8HqT+8XMZVneVr8/8PurBmhloW4TrmtEyKSibJCQMY+WnsNPcfctUy4; Expires=Tue, 31 Dec 2024 15:05:15 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:15 UTC	448	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 2e 38 39 20 31 34 2e 36 34 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 39 39 39 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 67 20 69 64 3d 22 6e 65 78 74 22 3e 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 31 34 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 31 34 36 22 3e 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 7.89 14.64"><defs><style>.cls-1{fill:#999;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><g id="next"><g id="Group_1146" data-name="Group 1146"><path id="Path_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49850	3.160.196.72	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:15 UTC	540	OUT	GET /v1/sdk.min.js HTTP/1.1 Host: sdk.apptentive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:16 UTC	584	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 28232 Connection: close Date: Tue, 24 Dec 2024 15:05:16 GMT Last-Modified: Wed, 27 Nov 2024 12:12:42 GMT ETag: "10666db45bc960408b88c28f31fac175" x-amz-server-side-encryption: AES256 Cache-Control: max-age=7200, must-revalidate Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 48db97b4c6f52c3363c599d1176bac0a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P6 X-Amz-Cf-Id: 1c7Cixl23dNa-p6giBF5FkFn7XdIjxJ6ntAOn8_dDnc8LjM-Lv19Lw==
2024-12-24 15:05:16 UTC	15800	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd eb 72 e3 58 92 30 f6 2a 10 ba 56 0d 74 41 94 54 dd 33 3b 4b 36 9a 5f 75 55 f5 8e b6 eb 36 a5 ea e9 99 d5 68 29 88 3c 92 30 a2 00 0e 01 56 95 86 42 84 1f c0 97 b0 1d fe 65 6f ac 7f 7c 11 0e 47 38 ec bf 76 f8 6d f6 05 bc 8f e0 cc 3c 17 9c 1b 48 ea d2 b3 bd fb ed 8f 2a 11 e7 7e c9 93 b7 93 99 e7 43 36 0f 9e ce 66 35 2b ea fc 03 fb 36 ab 58 7a b6 28 c6 75 5e 16 51 bc 0c 17 15 0b aa 7a 9e 8f eb 70 30 9e 66 55 15 bc 2c c7 d9 f4 b0 2e e7 d9 39 7b 55 8e 2f 97 e3 b2 80 12 8b 31 24 41 8d fa 22 af 7a 15 fc 66 e9 b2 69 c6 53 96 b9 a9 e7 ac 3e a8 d9 55 c4 e2 e5 9c d5 8b 79 11 b4 f9 47 ec f8 e6 a6 58 4c a7 cd 9c 5d 95 1f 98 2c 38 61 53 56 33 b3 60 53 c9 86 92 1a fa d8 de 8e 8c ec b4 ee d5 e5 21 0c be 38 8f e2 b8 b9 64 d7 5a 8f 6f 4e Data Ascii: rX0VtAT3;K6_uU6h)<0VBeo\|G8vm<H~C6f5+6Xz(u^Qzp0fU,.9{U/1$A"zfiS>UyGXL],8aSV3`S!8dZoN
2024-12-24 15:05:16 UTC	190	IN	Data Raw: 7c a3 98 3f e8 28 c4 df a5 b9 15 f6 40 3e 3a 7b 25 9d 52 ba bd 52 1c 61 04 d9 70 ee 0e f1 d0 22 45 2b 18 ac 91 28 b0 fb 97 2c d5 8d 0c e4 b5 e2 11 41 e9 21 1c 52 96 ee 1d 13 17 42 1f c0 a6 41 16 ce 81 e7 ed 43 9e fa c2 48 f6 11 1a a8 d9 a2 ca 53 51 fb 1d 2c 42 71 6f 71 65 23 d9 01 59 7a 8b a3 a7 57 de 2d fd 06 8e 0a ef c0 5b 6c 2b 79 74 6b cc 2d 9b 6e 06 87 3c d7 71 e5 aa 9b a4 96 72 e0 b2 33 77 d7 f7 bc bb be a7 ef fa de 71 ff 23 4c b1 fc d8 2b 01 83 24 77 b6 06 11 8d 14 d9 87 fc 1c 6d 32 7a 0b 98 cf d3 73 c8 1e f8 c9 da 1a 6a b5 b6 80 6f a1 7d 64 cd 5a f4 6e ca Data Ascii: \|?(@>:{%RRap"E+(,A!RBACHSQ,Bqoqe#YzW-[l+ytk-n<qr3wq#L+$wm2zsjo}dZn
2024-12-24 15:05:16 UTC	1438	IN	Data Raw: 66 15 bc 05 71 3b 7f 70 e2 66 a3 a4 bf bd 17 46 12 e6 ac 57 0c a6 3e e9 17 89 5c b9 7e de ac b9 7b 4c aa 54 08 1b 31 7f 1e 91 a5 69 fa b2 3d c8 e2 32 78 37 7f 9b 4d 6e f2 b7 17 65 c1 e0 4f 39 d9 05 a6 ba aa 81 bd 81 03 22 20 e3 d5 e1 61 0d d4 f1 6a 78 92 d7 57 15 be 16 5b f5 77 77 f3 7a 51 30 62 72 a7 78 90 ae 76 e1 d7 6e 3e c1 e7 65 86 7c 40 e9 47 34 a4 dd c1 27 c6 d8 c7 93 fe c9 45 5d af ad 79 55 a7 bf 3a 51 f6 0c 7c c8 0a a5 0c 55 13 98 d4 3b 2f cb 73 d1 02 ad 0b b6 53 ed 4e 18 a0 e1 69 35 04 4e 90 9e ba e9 87 20 86 13 eb 38 a2 52 64 a7 3c d4 56 a2 af 77 91 e4 28 89 20 dc 6b f6 65 68 b7 bb 98 4f 51 eb 84 47 4d c5 8a 66 39 3a 63 73 c3 51 ac 7c 30 09 ca 79 c0 37 2b c0 db 22 40 f1 dc ce 92 42 72 06 80 b6 66 e5 bc 66 93 80 3c cd ab bf 18 50 4a b1 90 45 55 Data Ascii: fq;pfFW>\~{LT1i=2x7MneO9" ajxW[wwzQ0brxvn>e\|@G4'E]yU:Q\|U;/sSNi5N 8Rd<Vw( kehOQGMf9:csQ\|0y7+"@Brff<PJEU
2024-12-24 15:05:16 UTC	10804	IN	Data Raw: a0 e4 51 7d 73 83 97 84 6a ef 16 33 c4 d6 1c 03 f3 08 54 3f 0b db 28 4b bd dd 7d 89 6c 15 bc c5 25 f2 2d 14 f4 0f ee fb 6b 89 4f 0f e4 03 6c ad c5 1d 9e fe 69 ad a6 36 e0 6a cd 49 84 8e 41 cd 43 ba 78 b6 ad 5a a6 82 9b ad a4 dd 48 a7 af a6 2a 72 4f e5 64 ab ec 34 37 25 dc d4 71 d3 b9 f9 fa 8b 3d c2 e3 ac 12 eb ca 70 af 2a 95 f5 54 c7 52 2b b7 2b 7b 76 c9 e1 c3 79 53 b5 8c cb 03 7b 52 29 c1 85 16 6c c5 43 39 ce ec c9 cb 6c 83 87 23 4b 3a 48 9b 04 86 90 65 81 09 8f a3 55 ae 43 b7 34 4e 7c e9 de ed 2f ee f9 ea 8b c1 bd b5 74 a5 1d 98 10 12 84 46 b0 38 3c bd 02 e9 1b 95 6d c3 ae 57 2a 51 db 60 0c fb 4f 96 11 60 2b 25 1a b7 bd 06 1e e5 3d 69 02 46 18 ca 70 06 b7 e7 f1 d6 d1 fe 6e f9 04 69 be 2d 2a 62 58 ba 9b 1b 16 6f 36 db 01 3e 92 bc f4 4c 57 7f 20 a0 23 aa Data Ascii: Q}sj3T?(K}l%-kOli6jIACxZHrOd47%q=pTR++{vyS{R)lC9l#K:HeUC4N\|/tF8<mWQ`O`+%=iFpni-bXo6>LW #

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49860	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:15 UTC	721	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/shutterstock_1070766050-2_1.jpg?ext=.jpg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; AWSALB=LZOLvjwoO78e5ZTjilpyfYexkTm5O33iAAhauFag301OuNTYF4C7R265C1dVkqbhViYHA7F7zPIOo9t9AL01d5JqT1/xKv2xnO0YNQX/e0r6H1mXlG9qKii0myoQ
2024-12-24 15:05:16 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:16 GMT Content-Type: image/jpeg Content-Length: 76073 Connection: close Set-Cookie: AWSALB=NJMxQfrQPGyGWLbY1nwSATzzyrGjlgU4LSiXxvoRxYN2T+Vp93EGz+fBI32M0l3zAzk1LCJPOZ8qq27yW9bgvaIoHLrO9Yuo2MBvbH+TjOoXv++n8USQtpCucDV+; Expires=Tue, 31 Dec 2024 15:05:16 GMT; Path=/ Set-Cookie: AWSALBCORS=NJMxQfrQPGyGWLbY1nwSATzzyrGjlgU4LSiXxvoRxYN2T+Vp93EGz+fBI32M0l3zAzk1LCJPOZ8qq27yW9bgvaIoHLrO9Yuo2MBvbH+TjOoXv++n8USQtpCucDV+; Expires=Tue, 31 Dec 2024 15:05:16 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 16 Aug 2022 13:54:24 GMT Accept-Ranges: bytes ETag: "b7c287b177b1d81:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:16 UTC	504	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 00 82 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 01 2c 00 00 00 01 00 00 01 2c 00 00 00 01 00 02 a0 02 00 04 00 00 00 01 00 00 15 60 a0 03 00 04 00 00 00 01 00 00 0e 40 00 00 00 00 00 00 ff ed 00 e8 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 cc 1c 02 69 00 37 59 6f 75 6e 67 2c 42 6c 61 63 6b 2c 43 6f 75 70 6c 65 2c 55 73 69 6e 67 2c 4c 61 70 74 6f 70 2c 53 69 74 74 69 6e 67 2c 4f 6e 2c 54 68 65 2c 46 6c 6f 6f 72 2c 41 74 1c 02 6e 00 0c 53 68 75 74 74 65 72 73 Data Ascii: JFIF,,ExifMM*JR(iZ,,`@Photoshop 3.08BIMi7Young,Black,Couple,Using,Laptop,Sitting,On,The,Floor,AtnShutters
2024-12-24 15:05:16 UTC	2676	IN	Data Raw: 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 49 6d 61 67 65 3a 3a 45 78 69 66 54 6f 6f 6c 20 31 32 2e 33 38 22 3e 0d 0a 09 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 0d 0a 09 09 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 3e 0d 0a 09 09 09 3c 64 63 3a 64 65 73 63 72 69 70 74 69 6f 6e 3e 0d 0a 09 09 09 09 3c 72 64 66 3a 41 6c 74 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 20 78 6d 6c 3a 6c 61 6e 67 3d 22 78 2d 64 65 66 61 75 6c 74 22 Data Ascii: eta/" x:xmptk="Image::ExifTool 12.38"><rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"><rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/"><dc:description><rdf:Alt><rdf:li xml:lang="x-default"
2024-12-24 15:05:16 UTC	4014	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-12-24 15:05:16 UTC	5352	IN	Data Raw: fc 3b ff 00 82 bb 78 2f c6 aa b0 f8 97 c1 77 da 74 d2 60 34 fa 35 c8 9d 73 eb b1 f6 9f c0 66 be 8c f0 6f 8d 34 0f 88 be 07 87 c4 5e 1d bc bc b8 d3 65 9f c8 2b 77 6c d0 48 8d 8c 91 86 03 3f 5a cf 95 a7 72 f5 ea 8e ea c5 c3 db f5 cd 48 4e 6b 37 c3 fa 82 dd 46 c1 4f 2a 06 6a ee ff 00 9b e9 5a 44 c6 5a 13 2b 65 7d eb 53 c1 c3 77 88 93 fd 95 63 fa 56 42 9e ff 00 85 6e 78 0d 04 9a fe 7f bb 13 66 ba f0 ff 00 c4 47 3d 4f 85 9d 25 cc 7f e9 0b f8 e7 f5 ab 30 0f 9d 47 a0 4f e9 50 5c 2e 67 3e ca 7a d5 c8 57 fd 21 47 ba 8f e5 5e d4 51 e6 c8 a3 7f cc b3 7f d7 43 51 ed 2b 69 23 1f e2 97 f9 03 4f b9 3b a4 6f fa ea 69 27 1b 74 f5 ff 00 6b 79 fd 31 fd 6b 44 50 ed 25 7e 45 5f ef 4a 83 f2 51 5d 06 88 b8 d0 64 6f f9 e9 29 fe 75 8b a6 c6 10 47 fe d4 ac df 90 c5 6f e9 6b 8d 02 Data Ascii: ;x/wt`45sfo4^e+wlH?ZrHNk7FO*jZDZ+e}SwcVBnxfG=O%0GOP\.g>zW!G^QCQ+i#O;oi'tky1kDP%~E_JQ]do)uGok
2024-12-24 15:05:16 UTC	10704	IN	Data Raw: ae aa c2 d7 05 7b d4 36 96 b8 c5 6b 59 43 fc f9 a3 94 9e 66 5a b0 b7 e0 56 a5 b4 7f e7 d6 aa da a7 22 b4 2d c7 cb 54 49 2a 47 85 ff 00 3c d4 17 f6 fe 64 6c b8 f6 ab 91 1c d3 66 8b 72 9a 4c 71 dc e1 f5 9d 06 39 89 dc 8a df 51 9a e7 75 0f 02 69 f7 6c 7c cb 1b 76 cf 7d 95 e9 57 76 02 4e bd eb 3e 6d 21 4f 6f d2 b2 94 4d e3 23 cb 6f 7e 0d 68 d7 07 2b 6e d0 b1 ef 1b e2 b3 e6 f8 37 f6 7c b5 9e a7 79 07 b1 39 15 eb 13 68 b9 fe 1a ab 2e 8f ed 59 ca 99 b4 66 79 4b 78 3b c4 ba 5a ff 00 a3 ea 51 dc 01 d0 48 30 6a 09 f5 df 17 68 c9 f3 58 47 73 b7 ba 3f 5a f5 59 f4 8c 2f 4a a3 75 a4 90 b9 db 59 4a 1d 8d 23 24 79 0c 3f 16 3c 65 25 ea c2 b6 f1 69 cc c4 8d c2 36 dc 3f 1a ed 74 39 35 ef 18 5b 43 0e b1 ab 5e 5f 40 ae 24 11 48 fb 90 37 a8 1f 8d 6c dc 68 fb 90 fc bd 88 e9 5b Data Ascii: {6kYCfZV"-TI*G<dlfrLq9Quil\|v}WvN>m!OoM#o~h+n7\|y9h.YfyKx;ZQH0jhXGs?ZY/JuYJ#$y?<e%i6?t95[C^_@$H7lh[
2024-12-24 15:05:16 UTC	1338	IN	Data Raw: fc 3b 52 ba 1f 29 b1 fd a0 8c 7e 66 a2 b9 b3 ac 65 8e d6 93 f0 14 53 b8 f9 4f 74 b0 8e ea de 59 95 e6 5b 59 30 be 64 60 36 d6 3f 79 b6 9e 84 9f 7f ee d6 a5 a0 56 8c 4d 1d bc 92 42 ca bb 64 90 30 91 5b 1f c4 3a 7a fb 73 59 b6 4f 70 e9 b6 2b 16 4b 54 95 23 12 33 02 23 4d a3 2c 58 b7 05 73 ca 6d 23 e5 ae 92 2d 08 a6 e7 96 e1 9d 70 98 77 2b 89 f1 c1 5c 91 f2 e7 b8 c6 2b e9 39 ad b9 f0 ea 2d ed fd 7d e1 0d cb 27 2d 23 6e de 16 41 02 10 a5 f0 0f c8 7a 64 fa 74 eb 5a d6 6d 24 d3 48 b0 c2 d1 c8 01 66 dc 37 00 01 c1 39 c6 32 78 e9 9e 29 60 d3 ec 50 2c 8a aa b3 45 26 22 22 30 cd 16 06 0e d3 8e 98 c8 1c 54 ed ab 3c 92 c0 b6 f6 b2 36 06 43 22 92 37 31 1c 8e d8 c1 c9 ed 4f d0 7c bc bb b2 87 8a 7e 19 5a f8 f3 43 68 35 06 55 9e 12 4c 72 02 1b c9 63 d3 07 03 8c 63 81 d6 Data Ascii: ;R)~feSOtY[Y0d`6?yVMBd0[:zsYOp+KT#3#M,Xsm#-pw+\+9-}'-#nAzdtZm$Hf792x)`P,E&""0T<6C"71O\|~ZCh5ULrcc
2024-12-24 15:05:16 UTC	1338	IN	Data Raw: e1 7c b6 57 bc 45 71 9d 8a dd d8 ec 2c 63 35 4e 92 db 5d bf ab bd 4d b2 8a cd d1 75 6a 3f 8a e9 6b b5 bf 2d b5 ea cf 9d bc 11 f0 b6 6f 11 f8 c0 dd 2c 21 6f 2e 64 9a 41 a7 c1 14 b3 3e a4 23 88 96 b6 45 0a 59 a4 94 44 d8 00 7c db b1 c6 0e 38 8f 8e da ac 92 3d be 9e 74 c5 d1 26 58 22 43 1b 42 f1 4a 42 70 5a 40 e7 2c c4 82 4b 10 37 16 38 50 00 af d4 4f 82 5f b3 0f 83 3f 65 b7 d6 74 dd 62 d7 c6 93 78 d3 c4 96 c2 de cf 5a 9b c3 97 32 da 68 e3 7f 9b 71 85 f9 f6 c8 d2 c6 09 78 61 62 b1 db 81 b8 33 36 df 1a ff 00 82 8c fe c8 97 1f 1e 7e 1b e9 7e 3a b3 f2 64 d7 64 cb cf 74 27 f3 96 49 fc 98 0c b0 31 e4 23 4b 24 98 48 49 62 ac ae c0 22 6e ce b5 32 ba 90 8b 93 d1 a5 b1 31 cc 61 37 ca b5 4d ef e6 7e 73 79 06 2d 1e db 74 b1 cd 1c ce 5d 62 1c f9 aa 3e 43 f9 93 8e 3d 3f Data Ascii: \|WEq,c5N]Muj?k-o,!o.dA>#EYD\|8=t&X"CBJBpZ@,K78PO_?etbxZ2hqxab36~~:ddt'I1#K$HIb"n21a7M~sy-t]b>C=?
2024-12-24 15:05:16 UTC	1338	IN	Data Raw: 4d de cd 4e 19 af 88 8a a7 42 f2 92 57 d3 b6 9f 7d ae 79 38 1e 24 86 09 b7 56 dc ad fe 3f f0 4b 5f 11 7c 3b e0 2f 83 d6 57 8d 6f 79 f6 b9 a1 0a 56 31 31 66 98 90 48 24 9f 70 41 24 e7 8a f8 cf c7 5e 32 9b c4 be 27 bc be 9b cb f3 27 2c 08 07 80 3d 17 b6 00 db db b5 7a 0f 8b 3f 67 9f 17 de 6a 71 c1 75 aa 43 a8 09 1b ca 48 ad 66 17 32 37 de fe ee 57 1f 2b 72 0e de 38 27 ad 79 e6 93 e0 38 f5 4b d1 6f 1c 37 4d 26 f2 04 6e 0f 99 9e e3 1e bc 74 f6 af 26 ae 55 57 2d 7f ed 11 7c d2 db 4f 4d 3f 23 d1 a9 9a 3c d7 dd a2 d2 8c 7b 7e 7f 99 4f c3 56 9f da 57 51 ee 7d b1 e0 6e 55 1c f1 8e 3d 3a 0f 7e be b5 ef 9f 0d 0a e9 d0 23 6c f2 e3 5e 59 db a9 f7 24 d6 2f 80 ff 00 67 8d 60 c3 e7 0d 3e 4b 58 61 00 b9 65 21 80 c8 1c fe 60 72 47 24 77 af 6a f0 27 c3 f5 d1 34 c5 dd 67 6f Data Ascii: MNBW}y8$V?K_\|;/WoyV11fH$pA$^2'',=z?gjquCHf27W+r8'y8Ko7M&nt&UW-\|OM?#<{~OVWQ}nU=:~#l^Y$/g`>KXae!`rG$wj'4go
2024-12-24 15:05:16 UTC	2676	IN	Data Raw: aa b2 88 13 f8 17 df da b3 34 52 3c f2 f0 5c 6e 38 8d fa 74 0b d3 9f d6 b3 2e 2c ef 24 4c 88 a6 eb e9 8f 5a f4 b9 da 33 9f 91 6a a4 c5 49 fb 8a 48 fd 29 15 cc 79 74 da 6d e0 91 bf 76 79 24 f3 f5 a2 bd 1d 9d 03 73 1c 63 eb 45 1a 07 31 de 5b f8 de 49 a2 ff 00 89 6e 96 d2 2c d2 29 96 45 ff 00 57 3a 37 00 64 82 3d 09 2a 08 18 35 b5 a6 f8 82 43 e6 43 a8 58 df 0b 98 4f 9c cb 14 25 a1 7c b6 54 a3 10 37 30 18 ce 3a 7a 56 6e 95 a1 c7 a0 5a 2d ad 8c b0 cd 6b 6a 81 23 4d 9b 5a d5 14 7d d6 70 7e 62 78 eb c7 35 b9 e1 b5 8e f5 62 53 73 3d d4 b0 e3 7c 58 c3 23 7f 7c 0f 4c 9c 90 2b e9 69 6b b1 f1 52 72 d2 fa fe 5f d7 f4 d1 a9 a3 eb 76 17 56 eb 25 a3 45 f3 0c 88 e6 1b a4 93 27 24 36 7a ae 73 8c 7f 2a b9 71 ad 4d 6f a7 ac cb 1c 92 47 1e 7c e5 f2 c0 28 9d 76 9c 7a 70 3f fd Data Ascii: 4R<\n8t.,$LZ3jIH)ytmvy$scE1[In,)EW:7d=5CCXO%\|T70:zVnZ-kj#MZ}p~bx5bSs=\|X#\|L+ikRr_vV%E'$6zsqMoG\|(vzp?
2024-12-24 15:05:16 UTC	3759	IN	Data Raw: 3e 4a ed fb 10 7c 42 d6 fe 0f 7c 48 d0 2d 7e 22 dd 47 ab 7c 48 f1 78 bb 6f 09 78 62 cf 9b 0f 0b a0 82 46 62 ac 9b 44 f2 12 24 8d ef 1c 2c 85 e7 74 4d 90 ac ae bf 0a ff 00 c1 58 bc 25 e1 bf 89 bf b4 2f c3 5f 87 ba 45 9e 9d a9 5b f8 6f 53 1e 25 f8 8f ad 4d 1e d9 af b5 07 86 48 6c 74 a8 e3 dc 56 dd 6d ad 24 95 de 04 c2 46 2e a1 18 f3 04 9b b3 a3 87 95 6a 8a 84 6e db da db 76 bb f2 5d fb ed d5 b7 53 10 a1 1f 6b 2d 97 fc 3f de cf 92 2d be 29 7c 6c ff 00 82 90 fc 33 f0 9d c7 c6 ff 00 88 1a 8f 8a bc 27 6d ac 4b aa 1d 15 74 bb 1d 36 de ee 68 01 c1 94 5a c1 19 91 36 39 55 57 24 2a c8 d8 03 26 91 be 12 dd f8 7f 42 d2 6e 34 b9 1e d2 cf 54 b4 1a 1d c2 44 9c 40 ea 76 db ca a0 71 fb b5 30 a9 18 fb 86 4c 72 05 7b 17 83 bc 3d 27 c3 4d 1e 4d 2c db c7 3e 8b 6f 3c 8d 69 24 Data Ascii: >J\|B\|H-~"G\|HxoxbFbD$,tMX%/_E[oS%MHltVm$F.jnv]Sk-?-)\|l3'mKt6hZ69UW$*&Bn4TD@vq0Lr{='MM,>o<i$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49861	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:15 UTC	703	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/couch-pic.jpg?ext=.jpg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; AWSALB=LZOLvjwoO78e5ZTjilpyfYexkTm5O33iAAhauFag301OuNTYF4C7R265C1dVkqbhViYHA7F7zPIOo9t9AL01d5JqT1/xKv2xnO0YNQX/e0r6H1mXlG9qKii0myoQ
2024-12-24 15:05:16 UTC	827	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:16 GMT Content-Type: image/jpeg Content-Length: 39386 Connection: close Set-Cookie: AWSALB=YUf2iLxsdhkjcL/ZeaubYDXa8eN9OSO6acNX8edVgI0SrBjuQCpz+dpkjSWCa8i5LXLLWYW4Knm4+FQMmjvHuSA+9Vw6E0yTNDHIxNLX5M62nx2Wk4QgbyVv8ras; Expires=Tue, 31 Dec 2024 15:05:16 GMT; Path=/ Set-Cookie: AWSALBCORS=YUf2iLxsdhkjcL/ZeaubYDXa8eN9OSO6acNX8edVgI0SrBjuQCpz+dpkjSWCa8i5LXLLWYW4Knm4+FQMmjvHuSA+9Vw6E0yTNDHIxNLX5M62nx2Wk4QgbyVv8ras; Expires=Tue, 31 Dec 2024 15:05:16 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 10 Jun 2021 15:25:09 GMT Accept-Ranges: bytes ETag: "e0fcaccc5ed71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:16 UTC	506	IN	Data Raw: ff d8 ff e1 15 de 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0e 01 00 00 03 00 00 00 01 16 cc 00 00 01 01 00 03 00 00 00 01 0f 23 00 00 01 02 00 03 00 00 00 03 00 00 00 b6 01 06 00 03 00 00 00 01 00 02 00 00 01 0e 00 02 00 00 00 bc 00 00 00 bc 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 01 78 01 1b 00 05 00 00 00 01 00 00 01 80 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 22 00 00 01 88 01 32 00 02 00 00 00 14 00 00 01 aa 82 98 00 02 00 00 00 42 00 00 01 be 87 69 00 04 00 00 00 01 00 00 02 00 00 00 02 38 00 08 00 08 00 08 59 6f 75 6e 67 20 73 6d 69 6c 69 6e 67 20 77 6f 6d 61 6e 20 73 69 74 74 69 6e 67 20 6f 6e 20 73 6f 66 61 20 61 6e 64 20 6c 6f 6f 6b 69 6e 67 20 75 70 20 77 68 69 6c Data Ascii: ExifMM*#x(1"2Bi8Young smiling woman sitting on sofa and looking up whil
2024-12-24 15:05:16 UTC	2676	IN	Data Raw: 74 68 6f 75 74 20 70 65 72 6d 69 73 73 69 6f 6e 2e 00 00 04 90 00 00 07 00 00 00 04 30 32 32 31 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 01 7e a0 03 00 04 00 00 00 01 00 00 01 16 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 02 86 01 1b 00 05 00 00 00 01 00 00 02 8e 01 28 00 03 00 00 00 01 00 02 00 00 02 01 00 04 00 00 00 01 00 00 02 96 02 02 00 04 00 00 00 01 00 00 13 40 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c Data Ascii: thout permission.0221~(@HHAdobe_CMAdobed
2024-12-24 15:05:16 UTC	2676	IN	Data Raw: 0f 01 f2 e7 38 ee 6b 6c 63 be 82 69 3d 2d 70 1d 5e d7 23 ad 60 3a fd cc b9 99 99 15 eb 46 35 65 c5 95 8e 3e d3 99 60 8f d2 7b 7f 43 43 7f 4d 6f fc 1d 5e ad f5 64 75 0e a5 76 5b fd de d6 f0 d6 34 06 80 27 77 e6 fe 77 e7 39 61 f4 7f d5 f0 1b be 1d 75 a4 d9 7b bc 5c 4e df f3 5b 5e d6 31 5a df 61 d4 02 7c cf 65 73 0e 28 c0 09 1d 64 7a b4 f3 65 94 89 88 d2 23 a2 42 f0 ca f4 e7 b7 c5 56 be f3 e9 b9 b6 58 1a d7 1e 4e 90 41 dc d7 31 ff 00 9a e6 bd bb d8 95 ae 70 6f bb 48 59 b7 d9 bb 73 de e0 da d8 25 ce 27 da 07 8b 94 93 9d 2c 86 3b 2f 4b d3 3a 95 39 d4 1a 49 6f ad 40 02 c6 8d 5a e6 fe 65 ec ff 00 83 77 d1 b5 9f e0 7f e2 d1 6e b2 9a 5a e7 bc b8 78 56 35 73 9c 5c d6 0d 8e 71 f6 fd 3f cf 5c 10 ca ba ec 86 5d 4b 9d 43 69 27 d0 2d 3b 5e 09 fa 56 38 b7 fc 23 ff 00 ea Data Ascii: 8klci=-p^#`:F5e>`{CCMo^duv[4'ww9au{\N[^1Za\|es(dze#BVXNA1poHYs%',;/K:9Io@ZewnZxV5s\q?\]KCi'-;^V8#
2024-12-24 15:05:16 UTC	1338	IN	Data Raw: 74 74 69 6e 67 2c 4f 6e 2c 53 6f 66 61 2c 41 6e 64 2c 4c 6f 6f 6b 69 6e 67 2c 55 70 2c 57 68 69 6c 65 1c 02 6e 00 0c 53 68 75 74 74 65 72 73 74 6f 63 6b 1c 02 73 00 0c 53 68 75 74 74 65 72 73 74 6f 63 6b 1c 02 19 00 40 77 6f 6d 61 6e 2c 64 61 79 64 72 65 61 6d 2c 68 61 70 70 79 2c 63 6f 75 63 68 2c 77 69 6e 74 65 72 2c 63 6f 6c 64 2c 62 72 75 6e 65 74 74 65 2c 68 69 73 70 61 6e 69 63 2c 6c 61 74 69 6e 2c 64 1c 02 74 00 41 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 20 52 69 64 6f 2f 53 68 75 74 74 65 72 73 74 6f 63 6b 2e 20 20 4e 6f 20 75 73 65 20 77 69 74 68 6f 75 74 20 70 65 72 6d 69 73 73 69 6f 6e 2e 1c 02 b8 00 09 35 35 35 30 34 35 32 37 31 00 38 42 49 4d 04 25 00 00 00 00 00 10 43 d1 db 18 35 d6 bd fb 7e 19 fc db 28 9f 7c ce 38 42 49 4d 04 Data Ascii: tting,On,Sofa,And,Looking,Up,WhilenShutterstocksShutterstock@woman,daydream,happy,couch,winter,cold,brunette,hispanic,latin,dtACopyright (c) 2017 Rido/Shutterstock. No use without permission.5550452718BIM%C5~(\|8BIM
2024-12-24 15:05:16 UTC	2676	IN	Data Raw: 66 66 00 01 00 a1 99 9a 00 06 00 00 00 00 00 01 00 32 00 00 00 01 00 5a 00 00 00 06 00 00 00 00 00 01 00 35 00 00 00 01 00 2d 00 00 00 06 00 00 00 00 00 01 38 42 49 4d 03 f8 00 00 00 00 00 70 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 38 42 49 4d 04 08 00 00 00 00 00 10 00 00 00 01 00 00 02 40 00 00 02 40 00 00 00 00 38 42 49 4d 04 1e 00 00 00 00 00 04 00 00 00 00 38 42 49 4d 04 1a 00 00 00 00 03 61 00 00 00 06 00 00 00 00 00 00 00 00 00 00 01 16 00 00 01 7e 00 00 00 Data Ascii: ff2Z5-8BIMp8BIM@@8BIM8BIMa~
2024-12-24 15:05:16 UTC	4014	IN	Data Raw: 2e 1d 14 82 c6 d3 43 46 eb b6 31 de ef b5 6d 6b 7d ff 00 cd d6 cf 46 aa 14 b8 fd 64 01 f3 12 d7 cb e8 12 24 7a 43 ab 97 d7 70 df 71 b3 10 6f a8 9f d1 ec 01 b5 9d b3 bd ec 31 fa 4f 51 ff 00 e1 76 20 74 47 36 ee ae dc a7 92 e6 d0 3d 57 87 40 32 41 6d 5f c9 fe 73 ff 00 3d ac 87 13 e8 32 f8 0d 73 a3 70 6e 9e e2 3f ea 7d 3d 8a 7d 12 fb 2b ea 55 34 13 ee df 5b 87 8d 6e 6b ac 83 ff 00 15 91 55 36 33 fe ba ac e5 c1 11 0b 1b 8d 5a 98 b3 c8 ce 8e c7 47 be 1d 49 9d 9b 3f 34 ff 00 6f 71 fa 2d 1f 1d 56 65 41 ce 89 d0 78 ab 4d 10 02 80 12 d8 21 b0 73 2d 3c 86 9f 28 8f c8 ac 57 68 b1 ad 78 d0 38 4c 78 78 85 44 f8 25 d3 ae b2 dc 76 bf 5d af 2e 7d 60 e9 fa 32 e7 7a 3f e7 d7 fa 5f fa e2 20 a1 d1 73 b4 51 2e d1 05 e5 e4 0d a5 c0 cf 23 8f c5 33 9e ed be 68 a9 26 ed 0a 62 ef Data Ascii: .CF1mk}Fd$zCpqo1OQv tG6=W@2Am_s=2spn?}=}+U4[nkU63ZGI?4oq-VeAxM!s-<(Whx8LxxD%v].}`2z?_ sQ.#3h&b
2024-12-24 15:05:16 UTC	2093	IN	Data Raw: 78 6d 70 52 69 67 68 74 73 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 72 69 67 68 74 73 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 6a 70 65 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 72 65 64 69 74 3d 22 53 68 75 74 74 65 72 73 74 6f 63 6b 22 20 70 68 Data Ascii: xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" dc:format="image/jpeg" photoshop:Credit="Shutterstock" ph
2024-12-24 15:05:16 UTC	2676	IN	Data Raw: 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 39 20 28 57 69 6e 64 6f 77 73 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 2f 72 64 66 3a 53 65 71 3e 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: vt:softwareAgent="Adobe Photoshop CC 2019 (Windows)" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta>
2024-12-24 15:05:16 UTC	1338	IN	Data Raw: 72 f1 33 24 34 43 82 16 92 53 25 a2 63 b2 c2 07 73 d2 35 e2 44 83 17 54 93 08 09 0a 18 19 26 36 45 1a 27 64 74 55 37 f2 a3 b3 c3 28 29 d3 e3 f3 84 94 a4 b4 c4 d4 e4 f4 65 75 85 95 a5 b5 c5 d5 e5 f5 46 56 66 76 86 96 a6 b6 c6 d6 e6 f6 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 38 48 58 68 78 88 98 a8 b8 c8 d8 e8 f8 39 49 59 69 79 89 99 a9 b9 c9 d9 e9 f9 2a 3a 4a 5a 6a 7a 8a 9a aa ba ca da ea fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f4 5e 05 76 15 76 05 76 2a de 15 76 2a de 2a ec 55 ac 55 bc 55 d8 ab 58 ab b1 57 62 ae ed 8a b5 81 5d 8a b7 8a ae 18 aa e1 8a b6 71 56 9b 0a ab da fd 91 f2 c5 55 c6 2a b0 ff 00 79 8a ab af da 5f 9e 2a ab 1f d8 fb ff 00 5e 2a d8 eb 8a b6 71 57 62 ad 36 2a b4 62 ae c5 57 03 8a bb f6 b1 56 a4 e9 8a b6 9f 64 62 ae fd a1 8a bb be 2a de Data Ascii: r3$4CS%cs5DT&6E'dtU7()euFVfvGWgw8HXhx9IYiy:JZjz?^vvvv*UUUXWb]qVUy_^qWb6bWVdb
2024-12-24 15:05:16 UTC	2676	IN	Data Raw: 15 a4 e4 af 7b 15 f3 1f 93 ad 7c c3 03 2e a9 69 0e 9b a8 91 55 96 19 d2 57 46 f0 6a 04 e7 ef 86 33 e0 3b 1b 44 f1 89 0d c3 c4 b5 9d 3b cc de 4c d7 54 2f 28 2f a0 3e b5 bc 91 92 a2 54 07 fb c8 5c 50 86 fe 6a 7f b2 cc e8 48 48 58 70 67 13 12 fa 0b f2 6b f3 ea c3 cd c6 3d 13 5a 74 b5 d7 c0 0b 03 31 e2 2e 48 ea 37 db d5 ff 00 89 e5 80 9e ad 06 3d 43 d8 86 49 83 67 10 ab 64 e8 70 aa 2e db a1 f9 0f d5 8a ad 9e e6 08 07 29 9c 20 1e 3d 7e ec 6d 52 a9 3c c3 6e 77 86 36 72 4f c3 cb e1 07 df c7 21 c6 13 c2 82 b9 f3 05 e3 9a 29 58 d7 fc 8e a3 e9 39 13 32 c8 45 06 fa b5 d1 04 b5 c4 94 f0 2d 4f e3 91 e2 29 e1 4a ef 35 6b a5 fd e2 4b 22 b2 9a d4 93 d3 b9 eb 91 32 2c 84 42 65 e5 6f 39 dd bd fc 56 17 ed ea 45 31 e3 1c ad f6 95 bb 7c c1 ef 93 86 4d e8 b1 94 19 f2 9c b9 a9 Data Ascii: {\|.iUWFj3;D;LT/(/>T\PjHHXpgk=Zt1.H7=CIgdp.) =~mR<nw6rO!)X92E-O)J5kK"2,Beo9VE1\|M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49863	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:16 UTC	664	OUT	GET /Content/images/article-img-1.png HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; AWSALB=LZOLvjwoO78e5ZTjilpyfYexkTm5O33iAAhauFag301OuNTYF4C7R265C1dVkqbhViYHA7F7zPIOo9t9AL01d5JqT1/xKv2xnO0YNQX/e0r6H1mXlG9qKii0myoQ
2024-12-24 15:05:16 UTC	827	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:16 GMT Content-Type: image/png Content-Length: 69678 Connection: close Set-Cookie: AWSALB=XYWGPrvT4n4gF2OFrbhUTZKcFx+dlfWP2VhvsRUubNMr7iv2tDaS5X+n3TARkufXCU0/Ow5JZ4VcxbnU36QdHvTV+smGh5o6wS1NvdGK6H1DNcLGKVeQZuS3/9Qx; Expires=Tue, 31 Dec 2024 15:05:16 GMT; Path=/ Set-Cookie: AWSALBCORS=XYWGPrvT4n4gF2OFrbhUTZKcFx+dlfWP2VhvsRUubNMr7iv2tDaS5X+n3TARkufXCU0/Ow5JZ4VcxbnU36QdHvTV+smGh5o6wS1NvdGK6H1DNcLGKVeQZuS3/9Qx; Expires=Tue, 31 Dec 2024 15:05:16 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:16 UTC	3182	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 1a 00 00 00 bc 08 06 00 00 00 a7 81 61 fd 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 40 00 49 44 41 54 78 01 ec bd 69 93 25 c9 75 a6 77 2b 33 6b ed 0d 5b 83 1c 8e 46 a3 31 99 64 fa 79 f3 03 f4 2f 47 1f 64 63 46 0e 87 02 49 ac bd 57 d7 92 4b e9 79 de d7 4f 44 dc ac aa 06 d0 00 38 c4 10 9e 15 d7 dd cf 7e 8e 1f f7 f0 58 ee ad 07 ff f7 7f fe cf 6f ae ae 1e 9e 1e 3d 7a 7c b2 be b8 bc 3a 5d 5c 5c 9c 1e 5c 5e 9c 2e 1f 3c 38 5d 3c a0 be bc ec 71 75 95 fa 8a 3a 34 e2 a5 b5 be 2a cd 49 3e e8 af 1e b4 af bc 4b 70 0f d5 f1 f0 92 e3 61 da 0f a5 bf 78 80 0e f9 ef 4e 77 b7 77 a7 87 4f ee 4e 1f 7c f2 f4 f4 f8 e9 47 a7 cb 47 1f 9d 2e 1e 3e 41 ff e5 e9 01 74 10 45 cf 89 f2 e6 cd 1b 3e 00 d9 f9 37 56 70 fb 8f e2 f8 Data Ascii: PNGIHDRasRGB@IDATxi%uw+3k[F1dy/GdcFIWKyOD8~Xo=z\|:]\\\^.<8]<qu:4*I>KpaxNwwON\|GG.>AtE>7Vp
2024-12-24 15:05:16 UTC	13380	IN	Data Raw: 47 06 ff b9 10 4a 6f 8d 4c 9b e6 50 76 0b e0 9b 49 a3 ac f9 c5 7b e5 d0 70 3f 0f 79 13 d3 08 03 62 6d 3e 46 25 ad b9 04 48 ad e2 0d 27 ef 52 ac 21 39 ca e7 34 2e 48 bd 3e 42 17 ed 84 d4 97 1e 95 5f 3b e7 ab 11 92 75 e1 d3 07 35 45 1b a2 fc b3 48 af 34 fb ad 97 a2 54 f9 aa 05 34 be 8d fc 20 ef fc 57 a7 ba ba e3 0a 6b 17 af 98 58 c9 59 74 62 9f 8f d0 79 7b 2a 0c d2 aa 35 d6 d3 54 96 fd 5a 42 63 2b c5 2d 72 a0 21 d3 56 da 1d a6 44 34 ac 6b d8 8a d3 06 88 dc 0d 27 2e 99 dc 30 66 c5 5c 63 96 76 54 19 91 01 56 f7 86 5b f0 ad 0f 7a da d6 67 6d 59 a5 df e0 4d 91 58 27 6e fc 5b 32 05 4d 59 da a7 fb 97 fa 8f 16 81 f5 ee 06 63 ef a5 46 86 e0 3d c1 16 97 35 e8 4c f7 0c da 0e 74 54 8f 63 bf 63 da 6a 32 37 15 0a 91 7e ef 4f ce 88 9b 4b a6 d0 2d bb 36 fe 05 cc 65 0d 96 Data Ascii: GJoLPvI{p?ybm>F%H'R!94.H>B_;u5EH4T4 WkXYtby{*5TZBc+-r!VD4k'.0f\cvTV[zgmYMX'n[2MYcF=5LtTccj27~OK-6e
2024-12-24 15:05:16 UTC	5352	IN	Data Raw: f4 52 ab 2f 7a 17 6f 16 08 35 03 67 d1 52 bb 6a e8 15 56 95 d5 9d 21 22 b0 c8 93 d6 b9 11 0e 17 a3 57 64 f9 ca 69 f3 c2 b9 d0 39 23 ab fa 1d 0e 65 ab c9 4a f9 96 20 d2 8a 6e ec be 84 ae b8 85 b7 a7 80 14 74 23 c6 b9 e5 62 bb e5 9f e8 d8 b7 a8 c0 23 2a e2 5d bd c2 ed 3c 51 bf 01 53 a4 e6 94 1c 98 70 7b 03 29 c2 13 92 f3 bf bb 5d a3 b2 17 fd 89 8f 00 99 86 dc f3 92 b7 b0 c2 87 ba 32 7b e9 b4 29 52 55 89 73 43 98 a0 f9 44 49 55 96 18 a3 a7 ab c4 34 f0 de 58 bb 22 21 62 eb e0 40 aa 5b 39 3c 3d 4d 09 3d ed c0 07 af ee 68 85 04 d9 3a 90 4b 27 6b 75 05 46 90 dc 36 32 c0 c7 cb 28 3d 0c 3c 16 96 77 a9 4f 75 7f e1 38 e2 be ab bd 07 b1 b1 d8 22 4c e0 e3 3d 1f f1 55 db 0e 83 93 a1 00 51 bd 52 9e 0f ce e8 7c 27 54 5f 57 39 da 6d cc 36 fd b6 03 b0 71 0e 4e cf fb 2e 4c Data Ascii: R/zo5gRjV!"Wdi9#eJ nt#b#*]<QSp{)]2{)RUsCDIU4X"!b@[9<=M=h:K'kuF62(=<wOu8"L=UQR\|'T_W9m6qN.L
2024-12-24 15:05:16 UTC	10449	IN	Data Raw: 7d ed 02 53 98 d7 16 0f 79 a4 fd ed 6b c7 bd 17 0b ee ac 5e f3 44 ea d9 e3 2b 6e f6 be 3a fd 94 a7 51 99 3a cb 09 d7 1a f3 20 4f 8a a0 7d c8 2a e2 42 f4 8a c5 ea 09 37 6f fd bb 64 31 f5 c7 b0 1c 82 2b 17 1e 12 d0 ff 6b c9 14 f1 29 d6 2b fa df b2 a0 f9 cd 73 17 9a ab cb e7 b1 1b 8e e4 4e ee ad 60 a3 f7 73 5e 43 fc 28 37 a6 c9 79 13 39 4f 84 56 f4 b5 09 99 da ac b2 68 77 c2 a8 48 7f 54 2c 01 45 d9 a9 a9 7c e7 c7 4b b0 05 0a bd bc 2d b4 94 99 55 15 08 f4 c5 11 6f 45 6c 64 4e 0c e7 82 5c 0b 48 15 9d d0 65 9c 44 cd c9 d7 b6 c5 1c 50 41 6c 2c c8 cf c9 b1 63 bd cf 33 f1 3b 6d f5 a9 a4 62 94 57 7b 4b 34 32 2a f7 c8 17 45 e1 13 1a 3b 46 6e c4 75 cc 22 1f 85 57 8f 7e f2 93 bc eb e2 af 9f c5 02 06 85 68 3b 8a 49 80 ec 4a 48 42 b7 a9 29 04 dc 50 3c 30 2a cb c9 ec 38 Data Ascii: }Syk^D+n:Q: O}B7od1+k)+sN`s^C(7y9OVhwHT,E\|K-UoEldN\HeDPAl,c3;mbW{K42E;Fnu"W~h;IJHB)P<0*8
2024-12-24 15:05:16 UTC	16384	IN	Data Raw: 8e 2a c9 66 8d 45 34 d3 ce 64 69 5b 3e 98 a6 1a 21 74 53 0e ab 49 8b 0a 79 09 ef de 9f 49 da 4b 27 db cc 9b 3e 43 77 8f 6f 00 b2 29 ec da 86 dd d4 6f d1 59 b4 53 bd 43 cc b8 38 d0 99 4d 25 50 f5 2d 1b 15 3d af b5 93 0c 34 3e 1f f3 84 cb 7c 3a 9a f7 18 e0 72 c9 4b 5c 79 c5 4f 9e 9c 1d a9 ac 2a 90 1f 79 f1 0c 26 c1 a7 33 f2 05 42 fb 55 e5 85 17 56 1a e9 6b a8 51 b0 46 e9 dc 2b 0f 3b f6 76 fc e2 45 dd 4c e5 1f 0a d4 48 91 ad f0 44 1c 67 0b 0a f8 94 60 23 7f e5 85 6d 9d 42 c4 0e 8d e0 99 2f 76 8b bd ac 29 8c c4 dc 55 ce d4 6c 55 d4 91 97 cd 3a dd 74 1a 2c d3 e8 23 73 90 c3 4a 44 05 40 ae fd 0e f2 b9 9e 26 a2 3f af e4 b8 7f 7c 07 bb 7b da c3 51 4e be a4 d8 61 e6 53 de cb 07 c0 cd 04 d6 79 3d 4d 2d 0f 79 d3 87 b0 cd 03 b2 f6 03 03 d3 59 de 13 5e a4 eb bb 86 1c Data Ascii: fE4di[>!tSIyIK'>Cwo)oYSC8M%P-=4>\|:rK\yOy&3BUVkQF+;vELHDg`#mB/v)UlU:t,#sJD@&?\|{QNaSy=M-yY^
2024-12-24 15:05:17 UTC	16384	IN	Data Raw: d5 6b c3 d5 03 ea ba 6c 17 c2 29 03 be d7 c7 20 52 6e 9d f9 90 49 a6 b4 a4 ac 4c dd a6 77 36 9a 1d 80 c5 ed 2c 6c c1 06 21 9b 04 01 fd 63 52 90 97 4c 0c 2a 59 03 51 26 3a 44 1b 78 4a e8 27 72 db 67 d6 29 58 c8 ec 6d 96 af 61 db bd d9 a8 00 25 3d db 53 26 e0 43 5b de 82 be e8 0b 2a 3e c5 49 b0 52 2e 61 e3 5b 0c 76 f7 9b fd a4 07 7c db 6a 07 aa 82 9f 53 a3 1a 31 e5 7d 1c 61 76 29 d4 29 56 a9 05 b7 f6 c2 45 c6 45 de 3d a0 3d e5 92 ff 0c 02 d4 af 21 52 89 17 c5 93 f8 41 57 47 65 db 4b fb b8 9e fa c3 a3 84 9d 32 36 0a ee 41 27 5b 43 48 c8 c1 b3 9b c9 28 54 7f 82 95 91 b0 29 cd 7d cb 9a 7a 4d bd f7 e5 11 47 70 85 52 19 07 d5 67 d3 67 eb da 11 e2 28 ff 2e 85 de a4 69 6d 64 8a 8c 85 9a 5d 4e 0b 98 c0 89 bf 3a 5a d8 d2 8d 44 62 6f 83 99 c2 67 13 f0 53 c9 ca 50 16 Data Ascii: kl) RnILw6,l!cRLYQ&:DxJ'rg)Xma%=S&C[>IR.a[v\|jS1}av))VEE==!RAWGeK26A'[CH(T)}zMGpRgg(.imd]N:ZDbogSP
2024-12-24 15:05:17 UTC	4547	IN	Data Raw: db 9f c1 ed 67 be f2 da 47 1f c0 82 a8 4e a5 45 a8 72 67 73 92 cd 84 31 f6 0b 76 a2 89 bc d1 29 97 25 52 dc 49 c4 ae 3e 3d 91 1d 14 b6 02 16 5f d5 32 e0 f9 41 aa e7 4e db 82 ad 53 22 ac b9 d8 66 79 a2 75 84 25 f6 43 9a 05 88 02 e1 6b 9e b8 ea ee 7d ae e6 83 f6 55 46 f6 51 ce 17 5f bd e7 bb 4a 54 9d 7b 2d f0 a7 7b 5d 4d 64 e5 02 29 4c 0f 4c 02 49 a4 cc d4 9e 75 6a b9 7b 95 bd 1f 4f ce 01 12 93 dd a5 ac a1 e2 db 71 e5 5f 7c 8e 0c 26 27 e9 58 c0 31 93 1d c7 75 2c bc 5a 2e c5 c8 f1 b8 6d 2c c1 d4 73 40 04 f1 64 a7 1d d5 5f 41 77 fc ea d4 2f 45 82 be c3 01 da 76 44 0e 59 88 8f ba 18 99 cf 43 e5 14 d0 6f 67 4b 74 0f 59 ca bc 6e a1 1c d8 d6 6b 0c 7b 3b 36 1d 28 a6 6d 8f 13 82 90 6d 23 13 0c 08 a6 ec 80 62 fb da 39 0c 63 a9 22 52 72 a6 65 a2 79 96 27 2a f4 37 fd Data Ascii: gGNErgs1v)%RI>=_2ANS"fyu%Ck}UFQ_JT{-{]Md)LLIuj{Oq_\|&'X1u,Z.m,s@d_Aw/EvDYCogKtYnk{;6(mm#b9c"Rrey'*7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49864	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:16 UTC	923	OUT	GET /Content/fonts/Gotham/Gotham-Medium.woff HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.mortgagequestions.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.mortgagequestions.com/Content/styles/MQ-styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; AWSALB=LZOLvjwoO78e5ZTjilpyfYexkTm5O33iAAhauFag301OuNTYF4C7R265C1dVkqbhViYHA7F7zPIOo9t9AL01d5JqT1/xKv2xnO0YNQX/e0r6H1mXlG9qKii0myoQ
2024-12-24 15:05:16 UTC	839	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:16 GMT Content-Type: application/font-woff Content-Length: 31760 Connection: close Set-Cookie: AWSALB=PrJzhXOJEiYT+Gf9RXMq9BL73a7l0VGhhd6zZCc2xccJ6FH9Shsmw8aF3SnvMTxOzJrgw6gNpKQI/8zvWVpp/5Gj5hh9Bfq1K4FSVmfOXCtRRbDWUiWMdFw4qVam; Expires=Tue, 31 Dec 2024 15:05:16 GMT; Path=/ Set-Cookie: AWSALBCORS=PrJzhXOJEiYT+Gf9RXMq9BL73a7l0VGhhd6zZCc2xccJ6FH9Shsmw8aF3SnvMTxOzJrgw6gNpKQI/8zvWVpp/5Gj5hh9Bfq1K4FSVmfOXCtRRbDWUiWMdFw4qVam; Expires=Tue, 31 Dec 2024 15:05:16 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:16 UTC	4508	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 7c 10 00 0f 00 00 00 01 22 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 7b f4 00 00 00 1c 00 00 00 1c 75 ef 61 76 47 44 45 46 00 00 6b 80 00 00 00 4e 00 00 00 5a 0d 71 0e e2 47 50 4f 53 00 00 71 d0 00 00 0a 22 00 00 3d e4 fa 9f 99 5b 47 53 55 42 00 00 6b d0 00 00 05 fe 00 00 0c 68 1a ef 7f 39 4f 53 2f 32 00 00 01 d4 00 00 00 4d 00 00 00 60 67 60 3b ff 63 6d 61 70 00 00 05 dc 00 00 02 9c 00 00 03 ce ed cb 2e 47 67 61 73 70 00 00 6b 78 00 00 00 08 00 00 00 08 ff ff 00 03 67 6c 79 66 00 00 0c 40 00 00 54 5c 00 00 b0 60 a7 0d e8 81 68 65 61 64 00 00 01 58 00 00 00 36 00 00 00 36 07 13 b8 7a 68 68 65 61 00 00 01 90 00 00 00 21 00 00 00 24 0f ab 08 51 68 6d 74 78 00 00 02 24 00 00 03 Data Ascii: wOFF\|"FFTM{uavGDEFkNZqGPOSq"=[GSUBkh9OS/2M`g`;cmap.Ggaspkxglyf@T\`headX66zhhea!$Qhmtx$
2024-12-24 15:05:16 UTC	16384	IN	Data Raw: 25 16 81 f7 7e fc 0c 2d ec e6 30 3e 38 fd 6d ae aa 99 d2 d5 0f 8f dd 03 e3 d9 83 e9 45 30 55 a8 80 ab 19 16 9f 66 78 2f 60 a7 f2 43 9d d9 7e b7 ae 5d e3 47 82 5b c0 bb 9c 3d aa 59 f2 35 aa 84 a6 70 24 7d 9e e1 18 be 4c 3d 7c 5a 41 a3 1c 28 53 61 39 ae 60 31 2b 0f 80 14 c2 38 f4 dd bd 7d a7 4f 64 bc 77 68 7d 66 d6 9e d7 d9 77 f8 74 f9 b2 84 98 f2 9c b7 d1 0f 36 3f 9e 28 cb 8e e7 96 64 78 45 c2 b3 77 d0 31 c7 91 b1 47 e3 b8 db e8 2f ed 73 e7 aa f0 73 57 32 c3 c9 73 57 51 39 4b 08 6c 2d 97 0d 03 f8 69 b3 32 32 0d 79 e6 26 c0 58 9c c1 e3 2f 0b 66 cf 1e be 60 db 95 e4 ac 6b 91 d9 33 73 e7 4c 5a 31 55 dd 07 e4 5e db 7c 67 e3 e6 e7 ef 65 ee 3b b0 7e dd 81 43 36 05 b3 f9 eb dc fa 5f 2f e6 4d f3 f7 bf 30 ce 73 54 e8 aa d4 b1 db a3 bf c9 e5 36 df 59 fd 63 7e 3c 17 Data Ascii: %~-0>8mE0Ufx/`C~]G[=Y5p$}L=\|ZA(Sa9`1+8}Odwh}fwt6?(dxEw1G/ssW2sWQ9Kl-i22y&X/f`k3sLZ1U^\|ge;~C6_/M0sT6Yc~<
2024-12-24 15:05:17 UTC	10868	IN	Data Raw: ce 24 12 7c 14 9c 49 8d 7a 7f 1c 4c cb 84 dd de 5a bd 88 0f e1 99 f4 27 13 66 b5 79 c8 23 95 9b 69 d4 67 58 2a 9e ef 68 04 4b 7b 16 ab 43 4b 68 60 7d 5b 3e c3 a6 59 3a 93 48 0f 8e e6 71 2b 4f a1 a5 01 3c 1c 86 87 9c 37 49 e0 b1 c2 fa c3 00 e3 f3 26 f5 c0 11 c3 cc e8 80 c9 a6 9f 75 e0 a0 5b 3a b7 0b 7b de f0 58 c9 9b 7a a2 b4 38 4d 52 a0 c3 6d 3a ef 20 5a 4d df 9a 0e ed 79 a8 0c 09 51 d7 9e 7f 2a 58 e7 54 33 a4 45 fb ce 29 91 16 c4 e7 43 fc 52 e4 d9 a8 3b f2 f9 18 53 a6 73 1f 8f a6 40 4f ae 0b 3a d8 d8 fc f6 dd 3a f9 ad 89 a7 f7 e6 48 28 ac b5 94 7e 03 30 fd 88 8f ca 98 86 af e0 52 30 24 e8 c3 f6 4d ef d1 6d 92 f4 15 dc 06 42 de 13 1b 06 6f 48 b3 68 37 1c 3d bc f0 06 7f e1 ce 45 47 d0 7b d9 55 36 2c 03 f6 78 2b 2d 8a 0f 11 ae 47 cf e0 0d 68 d3 fe f5 e8 19 Data Ascii: $\|IzLZ'fy#igXhK{CKh`}[>Y:Hq+O<7I&u[:{Xz8MRm: ZMyQXT3E)CR;Ss@O::H(~0R0$MmBoHh7=EG{U6,x+-Gh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49865	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:16 UTC	709	OUT	GET /MortgageQuestions/media/MortgageQuestions/Images/Paperless-small.jpg?ext=.jpg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; AWSALB=LZOLvjwoO78e5ZTjilpyfYexkTm5O33iAAhauFag301OuNTYF4C7R265C1dVkqbhViYHA7F7zPIOo9t9AL01d5JqT1/xKv2xnO0YNQX/e0r6H1mXlG9qKii0myoQ
2024-12-24 15:05:16 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:16 GMT Content-Type: image/jpeg Content-Length: 163486 Connection: close Set-Cookie: AWSALB=owXwkXy3cObFVGZ2mSKVFISt296zBZA6Vmu4+ri470njKRvE8cYiHpmHtzcEe3seSCnBvok085AEhk1IVBnxL/ytLinremino22jirzgV+a8usa6GaLaD6TOKsMh; Expires=Tue, 31 Dec 2024 15:05:16 GMT; Path=/ Set-Cookie: AWSALBCORS=owXwkXy3cObFVGZ2mSKVFISt296zBZA6Vmu4+ri470njKRvE8cYiHpmHtzcEe3seSCnBvok085AEhk1IVBnxL/ytLinremino22jirzgV+a8usa6GaLaD6TOKsMh; Expires=Tue, 31 Dec 2024 15:05:16 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Tue, 22 Jun 2021 18:48:05 GMT Accept-Ranges: bytes ETag: "e9722239767d71:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:16 UTC	504	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 00 be 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 66 00 00 00 00 00 00 01 2c 00 00 00 01 00 00 01 2c 00 00 00 01 00 06 90 00 00 07 00 00 00 04 30 32 31 30 91 01 00 07 00 00 00 04 01 02 03 00 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 16 80 a0 03 00 04 00 00 00 01 00 00 0f 00 00 00 00 00 00 00 ff ed 01 2e 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 01 11 1c 02 19 00 40 73 65 6c 66 20 65 6d 70 Data Ascii: JFIF,,ExifMM*V^(if,,02100100.Photoshop 3.08BIM@self emp
2024-12-24 15:05:16 UTC	4014	IN	Data Raw: 34 31 30 35 1c 02 00 00 02 00 04 00 ff e1 0f b1 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 27 ef bb bf 27 20 69 64 3d 27 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 27 3f 3e 0d 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 49 6d 61 67 65 3a 3a 45 78 69 66 54 6f 6f 6c 20 31 32 2e 31 36 22 3e 0d 0a 09 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 0d 0a 09 09 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f Data Ascii: 4105http://ns.adobe.com/xap/1.0/<?xpacket begin='' id='W5M0MpCehiHzreSzNTczkc9d'?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Image::ExifTool 12.16"><rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"><rdf:Descriptio
2024-12-24 15:05:16 UTC	5352	IN	Data Raw: 78 70 61 63 6b 65 74 20 65 6e 64 3d 27 77 27 3f 3e ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 02 9a 03 e8 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 Data Ascii: xpacket end='w'?>CC"}!1AQa"q2#B
2024-12-24 15:05:16 UTC	1338	IN	Data Raw: c5 00 26 33 46 31 4b da 9c 45 00 46 7a d1 4e 22 9b 40 02 d2 e2 93 18 a0 f5 a0 03 1c d3 48 e6 9f da 86 14 01 1e 28 3c 9a 52 38 a0 8f 96 a4 06 95 e6 9a cb 81 f5 a7 66 8c 60 50 04 7d 0d 05 72 69 c7 8a 6d 48 11 9e 28 26 9c c2 9a 78 a0 03 6f 35 47 5a 6f 2a 10 e7 cc 6d ac bc 2f 1f ad 5c 99 f6 26 4b 6d fe b5 c5 fc 50 f1 d3 f8 43 c2 f7 57 81 2e 25 ba 51 b6 d6 28 a3 27 32 b1 da 80 8f e2 c9 23 a7 62 4f 62 68 03 e3 df db ba cf 51 d7 fe 28 7d bb 4d d1 34 1b e9 2e 34 e5 d3 74 eb c9 5d e2 b8 d1 6f 0c 8d 26 e5 92 32 b2 be f0 d1 9f 20 32 89 0a e1 98 a9 0b 5f 8e bf b5 47 da ed 3c 5b aa 68 77 17 53 5f 4d 63 29 86 55 bd 05 27 bb 95 4e d6 91 8e 72 cc 58 15 00 92 42 a8 e4 8a fb 73 f6 dd f8 e9 79 61 e3 5b c9 ae 6f 75 6b 0d 7b 55 b6 0d 26 eb c9 61 b2 49 c6 e2 4a 9b 76 55 2a 19 Data Ascii: &3F1KEFzN"@H(<R8f`P}rimH(&xo5GZom/\&KmPCW.%Q('2#bObhQ(}M4.4t]o&2 2_G<[hwS_Mc)U'NrXBsya[ouk{U&aIJvU
2024-12-24 15:05:17 UTC	13380	IN	Data Raw: f9 b6 21 25 93 1c f4 23 1f 91 cd 67 6f 20 47 b7 9e 39 3d 8f 4f f3 9f 7a db d0 f5 59 34 9b c8 d5 66 8d 73 fe ad 8e dd a8 c7 03 27 70 ed fe 4d 30 4b b9 af 2e a9 af 4d 61 04 ff 00 6a 93 66 a6 5e 31 b2 6c f9 bc 8c c6 ca 0f 43 b5 78 23 9c 29 e7 00 d7 d6 bf b1 56 b5 f1 53 e1 1f c2 7f 11 7c 66 d3 75 48 75 0d 37 c1 f6 f0 e9 d6 ba 56 a0 62 36 b7 86 49 62 12 40 21 62 18 6d f9 0e 53 6e 5d f3 9c ee af 9b 2d 3c 12 35 3d 32 38 b4 98 57 56 b7 d3 ad 3e d9 a9 de 2c 33 0b 7d 26 3f 33 05 c9 0a 3e 5f 99 32 d8 3c e3 18 c6 2b eb 6f 87 b6 9a b7 ed 09 f1 0b c0 be 1d f0 8f 87 7c 3f 6d aa 78 8b 46 9b 44 be bd 83 50 fb 39 17 44 0b e1 76 f0 62 37 56 8e da 26 30 0c 2e f2 4a ab 10 84 1c e7 29 25 a7 f5 ff 00 0e 69 ec e2 d7 bf b7 f5 7f 3d 37 bf 91 fb 81 fb 20 7c 45 93 e2 ff 00 c3 bd 2f Data Ascii: !%#go G9=OzY4fs'pM0K.Majf^1lCx#)VS\|fuHu7Vb6Ib@!bmSn]-<5=28WV>,3}&?3>_2<+o\|?mxFDP9Dvb7V&0.J)%i=7 \|E/
2024-12-24 15:05:17 UTC	10449	IN	Data Raw: 52 f6 a0 93 0b c5 11 ee 81 be 95 37 c3 ff 00 11 47 6b 17 94 58 0d bc 53 bc 43 1e e8 5b e9 cd 72 fa 2f 87 ae 2f b5 06 68 e4 68 d7 3d bb d0 4d ec ee 7a c2 78 82 1d a3 e7 5a 6b f8 96 14 ff 00 96 8b f9 d7 33 69 e0 29 a5 8f 2d 71 26 7f de ab 51 fc 3e 1f c5 23 9f c6 8b 22 f9 a7 d8 d8 6f 15 db 83 fe b1 7f 3a 6b 78 ba 0f f9 e8 3f 3a a3 0f 80 a1 8c f7 3f 5a b5 17 83 61 5e d4 7b a3 bd 41 4f 8b 23 6e 8d 9a ce d4 7c 51 e5 4b fc 58 ad 88 fc 31 0a 7f 0d 57 b8 f0 e4 6d 27 dd a3 4e 80 d4 da d4 82 c7 5e 79 63 ce d6 ab 23 54 91 ff 00 86 ac 58 68 b1 c3 fc 35 6d 74 e5 5f e1 14 5c 39 64 52 4b 99 1e a6 47 73 56 85 a2 8e c2 9c 20 c5 4f 31 6a 2c ac c0 e2 a0 8c e0 ff 00 3a bd 24 58 15 55 c6 d2 7f 3a a4 0d 58 96 3e a6 96 33 d4 7a 51 17 7a 55 ea 68 11 05 c0 aa 13 2f 35 a3 70 3a d5 Data Ascii: R7GkXSC[r//hh=MzxZk3i)-q&Q>#"o:kx?:?Za^{AO#n\|QKX1Wm'N^yc#TXh5mt_\9dRKGsV O1j,:$XU:X>3zQzUh/5p:
2024-12-24 15:05:17 UTC	8028	IN	Data Raw: f7 be 21 b9 8f ed 17 12 b2 29 1c 16 e0 57 51 a0 ea 0d 24 4a c5 9b 70 fe 21 fe 7e 95 8c 30 34 ed a9 58 9c 65 6e 6d 1d 8f be a7 ff 00 82 9a 49 22 ee 44 98 f3 8c e3 b5 53 97 fe 0a 57 72 46 56 39 9b 9c f2 7b 7a f5 af 8a e1 bd c0 c3 1c 67 a8 c6 45 58 8f 53 68 db 1c e7 3d 3a 7a 7f 8d 69 f5 4a 7d 8e 1f ad 56 fe 63 ec 4f f8 79 46 a4 f1 ab 2c 12 2f 52 39 fa ff 00 9f f3 cb 4f fc 14 83 52 65 e2 39 3e 6f 56 e9 d2 be 3f 8b 52 26 76 fb aa 33 d8 74 1c 9c d3 8e a4 cf 9d b8 60 4e 7a f4 a3 ea b4 fb 19 ac 45 6f e7 67 d6 cf ff 00 05 1b d5 83 fc d0 c9 c8 e8 1b d2 a3 8f fe 0a 4d ab 2c c5 4c 33 70 79 39 e3 93 fe 7e 95 f2 7b 5c 34 88 7e 66 e9 d8 74 a8 5e ed 9e 46 50 dd 0e 06 4f 3f e7 9a 3e ab 4b b1 a7 b6 ad fc cc fb 0a 1f f8 29 4e a0 01 1e 5c 87 d0 67 ad 4c bf f0 52 db d4 8f 98 Data Ascii: !)WQ$Jp!~04XenmI"DSWrFV9{zgEXSh=:ziJ}VcOyF,/R9ORe9>oV?R&v3t`NzEogM,L3py9~{\4~ft^FPO?>K)N\gLR
2024-12-24 15:05:17 UTC	16384	IN	Data Raw: f3 3d e5 dd fb 02 72 7e 44 3e 95 f2 b7 fc 17 1b c7 17 df b2 87 ec 41 f0 87 f6 6e d1 a6 b8 bd f1 67 8d 2e 22 d4 bc 44 c8 fb ae 35 1b 95 90 4d 2b 3f 76 6b 8d 4e 70 ca c7 24 fd 9c 8e 71 5b 69 fd 7f 5f d5 cc 23 cd af 7f d7 fe 07 e8 6a 7f c1 14 bf 66 db ef 1f f8 db c5 9f b5 67 8c 97 ed 9e 27 f1 e6 a3 a8 47 a3 3b fc eb 04 6d 29 5b cb 94 3c f2 d2 07 b7 4c 7d d8 e1 70 38 7c 0f d4 9f 86 fa c4 3a d7 87 ae 13 3f bb df 86 1d c0 20 a9 fd 0e 2b cc bf 64 ff 00 81 16 bf 00 ff 00 64 5f 07 f8 12 0f 2d c7 85 74 78 6c 64 91 7a 4d 38 5c cf 27 fd b4 98 ca ff 00 57 ad ef 82 ba 91 b7 d6 35 0b 26 6c 79 80 10 33 dc 1a e7 94 9f 35 df 53 aa 31 b4 6c ba 1f 95 9f b3 2f 87 7f e1 9b 3f e0 af df b4 97 c2 d3 09 b5 d3 7c 51 04 ba f5 8c 60 00 8d 2a 4f 1d da 60 7b 45 7d 70 32 38 1b 31 d8 57 Data Ascii: =r~D>Ang."D5M+?vkNp$q[i_#jfg'G;m)[<L}p8\|:? +dd_-txldzM8\'W5&ly35S1l/?\|Q`*O`{E}p281W
2024-12-24 15:05:17 UTC	16384	IN	Data Raw: a2 c6 38 41 2b 94 c0 1f ec 32 d7 e4 87 fc 1c 59 7f 25 be 83 f0 c7 4f 0c db 66 ba d6 2e 19 31 c1 31 a5 aa 29 ff 00 c8 8d f9 d7 e8 07 fc 12 4f 52 d7 f4 bf 80 1e 29 f0 af 89 ad fe c7 a9 59 cd 63 ae db db ec da 20 b6 d4 f4 e8 2e 3c ac 13 9c c5 72 2f 21 20 f4 f2 b1 da be 0e ff 00 83 87 34 51 a8 78 df e0 c5 b9 5f dd dc 5f ea f6 ec 3d 77 c9 a7 0c 7e b5 9d 1f e2 c3 e7 f9 0e 5a 42 69 79 7e 68 e9 bf e0 b6 1a 68 d1 ff 00 65 ff 00 82 1e 08 8f 2b f6 8f 12 5a 5b aa 67 03 16 f6 26 0f d3 cf 15 de 7c 7d 9d fc 67 ff 00 07 0f 78 36 ce 1d cc 9e 1d f0 15 c4 32 0e bb 43 d9 6a 72 0f a7 37 49 f9 8f 5a e5 7f e0 b1 91 8f 10 fe d2 7f b2 c7 87 c6 4f f6 8f 8d 64 04 11 d8 dd e9 71 8e 3f e0 66 bb 6f 82 3a 77 fc 2c 6f f8 38 6f e3 16 a0 e1 a4 87 c2 be 0d 82 34 27 a4 6e d6 da 54 58 1e ff Data Ascii: 8A+2Y%Of.11)OR)Yc .<r/! 4Qx__=w~ZBiy~hhe+Z[g&\|}gx62Cjr7IZOdq?fo:w,o8o4'nTX
2024-12-24 15:05:17 UTC	3358	IN	Data Raw: 6c ae 1c 71 4e af 2b f0 0f c7 9b 5d 6c a4 37 3f e8 f3 ff 00 75 cf 5f a1 af 46 b0 d6 a2 be 40 55 94 e7 de aa c7 55 3a 91 96 c5 c9 be ed 43 17 0d 52 4a fb 97 8a 8d 0f 22 9a d8 a7 b9 62 8a 28 a9 28 29 b2 7d df c6 95 9f 6d 45 34 bc 50 06 66 b0 b8 5a cf b1 7f 9a ae ea b2 e4 1a a3 68 36 c9 5a 18 f5 37 2d 5b 20 55 a0 72 2a 9d a1 e0 55 a4 39 41 49 9a 44 af 71 f7 6a 9c 9f c5 57 a7 1c 55 19 3a 35 32 48 e4 fb 95 56 f1 72 b5 69 d8 01 55 6e e6 54 4e 4f 4a 00 c3 be 4f 9a aa af de a3 5b d7 6d ec 73 b9 96 b8 bf 10 fc 5c b3 d2 83 6e 9a 35 c7 bd 65 52 b4 21 f1 32 e9 d1 94 b4 47 a2 5a cc aa 79 ab 0f a9 c7 1f 25 87 e7 5f 38 f8 ab f6 bf d1 fc 38 ac 64 be 8d 76 ff 00 b7 5e 63 e2 7f f8 28 c6 9b 1c ad 15 9f 9d 79 27 40 22 52 d9 fc ab c8 c4 71 16 02 8e 93 a8 af f7 fe 47 a3 47 25 Data Ascii: lqN+]l7?u_F@UU:CRJ"b(()}mE4PfZh6Z7-[ Ur*U9AIDqjWU:52HVriUnTNOJO[ms\n5eR!2GZy%_88dv^c(y'@"RqGG%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49867	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:16 UTC	921	OUT	GET /Content/fonts/Gotham/Gotham-Book.woff HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.mortgagequestions.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.mortgagequestions.com/Content/styles/MQ-styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; AWSALB=Xs9pmadfCjB/S+rUcCNCjbDPUK01cHNFyTUog+6Ri2jtCeC2nlx/HigRlZlULsnqbDcZU8HqT+8XMZVneVr8/8PurBmhloW4TrmtEyKSibJCQMY+WnsNPcfctUy4
2024-12-24 15:05:16 UTC	839	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:16 GMT Content-Type: application/font-woff Content-Length: 31728 Connection: close Set-Cookie: AWSALB=ivQUR8LH6xsKoUXByhQVmOhlnMbP/6ZtTbaarrZ7+zidC5CHTtfii3ltZRPDU9ND064KiJIqBGocG7tm84FdCxCpDuVWJEn0KJGv87YnDrrxq3YPoXrKev6C3m19; Expires=Tue, 31 Dec 2024 15:05:16 GMT; Path=/ Set-Cookie: AWSALBCORS=ivQUR8LH6xsKoUXByhQVmOhlnMbP/6ZtTbaarrZ7+zidC5CHTtfii3ltZRPDU9ND064KiJIqBGocG7tm84FdCxCpDuVWJEn0KJGv87YnDrrxq3YPoXrKev6C3m19; Expires=Tue, 31 Dec 2024 15:05:16 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:16 UTC	1832	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 7b f0 00 0f 00 00 00 01 22 ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 7b d4 00 00 00 1c 00 00 00 1c 75 ef 62 d8 47 44 45 46 00 00 6b 60 00 00 00 4e 00 00 00 5a 0d 71 0e e2 47 50 4f 53 00 00 71 b0 00 00 0a 22 00 00 3d e4 fa 80 97 f6 47 53 55 42 00 00 6b b0 00 00 05 fe 00 00 0c 68 1a ef 7f 39 4f 53 2f 32 00 00 01 d4 00 00 00 4d 00 00 00 60 67 47 3b e5 63 6d 61 70 00 00 05 d8 00 00 02 9c 00 00 03 ce ed cb 2e 47 67 61 73 70 00 00 6b 58 00 00 00 08 00 00 00 08 ff ff 00 03 67 6c 79 66 00 00 0c 3c 00 00 54 43 00 00 b1 60 66 21 9d e8 68 65 61 64 00 00 01 58 00 00 00 36 00 00 00 36 06 f9 b9 ff 68 68 65 61 00 00 01 90 00 00 00 21 00 00 00 24 0f 91 08 40 68 6d 74 78 00 00 02 24 00 00 03 Data Ascii: wOFF{"FFTM{ubGDEFk`NZqGPOSq"=GSUBkh9OS/2M`gG;cmap.GgaspkXglyf<TC`f!headX66hhea!$@hmtx$
2024-12-24 15:05:16 UTC	10704	IN	Data Raw: 6c db fb 71 69 40 69 63 3d ff c3 08 b0 82 dd ce f1 17 51 b0 7e ed ac 7f e4 68 8c f4 c3 df f4 3a 80 40 9a 12 44 30 cd 68 4e 0b 5a d2 8a d6 b4 21 84 b6 84 d2 8e f6 74 20 8c 8e 74 a2 b3 51 49 57 3c 84 9b ae 79 89 20 92 6e 44 19 ad 44 d3 9d 1e f4 a4 17 bd e9 43 0c 7d 89 25 8e 78 12 e8 47 7f 12 19 c0 40 92 18 c4 60 86 30 94 61 24 1b 8d 8d 60 24 a3 48 61 34 63 18 4b 2a 69 a4 33 8e 0c 32 c9 62 3c 13 c8 26 87 5c 26 32 89 c9 e4 91 cf 14 0a 98 ca 34 a6 53 c8 0c 66 32 cb bc bf 94 32 36 b3 95 dd 1c e0 18 27 39 c1 29 ce 18 3d 9d e5 3c 17 5d 55 55 72 85 cb 46 c5 57 8d be 6e 72 83 6a 6e 73 8b 7b d4 70 9f 5a c9 66 29 73 99 c7 7c c9 65 25 c7 59 cc 42 59 c9 0a 16 98 dc e5 1c 32 76 99 5b a7 a2 3f 6a 57 cc 1a 63 cf 71 97 f5 cc 71 8b e9 73 cf 17 b1 56 26 32 9b 0d 94 b0 1f 2d Data Ascii: lqi@ic=Q~h:@D0hNZ!t tQIW<y nDDC}%xG@`0a$`$Ha4cK*i32b<&\&24Sf226'9)=<]UUrFWnrjns{pZf)s\|e%YBY2v[?jWcqqsV&2-
2024-12-24 15:05:17 UTC	6690	IN	Data Raw: 77 de 52 3b 92 02 29 c4 fe 05 c8 25 fc dc c6 96 a3 60 4d 8a 39 b7 82 e2 54 0c 67 de 89 5d 01 f9 85 c9 04 f2 e3 3b d1 d1 2f 7e f2 56 fd 18 89 5e 7b 43 fb c8 4d a5 77 38 e7 8a dc 1b 04 da a8 a0 f2 ac ef 08 f8 4b 95 45 7f 96 c1 dd cb 54 47 7c c0 e1 8c 15 d0 d3 e7 05 95 33 34 2f 07 f3 b9 19 89 d4 b7 93 99 43 44 a6 6e 76 ce 1f 8f b1 5e de 3a 43 87 fb 41 48 4a d5 b6 c7 92 f6 f8 59 d3 36 db c7 09 cf 93 18 6d 9b c2 cc 18 dc 36 f1 47 dd 1e 99 0b d6 3a 33 a1 4d 93 c0 8b e7 fd 50 bd 56 79 6e 6f a7 5d 56 68 97 e7 9b 77 75 b9 a6 2d b4 e7 09 9f d8 e9 36 4c 39 a3 9d 66 31 bc 34 ef 07 e3 6f 42 b2 a5 da 64 fe d8 13 1b b1 bd ec 1f e0 8c 97 1b fd 14 a0 02 21 f8 28 e4 c5 a9 73 6e cd f5 f2 6d df 32 2f ce c0 56 2f e5 b6 6d 62 1c e5 4d 1e 87 14 8a 43 9f f6 b0 50 a7 2c b4 8b c9 Data Ascii: wR;)%`M9Tg];/~V^{CMw8KETG\|34/CDnv^:CAHJY6m6G:3MPVyno]Vhwu-6L9f14oBd!(snm2/V/mbMCP,
2024-12-24 15:05:17 UTC	5352	IN	Data Raw: 53 e6 af 5c 92 b8 30 39 54 3e 37 64 ec b4 69 f3 a3 97 6e 62 a5 70 0d fa 14 cc 53 a5 81 fb a8 14 f8 21 9b 1e 61 e3 fd df 77 72 70 b6 b2 9e 3d d3 2b cc 7b e2 64 85 8f dc d2 da 67 ba 6f 18 81 47 c1 4a 45 ce b4 d6 be 45 2b 78 c8 10 da 61 b9 05 2b 82 7f bd 1b e4 7f af d7 5d d5 ab 7a f0 a2 be 6d 0f d0 ce cf 4f 25 9c 4f 1d db f2 4c 2c 15 15 d3 7d 93 f4 d4 ce 8e 74 05 a1 24 3c d5 cf 45 c6 a4 0a fb c6 a9 c1 31 81 93 2c 01 c4 8a 83 11 51 1c 94 83 69 41 f8 f3 9a 1a f5 16 6d cb af c3 bd b4 24 7c 53 80 46 b1 67 99 50 0c 43 ad a8 1c c3 30 8c 3f db a9 23 18 3a 50 8c e8 21 44 a2 12 0d 4c 93 2d 28 4c 44 99 c9 6f 9a 8a b5 26 f7 b9 58 6b 9a c9 d7 b0 0f 7f 88 b5 a6 3b 1a fb a2 5d 10 89 4e 15 a6 7b b6 c2 c5 60 55 a2 d6 12 51 d3 cd 05 d3 8d f8 7e 65 7a 30 b7 51 6a f4 28 d7 b3 Data Ascii: S\09T>7dinbpS!awrp=+{dgoGJEE+xa+]zmO%OL,}t$<E1,QiAm$\|SFgPC0?#:P!DL-(LDo&Xk;]N{`UQ~ez0Qj(
2024-12-24 15:05:17 UTC	7150	IN	Data Raw: 9c 38 71 08 93 4d 52 57 49 db 5c 36 27 55 57 59 cb 4c 36 1b 3c 7f b8 81 cd 85 39 00 7c 37 03 78 1f f8 06 a6 05 d0 eb 18 80 61 f4 10 e8 6e 79 d8 5d 03 b0 75 19 4c 09 a0 93 ab 20 db ec 81 61 33 0f 18 36 49 60 35 90 b6 fc bc 23 e0 4b 08 c0 fd 11 59 36 11 a6 c7 ec ab 80 ba 05 c1 f3 fc 68 c7 d9 31 c5 81 4e b0 6b fd f7 18 7c 82 1d 9b 48 c9 ba 92 92 75 6a b0 b3 ea 00 2f 5a b3 0e 00 78 da b5 94 bf 6b 14 41 14 c7 df e6 7e 24 e1 62 30 82 22 62 f1 10 09 fe c8 ed c5 34 86 eb ce 60 8c c1 42 44 63 3d ee ce dd ae b9 db 39 67 e7 38 ae 55 10 6c 45 0b ff 0e 2b 2b c1 d6 ce 3f c0 c6 56 b0 13 4b bf 33 f7 fc 11 39 c1 88 ee b2 bb 9f 79 33 ef d7 bc b7 43 44 1c 3d a6 88 a6 d7 75 7a 26 1c 51 83 3e 0b cf d1 7c 74 4c b8 42 a7 a3 db c2 55 6a 44 4f 84 6b b4 12 bd 12 ae 43 fe 41 78 9e Data Ascii: 8qMRWI\6'UWYL6<9\|7xany]uL a36I`5#KY6h1Nk\|Huj/ZxkA~$b0"b4`BDc=9g8UlE++?VK39y3CD=uz&Q>\|tLBUjDOkCAx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49868	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:16 UTC	662	OUT	GET /Content/images/arroew-next.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; AWSALB=4hAA9EpE4q3LqqOBDJGLLHrgeJA6NQOO8ySKvfuOkI/itRt0+dp00R/tAJN67AJ+NbA+jNqrot9t3EhLtqbzPG9KwMzm73QCl1dNzInid7nwaUarJG5f80D7x0YV
2024-12-24 15:05:16 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:16 GMT Content-Type: image/svg+xml Content-Length: 448 Connection: close Set-Cookie: AWSALB=zLCV+2ujCMV3seX2NlEitOvHe9LnQHjtxp45nYUvGFaxjTzR/bAUZdLHTdmSS33AQs6sCkFh2JPzGM2Fyj2EAwzWL51iRCWrcwOK18IKCXM0jx6qCw4oGtQpmTJ5; Expires=Tue, 31 Dec 2024 15:05:16 GMT; Path=/ Set-Cookie: AWSALBCORS=zLCV+2ujCMV3seX2NlEitOvHe9LnQHjtxp45nYUvGFaxjTzR/bAUZdLHTdmSS33AQs6sCkFh2JPzGM2Fyj2EAwzWL51iRCWrcwOK18IKCXM0jx6qCw4oGtQpmTJ5; Expires=Tue, 31 Dec 2024 15:05:16 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:16 UTC	448	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 2e 38 39 20 31 34 2e 36 34 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 39 39 39 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 67 20 69 64 3d 22 6e 65 78 74 22 3e 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 31 34 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 31 34 36 22 3e 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 7.89 14.64"><defs><style>.cls-1{fill:#999;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><g id="next"><g id="Group_1146" data-name="Group 1146"><path id="Path_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49870	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:16 UTC	877	OUT	GET /phhm/ HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1
2024-12-24 15:05:17 UTC	733	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:16 GMT Last-Modified: Fri, 13 Dec 2024 01:19:09 GMT ETag: "f702-6291c9e2c4352;62716321154ba" Accept-Ranges: bytes Content-Length: 63234 Vary: Accept-Encoding Content-Type: text/html Strict-Transport-Security: max-age=16070400; includeSubDomains Via: 1.1 account.mortgagequestions.com X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Connection: close Set-Cookie: bkfs1=!SM1ByjJmsweKBQZcon1a7F8IKKxzc5jNLTRfioYZvEPPk+K6g8e/AUnIlxbD7c3VZHaKAgM+Q9Wqop0=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:17 UTC	15651	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 63 72 69 74 74 65 72 73 2d 63 6f 6e 74 61 69 6e 65 72 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 48 48 20 4d 6f 72 74 67 61 67 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 2e 2f 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 74 72 61 6e 73 6c 61 74 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 Data Ascii: <!doctype html><html lang="en" data-critters-container><head> <meta charset="utf-8"> <title>PHH Mortgage</title> <base href="./"> <meta name="google" content="notranslate"> <meta name="viewport" content="width=device-width, initial-s
2024-12-24 15:05:17 UTC	423	IN	Data Raw: 30 2c 20 2e 32 29 2c 20 30 70 78 20 31 37 70 78 20 32 36 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 34 29 2c 20 30 70 78 20 36 70 78 20 33 32 70 78 20 35 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 32 29 3b 2d 2d 6d 61 74 2d 61 70 70 2d 65 6c 65 76 61 74 69 6f 6e 2d 73 68 61 64 6f 77 2d 6c 65 76 65 6c 2d 31 38 3a 30 70 78 20 39 70 78 20 31 31 70 78 20 2d 35 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 32 29 2c 20 30 70 78 20 31 38 70 78 20 32 38 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 34 29 2c 20 30 70 78 20 37 70 78 20 33 34 70 78 20 36 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 32 29 3b 2d 2d 6d 61 74 2d 61 70 70 2d 65 6c 65 76 61 74 69 6f 6e 2d 73 68 61 64 6f 77 Data Ascii: 0, .2), 0px 17px 26px 2px rgba(0, 0, 0, .14), 0px 6px 32px 5px rgba(0, 0, 0, .12);--mat-app-elevation-shadow-level-18:0px 9px 11px -5px rgba(0, 0, 0, .2), 0px 18px 28px 2px rgba(0, 0, 0, .14), 0px 7px 34px 6px rgba(0, 0, 0, .12);--mat-app-elevation-shadow
2024-12-24 15:05:17 UTC	8192	IN	Data Raw: 70 78 20 2d 36 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 32 29 2c 20 30 70 78 20 32 30 70 78 20 33 31 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 34 29 2c 20 30 70 78 20 38 70 78 20 33 38 70 78 20 37 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 32 29 3b 2d 2d 6d 61 74 2d 61 70 70 2d 65 6c 65 76 61 74 69 6f 6e 2d 73 68 61 64 6f 77 2d 6c 65 76 65 6c 2d 32 31 3a 30 70 78 20 31 30 70 78 20 31 33 70 78 20 2d 36 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 32 29 2c 20 30 70 78 20 32 31 70 78 20 33 33 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 34 29 2c 20 30 70 78 20 38 70 78 20 34 30 70 78 20 37 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 32 29 3b 2d 2d 6d 61 74 2d Data Ascii: px -6px rgba(0, 0, 0, .2), 0px 20px 31px 3px rgba(0, 0, 0, .14), 0px 8px 38px 7px rgba(0, 0, 0, .12);--mat-app-elevation-shadow-level-21:0px 10px 13px -6px rgba(0, 0, 0, .2), 0px 21px 33px 3px rgba(0, 0, 0, .14), 0px 8px 40px 7px rgba(0, 0, 0, .12);--mat-
2024-12-24 15:05:17 UTC	8192	IN	Data Raw: 72 28 2d 2d 62 72 61 6e 64 50 72 69 6d 61 72 79 44 61 72 6b 29 3b 2d 2d 6d 64 63 2d 73 77 69 74 63 68 2d 73 65 6c 65 63 74 65 64 2d 68 6f 76 65 72 2d 68 61 6e 64 6c 65 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 72 61 6e 64 50 72 69 6d 61 72 79 44 61 72 6b 29 3b 2d 2d 6d 64 63 2d 73 77 69 74 63 68 2d 73 65 6c 65 63 74 65 64 2d 70 72 65 73 73 65 64 2d 68 61 6e 64 6c 65 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 72 61 6e 64 50 72 69 6d 61 72 79 44 61 72 6b 29 3b 2d 2d 6d 64 63 2d 73 77 69 74 63 68 2d 73 65 6c 65 63 74 65 64 2d 66 6f 63 75 73 2d 74 72 61 63 6b 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 72 61 6e 64 50 72 69 6d 61 72 79 4c 69 67 68 74 29 3b 2d 2d 6d 64 63 2d 73 77 69 74 63 68 2d 73 65 6c 65 63 74 65 64 2d 68 6f 76 65 72 2d 74 72 61 63 6b 2d 63 6f Data Ascii: r(--brandPrimaryDark);--mdc-switch-selected-hover-handle-color:var(--brandPrimaryDark);--mdc-switch-selected-pressed-handle-color:var(--brandPrimaryDark);--mdc-switch-selected-focus-track-color:var(--brandPrimaryLight);--mdc-switch-selected-hover-track-co
2024-12-24 15:05:17 UTC	8192	IN	Data Raw: 63 6b 62 6f 78 2d 73 65 6c 65 63 74 65 64 2d 66 6f 63 75 73 2d 73 74 61 74 65 2d 6c 61 79 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 62 34 30 3b 2d 2d 6d 64 63 2d 63 68 65 63 6b 62 6f 78 2d 73 65 6c 65 63 74 65 64 2d 68 6f 76 65 72 2d 73 74 61 74 65 2d 6c 61 79 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 62 34 30 3b 2d 2d 6d 64 63 2d 63 68 65 63 6b 62 6f 78 2d 73 65 6c 65 63 74 65 64 2d 70 72 65 73 73 65 64 2d 73 74 61 74 65 2d 6c 61 79 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 62 34 30 3b 2d 2d 6d 64 63 2d 63 68 65 63 6b 62 6f 78 2d 75 6e 73 65 6c 65 63 74 65 64 2d 66 6f 63 75 73 2d 73 74 61 74 65 2d 6c 61 79 65 72 2d 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 2d 2d 6d 64 63 2d 63 68 65 63 6b 62 6f 78 2d 75 6e 73 65 6c 65 63 74 65 64 2d 68 6f 76 65 72 2d 73 74 61 74 65 2d Data Ascii: ckbox-selected-focus-state-layer-color:#ffab40;--mdc-checkbox-selected-hover-state-layer-color:#ffab40;--mdc-checkbox-selected-pressed-state-layer-color:#ffab40;--mdc-checkbox-unselected-focus-state-layer-color:black;--mdc-checkbox-unselected-hover-state-
2024-12-24 15:05:17 UTC	8192	IN	Data Raw: 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 2e 38 37 29 3b 2d 2d 6d 61 74 2d 73 6e 61 63 6b 2d 62 61 72 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 3a 23 66 66 61 62 34 30 7d 68 74 6d 6c 7b 2d 2d 6d 61 74 2d 74 61 62 6c 65 2d 72 6f 77 2d 69 74 65 6d 2d 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 3a 31 70 78 7d 68 74 6d 6c 7b 2d 2d 6d 61 74 2d 74 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 2d 2d 6d 61 74 2d 74 61 62 6c 65 2d 68 65 61 64 65 72 2d 68 65 61 64 6c 69 6e 65 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 38 37 29 3b 2d 2d 6d 61 74 2d 74 61 62 6c 65 2d 72 6f 77 2d 69 74 65 6d 2d 6c 61 62 65 6c 2d 74 65 78 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 Data Ascii: lor:rgba(255, 255, 255, .87);--mat-snack-bar-button-color:#ffab40}html{--mat-table-row-item-outline-width:1px}html{--mat-table-background-color:white;--mat-table-header-headline-color:rgba(0, 0, 0, .87);--mat-table-row-item-label-text-color:rgba(0, 0, 0,
2024-12-24 15:05:17 UTC	8192	IN	Data Raw: 61 64 65 72 2d 65 72 72 6f 72 2d 73 74 61 74 65 2d 69 63 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 68 74 6d 6c 7b 2d 2d 6d 61 74 2d 73 74 65 70 70 65 72 2d 68 65 61 64 65 72 2d 68 65 69 67 68 74 3a 37 32 70 78 7d 68 74 6d 6c 7b 2d 2d 6d 61 74 2d 73 6f 72 74 2d 61 72 72 6f 77 2d 63 6f 6c 6f 72 3a 23 37 35 37 35 37 35 7d 68 74 6d 6c 7b 2d 2d 6d 61 74 2d 74 6f 6f 6c 62 61 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 77 68 69 74 65 73 6d 6f 6b 65 3b 2d 2d 6d 61 74 2d 74 6f 6f 6c 62 61 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 74 65 78 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 38 37 29 7d 68 74 6d 6c 7b 2d 2d 6d 61 74 2d 74 6f 6f 6c 62 61 72 2d Data Ascii: ader-error-state-icon-background-color:transparent}html{--mat-stepper-header-height:72px}html{--mat-sort-arrow-color:#757575}html{--mat-toolbar-container-background-color:whitesmoke;--mat-toolbar-container-text-color:rgba(0, 0, 0, .87)}html{--mat-toolbar-
2024-12-24 15:05:17 UTC	6200	IN	Data Raw: 6e 65 3b 2d 2d 6d 64 63 2d 66 69 6c 6c 65 64 2d 62 75 74 74 6f 6e 2d 6c 61 62 65 6c 2d 74 65 78 74 2d 66 6f 6e 74 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 46 6f 6e 74 29 3b 2d 2d 6d 64 63 2d 66 69 6c 6c 65 64 2d 62 75 74 74 6f 6e 2d 6c 61 62 65 6c 2d 74 65 78 74 2d 73 69 7a 65 3a 31 34 70 78 3b 2d 2d 6d 64 63 2d 66 69 6c 6c 65 64 2d 62 75 74 74 6f 6e 2d 6c 61 62 65 6c 2d 74 65 78 74 2d 74 72 61 63 6b 69 6e 67 3a 2e 30 38 39 32 38 35 37 31 34 33 65 6d 3b 2d 2d 6d 64 63 2d 66 69 6c 6c 65 64 2d 62 75 74 74 6f 6e 2d 6c 61 62 65 6c 2d 74 65 78 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 2d 2d 6d 64 63 2d 66 69 6c 6c 65 64 2d 62 75 74 74 6f 6e 2d 6c 61 62 65 6c 2d 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 2d 2d 6d 64 63 2d 70 72 6f 74 65 63 74 65 Data Ascii: ne;--mdc-filled-button-label-text-font:var(--primaryFont);--mdc-filled-button-label-text-size:14px;--mdc-filled-button-label-text-tracking:.0892857143em;--mdc-filled-button-label-text-weight:500;--mdc-filled-button-label-text-transform:none;--mdc-protecte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49866	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:16 UTC	922	OUT	GET /Content/fonts/Gotham/Gotham-Light.woff HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.mortgagequestions.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.mortgagequestions.com/Content/styles/MQ-styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; AWSALB=4hAA9EpE4q3LqqOBDJGLLHrgeJA6NQOO8ySKvfuOkI/itRt0+dp00R/tAJN67AJ+NbA+jNqrot9t3EhLtqbzPG9KwMzm73QCl1dNzInid7nwaUarJG5f80D7x0YV
2024-12-24 15:05:17 UTC	839	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:16 GMT Content-Type: application/font-woff Content-Length: 31080 Connection: close Set-Cookie: AWSALB=D39/8dtdo+ONksUB/7UpEgjZEoK+LF3KvMMJ2YreNy3CO1Ey0XKOBCGWL6CND+br2tghtR1ESSOikWMMujPNwbHxaDeSo2rgdifH1jtBGMyG6fZTgaBeSWXTAw2/; Expires=Tue, 31 Dec 2024 15:05:16 GMT; Path=/ Set-Cookie: AWSALBCORS=D39/8dtdo+ONksUB/7UpEgjZEoK+LF3KvMMJ2YreNy3CO1Ey0XKOBCGWL6CND+br2tghtR1ESSOikWMMujPNwbHxaDeSo2rgdifH1jtBGMyG6fZTgaBeSWXTAw2/; Expires=Tue, 31 Dec 2024 15:05:16 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:17 UTC	494	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 79 68 00 0f 00 00 00 01 22 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 79 4c 00 00 00 1c 00 00 00 1c 75 ef 62 d1 47 44 45 46 00 00 69 70 00 00 00 4e 00 00 00 5a 0d 71 0e e2 47 50 4f 53 00 00 6f c0 00 00 09 8c 00 00 3b ea e6 78 9e 63 47 53 55 42 00 00 69 c0 00 00 05 fe 00 00 0c 68 1a ef 7f 39 4f 53 2f 32 00 00 01 d4 00 00 00 4d 00 00 00 60 67 2e 3b d5 63 6d 61 70 00 00 05 d4 00 00 02 9c 00 00 03 ce ed cb 2e 47 67 61 73 70 00 00 69 68 00 00 00 08 00 00 00 08 ff ff 00 03 67 6c 79 66 00 00 0c 38 00 00 52 56 00 00 b2 dc eb fe 0e 22 68 65 61 64 00 00 01 58 00 00 00 36 00 00 00 36 06 e6 ba 0e 68 68 65 61 00 00 01 90 00 00 00 21 00 00 00 24 0f 7e 08 33 68 6d 74 78 00 00 02 24 00 00 03 Data Ascii: wOFFyh"FFTMyLubGDEFipNZqGPOSo;xcGSUBih9OS/2M`g.;cmap.Ggaspihglyf8RV"headX66hhea!$~3hmtx$
2024-12-24 15:05:17 UTC	5352	IN	Data Raw: 63 62 40 06 0b 19 18 ea 1d 18 18 a2 61 7c 0f 35 37 2f 20 a5 f0 9b 85 2d ed 5f 1a e3 2c f6 75 8c 6f 80 fc d9 20 39 c6 7f 4c 7b 40 72 0c cc 00 69 56 0e 99 00 00 00 78 da 95 94 5f 68 5b 55 1c c7 bf f7 e6 9c 24 1d 63 0c 11 44 26 7d d8 83 22 3e 94 32 44 7c 10 b1 d2 56 61 e8 36 45 c6 08 22 25 84 30 a8 6d 19 23 8b 5b 1d 61 84 22 65 84 be 64 8b c2 a8 88 d8 95 11 a4 0c 19 7d 08 6c 03 99 2e 03 8b 94 22 7b 18 23 48 1f 04 99 88 30 c5 35 7e 7e 37 37 18 b2 4a 31 e5 c3 f7 dc d3 73 cf 3d e7 fb fb e3 d4 f9 85 cb 90 03 a7 46 62 5c f3 be a6 ac df a3 d3 c9 0b 9a f1 0b ca 06 1b 9a 4f 4c 6b 01 66 e1 53 f7 87 e6 99 9b 4c bc ae 0a ba e4 d4 be eb eb 2a 87 75 bd e2 ae 69 c2 dd d7 94 7f 1b dd d0 49 bf 5f e7 dc 0a 7b ee 62 af fd 9a 0b 7e d1 0a 14 d8 a3 04 cb d0 70 a3 1a 4b b1 5f f2 Data Ascii: cb@a\|57/ -_,uo 9L{@riVx_h[U$cD&}">2D\|Va6E"%0m#[a"ed}l."{#H05~~77J1s=Fb\OLkfSL*uiI_{b~pK_
2024-12-24 15:05:17 UTC	10121	IN	Data Raw: d0 ab 5d dc 2e 54 fb 69 a2 44 5d ef 1c 7e f4 de 3b 5c c6 cf c7 22 30 2e 78 6c ae 06 8f fd 1a 1d 19 5b 19 fc eb 06 ab d1 2c 60 dd 34 5f b1 05 92 fc b9 da ea 08 ed a7 11 74 0d 21 d7 5f c6 d7 77 36 bc fe 06 fb 4c b3 8c 75 d6 dc 20 d7 9e 9a ab 4d e1 d7 43 42 a7 7c 4c a7 fe 06 74 72 d3 af 04 9c 9e 50 d4 ca c1 c4 8a 3e 8a 9e 9c 9a 1b 7d 0a 74 2d 38 f6 7c d1 84 f0 ef 77 97 a0 ff ed 9c 51 f0 30 77 d5 8b e9 c8 01 7a c5 a1 1f ed 92 b1 61 b0 9b db 0a ba 54 a7 cd 0e f3 9b 3e ab 0c d5 1c e7 72 fe 7c 3f 22 64 22 28 88 d0 de 0c 4d e5 e1 94 8c 11 f1 c2 90 e2 17 21 d6 8d 38 76 57 5c 9c 26 4e 92 af 8d 85 79 75 d1 b0 50 1b 4e 61 bd 8f df 7c 25 d4 2e 22 d7 df 8f 97 e4 d7 45 e3 ef 7d 1a 1e b3 47 f1 f7 78 4f 26 b1 67 f1 16 03 83 ab c2 17 58 c9 a4 00 a1 fb 3b 83 26 1c 5c be be Data Ascii: ].TiD]~;\"0.xl[,`4_t!_w6Lu MCB\|LtrP>}t-8\|wQ0wzaT>r\|?"d"(M!8vW\&NyuPNa\|%."E}GxO&gX;&\
2024-12-24 15:05:17 UTC	6690	IN	Data Raw: ec 53 91 7a 23 bd 03 55 4e d2 cd cf 46 9d 7a 15 f4 af 6a 9d 68 ef 09 2c 0b af f3 16 49 4b dd 27 c8 c6 bc 95 0e 14 c0 e9 bc 41 37 06 b1 0d c5 6f 54 56 38 be 8e 0a cb 0a 5f 47 35 e9 ff 4d 25 15 69 3a f4 7f ac a6 82 ce 24 fd ee 5f 94 54 e9 0a 06 38 be ce 19 ef 4f f9 3a 67 97 8e 56 3a 13 1e e9 68 b5 33 74 27 c4 ee 60 c9 33 3c c1 fb cf 68 ee 3b 7e 16 7c ee fb 40 e3 b3 df 09 c1 8d ca 80 07 ab 4f a5 df 36 32 0d 1e d4 8a 39 8e a9 78 0f c1 f7 2c 57 75 70 9f af df 1a 18 b5 db 3f c2 ef 42 8c da 8b a1 89 06 71 69 bc de 22 a5 d0 57 74 54 87 f6 63 06 20 1a bb 25 43 42 08 a2 43 7b 32 11 dc bd d4 e6 e0 fb 47 d3 9e cb 40 97 b2 de 97 9a 51 0e b4 75 21 86 0a 38 f4 66 31 0a 50 65 98 d6 c2 ce c5 a2 53 bd 07 8b 0e 94 6b 3b 09 62 c3 0d 6a 92 cf f2 53 11 96 0e ed f1 69 9b 17 8d Data Ascii: Sz#UNFzjh,IK'A7oTV8_G5M%i:$_T8O:gV:h3t'`3<h;~\|@O629x,Wup?Bqi"WtTc %CBC{2G@Qu!8f1PeSk;bjSi
2024-12-24 15:05:17 UTC	4014	IN	Data Raw: 77 9e 02 5d 2a 2a d0 0b de 27 e3 db f0 94 cb 90 94 30 af e1 5d 16 e9 46 ae 62 18 0b de be a1 79 f0 8c c1 e7 7e 06 d9 b7 8c c1 67 47 da 75 f3 bb ef b3 b2 be 5f 03 bf a7 7f c0 b0 6d 7e 7e db a6 69 67 d3 3f e0 d7 40 b4 18 e5 04 82 4d 92 92 8b 5b 3b 6d bb 44 de b4 9f ea 3e 2e cf 5b 60 b6 60 cf 1e fc c6 ee 27 1f f3 c8 db 7f b4 7d b5 9e f0 0e a9 69 eb c1 6e a5 cf 94 a3 95 5e a4 f5 88 03 ed 3f 52 95 95 7d 15 59 e3 37 76 2b ec fc 1a 82 f4 8d f4 50 60 b7 82 2b f4 7a 86 76 b1 3c b7 56 77 09 1f 0f 63 1e 73 1e 5c 05 ad 9b 20 39 88 a4 d5 2f 31 06 3d 50 50 0c 0a 02 c5 31 a0 18 16 22 1f 50 1e 01 ca 91 0f a3 8b a1 79 18 c4 d0 3c 34 93 d8 8f 68 0c 8d d5 8d d7 d2 99 4c 56 45 60 03 b9 54 fb 5d d3 33 99 20 53 0a ce 72 7d d8 5f 85 5a 37 02 05 19 b9 8f 66 33 9b 44 5e 6c 66 a4 Data Ascii: w]**'0]Fby~gGu_m~~ig?@M[;mD>.[``'}in^?R}Y7v+P`+zv<Vwcs\ 9/1=PP1"Py<4hLVE`T]3 Sr}_Z7f3D^lf
2024-12-24 15:05:17 UTC	4409	IN	Data Raw: 54 0d df ac 5a 75 6b 9a d0 20 0e 0d db 34 8a a6 aa 35 5d 47 cb 9d ad 16 49 55 93 07 83 aa 2f be 33 12 5b 42 47 b8 8b 73 c1 d3 15 8b ae 6d eb 27 39 b9 b6 b6 ec 90 94 24 27 59 c5 8d 6b b5 cd 32 ad 4a e0 84 d5 21 91 c1 2a 6b 4d 35 c3 93 43 50 53 55 c4 b0 17 02 4b eb cb 14 cd 72 b4 24 59 a1 6c 32 3e 37 12 ba 81 59 1c b2 a5 d1 aa 0c 5f 14 b5 95 63 73 cd 0e 7d 25 bc 6a 39 9a 65 8a d6 a8 55 34 f5 8a 89 9e aa b8 5c 35 b4 03 ab 66 8f ab 20 db f4 95 6b 56 d4 33 02 bd 18 79 99 a9 9e 24 ad 4e 17 c9 1a 7b fa bb 53 95 d2 62 df 0e cb 09 ab 4d 2c a0 6e ae 78 2b d5 5c 81 d9 08 65 23 55 a3 05 8f 1a 2d 98 6e ad 22 b2 b5 32 4e b6 56 fa e8 d6 4a a6 5b 2b 9d 54 6b 25 51 55 8a a6 a3 aa 08 cc 46 58 af 22 78 54 45 30 5d 45 11 59 45 c6 c9 2a d2 47 57 91 4c 57 91 4e aa 8a bc a5 be Data Ascii: TZuk 45]GIU/3[BGsm'9$'Yk2J!kM5CPSUKr$Yl2>7Y_cs}%j9eU4\5f kV3y$N{SbM,nx+\e#U-n"2NVJ[+Tk%QUFX"xTE0]EYEGWLWN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49871	23.20.35.169	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:17 UTC	603	OUT	GET /v1/apps/6567c1c6a2ec72132b15f3af/manifest?api_version=15&locale=en-US HTTP/1.1 Host: api.apptentive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.mortgagequestions.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:17 UTC	963	IN	HTTP/1.1 200 OK Server: envoy Date: Tue, 24 Dec 2024 15:05:17 GMT Content-Type: application/json; charset=utf-8 access-control-allow-origin: https://www.mortgagequestions.com access-control-allow-methods: GET, PUT, POST access-control-expose-headers: access-control-max-age: 7200 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self'; font-src 'self'; img-src 'self'; frame-src 'self'; ETag: W/"bfca9610f9690f289e58c67aa776bf36" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: b651be9a-ab9f-46f1-b0ef-5e6d356b9006 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin,Accept-Encoding X-Frame-Options: SAMEORIGIN x-envoy-upstream-service-time: 12 Connection: close Transfer-Encoding: chunked
2024-12-24 15:05:17 UTC	1602	IN	Data Raw: 36 33 36 0d 0a 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 5f 69 64 22 3a 22 36 35 36 37 63 31 63 36 61 32 65 63 37 32 31 33 32 62 31 35 66 33 61 66 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 36 35 36 37 63 31 63 36 61 32 65 63 37 32 31 33 32 62 31 35 66 33 62 36 22 2c 22 64 69 73 70 6c 61 79 5f 74 79 70 65 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 4d 65 73 73 61 67 65 43 65 6e 74 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 32 2c 22 61 70 69 5f 76 65 72 73 69 6f 6e 22 3a 31 35 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 74 69 74 6c 65 22 3a 22 4d 65 73 73 61 67 65 20 43 65 6e 74 65 72 22 2c 22 62 72 61 6e 64 69 6e 67 22 3a 22 50 6f 77 65 72 65 64 20 62 79 20 41 70 70 74 65 6e 74 69 76 65 22 2c 22 63 6f 6d 70 6f 73 Data Ascii: 636{"application_id":"6567c1c6a2ec72132b15f3af","interactions":[{"id":"6567c1c6a2ec72132b15f3b6","display_type":null,"type":"MessageCenter","version":2,"api_version":15,"configuration":{"title":"Message Center","branding":"Powered by Apptentive","compos

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49872	23.20.35.169	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:17 UTC	563	OUT	OPTIONS /conversation?api_version=8 HTTP/1.1 Host: api.apptentive.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Origin: https://www.mortgagequestions.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:17 UTC	499	IN	HTTP/1.1 200 OK Server: envoy Date: Tue, 24 Dec 2024 15:05:17 GMT access-control-allow-origin: https://www.mortgagequestions.com access-control-allow-methods: GET, PUT, POST access-control-expose-headers: access-control-max-age: 7200 access-control-allow-headers: authorization,content-type Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN x-envoy-upstream-service-time: 3 Connection: close Transfer-Encoding: chunked
2024-12-24 15:05:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49873	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:17 UTC	664	OUT	GET /Content/images/previous-icon.svg HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; AWSALB=4hAA9EpE4q3LqqOBDJGLLHrgeJA6NQOO8ySKvfuOkI/itRt0+dp00R/tAJN67AJ+NbA+jNqrot9t3EhLtqbzPG9KwMzm73QCl1dNzInid7nwaUarJG5f80D7x0YV
2024-12-24 15:05:17 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:17 GMT Content-Type: image/svg+xml Content-Length: 378 Connection: close Set-Cookie: AWSALB=NRARIFNwfuQQcLllUoVnTO2W2kJ1RwOlUYryT4dev3S6JZgEZlRb2F/LvyPQ5ewX1KRu7ZnD7o3m9FT8RbeMZfVp7revYsRPQ+yNJKgOKUaLMEryCwgaeoM08uOn; Expires=Tue, 31 Dec 2024 15:05:17 GMT; Path=/ Set-Cookie: AWSALBCORS=NRARIFNwfuQQcLllUoVnTO2W2kJ1RwOlUYryT4dev3S6JZgEZlRb2F/LvyPQ5ewX1KRu7ZnD7o3m9FT8RbeMZfVp7revYsRPQ+yNJKgOKUaLMEryCwgaeoM08uOn; Expires=Tue, 31 Dec 2024 15:05:17 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 11:35:10 GMT Accept-Ranges: bytes ETag: "06b2048fd99d91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:17 UTC	378	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 37 2e 38 38 32 22 20 68 65 69 67 68 74 3d 22 31 34 2e 36 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 2e 38 38 32 20 31 34 2e 36 33 32 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 39 39 39 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 37 2e 38 38 32 20 31 34 2e 36 33 32 29 20 72 6f 74 61 74 65 28 31 38 30 29 22 3e 3c 67 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 30 29 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 61 22 20 64 3d 22 4d 37 2e 37 31 37 2c 36 2e 39 31 34 2e 39 36 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="7.882" height="14.632" viewBox="0 0 7.882 14.632"><defs><style>.a{fill:#999;}</style></defs><g transform="translate(7.882 14.632) rotate(180)"><g transform="translate(0 0)"><path class="a" d="M7.717,6.914.961

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49869	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:17 UTC	982	OUT	GET /phhm/runtime.703b6736fb2c9821.js HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.mortgagequestions.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.mortgagequestions.com/phhm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; bkfs1=!SM1ByjJmsweKBQZcon1a7F8IKKxzc5jNLTRfioYZvEPPk+K6g8e/AUnIlxbD7c3VZHaKAgM+Q9Wqop0=; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8
2024-12-24 15:05:18 UTC	744	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:17 GMT Last-Modified: Mon, 11 Nov 2024 21:19:34 GMT ETag: "d50-626a9a83a8580;627163211dd23" Accept-Ranges: bytes Content-Length: 3408 Vary: Accept-Encoding Content-Type: application/javascript Strict-Transport-Security: max-age=16070400; includeSubDomains Via: 1.1 account.mortgagequestions.com X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Connection: close Set-Cookie: bkfs1=!jzJgnAYpu207O2pcon1a7F8IKKxzc5PYlAvw8EHDEOhrB9MNpwrkXJlRPQZf9COeTHmZngRCOYb1SxY=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:18 UTC	3408	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 76 3d 7b 7d 2c 67 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 6e 3d 67 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 67 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 76 5b 65 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 61 29 2c 72 2e 6c 6f 61 64 65 64 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 61 2e 6d 3d 76 2c 65 3d 5b 5d 2c 61 2e 4f 3d 28 6e 2c 72 2c 69 2c 64 29 3d 3e 7b 69 66 28 21 72 29 7b 76 61 72 20 74 3d 31 2f 30 3b 66 6f 72 28 66 3d 30 3b 66 3c 65 2e 6c 65 6e 67 74 Data Ascii: (()=>{"use strict";var e,v={},g={};function a(e){var n=g[e];if(void 0!==n)return n.exports;var r=g[e]={id:e,loaded:!1,exports:{}};return v[e].call(r.exports,r,r.exports,a),r.loaded=!0,r.exports}a.m=v,e=[],a.O=(n,r,i,d)=>{if(!r){var t=1/0;for(f=0;f<e.lengt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49874	3.160.196.59	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:17 UTC	355	OUT	GET /v1/sdk.min.js HTTP/1.1 Host: sdk.apptentive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:18 UTC	584	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 28232 Connection: close Date: Tue, 24 Dec 2024 15:05:19 GMT Last-Modified: Wed, 27 Nov 2024 12:12:42 GMT ETag: "10666db45bc960408b88c28f31fac175" x-amz-server-side-encryption: AES256 Cache-Control: max-age=7200, must-revalidate Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 12c1ef70797b1c48fbd413f77abc14d6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P6 X-Amz-Cf-Id: b6pmoNhXTkkjUwWez25ftAPZyA8BiHIzmyf9VK46DjLM6EmViDFNBg==
2024-12-24 15:05:18 UTC	15800	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd eb 72 e3 58 92 30 f6 2a 10 ba 56 0d 74 41 94 54 dd 33 3b 4b 36 9a 5f 75 55 f5 8e b6 eb 36 a5 ea e9 99 d5 68 29 88 3c 92 30 a2 00 0e 01 56 95 86 42 84 1f c0 97 b0 1d fe 65 6f ac 7f 7c 11 0e 47 38 ec bf 76 f8 6d f6 05 bc 8f e0 cc 3c 17 9c 1b 48 ea d2 b3 bd fb ed 8f 2a 11 e7 7e c9 93 b7 93 99 e7 43 36 0f 9e ce 66 35 2b ea fc 03 fb 36 ab 58 7a b6 28 c6 75 5e 16 51 bc 0c 17 15 0b aa 7a 9e 8f eb 70 30 9e 66 55 15 bc 2c c7 d9 f4 b0 2e e7 d9 39 7b 55 8e 2f 97 e3 b2 80 12 8b 31 24 41 8d fa 22 af 7a 15 fc 66 e9 b2 69 c6 53 96 b9 a9 e7 ac 3e a8 d9 55 c4 e2 e5 9c d5 8b 79 11 b4 f9 47 ec f8 e6 a6 58 4c a7 cd 9c 5d 95 1f 98 2c 38 61 53 56 33 b3 60 53 c9 86 92 1a fa d8 de 8e 8c ec b4 ee d5 e5 21 0c be 38 8f e2 b8 b9 64 d7 5a 8f 6f 4e Data Ascii: rX0VtAT3;K6_uU6h)<0VBeo\|G8vm<H~C6f5+6Xz(u^Qzp0fU,.9{U/1$A"zfiS>UyGXL],8aSV3`S!8dZoN
2024-12-24 15:05:18 UTC	1660	IN	Data Raw: 7c a3 98 3f e8 28 c4 df a5 b9 15 f6 40 3e 3a 7b 25 9d 52 ba bd 52 1c 61 04 d9 70 ee 0e f1 d0 22 45 2b 18 ac 91 28 b0 fb 97 2c d5 8d 0c e4 b5 e2 11 41 e9 21 1c 52 96 ee 1d 13 17 42 1f c0 a6 41 16 ce 81 e7 ed 43 9e fa c2 48 f6 11 1a a8 d9 a2 ca 53 51 fb 1d 2c 42 71 6f 71 65 23 d9 01 59 7a 8b a3 a7 57 de 2d fd 06 8e 0a ef c0 5b 6c 2b 79 74 6b cc 2d 9b 6e 06 87 3c d7 71 e5 aa 9b a4 96 72 e0 b2 33 77 d7 f7 bc bb be a7 ef fa de 71 ff 23 4c b1 fc d8 2b 01 83 24 77 b6 06 11 8d 14 d9 87 fc 1c 6d 32 7a 0b 98 cf d3 73 c8 1e f8 c9 da 1a 6a b5 b6 80 6f a1 7d 64 cd 5a f4 6e ca 66 15 bc 05 71 3b 7f 70 e2 66 a3 a4 bf bd 17 46 12 e6 ac 57 0c a6 3e e9 17 89 5c b9 7e de ac b9 7b 4c aa 54 08 1b 31 7f 1e 91 a5 69 fa b2 3d c8 e2 32 78 37 7f 9b 4d 6e f2 b7 17 65 c1 e0 4f 39 d9 Data Ascii: \|?(@>:{%RRap"E+(,A!RBACHSQ,Bqoqe#YzW-[l+ytk-n<qr3wq#L+$wm2zsjo}dZnfq;pfFW>\~{LT1i=2x7MneO9
2024-12-24 15:05:18 UTC	10772	IN	Data Raw: 25 f2 2d 14 f4 0f ee fb 6b 89 4f 0f e4 03 6c ad c5 1d 9e fe 69 ad a6 36 e0 6a cd 49 84 8e 41 cd 43 ba 78 b6 ad 5a a6 82 9b ad a4 dd 48 a7 af a6 2a 72 4f e5 64 ab ec 34 37 25 dc d4 71 d3 b9 f9 fa 8b 3d c2 e3 ac 12 eb ca 70 af 2a 95 f5 54 c7 52 2b b7 2b 7b 76 c9 e1 c3 79 53 b5 8c cb 03 7b 52 29 c1 85 16 6c c5 43 39 ce ec c9 cb 6c 83 87 23 4b 3a 48 9b 04 86 90 65 81 09 8f a3 55 ae 43 b7 34 4e 7c e9 de ed 2f ee f9 ea 8b c1 bd b5 74 a5 1d 98 10 12 84 46 b0 38 3c bd 02 e9 1b 95 6d c3 ae 57 2a 51 db 60 0c fb 4f 96 11 60 2b 25 1a b7 bd 06 1e e5 3d 69 02 46 18 ca 70 06 b7 e7 f1 d6 d1 fe 6e f9 04 69 be 2d 2a 62 58 ba 9b 1b 16 6f 36 db 01 3e 92 bc f4 4c 57 7f 20 a0 23 aa 8b c6 ef 02 67 b0 98 4e bb 03 c0 60 cc 1d 0b 99 00 8d 4a ca e2 19 77 ef 29 60 cb 8a 8e 1d 73 2f Data Ascii: %-kOli6jIACxZHrOd47%q=pTR++{vyS{R)lC9l#K:HeUC4N\|/tF8<mWQ`O`+%=iFpni-bXo6>LW #gN`Jw)`s/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49881	3.160.196.72	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:18 UTC	561	OUT	GET /v1/styles/styles.css HTTP/1.1 Host: sdk.apptentive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:19 UTC	569	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=UTF-8 Content-Length: 5833 Connection: close Date: Tue, 24 Dec 2024 15:05:20 GMT Last-Modified: Wed, 26 Jun 2024 09:38:45 GMT ETag: "724c294dd5b1945cf445e64b523412b6" x-amz-server-side-encryption: AES256 Cache-Control: max-age=7200, must-revalidate Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 838638cb6a0be0c73846c274617a4122.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-P6 X-Amz-Cf-Id: DbsXl_gfqJiqjLqnK-YzQWgK_OG6KM3r74FfKncuyWp5LT9-Sl_bMw==
2024-12-24 15:05:19 UTC	5833	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e5 3d d9 6e e4 38 92 ef f5 15 da 6a 0c d6 f6 58 59 79 da 2e 17 66 d0 bb 0f 7b 00 3d 2f 3d 3b c0 2e 06 03 43 29 31 9d 9a 52 4a 39 92 d2 47 35 6a bf 7d 83 97 c4 23 48 49 79 d8 d9 db e5 6e 3b 53 e2 11 17 83 11 c1 20 f9 e3 57 f2 ba 2a a3 0d a9 82 68 bb ad 49 5e a7 4f e4 a1 ca d2 84 3c ec b6 c1 2f 1f 82 60 fc 3b f6 27 08 96 45 5d 17 9b fb 20 9c df 8d b7 2f 5f d8 b3 62 1b c5 69 fd 7a 1f 8c 47 13 fa e4 3b fc 3f 19 5b 55 26 76 05 51 fc fb 87 b6 df 10 c0 a8 a2 47 12 c6 f0 9d 94 d7 0a 48 61 56 c0 af 24 8d b2 e2 71 14 17 65 6e bc ce 8b 9a 88 e7 c1 c8 78 1e c6 45 4e bf 6b 15 aa 5d f9 44 5e 19 98 51 9e 6e a2 3a 2d f2 30 07 42 dc 63 84 f8 a2 15 4b 76 25 fb 40 b1 9e 2d 2a fd 65 9d 6e d2 fc 31 5c ed f2 98 97 21 51 45 c2 34 0f 8b 5d ad 97 4c Data Ascii: =n8jXYy.f{=/=;.C)1RJ9G5j}#HIyn;S WhI^O</`;'E] /_bizG;?[U&vQGHaV$qenxENk]D^Qn:-0BcKv%@-en1\!QE4]L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49886	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:18 UTC	984	OUT	GET /phhm/polyfills.6f07a62f128f3c09.js HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.mortgagequestions.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.mortgagequestions.com/phhm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; bkfs1=!SM1ByjJmsweKBQZcon1a7F8IKKxzc5jNLTRfioYZvEPPk+K6g8e/AUnIlxbD7c3VZHaKAgM+Q9Wqop0=; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8
2024-12-24 15:05:19 UTC	746	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:19 GMT Last-Modified: Mon, 11 Nov 2024 21:19:34 GMT ETag: "8ea0-626a9a83a8580;627163211562d" Accept-Ranges: bytes Content-Length: 36512 Vary: Accept-Encoding Content-Type: application/javascript Strict-Transport-Security: max-age=16070400; includeSubDomains Via: 1.1 account.mortgagequestions.com X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Connection: close Set-Cookie: bkfs1=!R3F473we/cLwDX9con1a7F8IKKxzc0y1OpARurMBOGgWSfBh2Ib1cDbi4FwzcImnb8bn5yiwU9pP6tU=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:19 UTC	7869	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 36 31 5d 2c 7b 31 39 34 36 32 3a 28 29 3d 3e 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6c 65 28 64 65 29 7b 72 65 74 75 72 6e 28 6c 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 73 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 73 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 73 65 29 7b 72 65 74 75 72 6e 20 73 65 26 Data Ascii: (self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[461],{19462:()=>{!function(){"use strict";function le(de){return(le="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(se){return typeof se}:function(se){return se&
2024-12-24 15:05:19 UTC	8192	IN	Data Raw: 59 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3b 69 66 28 21 59 29 72 65 74 75 72 6e 20 63 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 58 65 26 26 22 75 6e 63 61 75 67 68 74 45 78 63 65 70 74 69 6f 6e 22 3d 3d 3d 24 29 72 65 74 75 72 6e 20 63 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 6c 65 74 20 4b 3d 21 31 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 59 29 7b 69 66 28 21 59 2e 68 61 6e 64 6c 65 45 76 65 6e 74 29 72 65 74 75 72 6e 20 63 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 4b 3d 21 30 7d 69 66 28 57 26 26 21 57 28 63 2c 59 2c 48 2c 61 72 67 75 6d 65 6e 74 73 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 6a 65 3d 52 65 26 26 21 21 76 65 26 26 2d Data Ascii: Y=arguments[1];if(!Y)return c.apply(this,arguments);if(Xe&&"uncaughtException"===$)return c.apply(this,arguments);let K=!1;if("function"!=typeof Y){if(!Y.handleEvent)return c.apply(this,arguments);K=!0}if(W&&!W(c,Y,H,arguments))return;const je=Re&&!!ve&&-
2024-12-24 15:05:19 UTC	8192	IN	Data Raw: 54 29 3b 63 6f 6e 73 74 20 44 65 3d 41 3b 41 3d 49 2c 4e 3d 7b 70 61 72 65 6e 74 3a 4e 2c 7a 6f 6e 65 3a 74 68 69 73 7d 3b 74 72 79 7b 6e 65 3d 3d 76 26 26 6e 2e 64 61 74 61 26 26 21 55 26 26 21 78 65 26 26 28 6e 2e 63 61 6e 63 65 6c 46 6e 3d 76 6f 69 64 20 30 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 7a 6f 6e 65 44 65 6c 65 67 61 74 65 2e 69 6e 76 6f 6b 65 54 61 73 6b 28 74 68 69 73 2c 49 2c 73 2c 50 29 7d 63 61 74 63 68 28 76 65 29 7b 69 66 28 74 68 69 73 2e 5f 7a 6f 6e 65 44 65 6c 65 67 61 74 65 2e 68 61 6e 64 6c 65 45 72 72 6f 72 28 74 68 69 73 2c 76 65 29 29 74 68 72 6f 77 20 76 65 7d 7d 66 69 6e 61 6c 6c 79 7b 63 6f 6e 73 74 20 76 65 3d 6e 2e 73 74 61 74 65 3b 69 66 28 76 65 21 3d 3d 72 65 26 26 76 65 21 3d 3d 6f 65 29 69 66 28 6e 65 Data Ascii: T);const De=A;A=I,N={parent:N,zone:this};try{ne==v&&n.data&&!U&&!xe&&(n.cancelFn=void 0);try{return this._zoneDelegate.invokeTask(this,I,s,P)}catch(ve){if(this._zoneDelegate.handleError(this,ve))throw ve}}finally{const ve=n.state;if(ve!==re&&ve!==oe)if(ne
2024-12-24 15:05:19 UTC	8192	IN	Data Raw: 3b 68 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 55 6e 68 61 6e 64 6c 65 64 20 50 72 6f 6d 69 73 65 20 72 65 6a 65 63 74 69 6f 6e 3a 22 2c 68 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 68 2e 6d 65 73 73 61 67 65 3a 68 2c 22 3b 20 5a 6f 6e 65 3a 22 2c 67 2e 7a 6f 6e 65 2e 6e 61 6d 65 2c 22 3b 20 54 61 73 6b 3a 22 2c 67 2e 74 61 73 6b 26 26 67 2e 74 61 73 6b 2e 73 6f 75 72 63 65 2c 22 3b 20 56 61 6c 75 65 3a 22 2c 68 2c 68 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 68 2e 73 74 61 63 6b 3a 76 6f 69 64 20 30 29 3a 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 67 29 7d 7d 2c 74 2e 6d 69 63 72 6f 74 61 73 6b 44 72 61 69 6e 44 6f 6e 65 3d 28 29 3d 3e 7b 66 6f 72 28 3b 77 2e 6c 65 6e 67 74 68 3b 29 7b 63 6f 6e 73 74 20 67 3d 77 2e 73 68 69 Data Ascii: ;h?console.error("Unhandled Promise rejection:",h instanceof Error?h.message:h,"; Zone:",g.zone.name,"; Task:",g.task&&g.task.source,"; Value:",h,h instanceof Error?h.stack:void 0):console.error(g)}},t.microtaskDrainDone=()=>{for(;w.length;){const g=w.shi
2024-12-24 15:05:19 UTC	4067	IN	Data Raw: 74 22 2c 22 48 54 4d 4c 45 6c 65 6d 65 6e 74 22 2c 22 48 54 4d 4c 42 6f 64 79 45 6c 65 6d 65 6e 74 22 2c 22 48 54 4d 4c 4d 65 64 69 61 45 6c 65 6d 65 6e 74 22 2c 22 48 54 4d 4c 46 72 61 6d 65 53 65 74 45 6c 65 6d 65 6e 74 22 2c 22 48 54 4d 4c 46 72 61 6d 65 45 6c 65 6d 65 6e 74 22 2c 22 48 54 4d 4c 49 46 72 61 6d 65 45 6c 65 6d 65 6e 74 22 2c 22 48 54 4d 4c 4d 61 72 71 75 65 65 45 6c 65 6d 65 6e 74 22 2c 22 57 6f 72 6b 65 72 22 5d 29 3b 63 6f 6e 73 74 20 5f 3d 66 75 6e 63 74 69 6f 6e 20 64 74 28 29 7b 74 72 79 7b 63 6f 6e 73 74 20 65 3d 49 65 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3b 69 66 28 2d 31 21 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 4d 53 49 45 20 22 29 7c 7c 2d 31 21 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 Data Ascii: t","HTMLElement","HTMLBodyElement","HTMLMediaElement","HTMLFrameSetElement","HTMLFrameElement","HTMLIFrameElement","HTMLMarqueeElement","Worker"]);const _=function dt(){try{const e=Ie.navigator.userAgent;if(-1!==e.indexOf("MSIE ")\|\|-1!==e.indexOf("Trident

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49885	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:18 UTC	979	OUT	GET /phhm/main.5ae79adb947e0038.js HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.mortgagequestions.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.mortgagequestions.com/phhm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; bkfs1=!SM1ByjJmsweKBQZcon1a7F8IKKxzc5jNLTRfioYZvEPPk+K6g8e/AUnIlxbD7c3VZHaKAgM+Q9Wqop0=; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8
2024-12-24 15:05:19 UTC	750	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:19 GMT Last-Modified: Mon, 11 Nov 2024 21:19:34 GMT ETag: "477975-626a9a83a8580;627163210a690" Accept-Ranges: bytes Content-Length: 4684149 Vary: Accept-Encoding Content-Type: application/javascript Strict-Transport-Security: max-age=16070400; includeSubDomains Via: 1.1 account.mortgagequestions.com X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Connection: close Set-Cookie: bkfs1=!3EAQ+8ZAh81zjRlcon1a7F8IKKxzc9udfFqceq8UX0+zx6pqlyqEwNpizKjb56Iid+Gs4EJNtrtTqFE=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:19 UTC	7865	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 39 32 5d 2c 7b 39 32 35 35 31 3a 66 75 6e 63 74 69 6f 6e 28 41 65 2c 4b 2c 6f 29 7b 76 61 72 20 69 3b 41 65 2e 65 78 70 6f 72 74 73 3d 28 69 3d 6f 28 37 33 30 34 39 29 2c 6f 28 33 36 34 36 32 29 2c 6f 28 31 38 39 36 29 2c 6f 28 32 39 36 31 34 29 2c 6f 28 36 36 34 31 37 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 69 2c 43 3d 65 2e 6c 69 62 2e 42 6c 6f 63 6b 43 69 70 68 65 72 2c 68 3d 65 2e 61 6c 67 6f 2c 64 3d 5b 5d 2c 6d 3d 5b 5d 2c 67 3d 5b 5d 2c 6c 3d 5b 5d 2c 75 3d 5b 5d 2c 63 3d 5b 5d 2c 45 3d 5b 5d 2c 44 3d 5b 5d 2c 53 Data Ascii: (self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[792],{92551:function(Ae,K,o){var i;Ae.exports=(i=o(73049),o(36462),o(1896),o(29614),o(66417),function(){var e=i,C=e.lib.BlockCipher,h=e.algo,d=[],m=[],g=[],l=[],u=[],c=[],E=[],D=[],S
2024-12-24 15:05:19 UTC	8192	IN	Data Raw: 31 39 39 38 36 38 34 32 37 2c 31 34 35 32 34 35 34 35 33 33 2c 31 35 37 30 30 37 36 31 36 2c 32 39 30 34 31 31 35 33 35 37 2c 33 34 32 30 31 32 32 37 36 2c 35 39 35 37 32 35 38 32 34 2c 31 34 38 30 37 35 36 35 32 32 2c 32 30 36 39 36 30 31 30 36 2c 34 39 37 39 33 39 35 31 38 2c 35 39 31 33 36 30 30 39 37 2c 38 36 33 31 37 30 37 30 36 2c 32 33 37 35 32 35 33 35 36 39 2c 33 35 39 36 36 31 30 38 30 31 2c 31 38 31 34 31 38 32 38 37 35 2c 32 30 39 34 39 33 37 39 34 35 2c 33 34 32 31 34 30 32 32 30 38 2c 31 30 38 32 35 32 30 32 33 31 2c 33 34 36 33 39 31 38 31 39 30 2c 32 37 38 35 35 30 39 35 30 38 2c 34 33 35 37 30 33 39 36 36 2c 33 39 30 38 30 33 32 35 39 37 2c 31 36 34 31 36 34 39 39 37 33 2c 32 38 34 32 32 37 33 37 30 36 2c 33 33 30 35 38 39 39 37 31 34 2c Data Ascii: 199868427,1452454533,157007616,2904115357,342012276,595725824,1480756522,206960106,497939518,591360097,863170706,2375253569,3596610801,1814182875,2094937945,3421402208,1082520231,3463918190,2785509508,435703966,3908032597,1641649973,2842273706,3305899714,
2024-12-24 15:05:19 UTC	8192	IN	Data Raw: 2c 5a 74 2c 68 6e 29 7d 7d 7d 7d 28 29 7d 29 2c 43 2e 53 74 72 65 61 6d 43 69 70 68 65 72 3d 44 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 46 69 6e 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 70 72 6f 63 65 73 73 28 21 30 29 7d 2c 62 6c 6f 63 6b 53 69 7a 65 3a 31 7d 29 2c 78 3d 76 2e 6d 6f 64 65 3d 7b 7d 2c 59 3d 43 2e 42 6c 6f 63 6b 43 69 70 68 65 72 4d 6f 64 65 3d 68 2e 65 78 74 65 6e 64 28 7b 63 72 65 61 74 65 45 6e 63 72 79 70 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 78 65 2c 75 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 45 6e 63 72 79 70 74 6f 72 2e 63 72 65 61 74 65 28 78 65 2c 75 74 29 7d 2c 63 72 65 61 74 65 44 65 63 72 79 70 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 78 65 2c 75 74 29 7b 72 65 74 75 72 6e 20 74 Data Ascii: ,Zt,hn)}}}}()}),C.StreamCipher=D.extend({_doFinalize:function(){return this._process(!0)},blockSize:1}),x=v.mode={},Y=C.BlockCipherMode=h.extend({createEncryptor:function(xe,ut){return this.Encryptor.create(xe,ut)},createDecryptor:function(xe,ut){return t
2024-12-24 15:05:19 UTC	8192	IN	Data Raw: 64 65 41 74 28 44 29 5d 3e 3e 3e 36 2d 44 25 34 2a 32 3b 63 5b 45 3e 3e 3e 32 5d 7c 3d 28 53 7c 78 29 3c 3c 32 34 2d 45 25 34 2a 38 2c 45 2b 2b 7d 72 65 74 75 72 6e 20 43 2e 63 72 65 61 74 65 28 63 2c 45 29 7d 28 67 2c 6c 2c 63 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 69 2e 65 6e 63 2e 42 61 73 65 36 34 29 7d 2c 33 33 35 37 37 3a 66 75 6e 63 74 69 6f 6e 28 41 65 2c 4b 2c 6f 29 7b 76 61 72 20 69 2c 43 3b 41 65 2e 65 78 70 6f 72 74 73 3d 28 69 3d 6f 28 37 33 30 34 39 29 2c 43 3d 69 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 69 2e 65 6e 63 2e 42 61 73 65 36 34 75 72 6c Data Ascii: deAt(D)]>>>6-D%42;c[E>>>2]\|=(S\|x)<<24-E%48,E++}return C.create(c,E)}(g,l,c)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},i.enc.Base64)},33577:function(Ae,K,o){var i,C;Ae.exports=(i=o(73049),C=i.lib.WordArray,i.enc.Base64url
2024-12-24 15:05:19 UTC	8192	IN	Data Raw: 2b 2b 29 43 5b 68 2b 75 5d 5e 3d 67 5b 75 5d 7d 72 65 74 75 72 6e 20 65 2e 45 6e 63 72 79 70 74 6f 72 3d 65 2e 65 78 74 65 6e 64 28 7b 70 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 43 2c 68 29 7b 76 61 72 20 64 3d 74 68 69 73 2e 5f 63 69 70 68 65 72 2c 6d 3d 64 2e 62 6c 6f 63 6b 53 69 7a 65 3b 76 2e 63 61 6c 6c 28 74 68 69 73 2c 43 2c 68 2c 6d 2c 64 29 2c 74 68 69 73 2e 5f 70 72 65 76 42 6c 6f 63 6b 3d 43 2e 73 6c 69 63 65 28 68 2c 68 2b 6d 29 7d 7d 29 2c 65 2e 44 65 63 72 79 70 74 6f 72 3d 65 2e 65 78 74 65 6e 64 28 7b 70 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 43 2c 68 29 7b 76 61 72 20 64 3d 74 68 69 73 2e 5f 63 69 70 68 65 72 2c 6d 3d 64 2e 62 6c 6f 63 6b 53 69 7a 65 2c 67 3d 43 2e 73 6c 69 63 65 28 68 2c 68 Data Ascii: ++)C[h+u]^=g[u]}return e.Encryptor=e.extend({processBlock:function(C,h){var d=this._cipher,m=d.blockSize;v.call(this,C,h,m,d),this._prevBlock=C.slice(h,h+m)}}),e.Decryptor=e.extend({processBlock:function(C,h){var d=this._cipher,m=d.blockSize,g=C.slice(h,h
2024-12-24 15:05:19 UTC	8192	IN	Data Raw: 7c 30 2c 63 5b 36 5d 3d 67 5b 36 5d 2b 28 67 5b 35 5d 3c 3c 31 36 7c 67 5b 35 5d 3e 3e 3e 31 36 29 2b 28 67 5b 34 5d 3c 3c 31 36 7c 67 5b 34 5d 3e 3e 3e 31 36 29 7c 30 2c 63 5b 37 5d 3d 67 5b 37 5d 2b 28 67 5b 36 5d 3c 3c 38 7c 67 5b 36 5d 3e 3e 3e 32 34 29 2b 67 5b 35 5d 7c 30 7d 65 2e 52 61 62 62 69 74 3d 43 2e 5f 63 72 65 61 74 65 48 65 6c 70 65 72 28 6c 29 7d 28 29 2c 69 2e 52 61 62 62 69 74 29 7d 2c 36 32 31 33 3a 66 75 6e 63 74 69 6f 6e 28 41 65 2c 4b 2c 6f 29 7b 76 61 72 20 69 3b 41 65 2e 65 78 70 6f 72 74 73 3d 28 69 3d 6f 28 37 33 30 34 39 29 2c 6f 28 33 36 34 36 32 29 2c 6f 28 31 38 39 36 29 2c 6f 28 32 39 36 31 34 29 2c 6f 28 36 36 34 31 37 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 69 2c 43 3d 65 2e 6c 69 62 2e 53 74 72 65 61 6d Data Ascii: \|0,c[6]=g[6]+(g[5]<<16\|g[5]>>>16)+(g[4]<<16\|g[4]>>>16)\|0,c[7]=g[7]+(g[6]<<8\|g[6]>>>24)+g[5]\|0}e.Rabbit=C._createHelper(l)}(),i.Rabbit)},6213:function(Ae,K,o){var i;Ae.exports=(i=o(73049),o(36462),o(1896),o(29614),o(66417),function(){var e=i,C=e.lib.Stream
2024-12-24 15:05:19 UTC	8192	IN	Data Raw: 77 2c 7a 65 3d 30 3b 7a 65 3c 35 3b 7a 65 2b 2b 29 66 6f 72 28 47 65 3d 30 3b 47 65 3c 35 3b 47 65 2b 2b 29 7b 76 61 72 20 64 74 3d 44 5b 67 6e 3d 7a 65 2b 35 2a 47 65 5d 2c 71 65 3d 44 5b 28 7a 65 2b 31 29 25 35 2b 35 2a 47 65 5d 2c 41 74 3d 44 5b 28 7a 65 2b 32 29 25 35 2b 35 2a 47 65 5d 3b 28 70 65 3d 55 5b 67 6e 5d 29 2e 68 69 67 68 3d 64 74 2e 68 69 67 68 5e 7e 71 65 2e 68 69 67 68 26 41 74 2e 68 69 67 68 2c 70 65 2e 6c 6f 77 3d 64 74 2e 6c 6f 77 5e 7e 71 65 2e 6c 6f 77 26 41 74 2e 6c 6f 77 7d 76 61 72 20 70 65 2c 5f 74 3d 45 5b 51 5d 3b 28 70 65 3d 55 5b 30 5d 29 2e 68 69 67 68 5e 3d 5f 74 2e 68 69 67 68 2c 70 65 2e 6c 6f 77 5e 3d 5f 74 2e 6c 6f 77 7d 7d 2c 5f 64 6f 46 69 6e 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 78 3d 74 68 Data Ascii: w,ze=0;ze<5;ze++)for(Ge=0;Ge<5;Ge++){var dt=D[gn=ze+5Ge],qe=D[(ze+1)%5+5Ge],At=D[(ze+2)%5+5*Ge];(pe=U[gn]).high=dt.high^~qe.high&At.high,pe.low=dt.low^~qe.low&At.low}var pe,_t=E[Q];(pe=U[0]).high^=_t.high,pe.low^=_t.low}},_doFinalize:function(){var x=th
2024-12-24 15:05:19 UTC	8192	IN	Data Raw: 34 30 3a 31 30 37 34 32 36 36 31 31 32 2c 38 33 38 38 36 30 38 3a 31 30 37 33 37 35 38 32 30 38 2c 32 35 31 36 35 38 32 34 3a 35 34 30 36 38 38 2c 34 31 39 34 33 30 34 30 3a 31 36 2c 35 38 37 32 30 32 35 36 3a 31 30 37 33 37 35 38 32 32 34 2c 37 35 34 39 37 34 37 32 3a 31 30 37 34 32 38 32 35 31 32 2c 39 32 32 37 34 36 38 38 3a 31 30 37 33 37 34 31 38 32 34 2c 31 30 39 30 35 31 39 30 34 3a 35 32 34 32 38 38 2c 31 32 35 38 32 39 31 32 30 3a 31 30 37 34 32 36 36 31 32 38 2c 31 34 32 36 30 36 33 33 36 3a 35 32 34 33 30 34 2c 31 35 39 33 38 33 35 35 32 3a 30 2c 31 37 36 31 36 30 37 36 38 3a 31 36 33 38 34 2c 31 39 32 39 33 37 39 38 34 3a 31 30 37 34 32 36 36 31 31 32 2c 32 30 39 37 31 35 32 30 30 3a 31 30 37 33 37 34 31 38 34 30 2c 32 32 36 34 39 32 34 31 36 Data Ascii: 40:1074266112,8388608:1073758208,25165824:540688,41943040:16,58720256:1073758224,75497472:1074282512,92274688:1073741824,109051904:524288,125829120:1074266128,142606336:524304,159383552:0,176160768:16384,192937984:1074266112,209715200:1073741840,226492416
2024-12-24 15:05:19 UTC	8192	IN	Data Raw: 6f 6e 28 59 2c 55 29 7b 74 68 69 73 2e 5f 64 65 73 31 2e 65 6e 63 72 79 70 74 42 6c 6f 63 6b 28 59 2c 55 29 2c 74 68 69 73 2e 5f 64 65 73 32 2e 64 65 63 72 79 70 74 42 6c 6f 63 6b 28 59 2c 55 29 2c 74 68 69 73 2e 5f 64 65 73 33 2e 65 6e 63 72 79 70 74 42 6c 6f 63 6b 28 59 2c 55 29 7d 2c 64 65 63 72 79 70 74 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 59 2c 55 29 7b 74 68 69 73 2e 5f 64 65 73 33 2e 64 65 63 72 79 70 74 42 6c 6f 63 6b 28 59 2c 55 29 2c 74 68 69 73 2e 5f 64 65 73 32 2e 65 6e 63 72 79 70 74 42 6c 6f 63 6b 28 59 2c 55 29 2c 74 68 69 73 2e 5f 64 65 73 31 2e 64 65 63 72 79 70 74 42 6c 6f 63 6b 28 59 2c 55 29 7d 2c 6b 65 79 53 69 7a 65 3a 36 2c 69 76 53 69 7a 65 3a 32 2c 62 6c 6f 63 6b 53 69 7a 65 3a 32 7d 29 3b 65 2e 54 72 69 70 6c 65 44 45 53 Data Ascii: on(Y,U){this._des1.encryptBlock(Y,U),this._des2.decryptBlock(Y,U),this._des3.encryptBlock(Y,U)},decryptBlock:function(Y,U){this._des3.decryptBlock(Y,U),this._des2.encryptBlock(Y,U),this._des1.decryptBlock(Y,U)},keySize:6,ivSize:2,blockSize:2});e.TripleDES
2024-12-24 15:05:19 UTC	8192	IN	Data Raw: 47 65 29 29 3b 76 61 72 20 5a 74 3d 43 28 59 2e 68 65 69 67 68 74 29 3b 72 65 74 75 72 6e 21 31 21 3d 3d 5a 74 26 26 28 55 2e 68 65 69 67 68 74 3d 5a 74 2b 28 75 74 3f 30 3a 7a 65 2b 78 65 29 29 2c 55 2e 69 6e 6e 65 72 57 69 64 74 68 3d 55 2e 77 69 64 74 68 2d 28 51 2b 47 65 29 2c 55 2e 69 6e 6e 65 72 48 65 69 67 68 74 3d 55 2e 68 65 69 67 68 74 2d 28 7a 65 2b 78 65 29 2c 55 2e 6f 75 74 65 72 57 69 64 74 68 3d 55 2e 77 69 64 74 68 2b 52 65 2c 55 2e 6f 75 74 65 72 48 65 69 67 68 74 3d 55 2e 68 65 69 67 68 74 2b 43 65 2c 55 7d 7d 72 65 74 75 72 6e 20 53 7d 29 3f 69 2e 63 61 6c 6c 28 4b 2c 6f 2c 4b 2c 41 65 29 3a 69 29 26 26 28 41 65 2e 65 78 70 6f 72 74 73 3d 65 29 7d 2c 31 37 39 33 39 3a 66 75 6e 63 74 69 6f 6e 28 41 65 2c 4b 2c 6f 29 7b 76 61 72 20 69 2c Data Ascii: Ge));var Zt=C(Y.height);return!1!==Zt&&(U.height=Zt+(ut?0:ze+xe)),U.innerWidth=U.width-(Q+Ge),U.innerHeight=U.height-(ze+xe),U.outerWidth=U.width+Re,U.outerHeight=U.height+Ce,U}}return S})?i.call(K,o,K,Ae):i)&&(Ae.exports=e)},17939:function(Ae,K,o){var i,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49889	23.20.35.169	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:19 UTC	746	OUT	POST /conversation?api_version=8 HTTP/1.1 Host: api.apptentive.com Connection: keep-alive Content-Length: 871 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json content-type: application/json sec-ch-ua-mobile: ?0 Authorization: OAuth 0095ab5892dc519a7e3d690a490155d0ed891e109b957e3563147c35ca58794f User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.mortgagequestions.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:19 UTC	871	OUT	Data Raw: 7b 22 61 70 70 5f 72 65 6c 65 61 73 65 22 3a 7b 22 74 79 70 65 22 3a 22 77 65 62 22 2c 22 73 64 6b 5f 76 65 72 73 69 6f 6e 22 3a 22 30 2e 31 32 2e 31 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 75 75 69 64 22 3a 22 34 31 62 39 66 61 30 39 2d 38 61 30 32 2d 34 63 32 66 2d 35 61 32 65 2d 63 38 66 66 32 36 30 38 36 65 66 63 22 2c 22 63 75 73 74 6f 6d 5f 64 61 74 61 22 3a 7b 7d 2c 22 62 72 6f 77 73 65 72 5f 68 65 69 67 68 74 22 3a 39 30 37 2c 22 62 72 6f 77 73 65 72 5f 77 69 64 74 68 22 3a 31 32 38 30 2c 22 63 6f 6f 6b 69 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 62 72 6f 77 73 65 72 5f 6c 61 6e 67 75 61 67 65 73 22 3a 5b 22 65 6e 2d 55 53 22 2c 22 65 6e 22 5d 2c 22 6c 6f 63 61 6c 65 5f 6c 61 6e 67 75 61 67 65 5f 63 6f 64 65 22 3a 22 65 6e 22 2c 22 6c Data Ascii: {"app_release":{"type":"web","sdk_version":"0.12.1"},"device":{"uuid":"41b9fa09-8a02-4c2f-5a2e-c8ff26086efc","custom_data":{},"browser_height":907,"browser_width":1280,"cookie_enabled":true,"browser_languages":["en-US","en"],"locale_language_code":"en","l
2024-12-24 15:05:19 UTC	982	IN	HTTP/1.1 201 Created Server: envoy Date: Tue, 24 Dec 2024 15:05:19 GMT Content-Type: application/json; charset=utf-8 access-control-allow-origin: https://www.mortgagequestions.com access-control-allow-methods: GET, PUT, POST access-control-expose-headers: access-control-max-age: 7200 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self'; font-src 'self'; img-src 'self'; frame-src 'self'; ETag: W/"4a8866f7cbd62f91742763159f221a3b" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: 38c10216-3377-407f-a128-4b085b075ddc Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Authorization,Origin,Accept-Encoding X-Frame-Options: SAMEORIGIN x-envoy-upstream-service-time: 72 Connection: close Transfer-Encoding: chunked
2024-12-24 15:05:19 UTC	471	IN	Data Raw: 31 63 62 0d 0a 7b 22 73 74 61 74 65 22 3a 22 6e 65 77 22 2c 22 69 64 22 3a 22 36 37 36 61 63 64 61 66 34 61 33 36 33 34 34 65 38 66 33 62 36 33 32 33 22 2c 22 64 65 76 69 63 65 5f 69 64 22 3a 22 36 37 36 61 63 64 61 66 34 61 33 36 33 34 34 65 38 66 33 62 36 33 32 32 22 2c 22 70 65 72 73 6f 6e 5f 69 64 22 3a 22 36 37 36 61 63 64 61 66 34 61 33 36 33 34 34 65 38 66 33 62 36 33 32 31 22 2c 22 73 64 6b 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 22 30 2e 31 32 2e 31 22 2c 22 70 72 6f 67 72 61 6d 6d 69 6e 67 5f 6c 61 6e 67 75 61 67 65 22 3a 22 4a 61 76 61 53 63 72 69 70 74 22 2c 22 61 75 74 68 6f 72 5f 6e 61 6d 65 22 3a 22 41 70 70 74 65 6e 74 69 76 65 2c 20 49 6e 63 2e 22 2c 22 61 75 74 68 6f 72 5f 65 6d 61 69 6c 22 3a 6e 75 6c 6c 2c 22 70 6c 61 74 66 6f 72 6d 22 Data Ascii: 1cb{"state":"new","id":"676acdaf4a36344e8f3b6323","device_id":"676acdaf4a36344e8f3b6322","person_id":"676acdaf4a36344e8f3b6321","sdk":{"version":"0.12.1","programming_language":"JavaScript","author_name":"Apptentive, Inc.","author_email":null,"platform"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49890	23.20.35.169	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:19 UTC	411	OUT	GET /v1/apps/6567c1c6a2ec72132b15f3af/manifest?api_version=15&locale=en-US HTTP/1.1 Host: api.apptentive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:19 UTC	790	IN	HTTP/1.1 200 OK Server: envoy Date: Tue, 24 Dec 2024 15:05:19 GMT Content-Type: application/json; charset=utf-8 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self'; font-src 'self'; img-src 'self'; frame-src 'self'; ETag: W/"bfca9610f9690f289e58c67aa776bf36" Cache-Control: max-age=0, private, must-revalidate X-Request-Id: 984988b4-47cf-4f67-ae04-7d6b3a8aa254 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin,Accept-Encoding X-Frame-Options: SAMEORIGIN x-envoy-upstream-service-time: 10 Connection: close Transfer-Encoding: chunked
2024-12-24 15:05:19 UTC	1602	IN	Data Raw: 36 33 36 0d 0a 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 5f 69 64 22 3a 22 36 35 36 37 63 31 63 36 61 32 65 63 37 32 31 33 32 62 31 35 66 33 61 66 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 73 22 3a 5b 7b 22 69 64 22 3a 22 36 35 36 37 63 31 63 36 61 32 65 63 37 32 31 33 32 62 31 35 66 33 62 36 22 2c 22 64 69 73 70 6c 61 79 5f 74 79 70 65 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 4d 65 73 73 61 67 65 43 65 6e 74 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 32 2c 22 61 70 69 5f 76 65 72 73 69 6f 6e 22 3a 31 35 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 74 69 74 6c 65 22 3a 22 4d 65 73 73 61 67 65 20 43 65 6e 74 65 72 22 2c 22 62 72 61 6e 64 69 6e 67 22 3a 22 50 6f 77 65 72 65 64 20 62 79 20 41 70 70 74 65 6e 74 69 76 65 22 2c 22 63 6f 6d 70 6f 73 Data Ascii: 636{"application_id":"6567c1c6a2ec72132b15f3af","interactions":[{"id":"6567c1c6a2ec72132b15f3b6","display_type":null,"type":"MessageCenter","version":2,"api_version":15,"configuration":{"title":"Message Center","branding":"Powered by Apptentive","compos

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49891	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:19 UTC	743	OUT	GET /phhm/runtime.703b6736fb2c9821.js HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!jzJgnAYpu207O2pcon1a7F8IKKxzc5PYlAvw8EHDEOhrB9MNpwrkXJlRPQZf9COeTHmZngRCOYb1SxY=
2024-12-24 15:05:19 UTC	744	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:19 GMT Last-Modified: Mon, 11 Nov 2024 21:19:34 GMT ETag: "d50-626a9a83a8580;627163211562d" Accept-Ranges: bytes Content-Length: 3408 Vary: Accept-Encoding Content-Type: application/javascript Strict-Transport-Security: max-age=16070400; includeSubDomains Via: 1.1 account.mortgagequestions.com X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Connection: close Set-Cookie: bkfs1=!foJDaIE39YisKPtcon1a7F8IKKxzc7W41mzJSS4QmqkBmkspjBKPWnWa8nj6cwnPv9o3OoYHF9A+jCs=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:19 UTC	3408	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 76 3d 7b 7d 2c 67 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 6e 3d 67 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 67 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 76 5b 65 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 61 29 2c 72 2e 6c 6f 61 64 65 64 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 61 2e 6d 3d 76 2c 65 3d 5b 5d 2c 61 2e 4f 3d 28 6e 2c 72 2c 69 2c 64 29 3d 3e 7b 69 66 28 21 72 29 7b 76 61 72 20 74 3d 31 2f 30 3b 66 6f 72 28 66 3d 30 3b 66 3c 65 2e 6c 65 6e 67 74 Data Ascii: (()=>{"use strict";var e,v={},g={};function a(e){var n=g[e];if(void 0!==n)return n.exports;var r=g[e]={id:e,loaded:!1,exports:{}};return v[e].call(r.exports,r,r.exports,a),r.loaded=!0,r.exports}a.m=v,e=[],a.O=(n,r,i,d)=>{if(!r){var t=1/0;for(f=0;f<e.lengt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49887	142.250.181.68	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:19 UTC	863	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le4f5AqAAAAACMx6SI8VYM7etmAXowUb1ykbHGZ&co=aHR0cHM6Ly93d3cubW9ydGdhZ2VxdWVzdGlvbnMuY29tOjQ0Mw..&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=6zhzv74on36j Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:20 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Tue, 24 Dec 2024 15:05:19 GMT Date: Tue, 24 Dec 2024 15:05:19 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-24 15:05:20 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 7a 49 72 69 69 6a 6e 33 75 6a 35 56 70 6b 6e 76 74 5f 4c 6e 66 4e 62 46 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');
2024-12-24 15:05:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49900	23.20.35.169	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:20 UTC	558	OUT	OPTIONS /events?api_version=15 HTTP/1.1 Host: api.apptentive.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Origin: https://www.mortgagequestions.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:21 UTC	499	IN	HTTP/1.1 200 OK Server: envoy Date: Tue, 24 Dec 2024 15:05:21 GMT access-control-allow-origin: https://www.mortgagequestions.com access-control-allow-methods: GET, PUT, POST access-control-expose-headers: access-control-max-age: 7200 access-control-allow-headers: authorization,content-type Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN x-envoy-upstream-service-time: 3 Connection: close Transfer-Encoding: chunked
2024-12-24 15:05:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49897	142.250.181.68	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:20 UTC	851	OUT	GET /js/bg/Xe7AbhhPfZcEikoNmhghBXAEhOusDIBKWKS_roS4Q7E.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le4f5AqAAAAACMx6SI8VYM7etmAXowUb1ykbHGZ&co=aHR0cHM6Ly93d3cubW9ydGdhZ2VxdWVzdGlvbnMuY29tOjQ0Mw..&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=6zhzv74on36j Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:21 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18908 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 20 Dec 2024 17:59:40 GMT Expires: Sat, 20 Dec 2025 17:59:40 GMT Cache-Control: public, max-age=31536000 Age: 335141 Last-Modified: Mon, 02 Dec 2024 19:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-24 15:05:21 UTC	578	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 55 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 72 65 74 75 72 6e 20 70 7d 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 69 66 28 21 28 70 3d 28 62 3d 6e 75 6c 6c 2c 42 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 70 29 7c 7c 21 70 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 62 3b 74 72 79 7b 62 3d 70 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 55 2c 63 72 65 61 74 65 53 63 72 Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var U=function(p){return p},G=function(p,b){if(!(p=(b=null,B).trustedTypes,p)\|\|!p.createPolicy)return b;try{b=p.createPolicy("bg",{createHTML:U,createScr
2024-12-24 15:05:21 UTC	1390	IN	Data Raw: 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 48 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 66 6f 72 28 62 3d 5b 5d 3b 70 2d 2d 3b 29 62 2e 70 75 73 68 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 32 35 35 7c 30 29 3b 72 65 74 75 72 6e 20 62 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 62 2e 4a 2e 73 70 6c 69 63 65 28 30 2c 30 2c 70 29 7d 2c 65 5f 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 2c 55 2c 42 2c 59 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 7d 72 65 74 75 72 6e 20 42 3d 28 70 3d 24 71 28 70 2c 66 75 6e 63 74 69 6f 6e 28 76 29 7b 72 26 26 28 62 26 26 62 62 28 62 29 2c 59 3d 76 2c 72 28 29 2c 72 3d 76 6f 69 64 20 30 29 7d 2c 28 59 3d 76 6f 69 64 Data Ascii: DX-License-Identifier: Apache-2.0','/','var H=function(p,b){for(b=[];p--;)b.push(Math.random()255\|0);return b},C=function(p,b){b.J.splice(0,0,p)},e_=function(p,b,U,B,Y){function r(){}return B=(p=$q(p,function(v){r&&(b&&bb(b),Y=v,r(),r=void 0)},(Y=void
2024-12-24 15:05:21 UTC	1390	IN	Data Raw: 73 75 62 73 74 72 69 6e 67 28 33 29 2c 62 2c 55 2c 42 2c 59 2c 72 2c 76 29 3a 6f 65 28 62 2c 70 29 7d 2c 66 69 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 72 65 74 75 72 6e 20 62 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 70 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 70 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 74 72 75 65 7d 7d 7d 2c 72 6a 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 72 65 74 75 72 6e 28 62 3d 64 28 70 29 2c 62 29 26 31 32 38 26 26 28 62 3d 62 26 31 32 37 7c 64 28 70 29 3c 3c 37 29 2c 62 7d 2c 76 41 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 72 65 74 75 72 6e 20 70 5b 62 5d 3c 3c 32 34 7c 70 5b 28 62 7c 30 29 2b 31 5d 3c 3c 31 36 7c 70 5b 28 62 7c 30 29 2b 32 5d 3c 3c 38 7c 70 Data Ascii: substring(3),b,U,B,Y,r,v):oe(b,p)},fi=function(p,b){return b=0,function(){return b<p.length?{done:false,value:p[b++]}:{done:true}}},rj=function(p,b){return(b=d(p),b)&128&&(b=b&127\|d(p)<<7),b},vA=function(p,b){return p[b]<<24\|p[(b\|0)+1]<<16\|p[(b\|0)+2]<<8\|p
2024-12-24 15:05:21 UTC	1390	IN	Data Raw: 29 29 2c 70 29 2e 42 2b 3d 70 2e 6a 28 29 2d 62 7d 65 6c 73 65 20 69 66 28 42 3d 3d 79 64 29 62 5b 33 5d 26 26 28 70 2e 6f 3d 74 72 75 65 29 2c 62 5b 34 5d 26 26 28 70 2e 44 3d 74 72 75 65 29 2c 70 2e 56 28 62 29 3b 65 6c 73 65 20 69 66 28 42 3d 3d 74 34 29 70 2e 6f 3d 74 72 75 65 2c 70 2e 56 28 62 29 3b 65 6c 73 65 20 69 66 28 42 3d 3d 78 71 29 7b 74 72 79 7b 66 6f 72 28 55 3d 30 3b 55 3c 70 2e 54 2e 6c 65 6e 67 74 68 3b 55 2b 2b 29 74 72 79 7b 59 3d 70 2e 54 5b 55 5d 2c 59 5b 30 5d 5b 59 5b 31 5d 5d 28 59 5b 32 5d 29 7d 63 61 74 63 68 28 72 29 7b 7d 7d 63 61 74 63 68 28 72 29 7b 7d 28 28 30 2c 62 5b 31 5d 29 28 66 75 6e 63 74 69 6f 6e 28 72 2c 76 29 7b 70 2e 6a 32 28 72 2c 74 72 75 65 2c 76 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 29 7b 28 43 28 28 72 3d Data Ascii: )),p).B+=p.j()-b}else if(B==yd)b[3]&&(p.o=true),b[4]&&(p.D=true),p.V(b);else if(B==t4)p.o=true,p.V(b);else if(B==xq){try{for(U=0;U<p.T.length;U++)try{Y=p.T[U],Y[0][Y[1]](Y[2])}catch(r){}}catch(r){}((0,b[1])(function(r,v){p.j2(r,true,v)},function(r){(C((r=
2024-12-24 15:05:21 UTC	1390	IN	Data Raw: 72 73 65 28 62 29 7d 63 61 74 63 68 28 65 29 7b 70 2e 67 3d 7b 7d 7d 46 28 28 28 50 28 28 50 28 28 4c 28 70 2c 33 31 30 2c 28 4c 28 70 2c 28 28 28 50 28 66 75 6e 63 74 69 6f 6e 28 65 2c 47 2c 58 2c 66 2c 54 2c 79 2c 68 2c 52 2c 61 2c 77 2c 49 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 4e 28 6e 2c 75 29 7b 66 6f 72 28 3b 52 3c 6e 3b 29 61 7c 3d 64 28 65 29 3c 3c 52 2c 52 2b 3d 38 3b 72 65 74 75 72 6e 20 75 3d 28 52 2d 3d 6e 2c 61 29 26 28 31 3c 3c 6e 29 2d 31 2c 61 3e 3e 3d 6e 2c 75 7d 66 6f 72 28 49 3d 28 79 3d 28 66 3d 28 47 3d 4a 28 65 29 2c 52 3d 61 3d 30 2c 4e 28 33 29 7c 30 29 2b 31 2c 6d 3d 4e 28 35 29 2c 30 29 2c 77 3d 5b 5d 2c 30 29 3b 79 3c 6d 3b 79 2b 2b 29 54 3d 4e 28 31 29 2c 77 2e 70 75 73 68 28 54 29 2c 49 2b 3d 54 3f 30 3a 31 3b 66 6f 72 28 79 Data Ascii: rse(b)}catch(e){p.g={}}F(((P((P((L(p,310,(L(p,(((P(function(e,G,X,f,T,y,h,R,a,w,I,m){function N(n,u){for(;R<n;)a\|=d(e)<<R,R+=8;return u=(R-=n,a)&(1<<n)-1,a>>=n,u}for(I=(y=(f=(G=J(e),R=a=0,N(3)\|0)+1,m=N(5),0),w=[],0);y<m;y++)T=N(1),w.push(T),I+=T?0:1;for(y
2024-12-24 15:05:21 UTC	1390	IN	Data Raw: 3d 28 47 5b 47 5b 33 35 33 5d 3d 65 2e 4f 5b 33 35 33 5d 2c 33 32 36 5d 3d 65 2e 4f 5b 33 32 36 5d 2c 47 29 7d 65 6c 73 65 20 4c 28 65 2c 32 31 32 2c 65 2e 4b 29 7d 2c 28 4c 28 28 4c 28 70 2c 28 50 28 66 75 6e 63 74 69 6f 6e 28 65 2c 47 2c 58 2c 66 29 7b 4c 28 65 2c 28 58 3d 28 47 3d 28 66 3d 4a 28 65 29 2c 4a 29 28 65 29 2c 4a 28 65 29 29 2c 47 3d 74 28 47 2c 65 29 2c 66 3d 74 28 66 2c 65 29 2c 58 29 2c 66 20 69 6e 20 47 7c 30 29 7d 2c 28 4c 28 70 2c 28 50 28 66 75 6e 63 74 69 6f 6e 28 65 2c 47 2c 58 2c 66 29 7b 4c 28 65 2c 28 66 3d 74 28 28 58 3d 28 47 3d 28 66 3d 28 58 3d 4a 28 65 29 2c 4a 28 65 29 29 2c 4a 28 65 29 29 2c 74 28 58 2c 65 29 29 2c 66 29 2c 65 29 2c 47 29 2c 58 5b 66 5d 29 7d 2c 28 4c 28 70 2c 28 50 28 28 50 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: =(G[G[353]=e.O[353],326]=e.O[326],G)}else L(e,212,e.K)},(L((L(p,(P(function(e,G,X,f){L(e,(X=(G=(f=J(e),J)(e),J(e)),G=t(G,e),f=t(f,e),X),f in G\|0)},(L(p,(P(function(e,G,X,f){L(e,(f=t((X=(G=(f=(X=J(e),J(e)),J(e)),t(X,e)),f),e),G),X[f])},(L(p,(P((P(function(
2024-12-24 15:05:21 UTC	1390	IN	Data Raw: 2c 79 2c 68 29 7b 66 6f 72 28 79 3d 28 58 3d 74 28 31 33 32 2c 28 68 3d 28 54 3d 4a 28 65 29 2c 72 6a 28 65 29 29 2c 47 3d 22 22 2c 65 29 29 2c 58 2e 6c 65 6e 67 74 68 29 2c 66 3d 30 3b 68 2d 2d 3b 29 66 3d 28 28 66 7c 30 29 2b 28 72 6a 28 65 29 7c 30 29 29 25 79 2c 47 2b 3d 57 5b 58 5b 66 5d 5d 3b 4c 28 65 2c 54 2c 47 29 7d 29 2c 70 2c 32 35 30 29 2c 34 33 36 29 2c 30 29 2c 70 29 2c 31 30 32 29 2c 33 32 36 29 2c 5b 32 30 34 38 5d 29 2c 70 29 2c 31 31 33 29 2c 32 34 35 29 2c 51 29 2c 70 29 2c 31 37 31 2c 5b 30 2c 30 2c 30 5d 29 2c 70 29 2c 31 33 37 29 2c 33 35 33 29 2c 5b 5d 29 2c 4c 28 70 2c 37 33 2c 30 29 2c 70 29 2c 36 31 29 2c 70 29 2c 33 37 33 29 2c 70 2e 69 39 3d 30 2c 34 32 31 29 2c 5b 5d 29 2c 70 29 2c 36 35 29 2c 31 31 31 29 29 2c 32 34 30 29 29 Data Ascii: ,y,h){for(y=(X=t(132,(h=(T=J(e),rj(e)),G="",e)),X.length),f=0;h--;)f=((f\|0)+(rj(e)\|0))%y,G+=W[X[f]];L(e,T,G)}),p,250),436),0),p),102),326),[2048]),p),113),245),Q),p),171,[0,0,0]),p),137),353),[]),L(p,73,0),p),61),p),373),p.i9=0,421),[]),p),65),111)),240))
2024-12-24 15:05:21 UTC	1390	IN	Data Raw: 31 36 7c 7c 62 3d 3d 32 30 34 7c 7c 62 3d 3d 33 35 33 7c 7c 62 3d 3d 34 32 31 7c 7c 62 3d 3d 37 36 7c 7c 62 3d 3d 31 37 31 7c 7c 62 3d 3d 32 36 38 7c 7c 62 3d 3d 33 32 36 3f 70 2e 4f 5b 62 5d 7c 7c 28 70 2e 4f 5b 62 5d 3d 59 71 28 70 2c 55 2c 62 2c 31 34 32 29 29 3a 70 2e 4f 5b 62 5d 3d 59 71 28 70 2c 55 2c 62 2c 31 31 33 29 7d 62 3d 3d 32 33 32 26 26 28 70 2e 4e 3d 44 28 66 61 6c 73 65 2c 33 32 2c 70 29 2c 70 2e 46 3d 76 6f 69 64 20 30 29 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 70 2e 59 3d 28 28 70 2e 59 3f 70 2e 59 2b 22 7e 22 3a 22 45 3a 22 29 2b 62 2e 6d 65 73 73 61 67 65 2b 22 3a 22 2b 62 2e 73 74 61 63 6b 29 2e 73 6c 69 63 65 28 30 2c 32 30 34 38 29 7d 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 2c 55 2c 42 2c 59 29 7b 71 28 28 28 Data Ascii: 16\|\|b==204\|\|b==353\|\|b==421\|\|b==76\|\|b==171\|\|b==268\|\|b==326?p.O[b]\|\|(p.O[b]=Yq(p,U,b,142)):p.O[b]=Yq(p,U,b,113)}b==232&&(p.N=D(false,32,p),p.F=void 0)},V=function(p,b){p.Y=((p.Y?p.Y+"~":"E:")+b.message+":"+b.stack).slice(0,2048)},Ie=function(p,b,U,B,Y){q(((
2024-12-24 15:05:21 UTC	1390	IN	Data Raw: 31 32 38 29 3a 62 5b 59 2b 2b 5d 3d 42 3e 3e 31 32 7c 32 32 34 2c 62 5b 59 2b 2b 5d 3d 42 3e 3e 36 26 36 33 7c 31 32 38 29 2c 62 5b 59 2b 2b 5d 3d 42 26 36 33 7c 31 32 38 29 3b 72 65 74 75 72 6e 20 62 7d 2c 61 65 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 2c 55 2c 42 2c 59 2c 72 29 7b 69 66 28 21 62 2e 59 29 7b 62 2e 49 2b 2b 3b 74 72 79 7b 66 6f 72 28 72 3d 28 42 3d 28 59 3d 62 2e 4b 2c 76 6f 69 64 20 30 29 2c 30 29 3b 2d 2d 70 3b 29 74 72 79 7b 69 66 28 28 55 3d 76 6f 69 64 20 30 2c 62 29 2e 73 29 42 3d 7a 4e 28 62 2c 62 2e 73 29 3b 65 6c 73 65 7b 69 66 28 72 3d 74 28 32 31 32 2c 62 29 2c 72 3e 3d 59 29 62 72 65 61 6b 3b 42 3d 28 55 3d 4a 28 28 4c 28 62 2c 31 32 35 2c 72 29 2c 62 29 29 2c 74 28 55 2c 62 29 29 7d 42 26 26 42 5b 68 34 5d 26 32 30 34 38 3f 42 Data Ascii: 128):b[Y++]=B>>12\|224,b[Y++]=B>>6&63\|128),b[Y++]=B&63\|128);return b},ae=function(p,b,U,B,Y,r){if(!b.Y){b.I++;try{for(r=(B=(Y=b.K,void 0),0);--p;)try{if((U=void 0,b).s)B=zN(b,b.s);else{if(r=t(212,b),r>=Y)break;B=(U=J((L(b,125,r),b)),t(U,b))}B&&B[h4]&2048?B
2024-12-24 15:05:21 UTC	1390	IN	Data Raw: 62 2e 57 2c 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 46 28 74 72 75 65 2c 62 2c 74 72 75 65 29 7d 29 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 55 7d 2c 4f 47 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 28 62 2e 70 75 73 68 28 70 5b 30 5d 3c 3c 32 34 7c 70 5b 31 5d 3c 3c 31 36 7c 70 5b 32 5d 3c 3c 38 7c 70 5b 33 5d 29 2c 62 2e 70 75 73 68 28 70 5b 34 5d 3c 3c 32 34 7c 70 5b 35 5d 3c 3c 31 36 7c 70 5b 36 5d 3c 3c 38 7c 70 5b 37 5d 29 2c 62 29 2e 70 75 73 68 28 70 5b 38 5d 3c 3c 32 34 7c 70 5b 39 5d 3c 3c 31 36 7c 70 5b 31 30 5d 3c 3c 38 7c 70 5b 31 31 5d 29 7d 2c 5a 3d 7b 70 61 73 73 69 76 65 3a 74 72 75 65 2c 63 61 70 74 75 72 65 3a 74 72 75 65 7d 2c 7a 4e 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 72 65 74 75 72 6e 28 62 3d 62 2e 63 72 65 61 74 65 28 Data Ascii: b.W,p(function(){F(true,b,true)});break}}return U},OG=function(p,b){(b.push(p[0]<<24\|p[1]<<16\|p[2]<<8\|p[3]),b.push(p[4]<<24\|p[5]<<16\|p[6]<<8\|p[7]),b).push(p[8]<<24\|p[9]<<16\|p[10]<<8\|p[11])},Z={passive:true,capture:true},zN=function(p,b){return(b=b.create(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49901	23.20.35.169	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:20 UTC	558	OUT	OPTIONS /events?api_version=15 HTTP/1.1 Host: api.apptentive.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Origin: https://www.mortgagequestions.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:21 UTC	499	IN	HTTP/1.1 200 OK Server: envoy Date: Tue, 24 Dec 2024 15:05:21 GMT access-control-allow-origin: https://www.mortgagequestions.com access-control-allow-methods: GET, PUT, POST access-control-expose-headers: access-control-max-age: 7200 access-control-allow-headers: authorization,content-type Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN x-envoy-upstream-service-time: 1 Connection: close Transfer-Encoding: chunked
2024-12-24 15:05:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49902	23.20.35.169	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:20 UTC	558	OUT	OPTIONS /events?api_version=15 HTTP/1.1 Host: api.apptentive.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Origin: https://www.mortgagequestions.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:21 UTC	499	IN	HTTP/1.1 200 OK Server: envoy Date: Tue, 24 Dec 2024 15:05:21 GMT access-control-allow-origin: https://www.mortgagequestions.com access-control-allow-methods: GET, PUT, POST access-control-expose-headers: access-control-max-age: 7200 access-control-allow-headers: authorization,content-type Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN x-envoy-upstream-service-time: 2 Connection: close Transfer-Encoding: chunked
2024-12-24 15:05:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49899	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:21 UTC	745	OUT	GET /phhm/polyfills.6f07a62f128f3c09.js HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!R3F473we/cLwDX9con1a7F8IKKxzc0y1OpARurMBOGgWSfBh2Ib1cDbi4FwzcImnb8bn5yiwU9pP6tU=
2024-12-24 15:05:21 UTC	746	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:21 GMT Last-Modified: Mon, 11 Nov 2024 21:19:34 GMT ETag: "8ea0-626a9a83a8580;627163211562d" Accept-Ranges: bytes Content-Length: 36512 Vary: Accept-Encoding Content-Type: application/javascript Strict-Transport-Security: max-age=16070400; includeSubDomains Via: 1.1 account.mortgagequestions.com X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Connection: close Set-Cookie: bkfs1=!SgSmj6pvle0k+95con1a7F8IKKxzc9Omf+3rYYw0pv5WRLyjrO7QzdOTAdj4TwXVdxqFtg7agYOagjU=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:21 UTC	7869	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 36 31 5d 2c 7b 31 39 34 36 32 3a 28 29 3d 3e 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6c 65 28 64 65 29 7b 72 65 74 75 72 6e 28 6c 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 73 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 73 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 73 65 29 7b 72 65 74 75 72 6e 20 73 65 26 Data Ascii: (self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[461],{19462:()=>{!function(){"use strict";function le(de){return(le="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(se){return typeof se}:function(se){return se&
2024-12-24 15:05:21 UTC	8192	IN	Data Raw: 59 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3b 69 66 28 21 59 29 72 65 74 75 72 6e 20 63 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 58 65 26 26 22 75 6e 63 61 75 67 68 74 45 78 63 65 70 74 69 6f 6e 22 3d 3d 3d 24 29 72 65 74 75 72 6e 20 63 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 6c 65 74 20 4b 3d 21 31 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 59 29 7b 69 66 28 21 59 2e 68 61 6e 64 6c 65 45 76 65 6e 74 29 72 65 74 75 72 6e 20 63 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 4b 3d 21 30 7d 69 66 28 57 26 26 21 57 28 63 2c 59 2c 48 2c 61 72 67 75 6d 65 6e 74 73 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 6a 65 3d 52 65 26 26 21 21 76 65 26 26 2d Data Ascii: Y=arguments[1];if(!Y)return c.apply(this,arguments);if(Xe&&"uncaughtException"===$)return c.apply(this,arguments);let K=!1;if("function"!=typeof Y){if(!Y.handleEvent)return c.apply(this,arguments);K=!0}if(W&&!W(c,Y,H,arguments))return;const je=Re&&!!ve&&-
2024-12-24 15:05:21 UTC	8192	IN	Data Raw: 54 29 3b 63 6f 6e 73 74 20 44 65 3d 41 3b 41 3d 49 2c 4e 3d 7b 70 61 72 65 6e 74 3a 4e 2c 7a 6f 6e 65 3a 74 68 69 73 7d 3b 74 72 79 7b 6e 65 3d 3d 76 26 26 6e 2e 64 61 74 61 26 26 21 55 26 26 21 78 65 26 26 28 6e 2e 63 61 6e 63 65 6c 46 6e 3d 76 6f 69 64 20 30 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 7a 6f 6e 65 44 65 6c 65 67 61 74 65 2e 69 6e 76 6f 6b 65 54 61 73 6b 28 74 68 69 73 2c 49 2c 73 2c 50 29 7d 63 61 74 63 68 28 76 65 29 7b 69 66 28 74 68 69 73 2e 5f 7a 6f 6e 65 44 65 6c 65 67 61 74 65 2e 68 61 6e 64 6c 65 45 72 72 6f 72 28 74 68 69 73 2c 76 65 29 29 74 68 72 6f 77 20 76 65 7d 7d 66 69 6e 61 6c 6c 79 7b 63 6f 6e 73 74 20 76 65 3d 6e 2e 73 74 61 74 65 3b 69 66 28 76 65 21 3d 3d 72 65 26 26 76 65 21 3d 3d 6f 65 29 69 66 28 6e 65 Data Ascii: T);const De=A;A=I,N={parent:N,zone:this};try{ne==v&&n.data&&!U&&!xe&&(n.cancelFn=void 0);try{return this._zoneDelegate.invokeTask(this,I,s,P)}catch(ve){if(this._zoneDelegate.handleError(this,ve))throw ve}}finally{const ve=n.state;if(ve!==re&&ve!==oe)if(ne
2024-12-24 15:05:21 UTC	8192	IN	Data Raw: 3b 68 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 55 6e 68 61 6e 64 6c 65 64 20 50 72 6f 6d 69 73 65 20 72 65 6a 65 63 74 69 6f 6e 3a 22 2c 68 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 68 2e 6d 65 73 73 61 67 65 3a 68 2c 22 3b 20 5a 6f 6e 65 3a 22 2c 67 2e 7a 6f 6e 65 2e 6e 61 6d 65 2c 22 3b 20 54 61 73 6b 3a 22 2c 67 2e 74 61 73 6b 26 26 67 2e 74 61 73 6b 2e 73 6f 75 72 63 65 2c 22 3b 20 56 61 6c 75 65 3a 22 2c 68 2c 68 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 68 2e 73 74 61 63 6b 3a 76 6f 69 64 20 30 29 3a 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 67 29 7d 7d 2c 74 2e 6d 69 63 72 6f 74 61 73 6b 44 72 61 69 6e 44 6f 6e 65 3d 28 29 3d 3e 7b 66 6f 72 28 3b 77 2e 6c 65 6e 67 74 68 3b 29 7b 63 6f 6e 73 74 20 67 3d 77 2e 73 68 69 Data Ascii: ;h?console.error("Unhandled Promise rejection:",h instanceof Error?h.message:h,"; Zone:",g.zone.name,"; Task:",g.task&&g.task.source,"; Value:",h,h instanceof Error?h.stack:void 0):console.error(g)}},t.microtaskDrainDone=()=>{for(;w.length;){const g=w.shi
2024-12-24 15:05:21 UTC	4067	IN	Data Raw: 74 22 2c 22 48 54 4d 4c 45 6c 65 6d 65 6e 74 22 2c 22 48 54 4d 4c 42 6f 64 79 45 6c 65 6d 65 6e 74 22 2c 22 48 54 4d 4c 4d 65 64 69 61 45 6c 65 6d 65 6e 74 22 2c 22 48 54 4d 4c 46 72 61 6d 65 53 65 74 45 6c 65 6d 65 6e 74 22 2c 22 48 54 4d 4c 46 72 61 6d 65 45 6c 65 6d 65 6e 74 22 2c 22 48 54 4d 4c 49 46 72 61 6d 65 45 6c 65 6d 65 6e 74 22 2c 22 48 54 4d 4c 4d 61 72 71 75 65 65 45 6c 65 6d 65 6e 74 22 2c 22 57 6f 72 6b 65 72 22 5d 29 3b 63 6f 6e 73 74 20 5f 3d 66 75 6e 63 74 69 6f 6e 20 64 74 28 29 7b 74 72 79 7b 63 6f 6e 73 74 20 65 3d 49 65 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3b 69 66 28 2d 31 21 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 4d 53 49 45 20 22 29 7c 7c 2d 31 21 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 Data Ascii: t","HTMLElement","HTMLBodyElement","HTMLMediaElement","HTMLFrameSetElement","HTMLFrameElement","HTMLIFrameElement","HTMLMarqueeElement","Worker"]);const _=function dt(){try{const e=Ie.navigator.userAgent;if(-1!==e.indexOf("MSIE ")\|\|-1!==e.indexOf("Trident

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49907	142.250.181.68	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:21 UTC	495	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:22 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Tue, 24 Dec 2024 15:05:22 GMT Date: Tue, 24 Dec 2024 15:05:22 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-24 15:05:22 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 7a 49 72 69 69 6a 6e 33 75 6a 35 56 70 6b 6e 76 74 5f 4c 6e 66 4e 62 46 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');
2024-12-24 15:05:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49918	23.20.35.169	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:22 UTC	741	OUT	POST /events?api_version=15 HTTP/1.1 Host: api.apptentive.com Connection: keep-alive Content-Length: 312 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json content-type: application/json sec-ch-ua-mobile: ?0 Authorization: OAuth 04a7bcf6708f4daf9b0529a673415a34cb0d1283a40ec931e0ce09fb919c34b8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.mortgagequestions.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:22 UTC	312	OUT	Data Raw: 7b 22 65 76 65 6e 74 22 3a 7b 22 6c 61 62 65 6c 22 3a 22 6c 6f 63 61 6c 23 61 70 70 23 56 69 65 77 48 6f 6d 65 22 2c 22 6e 6f 6e 63 65 22 3a 22 39 65 33 38 37 35 31 66 2d 66 66 63 35 2d 34 33 33 33 2d 64 61 38 39 2d 38 65 38 34 33 64 62 36 61 62 31 38 22 2c 22 63 6c 69 65 6e 74 5f 63 72 65 61 74 65 64 5f 61 74 22 3a 31 37 33 35 30 35 32 37 31 34 39 34 39 2c 22 63 6c 69 65 6e 74 5f 63 72 65 61 74 65 64 5f 61 74 5f 75 74 63 5f 6f 66 66 73 65 74 22 3a 33 30 30 2c 22 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 62 63 36 39 33 38 33 63 2d 37 66 31 38 2d 34 38 30 64 2d 31 63 61 31 2d 32 61 61 62 31 38 32 30 66 61 32 35 22 7d 2c 22 77 65 62 5f 70 61 67 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 22 2c 22 70 61 74 68 22 3a 22 2f 22 2c 22 73 65 61 72 63 68 22 3a 22 22 2c 22 74 Data Ascii: {"event":{"label":"local#app#ViewHome","nonce":"9e38751f-ffc5-4333-da89-8e843db6ab18","client_created_at":1735052714949,"client_created_at_utc_offset":300,"session_id":"bc69383c-7f18-480d-1ca1-2aab1820fa25"},"web_page":{"name":"","path":"/","search":"","t
2024-12-24 15:05:23 UTC	227	IN	HTTP/1.1 201 Created Date: Tue, 24 Dec 2024 15:05:22 GMT Content-Type: application/json Content-Length: 2 Vary: Origin Access-Control-Allow-Origin: * x-envoy-upstream-service-time: 13 server: envoy connection: close
2024-12-24 15:05:23 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49916	23.20.35.169	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:22 UTC	741	OUT	POST /events?api_version=15 HTTP/1.1 Host: api.apptentive.com Connection: keep-alive Content-Length: 319 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json content-type: application/json sec-ch-ua-mobile: ?0 Authorization: OAuth 04a7bcf6708f4daf9b0529a673415a34cb0d1283a40ec931e0ce09fb919c34b8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.mortgagequestions.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:22 UTC	319	OUT	Data Raw: 7b 22 65 76 65 6e 74 22 3a 7b 22 6c 61 62 65 6c 22 3a 22 63 6f 6d 2e 61 70 70 74 65 6e 74 69 76 65 23 61 70 70 23 6c 61 75 6e 63 68 22 2c 22 6e 6f 6e 63 65 22 3a 22 65 63 62 66 33 39 34 38 2d 30 35 66 33 2d 34 35 63 37 2d 39 37 65 65 2d 37 30 34 30 35 32 63 32 65 62 34 34 22 2c 22 63 6c 69 65 6e 74 5f 63 72 65 61 74 65 64 5f 61 74 22 3a 31 37 33 35 30 35 32 37 31 38 34 38 30 2c 22 63 6c 69 65 6e 74 5f 63 72 65 61 74 65 64 5f 61 74 5f 75 74 63 5f 6f 66 66 73 65 74 22 3a 33 30 30 2c 22 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 62 63 36 39 33 38 33 63 2d 37 66 31 38 2d 34 38 30 64 2d 31 63 61 31 2d 32 61 61 62 31 38 32 30 66 61 32 35 22 7d 2c 22 77 65 62 5f 70 61 67 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 22 2c 22 70 61 74 68 22 3a 22 2f 22 2c 22 73 65 61 72 63 68 Data Ascii: {"event":{"label":"com.apptentive#app#launch","nonce":"ecbf3948-05f3-45c7-97ee-704052c2eb44","client_created_at":1735052718480,"client_created_at_utc_offset":300,"session_id":"bc69383c-7f18-480d-1ca1-2aab1820fa25"},"web_page":{"name":"","path":"/","search
2024-12-24 15:05:26 UTC	229	IN	HTTP/1.1 201 Created Date: Tue, 24 Dec 2024 15:05:25 GMT Content-Type: application/json Content-Length: 2 Vary: Origin Access-Control-Allow-Origin: * x-envoy-upstream-service-time: 3310 server: envoy connection: close
2024-12-24 15:05:26 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49917	23.20.35.169	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:22 UTC	741	OUT	POST /events?api_version=15 HTTP/1.1 Host: api.apptentive.com Connection: keep-alive Content-Length: 317 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json content-type: application/json sec-ch-ua-mobile: ?0 Authorization: OAuth 04a7bcf6708f4daf9b0529a673415a34cb0d1283a40ec931e0ce09fb919c34b8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.mortgagequestions.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:22 UTC	317	OUT	Data Raw: 7b 22 65 76 65 6e 74 22 3a 7b 22 6c 61 62 65 6c 22 3a 22 63 6f 6d 2e 61 70 70 74 65 6e 74 69 76 65 23 61 70 70 23 69 6e 69 74 22 2c 22 6e 6f 6e 63 65 22 3a 22 61 66 64 33 64 32 62 31 2d 36 37 35 64 2d 34 38 61 34 2d 32 64 33 61 2d 64 34 32 33 31 66 37 64 39 34 31 35 22 2c 22 63 6c 69 65 6e 74 5f 63 72 65 61 74 65 64 5f 61 74 22 3a 31 37 33 35 30 35 32 37 31 38 34 37 39 2c 22 63 6c 69 65 6e 74 5f 63 72 65 61 74 65 64 5f 61 74 5f 75 74 63 5f 6f 66 66 73 65 74 22 3a 33 30 30 2c 22 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 62 63 36 39 33 38 33 63 2d 37 66 31 38 2d 34 38 30 64 2d 31 63 61 31 2d 32 61 61 62 31 38 32 30 66 61 32 35 22 7d 2c 22 77 65 62 5f 70 61 67 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 22 2c 22 70 61 74 68 22 3a 22 2f 22 2c 22 73 65 61 72 63 68 22 3a Data Ascii: {"event":{"label":"com.apptentive#app#init","nonce":"afd3d2b1-675d-48a4-2d3a-d4231f7d9415","client_created_at":1735052718479,"client_created_at_utc_offset":300,"session_id":"bc69383c-7f18-480d-1ca1-2aab1820fa25"},"web_page":{"name":"","path":"/","search":
2024-12-24 15:05:23 UTC	227	IN	HTTP/1.1 201 Created Date: Tue, 24 Dec 2024 15:05:22 GMT Content-Type: application/json Content-Length: 2 Vary: Origin Access-Control-Allow-Origin: * x-envoy-upstream-service-time: 43 server: envoy connection: close
2024-12-24 15:05:23 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49919	142.250.181.68	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:23 UTC	487	OUT	GET /js/bg/Xe7AbhhPfZcEikoNmhghBXAEhOusDIBKWKS_roS4Q7E.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-24 15:05:24 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18908 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 20 Dec 2024 17:59:40 GMT Expires: Sat, 20 Dec 2025 17:59:40 GMT Cache-Control: public, max-age=31536000 Age: 335144 Last-Modified: Mon, 02 Dec 2024 19:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-24 15:05:24 UTC	578	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 55 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 72 65 74 75 72 6e 20 70 7d 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 69 66 28 21 28 70 3d 28 62 3d 6e 75 6c 6c 2c 42 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 70 29 7c 7c 21 70 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 62 3b 74 72 79 7b 62 3d 70 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 55 2c 63 72 65 61 74 65 53 63 72 Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var U=function(p){return p},G=function(p,b){if(!(p=(b=null,B).trustedTypes,p)\|\|!p.createPolicy)return b;try{b=p.createPolicy("bg",{createHTML:U,createScr
2024-12-24 15:05:24 UTC	1390	IN	Data Raw: 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 48 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 66 6f 72 28 62 3d 5b 5d 3b 70 2d 2d 3b 29 62 2e 70 75 73 68 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 32 35 35 7c 30 29 3b 72 65 74 75 72 6e 20 62 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 62 2e 4a 2e 73 70 6c 69 63 65 28 30 2c 30 2c 70 29 7d 2c 65 5f 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 2c 55 2c 42 2c 59 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 7d 72 65 74 75 72 6e 20 42 3d 28 70 3d 24 71 28 70 2c 66 75 6e 63 74 69 6f 6e 28 76 29 7b 72 26 26 28 62 26 26 62 62 28 62 29 2c 59 3d 76 2c 72 28 29 2c 72 3d 76 6f 69 64 20 30 29 7d 2c 28 59 3d 76 6f 69 64 Data Ascii: DX-License-Identifier: Apache-2.0','/','var H=function(p,b){for(b=[];p--;)b.push(Math.random()255\|0);return b},C=function(p,b){b.J.splice(0,0,p)},e_=function(p,b,U,B,Y){function r(){}return B=(p=$q(p,function(v){r&&(b&&bb(b),Y=v,r(),r=void 0)},(Y=void
2024-12-24 15:05:24 UTC	1390	IN	Data Raw: 73 75 62 73 74 72 69 6e 67 28 33 29 2c 62 2c 55 2c 42 2c 59 2c 72 2c 76 29 3a 6f 65 28 62 2c 70 29 7d 2c 66 69 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 72 65 74 75 72 6e 20 62 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 70 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 70 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 74 72 75 65 7d 7d 7d 2c 72 6a 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 72 65 74 75 72 6e 28 62 3d 64 28 70 29 2c 62 29 26 31 32 38 26 26 28 62 3d 62 26 31 32 37 7c 64 28 70 29 3c 3c 37 29 2c 62 7d 2c 76 41 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 72 65 74 75 72 6e 20 70 5b 62 5d 3c 3c 32 34 7c 70 5b 28 62 7c 30 29 2b 31 5d 3c 3c 31 36 7c 70 5b 28 62 7c 30 29 2b 32 5d 3c 3c 38 7c 70 Data Ascii: substring(3),b,U,B,Y,r,v):oe(b,p)},fi=function(p,b){return b=0,function(){return b<p.length?{done:false,value:p[b++]}:{done:true}}},rj=function(p,b){return(b=d(p),b)&128&&(b=b&127\|d(p)<<7),b},vA=function(p,b){return p[b]<<24\|p[(b\|0)+1]<<16\|p[(b\|0)+2]<<8\|p
2024-12-24 15:05:24 UTC	1390	IN	Data Raw: 29 29 2c 70 29 2e 42 2b 3d 70 2e 6a 28 29 2d 62 7d 65 6c 73 65 20 69 66 28 42 3d 3d 79 64 29 62 5b 33 5d 26 26 28 70 2e 6f 3d 74 72 75 65 29 2c 62 5b 34 5d 26 26 28 70 2e 44 3d 74 72 75 65 29 2c 70 2e 56 28 62 29 3b 65 6c 73 65 20 69 66 28 42 3d 3d 74 34 29 70 2e 6f 3d 74 72 75 65 2c 70 2e 56 28 62 29 3b 65 6c 73 65 20 69 66 28 42 3d 3d 78 71 29 7b 74 72 79 7b 66 6f 72 28 55 3d 30 3b 55 3c 70 2e 54 2e 6c 65 6e 67 74 68 3b 55 2b 2b 29 74 72 79 7b 59 3d 70 2e 54 5b 55 5d 2c 59 5b 30 5d 5b 59 5b 31 5d 5d 28 59 5b 32 5d 29 7d 63 61 74 63 68 28 72 29 7b 7d 7d 63 61 74 63 68 28 72 29 7b 7d 28 28 30 2c 62 5b 31 5d 29 28 66 75 6e 63 74 69 6f 6e 28 72 2c 76 29 7b 70 2e 6a 32 28 72 2c 74 72 75 65 2c 76 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 29 7b 28 43 28 28 72 3d Data Ascii: )),p).B+=p.j()-b}else if(B==yd)b[3]&&(p.o=true),b[4]&&(p.D=true),p.V(b);else if(B==t4)p.o=true,p.V(b);else if(B==xq){try{for(U=0;U<p.T.length;U++)try{Y=p.T[U],Y[0][Y[1]](Y[2])}catch(r){}}catch(r){}((0,b[1])(function(r,v){p.j2(r,true,v)},function(r){(C((r=
2024-12-24 15:05:24 UTC	1390	IN	Data Raw: 72 73 65 28 62 29 7d 63 61 74 63 68 28 65 29 7b 70 2e 67 3d 7b 7d 7d 46 28 28 28 50 28 28 50 28 28 4c 28 70 2c 33 31 30 2c 28 4c 28 70 2c 28 28 28 50 28 66 75 6e 63 74 69 6f 6e 28 65 2c 47 2c 58 2c 66 2c 54 2c 79 2c 68 2c 52 2c 61 2c 77 2c 49 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 4e 28 6e 2c 75 29 7b 66 6f 72 28 3b 52 3c 6e 3b 29 61 7c 3d 64 28 65 29 3c 3c 52 2c 52 2b 3d 38 3b 72 65 74 75 72 6e 20 75 3d 28 52 2d 3d 6e 2c 61 29 26 28 31 3c 3c 6e 29 2d 31 2c 61 3e 3e 3d 6e 2c 75 7d 66 6f 72 28 49 3d 28 79 3d 28 66 3d 28 47 3d 4a 28 65 29 2c 52 3d 61 3d 30 2c 4e 28 33 29 7c 30 29 2b 31 2c 6d 3d 4e 28 35 29 2c 30 29 2c 77 3d 5b 5d 2c 30 29 3b 79 3c 6d 3b 79 2b 2b 29 54 3d 4e 28 31 29 2c 77 2e 70 75 73 68 28 54 29 2c 49 2b 3d 54 3f 30 3a 31 3b 66 6f 72 28 79 Data Ascii: rse(b)}catch(e){p.g={}}F(((P((P((L(p,310,(L(p,(((P(function(e,G,X,f,T,y,h,R,a,w,I,m){function N(n,u){for(;R<n;)a\|=d(e)<<R,R+=8;return u=(R-=n,a)&(1<<n)-1,a>>=n,u}for(I=(y=(f=(G=J(e),R=a=0,N(3)\|0)+1,m=N(5),0),w=[],0);y<m;y++)T=N(1),w.push(T),I+=T?0:1;for(y
2024-12-24 15:05:24 UTC	1390	IN	Data Raw: 3d 28 47 5b 47 5b 33 35 33 5d 3d 65 2e 4f 5b 33 35 33 5d 2c 33 32 36 5d 3d 65 2e 4f 5b 33 32 36 5d 2c 47 29 7d 65 6c 73 65 20 4c 28 65 2c 32 31 32 2c 65 2e 4b 29 7d 2c 28 4c 28 28 4c 28 70 2c 28 50 28 66 75 6e 63 74 69 6f 6e 28 65 2c 47 2c 58 2c 66 29 7b 4c 28 65 2c 28 58 3d 28 47 3d 28 66 3d 4a 28 65 29 2c 4a 29 28 65 29 2c 4a 28 65 29 29 2c 47 3d 74 28 47 2c 65 29 2c 66 3d 74 28 66 2c 65 29 2c 58 29 2c 66 20 69 6e 20 47 7c 30 29 7d 2c 28 4c 28 70 2c 28 50 28 66 75 6e 63 74 69 6f 6e 28 65 2c 47 2c 58 2c 66 29 7b 4c 28 65 2c 28 66 3d 74 28 28 58 3d 28 47 3d 28 66 3d 28 58 3d 4a 28 65 29 2c 4a 28 65 29 29 2c 4a 28 65 29 29 2c 74 28 58 2c 65 29 29 2c 66 29 2c 65 29 2c 47 29 2c 58 5b 66 5d 29 7d 2c 28 4c 28 70 2c 28 50 28 28 50 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: =(G[G[353]=e.O[353],326]=e.O[326],G)}else L(e,212,e.K)},(L((L(p,(P(function(e,G,X,f){L(e,(X=(G=(f=J(e),J)(e),J(e)),G=t(G,e),f=t(f,e),X),f in G\|0)},(L(p,(P(function(e,G,X,f){L(e,(f=t((X=(G=(f=(X=J(e),J(e)),J(e)),t(X,e)),f),e),G),X[f])},(L(p,(P((P(function(
2024-12-24 15:05:24 UTC	1390	IN	Data Raw: 2c 79 2c 68 29 7b 66 6f 72 28 79 3d 28 58 3d 74 28 31 33 32 2c 28 68 3d 28 54 3d 4a 28 65 29 2c 72 6a 28 65 29 29 2c 47 3d 22 22 2c 65 29 29 2c 58 2e 6c 65 6e 67 74 68 29 2c 66 3d 30 3b 68 2d 2d 3b 29 66 3d 28 28 66 7c 30 29 2b 28 72 6a 28 65 29 7c 30 29 29 25 79 2c 47 2b 3d 57 5b 58 5b 66 5d 5d 3b 4c 28 65 2c 54 2c 47 29 7d 29 2c 70 2c 32 35 30 29 2c 34 33 36 29 2c 30 29 2c 70 29 2c 31 30 32 29 2c 33 32 36 29 2c 5b 32 30 34 38 5d 29 2c 70 29 2c 31 31 33 29 2c 32 34 35 29 2c 51 29 2c 70 29 2c 31 37 31 2c 5b 30 2c 30 2c 30 5d 29 2c 70 29 2c 31 33 37 29 2c 33 35 33 29 2c 5b 5d 29 2c 4c 28 70 2c 37 33 2c 30 29 2c 70 29 2c 36 31 29 2c 70 29 2c 33 37 33 29 2c 70 2e 69 39 3d 30 2c 34 32 31 29 2c 5b 5d 29 2c 70 29 2c 36 35 29 2c 31 31 31 29 29 2c 32 34 30 29 29 Data Ascii: ,y,h){for(y=(X=t(132,(h=(T=J(e),rj(e)),G="",e)),X.length),f=0;h--;)f=((f\|0)+(rj(e)\|0))%y,G+=W[X[f]];L(e,T,G)}),p,250),436),0),p),102),326),[2048]),p),113),245),Q),p),171,[0,0,0]),p),137),353),[]),L(p,73,0),p),61),p),373),p.i9=0,421),[]),p),65),111)),240))
2024-12-24 15:05:24 UTC	1390	IN	Data Raw: 31 36 7c 7c 62 3d 3d 32 30 34 7c 7c 62 3d 3d 33 35 33 7c 7c 62 3d 3d 34 32 31 7c 7c 62 3d 3d 37 36 7c 7c 62 3d 3d 31 37 31 7c 7c 62 3d 3d 32 36 38 7c 7c 62 3d 3d 33 32 36 3f 70 2e 4f 5b 62 5d 7c 7c 28 70 2e 4f 5b 62 5d 3d 59 71 28 70 2c 55 2c 62 2c 31 34 32 29 29 3a 70 2e 4f 5b 62 5d 3d 59 71 28 70 2c 55 2c 62 2c 31 31 33 29 7d 62 3d 3d 32 33 32 26 26 28 70 2e 4e 3d 44 28 66 61 6c 73 65 2c 33 32 2c 70 29 2c 70 2e 46 3d 76 6f 69 64 20 30 29 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 70 2e 59 3d 28 28 70 2e 59 3f 70 2e 59 2b 22 7e 22 3a 22 45 3a 22 29 2b 62 2e 6d 65 73 73 61 67 65 2b 22 3a 22 2b 62 2e 73 74 61 63 6b 29 2e 73 6c 69 63 65 28 30 2c 32 30 34 38 29 7d 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 2c 55 2c 42 2c 59 29 7b 71 28 28 28 Data Ascii: 16\|\|b==204\|\|b==353\|\|b==421\|\|b==76\|\|b==171\|\|b==268\|\|b==326?p.O[b]\|\|(p.O[b]=Yq(p,U,b,142)):p.O[b]=Yq(p,U,b,113)}b==232&&(p.N=D(false,32,p),p.F=void 0)},V=function(p,b){p.Y=((p.Y?p.Y+"~":"E:")+b.message+":"+b.stack).slice(0,2048)},Ie=function(p,b,U,B,Y){q(((
2024-12-24 15:05:24 UTC	1390	IN	Data Raw: 31 32 38 29 3a 62 5b 59 2b 2b 5d 3d 42 3e 3e 31 32 7c 32 32 34 2c 62 5b 59 2b 2b 5d 3d 42 3e 3e 36 26 36 33 7c 31 32 38 29 2c 62 5b 59 2b 2b 5d 3d 42 26 36 33 7c 31 32 38 29 3b 72 65 74 75 72 6e 20 62 7d 2c 61 65 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 2c 55 2c 42 2c 59 2c 72 29 7b 69 66 28 21 62 2e 59 29 7b 62 2e 49 2b 2b 3b 74 72 79 7b 66 6f 72 28 72 3d 28 42 3d 28 59 3d 62 2e 4b 2c 76 6f 69 64 20 30 29 2c 30 29 3b 2d 2d 70 3b 29 74 72 79 7b 69 66 28 28 55 3d 76 6f 69 64 20 30 2c 62 29 2e 73 29 42 3d 7a 4e 28 62 2c 62 2e 73 29 3b 65 6c 73 65 7b 69 66 28 72 3d 74 28 32 31 32 2c 62 29 2c 72 3e 3d 59 29 62 72 65 61 6b 3b 42 3d 28 55 3d 4a 28 28 4c 28 62 2c 31 32 35 2c 72 29 2c 62 29 29 2c 74 28 55 2c 62 29 29 7d 42 26 26 42 5b 68 34 5d 26 32 30 34 38 3f 42 Data Ascii: 128):b[Y++]=B>>12\|224,b[Y++]=B>>6&63\|128),b[Y++]=B&63\|128);return b},ae=function(p,b,U,B,Y,r){if(!b.Y){b.I++;try{for(r=(B=(Y=b.K,void 0),0);--p;)try{if((U=void 0,b).s)B=zN(b,b.s);else{if(r=t(212,b),r>=Y)break;B=(U=J((L(b,125,r),b)),t(U,b))}B&&B[h4]&2048?B
2024-12-24 15:05:24 UTC	1390	IN	Data Raw: 62 2e 57 2c 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 46 28 74 72 75 65 2c 62 2c 74 72 75 65 29 7d 29 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 55 7d 2c 4f 47 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 28 62 2e 70 75 73 68 28 70 5b 30 5d 3c 3c 32 34 7c 70 5b 31 5d 3c 3c 31 36 7c 70 5b 32 5d 3c 3c 38 7c 70 5b 33 5d 29 2c 62 2e 70 75 73 68 28 70 5b 34 5d 3c 3c 32 34 7c 70 5b 35 5d 3c 3c 31 36 7c 70 5b 36 5d 3c 3c 38 7c 70 5b 37 5d 29 2c 62 29 2e 70 75 73 68 28 70 5b 38 5d 3c 3c 32 34 7c 70 5b 39 5d 3c 3c 31 36 7c 70 5b 31 30 5d 3c 3c 38 7c 70 5b 31 31 5d 29 7d 2c 5a 3d 7b 70 61 73 73 69 76 65 3a 74 72 75 65 2c 63 61 70 74 75 72 65 3a 74 72 75 65 7d 2c 7a 4e 3d 66 75 6e 63 74 69 6f 6e 28 70 2c 62 29 7b 72 65 74 75 72 6e 28 62 3d 62 2e 63 72 65 61 74 65 28 Data Ascii: b.W,p(function(){F(true,b,true)});break}}return U},OG=function(p,b){(b.push(p[0]<<24\|p[1]<<16\|p[2]<<8\|p[3]),b.push(p[4]<<24\|p[5]<<16\|p[6]<<8\|p[7]),b).push(p[8]<<24\|p[9]<<16\|p[10]<<8\|p[11])},Z={passive:true,capture:true},zN=function(p,b){return(b=b.create(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49920	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:23 UTC	904	OUT	GET /Content/images/favicon.ico HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mortgagequestions.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; AWSALB=NRARIFNwfuQQcLllUoVnTO2W2kJ1RwOlUYryT4dev3S6JZgEZlRb2F/LvyPQ5ewX1KRu7ZnD7o3m9FT8RbeMZfVp7revYsRPQ+yNJKgOKUaLMEryCwgaeoM08uOn
2024-12-24 15:05:24 UTC	831	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:24 GMT Content-Type: image/x-icon Content-Length: 20198 Connection: close Set-Cookie: AWSALB=+qEPHu91YInq+/QgfCyyF+MHYJhcGlmrK7O8jWUk6YRqcfPJYCCu+OK0Das4lG25v6m51+sCC2q2YKL5S7DPiHNsfgLVuRRwDp1Bsu7WnxbgBqt/ST+zkPghTFM9; Expires=Tue, 31 Dec 2024 15:05:24 GMT; Path=/ Set-Cookie: AWSALBCORS=+qEPHu91YInq+/QgfCyyF+MHYJhcGlmrK7O8jWUk6YRqcfPJYCCu+OK0Das4lG25v6m51+sCC2q2YKL5S7DPiHNsfgLVuRRwDp1Bsu7WnxbgBqt/ST+zkPghTFM9; Expires=Tue, 31 Dec 2024 15:05:24 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 16:35:10 GMT Accept-Ranges: bytes ETag: "65617431279ad91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:24 UTC	3178	IN	Data Raw: 00 00 01 00 05 00 10 10 00 00 01 00 20 00 68 04 00 00 56 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 be 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 46 0e 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 ee 1e 00 00 19 19 00 00 01 00 20 00 50 0a 00 00 96 44 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 7d 00 15 c4 7d 00 15 c4 7d 00 05 c4 7d 00 00 c4 7d 00 00 c4 7d 00 02 c4 7d 00 11 c4 7d 00 17 c4 7d 00 07 c4 7d 00 03 c4 7d 00 14 c4 7d 00 1f c4 7d 00 1a c4 7d 00 08 c4 7d 00 0c c4 7d 00 0a c4 Data Ascii: hV F00 % PD( }}}}}}}}}}}}}}}}
2024-12-24 15:05:24 UTC	5352	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 51 a8 72 00 51 a8 72 01 51 a8 72 0c 51 a8 72 31 51 a8 72 8f 51 a8 72 ce 51 a8 72 82 51 a8 72 28 51 a8 72 08 51 a8 72 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 a8 72 00 51 a8 72 02 51 a8 72 10 51 a8 72 1b 51 a8 72 0d 51 a8 72 00 51 a8 72 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: QrQrQrQr1QrQrQrQr(QrQrQrQrQrQrQrQrQr
2024-12-24 15:05:24 UTC	6690	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-12-24 15:05:24 UTC	4014	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 a8 72 00 51 a8 72 00 51 a8 72 03 51 a8 72 0b 51 a8 72 22 51 a8 72 43 51 a8 72 6a 51 a8 72 94 51 a8 72 ba 51 a8 72 db 51 a8 72 f2 51 a8 72 fe 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 f2 51 a8 72 d1 51 a8 72 aa 51 a8 72 7f 51 a8 72 59 51 a8 72 38 51 a8 72 1c 51 a8 72 06 51 a8 72 00 51 a8 72 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 a8 72 00 51 a8 72 00 51 Data Ascii: QrQrQrQrQr"QrCQrjQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrYQr8QrQrQrQrQrQrQ
2024-12-24 15:05:24 UTC	964	IN	Data Raw: 6f 9d 58 33 73 9b 54 3c 70 9c 54 3c 75 9b 54 3d 54 a7 6f 4f 40 af 83 41 60 a3 66 24 75 9b 51 41 80 97 46 7f 7d 98 47 81 77 9a 4c 1a ae 85 17 00 ce 79 00 00 c4 7d 00 00 c4 7d 00 00 c4 7d 00 00 3f af 84 1e 3f af 84 93 3e af 84 ff 3f af 83 ff 4d aa 76 ff 53 a7 70 ff 51 a8 72 ff 53 a7 70 ff 4d a9 76 ff 3f af 82 ff 3e af 84 ff 3f af 84 ff 3d af 84 ff 49 ab 7a ff 50 a8 73 ff 44 ad 7e ff 3e af 84 ff 3d b0 86 d3 3d af 86 4f 24 b9 9e 00 82 96 42 00 de 74 00 00 c4 7d 00 00 c4 7d 00 00 c4 7d 00 00 51 a8 72 00 51 a8 72 00 51 a8 72 1b 51 a8 72 91 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 de 51 a8 72 5e 51 a8 72 00 51 a8 72 00 3b b0 87 00 8b 93 39 00 da 75 00 00 c4 7d 00 Data Ascii: oX3sT<pT<uT=ToO@A`f$uQAF}GwLy}}}??>?MvSpQrSpMv?>?=IzPsD~>==O$Bt}}}QrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQr^QrQr;9u}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49926	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:24 UTC	938	OUT	GET /phhm/scripts.9d6b8b762f67bb53.js HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://account.mortgagequestions.com/phhm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!SgSmj6pvle0k+95con1a7F8IKKxzc9Omf+3rYYw0pv5WRLyjrO7QzdOTAdj4TwXVdxqFtg7agYOagjU=
2024-12-24 15:05:24 UTC	748	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:24 GMT Last-Modified: Mon, 11 Nov 2024 21:19:34 GMT ETag: "25157-626a9a83a8580;627163210a690" Accept-Ranges: bytes Content-Length: 151895 Vary: Accept-Encoding Content-Type: application/javascript Strict-Transport-Security: max-age=16070400; includeSubDomains Via: 1.1 account.mortgagequestions.com X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Connection: close Set-Cookie: bkfs1=!KBO82VHtzOgpUHBcon1a7F8IKKxzc3EM3C0Vjt+KCq5UWzZ+UDch+DO/drvWrdNLjS7XY//IkobVOkc=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:24 UTC	7868	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 52 2c 41 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 52 2e 64 6f 63 75 6d 65 6e 74 3f 41 65 28 52 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 6f 65 29 7b 69 66 28 21 6f 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 41 65 28 6f 65 29 7d 3a 41 65 28 52 29 7d 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3c 22 75 22 3f 77 69 6e 64 6f Data Ascii: !function(R,Ae){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=R.document?Ae(R,!0):function(oe){if(!oe.document)throw new Error("jQuery requires a window with a document");return Ae(oe)}:Ae(R)}(typeof window<"u"?windo
2024-12-24 15:05:24 UTC	8192	IN	Data Raw: 63 74 69 6f 6e 20 47 65 28 69 29 7b 76 61 72 20 73 3d 70 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 69 28 73 29 7d 63 61 74 63 68 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 73 29 2c 73 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 58 6e 28 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 20 58 28 73 2c 22 69 6e 70 75 74 22 29 26 26 73 2e 74 79 70 65 3d 3d 3d 69 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 74 28 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 28 58 28 73 2c 22 69 6e 70 75 74 22 Data Ascii: ction Ge(i){var s=p.createElement("fieldset");try{return!!i(s)}catch{return!1}finally{s.parentNode&&s.parentNode.removeChild(s),s=null}}function Xn(i){return function(s){return X(s,"input")&&s.type===i}}function kt(i){return function(s){return(X(s,"input"
2024-12-24 15:05:24 UTC	8192	IN	Data Raw: 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 7a 6e 2e 74 65 73 74 28 69 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 4b 65 2e 74 65 73 74 28 69 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 58 28 69 2c 22 69 6e 70 75 74 22 29 26 26 22 62 75 74 74 6f 6e 22 3d 3d 3d 69 2e 74 79 70 65 7c 7c 58 28 69 2c 22 62 75 74 74 6f 6e 22 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 73 3b 72 65 74 75 72 6e 20 58 28 69 2c 22 69 6e 70 75 74 22 29 26 26 22 74 65 78 74 22 3d 3d 3d 69 2e 74 79 70 65 26 26 28 6e 75 6c 6c 3d 3d 28 73 3d 69 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 29 7c 7c 22 74 65 78 Data Ascii: ion(i){return zn.test(i.nodeName)},input:function(i){return Ke.test(i.nodeName)},button:function(i){return X(i,"input")&&"button"===i.type\|\|X(i,"button")},text:function(i){var s;return X(i,"input")&&"text"===i.type&&(null==(s=i.getAttribute("type"))\|\|"tex
2024-12-24 15:05:24 UTC	8192	IN	Data Raw: 53 69 62 6c 69 6e 67 22 29 7d 2c 70 72 65 76 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 74 28 65 2c 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 29 7d 2c 6e 65 78 74 55 6e 74 69 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 74 28 65 2c 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 2c 6f 29 7d 2c 70 72 65 76 55 6e 74 69 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 74 28 65 2c 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 6f 29 7d 2c 73 69 62 6c 69 6e 67 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 74 28 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 7b 7d 29 2e 66 69 72 73 74 43 68 69 6c 64 2c 65 29 7d 2c 63 68 69 6c 64 72 65 6e 3a 66 75 Data Ascii: Sibling")},prevAll:function(e){return nt(e,"previousSibling")},nextUntil:function(e,n,o){return nt(e,"nextSibling",o)},prevUntil:function(e,n,o){return nt(e,"previousSibling",o)},siblings:function(e){return it((e.parentNode\|\|{}).firstChild,e)},children:fu
2024-12-24 15:05:24 UTC	8192	IN	Data Raw: 65 28 29 7d 2c 5f 71 75 65 75 65 48 6f 6f 6b 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 6f 3d 6e 2b 22 71 75 65 75 65 48 6f 6f 6b 73 22 3b 72 65 74 75 72 6e 20 50 2e 67 65 74 28 65 2c 6f 29 7c 7c 50 2e 61 63 63 65 73 73 28 65 2c 6f 2c 7b 65 6d 70 74 79 3a 6c 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2e 61 64 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 50 2e 72 65 6d 6f 76 65 28 65 2c 5b 6e 2b 22 71 75 65 75 65 22 2c 6f 5d 29 7d 29 7d 29 7d 7d 29 2c 6c 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 6f 3d 32 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 26 26 28 6e 3d 65 2c 65 3d 22 66 78 22 2c 6f 2d 2d 29 2c 61 72 67 75 6d Data Ascii: e()},_queueHooks:function(e,n){var o=n+"queueHooks";return P.get(e,o)\|\|P.access(e,o,{empty:l.Callbacks("once memory").add(function(){P.remove(e,[n+"queue",o])})})}}),l.fn.extend({queue:function(e,n){var o=2;return"string"!=typeof e&&(n=e,e="fx",o--),argum
2024-12-24 15:05:24 UTC	8192	IN	Data Raw: 7d 2c 73 70 65 63 69 61 6c 3a 7b 6c 6f 61 64 3a 7b 6e 6f 42 75 62 62 6c 65 3a 21 30 7d 2c 63 6c 69 63 6b 3a 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 7c 7c 65 3b 72 65 74 75 72 6e 20 67 74 2e 74 65 73 74 28 6e 2e 74 79 70 65 29 26 26 6e 2e 63 6c 69 63 6b 26 26 58 28 6e 2c 22 69 6e 70 75 74 22 29 26 26 76 74 28 6e 2c 22 63 6c 69 63 6b 22 2c 21 30 29 2c 21 31 7d 2c 74 72 69 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 7c 7c 65 3b 72 65 74 75 72 6e 20 67 74 2e 74 65 73 74 28 6e 2e 74 79 70 65 29 26 26 6e 2e 63 6c 69 63 6b 26 26 58 28 6e 2c 22 69 6e 70 75 74 22 29 26 26 76 74 28 6e 2c 22 63 6c 69 63 6b 22 29 2c 21 30 7d 2c 5f 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: },special:{load:{noBubble:!0},click:{setup:function(e){var n=this\|\|e;return gt.test(n.type)&&n.click&&X(n,"input")&&vt(n,"click",!0),!1},trigger:function(e){var n=this\|\|e;return gt.test(n.type)&&n.click&&X(n,"input")&&vt(n,"click"),!0},_default:function(e
2024-12-24 15:05:24 UTC	8192	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6f 70 65 6e 65 72 7c 7c 28 6e 3d 52 29 2c 6e 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 29 7d 2c 62 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 76 61 72 20 75 2c 64 2c 70 3d 7b 7d 3b 66 6f 72 28 64 20 69 6e 20 6e 29 70 5b 64 5d 3d 65 2e 73 74 79 6c 65 5b 64 5d 2c 65 2e 73 74 79 6c 65 5b 64 5d 3d 6e 5b 64 5d 3b 66 6f 72 28 64 20 69 6e 20 75 3d 6f 2e 63 61 6c 6c 28 65 29 2c 6e 29 65 2e 73 74 79 6c 65 5b 64 5d 3d 70 5b 64 5d 3b 72 65 74 75 72 6e 20 75 7d 2c 71 74 3d 6e 65 77 20 52 65 67 45 78 70 28 70 65 2e 6a 6f 69 6e 28 22 7c 22 29 2c 22 69 22 29 3b 66 75 6e 63 74 69 6f 6e Data Ascii: tion(e){var n=e.ownerDocument.defaultView;return n&&n.opener\|\|(n=R),n.getComputedStyle(e)},bt=function(e,n,o){var u,d,p={};for(d in n)p[d]=e.style[d],e.style[d]=n[d];for(d in u=o.call(e),n)e.style[d]=p[d];return u},qt=new RegExp(pe.join("\|"),"i");function
2024-12-24 15:05:25 UTC	8192	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 28 65 2e 6d 61 74 63 68 28 43 65 29 7c 7c 5b 5d 29 2e 6a 6f 69 6e 28 22 20 22 29 7d 66 75 6e 63 74 69 6f 6e 20 77 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 7d 66 75 6e 63 74 69 6f 6e 20 6c 74 28 65 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 2e 6d 61 74 63 68 28 43 65 29 7c 7c 5b 5d 7d 6c 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 70 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6b 65 28 74 68 69 73 2c 6c 2e 70 72 6f 70 2c 65 2c 6e 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 Data Ascii: (e){return(e.match(Ce)\|\|[]).join(" ")}function we(e){return e.getAttribute&&e.getAttribute("class")\|\|""}function lt(e){return Array.isArray(e)?e:"string"==typeof e&&e.match(Ce)\|\|[]}l.fn.extend({prop:function(e,n){return ke(this,l.prop,e,n,1<arguments.leng
2024-12-24 15:05:25 UTC	8192	IN	Data Raw: 68 72 65 66 2c 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 75 29 29 3a 6e 3d 4d 29 2c 70 3d 21 6f 26 26 5b 5d 2c 28 64 3d 64 74 2e 65 78 65 63 28 65 29 29 3f 5b 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 64 5b 31 5d 29 5d 3a 28 64 3d 61 6e 28 5b 65 5d 2c 6e 2c 70 29 2c 70 26 26 70 2e 6c 65 6e 67 74 68 26 26 6c 28 70 29 2e 72 65 6d 6f 76 65 28 29 2c 6c 2e 6d 65 72 67 65 28 5b 5d 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 29 29 29 3b 76 61 72 20 75 2c 64 2c 70 7d 2c 6c 2e 6f 66 66 73 65 74 3d 7b 73 65 74 4f 66 66 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 76 61 72 20 75 2c 64 2c 70 2c 76 2c 5f 2c 79 2c 78 3d 6c 2e 63 73 73 28 65 2c 22 70 6f 73 69 74 69 6f 6e 22 29 2c 54 3d 6c 28 65 29 2c 6b 3d 7b 7d 3b 22 73 74 61 74 69 63 22 Data Ascii: href,n.head.appendChild(u)):n=M),p=!o&&[],(d=dt.exec(e))?[n.createElement(d[1])]:(d=an([e],n,p),p&&p.length&&l(p).remove(),l.merge([],d.childNodes)));var u,d,p},l.offset={setOffset:function(e,n,o){var u,d,p,v,_,y,x=l.css(e,"position"),T=l(e),k={};"static"
2024-12-24 15:05:25 UTC	8192	IN	Data Raw: 72 65 6d 6f 76 65 28 29 7d 2c 61 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 66 2e 64 65 66 61 75 6c 74 28 74 68 69 73 29 2c 68 3d 72 2e 64 61 74 61 28 42 65 29 3b 68 7c 7c 28 68 3d 6e 65 77 20 61 28 74 68 69 73 29 2c 72 2e 64 61 74 61 28 42 65 2c 68 29 29 2c 22 63 6c 6f 73 65 22 3d 3d 3d 74 26 26 68 5b 74 5d 28 74 68 69 73 29 7d 29 7d 2c 61 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 26 26 72 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 2e 63 6c 6f 73 65 28 74 68 69 73 29 7d 7d 2c 79 65 28 61 2c 6e Data Ascii: remove()},a._jQueryInterface=function(t){return this.each(function(){var r=f.default(this),h=r.data(Be);h\|\|(h=new a(this),r.data(Be,h)),"close"===t&&h[t](this)})},a._handleDismiss=function(t){return function(r){r&&r.preventDefault(),t.close(this)}},ye(a,n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49928	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:24 UTC	948	OUT	GET /phhm/clientvariables.rwa.css HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://account.mortgagequestions.com/phhm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!SgSmj6pvle0k+95con1a7F8IKKxzc9Omf+3rYYw0pv5WRLyjrO7QzdOTAdj4TwXVdxqFtg7agYOagjU=
2024-12-24 15:05:24 UTC	729	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:24 GMT Last-Modified: Wed, 19 Jul 2023 20:50:15 GMT ETag: "1b0-600dd2db6efc0;62716321154ba" Accept-Ranges: bytes Content-Length: 432 Vary: Accept-Encoding Content-Type: text/css Strict-Transport-Security: max-age=16070400; includeSubDomains Via: 1.1 account.mortgagequestions.com X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Connection: close Set-Cookie: bkfs1=!Vx2nTQMgrvKDtsdcon1a7F8IKKxzc1qL/0a8JI3fuVzkfIIWxI69LQwXsG76AriUwHK/yLDRzXs+cPE=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:24 UTC	432	IN	Data Raw: 3a 72 6f 6f 74 7b 0d 0a 2d 2d 62 72 61 6e 64 50 72 69 6d 61 72 79 3a 20 23 30 30 37 44 43 35 3b 0d 0a 2d 2d 62 72 61 6e 64 50 72 69 6d 61 72 79 44 61 72 6b 3a 20 23 37 44 42 37 45 34 3b 0d 0a 2d 2d 62 72 61 6e 64 50 72 69 6d 61 72 79 4c 69 67 68 74 3a 20 23 43 45 45 32 46 33 3b 0d 0a 2d 2d 62 72 61 6e 64 53 65 63 6f 6e 64 61 72 79 3a 20 23 30 30 37 44 43 35 3b 0d 0a 2d 2d 62 72 61 6e 64 53 65 63 6f 6e 64 61 72 79 44 61 72 6b 3a 20 23 33 43 33 45 33 46 3b 0d 0a 2d 2d 62 72 61 6e 64 53 65 63 6f 6e 64 61 72 79 4c 69 67 68 74 3a 20 23 36 30 36 42 37 34 3b 0d 0a 2d 2d 62 72 61 6e 64 54 65 72 74 69 61 72 79 3a 20 23 30 30 37 44 43 35 3b 0d 0a 2d 2d 62 72 61 6e 64 54 65 72 74 69 61 72 79 44 61 72 6b 3a 20 23 34 36 35 39 36 37 3b 0d 0a 2d 2d 62 72 61 6e 64 54 65 Data Ascii: :root{--brandPrimary: #007DC5;--brandPrimaryDark: #7DB7E4;--brandPrimaryLight: #CEE2F3;--brandSecondary: #007DC5;--brandSecondaryDark: #3C3E3F;--brandSecondaryLight: #606B74;--brandTertiary: #007DC5;--brandTertiaryDark: #465967;--brandTe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49930	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:24 UTC	938	OUT	GET /phhm/overrides.css HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://account.mortgagequestions.com/phhm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!SgSmj6pvle0k+95con1a7F8IKKxzc9Omf+3rYYw0pv5WRLyjrO7QzdOTAdj4TwXVdxqFtg7agYOagjU=
2024-12-24 15:05:24 UTC	704	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:24 GMT Last-Modified: Mon, 11 Nov 2024 21:19:43 GMT ETag: "28-626a9a8c3d9c0;627163210a690" Accept-Ranges: bytes Content-Length: 40 Content-Type: text/css Strict-Transport-Security: max-age=16070400; includeSubDomains Via: 1.1 account.mortgagequestions.com X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Connection: close Set-Cookie: bkfs1=!hs0KUPxeuu2xMAlcon1a7F8IKKxzc3lYklsCzl6hdpyJ8BPyQbDnqYhuXD4P6yctrIEr9feaIofTpeM=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:24 UTC	40	IN	Data Raw: 2f 2a 20 54 68 69 73 20 69 73 20 69 6e 74 65 6e 74 69 6f 6e 61 6c 6c 79 20 6c 65 66 74 20 62 6c 61 6e 6b 2e 20 20 2a 2f Data Ascii: /* This is intentionally left blank. */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49929	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:24 UTC	952	OUT	GET /phhm/styles.f6b8b5bcda36b4b7.css HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://account.mortgagequestions.com/phhm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!SgSmj6pvle0k+95con1a7F8IKKxzc9Omf+3rYYw0pv5WRLyjrO7QzdOTAdj4TwXVdxqFtg7agYOagjU=
2024-12-24 15:05:24 UTC	734	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:24 GMT Last-Modified: Mon, 11 Nov 2024 21:19:34 GMT ETag: "8cae9-626a9a83a8580;62716321154ba" Accept-Ranges: bytes Content-Length: 576233 Vary: Accept-Encoding Content-Type: text/css Strict-Transport-Security: max-age=16070400; includeSubDomains Via: 1.1 account.mortgagequestions.com X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Connection: close Set-Cookie: bkfs1=!Yai7AtxGTfp4K0Jcon1a7F8IKKxzc/GeP/u3xKy513MbASx/fYIqCZhzLERxsV6l6dpkz5rVVBPfzTc=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:24 UTC	7882	IN	Data Raw: 40 69 6d 70 6f 72 74 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 3a 77 67 68 74 40 33 30 30 3b 34 30 30 3b 35 30 30 3b 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 3b 40 69 6d 70 6f 72 74 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 69 63 6f 6e 3f 66 61 6d 69 6c 79 3d 4d 61 74 65 72 69 61 6c 2b 49 63 6f 6e 73 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 77 61 74 63 68 20 76 34 2e 36 2e 32 0a 20 2a 20 48 6f 6d 65 70 61 67 65 3a 20 68 74 74 70 73 3a 2f 2f 62 6f 6f 74 73 77 61 74 63 68 2e 63 6f 6d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 2d 32 30 32 32 20 54 68 6f 6d 61 73 20 50 61 72 6b 0a 20 2a 20 Data Ascii: @import"https://fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700&display=swap";@import"https://fonts.googleapis.com/icon?family=Material+Icons";/! Bootswatch v4.6.2 * Homepage: https://bootswatch.com * Copyright 2012-2022 Thomas Park *
2024-12-24 15:05:24 UTC	8192	IN	Data Raw: 7d 2e 63 6f 6c 2d 6d 64 2d 33 7b 66 6c 65 78 3a 30 20 30 20 32 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 32 35 25 7d 2e 63 6f 6c 2d 6d 64 2d 34 7b 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6d 64 2d 35 7b 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6d 64 2d 36 7b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 63 6f 6c 2d 6d 64 2d 37 7b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6d 64 2d 38 7b 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 Data Ascii: }.col-md-3{flex:0 0 25%;max-width:25%}.col-md-4{flex:0 0 33.333333%;max-width:33.333333%}.col-md-5{flex:0 0 41.666667%;max-width:41.666667%}.col-md-6{flex:0 0 50%;max-width:50%}.col-md-7{flex:0 0 58.333333%;max-width:58.333333%}.col-md-8{flex:0 0 66.66666
2024-12-24 15:05:24 UTC	8192	IN	Data Raw: 75 63 68 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 2d 73 6d 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 7b 62 6f 72 64 65 72 3a 30 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 37 2e 39 38 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 2d 6d 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 74 6f 75 63 68 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 2d 6d 64 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 7b 62 6f 72 64 65 72 3a 30 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 39 31 2e 39 38 70 78 29 7b 2e 74 61 62 6c 65 Data Ascii: uch}.table-responsive-sm>.table-bordered{border:0}}@media (max-width:767.98px){.table-responsive-md{display:block;width:100%;overflow-x:auto;-webkit-overflow-scrolling:touch}.table-responsive-md>.table-bordered{border:0}}@media (max-width:991.98px){.table
2024-12-24 15:05:24 UTC	8192	IN	Data Raw: 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 63 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 77 69 64 74 68 3d 27 31 32 27 20 68 65 69 67 68 74 3d 27 31 32 27 20 66 69 6c 6c 3d 27 6e 6f 6e 65 27 20 73 74 72 6f 6b 65 3d 27 25 32 33 65 35 31 63 32 33 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 31 32 20 31 32 27 25 33 65 25 33 63 63 69 72 63 6c 65 20 63 78 3d 27 36 27 20 63 79 3d 27 36 27 20 72 3d 27 34 2e 35 27 2f 25 33 65 25 33 63 70 61 74 68 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 27 72 6f 75 6e 64 27 20 64 3d 27 4d 35 2e 38 20 33 2e 36 68 2e 34 4c 36 20 36 2e 35 7a 27 2f 25 33 65 25 33 63 63 69 72 63 6c 65 20 63 78 3d 27 36 27 20 63 79 3d 27 Data Ascii: rl("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='12' height='12' fill='none' stroke='%23e51c23' viewBox='0 0 12 12'%3e%3ccircle cx='6' cy='6' r='4.5'/%3e%3cpath stroke-linejoin='round' d='M5.8 3.6h.4L6 6.5z'/%3e%3ccircle cx='6' cy='
2024-12-24 15:05:24 UTC	8192	IN	Data Raw: 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 2c 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 3a 61 63 74 69 76 65 2c 2e 73 68 6f 77 3e 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 63 37 61 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 62 66 37 32 30 30 7d 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 3a 6e 6f 74 28 3a Data Ascii: ;background-image:none}.btn-warning:not(:disabled):not(.disabled).active,.btn-warning:not(:disabled):not(.disabled):active,.show>.btn-warning.dropdown-toggle{color:#fff;background-color:#cc7a00;background-image:none;border-color:#bf7200}.btn-warning:not(:
2024-12-24 15:05:24 UTC	8192	IN	Data Raw: 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 68 74 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 68 74 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 3a 61 63 74 69 76 65 2c 2e 73 68 6f 77 3e 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 68 74 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 63 6f 6c 6f 72 3a 23 32 31 32 31 32 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 68 74 3a 6e 6f 74 28 Data Ascii: ground-color:transparent}.btn-outline-light:not(:disabled):not(.disabled).active,.btn-outline-light:not(:disabled):not(.disabled):active,.show>.btn-outline-light.dropdown-toggle{color:#212121;background-color:#fff;border-color:#fff}.btn-outline-light:not(
2024-12-24 15:05:25 UTC	8192	IN	Data Raw: 65 6e 74 65 72 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 30 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 74 65 78 74 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 74 65 78 74 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 3e 2e 63 75 73 74 6f 6d 2d 73 65 6c 65 63 74 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 3e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 6e 6f 74 28 74 65 78 74 61 Data Ascii: enter;white-space:nowrap;background-color:transparent;border:0 solid transparent;border-radius:0}.input-group-text input[type=checkbox],.input-group-text input[type=radio]{margin-top:0}.input-group-lg>.custom-select,.input-group-lg>.form-control:not(texta
2024-12-24 15:05:25 UTC	8192	IN	Data Raw: 74 6f 6d 2d 72 61 6e 67 65 3a 66 6f 63 75 73 3a 3a 2d 6d 73 2d 74 68 75 6d 62 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 31 70 78 20 23 66 66 66 2c 69 6e 73 65 74 20 30 20 2d 32 70 78 20 23 32 31 39 36 66 33 7d 2e 63 75 73 74 6f 6d 2d 72 61 6e 67 65 3a 3a 2d 77 65 62 6b 69 74 2d 73 6c 69 64 65 72 2d 74 68 75 6d 62 7b 77 69 64 74 68 3a 31 72 65 6d 3b 68 65 69 67 68 74 3a 31 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 2e 32 35 72 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 31 39 36 66 33 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 38 30 64 65 67 2c 23 34 32 61 36 66 35 2c 23 32 31 39 36 66 33 29 20 72 65 70 65 61 74 2d 78 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 72 65 6d 3b 62 6f 78 2d 73 68 61 Data Ascii: tom-range:focus::-ms-thumb{box-shadow:0 0 0 1px #fff,inset 0 -2px #2196f3}.custom-range::-webkit-slider-thumb{width:1rem;height:1rem;margin-top:-.25rem;background:#2196f3 linear-gradient(180deg,#42a6f5,#2196f3) repeat-x;border:0;border-radius:1rem;box-sha
2024-12-24 15:05:25 UTC	8192	IN	Data Raw: 61 6e 64 2d 78 6c 20 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 3e 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 3e 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 2c 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 3e 2e 63 6f 6e 74 61 69 6e 65 72 2d 6c 67 2c 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 3e 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 3e 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 2c 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 3e 2e 63 6f 6e 74 61 69 6e 65 72 2d 78 6c 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e Data Ascii: and-xl .navbar-toggler{display:none}}.navbar-expand>.container,.navbar-expand>.container-fluid,.navbar-expand>.container-lg,.navbar-expand>.container-md,.navbar-expand>.container-sm,.navbar-expand>.container-xl{padding-right:0;padding-left:0}.navbar-expan
2024-12-24 15:05:25 UTC	8192	IN	Data Raw: 63 6f 6c 6f 72 3a 23 64 61 62 30 65 32 7d 2e 61 6c 65 72 74 2d 69 6e 66 6f 20 2e 61 6c 65 72 74 2d 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 32 63 30 62 33 32 7d 2e 61 6c 65 72 74 2d 77 61 72 6e 69 6e 67 7b 63 6f 6c 6f 72 3a 23 38 35 34 66 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 65 61 63 63 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 38 30 64 65 67 2c 23 66 66 65 64 64 34 2c 23 66 66 65 61 63 63 29 20 72 65 70 65 61 74 2d 78 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 65 32 62 38 7d 2e 61 6c 65 72 74 2d 77 61 72 6e 69 6e 67 20 68 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 66 66 64 38 39 66 7d 2e 61 6c 65 72 74 2d 77 61 72 6e 69 6e 67 20 2e 61 6c 65 72 74 2d 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 35 32 33 31 30 30 7d 2e Data Ascii: color:#dab0e2}.alert-info .alert-link{color:#2c0b32}.alert-warning{color:#854f00;background:#ffeacc linear-gradient(180deg,#ffedd4,#ffeacc) repeat-x;border-color:#ffe2b8}.alert-warning hr{border-top-color:#ffd89f}.alert-warning .alert-link{color:#523100}.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49932	107.20.24.122	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:26 UTC	658	OUT	GET /Content/images/favicon.ico HTTP/1.1 Host: www.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; AWSALB=+qEPHu91YInq+/QgfCyyF+MHYJhcGlmrK7O8jWUk6YRqcfPJYCCu+OK0Das4lG25v6m51+sCC2q2YKL5S7DPiHNsfgLVuRRwDp1Bsu7WnxbgBqt/ST+zkPghTFM9
2024-12-24 15:05:26 UTC	831	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:26 GMT Content-Type: image/x-icon Content-Length: 20198 Connection: close Set-Cookie: AWSALB=4HH4dEemeRiWFddPwv7CzJd+PpJyO75bmZXkfEUw3sjiGTJTdcR5UAqoqjmoC+vyn7ps7tRrAMMowW0woda4KMnkUqh+uFmR4Fynn0fC5L4b74nUkSBjaimphcDU; Expires=Tue, 31 Dec 2024 15:05:26 GMT; Path=/ Set-Cookie: AWSALBCORS=4HH4dEemeRiWFddPwv7CzJd+PpJyO75bmZXkfEUw3sjiGTJTdcR5UAqoqjmoC+vyn7ps7tRrAMMowW0woda4KMnkUqh+uFmR4Fynn0fC5L4b74nUkSBjaimphcDU; Expires=Tue, 31 Dec 2024 15:05:26 GMT; Path=/; SameSite=None Cache-Control: max-age=1800 Last-Modified: Thu, 08 Jun 2023 16:35:10 GMT Accept-Ranges: bytes ETag: "65617431279ad91:0" Server: X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-12-24 15:05:26 UTC	502	IN	Data Raw: 00 00 01 00 05 00 10 10 00 00 01 00 20 00 68 04 00 00 56 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 be 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 46 0e 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 ee 1e 00 00 19 19 00 00 01 00 20 00 50 0a 00 00 96 44 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 7d 00 15 c4 7d 00 15 c4 7d 00 05 c4 7d 00 00 c4 7d 00 00 c4 7d 00 02 c4 7d 00 11 c4 7d 00 17 c4 7d 00 07 c4 7d 00 03 c4 7d 00 14 c4 7d 00 1f c4 7d 00 1a c4 7d 00 08 c4 7d 00 0c c4 7d 00 0a c4 Data Ascii: hV F00 % PD( }}}}}}}}}}}}}}}}
2024-12-24 15:05:26 UTC	16384	IN	Data Raw: c4 7d 00 f3 c4 7d 00 de c4 7d 00 f2 c4 7d 00 f3 c4 7d 00 d5 c4 7d 00 fa c4 7d 00 fc c4 7d 00 e1 c4 7d 00 e3 c4 7d 00 ff c4 7d 00 ff c4 7d 00 b4 c4 7d 00 11 c4 7d 00 01 c4 7d 00 1c c4 7d 00 5b c4 7d 00 f3 c4 7d 00 e7 c4 7d 00 f1 c4 7d 00 ff c4 7d 00 ff c4 7d 00 cc c4 7d 00 a1 c4 7d 00 fa c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 e9 c4 7d 00 57 c4 7d 00 07 c4 7d 00 22 c4 7d 00 b4 c4 7d 00 ff c4 7d 00 b3 c4 7d 00 f4 c4 7d 00 ff c4 7d 00 f6 c4 7d 00 59 c4 7d 00 1e c4 7d 00 ce c4 7d 00 ff c4 7d 00 f9 c4 7d 00 e6 c5 7c 00 fb c4 7d 00 e5 c4 7d 00 b5 c4 7d 00 ce c4 7d 00 fe c4 7d 00 e0 c4 7d 00 4c c9 7b 00 d8 ca 7a 00 d8 ce 79 00 90 d9 75 00 0f b7 80 00 00 d0 78 00 57 cb 7a 00 cf cb 7a 00 d1 cf 79 00 61 d0 79 00 86 cb 7b 00 d2 cb 7b 00 f1 cb 7b 00 f2 c5 7c 00 Data Ascii: }}}}}}}}}}}}}}}}[}}}}}}}}}}}}}W}}"}}}}}}}Y}}}}}\|}}}}}}L{zyuxWzzyay{{{\|
2024-12-24 15:05:26 UTC	1010	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-12-24 15:05:26 UTC	2302	IN	Data Raw: ff 00 c4 7d 00 99 c4 7d 00 aa c4 7d 00 aa c4 7d 00 3e c4 7d 00 00 c4 7d 00 00 c4 7d 00 00 c4 7d 00 00 c4 7d 00 00 c4 7d 00 40 c4 7d 00 ab c4 7d 00 aa c4 7d 00 a3 c4 7d 00 00 c4 7d 00 00 c4 7d 00 51 c4 7d 00 aa c4 7d 00 d3 c4 7d 00 db c4 7d 00 c6 c4 7d 00 89 c4 7d 00 15 c4 7d 00 56 c4 7d 00 b7 c4 7d 00 00 c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 6c c4 7d 00 00 c4 7d 00 00 c4 7d 00 00 c4 7d 00 00 c4 7d 00 00 c4 7d 00 70 c4 7d 00 ff c4 7d 00 ff c4 7d 00 f8 c4 7d 00 0e c4 7d 00 a6 c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 f4 c4 7d 00 ff c4 7d 00 ff c4 7d 00 bf c4 7d 00 e7 c4 7d 00 ff c4 7d 00 ff c4 7d 00 5d c4 7d 00 00 c4 7d 00 00 c4 7d 00 15 c4 7d 00 00 c4 7d 00 00 c4 7d 00 60 c4 7d 00 ff c4 7d 00 ff c4 7d 00 da c4 Data Ascii: }}}}>}}}}}}@}}}}}}Q}}}}}}}V}}}}}}l}}}}}}p}}}}}}}}}}}}}}}}}}}]}}}}}}`}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49938	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:26 UTC	743	OUT	GET /phhm/scripts.9d6b8b762f67bb53.js HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!Yai7AtxGTfp4K0Jcon1a7F8IKKxzc/GeP/u3xKy513MbASx/fYIqCZhzLERxsV6l6dpkz5rVVBPfzTc=
2024-12-24 15:05:27 UTC	748	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:26 GMT Last-Modified: Mon, 11 Nov 2024 21:19:34 GMT ETag: "25157-626a9a83a8580;627163211562d" Accept-Ranges: bytes Content-Length: 151895 Vary: Accept-Encoding Content-Type: application/javascript Strict-Transport-Security: max-age=16070400; includeSubDomains Via: 1.1 account.mortgagequestions.com X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Connection: close Set-Cookie: bkfs1=!7sss+wJrce0rNlNcon1a7F8IKKxzc60phh1mlyl+lnaIVQOgzQJ+tXkkcJWwHBUue3ebfBD2rnGHBYs=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:27 UTC	7867	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 52 2c 41 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 52 2e 64 6f 63 75 6d 65 6e 74 3f 41 65 28 52 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 6f 65 29 7b 69 66 28 21 6f 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 41 65 28 6f 65 29 7d 3a 41 65 28 52 29 7d 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3c 22 75 22 3f 77 69 6e 64 6f Data Ascii: !function(R,Ae){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=R.document?Ae(R,!0):function(oe){if(!oe.document)throw new Error("jQuery requires a window with a document");return Ae(oe)}:Ae(R)}(typeof window<"u"?windo
2024-12-24 15:05:27 UTC	8192	IN	Data Raw: 6e 63 74 69 6f 6e 20 47 65 28 69 29 7b 76 61 72 20 73 3d 70 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 69 28 73 29 7d 63 61 74 63 68 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 73 29 2c 73 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 58 6e 28 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 20 58 28 73 2c 22 69 6e 70 75 74 22 29 26 26 73 2e 74 79 70 65 3d 3d 3d 69 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 74 28 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 28 58 28 73 2c 22 69 6e 70 75 74 Data Ascii: nction Ge(i){var s=p.createElement("fieldset");try{return!!i(s)}catch{return!1}finally{s.parentNode&&s.parentNode.removeChild(s),s=null}}function Xn(i){return function(s){return X(s,"input")&&s.type===i}}function kt(i){return function(s){return(X(s,"input
2024-12-24 15:05:27 UTC	8192	IN	Data Raw: 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 7a 6e 2e 74 65 73 74 28 69 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 4b 65 2e 74 65 73 74 28 69 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 58 28 69 2c 22 69 6e 70 75 74 22 29 26 26 22 62 75 74 74 6f 6e 22 3d 3d 3d 69 2e 74 79 70 65 7c 7c 58 28 69 2c 22 62 75 74 74 6f 6e 22 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 73 3b 72 65 74 75 72 6e 20 58 28 69 2c 22 69 6e 70 75 74 22 29 26 26 22 74 65 78 74 22 3d 3d 3d 69 2e 74 79 70 65 26 26 28 6e 75 6c 6c 3d 3d 28 73 3d 69 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 29 7c 7c 22 74 65 Data Ascii: tion(i){return zn.test(i.nodeName)},input:function(i){return Ke.test(i.nodeName)},button:function(i){return X(i,"input")&&"button"===i.type\|\|X(i,"button")},text:function(i){var s;return X(i,"input")&&"text"===i.type&&(null==(s=i.getAttribute("type"))\|\|"te
2024-12-24 15:05:27 UTC	8192	IN	Data Raw: 74 53 69 62 6c 69 6e 67 22 29 7d 2c 70 72 65 76 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 74 28 65 2c 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 29 7d 2c 6e 65 78 74 55 6e 74 69 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 74 28 65 2c 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 2c 6f 29 7d 2c 70 72 65 76 55 6e 74 69 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 74 28 65 2c 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 6f 29 7d 2c 73 69 62 6c 69 6e 67 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 74 28 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 7b 7d 29 2e 66 69 72 73 74 43 68 69 6c 64 2c 65 29 7d 2c 63 68 69 6c 64 72 65 6e 3a 66 Data Ascii: tSibling")},prevAll:function(e){return nt(e,"previousSibling")},nextUntil:function(e,n,o){return nt(e,"nextSibling",o)},prevUntil:function(e,n,o){return nt(e,"previousSibling",o)},siblings:function(e){return it((e.parentNode\|\|{}).firstChild,e)},children:f
2024-12-24 15:05:27 UTC	8192	IN	Data Raw: 72 65 28 29 7d 2c 5f 71 75 65 75 65 48 6f 6f 6b 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 6f 3d 6e 2b 22 71 75 65 75 65 48 6f 6f 6b 73 22 3b 72 65 74 75 72 6e 20 50 2e 67 65 74 28 65 2c 6f 29 7c 7c 50 2e 61 63 63 65 73 73 28 65 2c 6f 2c 7b 65 6d 70 74 79 3a 6c 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2e 61 64 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 50 2e 72 65 6d 6f 76 65 28 65 2c 5b 6e 2b 22 71 75 65 75 65 22 2c 6f 5d 29 7d 29 7d 29 7d 7d 29 2c 6c 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 6f 3d 32 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 26 26 28 6e 3d 65 2c 65 3d 22 66 78 22 2c 6f 2d 2d 29 2c 61 72 67 75 Data Ascii: re()},_queueHooks:function(e,n){var o=n+"queueHooks";return P.get(e,o)\|\|P.access(e,o,{empty:l.Callbacks("once memory").add(function(){P.remove(e,[n+"queue",o])})})}}),l.fn.extend({queue:function(e,n){var o=2;return"string"!=typeof e&&(n=e,e="fx",o--),argu
2024-12-24 15:05:27 UTC	8192	IN	Data Raw: 29 7d 2c 73 70 65 63 69 61 6c 3a 7b 6c 6f 61 64 3a 7b 6e 6f 42 75 62 62 6c 65 3a 21 30 7d 2c 63 6c 69 63 6b 3a 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 7c 7c 65 3b 72 65 74 75 72 6e 20 67 74 2e 74 65 73 74 28 6e 2e 74 79 70 65 29 26 26 6e 2e 63 6c 69 63 6b 26 26 58 28 6e 2c 22 69 6e 70 75 74 22 29 26 26 76 74 28 6e 2c 22 63 6c 69 63 6b 22 2c 21 30 29 2c 21 31 7d 2c 74 72 69 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 7c 7c 65 3b 72 65 74 75 72 6e 20 67 74 2e 74 65 73 74 28 6e 2e 74 79 70 65 29 26 26 6e 2e 63 6c 69 63 6b 26 26 58 28 6e 2c 22 69 6e 70 75 74 22 29 26 26 76 74 28 6e 2c 22 63 6c 69 63 6b 22 29 2c 21 30 7d 2c 5f 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: )},special:{load:{noBubble:!0},click:{setup:function(e){var n=this\|\|e;return gt.test(n.type)&&n.click&&X(n,"input")&&vt(n,"click",!0),!1},trigger:function(e){var n=this\|\|e;return gt.test(n.type)&&n.click&&X(n,"input")&&vt(n,"click"),!0},_default:function(
2024-12-24 15:05:27 UTC	8192	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6f 70 65 6e 65 72 7c 7c 28 6e 3d 52 29 2c 6e 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 29 7d 2c 62 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 76 61 72 20 75 2c 64 2c 70 3d 7b 7d 3b 66 6f 72 28 64 20 69 6e 20 6e 29 70 5b 64 5d 3d 65 2e 73 74 79 6c 65 5b 64 5d 2c 65 2e 73 74 79 6c 65 5b 64 5d 3d 6e 5b 64 5d 3b 66 6f 72 28 64 20 69 6e 20 75 3d 6f 2e 63 61 6c 6c 28 65 29 2c 6e 29 65 2e 73 74 79 6c 65 5b 64 5d 3d 70 5b 64 5d 3b 72 65 74 75 72 6e 20 75 7d 2c 71 74 3d 6e 65 77 20 52 65 67 45 78 70 28 70 65 2e 6a 6f 69 6e 28 22 7c 22 29 2c 22 69 22 29 3b 66 75 6e 63 74 69 6f Data Ascii: ction(e){var n=e.ownerDocument.defaultView;return n&&n.opener\|\|(n=R),n.getComputedStyle(e)},bt=function(e,n,o){var u,d,p={};for(d in n)p[d]=e.style[d],e.style[d]=n[d];for(d in u=o.call(e),n)e.style[d]=p[d];return u},qt=new RegExp(pe.join("\|"),"i");functio
2024-12-24 15:05:27 UTC	8192	IN	Data Raw: 65 28 65 29 7b 72 65 74 75 72 6e 28 65 2e 6d 61 74 63 68 28 43 65 29 7c 7c 5b 5d 29 2e 6a 6f 69 6e 28 22 20 22 29 7d 66 75 6e 63 74 69 6f 6e 20 77 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 7d 66 75 6e 63 74 69 6f 6e 20 6c 74 28 65 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 65 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 2e 6d 61 74 63 68 28 43 65 29 7c 7c 5b 5d 7d 6c 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 70 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6b 65 28 74 68 69 73 2c 6c 2e 70 72 6f 70 2c 65 2c 6e 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e Data Ascii: e(e){return(e.match(Ce)\|\|[]).join(" ")}function we(e){return e.getAttribute&&e.getAttribute("class")\|\|""}function lt(e){return Array.isArray(e)?e:"string"==typeof e&&e.match(Ce)\|\|[]}l.fn.extend({prop:function(e,n){return ke(this,l.prop,e,n,1<arguments.len
2024-12-24 15:05:27 UTC	8192	IN	Data Raw: 2e 68 72 65 66 2c 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 75 29 29 3a 6e 3d 4d 29 2c 70 3d 21 6f 26 26 5b 5d 2c 28 64 3d 64 74 2e 65 78 65 63 28 65 29 29 3f 5b 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 64 5b 31 5d 29 5d 3a 28 64 3d 61 6e 28 5b 65 5d 2c 6e 2c 70 29 2c 70 26 26 70 2e 6c 65 6e 67 74 68 26 26 6c 28 70 29 2e 72 65 6d 6f 76 65 28 29 2c 6c 2e 6d 65 72 67 65 28 5b 5d 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 29 29 29 3b 76 61 72 20 75 2c 64 2c 70 7d 2c 6c 2e 6f 66 66 73 65 74 3d 7b 73 65 74 4f 66 66 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 76 61 72 20 75 2c 64 2c 70 2c 76 2c 5f 2c 79 2c 78 3d 6c 2e 63 73 73 28 65 2c 22 70 6f 73 69 74 69 6f 6e 22 29 2c 54 3d 6c 28 65 29 2c 6b 3d 7b 7d 3b 22 73 74 61 74 69 63 Data Ascii: .href,n.head.appendChild(u)):n=M),p=!o&&[],(d=dt.exec(e))?[n.createElement(d[1])]:(d=an([e],n,p),p&&p.length&&l(p).remove(),l.merge([],d.childNodes)));var u,d,p},l.offset={setOffset:function(e,n,o){var u,d,p,v,_,y,x=l.css(e,"position"),T=l(e),k={};"static
2024-12-24 15:05:27 UTC	8192	IN	Data Raw: 2e 72 65 6d 6f 76 65 28 29 7d 2c 61 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 66 2e 64 65 66 61 75 6c 74 28 74 68 69 73 29 2c 68 3d 72 2e 64 61 74 61 28 42 65 29 3b 68 7c 7c 28 68 3d 6e 65 77 20 61 28 74 68 69 73 29 2c 72 2e 64 61 74 61 28 42 65 2c 68 29 29 2c 22 63 6c 6f 73 65 22 3d 3d 3d 74 26 26 68 5b 74 5d 28 74 68 69 73 29 7d 29 7d 2c 61 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 26 26 72 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 2e 63 6c 6f 73 65 28 74 68 69 73 29 7d 7d 2c 79 65 28 61 2c Data Ascii: .remove()},a._jQueryInterface=function(t){return this.each(function(){var r=f.default(this),h=r.data(Be);h\|\|(h=new a(this),r.data(Be,h)),"close"===t&&h[t](this)})},a._handleDismiss=function(t){return function(r){r&&r.preventDefault(),t.close(this)}},ye(a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49941	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:27 UTC	740	OUT	GET /phhm/main.5ae79adb947e0038.js HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!Yai7AtxGTfp4K0Jcon1a7F8IKKxzc/GeP/u3xKy513MbASx/fYIqCZhzLERxsV6l6dpkz5rVVBPfzTc=
2024-12-24 15:05:28 UTC	750	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:28 GMT Last-Modified: Mon, 11 Nov 2024 21:19:34 GMT ETag: "477975-626a9a83a8580;627163211dd23" Accept-Ranges: bytes Content-Length: 4684149 Vary: Accept-Encoding Content-Type: application/javascript Strict-Transport-Security: max-age=16070400; includeSubDomains Via: 1.1 account.mortgagequestions.com X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Connection: close Set-Cookie: bkfs1=!UEM2ZXcRBAWeGwRcon1a7F8IKKxzc3JmnL2xIRhEEw/TUNqIpbX4EurAGCzza9oR0Q1f9qx8nNCqKQk=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:28 UTC	7865	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 39 32 5d 2c 7b 39 32 35 35 31 3a 66 75 6e 63 74 69 6f 6e 28 41 65 2c 4b 2c 6f 29 7b 76 61 72 20 69 3b 41 65 2e 65 78 70 6f 72 74 73 3d 28 69 3d 6f 28 37 33 30 34 39 29 2c 6f 28 33 36 34 36 32 29 2c 6f 28 31 38 39 36 29 2c 6f 28 32 39 36 31 34 29 2c 6f 28 36 36 34 31 37 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 69 2c 43 3d 65 2e 6c 69 62 2e 42 6c 6f 63 6b 43 69 70 68 65 72 2c 68 3d 65 2e 61 6c 67 6f 2c 64 3d 5b 5d 2c 6d 3d 5b 5d 2c 67 3d 5b 5d 2c 6c 3d 5b 5d 2c 75 3d 5b 5d 2c 63 3d 5b 5d 2c 45 3d 5b 5d 2c 44 3d 5b 5d 2c 53 Data Ascii: (self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[792],{92551:function(Ae,K,o){var i;Ae.exports=(i=o(73049),o(36462),o(1896),o(29614),o(66417),function(){var e=i,C=e.lib.BlockCipher,h=e.algo,d=[],m=[],g=[],l=[],u=[],c=[],E=[],D=[],S
2024-12-24 15:05:28 UTC	8192	IN	Data Raw: 31 39 39 38 36 38 34 32 37 2c 31 34 35 32 34 35 34 35 33 33 2c 31 35 37 30 30 37 36 31 36 2c 32 39 30 34 31 31 35 33 35 37 2c 33 34 32 30 31 32 32 37 36 2c 35 39 35 37 32 35 38 32 34 2c 31 34 38 30 37 35 36 35 32 32 2c 32 30 36 39 36 30 31 30 36 2c 34 39 37 39 33 39 35 31 38 2c 35 39 31 33 36 30 30 39 37 2c 38 36 33 31 37 30 37 30 36 2c 32 33 37 35 32 35 33 35 36 39 2c 33 35 39 36 36 31 30 38 30 31 2c 31 38 31 34 31 38 32 38 37 35 2c 32 30 39 34 39 33 37 39 34 35 2c 33 34 32 31 34 30 32 32 30 38 2c 31 30 38 32 35 32 30 32 33 31 2c 33 34 36 33 39 31 38 31 39 30 2c 32 37 38 35 35 30 39 35 30 38 2c 34 33 35 37 30 33 39 36 36 2c 33 39 30 38 30 33 32 35 39 37 2c 31 36 34 31 36 34 39 39 37 33 2c 32 38 34 32 32 37 33 37 30 36 2c 33 33 30 35 38 39 39 37 31 34 2c Data Ascii: 199868427,1452454533,157007616,2904115357,342012276,595725824,1480756522,206960106,497939518,591360097,863170706,2375253569,3596610801,1814182875,2094937945,3421402208,1082520231,3463918190,2785509508,435703966,3908032597,1641649973,2842273706,3305899714,
2024-12-24 15:05:28 UTC	8192	IN	Data Raw: 2c 5a 74 2c 68 6e 29 7d 7d 7d 7d 28 29 7d 29 2c 43 2e 53 74 72 65 61 6d 43 69 70 68 65 72 3d 44 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 46 69 6e 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 70 72 6f 63 65 73 73 28 21 30 29 7d 2c 62 6c 6f 63 6b 53 69 7a 65 3a 31 7d 29 2c 78 3d 76 2e 6d 6f 64 65 3d 7b 7d 2c 59 3d 43 2e 42 6c 6f 63 6b 43 69 70 68 65 72 4d 6f 64 65 3d 68 2e 65 78 74 65 6e 64 28 7b 63 72 65 61 74 65 45 6e 63 72 79 70 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 78 65 2c 75 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 45 6e 63 72 79 70 74 6f 72 2e 63 72 65 61 74 65 28 78 65 2c 75 74 29 7d 2c 63 72 65 61 74 65 44 65 63 72 79 70 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 78 65 2c 75 74 29 7b 72 65 74 75 72 6e 20 74 Data Ascii: ,Zt,hn)}}}}()}),C.StreamCipher=D.extend({_doFinalize:function(){return this._process(!0)},blockSize:1}),x=v.mode={},Y=C.BlockCipherMode=h.extend({createEncryptor:function(xe,ut){return this.Encryptor.create(xe,ut)},createDecryptor:function(xe,ut){return t
2024-12-24 15:05:28 UTC	8192	IN	Data Raw: 64 65 41 74 28 44 29 5d 3e 3e 3e 36 2d 44 25 34 2a 32 3b 63 5b 45 3e 3e 3e 32 5d 7c 3d 28 53 7c 78 29 3c 3c 32 34 2d 45 25 34 2a 38 2c 45 2b 2b 7d 72 65 74 75 72 6e 20 43 2e 63 72 65 61 74 65 28 63 2c 45 29 7d 28 67 2c 6c 2c 63 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 69 2e 65 6e 63 2e 42 61 73 65 36 34 29 7d 2c 33 33 35 37 37 3a 66 75 6e 63 74 69 6f 6e 28 41 65 2c 4b 2c 6f 29 7b 76 61 72 20 69 2c 43 3b 41 65 2e 65 78 70 6f 72 74 73 3d 28 69 3d 6f 28 37 33 30 34 39 29 2c 43 3d 69 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 69 2e 65 6e 63 2e 42 61 73 65 36 34 75 72 6c Data Ascii: deAt(D)]>>>6-D%42;c[E>>>2]\|=(S\|x)<<24-E%48,E++}return C.create(c,E)}(g,l,c)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},i.enc.Base64)},33577:function(Ae,K,o){var i,C;Ae.exports=(i=o(73049),C=i.lib.WordArray,i.enc.Base64url
2024-12-24 15:05:28 UTC	8192	IN	Data Raw: 2b 2b 29 43 5b 68 2b 75 5d 5e 3d 67 5b 75 5d 7d 72 65 74 75 72 6e 20 65 2e 45 6e 63 72 79 70 74 6f 72 3d 65 2e 65 78 74 65 6e 64 28 7b 70 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 43 2c 68 29 7b 76 61 72 20 64 3d 74 68 69 73 2e 5f 63 69 70 68 65 72 2c 6d 3d 64 2e 62 6c 6f 63 6b 53 69 7a 65 3b 76 2e 63 61 6c 6c 28 74 68 69 73 2c 43 2c 68 2c 6d 2c 64 29 2c 74 68 69 73 2e 5f 70 72 65 76 42 6c 6f 63 6b 3d 43 2e 73 6c 69 63 65 28 68 2c 68 2b 6d 29 7d 7d 29 2c 65 2e 44 65 63 72 79 70 74 6f 72 3d 65 2e 65 78 74 65 6e 64 28 7b 70 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 43 2c 68 29 7b 76 61 72 20 64 3d 74 68 69 73 2e 5f 63 69 70 68 65 72 2c 6d 3d 64 2e 62 6c 6f 63 6b 53 69 7a 65 2c 67 3d 43 2e 73 6c 69 63 65 28 68 2c 68 Data Ascii: ++)C[h+u]^=g[u]}return e.Encryptor=e.extend({processBlock:function(C,h){var d=this._cipher,m=d.blockSize;v.call(this,C,h,m,d),this._prevBlock=C.slice(h,h+m)}}),e.Decryptor=e.extend({processBlock:function(C,h){var d=this._cipher,m=d.blockSize,g=C.slice(h,h
2024-12-24 15:05:28 UTC	8192	IN	Data Raw: 7c 30 2c 63 5b 36 5d 3d 67 5b 36 5d 2b 28 67 5b 35 5d 3c 3c 31 36 7c 67 5b 35 5d 3e 3e 3e 31 36 29 2b 28 67 5b 34 5d 3c 3c 31 36 7c 67 5b 34 5d 3e 3e 3e 31 36 29 7c 30 2c 63 5b 37 5d 3d 67 5b 37 5d 2b 28 67 5b 36 5d 3c 3c 38 7c 67 5b 36 5d 3e 3e 3e 32 34 29 2b 67 5b 35 5d 7c 30 7d 65 2e 52 61 62 62 69 74 3d 43 2e 5f 63 72 65 61 74 65 48 65 6c 70 65 72 28 6c 29 7d 28 29 2c 69 2e 52 61 62 62 69 74 29 7d 2c 36 32 31 33 3a 66 75 6e 63 74 69 6f 6e 28 41 65 2c 4b 2c 6f 29 7b 76 61 72 20 69 3b 41 65 2e 65 78 70 6f 72 74 73 3d 28 69 3d 6f 28 37 33 30 34 39 29 2c 6f 28 33 36 34 36 32 29 2c 6f 28 31 38 39 36 29 2c 6f 28 32 39 36 31 34 29 2c 6f 28 36 36 34 31 37 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 69 2c 43 3d 65 2e 6c 69 62 2e 53 74 72 65 61 6d Data Ascii: \|0,c[6]=g[6]+(g[5]<<16\|g[5]>>>16)+(g[4]<<16\|g[4]>>>16)\|0,c[7]=g[7]+(g[6]<<8\|g[6]>>>24)+g[5]\|0}e.Rabbit=C._createHelper(l)}(),i.Rabbit)},6213:function(Ae,K,o){var i;Ae.exports=(i=o(73049),o(36462),o(1896),o(29614),o(66417),function(){var e=i,C=e.lib.Stream
2024-12-24 15:05:28 UTC	8192	IN	Data Raw: 77 2c 7a 65 3d 30 3b 7a 65 3c 35 3b 7a 65 2b 2b 29 66 6f 72 28 47 65 3d 30 3b 47 65 3c 35 3b 47 65 2b 2b 29 7b 76 61 72 20 64 74 3d 44 5b 67 6e 3d 7a 65 2b 35 2a 47 65 5d 2c 71 65 3d 44 5b 28 7a 65 2b 31 29 25 35 2b 35 2a 47 65 5d 2c 41 74 3d 44 5b 28 7a 65 2b 32 29 25 35 2b 35 2a 47 65 5d 3b 28 70 65 3d 55 5b 67 6e 5d 29 2e 68 69 67 68 3d 64 74 2e 68 69 67 68 5e 7e 71 65 2e 68 69 67 68 26 41 74 2e 68 69 67 68 2c 70 65 2e 6c 6f 77 3d 64 74 2e 6c 6f 77 5e 7e 71 65 2e 6c 6f 77 26 41 74 2e 6c 6f 77 7d 76 61 72 20 70 65 2c 5f 74 3d 45 5b 51 5d 3b 28 70 65 3d 55 5b 30 5d 29 2e 68 69 67 68 5e 3d 5f 74 2e 68 69 67 68 2c 70 65 2e 6c 6f 77 5e 3d 5f 74 2e 6c 6f 77 7d 7d 2c 5f 64 6f 46 69 6e 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 78 3d 74 68 Data Ascii: w,ze=0;ze<5;ze++)for(Ge=0;Ge<5;Ge++){var dt=D[gn=ze+5Ge],qe=D[(ze+1)%5+5Ge],At=D[(ze+2)%5+5*Ge];(pe=U[gn]).high=dt.high^~qe.high&At.high,pe.low=dt.low^~qe.low&At.low}var pe,_t=E[Q];(pe=U[0]).high^=_t.high,pe.low^=_t.low}},_doFinalize:function(){var x=th
2024-12-24 15:05:28 UTC	8192	IN	Data Raw: 34 30 3a 31 30 37 34 32 36 36 31 31 32 2c 38 33 38 38 36 30 38 3a 31 30 37 33 37 35 38 32 30 38 2c 32 35 31 36 35 38 32 34 3a 35 34 30 36 38 38 2c 34 31 39 34 33 30 34 30 3a 31 36 2c 35 38 37 32 30 32 35 36 3a 31 30 37 33 37 35 38 32 32 34 2c 37 35 34 39 37 34 37 32 3a 31 30 37 34 32 38 32 35 31 32 2c 39 32 32 37 34 36 38 38 3a 31 30 37 33 37 34 31 38 32 34 2c 31 30 39 30 35 31 39 30 34 3a 35 32 34 32 38 38 2c 31 32 35 38 32 39 31 32 30 3a 31 30 37 34 32 36 36 31 32 38 2c 31 34 32 36 30 36 33 33 36 3a 35 32 34 33 30 34 2c 31 35 39 33 38 33 35 35 32 3a 30 2c 31 37 36 31 36 30 37 36 38 3a 31 36 33 38 34 2c 31 39 32 39 33 37 39 38 34 3a 31 30 37 34 32 36 36 31 31 32 2c 32 30 39 37 31 35 32 30 30 3a 31 30 37 33 37 34 31 38 34 30 2c 32 32 36 34 39 32 34 31 36 Data Ascii: 40:1074266112,8388608:1073758208,25165824:540688,41943040:16,58720256:1073758224,75497472:1074282512,92274688:1073741824,109051904:524288,125829120:1074266128,142606336:524304,159383552:0,176160768:16384,192937984:1074266112,209715200:1073741840,226492416
2024-12-24 15:05:28 UTC	8192	IN	Data Raw: 6f 6e 28 59 2c 55 29 7b 74 68 69 73 2e 5f 64 65 73 31 2e 65 6e 63 72 79 70 74 42 6c 6f 63 6b 28 59 2c 55 29 2c 74 68 69 73 2e 5f 64 65 73 32 2e 64 65 63 72 79 70 74 42 6c 6f 63 6b 28 59 2c 55 29 2c 74 68 69 73 2e 5f 64 65 73 33 2e 65 6e 63 72 79 70 74 42 6c 6f 63 6b 28 59 2c 55 29 7d 2c 64 65 63 72 79 70 74 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 59 2c 55 29 7b 74 68 69 73 2e 5f 64 65 73 33 2e 64 65 63 72 79 70 74 42 6c 6f 63 6b 28 59 2c 55 29 2c 74 68 69 73 2e 5f 64 65 73 32 2e 65 6e 63 72 79 70 74 42 6c 6f 63 6b 28 59 2c 55 29 2c 74 68 69 73 2e 5f 64 65 73 31 2e 64 65 63 72 79 70 74 42 6c 6f 63 6b 28 59 2c 55 29 7d 2c 6b 65 79 53 69 7a 65 3a 36 2c 69 76 53 69 7a 65 3a 32 2c 62 6c 6f 63 6b 53 69 7a 65 3a 32 7d 29 3b 65 2e 54 72 69 70 6c 65 44 45 53 Data Ascii: on(Y,U){this._des1.encryptBlock(Y,U),this._des2.decryptBlock(Y,U),this._des3.encryptBlock(Y,U)},decryptBlock:function(Y,U){this._des3.decryptBlock(Y,U),this._des2.encryptBlock(Y,U),this._des1.decryptBlock(Y,U)},keySize:6,ivSize:2,blockSize:2});e.TripleDES
2024-12-24 15:05:28 UTC	8192	IN	Data Raw: 47 65 29 29 3b 76 61 72 20 5a 74 3d 43 28 59 2e 68 65 69 67 68 74 29 3b 72 65 74 75 72 6e 21 31 21 3d 3d 5a 74 26 26 28 55 2e 68 65 69 67 68 74 3d 5a 74 2b 28 75 74 3f 30 3a 7a 65 2b 78 65 29 29 2c 55 2e 69 6e 6e 65 72 57 69 64 74 68 3d 55 2e 77 69 64 74 68 2d 28 51 2b 47 65 29 2c 55 2e 69 6e 6e 65 72 48 65 69 67 68 74 3d 55 2e 68 65 69 67 68 74 2d 28 7a 65 2b 78 65 29 2c 55 2e 6f 75 74 65 72 57 69 64 74 68 3d 55 2e 77 69 64 74 68 2b 52 65 2c 55 2e 6f 75 74 65 72 48 65 69 67 68 74 3d 55 2e 68 65 69 67 68 74 2b 43 65 2c 55 7d 7d 72 65 74 75 72 6e 20 53 7d 29 3f 69 2e 63 61 6c 6c 28 4b 2c 6f 2c 4b 2c 41 65 29 3a 69 29 26 26 28 41 65 2e 65 78 70 6f 72 74 73 3d 65 29 7d 2c 31 37 39 33 39 3a 66 75 6e 63 74 69 6f 6e 28 41 65 2c 4b 2c 6f 29 7b 76 61 72 20 69 2c Data Ascii: Ge));var Zt=C(Y.height);return!1!==Zt&&(U.height=Zt+(ut?0:ze+xe)),U.innerWidth=U.width-(Q+Ge),U.innerHeight=U.height-(ze+xe),U.outerWidth=U.width+Re,U.outerHeight=U.height+Ce,U}}return S})?i.call(K,o,K,Ae):i)&&(Ae.exports=e)},17939:function(Ae,K,o){var i,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49942	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:28 UTC	991	OUT	GET /phhm/webapi/config HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 x-mobile-source-id: f8993cdb-ad1f-4769-87fa-1efc51d76f3a User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://account.mortgagequestions.com/phhm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!Yai7AtxGTfp4K0Jcon1a7F8IKKxzc/GeP/u3xKy513MbASx/fYIqCZhzLERxsV6l6dpkz5rVVBPfzTc=
2024-12-24 15:05:28 UTC	1515	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:28 GMT vary: Origin,Accept-Encoding,Access-Control-Request-Method,Access-Control-Request-Headers x-led-message-id: 923545de-c87e-3788-e6f4-f67902bb6e1a etag: "3407605836" cache-control: no-cache, no-store, must-revalidate x-content-type-options: nosniff x-xss-protection: 0 strict-transport-security: max-age=16070400; includeSubDomains x-frame-options: SAMEORIGIN content-type: application/json content-length: 589 access-control-allow-origin: access-control-allow-headers: origin, x-requested-with, accept, content-type, Authorization, x-correlation-id, x-mobile-source-id, x-mfa-source-id, x-mspstandin,x-brand-identifier, x-mfa-process-id, x-mfa-device-token access-control-expose-headers: x-correlation-id, x-mobile-source-id, x-mfa-source-id, x-mspstandin, x-brand-identifier, x-mfa-process-id, x-mfa-device-token access-control-max-age: 3628800 access-control-allow-methods: GET, PUT, POST, DELETE x-correlation-id: content-security-policy: frame-ancestors 'self' expires: 0 pragma: no-cache x-request-id: d8e93ad8-de49-4d90-889c-c403a8729388 Via: 1.1 jtclsdrwapp.prodinternal.site Via: 1.1 account.mortgagequestions.com Connection: close Set-Cookie: bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:28 UTC	589	IN	Data Raw: 7b 22 53 69 74 65 4e 61 6d 65 22 3a 22 70 68 68 6d 22 2c 22 41 75 74 68 4d 6f 64 65 22 3a 22 66 6f 72 6d 22 2c 22 42 72 61 6e 64 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 44 65 62 75 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 46 61 74 61 6c 45 72 72 6f 72 55 72 6c 22 3a 22 22 2c 22 48 6f 6d 65 55 72 6c 22 3a 22 22 2c 22 49 64 6c 65 43 6f 75 6e 74 64 6f 77 6e 53 65 63 73 22 3a 36 30 2c 22 49 64 6c 65 54 69 6d 65 6f 75 74 53 65 63 73 22 3a 33 34 30 2c 22 4b 65 65 70 41 6c 69 76 65 43 61 63 68 65 42 75 73 74 65 72 22 3a 66 61 6c 73 65 2c 22 4b 65 65 70 41 6c 69 76 65 53 65 63 73 22 3a 33 36 30 2c 22 4b 65 65 70 41 6c 69 76 65 54 79 70 65 22 3a 22 69 6d 67 22 2c 22 4b 65 65 70 41 6c 69 76 65 55 72 6c 22 3a 22 22 2c 22 4c 6f 67 6f 75 74 55 Data Ascii: {"SiteName":"phhm","AuthMode":"form","BrandIdentifier":null,"DebugEnabled":false,"FatalErrorUrl":"","HomeUrl":"","IdleCountdownSecs":60,"IdleTimeoutSecs":340,"KeepAliveCacheBuster":false,"KeepAliveSecs":360,"KeepAliveType":"img","KeepAliveUrl":"","LogoutU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49943	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:28 UTC	982	OUT	GET /phhm/favicon.ico HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.mortgagequestions.com/phhm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!Yai7AtxGTfp4K0Jcon1a7F8IKKxzc/GeP/u3xKy513MbASx/fYIqCZhzLERxsV6l6dpkz5rVVBPfzTc=
2024-12-24 15:05:28 UTC	727	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:28 GMT Last-Modified: Wed, 19 Jul 2023 20:50:14 GMT ETag: "19339-600dd2da7ad80;627163211dd23" Accept-Ranges: bytes Content-Length: 103225 Content-Type: image/vnd.microsoft.icon Strict-Transport-Security: max-age=16070400; includeSubDomains Via: 1.1 account.mortgagequestions.com X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Connection: close Set-Cookie: bkfs1=!nWs9Efzz1+TzKc1con1a7F8IKKxzc7Jy3dg5y5ZPK/AtRXmOOImoPKGH1oAkxBzVj1AWk1ZZzg+rjnY=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:28 UTC	7888	IN	Data Raw: 00 00 01 00 06 00 00 00 00 00 01 00 20 00 cb 0d 00 00 66 00 00 00 80 80 00 00 01 00 20 00 28 08 01 00 31 0e 00 00 40 40 00 00 01 00 20 00 28 42 00 00 59 16 01 00 30 30 00 00 01 00 20 00 a8 25 00 00 81 58 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 29 7e 01 00 10 10 00 00 01 00 20 00 68 04 00 00 d1 8e 01 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 10 06 00 00 00 0c e2 74 25 00 00 0d 92 49 44 41 54 78 da ed dd fd 8f 50 d5 9d 07 e0 73 07 01 41 57 51 6a 2b a0 a1 56 ab a0 6e 7d 5f 74 98 62 41 a8 b5 d6 6d ad 02 6a 82 05 54 d4 40 11 95 a1 80 9d e9 00 62 81 52 c5 06 d0 a8 a8 15 d6 15 b4 a2 b8 69 53 a1 55 61 10 b1 be 40 03 8a 2e be b4 2a 6b 85 5d 8d 18 56 1d 66 ee fe 01 bb 5b 93 73 32 bd 4e cf f3 fc fe b9 f7 9c 6f 66 26 1f 4e 72 0f 21 Data Ascii: f (1@@ (BY00 %X )~ hPNGIHDRt%IDATxPsAWQj+Vn}_tbAmjT@bRiSUa@.*k]Vf[s2Nof&Nr!
2024-12-24 15:05:28 UTC	8000	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-12-24 15:05:28 UTC	8000	IN	Data Raw: 00 00 00 00 00 00 00 00 00 c2 7a 00 19 c2 7a 00 19 c2 7a 00 19 c2 7a 00 19 c3 7c 00 6f c3 7c 00 6f c3 7c 00 6f c3 7c 00 6f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c5 7e 00 61 c5 7e 00 61 c5 7e 00 61 c5 7e 00 61 c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 b1 c4 7d 00 b1 c4 7d 00 b1 c4 7d 00 b1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: zzzz\|o\|o\|o\|o~a~a~a~a}}}}}}}}}}}}}}}}
2024-12-24 15:05:28 UTC	8000	IN	Data Raw: ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 fa c4 7d 00 fa c4 7d 00 fa c4 7d 00 fa c4 7e 00 8a c4 7e 00 8a c4 7e 00 8a c4 7e 00 8a c4 7b 00 34 c4 7b 00 34 c4 7b 00 34 c4 7b 00 34 c2 80 00 2e c2 80 00 2e c2 80 00 2e c2 80 00 2e c3 7d 00 bc c3 7d 00 bc c3 7d 00 bc c3 7d 00 bc c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c2 7d 00 3f c2 7d 00 3f c2 7d 00 3f c2 7d 00 3f 00 00 00 00 00 00 Data Ascii: }}}}}}}}}}}}}}}}}}}}}}~~~~{4{4{4{4....}}}}}}}}}}}}}}}}}}}}}}}}}?}?}?}?
2024-12-24 15:05:28 UTC	8192	IN	Data Raw: ff c4 7d 00 ff c4 7d 00 ff c5 7d 00 b3 c5 7d 00 b3 c5 7d 00 b3 c5 7d 00 b3 c3 7e 00 c5 c3 7e 00 c5 c3 7e 00 c5 c3 7e 00 c5 c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 d9 c4 7d 00 d9 c4 7d 00 d9 c4 7d 00 d9 c5 7d 00 99 c5 7d 00 99 c5 7d 00 99 c5 7d 00 99 c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7c 00 67 c4 7c Data Ascii: }}}}}}~~~~}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}\|g\|
2024-12-24 15:05:29 UTC	7808	IN	Data Raw: ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ec c4 7d 00 ec c4 7d 00 ec c4 7d 00 ec bf 80 00 14 bf 80 00 14 bf 80 00 14 bf 80 00 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bf 80 00 04 bf 80 00 04 bf 80 00 04 bf 80 00 04 c4 7c 00 cf c4 7c 00 cf c4 7c 00 cf c4 7c 00 cf c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 fa c4 7d 00 fa c4 7d 00 fa c4 7d 00 fa c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d Data Ascii: }}}}}}}}}}}}}}\|\|\|\|}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}}
2024-12-24 15:05:29 UTC	8000	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-12-24 15:05:29 UTC	8192	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 a2 74 0b 46 a2 74 0b 46 a2 74 0b 46 a2 74 0b 51 a7 72 77 51 a7 72 77 51 a7 72 77 51 a7 72 77 51 a8 72 ef 51 a8 72 ef 51 a8 72 ef 51 a8 72 ef 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 Data Ascii: FtFtFtFtQrwQrwQrwQrwQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQ
2024-12-24 15:05:29 UTC	7808	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-12-24 15:05:29 UTC	8000	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49950	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:30 UTC	729	OUT	GET /phhm/webapi/config HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
2024-12-24 15:05:30 UTC	1515	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:30 GMT vary: Origin,Accept-Encoding,Access-Control-Request-Method,Access-Control-Request-Headers x-led-message-id: 4d366029-aef2-6556-284f-9a4c4c756656 etag: "3407605836" cache-control: no-cache, no-store, must-revalidate x-content-type-options: nosniff x-xss-protection: 0 strict-transport-security: max-age=16070400; includeSubDomains x-frame-options: SAMEORIGIN content-type: application/json content-length: 589 access-control-allow-origin: access-control-allow-headers: origin, x-requested-with, accept, content-type, Authorization, x-correlation-id, x-mobile-source-id, x-mfa-source-id, x-mspstandin,x-brand-identifier, x-mfa-process-id, x-mfa-device-token access-control-expose-headers: x-correlation-id, x-mobile-source-id, x-mfa-source-id, x-mspstandin, x-brand-identifier, x-mfa-process-id, x-mfa-device-token access-control-max-age: 3628800 access-control-allow-methods: GET, PUT, POST, DELETE x-correlation-id: content-security-policy: frame-ancestors 'self' expires: 0 pragma: no-cache x-request-id: c24a3311-6fd8-49f2-9255-5e12fdb38aaa Via: 1.1 jtclsdrwapp.prodinternal.site Via: 1.1 account.mortgagequestions.com Connection: close Set-Cookie: bkfs1=!7JYSFpLwp+RPVQxcon1a7F8IKKxzc+LCQLZhZVFjqF9wjwXE7+T2JDv8g80trgFWsLzfHr3cLlMAoe4=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:30 UTC	589	IN	Data Raw: 7b 22 53 69 74 65 4e 61 6d 65 22 3a 22 70 68 68 6d 22 2c 22 41 75 74 68 4d 6f 64 65 22 3a 22 66 6f 72 6d 22 2c 22 42 72 61 6e 64 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 44 65 62 75 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 46 61 74 61 6c 45 72 72 6f 72 55 72 6c 22 3a 22 22 2c 22 48 6f 6d 65 55 72 6c 22 3a 22 22 2c 22 49 64 6c 65 43 6f 75 6e 74 64 6f 77 6e 53 65 63 73 22 3a 36 30 2c 22 49 64 6c 65 54 69 6d 65 6f 75 74 53 65 63 73 22 3a 33 34 30 2c 22 4b 65 65 70 41 6c 69 76 65 43 61 63 68 65 42 75 73 74 65 72 22 3a 66 61 6c 73 65 2c 22 4b 65 65 70 41 6c 69 76 65 53 65 63 73 22 3a 33 36 30 2c 22 4b 65 65 70 41 6c 69 76 65 54 79 70 65 22 3a 22 69 6d 67 22 2c 22 4b 65 65 70 41 6c 69 76 65 55 72 6c 22 3a 22 22 2c 22 4c 6f 67 6f 75 74 55 Data Ascii: {"SiteName":"phhm","AuthMode":"form","BrandIdentifier":null,"DebugEnabled":false,"FatalErrorUrl":"","HomeUrl":"","IdleCountdownSecs":60,"IdleTimeoutSecs":340,"KeepAliveCacheBuster":false,"KeepAliveSecs":360,"KeepAliveType":"img","KeepAliveUrl":"","LogoutU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49952	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:30 UTC	977	OUT	GET /phhm/10.bf367f9955f02ef0.js HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.mortgagequestions.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.mortgagequestions.com/phhm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
2024-12-24 15:05:30 UTC	746	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:30 GMT Last-Modified: Mon, 11 Nov 2024 21:19:34 GMT ETag: "9aa2-626a9a83a8580;627163211dd23" Accept-Ranges: bytes Content-Length: 39586 Vary: Accept-Encoding Content-Type: application/javascript Strict-Transport-Security: max-age=16070400; includeSubDomains Via: 1.1 account.mortgagequestions.com X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Connection: close Set-Cookie: bkfs1=!ktGqtQAHTNHr6h5con1a7F8IKKxzczIz/3ze9pbuuCHwJ/UwPvIcHOQKFhBbWd/kJyK209u54iAsVrc=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:30 UTC	7870	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 30 5d 2c 7b 32 31 33 32 32 3a 28 68 2c 79 2c 75 29 3d 3e 7b 75 2e 64 28 79 2c 7b 6c 3a 28 29 3d 3e 55 74 7d 29 3b 76 61 72 20 6d 3d 75 28 35 30 31 38 37 29 2c 74 3d 75 28 32 33 32 37 39 29 2c 6c 3d 75 28 35 36 36 31 30 29 2c 70 3d 75 28 31 30 35 32 34 29 2c 64 3d 75 28 35 30 32 31 33 29 2c 5f 3d 75 28 32 32 30 39 38 29 2c 67 3d 75 28 37 36 30 39 38 29 2c 73 3d 75 28 36 36 35 36 36 29 3b 63 6f 6e 73 74 20 46 3d 65 3d 3e 28 7b 24 69 6d 70 6c 69 63 69 74 3a 65 2c 69 73 43 75 72 72 65 6e 74 44 72 61 66 Data Ascii: "use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[10],{21322:(h,y,u)=>{u.d(y,{l:()=>Ut});var m=u(50187),t=u(23279),l=u(56610),p=u(10524),d=u(50213),_=u(22098),g=u(76098),s=u(66566);const F=e=>({$implicit:e,isCurrentDraf
2024-12-24 15:05:30 UTC	8192	IN	Data Raw: 6f 70 61 79 20 63 61 6e 6e 6f 74 20 62 65 20 6d 6f 64 69 66 69 65 64 20 61 74 20 74 68 69 73 20 74 69 6d 65 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 73 75 70 70 6f 72 74 20 66 6f 72 20 61 73 73 69 73 74 61 6e 63 65 3a 20 3c 62 72 2f 3e 20 24 7b 74 68 69 73 2e 70 68 6f 6e 65 50 69 70 65 2e 74 72 61 6e 73 66 6f 72 6d 28 74 68 69 73 2e 63 6f 6d 70 61 6e 79 49 6e 66 6f 2e 70 68 6f 6e 65 4e 75 6d 62 65 72 33 29 7d 60 3b 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 70 75 73 68 28 74 68 69 73 2e 64 6f 6d 53 61 6e 69 74 69 7a 65 72 2e 62 79 70 61 73 73 53 65 63 75 72 69 74 79 54 72 75 73 74 48 74 6d 6c 28 6f 29 29 3b 63 6f 6e 73 74 20 61 3d 6e 3f 2e 45 6c 69 67 69 62 69 6c 69 74 79 49 73 73 75 65 73 3f 2e 66 69 6e 64 28 44 3d 3e 22 44 45 4c 49 4e 51 55 45 Data Ascii: opay cannot be modified at this time. Please contact support for assistance: <br/> ${this.phonePipe.transform(this.companyInfo.phoneNumber3)}`;this.messages.push(this.domSanitizer.bypassSecurityTrustHtml(o));const a=n?.EligibilityIssues?.find(D=>"DELINQUE
2024-12-24 15:05:30 UTC	8192	IN	Data Raw: 28 35 2c 22 73 70 61 6e 22 2c 32 38 29 2c 74 2e 45 46 46 28 36 29 2c 74 2e 6e 49 31 28 37 2c 22 64 61 74 65 22 29 2c 74 2e 6b 30 73 28 29 28 29 28 29 29 2c 32 26 65 29 7b 63 6f 6e 73 74 20 6e 3d 74 2e 58 70 47 28 32 29 3b 74 2e 52 37 24 28 36 29 2c 74 2e 4a 52 68 28 74 2e 69 35 55 28 37 2c 31 2c 6e 75 6c 6c 3d 3d 6e 2e 6c 6f 61 6e 44 61 74 61 3f 6e 75 6c 6c 3a 6e 2e 6c 6f 61 6e 44 61 74 61 2e 4e 65 78 74 50 61 79 6d 65 6e 74 44 75 65 44 61 74 65 2c 22 4d 4d 4d 4d 20 64 64 2c 20 79 22 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 65 2c 69 29 7b 69 66 28 31 26 65 26 26 28 74 2e 6a 34 31 28 30 2c 22 64 69 76 22 2c 32 35 29 28 31 2c 22 64 69 76 22 2c 32 36 29 28 32 2c 22 73 70 61 6e 22 29 2c 74 2e 45 46 46 28 33 2c 22 4e 65 78 74 20 44 72 61 66 74 20 44 61 Data Ascii: (5,"span",28),t.EFF(6),t.nI1(7,"date"),t.k0s()()()),2&e){const n=t.XpG(2);t.R7$(6),t.JRh(t.i5U(7,1,null==n.loanData?null:n.loanData.NextPaymentDueDate,"MMMM dd, y"))}}function ct(e,i){if(1&e&&(t.j41(0,"div",25)(1,"div",26)(2,"span"),t.EFF(3,"Next Draft Da
2024-12-24 15:05:30 UTC	8192	IN	Data Raw: 6c 6c 3d 3d 6e 2e 64 72 61 66 74 3f 6e 75 6c 6c 3a 6e 2e 64 72 61 66 74 2e 41 64 64 69 74 69 6f 6e 61 6c 50 72 69 6e 63 69 70 61 6c 41 6d 6f 75 6e 74 2c 22 55 53 44 22 2c 22 73 79 6d 62 6f 6c 22 2c 22 31 2e 32 2d 32 22 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 74 28 65 2c 69 29 7b 69 66 28 31 26 65 26 26 28 74 2e 6a 34 31 28 30 2c 22 64 69 76 22 2c 32 35 29 28 31 2c 22 64 69 76 22 2c 32 37 29 28 32 2c 22 73 70 61 6e 22 29 2c 74 2e 45 46 46 28 33 2c 22 54 6f 74 61 6c 20 50 61 79 6d 65 6e 74 3a 22 29 2c 74 2e 6b 30 73 28 29 28 29 2c 74 2e 6a 34 31 28 34 2c 22 64 69 76 22 2c 32 37 29 28 35 2c 22 73 70 61 6e 22 29 2c 74 2e 45 46 46 28 36 29 2c 74 2e 6e 49 31 28 37 2c 22 63 75 72 72 65 6e 63 79 22 29 2c 74 2e 6b 30 73 28 29 28 29 28 29 29 2c 32 26 65 29 7b 63 Data Ascii: ll==n.draft?null:n.draft.AdditionalPrincipalAmount,"USD","symbol","1.2-2"))}}function kt(e,i){if(1&e&&(t.j41(0,"div",25)(1,"div",27)(2,"span"),t.EFF(3,"Total Payment:"),t.k0s()(),t.j41(4,"div",27)(5,"span"),t.EFF(6),t.nI1(7,"currency"),t.k0s()()()),2&e){c
2024-12-24 15:05:30 UTC	7140	IN	Data Raw: 6e 71 75 65 6e 74 2d 70 61 79 6d 65 6e 74 2d 6d 65 73 73 61 67 65 22 2c 22 6d 74 2d 33 22 5d 2c 5b 31 2c 22 63 6f 6c 2d 31 22 5d 2c 5b 22 61 72 69 61 2d 6c 61 62 65 6c 22 2c 22 61 6c 65 72 74 20 69 63 6f 6e 22 2c 22 72 6f 6c 65 22 2c 22 69 6d 67 22 2c 31 2c 22 66 61 73 22 2c 22 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 22 2c 22 61 6c 65 72 74 54 65 78 74 22 5d 2c 5b 31 2c 22 63 6f 6c 2d 31 31 22 2c 32 2c 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 2c 22 32 39 70 78 22 5d 2c 5b 31 2c 22 72 6f 77 22 2c 22 6d 74 2d 33 22 5d 2c 5b 22 68 72 65 66 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 76 6f 69 64 28 30 29 22 2c 31 2c 22 63 61 72 64 2d 6c 69 6e 6b 22 2c 33 2c 22 63 6c 69 63 6b 22 5d 2c 5b 31 2c 22 66 6f 6f 74 65 72 22 5d 2c 5b 31 Data Ascii: nquent-payment-message","mt-3"],[1,"col-1"],["aria-label","alert icon","role","img",1,"fas","fa-exclamation-triangle","alertText"],[1,"col-11",2,"padding-right","29px"],[1,"row","mt-3"],["href","javascript:void(0)",1,"card-link",3,"click"],[1,"footer"],[1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49954	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:30 UTC	977	OUT	GET /phhm/67.4b11134a3977a2e1.js HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.mortgagequestions.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.mortgagequestions.com/phhm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
2024-12-24 15:05:30 UTC	746	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:30 GMT Last-Modified: Mon, 11 Nov 2024 21:19:34 GMT ETag: "5bd3-626a9a83a8580;6271632116c33" Accept-Ranges: bytes Content-Length: 23507 Vary: Accept-Encoding Content-Type: application/javascript Strict-Transport-Security: max-age=16070400; includeSubDomains Via: 1.1 account.mortgagequestions.com X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Connection: close Set-Cookie: bkfs1=!GcanMYTAhhp8dxFcon1a7F8IKKxzc9ywbVeNLqd38aW5HZJGsa7HmO1/9tidG4owWMiZokugIWEwXqk=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:30 UTC	7869	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 37 5d 2c 7b 36 30 36 36 32 3a 28 46 2c 5f 2c 72 29 3d 3e 7b 72 2e 64 28 5f 2c 7b 48 3a 28 29 3d 3e 72 74 7d 29 3b 76 61 72 20 76 3d 72 28 35 30 31 38 37 29 2c 79 3d 72 28 35 38 30 38 32 29 2c 64 3d 72 28 35 30 32 31 33 29 2c 62 3d 72 28 35 34 31 35 33 29 2c 74 3d 72 28 32 33 32 37 39 29 2c 66 3d 72 28 37 36 30 39 38 29 2c 56 3d 72 28 38 36 34 38 32 29 3b 6c 65 74 20 75 3d 28 28 29 3d 3e 7b 63 6c 61 73 73 20 61 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 6f 2c 69 29 7b 74 68 69 73 2e 73 61 6e 69 74 Data Ascii: "use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[67],{60662:(F,_,r)=>{r.d(_,{H:()=>rt});var v=r(50187),y=r(58082),d=r(50213),b=r(54153),t=r(23279),f=r(76098),V=r(86482);let u=(()=>{class a{constructor(e,o,i){this.sanit
2024-12-24 15:05:30 UTC	8192	IN	Data Raw: 74 68 22 2c 68 65 69 67 68 74 3a 22 68 65 69 67 68 74 22 2c 76 65 6e 64 6f 72 4e 61 6d 65 3a 22 76 65 6e 64 6f 72 4e 61 6d 65 22 7d 2c 66 65 61 74 75 72 65 73 3a 5b 74 2e 56 74 33 2c 74 2e 4f 41 24 5d 2c 64 65 63 6c 73 3a 32 34 2c 76 61 72 73 3a 31 35 2c 63 6f 6e 73 74 73 3a 5b 5b 22 63 68 61 72 74 53 74 79 6c 65 44 69 76 22 2c 22 22 5d 2c 5b 22 63 6f 6e 74 61 69 6e 65 72 22 2c 22 22 5d 2c 5b 22 68 6f 6d 65 4f 76 65 72 6c 61 79 22 2c 22 22 5d 2c 5b 22 65 73 74 69 6d 61 74 65 64 56 61 6c 75 65 43 68 61 72 74 22 2c 22 22 5d 2c 5b 31 2c 22 68 6f 6d 65 56 61 6c 75 65 43 68 61 72 74 22 5d 2c 5b 22 69 64 22 2c 22 65 73 74 69 6d 61 74 65 64 48 6f 6d 65 47 72 61 70 68 44 65 74 61 69 6c 73 22 2c 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 22 74 72 75 65 22 2c 31 2c Data Ascii: th",height:"height",vendorName:"vendorName"},features:[t.Vt3,t.OA$],decls:24,vars:15,consts:[["chartStyleDiv",""],["container",""],["homeOverlay",""],["estimatedValueChart",""],[1,"homeValueChart"],["id","estimatedHomeGraphDetails","aria-hidden","true",1,
2024-12-24 15:05:30 UTC	7446	IN	Data Raw: 73 41 76 6d 56 61 6c 75 61 74 69 6f 6e 45 6e 61 62 6c 65 64 3d 74 68 69 73 2e 63 6f 6e 66 69 67 53 65 72 76 69 63 65 2e 69 73 46 65 61 74 75 72 65 45 6e 61 62 6c 65 64 28 22 41 56 4d 22 29 2c 74 68 69 73 2e 69 73 41 76 6d 56 61 6c 75 61 74 69 6f 6e 45 6e 61 62 6c 65 64 26 26 28 74 68 69 73 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2e 70 75 73 68 28 74 68 69 73 2e 69 73 54 69 6c 65 49 6e 56 69 65 77 70 6f 72 74 2e 73 75 62 73 63 72 69 62 65 28 65 3d 3e 7b 74 68 69 73 2e 73 65 61 72 63 68 46 6f 72 41 76 6d 52 65 70 6f 72 74 28 21 30 3d 3d 3d 65 29 7d 29 29 2c 74 68 69 73 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2e 70 75 73 68 28 74 68 69 73 2e 70 72 6f 70 65 72 74 79 53 65 72 76 69 63 65 2e 61 76 6d 52 65 70 6f 72 74 52 65 73 70 6f 6e 73 65 2e 73 75 62 73 Data Ascii: sAvmValuationEnabled=this.configService.isFeatureEnabled("AVM"),this.isAvmValuationEnabled&&(this.subscriptions.push(this.isTileInViewport.subscribe(e=>{this.searchForAvmReport(!0===e)})),this.subscriptions.push(this.propertyService.avmReportResponse.subs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49955	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:30 UTC	978	OUT	GET /phhm/204.60b4a89c5008cd37.js HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.mortgagequestions.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.mortgagequestions.com/phhm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
2024-12-24 15:05:30 UTC	746	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:30 GMT Last-Modified: Mon, 11 Nov 2024 21:19:34 GMT ETag: "f91f-626a9a83a8580;62716321154ba" Accept-Ranges: bytes Content-Length: 63775 Vary: Accept-Encoding Content-Type: application/javascript Strict-Transport-Security: max-age=16070400; includeSubDomains Via: 1.1 account.mortgagequestions.com X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Connection: close Set-Cookie: bkfs1=!ediF/N5I+T8XFLRcon1a7F8IKKxzc6MFdQwRy+X3JHiV3nJPG9Oivw2iVaZn/5bof+9ZXVrzFDexTYI=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:30 UTC	7869	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 30 34 5d 2c 7b 35 38 33 37 36 3a 28 6a 2c 68 2c 6f 29 3d 3e 7b 6f 2e 64 28 68 2c 7b 59 3a 28 29 3d 3e 6b 7d 29 3b 76 61 72 20 63 3d 6f 28 35 30 31 38 37 29 2c 72 3d 6f 28 32 33 32 37 39 29 2c 76 3d 6f 28 35 36 36 31 30 29 2c 49 3d 6f 28 36 33 38 35 34 29 3b 66 75 6e 63 74 69 6f 6e 20 64 28 74 2c 79 29 7b 69 66 28 31 26 74 26 26 28 72 2e 6a 34 31 28 30 2c 22 73 70 61 6e 22 2c 38 29 2c 72 2e 45 46 46 28 31 29 2c 72 2e 6e 49 31 28 32 2c 22 63 75 72 72 65 6e 63 79 22 29 2c 72 2e 6b 30 73 28 29 29 2c 32 Data Ascii: "use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[204],{58376:(j,h,o)=>{o.d(h,{Y:()=>k});var c=o(50187),r=o(23279),v=o(56610),I=o(63854);function d(t,y){if(1&t&&(r.j41(0,"span",8),r.EFF(1),r.nI1(2,"currency"),r.k0s()),2
2024-12-24 15:05:30 UTC	8192	IN	Data Raw: 5b 22 62 6b 69 2d 64 61 73 68 62 6f 61 72 64 2d 68 6f 6d 65 63 61 72 65 2d 6d 76 70 22 5d 5d 2c 66 65 61 74 75 72 65 73 3a 5b 74 2e 56 74 33 5d 2c 64 65 63 6c 73 3a 33 2c 76 61 72 73 3a 32 2c 63 6f 6e 73 74 73 3a 5b 5b 22 62 75 73 79 22 2c 22 22 5d 2c 5b 22 63 6c 61 73 73 22 2c 22 63 61 72 64 5f 5f 63 6f 6e 74 65 6e 74 22 2c 34 2c 22 6e 67 49 66 22 2c 22 6e 67 49 66 45 6c 73 65 22 5d 2c 5b 31 2c 22 63 61 72 64 5f 5f 63 6f 6e 74 65 6e 74 22 5d 2c 5b 31 2c 22 77 72 61 70 70 65 72 22 5d 2c 5b 22 74 61 62 69 6e 64 65 78 22 2c 22 30 22 5d 2c 5b 31 2c 22 74 69 74 6c 65 2d 64 69 76 69 64 65 72 32 22 5d 2c 5b 31 2c 22 6d 74 2d 32 22 2c 22 6d 62 2d 34 22 5d 2c 5b 22 74 61 62 69 6e 64 65 78 22 2c 22 30 22 2c 22 72 6f 6c 65 22 2c 22 70 61 72 61 67 72 61 70 68 22 2c Data Ascii: ["bki-dashboard-homecare-mvp"]],features:[t.Vt3],decls:3,vars:2,consts:[["busy",""],["class","card__content",4,"ngIf","ngIfElse"],[1,"card__content"],[1,"wrapper"],["tabindex","0"],[1,"title-divider2"],[1,"mt-2","mb-4"],["tabindex","0","role","paragraph",
2024-12-24 15:05:30 UTC	8192	IN	Data Raw: 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 6e 2c 73 29 7b 31 26 6e 26 26 28 74 2e 6a 34 31 28 30 2c 22 64 69 76 22 29 2c 74 2e 6e 72 6d 28 31 2c 22 62 6b 69 2d 64 61 73 68 62 6f 61 72 64 2d 74 61 69 6c 6f 72 65 64 2d 67 6f 61 6c 73 22 29 2c 74 2e 6b 30 73 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 74 28 6e 2c 73 29 7b 31 26 6e 26 26 28 74 2e 6a 34 31 28 30 2c 22 64 69 76 22 2c 32 29 2c 74 2e 6e 72 6d 28 31 2c 22 69 6d 67 22 2c 33 29 2c 74 2e 6b 30 73 28 29 29 7d 6c 65 74 20 69 74 3d 28 28 29 3d 3e 7b 63 6c 61 73 73 20 6e 20 65 78 74 65 6e 64 73 20 75 2e 5a 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 61 29 7b 73 75 70 65 72 28 65 29 2c 74 68 69 73 2e 69 6e 6a 65 63 74 6f 72 3d 65 2c 74 68 69 73 2e 67 6f 61 6c 53 65 72 76 69 63 65 3d 61 7d 6e 67 4f 6e Data Ascii: ())}function nt(n,s){1&n&&(t.j41(0,"div"),t.nrm(1,"bki-dashboard-tailored-goals"),t.k0s())}function at(n,s){1&n&&(t.j41(0,"div",2),t.nrm(1,"img",3),t.k0s())}let it=(()=>{class n extends u.Z{constructor(e,a){super(e),this.injector=e,this.goalService=a}ngOn
2024-12-24 15:05:30 UTC	8192	IN	Data Raw: 69 73 45 6e 72 6f 6c 6c 65 64 49 6e 41 75 74 6f 70 61 79 29 2c 74 2e 52 37 24 28 29 2c 74 2e 59 38 47 28 22 6e 67 49 66 22 2c 21 65 2e 69 73 52 65 70 61 79 6d 65 6e 74 50 6c 61 6e 41 63 74 69 76 65 26 26 28 65 2e 69 73 43 72 65 61 74 65 41 75 74 6f 70 61 79 41 6c 6c 6f 77 65 64 7c 7c 65 2e 69 73 43 68 61 6e 67 65 41 75 74 6f 70 61 79 41 6c 6c 6f 77 65 64 29 29 2c 74 2e 52 37 24 28 29 2c 74 2e 59 38 47 28 22 6e 67 49 66 22 2c 65 2e 63 61 6e 43 61 6e 63 65 6c 41 75 74 6f 64 72 61 66 74 4f 6e 6c 79 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 74 28 6e 2c 73 29 7b 69 66 28 31 26 6e 26 26 28 74 2e 6a 34 31 28 30 2c 22 64 69 76 22 29 2c 74 2e 45 46 46 28 31 2c 22 20 69 73 20 64 75 65 20 6f 6e 20 22 29 2c 74 2e 6a 34 31 28 32 2c 22 73 70 61 6e 22 2c 33 30 29 2c 74 2e Data Ascii: isEnrolledInAutopay),t.R7$(),t.Y8G("ngIf",!e.isRepaymentPlanActive&&(e.isCreateAutopayAllowed\|\|e.isChangeAutopayAllowed)),t.R7$(),t.Y8G("ngIf",e.canCancelAutodraftOnly)}}function Ft(n,s){if(1&n&&(t.j41(0,"div"),t.EFF(1," is due on "),t.j41(2,"span",30),t.
2024-12-24 15:05:30 UTC	8192	IN	Data Raw: 61 72 64 2d 70 61 79 6d 65 6e 74 22 5d 5d 2c 66 65 61 74 75 72 65 73 3a 5b 74 2e 56 74 33 5d 2c 64 65 63 6c 73 3a 33 2c 76 61 72 73 3a 32 2c 63 6f 6e 73 74 73 3a 5b 5b 22 70 61 79 6d 65 6e 74 22 2c 22 22 5d 2c 5b 22 62 75 73 79 22 2c 22 22 5d 2c 5b 22 6e 6f 73 63 68 65 64 70 6d 74 22 2c 22 22 5d 2c 5b 34 2c 22 6e 67 49 66 22 2c 22 6e 67 49 66 45 6c 73 65 22 5d 2c 5b 33 2c 22 69 73 44 61 73 68 62 6f 61 72 64 22 5d 2c 5b 22 63 6c 61 73 73 22 2c 22 63 61 72 64 5f 5f 63 6f 6e 74 65 6e 74 22 2c 34 2c 22 6e 67 49 66 22 2c 22 6e 67 49 66 45 6c 73 65 22 5d 2c 5b 31 2c 22 63 61 72 64 5f 5f 63 6f 6e 74 65 6e 74 22 5d 2c 5b 31 2c 22 77 72 61 70 70 65 72 22 5d 2c 5b 31 2c 22 72 6f 77 22 5d 2c 5b 31 2c 22 63 6f 6c 2d 36 22 5d 2c 5b 34 2c 22 6e 67 49 66 22 5d 2c 5b 22 Data Ascii: ard-payment"]],features:[t.Vt3],decls:3,vars:2,consts:[["payment",""],["busy",""],["noschedpmt",""],[4,"ngIf","ngIfElse"],[3,"isDashboard"],["class","card__content",4,"ngIf","ngIfElse"],[1,"card__content"],[1,"wrapper"],[1,"row"],[1,"col-6"],[4,"ngIf"],["
2024-12-24 15:05:30 UTC	8192	IN	Data Raw: 61 70 70 65 72 22 5d 2c 5b 33 2c 22 69 6e 6e 65 72 48 54 4d 4c 22 5d 2c 5b 31 2c 22 74 69 74 6c 65 2d 64 69 76 69 64 65 72 32 22 5d 2c 5b 31 2c 22 63 6f 6c 22 2c 22 61 6e 73 77 65 72 22 5d 2c 5b 31 2c 22 72 6f 77 22 2c 22 64 65 6c 69 6e 71 75 65 6e 74 2d 70 61 79 6d 65 6e 74 2d 6d 65 73 73 61 67 65 22 5d 2c 5b 31 2c 22 63 6f 6c 2d 31 22 2c 32 2c 22 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 22 2c 22 74 6f 70 22 2c 22 6d 61 72 67 69 6e 22 2c 22 30 70 78 20 2d 31 30 70 78 20 30 70 78 20 35 70 78 22 5d 2c 5b 22 72 6f 6c 65 22 2c 22 69 6d 67 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 2c 22 61 6c 65 72 74 20 69 63 6f 6e 22 2c 31 2c 22 66 61 73 22 2c 22 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 22 2c 22 61 6c 65 72 74 54 65 78 74 22 5d Data Ascii: apper"],[3,"innerHTML"],[1,"title-divider2"],[1,"col","answer"],[1,"row","delinquent-payment-message"],[1,"col-1",2,"vertical-align","top","margin","0px -10px 0px 5px"],["role","img","aria-label","alert icon",1,"fas","fa-exclamation-triangle","alertText"]
2024-12-24 15:05:30 UTC	8192	IN	Data Raw: 28 32 2c 22 52 65 71 75 65 73 74 20 70 6c 61 6e 20 65 78 74 65 6e 73 69 6f 6e 22 29 2c 74 2e 6b 30 73 28 29 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 65 28 6e 2c 73 29 7b 69 66 28 31 26 6e 29 7b 63 6f 6e 73 74 20 65 3d 74 2e 52 56 36 28 29 3b 74 2e 6a 34 31 28 30 2c 22 64 69 76 22 2c 31 37 29 28 31 2c 22 62 75 74 74 6f 6e 22 2c 31 38 29 2c 74 2e 62 49 74 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 65 42 56 28 65 29 3b 63 6f 6e 73 74 20 69 3d 74 2e 58 70 47 28 29 3b 72 65 74 75 72 6e 20 74 2e 4e 6a 6a 28 69 2e 73 65 65 52 65 71 75 65 73 74 44 65 74 61 69 6c 73 28 29 29 7d 29 2c 74 2e 45 46 46 28 32 2c 22 53 65 65 20 64 65 74 61 69 6c 73 20 6f 66 20 6d 79 20 70 6c 61 6e 22 29 2c 74 2e 6b 30 73 28 29 28 29 7d 7d 66 75 6e 63 74 69 6f 6e Data Ascii: (2,"Request plan extension"),t.k0s()()}}function ve(n,s){if(1&n){const e=t.RV6();t.j41(0,"div",17)(1,"button",18),t.bIt("click",function(){t.eBV(e);const i=t.XpG();return t.Njj(i.seeRequestDetails())}),t.EFF(2,"See details of my plan"),t.k0s()()}}function
2024-12-24 15:05:31 UTC	6754	IN	Data Raw: 53 65 72 76 69 63 65 2e 73 65 6c 65 63 74 65 64 4c 6f 61 6e 2e 50 72 6f 70 65 72 74 79 41 64 64 72 65 73 73 2e 53 74 61 74 65 43 6f 64 65 3b 65 26 26 28 74 68 69 73 2e 63 6f 6e 74 65 6e 74 3d 74 68 69 73 2e 61 70 69 57 72 61 70 70 65 72 53 65 72 76 69 63 65 2e 67 65 74 46 65 61 74 75 72 65 43 6f 6e 74 65 6e 74 46 72 6f 6d 4c 6f 61 6e 44 61 74 61 53 65 63 74 69 6f 6e 28 22 53 54 53 50 43 44 49 53 43 4c 22 2c 22 53 54 53 50 43 44 49 53 43 4c 5f 22 2b 65 29 2c 74 68 69 73 2e 63 6f 6e 74 65 6e 74 7c 7c 28 74 68 69 73 2e 63 6f 6e 74 65 6e 74 3d 74 68 69 73 2e 61 70 69 57 72 61 70 70 65 72 53 65 72 76 69 63 65 2e 67 65 74 46 65 61 74 75 72 65 43 6f 6e 74 65 6e 74 46 72 6f 6d 4c 6f 61 6e 44 61 74 61 53 65 63 74 69 6f 6e 28 22 53 54 53 50 43 44 49 53 43 4c 22 2c Data Ascii: Service.selectedLoan.PropertyAddress.StateCode;e&&(this.content=this.apiWrapperService.getFeatureContentFromLoanDataSection("STSPCDISCL","STSPCDISCL_"+e),this.content\|\|(this.content=this.apiWrapperService.getFeatureContentFromLoanDataSection("STSPCDISCL",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49956	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:30 UTC	978	OUT	GET /phhm/136.aedaf5153678dc31.js HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.mortgagequestions.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.mortgagequestions.com/phhm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
2024-12-24 15:05:30 UTC	746	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:30 GMT Last-Modified: Mon, 11 Nov 2024 21:19:34 GMT ETag: "2eec-626a9a83a8580;627163211565e" Accept-Ranges: bytes Content-Length: 12012 Vary: Accept-Encoding Content-Type: application/javascript Strict-Transport-Security: max-age=16070400; includeSubDomains Via: 1.1 account.mortgagequestions.com X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Connection: close Set-Cookie: bkfs1=!2YSJB15Qw1YdJHJcon1a7F8IKKxzc/Y07lWKX1lXGqf+arZvtNMDNi7nYnUsqSY1mSIUSHGfPvr99Gs=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:30 UTC	12012	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 33 36 2c 39 39 37 5d 2c 7b 36 33 38 35 34 3a 28 76 2c 63 2c 6c 29 3d 3e 7b 6c 2e 64 28 63 2c 7b 52 3a 28 29 3d 3e 6d 7d 29 3b 76 61 72 20 61 3d 6c 28 32 33 32 37 39 29 2c 73 3d 6c 28 35 30 31 38 37 29 2c 74 3d 6c 28 38 34 36 39 32 29 2c 75 3d 6c 28 34 38 30 35 29 3b 63 6f 6e 73 74 20 5f 3d 5b 22 6d 61 70 45 6c 65 6d 65 6e 74 22 5d 2c 64 3d 5b 22 6d 61 70 4d 61 72 6b 65 72 44 69 76 22 5d 2c 66 3d 5b 22 6d 61 70 4d 61 72 6b 65 72 48 6f 6d 65 44 69 76 22 5d 2c 67 3d 5b 22 6d 61 70 4d 61 72 6b 65 72 48 Data Ascii: "use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[136,997],{63854:(v,c,l)=>{l.d(c,{R:()=>m});var a=l(23279),s=l(50187),t=l(84692),u=l(4805);const _=["mapElement"],d=["mapMarkerDiv"],f=["mapMarkerHomeDiv"],g=["mapMarkerH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49953	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:30 UTC	978	OUT	GET /phhm/651.b7fb59c28e478c09.js HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.mortgagequestions.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.mortgagequestions.com/phhm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
2024-12-24 15:05:30 UTC	747	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:30 GMT Last-Modified: Mon, 11 Nov 2024 21:19:34 GMT ETag: "1150b-626a9a83a8580;627163211562d" Accept-Ranges: bytes Content-Length: 70923 Vary: Accept-Encoding Content-Type: application/javascript Strict-Transport-Security: max-age=16070400; includeSubDomains Via: 1.1 account.mortgagequestions.com X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Connection: close Set-Cookie: bkfs1=!/Kfkn8NUsP4Lfbtcon1a7F8IKKxzc6cBMTUx1DrJykJofCeolmPwT1T5UpjRlc8g/dNyhSHpXE1QOSY=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:30 UTC	7869	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 35 31 5d 2c 7b 33 36 36 35 31 3a 66 75 6e 63 74 69 6f 6e 28 6a 6e 2c 6d 74 2c 41 69 29 7b 76 61 72 20 51 65 3b 6a 6e 3d 41 69 2e 6e 6d 64 28 6a 6e 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 2c 73 6e 3d 22 45 78 70 65 63 74 65 64 20 61 20 66 75 6e 63 74 69 6f 6e 22 2c 6b 65 3d 22 5f 5f 6c 6f 64 61 73 68 5f 68 61 73 68 5f 75 6e 64 65 66 69 6e 65 64 5f 5f 22 2c 6e 65 3d 22 5f 5f 6c 6f 64 61 73 68 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 5f 22 2c 74 74 3d 31 2f 30 2c 71 6e 3d 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 2c 43 6e Data Ascii: (self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[651],{36651:function(jn,mt,Ai){var Qe;jn=Ai.nmd(jn),function(){var o,sn="Expected a function",ke="__lodash_hash_undefined__",ne="__lodash_placeholder__",tt=1/0,qn=9007199254740991,Cn
2024-12-24 15:05:30 UTC	8192	IN	Data Raw: 63 22 2c 5c 75 30 31 30 62 3a 22 63 22 2c 5c 75 30 31 30 64 3a 22 63 22 2c 5c 75 30 31 30 65 3a 22 44 22 2c 5c 75 30 31 31 30 3a 22 44 22 2c 5c 75 30 31 30 66 3a 22 64 22 2c 5c 75 30 31 31 31 3a 22 64 22 2c 5c 75 30 31 31 32 3a 22 45 22 2c 5c 75 30 31 31 34 3a 22 45 22 2c 5c 75 30 31 31 36 3a 22 45 22 2c 5c 75 30 31 31 38 3a 22 45 22 2c 5c 75 30 31 31 61 3a 22 45 22 2c 5c 75 30 31 31 33 3a 22 65 22 2c 5c 75 30 31 31 35 3a 22 65 22 2c 5c 75 30 31 31 37 3a 22 65 22 2c 5c 75 30 31 31 39 3a 22 65 22 2c 5c 75 30 31 31 62 3a 22 65 22 2c 5c 75 30 31 31 63 3a 22 47 22 2c 5c 75 30 31 31 65 3a 22 47 22 2c 5c 75 30 31 32 30 3a 22 47 22 2c 5c 75 30 31 32 32 3a 22 47 22 2c 5c 75 30 31 31 64 3a 22 67 22 2c 5c 75 30 31 31 66 3a 22 67 22 2c 5c 75 30 31 32 31 3a 22 67 22 Data Ascii: c",\u010b:"c",\u010d:"c",\u010e:"D",\u0110:"D",\u010f:"d",\u0111:"d",\u0112:"E",\u0114:"E",\u0116:"E",\u0118:"E",\u011a:"E",\u0113:"e",\u0115:"e",\u0117:"e",\u0119:"e",\u011b:"e",\u011c:"G",\u011e:"G",\u0120:"G",\u0122:"G",\u011d:"g",\u011f:"g",\u0121:"g"
2024-12-24 15:05:30 UTC	8192	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 45 73 28 29 7b 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 3d 5b 5d 2c 74 68 69 73 2e 73 69 7a 65 3d 30 7d 2c 50 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 20 54 73 28 6e 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 2c 65 3d 79 65 28 74 2c 6e 29 3b 72 65 74 75 72 6e 21 28 65 3c 30 7c 7c 28 65 3d 3d 74 2e 6c 65 6e 67 74 68 2d 31 3f 74 2e 70 6f 70 28 29 3a 52 65 2e 63 61 6c 6c 28 74 2c 65 2c 31 29 2c 2d 2d 74 68 69 73 2e 73 69 7a 65 2c 30 29 29 7d 2c 50 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 20 4c 73 28 6e 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 2c 65 3d 79 65 28 74 2c 6e 29 3b 72 65 74 75 72 6e 20 65 3c 30 3f 6f 3a 74 5b 65 5d Data Ascii: unction Es(){this.__data__=[],this.size=0},Pn.prototype.delete=function Ts(n){var t=this.__data__,e=ye(t,n);return!(e<0\|\|(e==t.length-1?t.pop():Re.call(t,e,1),--this.size,0))},Pn.prototype.get=function Ls(n){var t=this.__data__,e=ye(t,n);return e<0?o:t[e]
2024-12-24 15:05:30 UTC	8192	IN	Data Raw: 69 29 2c 69 3d 74 3e 65 3f 30 3a 65 2d 74 3e 3e 3e 30 2c 74 3e 3e 3e 3d 30 3b 66 6f 72 28 76 61 72 20 66 3d 68 28 69 29 3b 2b 2b 72 3c 69 3b 29 66 5b 72 5d 3d 6e 5b 72 2b 74 5d 3b 72 65 74 75 72 6e 20 66 7d 66 75 6e 63 74 69 6f 6e 20 5f 61 28 6e 2c 74 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 58 6e 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 69 2c 66 29 7b 72 65 74 75 72 6e 21 28 65 3d 74 28 72 2c 69 2c 66 29 29 7d 29 2c 21 21 65 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 6e 2c 74 2c 65 29 7b 76 61 72 20 72 3d 30 2c 69 3d 6e 75 6c 6c 3d 3d 6e 3f 72 3a 6e 2e 6c 65 6e 67 74 68 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 3d 3d 74 26 26 69 3c 3d 32 31 34 37 34 38 33 36 34 37 29 7b 66 6f 72 28 3b 72 3c 69 3b 29 7b 76 61 72 20 66 3d Data Ascii: i),i=t>e?0:e-t>>>0,t>>>=0;for(var f=h(i);++r<i;)f[r]=n[r+t];return f}function _a(n,t){var e;return Xn(n,function(r,i,f){return!(e=t(r,i,f))}),!!e}function be(n,t,e){var r=0,i=null==n?r:n.length;if("number"==typeof t&&t==t&&i<=2147483647){for(;r<i;){var f=
2024-12-24 15:05:30 UTC	8192	IN	Data Raw: 73 29 2c 31 32 38 26 72 26 26 28 6e 5b 38 5d 3d 6e 75 6c 6c 3d 3d 6e 5b 38 5d 3f 74 5b 38 5d 3a 59 28 6e 5b 38 5d 2c 74 5b 38 5d 29 29 2c 6e 75 6c 6c 3d 3d 6e 5b 39 5d 26 26 28 6e 5b 39 5d 3d 74 5b 39 5d 29 2c 6e 5b 30 5d 3d 74 5b 30 5d 2c 6e 5b 31 5d 3d 69 7d 28 78 2c 64 29 2c 6e 3d 78 5b 30 5d 2c 74 3d 78 5b 31 5d 2c 65 3d 78 5b 32 5d 2c 72 3d 78 5b 33 5d 2c 69 3d 78 5b 34 5d 2c 21 28 73 3d 78 5b 39 5d 3d 78 5b 39 5d 3d 3d 3d 6f 3f 63 3f 30 3a 6e 2e 6c 65 6e 67 74 68 3a 71 28 78 5b 39 5d 2d 5f 2c 30 29 29 26 26 32 34 26 74 26 26 28 74 26 3d 2d 32 35 29 2c 74 26 26 31 21 3d 74 29 52 3d 38 3d 3d 74 7c 7c 31 36 3d 3d 74 3f 66 75 6e 63 74 69 6f 6e 20 53 61 28 6e 2c 74 2c 65 29 7b 76 61 72 20 72 3d 51 74 28 6e 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f Data Ascii: s),128&r&&(n[8]=null==n[8]?t[8]:Y(n[8],t[8])),null==n[9]&&(n[9]=t[9]),n[0]=t[0],n[1]=i}(x,d),n=x[0],t=x[1],e=x[2],r=x[3],i=x[4],!(s=x[9]=x[9]===o?c?0:n.length:q(x[9]-_,0))&&24&t&&(t&=-25),t&&1!=t)R=8==t\|\|16==t?function Sa(n,t,e){var r=Qt(n);return functio
2024-12-24 15:05:30 UTC	8192	IN	Data Raw: 6e 2c 74 2c 65 29 7b 50 2e 63 61 6c 6c 28 6e 2c 65 29 3f 6e 5b 65 5d 2e 70 75 73 68 28 74 29 3a 46 6e 28 6e 2c 65 2c 5b 74 5d 29 7d 29 2c 63 68 3d 43 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 76 61 72 20 72 3d 2d 31 2c 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2c 66 3d 6a 28 6e 29 3f 68 28 6e 2e 6c 65 6e 67 74 68 29 3a 5b 5d 3b 72 65 74 75 72 6e 20 58 6e 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 66 5b 2b 2b 72 5d 3d 69 3f 65 6e 28 74 2c 6c 2c 65 29 3a 59 74 28 6c 2c 74 2c 65 29 7d 29 2c 66 7d 29 2c 68 68 3d 42 65 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 46 6e 28 6e 2c 65 2c 74 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 71 65 28 6e 2c 74 29 7b 72 65 74 75 72 6e 28 45 28 6e 29 3f 55 3a 50 75 29 28 6e 2c 41 28 74 2c Data Ascii: n,t,e){P.call(n,e)?n[e].push(t):Fn(n,e,[t])}),ch=C(function(n,t,e){var r=-1,i="function"==typeof t,f=j(n)?h(n.length):[];return Xn(n,function(l){f[++r]=i?en(t,l,e):Yt(l,t,e)}),f}),hh=Be(function(n,t,e){Fn(n,e,t)});function qe(n,t){return(E(n)?U:Pu)(n,A(t,
2024-12-24 15:05:30 UTC	8192	IN	Data Raw: 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 64 69 28 29 7b 7d 76 61 72 20 4f 5f 3d 58 72 28 55 29 2c 57 5f 3d 58 72 28 72 75 29 2c 62 5f 3d 58 72 28 78 72 29 3b 66 75 6e 63 74 69 6f 6e 20 74 6c 28 6e 29 7b 72 65 74 75 72 6e 20 74 69 28 6e 29 3f 41 72 28 4f 6e 28 6e 29 29 3a 66 75 6e 63 74 69 6f 6e 20 6f 61 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 74 28 74 2c 6e 29 7d 7d 28 6e 29 7d 76 61 72 20 42 5f 3d 75 66 28 29 2c 46 5f 3d 75 66 28 21 30 29 3b 66 75 6e 63 74 69 6f 6e 20 77 69 28 29 7b 72 65 74 75 72 6e 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 78 69 28 29 7b 72 65 74 75 72 6e 21 31 7d 76 61 72 20 4b 5f 3d 4d 65 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 2b 74 7d 2c 30 29 Data Ascii: ))})}),n}function di(){}var O_=Xr(U),W_=Xr(ru),b_=Xr(xr);function tl(n){return ti(n)?Ar(On(n)):function oa(n){return function(t){return ft(t,n)}}(n)}var B_=uf(),F_=uf(!0);function wi(){return[]}function xi(){return!1}var K_=Me(function(n,t){return n+t},0)
2024-12-24 15:05:31 UTC	8192	IN	Data Raw: 74 2c 24 28 74 29 29 7d 2c 75 2e 64 65 62 75 72 72 3d 6b 66 2c 75 2e 64 65 66 61 75 6c 74 54 6f 3d 66 75 6e 63 74 69 6f 6e 20 52 5f 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 21 3d 6e 3f 74 3a 6e 7d 2c 75 2e 64 69 76 69 64 65 3d 24 5f 2c 75 2e 65 6e 64 73 57 69 74 68 3d 66 75 6e 63 74 69 6f 6e 20 59 67 28 6e 2c 74 2c 65 29 7b 6e 3d 62 28 6e 29 2c 74 3d 75 6e 28 74 29 3b 76 61 72 20 72 3d 6e 2e 6c 65 6e 67 74 68 2c 69 3d 65 3d 65 3d 3d 3d 6f 3f 72 3a 75 74 28 54 28 65 29 2c 30 2c 72 29 3b 72 65 74 75 72 6e 28 65 2d 3d 74 2e 6c 65 6e 67 74 68 29 3e 3d 30 26 26 6e 2e 73 6c 69 63 65 28 65 2c 69 29 3d 3d 74 7d 2c 75 2e 65 71 3d 53 6e 2c 75 2e 65 73 63 61 70 65 3d 66 75 6e 63 74 69 6f 6e 20 58 67 28 6e 29 7b 72 65 74 75 72 6e 28 6e 3d Data Ascii: t,$(t))},u.deburr=kf,u.defaultTo=function R_(n,t){return null==n\|\|n!=n?t:n},u.divide=$_,u.endsWith=function Yg(n,t,e){n=b(n),t=un(t);var r=n.length,i=e=e===o?r:ut(T(e),0,r);return(e-=t.length)>=0&&n.slice(e,i)==t},u.eq=Sn,u.escape=function Xg(n){return(n=
2024-12-24 15:05:31 UTC	5710	IN	Data Raw: 74 29 7b 76 61 72 20 65 3d 33 30 2c 72 3d 22 2e 2e 2e 22 3b 69 66 28 44 28 74 29 29 7b 76 61 72 20 69 3d 22 73 65 70 61 72 61 74 6f 72 22 69 6e 20 74 3f 74 2e 73 65 70 61 72 61 74 6f 72 3a 69 3b 65 3d 22 6c 65 6e 67 74 68 22 69 6e 20 74 3f 54 28 74 2e 6c 65 6e 67 74 68 29 3a 65 2c 72 3d 22 6f 6d 69 73 73 69 6f 6e 22 69 6e 20 74 3f 75 6e 28 74 2e 6f 6d 69 73 73 69 6f 6e 29 3a 72 7d 76 61 72 20 66 3d 28 6e 3d 62 28 6e 29 29 2e 6c 65 6e 67 74 68 3b 69 66 28 77 74 28 6e 29 29 7b 76 61 72 20 6c 3d 52 6e 28 6e 29 3b 66 3d 6c 2e 6c 65 6e 67 74 68 7d 69 66 28 65 3e 3d 66 29 72 65 74 75 72 6e 20 6e 3b 76 61 72 20 73 3d 65 2d 78 74 28 72 29 3b 69 66 28 73 3c 31 29 72 65 74 75 72 6e 20 72 3b 76 61 72 20 63 3d 6c 3f 56 6e 28 6c 2c 30 2c 73 29 2e 6a 6f 69 6e 28 22 22 Data Ascii: t){var e=30,r="...";if(D(t)){var i="separator"in t?t.separator:i;e="length"in t?T(t.length):e,r="omission"in t?un(t.omission):r}var f=(n=b(n)).length;if(wt(n)){var l=Rn(n);f=l.length}if(e>=f)return n;var s=e-xt(r);if(s<1)return r;var c=l?Vn(l,0,s).join(""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49957	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:30 UTC	978	OUT	GET /phhm/474.a445087bc18f6527.js HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.mortgagequestions.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.mortgagequestions.com/phhm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
2024-12-24 15:05:31 UTC	746	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:31 GMT Last-Modified: Mon, 11 Nov 2024 21:19:34 GMT ETag: "a6be-626a9a83a8580;62716321154ba" Accept-Ranges: bytes Content-Length: 42686 Vary: Accept-Encoding Content-Type: application/javascript Strict-Transport-Security: max-age=16070400; includeSubDomains Via: 1.1 account.mortgagequestions.com X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Connection: close Set-Cookie: bkfs1=!YKKjhT5C64Vigg9con1a7F8IKKxzc8kr6ojOjTW0jqR9w5DuqlqYDq+68bp4Tavh9KaJJCMYuUsE1gQ=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:31 UTC	15638	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 34 5d 2c 7b 38 31 39 32 37 3a 28 53 2c 49 2c 64 29 3d 3e 7b 64 2e 64 28 49 2c 7b 79 3a 28 29 3d 3e 79 7d 29 3b 76 61 72 20 73 3d 64 28 38 36 34 38 32 29 2c 44 3d 64 28 39 33 34 37 33 29 2c 6b 3d 64 28 31 33 37 31 33 29 2c 62 3d 64 28 35 30 32 31 33 29 2c 5f 3d 64 28 32 33 32 37 39 29 2c 43 3d 64 28 36 31 34 38 30 29 2c 78 3d 64 28 35 36 36 31 30 29 2c 65 3d 64 28 37 32 32 32 31 29 2c 52 3d 64 28 38 34 39 39 33 29 3b 63 6f 6e 73 74 20 41 3d 5b 22 6d 61 69 6e 43 6f 6e 74 65 6e 74 22 5d 3b 66 75 6e Data Ascii: "use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[474],{81927:(S,I,d)=>{d.d(I,{y:()=>y});var s=d(86482),D=d(93473),k=d(13713),b=d(50213),_=d(23279),C=d(61480),x=d(56610),e=d(72221),R=d(84993);const A=["mainContent"];fun
2024-12-24 15:05:31 UTC	8615	IN	Data Raw: 49 63 6f 6e 73 28 74 2e 4e 61 6d 65 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 65 28 69 2c 61 29 7b 69 66 28 31 26 69 26 26 28 65 2e 6a 34 31 28 30 2c 22 74 61 62 6c 65 22 2c 32 36 29 28 31 2c 22 74 62 6f 64 79 22 29 2c 65 2e 44 4e 45 28 32 2c 44 65 2c 31 39 2c 36 2c 22 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 22 2c 32 37 29 2c 65 2e 6b 30 73 28 29 28 29 29 2c 32 26 69 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 58 70 47 28 32 29 3b 65 2e 52 37 24 28 32 29 2c 65 2e 59 38 47 28 22 6e 67 46 6f 72 4f 66 22 2c 74 2e 63 6f 6d 70 6c 65 74 65 44 6f 63 73 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 69 2c 61 29 7b 69 66 28 31 26 69 26 26 28 65 2e 6a 34 31 28 30 2c 22 64 69 76 22 2c 31 39 29 2c 65 2e 44 4e 45 28 31 2c 4d 65 2c 33 2c 31 2c 22 74 61 62 6c 65 22 2c 36 36 29 2c 65 Data Ascii: Icons(t.Name))}}function Me(i,a){if(1&i&&(e.j41(0,"table",26)(1,"tbody"),e.DNE(2,De,19,6,"ng-container",27),e.k0s()()),2&i){const t=e.XpG(2);e.R7$(2),e.Y8G("ngForOf",t.completeDocs)}}function be(i,a){if(1&i&&(e.j41(0,"div",19),e.DNE(1,Me,3,1,"table",66),e
2024-12-24 15:05:31 UTC	8192	IN	Data Raw: 65 72 72 6f 72 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 69 73 42 75 73 79 3d 21 30 3b 6c 65 74 20 74 3d 7b 7d 3b 69 66 28 74 68 69 73 2e 73 65 6c 65 63 74 65 64 44 6f 63 73 26 26 74 68 69 73 2e 73 65 6c 65 63 74 65 64 44 6f 63 73 2e 6c 65 6e 67 74 68 3e 30 29 66 6f 72 28 6c 65 74 20 75 20 6f 66 20 74 68 69 73 2e 73 65 6c 65 63 74 65 64 44 6f 63 73 29 7b 6c 65 74 20 46 3d 7b 7d 3b 46 2e 44 6f 63 75 6d 65 6e 74 4e 61 6d 65 3d 75 2e 4e 61 6d 65 2c 74 68 69 73 2e 72 6d 61 44 6f 63 75 6d 65 6e 74 4e 61 6d 65 73 2e 70 75 73 68 28 46 29 7d 74 2e 52 4d 41 44 6f 63 75 6d 65 6e 74 4e 61 6d 65 73 3d 74 68 69 73 2e 72 6d 61 44 6f 63 75 6d 65 6e 74 4e 61 6d 65 73 2c 74 2e 52 4d 41 44 6f 63 75 6d 65 6e 74 73 3d 74 68 69 73 2e 72 6d 61 44 6f 63 75 6d 65 6e 74 73 3b 63 6f Data Ascii: error=void 0,this.isBusy=!0;let t={};if(this.selectedDocs&&this.selectedDocs.length>0)for(let u of this.selectedDocs){let F={};F.DocumentName=u.Name,this.rmaDocumentNames.push(F)}t.RMADocumentNames=this.rmaDocumentNames,t.RMADocuments=this.rmaDocuments;co
2024-12-24 15:05:31 UTC	8192	IN	Data Raw: 47 65 2c 31 2c 30 2c 22 62 6b 69 2d 62 75 73 79 2d 69 6e 64 69 63 61 74 6f 72 22 2c 31 36 29 7d 69 66 28 32 26 6e 29 7b 63 6f 6e 73 74 20 63 3d 65 2e 73 64 53 28 31 32 29 2c 75 3d 65 2e 73 64 53 28 31 36 29 3b 65 2e 52 37 24 28 29 2c 65 2e 59 38 47 28 22 6e 67 49 66 22 2c 6f 2e 69 73 54 68 61 6e 6b 59 6f 75 29 2c 65 2e 52 37 24 28 32 29 2c 65 2e 59 38 47 28 22 6e 67 49 66 22 2c 21 6f 2e 69 73 54 68 61 6e 6b 59 6f 75 29 2c 65 2e 52 37 24 28 29 2c 65 2e 59 38 47 28 22 6e 67 49 66 22 2c 21 6f 2e 69 73 54 68 61 6e 6b 59 6f 75 29 2c 65 2e 52 37 24 28 33 29 2c 65 2e 59 38 47 28 22 6e 67 49 66 22 2c 21 6f 2e 69 73 56 69 65 77 41 6c 6c 29 2c 65 2e 52 37 24 28 33 29 2c 65 2e 59 38 47 28 22 6e 67 49 66 22 2c 6f 2e 69 73 4d 6f 62 69 6c 65 44 65 76 69 63 65 26 26 6f Data Ascii: Ge,1,0,"bki-busy-indicator",16)}if(2&n){const c=e.sdS(12),u=e.sdS(16);e.R7$(),e.Y8G("ngIf",o.isThankYou),e.R7$(2),e.Y8G("ngIf",!o.isThankYou),e.R7$(),e.Y8G("ngIf",!o.isThankYou),e.R7$(3),e.Y8G("ngIf",!o.isViewAll),e.R7$(3),e.Y8G("ngIf",o.isMobileDevice&&o
2024-12-24 15:05:31 UTC	2049	IN	Data Raw: 22 66 69 6c 65 55 70 6c 6f 61 64 54 79 70 65 22 2c 64 6f 63 49 64 3a 22 64 6f 63 49 64 22 2c 66 69 6c 65 41 74 74 61 63 68 6d 65 6e 74 73 3a 22 66 69 6c 65 41 74 74 61 63 68 6d 65 6e 74 73 22 2c 73 65 6c 65 63 74 65 64 44 6f 63 75 6d 65 6e 74 73 3a 22 73 65 6c 65 63 74 65 64 44 6f 63 75 6d 65 6e 74 73 22 7d 2c 6f 75 74 70 75 74 73 3a 7b 63 68 61 6e 67 65 46 69 6c 65 41 74 74 61 63 68 6d 65 6e 74 3a 22 63 68 61 6e 67 65 46 69 6c 65 41 74 74 61 63 68 6d 65 6e 74 22 2c 63 68 61 6e 67 65 45 72 72 6f 72 73 3a 22 63 68 61 6e 67 65 45 72 72 6f 72 73 22 2c 63 68 61 6e 67 65 46 69 6c 65 43 6f 6e 74 65 6e 74 3a 22 63 68 61 6e 67 65 46 69 6c 65 43 6f 6e 74 65 6e 74 22 7d 2c 64 65 63 6c 73 3a 33 2c 76 61 72 73 3a 32 2c 63 6f 6e 73 74 73 3a 5b 5b 31 2c 22 63 6f 6e 74 Data Ascii: "fileUploadType",docId:"docId",fileAttachments:"fileAttachments",selectedDocuments:"selectedDocuments"},outputs:{changeFileAttachment:"changeFileAttachment",changeErrors:"changeErrors",changeFileContent:"changeFileContent"},decls:3,vars:2,consts:[[1,"cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49958	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:30 UTC	727	OUT	GET /phhm/favicon.ico HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
2024-12-24 15:05:31 UTC	727	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:31 GMT Last-Modified: Wed, 19 Jul 2023 20:50:14 GMT ETag: "19339-600dd2da7ad80;6271632116c33" Accept-Ranges: bytes Content-Length: 103225 Content-Type: image/vnd.microsoft.icon Strict-Transport-Security: max-age=16070400; includeSubDomains Via: 1.1 account.mortgagequestions.com X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Connection: close Set-Cookie: bkfs1=!auOZpekrownnmtVcon1a7F8IKKxzczBRvOZuXpWc2UV4xRsXxRiJMHOJb1x3JBg5CPaQZgPNjoF+ZR4=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:31 UTC	7888	IN	Data Raw: 00 00 01 00 06 00 00 00 00 00 01 00 20 00 cb 0d 00 00 66 00 00 00 80 80 00 00 01 00 20 00 28 08 01 00 31 0e 00 00 40 40 00 00 01 00 20 00 28 42 00 00 59 16 01 00 30 30 00 00 01 00 20 00 a8 25 00 00 81 58 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 29 7e 01 00 10 10 00 00 01 00 20 00 68 04 00 00 d1 8e 01 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 10 06 00 00 00 0c e2 74 25 00 00 0d 92 49 44 41 54 78 da ed dd fd 8f 50 d5 9d 07 e0 73 07 01 41 57 51 6a 2b a0 a1 56 ab a0 6e 7d 5f 74 98 62 41 a8 b5 d6 6d ad 02 6a 82 05 54 d4 40 11 95 a1 80 9d e9 00 62 81 52 c5 06 d0 a8 a8 15 d6 15 b4 a2 b8 69 53 a1 55 61 10 b1 be 40 03 8a 2e be b4 2a 6b 85 5d 8d 18 56 1d 66 ee fe 01 bb 5b 93 73 32 bd 4e cf f3 fc fe b9 f7 9c 6f 66 26 1f 4e 72 0f 21 Data Ascii: f (1@@ (BY00 %X )~ hPNGIHDRt%IDATxPsAWQj+Vn}_tbAmjT@bRiSUa@.*k]Vf[s2Nof&Nr!
2024-12-24 15:05:31 UTC	8192	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-12-24 15:05:31 UTC	7808	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c5 7e 00 90 c5 7e 00 90 c5 7e 00 90 c5 7e 00 90 c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c5 7e 00 90 c5 7e 00 90 c5 7e 00 90 c5 7e 00 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 7b 00 34 c4 7b 00 34 c4 7b 00 34 c4 7b 00 34 c4 7d 00 be c4 7d 00 be c4 7d 00 be c4 7d 00 be c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d Data Ascii: ~~~~}}}}}}}}}}}}~~~~{4{4{4{4}}}}}}}}}}}}}}}}}}
2024-12-24 15:05:31 UTC	8192	IN	Data Raw: ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 fa c4 7d 00 fa c4 7d 00 fa c4 7d 00 fa c4 7e 00 8a c4 7e 00 8a c4 7e 00 8a c4 7e 00 8a c4 7b 00 34 c4 7b 00 34 c4 7b 00 34 c4 7b 00 34 c2 80 00 2e c2 80 00 2e c2 80 00 2e c2 80 00 2e c3 7d 00 bc c3 7d 00 bc c3 7d 00 bc c3 7d 00 bc c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c2 7d 00 3f c2 7d 00 3f c2 7d 00 3f c2 7d 00 3f 00 00 00 00 00 00 Data Ascii: }}}}}}}}}}}}}}}}}}}}}}~~~~{4{4{4{4....}}}}}}}}}}}}}}}}}}}}}}}}}?}?}?}?
2024-12-24 15:05:31 UTC	7808	IN	Data Raw: ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7c 00 67 c4 7c 00 67 c4 7c 00 67 c4 7c 00 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c4 7b 00 3c c4 7b 00 3c c4 7b 00 3c c4 7b 00 3c bf 80 00 0c bf 80 00 0c bf 80 00 0c bf 80 00 0c b9 74 00 0b b9 74 00 0b b9 74 00 0b b9 74 00 0b c4 7d 00 fe c4 7d 00 fe c4 7d 00 fe c4 7d 00 fe c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c5 7d 00 35 c5 7d Data Ascii: }}}}}}}}}}}}}}\|g\|g\|g\|g{<{<{<{<tttt}}}}}}}}}}}}}}}}}5}
2024-12-24 15:05:31 UTC	8000	IN	Data Raw: c1 c4 7e 00 c1 c4 7e 00 c1 c4 7d 00 f1 c4 7d 00 f1 c4 7d 00 f1 c4 7d 00 f1 c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 e5 c4 7d 00 e5 c4 7d 00 e5 c4 7d 00 e5 c8 80 00 0e c8 80 00 0e c8 80 00 0e c8 80 00 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c5 7e 00 61 c5 7e 00 61 c5 7e 00 61 c5 7e 00 61 c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ff c4 7d 00 ec c4 7d 00 ec c4 7d 00 ec c4 7d 00 ec bf 80 00 14 bf 80 Data Ascii: ~~}}}}}}}}}}}}}}}}}}}}}}}}~a~a~a~a}}}}}}}}}}}}}}}}}}}}}}}}
2024-12-24 15:05:31 UTC	8192	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-12-24 15:05:31 UTC	7808	IN	Data Raw: ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 ff 51 a8 72 fd 51 a8 72 fd 51 a8 72 fd 51 a8 72 fd 51 a8 72 aa 51 a8 72 aa 51 a8 72 aa 51 a8 72 aa 4e aa 71 24 4e aa 71 24 4e aa 71 24 4e aa 71 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: QrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrQrNq$Nq$Nq$Nq$
2024-12-24 15:05:31 UTC	8000	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-12-24 15:05:31 UTC	8192	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49964	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:31 UTC	978	OUT	GET /phhm/127.4db69428b5b9ca5e.js HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.mortgagequestions.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.mortgagequestions.com/phhm/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!F6DPsscw1Uxs4n1con1a7F8IKKxzcyYZYgXqz06C37VgeVDJcu8nC/BkwRtWIPGjL1TwLQ+nh2gl27M=
2024-12-24 15:05:32 UTC	748	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:32 GMT Last-Modified: Mon, 11 Nov 2024 21:19:34 GMT ETag: "43476-626a9a83a8580;627163211562d" Accept-Ranges: bytes Content-Length: 275574 Vary: Accept-Encoding Content-Type: application/javascript Strict-Transport-Security: max-age=16070400; includeSubDomains Via: 1.1 account.mortgagequestions.com X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Connection: close Set-Cookie: bkfs1=!vebMMOHLlo2qdf5con1a7F8IKKxzc8D7F42AL6bXNf0BbgTst9I5HmEcCKmYyxSfcHCHHAe5GI3+kt0=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:32 UTC	15636	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 32 37 5d 2c 7b 36 36 37 35 33 3a 28 73 65 2c 74 65 2c 69 29 3d 3e 7b 69 2e 64 28 74 65 2c 7b 64 3a 28 29 3d 3e 76 7d 29 3b 76 61 72 20 65 3d 69 28 33 32 35 35 39 29 3b 66 75 6e 63 74 69 6f 6e 20 76 28 6e 65 2c 61 29 7b 72 65 74 75 72 6e 20 48 3d 3e 48 2e 6c 69 66 74 28 6e 65 77 20 57 28 6e 65 2c 61 29 29 7d 63 6c 61 73 73 20 57 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 48 29 7b 74 68 69 73 2e 6b 65 79 53 65 6c 65 63 74 6f 72 3d 61 2c 74 68 69 73 2e 66 6c 75 73 68 65 73 3d 48 7d 63 61 6c 6c 28 61 Data Ascii: "use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[127],{66753:(se,te,i)=>{i.d(te,{d:()=>v});var e=i(32559);function v(ne,a){return H=>H.lift(new W(ne,a))}class W{constructor(a,H){this.keySelector=a,this.flushes=H}call(a
2024-12-24 15:05:32 UTC	8615	IN	Data Raw: 68 3a 20 34 31 34 70 78 29 7b 2e 6d 6f 72 74 67 61 67 65 2d 74 68 61 6e 6b 79 6f 75 2d 63 6f 6e 74 61 69 6e 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 30 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 7b 2e 6d 6f 72 74 67 61 67 65 2d 74 68 61 6e 6b 79 6f 75 2d 63 6f 6e 74 61 69 6e 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 30 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 35 34 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 Data Ascii: h: 414px){.mortgage-thankyou-container[_ngcontent-%COMP%]{margin-left:40px}}@media screen and (min-width: 768px) and (max-width: 768px){.mortgage-thankyou-container[_ngcontent-%COMP%]{margin-left:80px}}@media screen and (min-width: 540px) and (max-width:
2024-12-24 15:05:32 UTC	8192	IN	Data Raw: 2c 32 2c 30 2c 22 6d 61 74 2d 65 72 72 6f 72 22 2c 36 31 29 2c 65 2e 6b 30 73 28 29 28 29 2c 65 2e 6a 34 31 28 32 31 2c 22 64 69 76 22 2c 35 34 29 28 32 32 2c 22 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 22 2c 35 37 29 28 32 33 2c 22 6d 61 74 2d 6c 61 62 65 6c 22 29 2c 65 2e 45 46 46 28 32 34 2c 22 45 2d 6d 61 69 6c 20 41 64 64 72 65 73 73 22 29 2c 65 2e 6b 30 73 28 29 2c 65 2e 6a 34 31 28 32 35 2c 22 69 6e 70 75 74 22 2c 36 32 2c 34 29 2c 65 2e 6d 78 49 28 22 6e 67 4d 6f 64 65 6c 43 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 72 29 7b 65 2e 65 42 56 28 6f 29 3b 63 6f 6e 73 74 20 73 3d 65 2e 58 70 47 28 29 3b 72 65 74 75 72 6e 20 65 2e 44 48 37 28 73 2e 62 6f 72 72 6f 77 65 72 52 4d 41 44 61 74 61 2e 45 6d 61 69 6c 41 64 64 72 65 73 73 56 61 6c 75 65 Data Ascii: ,2,0,"mat-error",61),e.k0s()(),e.j41(21,"div",54)(22,"mat-form-field",57)(23,"mat-label"),e.EFF(24,"E-mail Address"),e.k0s(),e.j41(25,"input",62,4),e.mxI("ngModelChange",function(r){e.eBV(o);const s=e.XpG();return e.DH7(s.borrowerRMAData.EmailAddressValue
2024-12-24 15:05:32 UTC	8192	IN	Data Raw: 3d 65 2e 62 4d 54 28 31 31 39 2c 36 32 2c 64 65 2e 65 72 72 6f 72 73 29 29 2c 65 2e 52 37 24 28 36 29 2c 65 2e 52 35 30 28 22 6e 67 4d 6f 64 65 6c 22 2c 5f 2e 63 6f 62 6f 72 72 6f 77 65 72 52 4d 41 44 61 74 61 2e 53 65 63 6f 6e 64 61 72 79 54 65 6c 65 70 68 6f 6e 65 54 79 70 65 29 2c 65 2e 52 37 24 28 32 29 2c 65 2e 59 38 47 28 22 6e 67 49 66 22 2c 6e 75 6c 6c 21 3d 5f 2e 63 6f 62 6f 72 72 6f 77 65 72 52 4d 41 44 61 74 61 2e 53 65 63 6f 6e 64 61 72 79 54 65 6c 65 70 68 6f 6e 65 4e 75 6d 62 65 72 29 2c 65 2e 52 37 24 28 33 29 2c 65 2e 52 35 30 28 22 6e 67 4d 6f 64 65 6c 22 2c 5f 2e 6d 6f 64 65 6c 2e 65 78 63 6c 75 64 65 43 6f 42 6f 72 72 6f 77 65 72 46 72 6f 6d 52 4d 41 49 6e 64 69 63 61 74 6f 72 29 2c 65 2e 59 38 47 28 22 63 68 65 63 6b 65 64 22 2c 21 5f Data Ascii: =e.bMT(119,62,de.errors)),e.R7$(6),e.R50("ngModel",_.coborrowerRMAData.SecondaryTelephoneType),e.R7$(2),e.Y8G("ngIf",null!=_.coborrowerRMAData.SecondaryTelephoneNumber),e.R7$(3),e.R50("ngModel",_.model.excludeCoBorrowerFromRMAIndicator),e.Y8G("checked",!_
2024-12-24 15:05:32 UTC	8192	IN	Data Raw: 2e 62 6f 72 72 6f 77 65 72 46 75 6c 6c 4e 61 6d 65 3d 72 29 2c 65 2e 4e 6a 6a 28 72 29 7d 29 2c 65 2e 6b 30 73 28 29 28 29 28 29 2c 65 2e 6a 34 31 28 31 34 2c 22 64 69 76 22 2c 32 33 29 28 31 35 2c 22 64 69 76 22 2c 35 34 29 28 31 36 2c 22 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 22 2c 35 37 29 28 31 37 2c 22 6d 61 74 2d 6c 61 62 65 6c 22 29 2c 65 2e 45 46 46 28 31 38 2c 22 4c 61 73 74 20 34 20 6f 66 20 53 53 4e 22 29 2c 65 2e 6b 30 73 28 29 2c 65 2e 6a 34 31 28 31 39 2c 22 69 6e 70 75 74 22 2c 35 39 2c 33 29 2c 65 2e 6d 78 49 28 22 6e 67 4d 6f 64 65 6c 43 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 72 29 7b 65 2e 65 42 56 28 6f 29 3b 63 6f 6e 73 74 20 73 3d 65 2e 58 70 47 28 29 3b 72 65 74 75 72 6e 20 65 2e 44 48 37 28 73 2e 6d 6f 64 65 6c 2e 62 6f Data Ascii: .borrowerFullName=r),e.Njj(r)}),e.k0s()()(),e.j41(14,"div",23)(15,"div",54)(16,"mat-form-field",57)(17,"mat-label"),e.EFF(18,"Last 4 of SSN"),e.k0s(),e.j41(19,"input",59,3),e.mxI("ngModelChange",function(r){e.eBV(o);const s=e.XpG();return e.DH7(s.model.bo
2024-12-24 15:05:32 UTC	8192	IN	Data Raw: 54 65 6c 65 70 68 6f 6e 65 4e 75 6d 62 65 72 29 2c 65 2e 59 38 47 28 22 72 65 61 64 6f 6e 6c 79 22 2c 5f 2e 69 73 52 65 61 64 4f 6e 6c 79 29 2c 65 2e 52 37 24 28 32 29 2c 65 2e 59 38 47 28 22 6e 67 49 66 22 2c 6f 65 2e 73 75 62 6d 69 74 74 65 64 26 26 22 69 6e 76 61 6c 69 64 50 68 6f 6e 65 22 3d 3d 3d 65 2e 62 4d 54 28 31 30 36 2c 36 31 2c 6d 65 2e 65 72 72 6f 72 73 29 29 2c 65 2e 52 37 24 28 36 29 2c 65 2e 52 35 30 28 22 6e 67 4d 6f 64 65 6c 22 2c 5f 2e 63 6f 62 6f 72 72 6f 77 65 72 52 4d 41 44 61 74 61 2e 50 72 69 6d 61 72 79 54 65 6c 65 70 68 6f 6e 65 54 79 70 65 29 2c 65 2e 52 37 24 28 32 29 2c 65 2e 59 38 47 28 22 6e 67 49 66 22 2c 6e 75 6c 6c 21 3d 5f 2e 63 6f 62 6f 72 72 6f 77 65 72 52 4d 41 44 61 74 61 2e 50 72 69 6d 61 72 79 54 65 6c 65 70 68 6f Data Ascii: TelephoneNumber),e.Y8G("readonly",_.isReadOnly),e.R7$(2),e.Y8G("ngIf",oe.submitted&&"invalidPhone"===e.bMT(106,61,me.errors)),e.R7$(6),e.R50("ngModel",_.coborrowerRMAData.PrimaryTelephoneType),e.R7$(2),e.Y8G("ngIf",null!=_.coborrowerRMAData.PrimaryTelepho
2024-12-24 15:05:32 UTC	8192	IN	Data Raw: 41 64 64 42 6f 72 72 6f 77 65 72 22 2b 28 72 2b 31 29 2c 4f 3d 73 3f 22 41 64 64 42 6f 72 72 6f 77 65 72 22 2b 28 72 2b 32 29 3a 6e 75 6c 6c 2c 6d 65 3d 7b 61 64 64 74 69 6f 6e 61 6c 42 6f 72 72 6f 77 65 72 31 49 6e 64 65 78 3a 58 2c 61 64 64 74 69 6f 6e 61 6c 42 6f 72 72 6f 77 65 72 31 46 75 6c 6c 4e 61 6d 65 3a 74 68 69 73 2e 67 65 74 46 75 6c 6c 4e 61 6d 65 28 6f 5b 72 5d 29 2c 61 64 64 74 69 6f 6e 61 6c 42 6f 72 72 6f 77 65 72 31 45 6d 61 69 6c 41 64 64 72 65 73 73 3a 6f 5b 72 5d 2e 45 6d 61 69 6c 41 64 64 72 65 73 73 56 61 6c 75 65 2c 61 64 64 74 69 6f 6e 61 6c 42 6f 72 72 6f 77 65 72 31 45 78 63 6c 75 64 65 46 72 6f 6d 52 4d 41 49 6e 64 69 63 61 74 6f 72 3a 6f 5b 72 5d 2e 45 78 63 6c 75 64 65 46 72 6f 6d 52 4d 41 49 6e 64 69 63 61 74 6f 72 2c 61 64 Data Ascii: AddBorrower"+(r+1),O=s?"AddBorrower"+(r+2):null,me={addtionalBorrower1Index:X,addtionalBorrower1FullName:this.getFullName(o[r]),addtionalBorrower1EmailAddress:o[r].EmailAddressValue,addtionalBorrower1ExcludeFromRMAIndicator:o[r].ExcludeFromRMAIndicator,ad
2024-12-24 15:05:32 UTC	8192	IN	Data Raw: 6f 72 44 69 73 61 62 6c 65 64 3d 21 30 2c 74 68 69 73 2e 6d 6f 64 65 6c 2e 65 78 63 6c 75 64 65 43 6f 42 6f 72 72 6f 77 65 72 46 72 6f 6d 52 4d 41 49 6e 64 69 63 61 74 6f 72 3d 21 31 29 7d 73 65 6c 65 63 74 45 78 63 6c 75 64 65 49 6e 64 69 63 61 74 6f 72 28 29 7b 22 74 72 75 65 22 21 3d 3d 74 68 69 73 2e 6d 6f 64 65 6c 2e 65 78 63 6c 75 64 65 42 6f 72 72 6f 77 65 72 46 72 6f 6d 52 4d 41 49 6e 64 69 63 61 74 6f 72 7c 7c 74 68 69 73 2e 69 73 42 6f 72 72 6f 77 65 72 45 78 63 6c 75 64 65 52 4d 41 49 6e 64 69 63 61 74 6f 72 44 69 73 61 62 6c 65 64 3f 22 74 72 75 65 22 3d 3d 3d 74 68 69 73 2e 6d 6f 64 65 6c 2e 65 78 63 6c 75 64 65 43 6f 42 6f 72 72 6f 77 65 72 46 72 6f 6d 52 4d 41 49 6e 64 69 63 61 74 6f 72 26 26 21 74 68 69 73 2e 69 73 43 6f 62 6f 72 72 6f 77 Data Ascii: orDisabled=!0,this.model.excludeCoBorrowerFromRMAIndicator=!1)}selectExcludeIndicator(){"true"!==this.model.excludeBorrowerFromRMAIndicator\|\|this.isBorrowerExcludeRMAIndicatorDisabled?"true"===this.model.excludeCoBorrowerFromRMAIndicator&&!this.isCoborrow
2024-12-24 15:05:32 UTC	8192	IN	Data Raw: 6f 6e 65 4d 61 73 6b 22 2c 22 22 2c 22 70 68 6f 6e 65 4d 61 73 6b 56 61 6c 69 64 61 74 69 6f 6e 22 2c 22 66 61 6c 73 65 22 2c 22 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 2c 22 6f 66 66 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 41 6c 74 65 72 6e 61 74 65 20 50 68 6f 6e 65 20 4e 75 6d 62 65 72 22 2c 22 6e 61 6d 65 22 2c 22 62 6f 72 72 6f 77 65 72 41 6c 74 50 68 6f 6e 65 4e 75 6d 22 2c 31 2c 22 6e 6f 2d 62 6f 72 64 65 72 22 2c 33 2c 22 6e 67 4d 6f 64 65 6c 43 68 61 6e 67 65 22 2c 22 6e 67 4d 6f 64 65 6c 22 5d 2c 5b 22 6e 61 6d 65 22 2c 22 62 6f 72 72 6f 77 65 72 41 6c 74 50 68 6f 6e 65 54 79 70 65 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 2c 22 50 68 6f 6e 65 20 54 79 70 65 22 2c 33 2c 22 6e 67 4d 6f 64 65 6c 43 68 61 6e 67 65 22 2c 22 6e 67 4d 6f 64 Data Ascii: oneMask","","phoneMaskValidation","false","autocomplete","off","placeholder","Alternate Phone Number","name","borrowerAltPhoneNum",1,"no-border",3,"ngModelChange","ngModel"],["name","borrowerAltPhoneType","aria-label","Phone Type",3,"ngModelChange","ngMod
2024-12-24 15:05:32 UTC	8192	IN	Data Raw: 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 31 34 70 78 29 7b 2e 68 72 2d 6c 69 6e 65 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 77 69 64 74 68 3a 39 34 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 7b 2e 68 72 2d 6c 69 6e 65 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 77 69 64 74 68 3a 38 39 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 7d 2e 72 6f 77 2d 72 61 64 69 6f 2d 67 72 6f 75 70 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6c 65 78 2d Data Ascii: 0px) and (max-width: 414px){.hr-line[_ngcontent-%COMP%]{width:94%;margin-left:0}}@media screen and (min-width: 768px) and (max-width: 768px){.hr-line[_ngcontent-%COMP%]{width:89%;margin-left:0}}.row-radio-group[_ngcontent-%COMP%]{display:inline-flex;flex-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49965	204.86.65.51	443	3192	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-24 15:05:31 UTC	739	OUT	GET /phhm/136.aedaf5153678dc31.js HTTP/1.1 Host: account.mortgagequestions.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_FJK2RS82Y6=GS1.1.1735052709.1.0.1735052709.0.0.0; _ga=GA1.2.2079666217.1735052710; _gid=GA1.2.627024764.1735052713; _gat_UA-26545262-4=1; TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; bkfs1=!2YSJB15Qw1YdJHJcon1a7F8IKKxzc/Y07lWKX1lXGqf+arZvtNMDNi7nYnUsqSY1mSIUSHGfPvr99Gs=
2024-12-24 15:05:32 UTC	746	IN	HTTP/1.1 200 OK Date: Tue, 24 Dec 2024 15:05:32 GMT Last-Modified: Mon, 11 Nov 2024 21:19:34 GMT ETag: "2eec-626a9a83a8580;627163211dd23" Accept-Ranges: bytes Content-Length: 12012 Vary: Accept-Encoding Content-Type: application/javascript Strict-Transport-Security: max-age=16070400; includeSubDomains Via: 1.1 account.mortgagequestions.com X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' Connection: close Set-Cookie: bkfs1=!Wh646oT1IrzKMppcon1a7F8IKKxzc1k8lkJES5ZLeSULos8w0fjSr1NYC1qy/aso0R3OuFkKaaizXes=; Path=/; Version=1; Secure; Httponly Set-Cookie: TS01a73eed=0116337cee2c2dc4760ddd600ad04fafbf4d62cceae4185135d95cec5655c5fa7850e42eaf2ff8e287f0677a8aedafcb3a03c9f2f8; Path=/; Secure; HTTPOnly
2024-12-24 15:05:32 UTC	12012	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 62 6c 61 63 6b 5f 6b 6e 69 67 68 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 33 36 2c 39 39 37 5d 2c 7b 36 33 38 35 34 3a 28 76 2c 63 2c 6c 29 3d 3e 7b 6c 2e 64 28 63 2c 7b 52 3a 28 29 3d 3e 6d 7d 29 3b 76 61 72 20 61 3d 6c 28 32 33 32 37 39 29 2c 73 3d 6c 28 35 30 31 38 37 29 2c 74 3d 6c 28 38 34 36 39 32 29 2c 75 3d 6c 28 34 38 30 35 29 3b 63 6f 6e 73 74 20 5f 3d 5b 22 6d 61 70 45 6c 65 6d 65 6e 74 22 5d 2c 64 3d 5b 22 6d 61 70 4d 61 72 6b 65 72 44 69 76 22 5d 2c 66 3d 5b 22 6d 61 70 4d 61 72 6b 65 72 48 6f 6d 65 44 69 76 22 5d 2c 67 3d 5b 22 6d 61 70 4d 61 72 6b 65 72 48 Data Ascii: "use strict";(self.webpackChunkblack_knight=self.webpackChunkblack_knight\|\|[]).push([[136,997],{63854:(v,c,l)=>{l.d(c,{R:()=>m});var a=l(23279),s=l(50187),t=l(84692),u=l(4805);const _=["mapElement"],d=["mapMarkerDiv"],f=["mapMarkerHomeDiv"],g=["mapMarkerH

Target ID:	0
Start time:	10:04:41
Start date:	24/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	10:04:44
Start date:	24/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1992,i,4482549296618371493,1279557440734233122,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	10:04:50
Start date:	24/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.mortgagequestions.com/"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.mortgagequestions.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Windows Analysis Report
http://www.mortgagequestions.com/