Edit tour

Windows Analysis Report
http://colorado.findyourunclaimedproperty.com

Overview

General Information

Sample URL:	http://colorado.findyourunclaimedproperty.com
Analysis ID:	1661881
Infos:

Detection

Score:	1
Range:	0 - 100
Confidence:	100%

Signatures

Creates files inside the system directory

Deletes files inside the Windows folder

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5616 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5700 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,3387312802968075628,13951031583740444130,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2064 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7108 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2040,i,3387312802968075628,13951031583740444130,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=212 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2716 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,3387312802968075628,13951031583740444130,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3976 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6696 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://colorado.findyourunclaimedproperty.com" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

HTTP traffic detected: POST /log?hasfast=true&authuser=0&format=json HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 529sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8sec-ch-ua-mobile: ?0Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJWhywEInP7MAQiFoM0BSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: chromecache_146.2.dr, chromecache_111.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_111.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_111.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_111.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_111.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_111.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_111.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_148.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_145.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_111.2.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_148.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_159.2.dr	String found in binary or memory: https://colorado.findyourunclaimedproperty.com/
Source: chromecache_111.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_163.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_146.2.dr, chromecache_111.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_163.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_148.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion
Source: chromecache_111.2.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_111.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_111.2.dr	String found in binary or memory: https://music.youtube.com
Source: chromecache_148.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_148.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/ccm/collect
Source: chromecache_148.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_111.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_111.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_111.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_111.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_111.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_159.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_148.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_148.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_145.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_111.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_111.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_111.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_111.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/3037019#check_ad_blockers&zippy=%2Ccheck-your-extensions-i
Source: chromecache_111.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_142.2.dr, chromecache_122.2.dr	String found in binary or memory: https://tag.findyourunclaimedproperty.com
Source: chromecache_145.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_148.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_111.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_145.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_145.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_145.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_148.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_145.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_148.2.dr	String found in binary or memory: https://www.google.com/ccm/collect
Source: chromecache_148.2.dr	String found in binary or memory: https://www.google.com/travel/flights/click/conversion
Source: chromecache_148.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_111.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_148.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_148.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_145.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_159.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-LCNWMJ8RYG
Source: chromecache_148.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_138.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_111.2.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_148.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_148.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_111.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_111.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_148.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_111.2.dr	String found in binary or memory: https://www.youtube.com/s/
Source: chromecache_111.2.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_111.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_111.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_111.2.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.250.80.4:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.42:443 -> 192.168.2.4:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.35.93.106:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.150:443 -> 192.168.2.4:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.64.98:443 -> 192.168.2.4:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.70:443 -> 192.168.2.4:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.4:443 -> 192.168.2.4:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.193:443 -> 192.168.2.4:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.246:443 -> 192.168.2.4:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.64.98:443 -> 192.168.2.4:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.193:443 -> 192.168.2.4:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.206:443 -> 192.168.2.4:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.206:443 -> 192.168.2.4:49859 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir5616_801054127

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir5616_801054127

Jump to behavior

Source: classification engine

Classification label: clean1.win@29/122@36/15

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,3387312802968075628,13951031583740444130,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2064 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://colorado.findyourunclaimedproperty.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2040,i,3387312802968075628,13951031583740444130,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=212 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,3387312802968075628,13951031583740444130,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3976 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,3387312802968075628,13951031583740444130,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2064 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2040,i,3387312802968075628,13951031583740444130,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=212 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,3387312802968075628,13951031583740444130,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3976 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://colorado.findyourunclaimedproperty.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://colorado.findyourunclaimedproperty.com/268.f98989305c9b3596.js	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/images/bg_texture.png	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/images/poweredbykelmar.png	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/956.b3aeec33f0994243.js	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/images/icons/red-exclamation.png	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/images/CO%20logo.png	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/polyfills.e04b81825cd956ec.js	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/224.3d7782bbc982e8f5.js	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/i18nUpgrade/en.json	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/images/facebook.png	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/images/spinner.svg	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/599.aa8bb11b02586fb0.js	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/images/co_logo_compact.png	0%	Avira URL Cloud	safe
https://tag.findyourunclaimedproperty.com	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/runtime.cde2d555f62ca663.js	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/images/twitter.png	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/main.1201526bdac1794c.js	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/images/co_logo.png	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/SWS/app/properties	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/images/home_notification_2.png	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/favicon.ico	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/images/home_notification_1.png	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/133.cbd43d3bf11f03e1.js	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/852.baaf94e60d05f520.js	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/fonts/open-sans.woff2	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/images/banner.jpg	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/fonts/iconfont/MaterialIcons-Regular.woff2?v=1	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/styles.cb38ba2e5e010baf.css	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/fonts/open-sans-bold.woff2	0%	Avira URL Cloud	safe
https://colorado.findyourunclaimedproperty.com/455.e232ec29a29d7649.js	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
youtube-ui.l.google.com	142.250.176.206	true	false	high
googleads.g.doubleclick.net	142.250.64.98	true	false	high
play.google.com	142.250.176.206	true	false	high
d262xdh02qp0qq.cloudfront.net	13.35.93.42	true	false	unknown
i.ytimg.com	142.251.40.150	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
photos-ugc.l.googleusercontent.com	142.250.65.193	true	false	high
www.google.com	142.250.80.4	true	false	high
static.doubleclick.net	142.250.80.70	true	false	high
colorado.findyourunclaimedproperty.com	unknown	unknown	false	unknown
yt3.ggpht.com	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://colorado.findyourunclaimedproperty.com/224.3d7782bbc982e8f5.js	false	Avira URL Cloud: safe	unknown
https://colorado.findyourunclaimedproperty.com/images/bg_texture.png	false	Avira URL Cloud: safe	unknown
https://colorado.findyourunclaimedproperty.com/268.f98989305c9b3596.js	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/9599b765/player_ias.vflset/en_US/embed.js	false		high
https://colorado.findyourunclaimedproperty.com/i18nUpgrade/en.json	false	Avira URL Cloud: safe	unknown
https://colorado.findyourunclaimedproperty.com/956.b3aeec33f0994243.js	false	Avira URL Cloud: safe	unknown
https://colorado.findyourunclaimedproperty.com/images/icons/red-exclamation.png	false	Avira URL Cloud: safe	unknown
https://colorado.findyourunclaimedproperty.com/images/CO%20logo.png	false	Avira URL Cloud: safe	unknown
https://colorado.findyourunclaimedproperty.com/polyfills.e04b81825cd956ec.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/js/th/psvxE8Um0BaWZ-OOSYjHHd_AHZ2u1rpfPr9T6ChXOnU.js	false		high
http://c.pki.goog/r/gsr1.crl	false		high
https://colorado.findyourunclaimedproperty.com/images/poweredbykelmar.png	false	Avira URL Cloud: safe	unknown
https://colorado.findyourunclaimedproperty.com/images/facebook.png	false	Avira URL Cloud: safe	unknown
https://colorado.findyourunclaimedproperty.com/images/twitter.png	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false		high
https://colorado.findyourunclaimedproperty.com/runtime.cde2d555f62ca663.js	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/9599b765/player_ias.vflset/en_US/base.js	false		high
https://static.doubleclick.net/instream/ad_status.js	false		high
https://googleads.g.doubleclick.net/pagead/id	false		high
https://www.youtube.com/embed/8vx2qFWHoGs?si=PzXV55a40n6uRUC3	false		high
https://colorado.findyourunclaimedproperty.com/599.aa8bb11b02586fb0.js	false	Avira URL Cloud: safe	unknown
https://colorado.findyourunclaimedproperty.com/images/home_notification_2.png	false	Avira URL Cloud: safe	unknown
https://colorado.findyourunclaimedproperty.com/images/co_logo_compact.png	false	Avira URL Cloud: safe	unknown
https://colorado.findyourunclaimedproperty.com/images/spinner.svg	false	Avira URL Cloud: safe	unknown
https://colorado.findyourunclaimedproperty.com/images/co_logo.png	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/generate_204?q53rzQ	false		high
https://www.youtube.com/generate_204?etfieA	false		high
https://colorado.findyourunclaimedproperty.com/SWS/app/properties	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/9599b765/www-player.css	false		high
https://colorado.findyourunclaimedproperty.com/main.1201526bdac1794c.js	false	Avira URL Cloud: safe	unknown
https://colorado.findyourunclaimedproperty.com/fonts/open-sans-bold.woff2	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/8vx2qFWHoGs/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGBEgWyhyMA8=&rs=AOn4CLBUJgmPcDzZNMpUbmNymH7CL22I6w	false		high
http://c.pki.goog/r/r4.crl	false		high
https://colorado.findyourunclaimedproperty.com/	false		unknown
https://colorado.findyourunclaimedproperty.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://colorado.findyourunclaimedproperty.com/styles.cb38ba2e5e010baf.css	false	Avira URL Cloud: safe	unknown
https://colorado.findyourunclaimedproperty.com/455.e232ec29a29d7649.js	false	Avira URL Cloud: safe	unknown
https://colorado.findyourunclaimedproperty.com/852.baaf94e60d05f520.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/lzjo8/0x4AAAAAAAhFdz3jBW4U77wp/light/fbE/new/normal/en/	false		high
https://colorado.findyourunclaimedproperty.com/fonts/open-sans.woff2	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/9599b765/www-embed-player.vflset/www-embed-player.js	false		high
https://challenges.cloudflare.com/turnstile/v0/b/580ba44007a6/api.js	false		high
https://colorado.findyourunclaimedproperty.com/app/claim-search	false		unknown
https://colorado.findyourunclaimedproperty.com/133.cbd43d3bf11f03e1.js	false	Avira URL Cloud: safe	unknown
https://play.google.com/log?hasfast=true&authuser=0&format=json	false		high
https://www.youtube.com/youtubei/v1/log_event?alt=json	false		high
https://colorado.findyourunclaimedproperty.com/images/home_notification_1.png	false	Avira URL Cloud: safe	unknown
https://colorado.findyourunclaimedproperty.com/images/banner.jpg	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/9599b765/player_ias.vflset/en_US/remote.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=92e2691e08350cb4&lang=en	false		high
https://colorado.findyourunclaimedproperty.com/fonts/iconfont/MaterialIcons-Regular.woff2?v=1	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/8vx2qFWHoGs/default.jpg?sqp=-oaymwEkCHgQWvKriqkDGvABAfgB_gmAAtAFigIMCAAQARgRIFsocjAP&rs=AOn4CLCE9mgGajmrcR0EM5YuTudeA8NeEA	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_148.2.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_111.2.dr	false		high
http://youtube.com/streaming/otf/durations/112015	chromecache_111.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_145.2.dr	false		high
https://www.youtube.com	chromecache_148.2.dr	false		high
https://www.google.com	chromecache_148.2.dr	false		high
https://www.youtube.com/iframe_api	chromecache_148.2.dr	false		high
https://www.youtube.com/s/	chromecache_111.2.dr	false		high
https://admin.youtube.com	chromecache_111.2.dr	false		high
https://www.youtube.com/api/drm/fps?ek=	chromecache_111.2.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_111.2.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_145.2.dr	false		high
https://github.com/madler/zlib/blob/master/zlib.h	chromecache_146.2.dr, chromecache_111.2.dr	false		high
https://tag.findyourunclaimedproperty.com	chromecache_142.2.dr, chromecache_122.2.dr	false	Avira URL Cloud: safe	unknown
https://yurt.corp.google.com	chromecache_111.2.dr	false		high
https://viacon.corp.google.com	chromecache_111.2.dr	false		high
https://www.youtube.com/generate_204?cpn=	chromecache_111.2.dr	false		high
https://support.google.com/youtube/answer/6276924	chromecache_111.2.dr	false		high
https://schema.org	chromecache_159.2.dr	false		high
http://youtube.com/yt/2012/10/10	chromecache_111.2.dr	false		high
https://cct.google/taggy/agent.js	chromecache_148.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_111.2.dr	false		high
http://tools.ietf.org/html/rfc1950	chromecache_146.2.dr, chromecache_111.2.dr	false		high
https://www.google.%/ads/ga-audiences	chromecache_145.2.dr	false		high
http://www.youtube.com/videoplayback	chromecache_111.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_148.2.dr	false		high
https://www.google.com/ccm/collect	chromecache_148.2.dr	false		high
https://support.google.com/youtube/?p=missing_quality	chromecache_111.2.dr	false		high
https://support.google.com/youtube/?p=report_playback	chromecache_111.2.dr	false		high
https://angular.dev/license	chromecache_111.2.dr	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion	chromecache_148.2.dr	false		high
http://youtube.com/streaming/metadata/segment/102015	chromecache_111.2.dr	false		high
https://youtu.be/	chromecache_111.2.dr	false		high
https://www.google.com/travel/flights/click/conversion	chromecache_148.2.dr	false		high
https://support.google.com/youtube/answer/3037019#check_ad_blockers&zippy=%2Ccheck-your-extensions-i	chromecache_111.2.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware	chromecache_111.2.dr	false		high
https://redux.js.org/api/store#subscribelistener	chromecache_111.2.dr	false		high
https://youtube.com/api/drm/fps?ek=uninitialized	chromecache_111.2.dr	false		high
https://music.youtube.com	chromecache_111.2.dr	false		high
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_163.2.dr	false		high
https://tagassistant.google.com/	chromecache_145.2.dr	false		high
https://docs.google.com/get_video_info	chromecache_111.2.dr	false		high
https://getbootstrap.com/)	chromecache_163.2.dr	false		high
https://www.google.com/ads/ga-audiences	chromecache_145.2.dr	false		high
https://td.doubleclick.net	chromecache_148.2.dr	false		high
https://www.merchant-center-analytics.goog	chromecache_148.2.dr	false		high
http://youtube.com/drm/2012/10/10	chromecache_111.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.176.206	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
142.251.40.246	unknown	United States	15169	GOOGLEUS	false
142.250.64.98	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.251.40.150	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.80.4	www.google.com	United States	15169	GOOGLEUS	false
13.35.93.42	d262xdh02qp0qq.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.65.193	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
13.35.93.106	unknown	United States	16509	AMAZON-02US	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.65.206	unknown	United States	15169	GOOGLEUS	false
142.250.80.70	static.doubleclick.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.5
192.168.2.23

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1661881
Start date and time:	2025-04-10 14:56:10 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://colorado.findyourunclaimedproperty.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	22
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@29/122@36/15

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.110, 172.253.62.84, 142.251.35.163, 142.250.64.72, 23.203.176.221, 208.89.73.23, 3.19.8.217, 142.250.80.42, 142.250.80.74, 142.250.80.106, 142.250.176.202, 142.251.40.202, 142.251.40.234, 142.251.41.10, 142.251.32.106, 142.251.35.170, 142.251.40.106, 142.251.40.138, 142.251.40.170, 142.250.64.74, 142.250.64.106, 142.250.72.106, 142.250.80.10, 142.250.176.195, 172.217.165.138, 142.250.65.170, 142.250.65.202, 142.250.65.234, 142.250.81.234, 142.250.80.99, 142.250.80.67, 142.250.80.78, 23.9.183.29, 142.250.72.110, 204.79.197.222, 4.245.163.56
Excluded domains from analysis (whitelisted): fp.msedge.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, jnn-pa.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, ocsp.digicert.com, www.googletagmanager.com, update.googleapis.com, seal.digicert.com, clients.l.google.com, www.gstatic.com, c.pki.goog, www.google-analytics.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://colorado.findyourunclaimedproperty.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 190 x 25, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2172
Entropy (8bit):	7.836069957757743
Encrypted:	false
SSDEEP:	48:gf1Gaec1DfqhBAPVqQ2mTGYkgh8fmzG+cvGS3BEBy7:s1pVDc+Pc8B8fm9cvGS3Bf7
MD5:	856261AFE64069C31EDD3CD817762F3A
SHA1:	90FF35B42E79C7916520C09103AD0ED6CA5E8ED8
SHA-256:	B1813C6345F7751D730C19ADD6822F5E52815330ACABBBB99CC4527988862E90
SHA-512:	A4AFFE9FF2209E8EF5ECB661DC02A52437B1FFF6ED5953692B371404BF9538794FD20C35CD784A90F98DC93BBCCCB8484A92D96911C7A1DAC41FF1626CC45AF2
Malicious:	false
Reputation:	low
URL:	https://colorado.findyourunclaimedproperty.com/images/poweredbykelmar.png
Preview:	.PNG........IHDR..............m......pHYs...#...#.x.?v....IDATx....WU..?,.X....L.k..%3.Q..,:%..........D0IT..C..4... 9.X.=J...#5d..1. (.......Z-.....>..x....n..>3o...=..}..{.9.}.9i.j......w7uvv.,B....,..9.Sr....s:..?.W.;~N.$w..^I..9....=..S.......y%..l`......d.....T.......4..dD.....0"k3d.`...!7...k>...6....W.3.........Z.<.L....3.(O9.b....i.PgU3.W..1.W@e7.~..;........=......j5@.U...../.....V.}.8..5..............#.?..h7"...-.......\|..u.;......te..i..C.......]7..:...[.vD.....N......4[...g.(p10>...5Fdc...2`.p_.L...,#V.?.M`!0..fD.d..bD.b6.....[......&......6`<p...l.......).......A.s.n6V.#.>..c*.......Tp....V.J...5.:5.Nx..V.k.......wc..q._..bh.>..eee......5N........0".=u..6....N..........8.....v F......./....` ..g..<.\|....v....4"G...[q.Z....V......~.X....@5...w8.K..4x...sVu..."...Y...W.]......4.Y#.+.y...)....lO.k..7N.f&....F.c.H.\......1n.}.....?..L3`U..v.[.H.U]......x.H..\|....'@_......>tz.#.....+....fW.&.X.z>p......X.a.s[.`.q\|...~.....m..a

Source: https://colorado.findyourunclaimedproperty.com/app/claim-search	HTTP Parser: No favicon
Source: https://colorado.findyourunclaimedproperty.com/app/claim-search	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.227
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 208.89.73.29
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.227
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_111.2.dr	String found in binary or memory: $j6=function(F,k){if(!F.Y["0"]){var z=new KP("0","fakesb",{video:new nP(0,0,0,void 0,void 0,"auto")});F.Y["0"]=k?new fz(new g.ZN("http://www.youtube.com/videoplayback"),z,"fake"):new XQ(new g.ZN("http://www.youtube.com/videoplayback"),z,new VF(0,0),new VF(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_111.2.dr	String found in binary or memory: 'use strict';var o5='?;---;\\.a1\\.googlevideo\\.com$;cmo=;1;;1970-01-01T04:45:34.000+04:45;1970-01-01T08:31:14.000+08:30;mn;/api/manifest;1970-01-01T05:16:00.000+05:15;youtube.player.web_20250402_01_RC00;Untrusted URL;true;1969-12-31T22:48:39.000-01:15;,[}[u;XuP1rNHD1M81Z0BquL-_w8_;,;rr;/;/file/index.m3u8;/videoplayback;=;cmo=td;redirector.googlevideo.com;1970-01-01T07:30:16.000+07:30;&;fallback_count;1970-01-01T02:45:44.000+02:45;www.youtube.com;://;cmo=pf;1970-01-01T02:00:10.000+02:00;\\.googlevideo\\.com$;a1.googlevideo.com;local;)}"{},;%3D;r;undefined;:;OY-iRjM;playerfallback;cmo;//;/initplayback;mA6LeRr;rr?[1-9].*\\.c\\.youtube\\.com$;index.m3u8;fvip;application/json;({(,,'.split(";"), equals www.youtube.com (Youtube)
Source: chromecache_111.2.dr	String found in binary or memory: EZ.prototype.logTrace=function(F){this.encoder.reset();this.encoder.add(1);this.encoder.add(F.resources.length);for(var k=g.l(F.resources),z=k.next();!z.done;z=k.next()){z=z.value.replace("https://www.youtube.com/s/","");this.encoder.add(z.length);for(var x=0;x<z.length;x++)this.encoder.add(z.charCodeAt(x))}this.encoder.add(F.frames.length);k=g.l(F.frames);for(z=k.next();!z.done;z=k.next()){z=z.value;this.encoder.add(z.name.length);for(x=0;x<z.name.length;x++)this.encoder.add(z.name.charCodeAt(x)); equals www.youtube.com (Youtube)
Source: chromecache_111.2.dr	String found in binary or memory: F))):this.api.C().V("enable_adb_handling_in_sabr")&&z==="BROWSER_OR_EXTENSION_ERROR"&&!x.S?(x=x.hostLanguage,F="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",x&&(F=g.oW(F,{hl:x})),this.r3(Hm(this,"BROWSER_OR_EXTENSION_ERROR",F))):this.r3(g.Vt(F.errorMessage)):this.r3(Hm(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(F=x.hostLanguage,z="//support.google.com/youtube/?p=player_error1",F&&(z=g.oW(z, equals www.youtube.com (Youtube)
Source: chromecache_111.2.dr	String found in binary or memory: F.details.rc!=="429"?F.errorCode==="ump.spsrejectfailure"&&(D="HTML5_SPS_UMP_STATUS_REJECTED"):(D="TOO_MANY_REQUESTS",e="6");this.La.qk(F.errorCode,F.severity,D,Pw(F.details),e)}else this.La.publish("nonfatalerror",F),x=/^pp/.test(this.videoData.clientPlaybackNonce),this.He(F.errorCode,F.details),x&&F.errorCode==="manifest.net.connect"&&(F="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.VE)(),tq(F,"manifest",function(C){k.S=!0;k.UK("pathprobe",C)},function(C){k.He(C.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_148.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=v;return t},Vk:function(){e=qb()},Od:function(){d()}}};var $b=va(["data-gtm-yt-inspected-"]),EH=["www.youtube.com","www.youtube-nocookie.com"],FH,GH=!1; equals www.youtube.com (Youtube)
Source: chromecache_148.2.dr	String found in binary or memory: Nt();vo(function(){a();R(b)\|\|Jm(a,b)},b)},Nt=function(){return[L.m.R,L.m.T]},Ot=/^(?:www\.)?google(?:\.com?)?(?:\.[a-z]{2}t?)?$/,Pt=/^www\.googleadservices\.com$/,Tt=/^gad_source[_=](\d+)$/;function Yt(){return Do("dedupe_gclid",function(){return qr()})};var Zt=/^(www\.)?google(\.com?)?(\.[a-z]{2}t?)?$/,$t=/^www.googleadservices.com$/;function au(a){a\|\|(a=bu());return a.fo?!1:a.fn\|\|a.gn\|\|a.kn\|\|a.hn\|\|a.tf\|\|a.Pm\|\|a.jn\|\|a.Um?!0:!1}function bu(){var a={},b=Wr(!0);a.fo=!!b._up;var c=lt();a.fn=c.aw!==void 0;a.gn=c.dc!==void 0;a.kn=c.wbraid!==void 0;a.hn=c.gbraid!==void 0;a.jn=c.gclsrc==="aw.ds";a.tf=Lt().tf;var d=A.referrer?ek(kk(A.referrer),"host"):"";a.Um=Zt.test(d);a.Pm=$t.test(d);return a};var cu=["https://www.google.com","https://www.youtube.com"]; equals www.youtube.com (Youtube)
Source: chromecache_111.2.dr	String found in binary or memory: g.A.getVideoUrl=function(F,k,z,x,D,e,C){k={list:k};z&&(D?k.time_continue=z:k.t=z);z=C?"music.youtube.com":g.gw(this);D=z==="www.youtube.com";!e&&x&&D?e="https://youtu.be/"+F:g.IB(this)?(e="https://"+z+"/fire",k.v=F):(e&&D?(e=this.protocol+"://"+z+"/shorts/"+F,x&&(k.feature="share")):(e=this.protocol+"://"+z+"/watch",k.v=F),k4&&(F=SgY())&&(k.ebc=F));return g.oW(e,k)}; equals www.youtube.com (Youtube)
Source: chromecache_111.2.dr	String found in binary or memory: g.gw=function(F){F=bW(F.e5);return F==="www.youtube-nocookie.com"?"www.youtube.com":F}; equals www.youtube.com (Youtube)
Source: chromecache_111.2.dr	String found in binary or memory: g.xE=function(F){var k=g.gw(F);ipI.includes(k)&&(k="www.youtube.com");return F.protocol+"://"+k}; equals www.youtube.com (Youtube)
Source: chromecache_148.2.dr	String found in binary or memory: if(!(f\|\|g\|\|k\|\|m.length\|\|n.length))return;var q={Xh:f,Vh:g,Wh:k,Hi:m,Ii:n,rf:p,Rb:e},r=z.YT;if(r)return r.ready&&r.ready(d),e;var v=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){v&&v();d()};D(function(){for(var u=A.getElementsByTagName("script"),t=u.length,w=0;w<t;w++){var x=u[w].getAttribute("src");if(PH(x,"iframe_api")\|\|PH(x,"player_api"))return e}for(var y=A.getElementsByTagName("iframe"),B=y.length,C=0;C<B;C++)if(!GH&&NH(y[C],q.rf))return sc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_111.2.dr	String found in binary or memory: k.customBaseYoutubeUrl:F.BASE_YT_URL)\|\|"")\|\|$I(this.y6)\|\|this.protocol+"://www.youtube.com/";C=k?k.eventLabel:F.el;x="detailpage";C==="adunit"?x=this.j?"embedded":"detailpage":C==="embedded"\|\|this.G?x=Cu(x,C,nhH):C&&(x="embedded");this.Xf=x;GEY();C=null;x=k?k.playerStyle:F.ps;e=g.fC(M59,x);!x\|\|e&&!this.G\|\|(C=x);this.playerStyle=C;this.S=g.fC(M59,this.playerStyle);this.houseBrandUserStatus=k==null?void 0:k.houseBrandUserStatus;this.PR=this.S&&this.playerStyle!=="play"&&this.playerStyle!=="jamboard"; equals www.youtube.com (Youtube)
Source: chromecache_111.2.dr	String found in binary or memory: k=this.api.C();F=this.api.getVideoData();var z="";k.U\|\|(k=g.gw(k),k.indexOf("www.")===0&&(k=k.substring(4)),z=g.D9(F)?"Watch on YouTube Music":k==="youtube.com"?"Watch on YouTube":g.rG("Watch on $WEBSITE",{WEBSITE:k}));this.updateValue("title",z)}; equals www.youtube.com (Youtube)
Source: chromecache_111.2.dr	String found in binary or memory: new Set;this.deviceIsAudioOnly=!(k==null\|\|!k.deviceIsAudioOnly);this.yf=Ax(this.yf,F.ismb);this.Tc?(m=F.vss_host\|\|"s.youtube.com",m==="s.youtube.com"&&(m=bW(this.e5)\|\|"www.youtube.com")):m="video.google.com";this.Cs=m;dw(this,F,!0);this.yh=new $H;g.b(this,this.yh);w=k?k.innertubeApiKey:pu("",F.innertube_api_key);u=k?k.innertubeApiVersion:pu("",F.innertube_api_version);m=k?k.innertubeContextClientVersion:pu("",F.innertube_context_client_version);w=g.LX("INNERTUBE_API_KEY")\|\|w;u=g.LX("INNERTUBE_API_VERSION")\|\| equals www.youtube.com (Youtube)
Source: chromecache_111.2.dr	String found in binary or memory: tC.prototype.rg=function(){return this.d9.l()};var LbC=(new Date).getTime();var kO9="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),oQY=/\bocr\b/;var xOn=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var urR=Object.assign({},{attributes:{},handleError:function(F){throw F;}},{EyG:!0, equals www.youtube.com (Youtube)
Source: chromecache_111.2.dr	String found in binary or memory: this.YG.t4&&(F.authuser=this.YG.t4);this.YG.pageId&&(F.pageid=this.YG.pageId);isNaN(this.cryptoPeriodIndex)\|\|(F.cpi=this.cryptoPeriodIndex.toString());var D=(D=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.ZH()))?D[1]:"";D==="ATV"&&(F.cdt=D);this.W=F;this.W.session_id=x;this.K=!0;this.L.flavor==="widevine"&&(this.W.hdr="1");this.L.flavor==="playready"&&(k=Number(oB(k.experiments,"playready_first_play_expiration")),!isNaN(k)&&k>=0&&(this.W.mfpe=""+k),this.K=!1);k="";g.Yl(this.L)?gi(this.L)?(x=z.L)&&(k="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_111.2.dr	String found in binary or memory: var sG={};var Wq7={wM:[{N6:/Unable to load player module/,weight:20},{N6:/Failed to fetch/,weight:500},{N6:/XHR API fetch failed/,weight:10},{N6:/JSON parsing failed after XHR fetch/,weight:10},{N6:/Retrying OnePlatform request/,weight:10},{N6:/CSN Missing or undefined during playback association/,weight:100},{N6:/Non-recoverable error. Do not retry./,weight:0},{N6:/Internal Error. Retry with an exponential backoff./,weight:0},{N6:/API disabled by application./,weight:0}],PT:[{callback:cf5,weight:500}]};var gu5=/[&\?]action_proxy=1/,R2C=/[&\?]token=([\w-])/,Ysa=/[&\?]video_id=([\w-])/,nuM=/[&\?]index=([\d-])/,M$6=/[&\?]m_pos_ms=([\d-])/,fK9=/[&\?]vvt=([\w-]*)/,IKY="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),Lw6="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),Ss6={android:"ANDROID", equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: colorado.findyourunclaimedproperty.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 10, 2025 14:57:09.405339956 CEST	53	51702	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:09.935165882 CEST	53	51533	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:10.425380945 CEST	53	61568	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:10.738874912 CEST	53	52106	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:11.362334013 CEST	53	64088	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:13.280399084 CEST	51809	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:13.280553102 CEST	64924	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:13.365679026 CEST	53	51809	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:13.365705013 CEST	53	64924	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:14.950845957 CEST	49925	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:14.951133013 CEST	60974	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:14.973253965 CEST	51934	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:14.973651886 CEST	64500	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:15.055560112 CEST	53	60974	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:15.057971001 CEST	53	49925	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:15.058479071 CEST	53	51934	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:15.058645010 CEST	53	64500	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:15.596508980 CEST	53	60017	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:15.639453888 CEST	53	57712	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:16.199316025 CEST	53828	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:16.199795008 CEST	57901	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:16.291990042 CEST	53	53828	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:16.292085886 CEST	53	57901	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:16.920000076 CEST	49720	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:16.920150995 CEST	50859	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:17.011740923 CEST	53	49720	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:17.011759996 CEST	53	50859	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:17.697964907 CEST	53	57092	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:18.280064106 CEST	10339	10619	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280064106 CEST	10281	31593	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280098915 CEST	30305	29216	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280098915 CEST	30821	25461	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280098915 CEST	8748	25902	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280098915 CEST	30060	27686	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280098915 CEST	14950	30062	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280098915 CEST	28509	15215	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280098915 CEST	9062	26214	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280098915 CEST	29761	29812	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280103922 CEST	11387	24931	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280103922 CEST	29216	17522	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280143976 CEST	26217	28257	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280143976 CEST	8809	28272	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280143976 CEST	30313	29545	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280143976 CEST	26223	29224	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280143976 CEST	27426	23846	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280143976 CEST	23330	26990	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280143976 CEST	25902	21093	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280143976 CEST	29797	29281	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280153990 CEST	25442	16742	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280153990 CEST	26203	8818	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280153990 CEST	11297	12329	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280153990 CEST	31091	10350	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280153990 CEST	11297	12585	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280153990 CEST	25971	26669	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280154943 CEST	25966	29783	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280154943 CEST	8308	26725	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280159950 CEST	30574	8311	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280159950 CEST	24948	24877	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280159950 CEST	30309	11619	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:18.280159950 CEST	28019	11878	192.168.2.4	192.168.2.1
Apr 10, 2025 14:57:28.466801882 CEST	53	51973	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:32.563371897 CEST	52335	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:32.563424110 CEST	61434	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:32.654614925 CEST	53	52335	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:32.654644966 CEST	53	61434	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:32.657675028 CEST	58331	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:32.657675028 CEST	52008	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:32.740710974 CEST	53	61194	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:32.741380930 CEST	53	58331	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:32.741888046 CEST	53	52008	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:32.743362904 CEST	53	50117	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:33.360650063 CEST	51541	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:33.360923052 CEST	58462	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:33.456852913 CEST	53	51541	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:33.456866980 CEST	53	58462	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:33.694930077 CEST	56998	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:33.695067883 CEST	57671	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:33.793771029 CEST	53	56998	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:33.793781996 CEST	53	57671	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:34.785845041 CEST	53	63251	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:35.072015047 CEST	64769	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:35.072279930 CEST	62112	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:35.109967947 CEST	58316	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:35.109967947 CEST	50918	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:35.159487009 CEST	53	64769	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:35.159513950 CEST	53	62112	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:35.194106102 CEST	53	58316	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:35.194129944 CEST	53	50918	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:35.197284937 CEST	56750	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:35.197284937 CEST	54183	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:35.299587011 CEST	53	56750	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:35.299616098 CEST	53	54183	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:35.310318947 CEST	53	63576	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:35.347429037 CEST	53729	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:35.347429037 CEST	52038	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:35.436410904 CEST	53	53729	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:35.436830997 CEST	53	52038	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:36.008270025 CEST	53	54632	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:36.215764046 CEST	50483	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:36.216164112 CEST	49593	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:36.314163923 CEST	53	50483	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:36.315157890 CEST	53	49593	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:36.818773031 CEST	50396	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:36.819108009 CEST	53259	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:36.905677080 CEST	53	50396	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:36.905963898 CEST	53	53259	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:43.509149075 CEST	55962	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:43.509434938 CEST	53565	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:43.594259977 CEST	53	55962	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:43.594290018 CEST	53	53565	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:43.820333958 CEST	52835	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:43.820569038 CEST	60120	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:43.920706987 CEST	53	52835	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:43.921324968 CEST	53	60120	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:43.922991037 CEST	53	56688	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:44.451144934 CEST	63834	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:44.451348066 CEST	51823	53	192.168.2.4	1.1.1.1
Apr 10, 2025 14:57:44.537113905 CEST	53	63834	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:44.537215948 CEST	53	51823	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:47.546271086 CEST	53	56620	1.1.1.1	192.168.2.4
Apr 10, 2025 14:57:47.640110970 CEST	53	51951	162.159.36.2	192.168.2.4
Apr 10, 2025 14:58:08.823767900 CEST	53	57468	1.1.1.1	192.168.2.4
Apr 10, 2025 14:58:10.134171009 CEST	53	62924	1.1.1.1	192.168.2.4
Apr 10, 2025 14:58:16.556093931 CEST	138	138	192.168.2.4	192.168.2.255

Timestamp	Bytes transferred	Direction	Data
Apr 10, 2025 14:57:19.883654118 CEST	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Apr 10, 2025 14:57:19.980220079 CEST	1031	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="cacerts" Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]} Content-Length: 1739 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 10 Apr 2025 12:16:39 GMT Expires: Thu, 10 Apr 2025 13:06:39 GMT Cache-Control: public, max-age=3000 Age: 2440 Last-Modified: Mon, 07 Apr 2025 13:58:00 GMT Content-Type: application/pkix-crl Vary: Accept-Encoding Data Raw: 30 82 06 c7 30 82 05 af 02 01 01 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 57 31 0b 30 09 06 03 55 04 06 13 02 42 45 31 19 30 17 06 03 55 04 0a 13 10 47 6c 6f 62 61 6c 53 69 67 6e 20 6e 76 2d 73 61 31 10 30 0e 06 03 55 04 0b 13 07 52 6f 6f 74 20 43 41 31 1b 30 19 06 03 55 04 03 13 12 47 6c 6f 62 61 6c 53 69 67 6e 20 52 6f 6f 74 20 43 41 17 0d 32 35 30 34 30 37 30 30 30 30 30 30 5a 17 0d 32 35 30 37 31 35 30 30 30 30 30 30 5a 30 82 04 f1 30 2a 02 0b 04 00 00 00 00 01 1e 44 a5 e4 04 17 0d 31 34 31 31 32 35 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2a 02 0b 04 00 00 00 00 01 29 45 c3 a8 0f 17 0d 31 34 31 31 32 35 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2a 02 0b 04 00 00 00 00 01 20 19 c1 8d 68 17 0d 31 34 31 31 32 35 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2a 02 0b 04 00 00 00 00 01 2c 5e 7f 1a 88 17 0d 31 34 31 31 32 35 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 Data Ascii: 000H0W10UBE10UGlobalSign nv-sa10URoot CA10UGlobalSign Root CA250407000000Z250715000000Z00D141125000000Z00U0)E141125000000Z00U0 h141125000000Z00U0*,^141125000000Z00
Apr 10, 2025 14:57:19.980231047 CEST	1031	IN	Data Raw: 55 1d 15 04 03 0a 01 05 30 2a 02 0b 04 00 00 00 00 01 15 4b 5a c5 a7 17 0d 31 36 30 31 30 37 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2a 02 0b 04 00 00 00 00 01 2f 4e e1 49 52 17 0d 31 37 30 34 31 39 30 30 30 30 30 30 5a Data Ascii: U0KZ160107000000Z00U0/NIR170419000000Z00U0/NG170419000000Z00U0/N9191120000000Z00U0/N=k191204000000Z00U0/N;X
Apr 10, 2025 14:57:19.980241060 CEST	391	IN	Data Raw: 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2d 02 0e 46 74 37 73 59 b7 a7 4a 8b d8 50 94 c5 cb 17 0d 32 32 30 37 30 37 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 a0 2f 30 2d 30 0a 06 03 55 1d 14 04 03 02 01 61 Data Ascii: 0000Z00U0-Ft7sYJP220707000000Z00U/0-0Ua0U#0`{fEP/}4K0*HZS.y2F6_.r!Owk[NyhMP\|tiCTx@
Apr 10, 2025 14:57:20.548944950 CEST	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Apr 10, 2025 14:57:20.648458958 CEST	1031	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="cacerts" Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]} Content-Length: 530 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 10 Apr 2025 12:48:38 GMT Expires: Thu, 10 Apr 2025 13:38:38 GMT Cache-Control: public, max-age=3000 Age: 522 Last-Modified: Thu, 03 Apr 2025 14:18:00 GMT Content-Type: application/pkix-crl Vary: Accept-Encoding Data Raw: 30 82 02 0e 30 82 01 93 02 01 01 30 0a 06 08 2a 86 48 ce 3d 04 03 03 30 47 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 22 30 20 06 03 55 04 0a 13 19 47 6f 6f 67 6c 65 20 54 72 75 73 74 20 53 65 72 76 69 63 65 73 20 4c 4c 43 31 14 30 12 06 03 55 04 03 13 0b 47 54 53 20 52 6f 6f 74 20 52 34 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 17 0d 32 36 30 32 32 38 30 37 35 39 35 39 5a 30 81 e9 30 2f 02 10 6e 47 a9 ce 4f 46 c2 3d e2 49 ea cc 38 94 53 73 17 0d 31 39 30 39 33 30 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 f0 9c 5b 70 05 a6 dc 86 e2 f9 9e f3 17 0d 32 30 30 31 33 31 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 fe a5 81 44 7e 3b fd 3b b8 1c 24 98 17 0d 32 33 30 36 31 33 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 16 68 25 e1 70 04 40 61 24 91 f5 40 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 Data Ascii: 000*H=0G10UUS1"0 UGoogle Trust Services LLC10UGTS Root R4250403080000Z260228075959Z00/nGOF=I8Ss190930000000Z00U0,[p200131000000Z00U0,D~;;$230613000000Z00U0,h%p@a$@250403080000Z00U0,
Apr 10, 2025 14:57:20.648484945 CEST	211	IN	Data Raw: 0d 02 00 8e b2 58 e7 b5 94 0c 1f f9 00 44 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 a0 2f 30 2d 30 0a 06 03 55 1d 14 04 03 02 01 17 30 1f 06 03 55 1d 23 04 18 30 16 80 14 80 4c d6 eb 74 ff 49 36 a3 d5 Data Ascii: XD250403080000Z00U/0-0U0U#0LtI6>j0*H=i0f1>2en:IN@g=;bQZ~`NX1?^4y[$\4{;$zDeU6O

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:15 UTC	688	OUT	GET / HTTP/1.1 Host: colorado.findyourunclaimedproperty.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-10 12:57:15 UTC	849	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 4155 Connection: close Last-Modified: Wed, 02 Apr 2025 17:22:14 GMT X-Amz-Version-Id: h0LbTtoTO3ZvwqLQj_syehASyt8qDR.k Server: AmazonS3 Date: Wed, 09 Apr 2025 13:08:16 GMT Etag: "35599cfec4e4cc62b2f67a3419a1694e" Vary: Accept-Encoding Via: 1.1 f2d96237236476e7356cfe5344feb776.cloudfront.net (CloudFront) Age: 85740 Cache-Control: max-age=86400, must-revalidate Content-Security-Policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: NOSNIFF X-Frame-Options: DENY X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: 3J5mEvLfNfYFHvNanqDQ-hLpwy-3LQL_TY_EukVIzuQ-ZAphlHMG0w==
2025-04-10 12:57:15 UTC	4155	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 63 72 69 74 74 65 72 73 2d 63 6f 6e 74 61 69 6e 65 72 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 72 61 67 6d 65 6e 74 22 20 63 6f 6e 74 65 6e 74 3d 22 21 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 Data Ascii: <!doctype html><html lang="en" data-critters-container><head> <base href="/"> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"> <meta charset="UTF-8"> <meta name="fragment" content="!"> <meta name="description" content> <meta na

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:15 UTC	640	OUT	GET /fonts/open-sans.woff2 HTTP/1.1 Host: colorado.findyourunclaimedproperty.com Connection: keep-alive Origin: https://colorado.findyourunclaimedproperty.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://colorado.findyourunclaimedproperty.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-10 12:57:15 UTC	860	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 15556 Connection: close Last-Modified: Wed, 02 Apr 2025 17:22:11 GMT X-Amz-Version-Id: VjLttAn8lutapBZGReSSh6eUv1CsRy3d Server: AmazonS3 Date: Wed, 09 Apr 2025 13:14:02 GMT Etag: "4c9a4bc2b383253d953bad3699c3ab1b" Vary: Accept-Encoding Via: 1.1 dee3e3075e44bf98642bfe89cb38088a.cloudfront.net (CloudFront) Age: 85394 Cache-Control: max-age=86400, must-revalidate Content-Security-Policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: NOSNIFF X-Frame-Options: DENY X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: cvxSg5Hg5QKuwiLdPAcj7PyDHeUANn9MPOXtFl8Xtbpx0Dobe-jgJg==
2025-04-10 12:57:15 UTC	15556	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 3c c4 00 12 00 00 00 00 86 0c 00 00 3c 60 00 01 19 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 16 1b 0c 1c 74 06 60 00 81 44 08 81 22 09 8f 34 11 10 0a 81 a4 24 81 8d 22 01 36 02 24 03 86 68 13 bd 10 0b 83 3a 00 04 20 05 82 32 07 84 26 0c 82 09 1b 94 77 29 44 de 76 9f 6c 09 21 d0 6d 00 06 bb 5a 98 54 ed 3f 8a 0a d5 7a 45 51 4e 99 8c 67 ff ff ff ff 7f 62 52 19 32 9b 74 a4 50 18 0e 75 ea ef 34 91 88 90 48 0d 6b d5 b2 62 40 44 c8 84 42 11 49 42 99 58 8f 81 42 91 1d c4 73 5a 58 83 5b 04 08 42 36 f1 70 a5 75 72 98 60 d9 3d aa 98 40 f2 ac 20 da c3 7a ab 62 93 3e 96 75 92 c5 ef a8 27 04 0a e5 09 91 66 87 2a d6 d0 56 37 72 d7 16 a7 ca e9 f0 c2 b3 98 e5 69 d6 6c c7 93 a6 89 69 b3 f4 2c de e1 cd f2 fc e0 e0 a3 a0 Data Ascii: wOF2<<`t`D"4$"6$h: 2&w)Dvl!mZT?zEQNgbR2tPu4Hkb@DBIBXBsZX[B6pur`=@ zb>u'f*V7rili,

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:15 UTC	648	OUT	GET /runtime.cde2d555f62ca663.js HTTP/1.1 Host: colorado.findyourunclaimedproperty.com Connection: keep-alive Origin: https://colorado.findyourunclaimedproperty.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://colorado.findyourunclaimedproperty.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-10 12:57:15 UTC	856	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3533 Connection: close Last-Modified: Wed, 02 Apr 2025 17:22:13 GMT X-Amz-Version-Id: 9gKsrEZCRHt_ZxIluUSJRax3.DUnMZlf Server: AmazonS3 Date: Wed, 09 Apr 2025 13:16:27 GMT Etag: "a2809f99a70f8a2565f5162b757b55e2" Vary: Accept-Encoding Via: 1.1 3ffc96c97d8be4bd38d62dce94cb1db0.cloudfront.net (CloudFront) Age: 85265 Cache-Control: max-age=31536000, public Content-Security-Policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: NOSNIFF X-Frame-Options: DENY X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: YvJTkXsZ0cQcR9q-sk_mgHbcx7Ol30WES_1yUp3YIwaqOizs69zBAA==
2025-04-10 12:57:15 UTC	3533	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3c 22 75 22 3f 77 69 6e 64 6f 77 3a 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3c 22 75 22 3f 67 6c 6f 62 61 6c 3a 74 79 70 65 6f 66 20 73 65 6c 66 3c 22 75 22 3f 73 65 6c 66 3a 7b 7d 2c 76 3d 28 6e 65 77 20 62 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 76 26 26 28 62 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 62 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 62 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 76 5d 3d 22 30 32 39 39 34 32 64 31 2d 66 65 39 37 2d 34 33 39 32 2d 62 32 39 61 2d 38 63 36 33 32 30 61 63 34 39 32 66 22 2c 62 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 49 64 65 6e 74 69 66 69 65 72 3d 22 73 65 6e 74 72 Data Ascii: !function(){try{var b=typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{},v=(new b.Error).stack;v&&(b._sentryDebugIds=b._sentryDebugIds\|\|{},b._sentryDebugIds[v]="029942d1-fe97-4392-b29a-8c6320ac492f",b._sentryDebugIdIdentifier="sentr

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:15 UTC	650	OUT	GET /polyfills.e04b81825cd956ec.js HTTP/1.1 Host: colorado.findyourunclaimedproperty.com Connection: keep-alive Origin: https://colorado.findyourunclaimedproperty.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://colorado.findyourunclaimedproperty.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-10 12:57:15 UTC	857	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 63756 Connection: close Last-Modified: Wed, 02 Apr 2025 17:22:13 GMT X-Amz-Version-Id: YzZ2pZbHcM1D6tImI8SsUPGcIltMGivz Server: AmazonS3 Date: Wed, 09 Apr 2025 13:16:11 GMT Etag: "7a0d3e66167cf06b18367db45f0dcb4d" Vary: Accept-Encoding Via: 1.1 67d3f8867c3d6540e7495f9026c9c57a.cloudfront.net (CloudFront) Age: 85265 Cache-Control: max-age=31536000, public Content-Security-Policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: NOSNIFF X-Frame-Options: DENY X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: f9H61Hcf1Nb7hMRD3DJjl_wB7A5hTd3FLjyFBdUlrpY0M7_ugwMajw==
2025-04-10 12:57:15 UTC	15527	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 69 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3c 22 75 22 3f 77 69 6e 64 6f 77 3a 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3c 22 75 22 3f 67 6c 6f 62 61 6c 3a 74 79 70 65 6f 66 20 73 65 6c 66 3c 22 75 22 3f 73 65 6c 66 3a 7b 7d 2c 76 3d 28 6e 65 77 20 69 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 76 26 26 28 69 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 69 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 69 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 76 5d 3d 22 66 64 64 33 61 32 30 32 2d 38 61 34 39 2d 34 63 65 62 2d 38 31 36 34 2d 64 37 37 33 39 33 32 65 31 34 38 34 22 2c 69 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 49 64 65 6e 74 69 66 69 65 72 3d 22 73 65 6e 74 72 Data Ascii: !function(){try{var i=typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{},v=(new i.Error).stack;v&&(i._sentryDebugIds=i._sentryDebugIds\|\|{},i._sentryDebugIds[v]="fdd3a202-8a49-4ceb-8164-d773932e1484",i._sentryDebugIdIdentifier="sentr
2025-04-10 12:57:15 UTC	16384	IN	Data Raw: 65 22 29 2c 49 3d 6f 28 22 74 68 65 6e 22 29 2c 4a 3d 22 5f 5f 63 72 65 61 74 69 6f 6e 54 72 61 63 65 5f 5f 22 3b 53 2e 6f 6e 55 6e 68 61 6e 64 6c 65 64 45 72 72 6f 72 3d 6b 3d 3e 7b 69 66 28 53 2e 73 68 6f 77 55 6e 63 61 75 67 68 74 45 72 72 6f 72 28 29 29 7b 63 6f 6e 73 74 20 5a 3d 6b 26 26 6b 2e 72 65 6a 65 63 74 69 6f 6e 3b 5a 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 55 6e 68 61 6e 64 6c 65 64 20 50 72 6f 6d 69 73 65 20 72 65 6a 65 63 74 69 6f 6e 3a 22 2c 5a 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 5a 2e 6d 65 73 73 61 67 65 3a 5a 2c 22 3b 20 5a 6f 6e 65 3a 22 2c 6b 2e 7a 6f 6e 65 2e 6e 61 6d 65 2c 22 3b 20 54 61 73 6b 3a 22 2c 6b 2e 74 61 73 6b 26 26 6b 2e 74 61 73 6b 2e 73 6f 75 72 63 65 2c 22 3b 20 56 61 6c 75 65 3a 22 2c 5a 2c Data Ascii: e"),I=o("then"),J="__creationTrace__";S.onUnhandledError=k=>{if(S.showUncaughtError()){const Z=k&&k.rejection;Z?console.error("Unhandled Promise rejection:",Z instanceof Error?Z.message:Z,"; Zone:",k.zone.name,"; Task:",k.task&&k.task.source,"; Value:",Z,
2025-04-10 12:57:15 UTC	16384	IN	Data Raw: 5a 6f 6e 65 5b 63 2e 73 79 6d 62 6f 6c 28 22 70 61 74 63 68 45 76 65 6e 74 73 22 29 5d 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 53 3d 79 2e 5f 5f 5a 6f 6e 65 5f 69 67 6e 6f 72 65 5f 6f 6e 5f 70 72 6f 70 65 72 74 69 65 73 3b 6c 65 74 20 78 3d 5b 5d 3b 69 66 28 56 29 7b 63 6f 6e 73 74 20 6a 3d 77 69 6e 64 6f 77 3b 78 3d 78 2e 63 6f 6e 63 61 74 28 5b 22 44 6f 63 75 6d 65 6e 74 22 2c 22 53 56 47 45 6c 65 6d 65 6e 74 22 2c 22 45 6c 65 6d 65 6e 74 22 2c 22 48 54 4d 4c 45 6c 65 6d 65 6e 74 22 2c 22 48 54 4d 4c 42 6f 64 79 45 6c 65 6d 65 6e 74 22 2c 22 48 54 4d 4c 4d 65 64 69 61 45 6c 65 6d 65 6e 74 22 2c 22 48 54 4d 4c 46 72 61 6d 65 53 65 74 45 6c 65 6d 65 6e 74 22 2c 22 48 54 4d 4c 46 72 61 6d 65 45 6c 65 6d 65 6e 74 22 2c 22 48 54 4d 4c 49 46 72 61 6d 65 45 Data Ascii: Zone[c.symbol("patchEvents")])return;const S=y.__Zone_ignore_on_properties;let x=[];if(V){const j=window;x=x.concat(["Document","SVGElement","Element","HTMLElement","HTMLBodyElement","HTMLMediaElement","HTMLFrameSetElement","HTMLFrameElement","HTMLIFrameE
2025-04-10 12:57:16 UTC	12467	IN	Data Raw: 66 28 21 42 29 72 65 74 75 72 6e 22 45 22 3b 64 28 44 29 7d 72 65 74 75 72 6e 20 44 5b 65 5d 2e 69 7d 2c 67 65 74 57 65 61 6b 3a 66 75 6e 63 74 69 6f 6e 28 44 2c 42 29 7b 69 66 28 21 75 28 44 2c 65 29 29 7b 69 66 28 21 68 28 44 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 42 29 72 65 74 75 72 6e 21 31 3b 64 28 44 29 7d 72 65 74 75 72 6e 20 44 5b 65 5d 2e 77 7d 2c 6f 6e 46 72 65 65 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 44 29 7b 72 65 74 75 72 6e 20 70 26 26 4f 2e 4e 45 45 44 26 26 68 28 44 29 26 26 21 75 28 44 2c 65 29 26 26 64 28 44 29 2c 44 7d 7d 7d 2c 34 38 36 32 30 3a 28 69 2c 76 2c 74 29 3d 3e 7b 76 61 72 20 65 3d 74 28 35 38 39 33 30 29 2c 72 3d 74 28 31 39 39 32 29 2c 75 3d 74 28 36 39 30 39 31 29 28 22 6d 65 74 61 64 61 74 61 22 29 2c 61 3d 75 2e 73 Data Ascii: f(!B)return"E";d(D)}return D[e].i},getWeak:function(D,B){if(!u(D,e)){if(!h(D))return!0;if(!B)return!1;d(D)}return D[e].w},onFreeze:function(D){return p&&O.NEED&&h(D)&&!u(D,e)&&d(D),D}}},48620:(i,v,t)=>{var e=t(58930),r=t(1992),u=t(69091)("metadata"),a=u.s
2025-04-10 12:57:16 UTC	2994	IN	Data Raw: 37 34 30 31 3a 28 69 2c 76 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 74 28 31 39 39 32 29 2c 72 3d 74 28 38 32 33 37 35 29 2c 75 3d 74 28 34 39 38 36 33 29 2c 61 3d 74 28 37 39 31 32 31 29 3b 74 28 33 38 37 38 30 29 26 26 65 28 65 2e 50 2b 74 28 33 39 38 38 33 29 2c 22 4f 62 6a 65 63 74 22 2c 7b 5f 5f 64 65 66 69 6e 65 53 65 74 74 65 72 5f 5f 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 70 29 7b 61 2e 66 28 72 28 74 68 69 73 29 2c 68 2c 7b 73 65 74 3a 75 28 70 29 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 7d 29 7d 2c 34 34 36 30 30 3a 28 69 2c 76 2c 74 29 3d 3e 7b 76 61 72 20 65 3d 74 28 31 39 39 32 29 2c 72 3d 74 28 32 39 39 32 39 29 28 21 30 29 3b 65 28 65 2e 53 2c 22 4f 62 Data Ascii: 7401:(i,v,t)=>{"use strict";var e=t(1992),r=t(82375),u=t(49863),a=t(79121);t(38780)&&e(e.P+t(39883),"Object",{__defineSetter__:function(h,p){a.f(r(this),h,{set:u(p),enumerable:!0,configurable:!0})}})},44600:(i,v,t)=>{var e=t(1992),r=t(29929)(!0);e(e.S,"Ob

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Category:	downloaded
Size (bytes):	1126
Entropy (8bit):	7.348627859276372
Encrypted:	false
SSDEEP:	24:tsb7C4nnXJz0qML2z2DKtIG1cnXbL1uYjKPN:6jz0uieIBXJk
MD5:	430A7BCF1F13ECD4F6F841151A81F1A5
SHA1:	0F2D94A58ABBF20F719FCDFD504F4436A01D908A
SHA-256:	1C1C5CE7C9B816626A28008095FFCAB1DCB2B8CF2E3D3289801CA5FC04EA1E8B
SHA-512:	06B50682EDC8151E139E2A49C3CC6E80E013DBE3DB26D44A9D6658C1F810FF050681C3062674A6E0F75BA381FA05E8239298F30D88895BC3AEA1110671F1B5A5
Malicious:	false
Reputation:	low
URL:	https://yt3.ggpht.com/ytc/AIdro_k1Xp3OrktpqNwGhtbo6zA1N8xZfM2-ivxM7ptxl7Dd_E2Ehrne9RE1y1nc08gin6WZJg=s68-c-k-c0x00ffffff-no-rj
Preview:	......JFIF......................................................................................................................................................D.D......................................................................!1AQR...234Baq.................................1........................!1.AQq...a..2......"#b.............?..'..D..@....@....@....@....@....o......N=m....<.hE..(....../"...OHV.......BU6Qg......2~...c..6.?/.Ln=....~..{L.k..+..C..X.O.%...bY..ar.r..MV.ve}. ..#..+.0...eu=D..jd.x_}..T.&...3.... .... ..Mp....4.rjL..mj....d...2......?....=w.KU.sj......J.............$C]..U..T.U..q.[...C).m..0...`H;.e..0N..]5g..qY2\3!pD.....?.M3X.O...YM7Uy......U`..#.._N_....>.....N.>w..L...m2...6..?.7.sl@....@.....Bp7C^h....6P[....c.2..Go......<...[...Z_..a..tZ..(..+c..;W.j.+...o.._...T.o..mu......je.......i. .... ..v.....g.......+.d\.R...`...Vx.lGX...0UTU8}S...j....=rY....m.r..ROu..j...u.kC.x-.po....Qf=L...NYS.V.rl$0.z..q.D...B...D..

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Category:	dropped
Size (bytes):	1126
Entropy (8bit):	7.348627859276372
Encrypted:	false
SSDEEP:	24:tsb7C4nnXJz0qML2z2DKtIG1cnXbL1uYjKPN:6jz0uieIBXJk
MD5:	430A7BCF1F13ECD4F6F841151A81F1A5
SHA1:	0F2D94A58ABBF20F719FCDFD504F4436A01D908A
SHA-256:	1C1C5CE7C9B816626A28008095FFCAB1DCB2B8CF2E3D3289801CA5FC04EA1E8B
SHA-512:	06B50682EDC8151E139E2A49C3CC6E80E013DBE3DB26D44A9D6658C1F810FF050681C3062674A6E0F75BA381FA05E8239298F30D88895BC3AEA1110671F1B5A5
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................D.D......................................................................!1AQR...234Baq.................................1........................!1.AQq...a..2......"#b.............?..'..D..@....@....@....@....@....o......N=m....<.hE..(....../"...OHV.......BU6Qg......2~...c..6.?/.Ln=....~..{L.k..+..C..X.O.%...bY..ar.r..MV.ve}. ..#..+.0...eu=D..jd.x_}..T.&...3.... .... ..Mp....4.rjL..mj....d...2......?....=w.KU.sj......J.............$C]..U..T.U..q.[...C).m..0...`H;.e..0N..]5g..qY2\3!pD.....?.M3X.O...YM7Uy......U`..#.._N_....>.....N.>w..L...m2...6..?.7.sl@....@.....Bp7C^h....6P[....c.2..Go......<...[...Z_..a..tZ..(..+c..;W.j.+...o.._...T.o..mu......je.......i. .... ..v.....g.......+.d\.R...`...Vx.lGX...0UTU8}S...j....=rY....m.r..ROu..j...u.kC.x-.po....Qf=L...NYS.V.rl$0.z..q.D...B...D..

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (700)
Category:	downloaded
Size (bytes):	2551052
Entropy (8bit):	5.72348653325834
Encrypted:	false
SSDEEP:	24576:t+sYWcC0iIOkA9cMJsqHfSci8s4UvKEbJRRiN2FWyAPh1t4QNmU:8fWX0iIc39aci8s4UvxPK4emU
MD5:	A32BDF3886C0801A44CB7BE39EB70824
SHA1:	39CF025F463C5D8B07594D9E137CEF244003E01D
SHA-256:	4DFAF219E6A615AA2D7C3D0F12E3B513E0A81C501907D445B9C4B26CC96CB050
SHA-512:	5BFFD42B3A8F0C9BF1CC86416CE983127BF162FDCC58D6DF3C4D9F0518CE4C706B1226A048FDEC76BAB9DF5AF8582E4A1FA9F696A53A4FF2CD6C71B4E36FE905
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/9599b765/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.dev/license././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1603
Entropy (8bit):	5.2727801090429285
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8x/S8f:3qD+2+pUAew85zsaA
MD5:	78FD7C1A980B9162702E6F984A25B7A6
SHA1:	E832ABE897CDAA5E36131733AF619F174AD0F9C5
SHA-256:	1C5A3539A6FBE5420A519540FF6662EFEACB0BB1B9B8314C74064694A0D52C0B
SHA-512:	06B0C9A98D1F6B5BCF81D81574258B7D479579CD80FC51105C58B99263D802EFD64ECF6B5A9A3105C1046FB7EE3F776547E1593436AFC3E6C0820D149C0913BA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:15 UTC	645	OUT	GET /main.1201526bdac1794c.js HTTP/1.1 Host: colorado.findyourunclaimedproperty.com Connection: keep-alive Origin: https://colorado.findyourunclaimedproperty.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://colorado.findyourunclaimedproperty.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-10 12:57:15 UTC	859	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1542073 Connection: close Last-Modified: Wed, 02 Apr 2025 17:22:13 GMT X-Amz-Version-Id: 29FwMd0eP4CFhMkdpxhNzZ2OPKaYRV3k Server: AmazonS3 Date: Wed, 09 Apr 2025 13:16:11 GMT Etag: "c8e0699b4bf87c87634a40dc71ea4f0c" Vary: Accept-Encoding Via: 1.1 1d0c8380d9f12c4c559633dbe9e5eeca.cloudfront.net (CloudFront) Age: 85265 Cache-Control: max-age=31536000, public Content-Security-Policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: NOSNIFF X-Frame-Options: DENY X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: T9PmnjhAKZm1TFhiC2MHheluDyS1R-EZXxXKlbSQhLf_lFdfLzIZqw==
2025-04-10 12:57:15 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 5a 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3c 22 75 22 3f 77 69 6e 64 6f 77 3a 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3c 22 75 22 3f 67 6c 6f 62 61 6c 3a 74 79 70 65 6f 66 20 73 65 6c 66 3c 22 75 22 3f 73 65 6c 66 3a 7b 7d 2c 45 3d 28 6e 65 77 20 5a 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 45 26 26 28 5a 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 5a 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 5a 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 45 5d 3d 22 37 39 30 39 31 30 31 64 2d 30 65 63 66 2d 34 63 38 62 2d 39 32 34 33 2d 35 37 62 39 35 66 32 66 33 30 64 36 22 2c 5a 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 49 64 65 6e 74 69 66 69 65 72 3d 22 73 65 6e 74 72 Data Ascii: !function(){try{var Z=typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{},E=(new Z.Error).stack;E&&(Z._sentryDebugIds=Z._sentryDebugIds\|\|{},Z._sentryDebugIds[E]="7909101d-0ecf-4c8b-9243-57b95f2f30d6",Z._sentryDebugIdIdentifier="sentr
2025-04-10 12:57:15 UTC	16384	IN	Data Raw: 69 6d 53 74 61 74 75 73 44 65 73 63 72 69 70 74 69 6f 6e 22 2c 77 69 64 74 68 3a 33 30 7d 5d 7d 2c 33 35 38 35 37 3a 28 5a 2c 45 2c 61 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 45 29 2c 61 2e 64 28 45 2c 7b 53 74 61 74 65 43 6c 61 69 6d 53 74 61 74 75 73 43 6f 6e 66 69 67 3a 28 29 3d 3e 74 7d 29 3b 63 6f 6e 73 74 20 74 3d 5b 7b 6e 61 6d 65 3a 22 63 6c 61 69 6d 49 44 22 2c 77 69 64 74 68 3a 35 7d 2c 7b 6e 61 6d 65 3a 22 63 6c 61 69 6d 53 74 61 74 75 73 44 65 73 63 72 69 70 74 69 6f 6e 22 2c 77 69 64 74 68 3a 33 30 7d 5d 7d 2c 31 34 34 34 32 3a 28 5a 2c 45 2c 61 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 45 29 2c 61 2e 64 28 45 2c 7b 53 74 61 74 65 43 6c 61 69 6d 53 74 61 74 75 73 43 6f 6e 66 69 67 3a 28 29 3d 3e 74 Data Ascii: imStatusDescription",width:30}]},35857:(Z,E,a)=>{"use strict";a.r(E),a.d(E,{StateClaimStatusConfig:()=>t});const t=[{name:"claimID",width:5},{name:"claimStatusDescription",width:30}]},14442:(Z,E,a)=>{"use strict";a.r(E),a.d(E,{StateClaimStatusConfig:()=>t
2025-04-10 12:57:16 UTC	16384	IN	Data Raw: 75 6e 64 3d 21 30 2c 74 68 69 73 2e 63 6c 61 69 6d 53 74 61 74 75 73 4e 6f 74 46 6f 75 6e 64 3d 21 30 2c 74 68 69 73 2e 63 6c 61 69 6d 53 74 61 74 75 73 53 65 72 76 69 63 65 2e 67 65 74 28 74 68 69 73 2e 66 6f 72 6d 2e 63 6f 6e 74 72 6f 6c 73 2e 63 6c 61 69 6d 49 44 2e 76 61 6c 75 65 29 2e 73 75 62 73 63 72 69 62 65 28 77 74 3d 3e 7b 74 68 69 73 2e 73 75 62 6d 69 74 41 74 74 65 6d 70 74 54 69 6d 65 3d 6e 65 77 20 44 61 74 65 2c 77 74 26 26 77 74 2e 63 6c 61 69 6d 49 44 3f 28 74 68 69 73 2e 63 6c 61 69 6d 53 74 61 74 75 73 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 77 74 29 2c 74 68 69 73 2e 63 6c 61 69 6d 53 74 61 74 75 73 46 6f 75 6e 64 3d 21 30 2c 74 68 69 73 2e 69 73 41 6c 6c 6f 77 43 6c 61 69 6d 46 6f 72 6d 52 65 73 65 6e 64 3d 77 74 2e 69 73 41 6c Data Ascii: und=!0,this.claimStatusNotFound=!0,this.claimStatusService.get(this.form.controls.claimID.value).subscribe(wt=>{this.submitAttemptTime=new Date,wt&&wt.claimID?(this.claimStatus=Object.assign(wt),this.claimStatusFound=!0,this.isAllowClaimFormResend=wt.isAl
2025-04-10 12:57:16 UTC	16384	IN	Data Raw: 69 6f 6e 28 77 29 7b 72 65 74 75 72 6e 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3d 3d 3d 77 2e 6b 65 79 26 26 28 74 68 69 73 2e 66 69 65 6c 64 2e 76 61 6c 69 64 61 74 69 6f 6e 2e 72 65 71 75 69 72 65 64 3d 21 30 2c 74 68 69 73 2e 66 69 65 6c 64 29 7d 7d 29 2c 6e 65 77 20 75 2e 6e 76 28 7b 6b 65 79 3a 22 70 68 6f 6e 65 31 45 78 74 65 6e 73 69 6f 6e 22 2c 69 73 41 63 74 69 76 65 3a 21 31 7d 29 2c 6e 65 77 20 73 2e 6a 69 28 7b 6b 65 79 3a 22 6e 6f 54 61 78 49 44 22 2c 69 73 41 63 74 69 76 65 3a 21 31 7d 29 2c 6e 65 77 20 75 2e 6e 76 28 7b 6b 65 79 3a 22 69 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 4e 6f 22 2c 69 73 41 63 74 69 76 65 3a 21 31 7d 29 2c 6e 65 77 20 79 2e 49 43 28 7b 6b 65 79 3a 22 69 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 4c 6f 63 61 74 69 6f 6e 22 Data Ascii: ion(w){return"countryCode"===w.key&&(this.field.validation.required=!0,this.field)}}),new u.nv({key:"phone1Extension",isActive:!1}),new s.ji({key:"noTaxID",isActive:!1}),new u.nv({key:"identificationNo",isActive:!1}),new y.IC({key:"identificationLocation"
2025-04-10 12:57:16 UTC	16384	IN	Data Raw: 69 73 41 63 74 69 76 65 3a 21 31 7d 29 2c 6e 65 77 20 75 2e 6e 76 28 7b 6b 65 79 3a 22 7a 69 70 43 6f 64 65 22 2c 69 73 41 63 74 69 76 65 3a 21 31 7d 29 5d 7d 29 5d 7d 29 7d 2c 38 38 36 36 3a 28 5a 2c 45 2c 61 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 45 29 2c 61 2e 64 28 45 2c 7b 53 74 61 74 65 46 6f 72 6d 43 6f 6e 66 69 67 3a 28 29 3d 3e 4d 7d 29 3b 76 61 72 20 74 3d 61 28 33 36 30 33 31 29 2c 65 3d 61 28 37 32 37 32 38 29 2c 75 3d 61 28 36 38 37 32 39 29 2c 79 3d 61 28 34 31 38 35 39 29 2c 73 3d 61 28 35 32 30 38 32 29 2c 6d 3d 61 28 34 32 34 35 29 3b 63 6f 6e 73 74 20 4d 3d 6e 65 77 20 74 2e 7a 28 7b 6e 61 6d 65 3a 22 63 6c 61 69 6d 49 6e 66 6f 46 6f 72 6d 22 2c 66 69 65 6c 64 53 65 74 73 3a 5b 6e 65 77 20 65 2e 43 28 7b 6e 61 6d Data Ascii: isActive:!1}),new u.nv({key:"zipCode",isActive:!1})]})]})},8866:(Z,E,a)=>{"use strict";a.r(E),a.d(E,{StateFormConfig:()=>M});var t=a(36031),e=a(72728),u=a(68729),y=a(41859),s=a(52082),m=a(4245);const M=new t.z({name:"claimInfoForm",fieldSets:[new e.C({nam
2025-04-10 12:57:16 UTC	16384	IN	Data Raw: 77 20 73 2e 6a 69 28 7b 6b 65 79 3a 22 6e 6f 54 61 78 49 44 22 2c 69 73 41 63 74 69 76 65 3a 21 31 7d 29 2c 6e 65 77 20 75 2e 6e 76 28 7b 6b 65 79 3a 22 69 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 4e 6f 22 2c 69 73 41 63 74 69 76 65 3a 21 31 7d 29 2c 6e 65 77 20 79 2e 49 43 28 7b 6b 65 79 3a 22 69 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 4c 6f 63 61 74 69 6f 6e 22 2c 69 73 41 63 74 69 76 65 3a 21 31 7d 29 2c 6e 65 77 20 75 2e 6e 76 28 7b 6b 65 79 3a 22 74 61 78 49 44 22 2c 76 61 6c 69 64 61 74 69 6f 6e 3a 7b 72 65 71 75 69 72 65 64 3a 21 30 7d 7d 29 2c 6e 65 77 20 4d 2e 6c 28 7b 6b 65 79 3a 22 73 65 6c 6c 53 65 63 75 72 69 74 69 65 73 22 2c 6f 72 64 65 72 3a 32 32 2c 68 61 73 54 6f 6f 6c 74 69 70 3a 21 30 2c 74 6f 6f 6c 74 69 70 3a 7b 61 6c 69 67 6e 3a 22 74 Data Ascii: w s.ji({key:"noTaxID",isActive:!1}),new u.nv({key:"identificationNo",isActive:!1}),new y.IC({key:"identificationLocation",isActive:!1}),new u.nv({key:"taxID",validation:{required:!0}}),new M.l({key:"sellSecurities",order:22,hasTooltip:!0,tooltip:{align:"t
2025-04-10 12:57:16 UTC	16384	IN	Data Raw: 65 61 72 22 2c 69 73 41 63 74 69 76 65 3a 21 31 7d 29 2c 6e 65 77 20 75 2e 6e 76 28 7b 6b 65 79 3a 22 68 6f 77 44 69 64 59 6f 75 48 65 61 72 4f 74 68 65 72 22 2c 69 73 41 63 74 69 76 65 3a 21 31 7d 29 2c 6e 65 77 20 75 2e 6e 76 28 7b 6b 65 79 3a 22 7a 69 70 43 6f 64 65 22 2c 69 73 41 63 74 69 76 65 3a 21 31 7d 29 5d 7d 29 5d 7d 29 7d 2c 32 34 36 38 37 3a 28 5a 2c 45 2c 61 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 45 29 2c 61 2e 64 28 45 2c 7b 53 74 61 74 65 46 6f 72 6d 43 6f 6e 66 69 67 3a 28 29 3d 3e 4d 7d 29 3b 76 61 72 20 74 3d 61 28 33 36 30 33 31 29 2c 65 3d 61 28 37 32 37 32 38 29 2c 75 3d 61 28 36 38 37 32 39 29 2c 79 3d 61 28 34 31 38 35 39 29 2c 73 3d 61 28 35 32 30 38 32 29 2c 6d 3d 61 28 34 32 34 35 29 3b 63 6f 6e 73 74 20 Data Ascii: ear",isActive:!1}),new u.nv({key:"howDidYouHearOther",isActive:!1}),new u.nv({key:"zipCode",isActive:!1})]})]})},24687:(Z,E,a)=>{"use strict";a.r(E),a.d(E,{StateFormConfig:()=>M});var t=a(36031),e=a(72728),u=a(68729),y=a(41859),s=a(52082),m=a(4245);const
2025-04-10 12:57:16 UTC	16384	IN	Data Raw: 61 64 64 72 65 73 73 31 22 2c 76 61 6c 69 64 61 74 69 6f 6e 3a 7b 6d 61 78 6c 65 6e 67 74 68 3a 33 32 7d 7d 29 2c 6e 65 77 20 75 2e 6e 76 28 7b 6b 65 79 3a 22 61 64 64 72 65 73 73 32 22 2c 76 61 6c 69 64 61 74 69 6f 6e 3a 7b 6d 61 78 6c 65 6e 67 74 68 3a 33 32 7d 7d 29 2c 6e 65 77 20 75 2e 6e 76 28 7b 6b 65 79 3a 22 61 64 64 72 65 73 73 33 22 2c 69 73 41 63 74 69 76 65 3a 21 31 7d 29 2c 6e 65 77 20 75 2e 6e 76 28 7b 6b 65 79 3a 22 6c 61 73 74 4e 61 6d 65 22 2c 68 61 73 54 6f 6f 6c 74 69 70 3a 21 31 7d 29 2c 6e 65 77 20 4d 2e 73 28 7b 6b 65 79 3a 22 65 6d 61 69 6c 22 2c 68 61 73 54 6f 6f 6c 74 69 70 3a 21 31 2c 6c 61 62 65 6c 3a 22 45 6d 61 69 6c 20 41 64 64 72 65 73 73 22 7d 29 2c 6e 65 77 20 79 2e 49 43 28 7b 6b 65 79 3a 22 73 74 61 74 65 22 2c 64 65 66 Data Ascii: address1",validation:{maxlength:32}}),new u.nv({key:"address2",validation:{maxlength:32}}),new u.nv({key:"address3",isActive:!1}),new u.nv({key:"lastName",hasTooltip:!1}),new M.s({key:"email",hasTooltip:!1,label:"Email Address"}),new y.IC({key:"state",def
2025-04-10 12:57:16 UTC	16384	IN	Data Raw: 6e 65 77 20 74 2e 7a 28 7b 6e 61 6d 65 3a 22 73 65 61 72 63 68 52 65 71 75 65 73 74 48 6f 6d 65 46 6f 72 6d 22 2c 66 69 65 6c 64 53 65 74 73 3a 5b 6e 65 77 20 65 2e 43 28 7b 6e 61 6d 65 3a 22 70 72 69 6d 61 72 79 22 2c 66 69 65 6c 64 73 3a 5b 6e 65 77 20 75 2e 6e 76 28 7b 6b 65 79 3a 22 73 72 74 53 53 4e 22 2c 68 61 73 54 6f 6f 6c 74 69 70 3a 21 31 2c 68 69 64 65 53 68 6f 77 3a 21 31 2c 76 61 6c 69 64 61 74 69 6f 6e 3a 7b 72 65 71 75 69 72 65 64 3a 21 30 7d 7d 29 5d 7d 29 5d 7d 29 7d 2c 39 39 39 36 36 3a 28 5a 2c 45 2c 61 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 45 29 2c 61 2e 64 28 45 2c 7b 53 74 61 74 65 46 6f 72 6d 43 6f 6e 66 69 67 3a 28 29 3d 3e 79 7d 29 3b 76 61 72 20 74 3d 61 28 33 36 30 33 31 29 2c 65 3d 61 28 37 32 37 32 38 Data Ascii: new t.z({name:"searchRequestHomeForm",fieldSets:[new e.C({name:"primary",fields:[new u.nv({key:"srtSSN",hasTooltip:!1,hideShow:!1,validation:{required:!0}})]})]})},99966:(Z,E,a)=>{"use strict";a.r(E),a.d(E,{StateFormConfig:()=>y});var t=a(36031),e=a(72728
2025-04-10 12:57:16 UTC	16384	IN	Data Raw: 64 61 74 69 6f 6e 3a 7b 72 65 71 75 69 72 65 64 3a 21 30 7d 7d 29 2c 6e 65 77 20 6d 2e 6e 76 28 7b 6b 65 79 3a 22 6c 61 73 74 4e 61 6d 65 22 2c 6f 72 64 65 72 3a 32 2c 70 61 74 74 65 72 6e 42 6c 6f 63 6b 3a 21 30 2c 6c 61 62 65 6c 3a 22 4c 61 73 74 20 4e 61 6d 65 22 2c 76 61 6c 69 64 61 74 69 6f 6e 3a 7b 6d 61 78 6c 65 6e 67 74 68 3a 33 30 2c 70 61 74 74 65 72 6e 3a 22 6c 61 73 74 4e 61 6d 65 22 2c 72 65 71 75 69 72 65 64 3a 21 30 7d 2c 6f 6e 43 68 61 6e 67 65 3a 66 75 6e 63 74 69 6f 6e 28 7a 29 7b 72 65 74 75 72 6e 22 74 61 78 49 64 65 6e 74 69 66 69 65 72 54 79 70 65 22 3d 3d 3d 7a 2e 6b 65 79 26 26 28 74 68 69 73 2e 66 69 65 6c 64 2e 6c 61 62 65 6c 3d 22 49 6e 64 69 76 69 64 75 61 6c 22 3d 3d 3d 74 68 69 73 2e 66 6f 72 6d 2e 63 6f 6e 74 72 6f 6c 73 5b Data Ascii: dation:{required:!0}}),new m.nv({key:"lastName",order:2,patternBlock:!0,label:"Last Name",validation:{maxlength:30,pattern:"lastName",required:!0},onChange:function(z){return"taxIdentifierType"===z.key&&(this.field.label="Individual"===this.form.controls[

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:15 UTC	649	OUT	GET /images/bg_texture.png HTTP/1.1 Host: colorado.findyourunclaimedproperty.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://colorado.findyourunclaimedproperty.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-10 12:57:15 UTC	851	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 131898 Connection: close Last-Modified: Wed, 02 Apr 2025 17:22:12 GMT X-Amz-Version-Id: SbmI5Gp3.TYxB6gcs9OJIKJKznQdtF01 Server: AmazonS3 Date: Wed, 09 Apr 2025 13:16:27 GMT Etag: "73af168c150f3b634928e8c6637ddbc4" Vary: Accept-Encoding Via: 1.1 e8db4dc8ef769d3c7efb983afe130bca.cloudfront.net (CloudFront) Age: 85394 Cache-Control: max-age=86400, must-revalidate Content-Security-Policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: NOSNIFF X-Frame-Options: DENY X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: llLbX9lXHEF6eVigY6ISrK1voBR8ulcCaGUy3EU3LmZsMBKOutZLLw==
2025-04-10 12:57:15 UTC	15533	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 d2 08 03 00 00 00 2d fd c9 93 00 00 00 ab 50 4c 54 45 91 91 91 90 90 90 92 92 92 8f 8f 8f 8e 8e 8e 91 91 91 8f 8f 8f 8d 8d 8d 93 93 93 94 94 94 90 90 90 91 91 91 93 93 93 94 94 94 92 92 92 95 95 95 92 92 92 93 93 93 82 82 82 8b 8b 8b 88 88 88 92 92 92 8b 8b 8b 8d 8d 8d 94 94 94 8e 8e 8e 95 95 95 8c 8c 8c 88 88 88 94 94 94 7f 7f 7f 8a 8a 8a 95 95 95 87 87 87 95 95 95 94 94 94 86 86 86 82 82 82 94 94 94 96 96 96 95 95 95 85 85 85 95 95 95 96 96 96 96 96 96 96 96 96 7c 7c 7c 96 96 96 97 97 97 6a 6a 6a 7c 7c 7c 96 96 96 97 97 97 00 00 00 78 78 78 00 00 00 6c 6c 6c 60 b7 ad cf 00 00 00 39 74 52 4e 53 5f 5c 69 59 4f 64 54 4a 74 7e 57 61 76 79 6e 98 67 71 2d 42 3c 6c 44 4c 7c 51 89 47 3a 81 2a Data Ascii: PNGIHDR-PLTE\|\|\|jjj\|\|\|xxxlll`9tRNS_\iYOdTJt~Wavyngq-B<lDL\|QG:*
2025-04-10 12:57:15 UTC	16384	IN	Data Raw: 35 7f fe 47 4f 77 04 a4 a4 b5 1c 19 fc 38 4c 99 e1 7e da ae 58 3e 87 35 73 99 c8 a4 2e ec 7d 79 43 a4 79 2e 34 0f 17 7c be b4 08 00 08 45 c3 1a 36 78 50 f1 02 35 92 05 9c 6f 02 b8 55 57 37 83 00 f6 1b 3a 41 17 91 27 47 bf 1e 57 db de e7 24 47 5c 42 34 dd 01 ab dc 0e ed 21 e6 c4 1c 69 f0 80 a6 86 16 e7 e9 ad ba 35 5f b4 81 b2 3c 45 d0 6e 03 ee 09 1e f9 67 c0 3c cf b3 7a 02 a5 30 8c 91 6b c6 9a ee 91 d1 07 18 90 18 72 2b e3 57 29 38 60 61 92 ae 75 61 99 27 11 96 1e 39 d0 15 16 81 07 c5 bc 3a 80 03 28 f4 11 42 39 03 b2 7b b3 c0 84 60 10 f1 99 21 6b 4e a2 b5 c4 0e 6d 47 b3 78 a7 9b 64 80 ea e6 c9 05 0d c6 89 53 90 7d d5 2e 87 d5 c9 59 cb 81 9a a4 35 45 9d c2 60 fa b5 c5 d4 69 00 49 ff 49 17 89 21 c6 05 11 18 84 bc 4e 6c 42 ec 32 67 bf fa 8f fb 4c 62 b5 06 be Data Ascii: 5GOw8L~X>5s.}yCy.4\|E6xP5oUW7:A'GW$G\B4!i5_<Eng<z0kr+W)8`aua'9:(B9{`!kNmGxdS}.Y5E`iII!NlB2gLb
2025-04-10 12:57:16 UTC	16384	IN	Data Raw: 71 2e d5 56 5a 31 c2 81 c1 13 25 f8 50 83 5a d2 8e 32 3e 9e 6a 07 fa 26 03 f8 3c f4 be 5f 4a 72 18 b9 0a 75 e2 41 48 e4 73 d0 ad b0 81 81 ef cf 83 21 e4 65 20 06 e7 23 22 7f 3d 68 a1 8c 1e 1a 4b 2c 60 ce eb 3d e7 48 0a 92 42 3c 9a d5 b3 76 ab 3e ac 21 20 c0 5a 80 ad c1 ab 85 1b 46 f6 05 e4 20 db 66 27 0f 75 4f 80 47 60 5e f4 b2 79 9e 6f 06 59 81 14 53 c0 12 c8 51 e6 1f 5d 91 d1 fb 11 d4 a3 3d 37 05 23 b4 97 73 c2 dd 68 f6 10 34 8e 09 f7 df ff d3 14 66 80 f4 94 4e ca 81 e8 c9 c6 82 18 d0 97 4f 72 c5 33 d8 b9 39 63 fb 34 61 c4 da 5a 5a ec a8 ec c7 b3 00 58 c8 5c a8 a7 de cd 29 22 cf 31 e6 02 40 ee 11 a9 2a dc 5c ae af 41 b3 cf fc 7a 9c 73 64 3c 5f 8a 00 e5 32 6d 3b 30 99 71 7b b5 92 72 56 50 84 95 24 34 83 90 55 99 6d 97 45 2c 1a 63 50 48 d4 4b c8 f1 3e 0c Data Ascii: q.VZ1%PZ2>j&<_JruAHs!e #"=hK,`=HB<v>! ZF f'uOG`^yoYSQ]=7#sh4fNOr39c4aZZX\)"1@*\Azsd<_2m;0q{rVP$4UmE,cPHK>
2025-04-10 12:57:16 UTC	16384	IN	Data Raw: 92 7f df 67 a2 01 d0 78 dd 75 19 cb 9c a0 1d 11 8f 39 c9 05 e0 38 92 44 5b db 58 e6 92 d3 0c ad 95 1a 1f de ca 17 a1 8b 80 c1 1c ec 5c 88 a9 8d 79 43 e8 f5 98 3a 00 f8 4a d3 a4 c8 28 65 43 c7 15 15 0c 35 16 bf df cd 27 96 2a 5b b0 69 11 a8 55 2d d1 6e ae 69 8a ef c6 00 3e f1 f9 be de 20 45 be 2f e7 fc 94 8c 11 c8 22 0e 92 9e 6c 65 c1 ba b1 8c 8b 19 37 39 aa f6 70 80 75 90 08 06 10 7c 90 81 92 e9 0e b0 98 c7 80 25 0b d0 f0 f3 5b 50 fc 7a 9a 0a ae 73 ce 94 fe 04 20 18 7f 2b 93 20 1d 07 a0 bf 6d e8 16 e8 08 ed bf 7e b1 03 46 08 d8 0c 28 e4 c0 cd 3a c5 83 8e 9b d8 ff 60 80 46 ce 7f ff 4a 47 09 7d 9e 37 a6 03 5b 12 61 31 e3 58 80 80 e8 22 28 39 57 ce 35 69 1d 88 e0 2b a0 10 fb c3 6e f6 9b dc 2a a1 8a c7 4f 0a 05 54 23 60 53 40 48 37 17 46 46 c0 6a c8 ef 42 65 Data Ascii: gxu98D[X\yC:J(eC5'[iU-ni> E/"le79pu\|%[Pzs + m~F(:`FJG}7[a1X"(9W5i+nOT#`S@H7FFjBe
2025-04-10 12:57:16 UTC	16384	IN	Data Raw: 4c 72 e4 1c 80 22 0c b8 1b 17 ea 72 9f 8a 73 ae b0 d6 d5 9a 49 c5 e9 3e 13 00 8a a7 17 71 35 db b7 dd 2a de aa 5b 21 6f 06 e5 10 34 49 e9 66 a0 18 af 5d b7 e5 ee 88 b5 5f 1d cf 50 e5 88 95 01 32 62 4d ce 7a c1 7f be 09 18 1b 48 e6 84 dd f9 9a 3c 57 c8 3a a0 e9 dd ef 5d 0e 4d 91 ff 4f 4b 80 31 66 b8 2b 23 2b b8 21 c1 9f 98 ce 9c be 0e f1 75 b2 46 e5 5f cb 70 33 54 8e 6b 21 d0 60 63 20 62 6d 34 d6 79 88 63 08 65 81 59 ba 03 b0 b3 c7 7a 1f b0 a6 6e dc 5b 22 7d d9 16 7c 35 36 4e e4 7a de bb d5 ee 16 f4 27 e2 ac ad 35 01 9f 0f 89 e5 c0 9e 49 00 ae ad 14 f2 88 29 f9 cf 3b 73 85 cb d4 27 70 a7 45 3f 16 00 b6 22 c2 be b1 99 9f 6e 79 04 ce 93 a3 61 a6 20 ba 1c cb 9a 4a e2 46 65 b6 39 bc 90 33 c1 dc 8d 91 11 08 f1 7e 6d 8b 20 e2 76 b3 80 59 cc e5 00 48 44 39 a1 a0 Data Ascii: Lr"rsI>q5*[!o4If]_P2bMzH<W:]MOK1f+#+!uF_p3Tk!`c bm4yceYzn["}\|56Nz'5I);s'pE?"nya JFe93~m vYHD9
2025-04-10 12:57:16 UTC	16384	IN	Data Raw: 8c ba 28 03 9a 12 b0 40 6d 47 71 6d 10 a0 16 61 2c e6 2f f6 e7 77 21 8a 47 b6 ec 7d 4e da af fd a2 f4 89 06 e8 56 ba 59 d0 0c 43 99 04 5c 25 53 3c b9 01 93 f7 6b 4e 58 5d 1c 43 dc 6d 12 40 3f af 8b 42 55 c4 29 c1 10 d6 dc c0 e8 2d 66 26 f5 9f 2b d0 8c eb d6 be 28 a1 f6 46 8a 5f bf 1e 9f b9 8d 9d 68 12 2b f6 47 77 c6 86 00 ef 9f c7 7b 4c 38 36 c7 e3 72 59 33 c7 5a 64 c5 b1 16 c8 a2 7f 97 0b 33 b3 e7 fa 2c 35 03 57 84 57 15 b8 e5 9c ce e0 82 40 ce e6 07 04 00 fb 9f f7 1c 0e 78 5b 5e d7 35 33 7c 11 b7 cd ad 11 80 3d 8f 86 e8 02 60 e1 10 53 48 02 39 56 9f 6b 91 af 7e b9 69 c3 bc 9f df c8 4a b6 01 52 c0 d3 11 78 17 a2 48 ce 84 cd 6e ed 30 d7 d5 0d db ef 57 80 01 39 f0 eb a0 e5 06 a5 28 2e 63 88 08 a9 47 a8 0c f2 86 5c 8a 65 8a 00 6c ab c7 a2 6b d0 f1 da af 5d Data Ascii: (@mGqma,/w!G}NVYC\%S<kNX]Cm@?BU)-f&+(F_h+Gw{L86rY3Zd3,5WW@x[^53\|=`SH9Vk~iJRxHn0W9(.cG\elk]
2025-04-10 12:57:16 UTC	16384	IN	Data Raw: 74 4f d2 9b 5d 11 35 c9 cb f9 20 ca 06 85 35 02 42 9d cd 8d cf cd 40 c8 5c 8a fe 3d b6 54 b3 7a c9 b0 b2 c0 71 ad 4c 8a 2d c1 85 7f 1e f3 03 00 be 05 c4 6e ad 52 27 c7 f0 bd 68 8b bc 11 23 3c 5d 41 f1 9f 80 08 61 73 95 cf 85 4c 41 42 e4 31 d6 fc 5c 11 60 0e f0 ec b0 cd 70 7a 3b 6a 4f 4f b7 8c cf c3 89 16 89 20 06 41 90 e7 08 1c 7f c7 7d 88 8d 4e 62 2f 1b 1b a0 14 75 51 1d dc 73 8c 50 24 31 34 60 b3 45 80 d6 d8 dc e3 62 e5 8e 28 a4 cf 06 db 9b 99 99 7c 20 89 e6 42 c0 67 e0 f3 b4 22 7c 3a 22 09 62 08 37 b3 9c 63 90 f6 22 a6 9d 6a 28 19 68 12 2e 73 07 09 28 91 20 4c 37 43 f0 5c 50 8a c8 8c 89 8e 85 ee c0 28 09 eb e1 72 7e ff 7a 76 45 f5 9d ef c0 d4 d3 0a 19 8a 21 c0 65 10 82 93 b1 3e cf e1 40 eb 3f d0 7e 7f 81 f6 83 ea d4 94 ad 48 3d c6 78 0f c0 c3 6a 26 14 Data Ascii: tO]5 5B@\=TzqL-nR'h#<]AasLAB1\`pz;jOO A}Nb/uQsP$14`Eb(\| Bg"\|:"b7c"j(h.s( L7C\P(r~zvE!e>@?~H=xj&
2025-04-10 12:57:16 UTC	16384	IN	Data Raw: 5e 49 e8 50 85 d5 fa 2f 22 eb 37 77 24 28 58 6e df 2d ca af 0c a2 a0 d8 29 86 ef 1d cb 38 d8 0b 24 5d 1b b9 86 b3 41 20 43 48 fa 83 1b ba bb 6a 8a 0b 9c 02 ac 4e db 11 c4 51 82 65 5d ef f7 f5 a1 bb 2b b3 80 a2 c7 aa a2 5f 1d b4 00 11 b1 18 09 43 38 a4 37 cd 44 97 eb da f7 2f 6d a7 85 69 57 46 8a 3f c1 f9 73 73 d0 35 7f fe e7 bf 7e 8b 1c 46 71 76 30 3d e0 a8 6c b0 1d 85 a6 55 b7 39 82 18 d6 8c a6 0c 1c 9f 9f 04 61 00 64 54 5e 01 66 91 c4 e7 9f 53 7a b3 23 36 a3 c5 d5 79 43 bf ab df 5d 8b f4 7e 1d 88 25 5e 5a 58 e3 4a e5 62 55 5f c2 9f 6d 5a 0c 28 78 4c d8 ba a2 4b 29 c7 0a 94 70 59 ef 79 0e 00 18 fa e7 4d 4e e2 71 fd 5e 6b 60 63 35 88 83 6e 1c 98 f4 9e c1 4d 48 9b 99 1d c5 63 29 2a 6f e3 d0 fb 75 dc 4f bb bf eb 79 4a 4c c9 70 ed 5c a2 e5 12 b4 43 f5 fb ee Data Ascii: ^IP/"7w$(Xn-)8$]A CHjNQe]+_C87D/miWF?ss5~Fqv0=lU9adT^fSz#6yC]~%^ZXJbU_mZ(xLK)pYyMNq^k`c5nMHc)*ouOyJLp\C
2025-04-10 12:57:16 UTC	1677	IN	Data Raw: bf ee ea df d6 6e ab 73 f8 f4 de f5 28 06 c5 5a 72 65 8a cb f5 f9 cc 6b 2e 02 55 70 50 e1 80 30 19 52 c8 76 62 ad f0 1c 86 55 26 8c 32 84 40 24 5c f0 20 36 0c 66 ba 16 33 92 9f ae ad 2b f0 a2 56 b5 49 86 6c cf 80 46 6b 6e a1 01 7c ee 06 88 77 81 35 3b 47 51 28 a1 aa 30 ba c1 5a 91 e9 cf 83 ac ed dc 07 19 30 96 19 35 75 49 be d1 77 02 6b c6 5e 2e d8 f5 fb 70 27 f0 44 f9 d5 f5 70 2b 35 65 13 2b e3 d7 f7 31 4c 37 04 62 21 0c d9 08 08 eb bd 04 34 56 2c 87 6a 00 2a e1 a7 d5 3f dd 31 a4 1a 26 f9 b9 95 e0 1f 05 e4 58 23 68 5d 63 91 ca c8 ce 6b 07 4a 3f 24 99 c1 d8 7b 3b b0 69 be 37 20 84 83 ab ba b9 01 41 d0 1f 8c 33 2a ba 7d fd eb 69 cc bd c8 f7 a8 17 7a 69 75 58 6a 30 e3 7e 15 fe 09 b3 b9 6f f1 9f 84 e9 40 e8 e8 6e 91 a8 ef 45 fd ab ac 50 36 82 77 8e 14 77 68 Data Ascii: ns(Zrek.UpP0RvbU&2@$\ 6f3+VIlFkn\|w5;GQ(0Z05uIwk^.p'Dp+5e+1L7b!4V,j?1&X#h]ckJ?${;i7 A3}iziuXj0~o@nEP6wwh

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:15 UTC	609	OUT	GET /styles.cb38ba2e5e010baf.css HTTP/1.1 Host: colorado.findyourunclaimedproperty.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://colorado.findyourunclaimedproperty.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-10 12:57:15 UTC	844	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 196226 Connection: close Last-Modified: Wed, 02 Apr 2025 17:22:14 GMT X-Amz-Version-Id: aVdTcx9xeQa.hyykPy3F71Ovy8zazBjU Server: AmazonS3 Date: Wed, 09 Apr 2025 13:16:11 GMT Etag: "053d60d2cbdfa1083a32f49e2762e536" Vary: Accept-Encoding Via: 1.1 c7705692ed008dad7e46e32f966aa3fe.cloudfront.net (CloudFront) Age: 85265 Cache-Control: max-age=31536000, public Content-Security-Policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: NOSNIFF X-Frame-Options: DENY X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: vUqas3XspDp-9wyFbTZlW_-E_lEd-La51weckJVpvzR7Eq3BZHO3ng==
2025-04-10 12:57:15 UTC	15540	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4f 70 65 6e 20 53 61 6e 73 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 4f 70 65 6e 20 53 61 6e 73 22 29 2c 6c 6f 63 61 6c 28 22 4f 70 65 6e 53 61 6e 73 22 29 2c 75 72 6c 28 2f 66 6f 6e 74 73 2f 6f 70 65 6e 2d 73 61 6e 73 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 2f 66 6f 6e 74 73 2f 6f 70 65 6e 2d 73 61 6e 73 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4f 70 65 6e 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: @charset "UTF-8";@font-face{font-family:Open Sans;font-weight:400;src:local("Open Sans"),local("OpenSans"),url(/fonts/open-sans.woff2) format("woff2"),url(/fonts/open-sans.woff) format("woff")}@font-face{font-family:Open Sans;font-style:normal;font-weight
2025-04-10 12:57:15 UTC	16384	IN	Data Raw: 36 36 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 Data Ascii: 66666667%}.offset-lg-6{margin-left:50%}.offset-lg-7{margin-left:58.3333333333%}.offset-lg-8{margin-left:66.6666666667%}.offset-lg-9{margin-left:75%}.offset-lg-10{margin-left:83.3333333333%}.offset-lg-11{margin-left:91.6666666667%}}@media (min-width: 1200p
2025-04-10 12:57:16 UTC	16384	IN	Data Raw: 65 25 33 63 70 61 74 68 20 66 69 6c 6c 3d 27 25 32 33 33 34 33 61 34 30 27 20 64 3d 27 4d 32 20 30 4c 30 20 32 68 34 7a 6d 30 20 35 4c 30 20 33 68 34 7a 27 2f 25 33 65 25 33 63 2f 73 76 67 25 33 65 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 72 69 67 68 74 20 2e 37 35 72 65 6d 20 63 65 6e 74 65 72 2f 38 70 78 20 31 30 70 78 2c 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 63 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 77 69 64 74 68 3d 27 31 32 27 20 68 65 69 67 68 74 3d 27 31 32 27 20 66 69 6c 6c 3d 27 6e 6f 6e 65 27 20 73 74 72 6f 6b 65 3d 27 25 32 33 64 34 30 30 30 30 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 31 32 20 31 32 27 25 33 65 25 33 63 63 69 Data Ascii: e%3cpath fill='%23343a40' d='M2 0L0 2h4zm0 5L0 3h4z'/%3e%3c/svg%3e") no-repeat right .75rem center/8px 10px,url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='12' height='12' fill='none' stroke='%23d40000' viewBox='0 0 12 12'%3e%3cci
2025-04-10 12:57:16 UTC	16384	IN	Data Raw: 65 73 73 3a 64 69 73 61 62 6c 65 64 7b 63 6f 6c 6f 72 3a 23 38 37 64 34 61 61 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 75 63 63 65 73 73 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 3a 61 63 74 69 76 65 2c 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 75 63 63 65 73 73 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 2c 2e 73 68 6f 77 3e 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 75 63 63 65 73 73 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 38 37 64 34 61 61 3b 62 6f 72 64 Data Ascii: ess:disabled{color:#87d4aa;background-color:transparent}.btn-outline-success:not(:disabled):not(.disabled):active,.btn-outline-success:not(:disabled):not(.disabled).active,.show>.btn-outline-success.dropdown-toggle{color:#000;background-color:#87d4aa;bord
2025-04-10 12:57:16 UTC	16384	IN	Data Raw: 6f 67 67 6c 65 2b 2e 62 74 6e 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 70 72 65 70 65 6e 64 20 2e 62 74 6e 2b 2e 62 74 6e 2d 6d 62 6c 2d 74 6f 67 67 6c 65 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 70 72 65 70 65 6e 64 20 2e 62 74 6e 2d 6d 62 6c 2d 74 6f 67 67 6c 65 2b 2e 62 74 6e 2d 6d 62 6c 2d 74 6f 67 67 6c 65 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 70 72 65 70 65 6e 64 20 2e 62 74 6e 2b 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 74 65 78 74 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 70 72 65 70 65 6e 64 20 2e 62 74 6e 2d 6d 62 6c 2d 74 6f 67 67 6c 65 2b 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 74 65 78 74 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 70 72 65 70 65 6e 64 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 74 65 78 74 2b 2e 69 6e 70 75 74 2d 67 72 6f 75 Data Ascii: oggle+.btn,.input-group-prepend .btn+.btn-mbl-toggle,.input-group-prepend .btn-mbl-toggle+.btn-mbl-toggle,.input-group-prepend .btn+.input-group-text,.input-group-prepend .btn-mbl-toggle+.input-group-text,.input-group-prepend .input-group-text+.input-grou
2025-04-10 12:57:16 UTC	16384	IN	Data Raw: 61 69 6e 65 72 2d 66 6c 75 69 64 2c 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6d 64 3e 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 2c 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6d 64 3e 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6d 64 3e 2e 63 6f 6e 74 61 69 6e 65 72 2d 6c 67 2c 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6d 64 3e 2e 63 6f 6e 74 61 69 6e 65 72 2d 78 6c 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 7b 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6d 64 7b 66 6c 65 78 2d 66 6c 6f 77 3a 72 6f 77 20 6e 6f 77 72 61 70 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c Data Ascii: ainer-fluid,.navbar-expand-md>.container-sm,.navbar-expand-md>.container-md,.navbar-expand-md>.container-lg,.navbar-expand-md>.container-xl{padding-right:0;padding-left:0}}@media (min-width: 768px){.navbar-expand-md{flex-flow:row nowrap;justify-content:fl
2025-04-10 12:57:16 UTC	16384	IN	Data Raw: 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 36 35 36 32 35 72 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 39 65 63 65 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 70 72 6f 67 72 65 73 73 2d 62 61 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 61 35 36 33 Data Ascii: overflow:hidden;line-height:0;font-size:.65625rem;background-color:#e9ecef;border-radius:.25rem}.progress-bar{display:flex;flex-direction:column;justify-content:center;overflow:hidden;color:#fff;text-align:center;white-space:nowrap;background-color:#1a563
2025-04-10 12:57:16 UTC	16384	IN	Data Raw: 70 6f 76 65 72 2d 6c 65 66 74 3e 2e 61 72 72 6f 77 3a 61 66 74 65 72 2c 2e 62 73 2d 70 6f 70 6f 76 65 72 2d 61 75 74 6f 5b 78 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 6c 65 66 74 5d 3e 2e 61 72 72 6f 77 3a 61 66 74 65 72 7b 72 69 67 68 74 3a 31 70 78 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 2e 35 72 65 6d 20 30 20 2e 35 72 65 6d 20 2e 35 72 65 6d 3b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 70 6f 70 6f 76 65 72 2d 68 65 61 64 65 72 7b 70 61 64 64 69 6e 67 3a 2e 35 72 65 6d 20 2e 37 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 72 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 37 66 37 66 37 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f Data Ascii: pover-left>.arrow:after,.bs-popover-auto[x-placement^=left]>.arrow:after{right:1px;border-width:.5rem 0 .5rem .5rem;border-left-color:#fff}.popover-header{padding:.5rem .75rem;margin-bottom:0;font-size:.875rem;background-color:#f7f7f7;border-bottom:1px so
2025-04-10 12:57:16 UTC	16384	IN	Data Raw: 72 61 70 3a 6e 6f 77 72 61 70 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 6c 67 2d 77 72 61 70 2d 72 65 76 65 72 73 65 7b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 2d 72 65 76 65 72 73 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 6c 67 2d 66 69 6c 6c 7b 66 6c 65 78 3a 31 20 31 20 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 6c 67 2d 67 72 6f 77 2d 30 7b 66 6c 65 78 2d 67 72 6f 77 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 6c 67 2d 67 72 6f 77 2d 31 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 6c 67 2d 73 68 72 69 6e 6b 2d 30 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 6c 67 2d 73 68 72 69 6e 6b 2d 31 7b 66 6c 65 78 2d Data Ascii: rap:nowrap!important}.flex-lg-wrap-reverse{flex-wrap:wrap-reverse!important}.flex-lg-fill{flex:1 1 auto!important}.flex-lg-grow-0{flex-grow:0!important}.flex-lg-grow-1{flex-grow:1!important}.flex-lg-shrink-0{flex-shrink:0!important}.flex-lg-shrink-1{flex-
2025-04-10 12:57:16 UTC	16384	IN	Data Raw: 74 61 6e 74 7d 2e 6d 2d 6d 64 2d 6e 32 7b 6d 61 72 67 69 6e 3a 2d 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 6d 64 2d 6e 32 2c 2e 6d 79 2d 6d 64 2d 6e 32 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 72 2d 6d 64 2d 6e 32 2c 2e 6d 78 2d 6d 64 2d 6e 32 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 62 2d 6d 64 2d 6e 32 2c 2e 6d 79 2d 6d 64 2d 6e 32 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6c 2d 6d 64 2d 6e 32 2c 2e 6d 78 2d 6d 64 2d 6e 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 2d 6d 64 2d 6e 33 7b 6d 61 72 67 69 6e 3a 2d 31 72 Data Ascii: tant}.m-md-n2{margin:-.5rem!important}.mt-md-n2,.my-md-n2{margin-top:-.5rem!important}.mr-md-n2,.mx-md-n2{margin-right:-.5rem!important}.mb-md-n2,.my-md-n2{margin-bottom:-.5rem!important}.ml-md-n2,.mx-md-n2{margin-left:-.5rem!important}.m-md-n3{margin:-1r

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:17 UTC	750	OUT	GET /i18nUpgrade/en.json HTTP/1.1 Host: colorado.findyourunclaimedproperty.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://colorado.findyourunclaimedproperty.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1286796610.1744289835; _gat=1; _ga=GA1.1.1786083533.1744289835; _ga_LCNWMJ8RYG=GS1.1.1744289835.1.0.1744289835.0.0.0
2025-04-10 12:57:17 UTC	873	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 76279 Connection: close Last-Modified: Wed, 02 Apr 2025 17:22:11 GMT X-Amz-Version-Id: fHGebgEhaIKyIAv939XI1smQUsXZPwUx Server: AmazonS3 Date: Wed, 09 Apr 2025 13:08:42 GMT Etag: "89d0e214ed59102dd23fbf39dec02835" Vary: Accept-Encoding Via: 1.1 4810d74d0025d8ce3dbab6cb71a901d2.cloudfront.net (CloudFront) Age: 85716 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Content-Security-Policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: NOSNIFF X-Frame-Options: DENY X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: X2Jl-kfjwKvmR6tKFwg_6x7Ed0eVADFWyCUPt99EHRiAxECpUZbTBg==
2025-04-10 12:57:17 UTC	16384	IN	Data Raw: 7b 22 42 4f 4e 44 22 3a 7b 22 53 54 41 54 55 53 5f 53 45 41 52 43 48 22 3a 7b 22 52 45 53 55 4c 54 53 22 3a 22 52 45 53 55 4c 54 53 22 2c 22 53 50 49 4e 4e 45 52 22 3a 22 50 6c 65 61 73 65 20 77 61 69 74 20 77 68 69 6c 65 20 73 65 61 72 63 68 69 6e 67 20 69 73 20 69 6e 20 70 72 6f 67 72 65 73 73 2e 2e 2e 22 2c 22 43 45 52 54 49 46 49 43 41 54 45 5f 4e 55 4d 42 45 52 5f 4e 4f 54 5f 46 4f 55 4e 44 5f 4d 45 53 53 41 47 45 22 3a 22 4e 6f 20 72 65 73 75 6c 74 73 20 72 65 74 75 72 6e 65 64 20 66 6f 72 20 63 6c 61 69 6d 20 49 44 22 2c 22 43 45 52 54 49 46 49 43 41 54 45 5f 4e 55 4d 42 45 52 5f 45 52 52 4f 52 5f 4d 45 53 53 41 47 45 22 3a 22 59 6f 75 20 6d 75 73 74 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 43 65 72 74 69 66 69 63 61 74 65 20 4e 75 6d 62 65 72 Data Ascii: {"BOND":{"STATUS_SEARCH":{"RESULTS":"RESULTS","SPINNER":"Please wait while searching is in progress...","CERTIFICATE_NUMBER_NOT_FOUND_MESSAGE":"No results returned for claim ID","CERTIFICATE_NUMBER_ERROR_MESSAGE":"You must enter a valid Certificate Number
2025-04-10 12:57:17 UTC	16384	IN	Data Raw: 20 6f 77 6e 65 72 27 73 20 75 6e 63 6c 61 69 6d 65 64 20 70 72 6f 70 65 72 74 79 2c 20 65 6e 74 65 72 20 65 69 74 68 65 72 20 61 20 66 69 72 73 74 2c 20 6c 61 73 74 20 6f 72 20 62 6f 74 68 20 6e 61 6d 65 73 2e 20 54 6f 20 73 65 61 72 63 68 20 66 6f 72 20 70 72 6f 70 65 72 74 79 20 62 65 6c 6f 6e 67 69 6e 67 20 74 6f 20 61 20 62 75 73 69 6e 65 73 73 2c 20 65 6e 74 65 72 20 74 68 65 20 62 75 73 69 6e 65 73 73 20 6f 72 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 6e 61 6d 65 2e 20 3c 2f 70 3e 3c 70 3e 32 29 20 53 65 6c 65 63 74 20 74 68 65 20 70 72 6f 70 65 72 74 79 28 69 65 73 29 20 79 6f 75 20 77 69 73 68 20 74 6f 20 63 6c 61 69 6d 2e 3c 2f 70 3e 3c 70 3e 33 29 20 45 6e 74 65 72 20 79 6f 75 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 73 20 74 68 65 20 63 6c Data Ascii: owner's unclaimed property, enter either a first, last or both names. To search for property belonging to a business, enter the business or organization name. </p><p>2) Select the property(ies) you wish to claim.</p><p>3) Enter your information as the cl
2025-04-10 12:57:17 UTC	16384	IN	Data Raw: 55 49 52 45 44 5f 45 52 52 4f 52 22 3a 22 59 6f 75 20 6d 75 73 74 20 73 65 6c 65 63 74 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 66 69 6c 65 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 70 72 6f 67 72 65 73 73 2e 22 2c 22 46 49 4c 45 5f 53 49 5a 45 5f 53 4d 41 4c 4c 5f 45 52 52 4f 52 22 3a 22 46 69 6c 65 20 6d 75 73 74 20 62 65 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 31 20 62 79 74 65 22 2c 22 46 49 4c 45 5f 53 55 42 54 59 50 45 5f 45 52 52 4f 52 22 3a 22 59 6f 75 20 6d 75 73 74 20 73 65 6c 65 63 74 20 61 20 64 6f 63 75 6d 65 6e 74 20 74 79 70 65 20 66 6f 72 20 45 41 43 48 20 75 70 6c 6f 61 64 65 64 20 66 69 6c 65 2e 22 7d 2c 22 55 50 4c 4f 41 44 5f 49 4e 53 54 52 55 43 54 49 4f 4e 53 5f 54 49 54 4c 45 22 3a 22 44 6f 63 75 6d 65 6e 74 20 53 75 62 6d 69 73 73 Data Ascii: UIRED_ERROR":"You must select at least one file in order to progress.","FILE_SIZE_SMALL_ERROR":"File must be greater than 1 byte","FILE_SUBTYPE_ERROR":"You must select a document type for EACH uploaded file."},"UPLOAD_INSTRUCTIONS_TITLE":"Document Submiss
2025-04-10 12:57:17 UTC	16384	IN	Data Raw: 79 6f 75 2c 20 70 6c 65 61 73 65 20 70 72 6f 63 65 65 64 20 77 69 74 68 6f 75 74 20 75 73 69 6e 67 20 74 68 69 73 20 6f 70 74 69 6f 6e 61 6c 20 66 69 65 6c 64 2e 22 7d 2c 22 6e 41 49 43 53 43 6f 64 65 43 68 61 72 74 65 72 22 3a 7b 22 4c 41 42 45 4c 22 3a 22 4e 41 49 43 53 20 43 6f 64 65 22 7d 2c 22 63 6f 6e 74 61 63 74 4e 61 6d 65 22 3a 7b 22 4c 41 42 45 4c 22 3a 22 48 6f 6c 64 65 72 20 43 6f 6e 74 61 63 74 22 7d 2c 22 63 6f 6e 74 61 63 74 54 69 74 6c 65 22 3a 7b 22 4c 41 42 45 4c 22 3a 22 43 6f 6e 74 61 63 74 20 54 69 74 6c 65 22 7d 2c 22 70 68 6f 6e 65 22 3a 7b 22 4c 41 42 45 4c 22 3a 22 43 6f 6e 74 61 63 74 20 50 68 6f 6e 65 20 4e 6f 2e 22 7d 2c 22 70 68 6f 6e 65 45 78 74 65 6e 73 69 6f 6e 22 3a 7b 22 4c 41 42 45 4c 22 3a 22 50 68 6f 6e 65 20 45 78 74 Data Ascii: you, please proceed without using this optional field."},"nAICSCodeCharter":{"LABEL":"NAICS Code"},"contactName":{"LABEL":"Holder Contact"},"contactTitle":{"LABEL":"Contact Title"},"phone":{"LABEL":"Contact Phone No."},"phoneExtension":{"LABEL":"Phone Ext
2025-04-10 12:57:17 UTC	10743	IN	Data Raw: 69 6f 2e 67 6f 76 2f 55 4e 46 44 2f 46 69 6e 64 65 72 73 2f 44 69 73 71 75 61 6c 69 66 79 69 6e 67 5f 4f 66 66 65 6e 73 65 73 2e 70 64 66 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 44 69 73 71 75 61 6c 69 66 79 69 6e 67 20 4f 66 66 65 6e 73 65 73 3c 2f 61 3e 22 7d 2c 22 71 75 65 73 74 69 6f 6e 36 22 3a 7b 22 4c 41 42 45 4c 22 3a 22 31 39 2e 20 48 61 76 65 20 79 6f 75 2c 20 64 75 72 69 6e 67 20 74 68 65 20 74 65 6e 2d 79 65 61 72 20 70 65 72 69 6f 64 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 70 72 65 63 65 64 69 6e 67 20 73 75 62 6d 69 73 73 69 6f 6e 20 6f 66 20 74 68 69 73 20 61 70 70 6c 69 63 61 74 69 6f 6e 2c 20 62 65 65 6e 20 63 6f 6e 76 69 63 74 65 64 20 6f 66 2c 20 68 61 64 20 61 20 6a 75 64 67 65 20 66 69 6e 64 20 79 6f 75 20 67 75 Data Ascii: io.gov/UNFD/Finders/Disqualifying_Offenses.pdf\" target=\"_blank\">Disqualifying Offenses</a>"},"question6":{"LABEL":"19. Have you, during the ten-year period immediately preceding submission of this application, been convicted of, had a judge find you gu

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:17 UTC	749	OUT	GET /SWS/app/properties HTTP/1.1 Host: colorado.findyourunclaimedproperty.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://colorado.findyourunclaimedproperty.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1286796610.1744289835; _gat=1; _ga=GA1.1.1786083533.1744289835; _ga_LCNWMJ8RYG=GS1.1.1744289835.1.0.1744289835.0.0.0
2025-04-10 12:57:17 UTC	793	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/json Transfer-Encoding: chunked Connection: close Date: Thu, 10 Apr 2025 12:55:03 GMT Expires: Thu, 01 Jan 1970 00:00:00 GMT Etag: "901161982" Cache-Control: no-transform, must-revalidate, max-age=900 X-Content-Type-Options: NOSNIFF Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: DENY Vary: Accept-Encoding Via: 1.1 dee3e3075e44bf98642bfe89cb38088a.cloudfront.net (CloudFront) Age: 134 Content-Security-Policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin-when-cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: nGRxVfUIXM97LM5sOAMPQSO-IAynZwAsOVNSlGJEU-ZJpukzJcZXHQ==
2025-04-10 12:57:17 UTC	15370	IN	Data Raw: 33 63 30 32 0d 0a 7b 22 69 6e 71 75 69 72 79 46 6f 72 6d 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 74 75 72 6e 73 74 69 6c 65 22 3a 7b 22 76 33 22 3a 66 61 6c 73 65 2c 22 73 69 74 65 4b 65 79 22 3a 22 30 78 34 41 41 41 41 41 41 41 68 46 64 7a 33 6a 42 57 34 55 37 37 77 70 22 2c 22 73 69 74 65 4b 65 79 56 33 22 3a 6e 75 6c 6c 2c 22 63 6c 6f 75 64 66 6c 61 72 65 22 3a 66 61 6c 73 65 7d 2c 22 73 65 6e 74 72 79 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 64 73 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 33 38 31 37 39 38 65 36 66 33 31 39 63 36 38 66 36 32 65 35 36 38 65 65 39 35 Data Ascii: 3c02{"inquiryForm":{"enabled":false,"turnstileEnabled":true},"turnstile":{"v3":false,"siteKey":"0x4AAAAAAAhFdz3jBW4U77wp","siteKeyV3":null,"cloudflare":false},"sentry":{"enabled":false,"feedbackEnabled":false,"dsnUrl":"https://381798e6f319c68f62e568ee95
2025-04-10 12:57:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:17 UTC	654	OUT	GET /turnstile/v0/api.js?onload=turnstileOnloadCallback&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://colorado.findyourunclaimedproperty.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-10 12:57:17 UTC	386	IN	HTTP/1.1 302 Found Date: Thu, 10 Apr 2025 12:57:17 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/580ba44007a6/api.js Server: cloudflare CF-RAY: 92e268bbe81fc46b-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:17 UTC	622	OUT	GET /turnstile/v0/b/580ba44007a6/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://colorado.findyourunclaimedproperty.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-10 12:57:17 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 10 Apr 2025 12:57:17 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Fri, 04 Apr 2025 13:58:27 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 92e268be8edbbdbc-EWR alt-svc: h3=":443"; ma=86400
2025-04-10 12:57:17 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-04-10 12:57:17 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-04-10 12:57:17 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 56 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ve(e,t){var a={label:0,sent:function(){if(l[0
2025-04-10 12:57:17 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-04-10 12:57:17 UTC	1369	IN	Data Raw: 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 5a 7c 7c 28 5a 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 3d 22 72 Data Ascii: anual",e.Auto="auto"})(Z\|\|(Z={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render="r
2025-04-10 12:57:17 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 Data Ascii: tion pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test(e)
2025-04-10 12:57:17 UTC	1369	IN	Data Raw: 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 Data Ascii: "ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"fbD
2025-04-10 12:57:17 UTC	1369	IN	Data Raw: 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 65 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 Data Ascii: .setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},ee(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writ
2025-04-10 12:57:17 UTC	1369	IN	Data Raw: 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 Data Ascii: nfigurable:!0}}),ee(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,ar
2025-04-10 12:57:17 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b Data Ascii: tion(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(a);

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:17 UTC	557	OUT	GET /SWS/app/properties HTTP/1.1 Host: colorado.findyourunclaimedproperty.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1286796610.1744289835; _gat=1; _ga=GA1.1.1786083533.1744289835; _ga_LCNWMJ8RYG=GS1.1.1744289835.1.0.1744289835.0.0.0
2025-04-10 12:57:18 UTC	792	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/json Transfer-Encoding: chunked Connection: close X-Content-Type-Options: NOSNIFF Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: DENY Date: Thu, 10 Apr 2025 12:57:18 GMT Expires: Thu, 01 Jan 1970 00:00:00 GMT Cache-Control: no-transform, must-revalidate, max-age=900 Etag: "-2018018532" Vary: Accept-Encoding Via: 1.1 774fddee085016d16b500fd9201faeb2.cloudfront.net (CloudFront) Content-Security-Policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin-when-cross-origin X-Cache: RefreshHit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: UpDZZXa9SJzso6BrXl4waP0xVzm6CpcedEba0fIUo_MTVJ7B-CMB0g==
2025-04-10 12:57:18 UTC	12786	IN	Data Raw: 33 31 65 61 0d 0a 7b 22 69 6e 71 75 69 72 79 46 6f 72 6d 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 74 75 72 6e 73 74 69 6c 65 22 3a 7b 22 76 33 22 3a 66 61 6c 73 65 2c 22 73 69 74 65 4b 65 79 22 3a 22 30 78 34 41 41 41 41 41 41 41 68 46 64 7a 33 6a 42 57 34 55 37 37 77 70 22 2c 22 73 69 74 65 4b 65 79 56 33 22 3a 6e 75 6c 6c 2c 22 63 6c 6f 75 64 66 6c 61 72 65 22 3a 66 61 6c 73 65 7d 2c 22 73 65 6e 74 72 79 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 64 73 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 33 38 31 37 39 38 65 36 66 33 31 39 63 36 38 66 36 32 65 35 36 38 65 65 39 35 Data Ascii: 31ea{"inquiryForm":{"enabled":false,"turnstileEnabled":true},"turnstile":{"v3":false,"siteKey":"0x4AAAAAAAhFdz3jBW4U77wp","siteKeyV3":null,"cloudflare":false},"sentry":{"enabled":false,"feedbackEnabled":false,"dsnUrl":"https://381798e6f319c68f62e568ee95
2025-04-10 12:57:18 UTC	2591	IN	Data Raw: 61 31 38 0d 0a 69 74 6c 65 52 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 73 75 6d 6d 61 72 79 22 3a 7b 22 73 68 6f 77 54 6f 70 50 61 6e 65 6c 22 3a 66 61 6c 73 65 2c 22 73 68 6f 77 53 74 61 74 69 63 46 69 65 6c 64 41 74 42 6f 74 74 6f 6d 22 3a 66 61 6c 73 65 7d 2c 22 64 6f 63 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 53 75 62 54 79 70 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 64 6f 63 75 6d 65 6e 74 53 75 62 54 79 70 65 4f 70 74 69 6f 6e 73 22 3a 6e 75 6c 6c 2c 22 68 6f 6c 64 65 72 44 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 70 6f 72 74 44 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 75 64 69 74 44 6f 63 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 Data Ascii: a18itleRequired":false,"turnstileEnabled":true},"summary":{"showTopPanel":false,"showStaticFieldAtBottom":false},"doc":{"documentSubTypeEnabled":false,"documentSubTypeOptions":null,"holderDocEnabled":true,"reportDocEnabled":true,"auditDocEnabled":true,"
2025-04-10 12:57:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:18 UTC	782	OUT	GET /fonts/open-sans-bold.woff2 HTTP/1.1 Host: colorado.findyourunclaimedproperty.com Connection: keep-alive Origin: https://colorado.findyourunclaimedproperty.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://colorado.findyourunclaimedproperty.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1286796610.1744289835; _gat=1; _ga=GA1.1.1786083533.1744289835; _ga_LCNWMJ8RYG=GS1.1.1744289835.1.0.1744289835.0.0.0
2025-04-10 12:57:18 UTC	860	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 16224 Connection: close Last-Modified: Wed, 02 Apr 2025 17:22:11 GMT X-Amz-Version-Id: 6JPvS..KlsWZKvd0cXsUTJuv_.N8iPGi Server: AmazonS3 Date: Wed, 09 Apr 2025 13:14:03 GMT Etag: "766fc545e65b65297289359eac5ac7bf" Vary: Accept-Encoding Via: 1.1 f2d96237236476e7356cfe5344feb776.cloudfront.net (CloudFront) Age: 85396 Cache-Control: max-age=86400, must-revalidate Content-Security-Policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: NOSNIFF X-Frame-Options: DENY X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: ExYTHknRCDaG6AHFVYycZ3ggbs_ZJcGjz0jeIJZRwoDY017urkrUBQ==
2025-04-10 12:57:18 UTC	15524	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 3f 60 00 12 00 00 00 00 8c 8c 00 00 3e fa 00 01 19 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 16 1b 0c 1c 74 06 60 00 81 44 08 81 2a 09 8f 60 11 0c 0a 81 b0 60 81 98 51 01 36 02 24 03 86 68 13 bd 10 0b 83 3a 00 04 20 05 82 5c 07 84 26 0c 81 78 1b 8c 7d 39 20 3b b7 74 e4 4a c7 a1 dc 55 fd b6 d3 90 21 aa 8a a2 4a 35 95 a3 10 d8 38 10 d8 f6 b7 cf fe ff ff ff ff f3 92 0d 19 eb 60 e3 60 e0 a6 56 96 f5 0f aa 04 15 f7 18 9e e9 62 0c 11 81 c0 70 54 c0 b9 55 4d 66 ba d8 88 a0 ca 2e d3 f5 65 64 47 32 25 75 27 09 8a c0 11 da a0 7e f6 da 55 a7 12 82 9a 83 8d 5b 3d f6 4c 4c 71 c0 a7 3a 1f 08 11 28 eb 6b b5 3d e5 d3 9b a9 93 ec 37 b1 d1 c1 ee 7e 78 ab 0b ea c1 7a 75 49 13 d7 5b fb 98 bf b1 6e 59 18 1a 0d 54 87 f3 7d Data Ascii: wOF2?`>t`D*``Q6$h: \&x}9 ;tJU!J58``VbpTUMf.edG2%u'~U[=LLq:(k=7~xzuI[nYT}
2025-04-10 12:57:18 UTC	466	IN	Data Raw: 24 31 57 16 02 9e 78 a8 7c 81 3b 3e 25 b3 c5 00 04 e4 b1 46 e0 44 ad 79 73 b5 e3 80 e8 03 ec 68 54 64 87 f0 68 29 ce 84 00 1a 8f 16 a1 25 fc d1 a2 d4 e4 3c 5a 8c 86 e6 95 cb 20 18 16 22 45 94 24 7a f0 22 24 e1 82 49 96 80 0d ba c1 59 71 81 31 4a 1a 3d d6 dd 24 da 88 de 0e ba 49 66 e0 ec 68 10 76 67 53 d6 72 52 49 c6 3d e2 c9 49 01 b7 c9 10 b7 45 69 b1 d6 62 a5 9f 3d 3c 85 1b 5b 7f 96 66 23 e2 50 8b c0 4a b0 a8 15 3d 59 9a 18 92 09 38 ad 7b b9 b5 b8 6c 21 c1 f9 f2 87 86 f7 fb 5b b3 67 c3 6e bd 7f 83 6d b4 98 f4 74 f4 09 20 ac 4b 6f 31 11 a2 c4 88 03 91 58 cb ca 8f a6 14 69 32 64 c9 91 a7 40 91 12 65 2a 54 a9 51 a7 41 93 16 6d 3a 74 e9 d1 67 c0 90 11 63 26 4c 99 31 67 c1 92 35 1b b6 ec 40 d8 73 e0 c8 89 b3 bd 5c b8 72 e3 ce 83 27 2f de 7c 40 c1 f8 f2 e3 2f Data Ascii: $1Wx\|;>%FDyshTdh)%<Z "E$z"$IYq1J=$IfhvgSrRI=IEib=<[f#PJ=Y8{l![gnmt Ko1Xi2d@e*TQAm:tgc&L1g5@s\r'/\|@/
2025-04-10 12:57:18 UTC	234	IN	Data Raw: cc c9 63 77 6d 33 0b 9b b7 5c 9d 66 6b 62 e5 d8 99 93 a7 ce 1c 5f 3e b9 7a ec e4 a1 92 a3 fa 0c 5d 59 d1 af 47 d5 32 b3 18 91 ac a9 72 56 99 94 ba ba af e6 86 a6 8e 1c 5a 9a 3a 3c d7 aa a4 66 64 4b cb ad b7 46 fb bb 9f 09 34 26 a9 9a bf ce 4d 4e 2d cd 91 39 33 39 d5 9f eb b3 82 0f 53 03 b9 87 ae 86 44 7a a4 03 d2 5d 49 0a 55 cc 8f cc cf 4d 89 e7 a6 ad f1 9c 62 0d e5 06 ad 5e d2 63 c9 b9 fd 8b 73 b7 e7 b3 1c 37 f7 10 92 03 eb 18 5c 83 bb f0 b7 80 0c a4 3d 44 82 a4 43 ee f8 8d 7a 3a 5d e9 84 bb b8 0a 46 8f ce 23 79 09 b5 ba 1f d7 ab 4d 0c 1d f5 83 d5 9c 17 3e 21 b7 ec e7 6f de 84 c2 44 05 b7 d6 05 b2 09 7b 79 97 1c e4 09 7f 08 0a f6 a9 53 e9 73 74 9a 3e f5 f0 a9 d3 82 2f 24 89 8d 3c 0c 00 00 00 Data Ascii: cwm3\fkb_>z]YG2rVZ:<fdKF4&MN-939SDz]IUMb^cs7\=DCz:]F#yM>!oD{ySst>/$<

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:18 UTC	781	OUT	GET /268.f98989305c9b3596.js HTTP/1.1 Host: colorado.findyourunclaimedproperty.com Connection: keep-alive Origin: https://colorado.findyourunclaimedproperty.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://colorado.findyourunclaimedproperty.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1286796610.1744289835; _gat=1; _ga=GA1.1.1786083533.1744289835; _ga_LCNWMJ8RYG=GS1.1.1744289835.1.0.1744289835.0.0.0
2025-04-10 12:57:18 UTC	855	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 889 Connection: close Last-Modified: Wed, 02 Apr 2025 17:22:07 GMT X-Amz-Version-Id: xjjn95WoeczBRcyRXm0ZJrJIIT1JLVLP Server: AmazonS3 Date: Wed, 09 Apr 2025 13:16:12 GMT Etag: "f7eee9ba749926d02969b7c6d4753ef6" Vary: Accept-Encoding Via: 1.1 9ad14e3f9b528d4215643d5af359b816.cloudfront.net (CloudFront) Age: 85267 Cache-Control: max-age=31536000, public Content-Security-Policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: NOSNIFF X-Frame-Options: DENY X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: jVa3okED4axsYSYOPpnkfehZziQBFsPu8c53mAjz-vxrsYmo38aXgA==
2025-04-10 12:57:18 UTC	889	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3c 22 75 22 3f 77 69 6e 64 6f 77 3a 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3c 22 75 22 3f 67 6c 6f 62 61 6c 3a 74 79 70 65 6f 66 20 73 65 6c 66 3c 22 75 22 3f 73 65 6c 66 3a 7b 7d 2c 73 3d 28 6e 65 77 20 74 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 73 26 26 28 74 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 74 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 74 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 73 5d 3d 22 35 61 35 32 30 30 64 35 2d 36 33 63 64 2d 34 36 35 32 2d 61 63 65 30 2d 64 32 31 31 39 32 37 31 39 31 63 63 22 2c 74 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 49 64 65 6e 74 69 66 69 65 72 3d 22 73 65 6e 74 72 Data Ascii: !function(){try{var t=typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{},s=(new t.Error).stack;s&&(t._sentryDebugIds=t._sentryDebugIds\|\|{},t._sentryDebugIds[s]="5a5200d5-63cd-4652-ace0-d211927191cc",t._sentryDebugIdIdentifier="sentr

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://colorado.findyourunclaimedproperty.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Windows Analysis Report
http://colorado.findyourunclaimedproperty.com

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:18 UTC	781	OUT	GET /956.b3aeec33f0994243.js HTTP/1.1 Host: colorado.findyourunclaimedproperty.com Connection: keep-alive Origin: https://colorado.findyourunclaimedproperty.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://colorado.findyourunclaimedproperty.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1286796610.1744289835; _gat=1; _ga=GA1.1.1786083533.1744289835; _ga_LCNWMJ8RYG=GS1.1.1744289835.1.0.1744289835.0.0.0
2025-04-10 12:57:18 UTC	856	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 7526 Connection: close Last-Modified: Wed, 02 Apr 2025 17:22:08 GMT X-Amz-Version-Id: 3MbqZlqNQhhKV0I5h8xq7bcsh_QswKvG Server: AmazonS3 Date: Wed, 09 Apr 2025 13:16:12 GMT Etag: "35fa3febb9d7195050f68066c2dda0a5" Vary: Accept-Encoding Via: 1.1 2da1a465458d2c4bd692e693d75f0780.cloudfront.net (CloudFront) Age: 85267 Cache-Control: max-age=31536000, public Content-Security-Policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: NOSNIFF X-Frame-Options: DENY X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: sKDDeZPfUbe1zGvhoV8eiVinJP5K7YynzdvhsgsQcNDbhXeg5uD2aQ==
2025-04-10 12:57:18 UTC	7526	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3c 22 75 22 3f 77 69 6e 64 6f 77 3a 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3c 22 75 22 3f 67 6c 6f 62 61 6c 3a 74 79 70 65 6f 66 20 73 65 6c 66 3c 22 75 22 3f 73 65 6c 66 3a 7b 7d 2c 75 3d 28 6e 65 77 20 6c 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 75 26 26 28 6c 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 6c 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 6c 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 75 5d 3d 22 61 31 36 64 61 31 66 63 2d 62 33 35 62 2d 34 36 35 37 2d 38 34 38 30 2d 65 36 31 36 37 32 33 38 66 34 64 36 22 2c 6c 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 49 64 65 6e 74 69 66 69 65 72 3d 22 73 65 6e 74 72 Data Ascii: !function(){try{var l=typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{},u=(new l.Error).stack;u&&(l._sentryDebugIds=l._sentryDebugIds\|\|{},l._sentryDebugIds[u]="a16da1fc-b35b-4657-8480-e6167238f4d6",l._sentryDebugIdIdentifier="sentr

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:18 UTC	781	OUT	GET /852.baaf94e60d05f520.js HTTP/1.1 Host: colorado.findyourunclaimedproperty.com Connection: keep-alive Origin: https://colorado.findyourunclaimedproperty.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://colorado.findyourunclaimedproperty.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1286796610.1744289835; _gat=1; _ga=GA1.1.1786083533.1744289835; _ga_LCNWMJ8RYG=GS1.1.1744289835.1.0.1744289835.0.0.0
2025-04-10 12:57:18 UTC	857	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 35627 Connection: close Last-Modified: Wed, 02 Apr 2025 17:22:07 GMT X-Amz-Version-Id: OXXsDEaZWuC9WwOvSCSY4SEHqdV90Uof Server: AmazonS3 Date: Wed, 09 Apr 2025 13:16:12 GMT Etag: "a31b814b0c958c31513d6089e595b74a" Vary: Accept-Encoding Via: 1.1 c2439c5d69ec72a2ab666c2eba104244.cloudfront.net (CloudFront) Age: 85267 Cache-Control: max-age=31536000, public Content-Security-Policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: NOSNIFF X-Frame-Options: DENY X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: plIrvw92mCHzKi_9xWFTZODnVm2I_P7PfpceNBZqi8O8h8EJnivUOg==
2025-04-10 12:57:18 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3c 22 75 22 3f 77 69 6e 64 6f 77 3a 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3c 22 75 22 3f 67 6c 6f 62 61 6c 3a 74 79 70 65 6f 66 20 73 65 6c 66 3c 22 75 22 3f 73 65 6c 66 3a 7b 7d 2c 6d 3d 28 6e 65 77 20 68 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 6d 26 26 28 68 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 68 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 68 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 6d 5d 3d 22 63 36 35 66 63 64 66 62 2d 33 35 38 37 2d 34 62 39 37 2d 39 30 63 34 2d 63 33 34 34 64 61 37 61 31 35 62 39 22 2c 68 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 49 64 65 6e 74 69 66 69 65 72 3d 22 73 65 6e 74 72 Data Ascii: !function(){try{var h=typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{},m=(new h.Error).stack;m&&(h._sentryDebugIds=h._sentryDebugIds\|\|{},h._sentryDebugIds[m]="c65fcdfb-3587-4b97-90c4-c344da7a15b9",h._sentryDebugIdIdentifier="sentr
2025-04-10 12:57:18 UTC	16384	IN	Data Raw: 22 5d 2c 5b 33 2c 22 74 72 61 6e 73 6c 61 74 65 22 5d 2c 5b 22 69 64 22 2c 22 62 61 63 6b 2d 62 74 6e 22 2c 22 64 69 73 61 62 6c 65 64 22 2c 22 22 2c 31 2c 22 62 74 6e 22 2c 22 62 74 6e 2d 6e 61 76 22 5d 2c 5b 22 69 64 22 2c 22 62 61 63 6b 2d 62 74 6e 2d 69 63 6f 6e 22 2c 31 2c 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 22 5d 2c 5b 22 69 64 22 2c 22 62 61 63 6b 2d 62 74 6e 2d 74 65 78 74 22 2c 33 2c 22 74 72 61 6e 73 6c 61 74 65 22 5d 2c 5b 22 69 64 22 2c 22 6e 65 78 74 2d 62 74 6e 22 2c 22 64 69 73 61 62 6c 65 64 22 2c 22 22 2c 31 2c 22 62 74 6e 22 2c 22 62 74 6e 2d 6e 61 76 22 5d 2c 5b 22 69 64 22 2c 22 6e 65 78 74 2d 62 74 6e 2d 74 65 78 74 22 2c 33 2c 22 74 72 61 6e 73 6c 61 74 65 22 5d 2c 5b 22 69 64 22 2c 22 6e 65 78 74 2d 62 74 6e 2d 69 63 6f 6e Data Ascii: "],[3,"translate"],["id","back-btn","disabled","",1,"btn","btn-nav"],["id","back-btn-icon",1,"material-icons"],["id","back-btn-text",3,"translate"],["id","next-btn","disabled","",1,"btn","btn-nav"],["id","next-btn-text",3,"translate"],["id","next-btn-icon
2025-04-10 12:57:18 UTC	2859	IN	Data Raw: 4f 4e 22 29 2c 74 2e 78 70 36 28 33 29 2c 74 2e 51 36 4a 28 22 74 72 61 6e 73 6c 61 74 65 22 2c 22 48 4f 4c 44 45 52 2e 50 41 59 4d 45 4e 54 2e 49 4e 46 4f 5f 50 41 47 45 2e 50 41 59 4d 45 4e 54 5f 49 4e 46 4f 52 4d 41 54 49 4f 4e 5f 54 45 58 54 22 29 2c 74 2e 78 70 36 28 32 29 2c 74 2e 51 36 4a 28 22 68 69 64 64 65 6e 22 2c 21 6e 2e 69 73 53 75 62 6d 69 74 74 69 6e 67 29 2c 74 2e 78 70 36 28 31 29 2c 74 2e 51 36 4a 28 22 69 6e 6e 65 72 48 54 4d 4c 22 2c 74 2e 6c 63 5a 28 31 36 2c 31 36 2c 22 48 4f 4c 44 45 52 2e 50 41 59 4d 45 4e 54 2e 49 4e 46 4f 5f 50 41 47 45 2e 52 45 44 49 52 45 43 54 5f 53 50 49 4e 4e 45 52 5f 45 4c 45 4d 45 4e 54 53 22 29 2c 74 2e 6f 4a 44 29 2c 74 2e 78 70 36 28 32 29 2c 74 2e 51 36 4a 28 22 6e 67 49 66 22 2c 6e 2e 66 6f 72 6d 26 Data Ascii: ON"),t.xp6(3),t.Q6J("translate","HOLDER.PAYMENT.INFO_PAGE.PAYMENT_INFORMATION_TEXT"),t.xp6(2),t.Q6J("hidden",!n.isSubmitting),t.xp6(1),t.Q6J("innerHTML",t.lcZ(16,16,"HOLDER.PAYMENT.INFO_PAGE.REDIRECT_SPINNER_ELEMENTS"),t.oJD),t.xp6(2),t.Q6J("ngIf",n.form&

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:18 UTC	781	OUT	GET /599.aa8bb11b02586fb0.js HTTP/1.1 Host: colorado.findyourunclaimedproperty.com Connection: keep-alive Origin: https://colorado.findyourunclaimedproperty.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://colorado.findyourunclaimedproperty.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1286796610.1744289835; _gat=1; _ga=GA1.1.1786083533.1744289835; _ga_LCNWMJ8RYG=GS1.1.1744289835.1.0.1744289835.0.0.0
2025-04-10 12:57:18 UTC	857	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 24506 Connection: close Last-Modified: Wed, 02 Apr 2025 17:22:07 GMT X-Amz-Version-Id: qpo_cltnidOeuL6_ZhYA1ZUJIfW91w96 Server: AmazonS3 Date: Wed, 09 Apr 2025 13:16:28 GMT Etag: "c091e7740d80aa6795d620311d46c9d2" Vary: Accept-Encoding Via: 1.1 7c10de2006b7b1d4ae37bbcf905eecd6.cloudfront.net (CloudFront) Age: 85267 Cache-Control: max-age=31536000, public Content-Security-Policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: NOSNIFF X-Frame-Options: DENY X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: RQrn6Dj_XYufQaGJaV2YiE81-wHA_Ga5n3BhnAoH9Ht23vy8SG2RSA==
2025-04-10 12:57:18 UTC	15527	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 75 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3c 22 75 22 3f 77 69 6e 64 6f 77 3a 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3c 22 75 22 3f 67 6c 6f 62 61 6c 3a 74 79 70 65 6f 66 20 73 65 6c 66 3c 22 75 22 3f 73 65 6c 66 3a 7b 7d 2c 6d 3d 28 6e 65 77 20 75 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 6d 26 26 28 75 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 75 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 75 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 6d 5d 3d 22 62 62 63 32 63 30 63 36 2d 61 38 37 31 2d 34 66 31 30 2d 38 64 36 36 2d 66 62 33 38 61 63 64 31 66 39 33 61 22 2c 75 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 49 64 65 6e 74 69 66 69 65 72 3d 22 73 65 6e 74 72 Data Ascii: !function(){try{var u=typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{},m=(new u.Error).stack;m&&(u._sentryDebugIds=u._sentryDebugIds\|\|{},u._sentryDebugIds[m]="bbc2c0c6-a871-4f10-8d66-fb38acd1f93a",u._sentryDebugIdIdentifier="sentr
2025-04-10 12:57:18 UTC	8979	IN	Data Raw: 67 65 7d 69 6e 69 74 69 61 6c 69 7a 65 46 6f 72 6d 43 61 63 68 65 28 29 7b 74 68 69 73 2e 68 6f 6c 64 65 72 4f 75 74 72 65 61 63 68 43 61 63 68 65 2e 70 75 74 28 22 74 69 65 72 22 2c 31 29 2c 74 68 69 73 2e 68 6f 6c 64 65 72 4f 75 74 72 65 61 63 68 43 61 63 68 65 2e 70 75 74 28 22 66 6f 72 6d 43 6f 6e 66 69 67 22 2c 74 68 69 73 2e 66 6f 72 6d 43 6f 6e 66 69 67 29 7d 73 65 74 44 61 74 61 46 72 6f 6d 43 61 63 68 65 28 29 7b 63 6f 6e 73 74 20 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 74 68 69 73 2e 68 6f 6c 64 65 72 4f 75 74 72 65 61 63 68 43 61 63 68 65 2e 67 65 74 28 22 74 69 65 72 44 61 74 61 22 29 29 3b 65 2e 72 65 66 65 72 65 6e 63 65 43 6f 64 65 3d 74 68 69 73 2e 68 6f 6c 64 65 72 4f 75 74 72 65 61 63 68 43 61 63 68 65 2e 67 65 74 28 22 Data Ascii: ge}initializeFormCache(){this.holderOutreachCache.put("tier",1),this.holderOutreachCache.put("formConfig",this.formConfig)}setDataFromCache(){const e=Object.assign({},this.holderOutreachCache.get("tierData"));e.referenceCode=this.holderOutreachCache.get("

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:18 UTC	781	OUT	GET /224.3d7782bbc982e8f5.js HTTP/1.1 Host: colorado.findyourunclaimedproperty.com Connection: keep-alive Origin: https://colorado.findyourunclaimedproperty.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://colorado.findyourunclaimedproperty.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1286796610.1744289835; _gat=1; _ga=GA1.1.1786083533.1744289835; _ga_LCNWMJ8RYG=GS1.1.1744289835.1.0.1744289835.0.0.0
2025-04-10 12:57:19 UTC	857	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 14761 Connection: close Last-Modified: Wed, 02 Apr 2025 17:22:06 GMT X-Amz-Version-Id: .0njR8m5Qo.k21jcrbPj3vs4paUlEzkY Server: AmazonS3 Date: Wed, 09 Apr 2025 13:16:12 GMT Etag: "f0795d21648c394f758c9a041fa15596" Vary: Accept-Encoding Via: 1.1 14b9e21ac67dd643dc9e782cb20c49a2.cloudfront.net (CloudFront) Age: 85267 Cache-Control: max-age=31536000, public Content-Security-Policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: NOSNIFF X-Frame-Options: DENY X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: 1dAAf6iD0QbtQ1Yn4eACQys_-HqtzOG5_9vAkO61gLHS-YmTXnNpAA==
2025-04-10 12:57:19 UTC	14761	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 64 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3c 22 75 22 3f 77 69 6e 64 6f 77 3a 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3c 22 75 22 3f 67 6c 6f 62 61 6c 3a 74 79 70 65 6f 66 20 73 65 6c 66 3c 22 75 22 3f 73 65 6c 66 3a 7b 7d 2c 61 3d 28 6e 65 77 20 64 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 61 26 26 28 64 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 64 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 64 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 61 5d 3d 22 39 65 35 66 30 61 34 33 2d 30 62 37 33 2d 34 33 32 35 2d 61 34 38 61 2d 31 39 61 34 61 65 37 37 64 38 32 34 22 2c 64 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 49 64 65 6e 74 69 66 69 65 72 3d 22 73 65 6e 74 72 Data Ascii: !function(){try{var d=typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{},a=(new d.Error).stack;a&&(d._sentryDebugIds=d._sentryDebugIds\|\|{},d._sentryDebugIds[a]="9e5f0a43-0b73-4325-a48a-19a4ae77d824",d._sentryDebugIdIdentifier="sentr

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:18 UTC	781	OUT	GET /455.e232ec29a29d7649.js HTTP/1.1 Host: colorado.findyourunclaimedproperty.com Connection: keep-alive Origin: https://colorado.findyourunclaimedproperty.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://colorado.findyourunclaimedproperty.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1286796610.1744289835; _gat=1; _ga=GA1.1.1786083533.1744289835; _ga_LCNWMJ8RYG=GS1.1.1744289835.1.0.1744289835.0.0.0
2025-04-10 12:57:18 UTC	858	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 132858 Connection: close Last-Modified: Wed, 02 Apr 2025 17:22:07 GMT X-Amz-Version-Id: FQYkLi8iUQv_ERfmaQoAPU8FzV9tkyZ9 Server: AmazonS3 Date: Wed, 09 Apr 2025 13:16:12 GMT Etag: "d2ecae27d98dde5007ef3f6c0aaea1a3" Vary: Accept-Encoding Via: 1.1 9ad14e3f9b528d4215643d5af359b816.cloudfront.net (CloudFront) Age: 85267 Cache-Control: max-age=31536000, public Content-Security-Policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: NOSNIFF X-Frame-Options: DENY X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: 8-uA1QUIP6jR4xJa-LYcWd2_NQbTGC2ikN-3IdXBzbN8ZSvoaOX2wA==
2025-04-10 12:57:18 UTC	2968	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3c 22 75 22 3f 77 69 6e 64 6f 77 3a 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3c 22 75 22 3f 67 6c 6f 62 61 6c 3a 74 79 70 65 6f 66 20 73 65 6c 66 3c 22 75 22 3f 73 65 6c 66 3a 7b 7d 2c 66 3d 28 6e 65 77 20 68 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 66 26 26 28 68 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 68 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 68 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 66 5d 3d 22 33 61 39 61 32 32 33 35 2d 31 37 33 30 2d 34 35 62 34 2d 39 35 61 62 2d 36 32 63 38 62 61 39 65 62 33 31 32 22 2c 68 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 49 64 65 6e 74 69 66 69 65 72 3d 22 73 65 6e 74 72 Data Ascii: !function(){try{var h=typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{},f=(new h.Error).stack;f&&(h._sentryDebugIds=h._sentryDebugIds\|\|{},h._sentryDebugIds[f]="3a9a2235-1730-45b4-95ab-62c8ba9eb312",h._sentryDebugIdIdentifier="sentr
2025-04-10 12:57:18 UTC	16384	IN	Data Raw: 3b 63 6f 6e 73 74 20 6d 3d 6e 65 77 20 6c 2e 7a 28 7b 6e 61 6d 65 3a 22 68 6f 6c 64 65 72 66 6f 72 6d 22 2c 66 69 65 6c 64 53 65 74 73 3a 5b 6e 65 77 20 72 2e 43 28 7b 6e 61 6d 65 3a 22 70 72 69 6d 61 72 79 22 2c 66 69 65 6c 64 73 3a 5b 6e 65 77 20 6e 2e 5f 28 7b 6b 65 79 3a 22 68 6f 6c 64 65 72 54 79 70 65 22 2c 69 73 41 63 74 69 76 65 3a 21 31 7d 29 2c 6e 65 77 20 6f 2e 6a 69 28 7b 6b 65 79 3a 22 6c 69 66 65 49 6e 73 75 72 61 6e 63 65 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 22 2c 69 73 41 63 74 69 76 65 3a 21 31 7d 29 2c 6e 65 77 20 74 2e 6e 76 28 7b 6b 65 79 3a 22 64 42 41 4e 61 6d 65 22 2c 69 73 41 63 74 69 76 65 3a 21 31 7d 29 2c 6e 65 77 20 74 2e 6e 76 28 7b 6b 65 79 3a 22 73 74 61 74 65 49 64 65 6e 74 69 66 69 65 72 22 2c 69 73 41 63 74 69 76 65 3a 21 Data Ascii: ;const m=new l.z({name:"holderform",fieldSets:[new r.C({name:"primary",fields:[new n._({key:"holderType",isActive:!1}),new o.ji({key:"lifeInsuranceConfirmation",isActive:!1}),new t.nv({key:"dBAName",isActive:!1}),new t.nv({key:"stateIdentifier",isActive:!
2025-04-10 12:57:18 UTC	16384	IN	Data Raw: 6c 69 64 61 74 69 6f 6e 3a 7b 72 65 71 75 69 72 65 64 3a 21 30 7d 2c 6f 6e 43 68 61 6e 67 65 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 22 69 73 4e 65 67 61 74 69 76 65 22 3d 3d 3d 64 2e 6b 65 79 26 26 28 22 74 72 75 65 22 3d 3d 3d 74 68 69 73 2e 66 6f 72 6d 2e 63 6f 6e 74 72 6f 6c 73 5b 64 2e 6b 65 79 5d 2e 76 61 6c 75 65 3f 28 74 68 69 73 2e 66 6f 72 6d 2e 63 6f 6e 74 72 6f 6c 73 5b 74 68 69 73 2e 66 69 65 6c 64 2e 6b 65 79 5d 2e 73 65 74 56 61 6c 75 65 28 76 6f 69 64 20 30 29 2c 74 68 69 73 2e 66 69 65 6c 64 2e 69 73 44 69 73 61 62 6c 65 64 3d 21 30 29 3a 74 68 69 73 2e 66 69 65 6c 64 2e 69 73 44 69 73 61 62 6c 65 64 3d 21 31 2c 74 68 69 73 2e 66 69 65 6c 64 29 7d 7d 29 2c 6e 65 77 20 63 2e 67 28 7b 6b 65 79 3a 22 69 73 4e 6f 74 69 63 65 Data Ascii: lidation:{required:!0},onChange:function(d){return"isNegative"===d.key&&("true"===this.form.controls[d.key].value?(this.form.controls[this.field.key].setValue(void 0),this.field.isDisabled=!0):this.field.isDisabled=!1,this.field)}}),new c.g({key:"isNotice
2025-04-10 12:57:18 UTC	16384	IN	Data Raw: 20 73 2e 6e 76 28 7b 6b 65 79 3a 22 64 42 41 4e 61 6d 65 22 2c 69 73 41 63 74 69 76 65 3a 21 31 7d 29 2c 6e 65 77 20 73 2e 6e 76 28 7b 6b 65 79 3a 22 63 6f 6e 74 61 63 74 54 69 74 6c 65 22 2c 69 73 41 63 74 69 76 65 3a 21 31 7d 29 2c 6e 65 77 20 73 2e 6e 76 28 7b 6b 65 79 3a 22 61 64 64 72 65 73 73 31 22 2c 69 73 41 63 74 69 76 65 3a 21 31 7d 29 2c 6e 65 77 20 73 2e 6e 76 28 7b 6b 65 79 3a 22 61 64 64 72 65 73 73 32 22 2c 69 73 41 63 74 69 76 65 3a 21 31 7d 29 2c 6e 65 77 20 73 2e 6e 76 28 7b 6b 65 79 3a 22 61 64 64 72 65 73 73 33 22 2c 69 73 41 63 74 69 76 65 3a 21 31 7d 29 2c 6e 65 77 20 73 2e 6e 76 28 7b 6b 65 79 3a 22 63 69 74 79 22 2c 69 73 41 63 74 69 76 65 3a 21 31 7d 29 2c 6e 65 77 20 75 2e 49 43 28 7b 6b 65 79 3a 22 61 64 64 72 65 73 73 53 74 61 Data Ascii: s.nv({key:"dBAName",isActive:!1}),new s.nv({key:"contactTitle",isActive:!1}),new s.nv({key:"address1",isActive:!1}),new s.nv({key:"address2",isActive:!1}),new s.nv({key:"address3",isActive:!1}),new s.nv({key:"city",isActive:!1}),new u.IC({key:"addressSta
2025-04-10 12:57:18 UTC	16384	IN	Data Raw: 74 72 6f 6c 73 5b 61 2e 6b 65 79 5d 2e 76 61 6c 75 65 3f 28 74 68 69 73 2e 66 69 65 6c 64 2e 69 73 44 69 73 61 62 6c 65 64 3d 21 30 2c 74 68 69 73 2e 66 6f 72 6d 2e 63 6f 6e 74 72 6f 6c 73 5b 74 68 69 73 2e 66 69 65 6c 64 2e 6b 65 79 5d 2e 73 65 74 56 61 6c 75 65 28 22 74 72 75 65 22 29 29 3a 22 41 6e 6e 75 61 6c 20 52 65 70 6f 72 74 22 3d 3d 3d 74 68 69 73 2e 66 6f 72 6d 2e 63 6f 6e 74 72 6f 6c 73 5b 61 2e 6b 65 79 5d 2e 76 61 6c 75 65 3f 28 74 68 69 73 2e 66 69 65 6c 64 2e 69 73 44 69 73 61 62 6c 65 64 3d 21 30 2c 74 68 69 73 2e 66 6f 72 6d 2e 63 6f 6e 74 72 6f 6c 73 5b 74 68 69 73 2e 66 69 65 6c 64 2e 6b 65 79 5d 2e 73 65 74 56 61 6c 75 65 28 22 66 61 6c 73 65 22 29 29 3a 74 68 69 73 2e 66 69 65 6c 64 2e 69 73 44 69 73 61 62 6c 65 64 3d 21 31 2c 74 68 Data Ascii: trols[a.key].value?(this.field.isDisabled=!0,this.form.controls[this.field.key].setValue("true")):"Annual Report"===this.form.controls[a.key].value?(this.field.isDisabled=!0,this.form.controls[this.field.key].setValue("false")):this.field.isDisabled=!1,th
2025-04-10 12:57:18 UTC	16384	IN	Data Raw: 6d 69 74 74 65 64 22 2c 6d 61 73 6b 3a 7b 6d 61 73 6b 3a 22 63 75 72 72 65 6e 63 79 22 7d 2c 76 61 6c 69 64 61 74 69 6f 6e 3a 7b 72 65 71 75 69 72 65 64 3a 21 30 7d 2c 6f 6e 43 68 61 6e 67 65 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 22 69 73 4e 65 67 61 74 69 76 65 22 3d 3d 3d 69 2e 6b 65 79 26 26 28 22 74 72 75 65 22 3d 3d 3d 74 68 69 73 2e 66 6f 72 6d 2e 63 6f 6e 74 72 6f 6c 73 5b 69 2e 6b 65 79 5d 2e 76 61 6c 75 65 3f 28 74 68 69 73 2e 66 6f 72 6d 2e 63 6f 6e 74 72 6f 6c 73 5b 74 68 69 73 2e 66 69 65 6c 64 2e 6b 65 79 5d 2e 73 65 74 56 61 6c 75 65 28 76 6f 69 64 20 30 29 2c 74 68 69 73 2e 66 69 65 6c 64 2e 69 73 44 69 73 61 62 6c 65 64 3d 21 30 29 3a 74 68 69 73 2e 66 69 65 6c 64 2e 69 73 44 69 73 61 62 6c 65 64 3d 21 31 2c 74 68 69 73 Data Ascii: mitted",mask:{mask:"currency"},validation:{required:!0},onChange:function(i){return"isNegative"===i.key&&("true"===this.form.controls[i.key].value?(this.form.controls[this.field.key].setValue(void 0),this.field.isDisabled=!0):this.field.isDisabled=!1,this
2025-04-10 12:57:18 UTC	16384	IN	Data Raw: 2c 75 3d 65 28 34 31 38 35 39 29 2c 63 3d 65 28 37 37 30 32 30 29 2c 6e 3d 65 28 38 39 39 32 35 29 2c 5f 3d 65 28 39 31 39 31 32 29 2c 6d 3d 65 28 33 35 34 34 33 29 3b 63 6f 6e 73 74 20 64 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 61 3d 6e 65 77 20 72 2e 7a 28 7b 6e 61 6d 65 3a 22 68 6f 6c 64 65 72 66 6f 72 6d 22 2c 66 69 65 6c 64 53 65 74 73 3a 5b 6e 65 77 20 6f 2e 43 28 7b 6e 61 6d 65 3a 22 70 72 69 6d 61 72 79 22 2c 68 61 73 4d 65 73 73 61 67 65 3a 21 30 2c 66 69 65 6c 64 73 3a 5b 6e 65 77 20 6d 2e 5f 28 7b 6b 65 79 3a 22 68 6f 6c 64 65 72 54 79 70 65 22 2c 69 73 41 63 74 69 76 65 3a 21 31 7d 29 2c 6e 65 77 20 74 2e 6a 69 28 7b 6b 65 79 3a 22 6c 69 66 65 49 6e 73 75 72 61 6e 63 65 43 6f 6e 66 69 72 6d 61 74 69 6f 6e Data Ascii: ,u=e(41859),c=e(77020),n=e(89925),_=e(91912),m=e(35443);const d=(new Date).getFullYear(),a=new r.z({name:"holderform",fieldSets:[new o.C({name:"primary",hasMessage:!0,fields:[new m._({key:"holderType",isActive:!1}),new t.ji({key:"lifeInsuranceConfirmation
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: 74 61 6e 63 65 49 6e 66 6f 54 78 22 2c 66 69 65 6c 64 73 3a 5b 6e 65 77 20 73 2e 6e 76 28 7b 6b 65 79 3a 22 72 65 63 65 69 70 74 65 64 41 6d 6f 75 6e 74 22 2c 6f 72 64 65 72 3a 31 2c 68 61 73 54 6f 6f 6c 74 69 70 3a 21 30 2c 6d 61 73 6b 3a 7b 6d 61 73 6b 3a 22 63 75 72 72 65 6e 63 79 22 7d 2c 76 61 6c 69 64 61 74 69 6f 6e 3a 7b 72 65 71 75 69 72 65 64 3a 21 30 7d 2c 6f 6e 43 68 61 6e 67 65 3a 66 75 6e 63 74 69 6f 6e 28 76 29 7b 72 65 74 75 72 6e 22 69 73 4e 65 67 61 74 69 76 65 22 3d 3d 3d 76 2e 6b 65 79 26 26 28 22 74 72 75 65 22 3d 3d 3d 74 68 69 73 2e 66 6f 72 6d 2e 63 6f 6e 74 72 6f 6c 73 5b 76 2e 6b 65 79 5d 2e 76 61 6c 75 65 3f 28 74 68 69 73 2e 66 69 65 6c 64 2e 76 61 6c 69 64 61 74 69 6f 6e 2e 72 65 71 75 69 72 65 64 3d 21 31 2c 74 68 69 73 2e 66 Data Ascii: tanceInfoTx",fields:[new s.nv({key:"receiptedAmount",order:1,hasTooltip:!0,mask:{mask:"currency"},validation:{required:!0},onChange:function(v){return"isNegative"===v.key&&("true"===this.form.controls[v.key].value?(this.field.validation.required=!1,this.f
2025-04-10 12:57:19 UTC	15202	IN	Data Raw: 21 31 3a 28 74 68 69 73 2e 66 6f 72 6d 2e 63 6f 6e 74 72 6f 6c 73 5b 74 68 69 73 2e 66 69 65 6c 64 2e 6b 65 79 5d 2e 73 65 74 56 61 6c 75 65 28 76 6f 69 64 20 30 29 2c 74 68 69 73 2e 66 69 65 6c 64 2e 69 73 44 69 73 61 62 6c 65 64 3d 21 30 29 2c 74 68 69 73 2e 66 69 65 6c 64 29 7d 7d 29 2c 6e 65 77 20 44 2e 5f 28 7b 6b 65 79 3a 22 72 65 70 6f 72 74 54 79 70 65 22 2c 6f 72 64 65 72 3a 33 2c 64 65 66 61 75 6c 74 53 65 6c 65 63 74 65 64 3a 22 41 6e 6e 75 61 6c 20 52 65 70 6f 72 74 22 2c 61 73 4f 62 6a 65 63 74 53 65 6c 65 63 74 3a 21 30 2c 76 61 6c 69 64 61 74 69 6f 6e 3a 7b 72 65 71 75 69 72 65 64 3a 21 30 7d 2c 67 65 74 53 65 6c 65 63 74 4f 70 74 69 6f 6e 73 3a 70 3d 3e 70 2e 68 6f 6c 64 65 72 2e 69 6e 66 6f 2e 72 65 70 6f 72 74 54 79 70 65 53 65 6c 65 63 Data Ascii: !1:(this.form.controls[this.field.key].setValue(void 0),this.field.isDisabled=!0),this.field)}}),new D._({key:"reportType",order:3,defaultSelected:"Annual Report",asObjectSelect:!0,validation:{required:!0},getSelectOptions:p=>p.holder.info.reportTypeSelec

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:18 UTC	781	OUT	GET /133.cbd43d3bf11f03e1.js HTTP/1.1 Host: colorado.findyourunclaimedproperty.com Connection: keep-alive Origin: https://colorado.findyourunclaimedproperty.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://colorado.findyourunclaimedproperty.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1286796610.1744289835; _gat=1; _ga=GA1.1.1786083533.1744289835; _ga_LCNWMJ8RYG=GS1.1.1744289835.1.0.1744289835.0.0.0
2025-04-10 12:57:18 UTC	857	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 51422 Connection: close Last-Modified: Wed, 02 Apr 2025 17:22:06 GMT X-Amz-Version-Id: atlahy1cjiLSltS4I_E2OdmLlvLiE0nL Server: AmazonS3 Date: Wed, 09 Apr 2025 13:16:12 GMT Etag: "5eb2d50d2c44adb694137aaa8c967e80" Vary: Accept-Encoding Via: 1.1 9ad14e3f9b528d4215643d5af359b816.cloudfront.net (CloudFront) Age: 85267 Cache-Control: max-age=31536000, public Content-Security-Policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: NOSNIFF X-Frame-Options: DENY X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: rQUtdXBBE9qQoeUvJ_pOFXi6thpWWMnVcm4VTasxeJfi6l2gQOBMpg==
2025-04-10 12:57:18 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 45 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3c 22 75 22 3f 77 69 6e 64 6f 77 3a 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3c 22 75 22 3f 67 6c 6f 62 61 6c 3a 74 79 70 65 6f 66 20 73 65 6c 66 3c 22 75 22 3f 73 65 6c 66 3a 7b 7d 2c 43 3d 28 6e 65 77 20 45 2e 45 72 72 6f 72 29 2e 73 74 61 63 6b 3b 43 26 26 28 45 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 3d 45 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 7c 7c 7b 7d 2c 45 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 73 5b 43 5d 3d 22 31 35 38 35 30 37 37 32 2d 34 38 66 63 2d 34 30 37 63 2d 39 39 62 30 2d 36 31 62 39 35 65 34 39 33 61 61 36 22 2c 45 2e 5f 73 65 6e 74 72 79 44 65 62 75 67 49 64 49 64 65 6e 74 69 66 69 65 72 3d 22 73 65 6e 74 72 Data Ascii: !function(){try{var E=typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{},C=(new E.Error).stack;C&&(E._sentryDebugIds=E._sentryDebugIds\|\|{},E._sentryDebugIds[C]="15850772-48fc-407c-99b0-61b95e493aa6",E._sentryDebugIdIdentifier="sentr
2025-04-10 12:57:18 UTC	16384	IN	Data Raw: 6c 61 74 65 22 29 2c 65 2e 71 5a 41 28 29 28 29 2c 65 2e 5f 55 5a 28 32 38 2c 22 70 22 2c 31 34 29 2c 65 2e 41 4c 6f 28 32 39 2c 22 74 72 61 6e 73 6c 61 74 65 22 29 2c 65 2e 71 5a 41 28 29 28 29 2c 65 2e 5f 55 5a 28 33 30 2c 22 62 72 22 29 2c 65 2e 54 67 5a 28 33 31 2c 22 66 6f 72 6d 22 2c 31 36 29 28 33 32 2c 22 64 69 76 22 2c 31 37 29 28 33 33 2c 22 64 69 76 22 2c 31 38 29 28 33 34 2c 22 6c 61 62 65 6c 22 2c 31 39 29 2c 65 2e 5f 55 5a 28 33 35 2c 22 73 70 61 6e 22 2c 31 34 29 2c 65 2e 41 4c 6f 28 33 36 2c 22 74 72 61 6e 73 6c 61 74 65 22 29 2c 65 2e 71 5a 41 28 29 28 29 2c 65 2e 54 67 5a 28 33 37 2c 22 64 69 76 22 2c 32 30 29 2c 65 2e 5f 55 5a 28 33 38 2c 22 73 77 73 2d 75 70 6c 6f 61 64 2d 64 6f 63 22 2c 32 31 29 2c 65 2e 71 5a 41 28 29 2c 65 2e 54 67 Data Ascii: late"),e.qZA()(),e._UZ(28,"p",14),e.ALo(29,"translate"),e.qZA()(),e._UZ(30,"br"),e.TgZ(31,"form",16)(32,"div",17)(33,"div",18)(34,"label",19),e._UZ(35,"span",14),e.ALo(36,"translate"),e.qZA()(),e.TgZ(37,"div",20),e._UZ(38,"sws-upload-doc",21),e.qZA(),e.Tg
2025-04-10 12:57:18 UTC	16384	IN	Data Raw: 2c 22 73 77 73 2d 64 79 6e 61 6d 69 63 2d 66 6f 72 6d 22 2c 32 31 29 2c 65 2e 71 5a 41 28 29 28 29 29 2c 32 26 6e 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 6f 78 77 28 29 3b 65 2e 78 70 36 28 32 29 2c 65 2e 51 36 4a 28 22 66 6f 72 6d 43 6f 6e 66 69 67 22 2c 74 2e 66 6f 72 6d 43 6f 6e 66 69 67 29 28 22 73 74 61 74 69 63 22 2c 21 30 29 28 22 6d 6f 64 65 6c 22 2c 74 2e 64 61 74 61 29 7d 7d 63 6f 6e 73 74 20 50 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 76 69 73 69 62 69 6c 69 74 79 3a 22 68 69 64 64 65 6e 22 7d 7d 2c 51 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 7b 74 61 78 49 64 3a 6e 7d 7d 3b 6c 65 74 20 4e 65 3d 28 28 29 3d 3e 7b 63 6c 61 73 73 20 6e 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 2c 6f 2c 72 2c 73 29 7b 74 68 69 73 Data Ascii: ,"sws-dynamic-form",21),e.qZA()()),2&n){const t=e.oxw();e.xp6(2),e.Q6J("formConfig",t.formConfig)("static",!0)("model",t.data)}}const Pe=function(){return{visibility:"hidden"}},Qe=function(n){return{taxId:n}};let Ne=(()=>{class n{constructor(t,o,r,s){this
2025-04-10 12:57:18 UTC	2270	IN	Data Raw: 65 42 74 6e 29 28 22 77 61 72 6e 4f 6e 45 78 69 74 22 2c 21 30 29 28 22 70 72 6f 63 65 73 73 22 2c 22 68 6f 6c 64 65 72 22 29 2c 65 2e 78 70 36 28 31 29 2c 65 2e 51 36 4a 28 22 74 72 61 6e 73 6c 61 74 65 22 2c 22 46 49 4e 44 45 52 2e 50 52 4f 43 45 53 53 5f 54 49 54 4c 45 22 29 2c 65 2e 78 70 36 28 32 29 2c 65 2e 51 36 4a 28 22 64 6f 63 55 70 6c 6f 61 64 54 79 70 65 22 2c 22 66 69 6e 64 65 72 22 29 29 7d 2c 64 65 70 65 6e 64 65 6e 63 69 65 73 3a 5b 63 2e 50 69 2c 6c 2e 44 2c 41 2e 79 5d 7d 29 7d 72 65 74 75 72 6e 20 6e 7d 29 28 29 7d 2c 7b 70 61 74 68 3a 22 74 61 78 2d 64 6f 63 2d 65 72 72 6f 72 22 2c 63 6f 6d 70 6f 6e 65 6e 74 3a 28 28 29 3d 3e 7b 63 6c 61 73 73 20 6e 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 29 7b 74 68 69 73 2e 73 68 6f 77 48 6f 6d 65 Data Ascii: eBtn)("warnOnExit",!0)("process","holder"),e.xp6(1),e.Q6J("translate","FINDER.PROCESS_TITLE"),e.xp6(2),e.Q6J("docUploadType","finder"))},dependencies:[c.Pi,l.D,A.y]})}return n})()},{path:"tax-doc-error",component:(()=>{class n{constructor(t){this.showHome

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:18 UTC	809	OUT	GET /images/banner.jpg HTTP/1.1 Host: colorado.findyourunclaimedproperty.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://colorado.findyourunclaimedproperty.com/styles.cb38ba2e5e010baf.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1286796610.1744289835; _gat=1; _ga=GA1.1.1786083533.1744289835; _ga_LCNWMJ8RYG=GS1.1.1744289835.1.0.1744289835.0.0.0
2025-04-10 12:57:18 UTC	852	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 778726 Connection: close Last-Modified: Wed, 02 Apr 2025 17:22:12 GMT X-Amz-Version-Id: lWg6crd4Km3.jpzJImrIb_RqtS0_LNez Server: AmazonS3 Date: Wed, 09 Apr 2025 13:16:35 GMT Etag: "3e1332a4404934ce4b2068425de51432" Vary: Accept-Encoding Via: 1.1 cea4663e4864185add284e6e883e90f2.cloudfront.net (CloudFront) Age: 85389 Cache-Control: max-age=86400, must-revalidate Content-Security-Policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: NOSNIFF X-Frame-Options: DENY X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: D9tIdsceoPsRi815CUToMy5Rs0xXKV31YDnIeXpE43v-zUO7Vnrm6Q==
2025-04-10 12:57:18 UTC	15532	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff ed 00 2c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 90 00 00 00 01 00 01 00 90 00 00 00 01 00 01 ff e2 0f f0 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0f e0 61 70 70 6c 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e4 00 06 00 0a 00 09 00 1c 00 0f 61 63 73 70 41 50 50 4c 00 00 00 00 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 61 70 70 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 12 64 65 73 63 00 00 01 5c 00 00 00 62 64 73 63 6d 00 00 01 c0 00 00 04 82 63 70 72 74 00 00 06 44 00 00 00 23 77 74 70 Data Ascii: JFIF,Photoshop 3.08BIMICC_PROFILEapplmntrRGB XYZ acspAPPLAPPL-appldesc\bdscmcprtD#wtp
2025-04-10 12:57:18 UTC	16384	IN	Data Raw: 4b 73 70 78 56 54 75 4c 69 33 74 72 65 57 35 75 5a 55 67 74 34 45 61 53 61 61 52 67 69 49 69 44 6b 7a 4d 7a 55 43 71 6f 46 53 54 69 71 52 57 76 6e 2f 79 6e 64 61 74 4c 70 55 4e 36 78 76 49 26 23 78 41 3b 5a 31 74 4a 43 30 46 77 6b 50 72 75 48 4b 52 72 63 50 47 73 4c 4d 33 70 73 46 34 76 75 64 68 76 6b 42 6b 6a 33 74 30 74 50 6b 69 4c 4d 54 58 50 6b 79 48 4a 74 4c 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 26 23 78 41 3b 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 72 73 56 64 69 71 32 55 30 51 37 30 78 56 52 35 6a 66 34 2f 77 44 50 37 38 56 61 72 32 39 51 2f 54 37 2f 41 45 34 71 26 23 78 41 3b 38 39 2f 50 4f 37 31 69 44 79 58 45 32 6d 6b 73 6a 58 30 43 33 6a 63 56 50 Data Ascii: KspxVTuLi3treW5uZUgt4EaSaaRgiIiDkzMzUCqoFSTiqRWvn/yndatLpUN6xvI Z1tJC0FwkPruHKRrcPGsLM3psF4vudhvkBkj3t0tPkiLMTXPkyHJtLsVdirsVdirsVdirsVdirsV dirsVdirsVdirsVdirsVdirsVdirsVdirsVdirsVdiq2U0Q70xVR5jf4/wDP78Var29Q/T7/AE4q 89/PO71iDyXE2mksjX0C3jcVP
2025-04-10 12:57:18 UTC	16384	IN	Data Raw: 5c 52 53 28 27 61 3b ef 33 d3 7f c0 0c 00 10 aa 85 2f 50 52 90 a5 81 b9 26 44 01 3d 8f e1 f9 60 18 25 4b 81 ce 9e 59 06 37 d3 b8 90 66 7d f1 13 25 54 65 bc 55 69 64 a5 0a 5e c9 99 26 47 5d f7 fe 58 a1 75 20 39 a1 ed 49 20 9f 27 98 80 0c 00 3f 9e 15 2c 35 4a c7 35 3c a4 a5 cf 36 ca 32 7b 7a 83 b6 12 f2 3d 4a c3 36 39 cc d6 42 f6 2a dc c8 93 d7 e5 8c cf 23 95 44 76 36 d2 e5 42 08 4a ba 80 07 53 e9 d3 0b 24 b7 f8 5f 6f fb 64 29 45 20 a6 0f 94 77 f6 38 64 11 78 34 67 0e ed 7f dd 8d 1a 94 62 08 dc 81 d0 74 11 fb f0 e5 17 2c 5e 39 1e cf ce 4a 15 09 9d 3e 63 20 74 13 b8 d8 e2 f8 89 62 ce cb 76 92 96 4a 40 01 7a 67 72 62 3a 01 e9 b6 2e 52 64 7c a7 b5 a7 93 10 93 03 70 36 24 93 d8 7f 01 80 5b 06 aa 80 29 24 18 03 69 02 4c 41 f5 c0 46 41 81 94 b6 da 35 b4 a4 99 f9 Data Ascii: \RS('a;3/PR&D=`%KY7f}%TeUid^&G]Xu 9I '?,5J5<62{z=J69B*#Dv6BJS$_od)E w8dx4gbt,^9J>c tbvJ@zgrb:.Rd\|p6$[)$iLAFA5
2025-04-10 12:57:18 UTC	16384	IN	Data Raw: 00 1b e3 3b 8c 52 af cd 89 09 d5 12 01 31 31 d6 46 c3 f2 c6 77 1e 23 cb 69 4b 8e 24 46 9d ce e7 a9 df d3 0b 22 d0 5d bc 25 6f 43 c8 33 cc 92 01 10 3b 7b 01 86 a9 58 ea 69 6e 1c a8 36 c3 4a 3a d5 a9 3d bd cc 6d f2 db b6 1d 1d 04 cc 97 9e 4d 51 53 63 4a 52 99 8d 24 12 09 82 36 f7 c3 44 cf 52 c3 b3 79 52 88 0a 5e fb c9 03 df a6 fd 01 c0 28 77 50 0f 4a a5 4a 00 91 3b 4f e0 41 eb b4 e0 00 87 21 4a 30 14 83 d8 75 9c 00 0d b5 07 93 a5 23 7d e7 69 24 8f e1 f9 62 ca 01 c9 71 29 58 51 3d 49 90 36 e9 33 1b e2 a0 2a 67 ef 02 12 a2 35 49 ef bc f4 1d 8e 00 3a ca 92 da b5 69 53 9a 54 01 06 7f 18 8f 94 61 80 75 c5 12 a0 93 a8 a8 42 41 3d 60 fb 7e 58 58 03 6f 4a 94 49 4a a0 02 62 4f 51 b1 1b ee 70 00 25 7d ed d4 5b 2a ea 7b 6e 63 de 3d 70 01 c4 b8 14 e6 ea 25 3d ce c0 89 Data Ascii: ;R11Fw#iK$F"]%oC3;{Xin6J:=mMQScJR$6DRyR^(wPJJ;OA!J0u#}i$bq)XQ=I63g5I:iSTauBA=`~XXoJIJbOQp%}[{nc=p%=
2025-04-10 12:57:18 UTC	16384	IN	Data Raw: 47 b0 f6 c5 25 85 31 5d 66 4c c0 54 92 3f 4f fe 9e d8 53 19 d8 8b 57 57 17 5b dc 6f fd 7b 62 21 44 4b 08 1c 3a 96 15 86 44 12 19 4e d9 55 40 31 b7 fa 62 e0 48 b2 ad 95 6f 28 14 8d bf eb ef 80 61 64 65 bc be 52 f0 2b 4f ef f9 fa 1c 05 54 b3 b2 ad 85 2e 14 a0 6f 13 fc fd f0 b5 53 5e 66 50 12 a4 c9 22 46 c4 61 67 38 e1 8d e3 69 dc 9f f3 c0 00 54 ad 3b 03 d0 6e 3a 4f 7e f8 00 f2 54 52 ae a9 f7 32 7a e0 00 5a 82 ba e9 83 23 f3 c0 07 94 e7 94 15 08 dc ed db f9 e0 03 a9 50 d5 23 73 d7 00 03 65 3a 92 64 41 03 60 3e 58 00 3d a5 15 6d 04 93 d7 fc f0 b0 0e 4f 95 20 0f 31 ec 47 53 eb 80 03 1b 4c 4c 8d 5d c9 e9 eb eb 18 00 50 db 23 50 fb a0 f6 3d f0 00 6a 69 c6 df 78 00 23 db 0b 00 c4 b6 14 9d ba 9d e3 d8 e0 00 f6 d9 e5 ed a6 40 e9 e9 03 a1 c0 55 81 b6 91 b1 f2 9f 51 Data Ascii: G%1]fLT?OSWW[o{b!DK:DNU@1bHo(adeR+OT.oS^fP"Fag8iT;n:O~TR2zZ#P#se:dA`>X=mO 1GSLL]P#P=jix#@UQ
2025-04-10 12:57:18 UTC	16384	IN	Data Raw: ad 25 4b 3b ce 02 b8 94 a7 1c b8 de ac 97 9e a8 99 ba d5 d3 da 6c 02 91 4f 29 c7 18 53 ae dd 1e 2a 20 53 33 06 02 86 ca 33 b9 d4 23 b9 c4 f0 99 94 cb 52 b6 0f 8f 91 17 5f 06 6e 14 59 2d d3 95 28 69 9e a3 ba 2d 75 95 56 2b d8 94 b8 a5 9d 47 4b c0 17 1a 72 4c ee 54 07 68 c5 d1 96 7b 84 b5 1d bf 87 fa 49 64 70 27 24 df f2 9e 44 a5 a0 bd 55 26 ae b0 a9 4e 2d 41 65 6d d3 a4 aa 43 29 52 bc cb 4a 04 24 29 46 4e 2a d0 b9 6d 34 d1 47 85 dc 4c ae 35 54 56 9a 37 9e aa 52 52 db 23 52 d7 30 90 23 72 4f a0 c5 77 0f e8 56 59 d3 3c 33 9b b3 08 b3 d3 34 dd 53 c5 f0 d2 d8 aa 2a 08 69 41 3c d6 5f 05 1e 62 83 a7 ac f5 c4 59 a0 4b ba cb 62 a3 65 be 9d 9a 5c ce f5 ba b6 e8 c5 e3 32 54 a9 2b a4 0e 30 aa 96 ed e0 20 c9 00 80 12 82 7a 15 49 1e a7 17 ff 00 ea 2d bb b7 75 22 1e 25 Data Ascii: %K;lO)S* S33#R_nY-(i-uV+GKrLTh{Idp'$DU&N-AemC)RJ$)FNm4GL5TV7RR#R0#rOwVY<34SiA<_bYKbe\2T+0 zI-u"%
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: c7 f8 7d b1 99 83 89 72 a6 bf 5c 95 a8 a0 99 f7 fc bd b1 52 ea 37 d3 a7 9e 9e 92 55 fa 5e 91 ed 86 13 32 39 b6 d8 53 6c af 95 a6 35 4a b5 cc e2 2d 06 66 6b 8e 0c d3 93 d5 7a bd a2 31 6c 45 e2 19 4c c8 65 ed 0b 3a 53 eb d7 13 89 60 1a 52 db 68 d0 ae b3 b4 62 b8 05 89 6e 53 b7 a9 ba c4 a5 b3 a6 67 7e bd 01 ec 4e 2a cb 61 ca 85 b5 95 68 f9 ce 25 31 be f3 fb f1 53 44 53 2c cc b5 4e e2 1a 25 3e 5d 3d 06 c6 66 70 0d b4 13 dc bf 6f 2e 37 a8 1f 37 64 fe 7d e7 16 47 1d 3d a7 cc 45 2b cd 23 d0 e3 29 c6 3d a7 d0 6f 3b 8c 00 0b 7d 20 44 4f a7 69 c0 07 54 90 a8 9f ba 7b ef 3f 86 00 3a 9d d1 11 1e f8 00 f2 92 0a 76 10 7a 09 98 c0 01 4a 91 27 d7 79 9f 9e 00 03 a4 a9 27 cd 03 ac fc e7 00 03 4a 8c c7 7e a6 30 00 24 ab cb 1d 3d 30 00 34 b9 a5 21 53 bf 5c 00 09 4f 15 28 fe Data Ascii: }r\R7U^29Sl5J-fkz1lELe:S`RhbnSg~N*ah%1SDS,N%>]=fpo.77d}G=E+#)=o;} DOiT{?:vzJ'y'J~0$=04!S\O(
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: 3d 56 54 3d 78 b5 55 a2 85 49 2a 61 da 96 d4 da 9d 4e f0 00 20 79 49 24 ef 8a ea 1d 53 b6 4b 22 34 ed 20 3e 2c 92 aa 56 eb 68 69 9c 43 89 b6 80 87 4d 30 4f d8 0d 8a 52 40 dc 9d 88 04 8c 4d 16 da 36 92 2e 66 78 bc 67 0a 6b 7d 0b 42 96 e4 e8 a8 42 65 c6 d4 c7 9b 6f 61 d3 0c bd f6 9b 16 8b 65 b9 48 ed 65 75 6d fa 9d 86 16 a5 7c 22 02 9c 74 8d 96 55 10 24 7c b0 60 d2 32 31 86 c8 d3 fe 0c 6e 97 2b 4d a6 b2 8d bb 62 29 9b 71 86 df 45 52 91 25 c8 24 0f 4e 86 63 fc 38 4d 74 31 6a 27 71 72 64 93 5b 67 f1 00 e5 43 17 14 22 95 f7 53 50 d5 2a 0b a4 45 63 21 7b 08 d0 90 2a 90 d8 3b e3 3d 48 ba 15 a6 db 8d ad c4 0e 2d 58 f8 67 c3 77 33 25 ee b4 52 5b da a7 0f 0d 20 ad 6e 92 89 08 6d 00 15 2d 47 b0 03 18 93 29 da a7 45 e5 71 c9 8f 9c 5c 63 f1 ad 77 f1 69 9d 91 68 62 8a Data Ascii: =VT=xUIaN yI$SK"4 >,VhiCM0OR@M6.fxgk}BBeoaeHeum\|"tU$\|`21n+Mb)qER%$Nc8Mt1j'qrd[gC"SPEc!{*;=H-Xgw3%R[ nm-G)Eq\cwihb
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: 63 8b a4 89 62 67 95 de e6 29 0e 28 7a ff 00 31 8d f4 fb 8c b5 89 dd a5 4d ab 5a 63 ac 49 df df 1b d2 0c 2e 2f 71 c0 e2 50 90 7d 70 f1 09 d4 6f bd 32 52 ca f7 f4 8f cc 61 6e 5d 4a d7 3e 36 5c 64 bc 53 d3 df dd 23 18 eb 0d 8e 85 23 9d ad a9 a8 95 93 f8 7f ca 3d 71 8e 4a 3a 15 75 53 3f 07 25 42 4e 08 9c 8c 52 a4 a7 2a b8 29 52 a6 d2 99 e6 c4 6f e9 27 11 12 35 54 b7 f2 6d d4 b4 da d2 37 26 23 ff 00 15 ed 87 a3 16 62 c7 cb 75 4a 51 5a 88 99 88 fd f8 d6 8c 67 75 26 56 f6 ca 92 d9 2b f5 9d be 78 d3 90 96 51 ee 85 09 d4 de ad ce f3 86 20 b6 8b 8e f4 aa 4c b9 07 d3 1a 15 ac 2c 31 2b 23 44 1f 5c 31 5a c5 71 08 bd 41 64 7f 5d c6 26 7a 15 21 19 aa 9d 0b 72 0e e3 f1 f6 c6 27 02 27 55 69 4a ba 74 4f f3 fc 71 8d c6 24 09 9c b7 86 52 0f eb ff 00 2f c7 15 34 0e f9 7a 94 Data Ascii: cbg)(z1MZcI./qP}po2Ran]J>6\dS##=qJ:uS?%BNR*)Ro'5Tm7&#buJQZgu&V+xQ L,1+#D\1ZqAd]&z!r''UiJtOq$R/4z
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: 53 92 a9 21 52 26 09 1b 88 89 00 ef 80 04 95 da 1e 68 95 b6 95 2c 92 7a 4f 6d fe 78 be 45 71 2b cb d5 ac df ab 3e 19 97 25 0a 9e 82 20 82 04 18 9e a3 1a 13 a9 39 62 25 b3 f0 56 f9 72 bb 29 14 ae f2 d8 70 90 b7 c1 d8 24 c0 27 d6 7d 30 f8 75 81 73 93 16 fe 5f b4 d0 f0 f6 cc cd 12 5c 5b 8b 03 51 25 00 b8 fa 8e c5 44 01 dc 88 c2 9d f3 62 ca ab 05 77 c5 2e 2e 5b ae 55 06 dc b5 dd 2b 35 ac d3 bc cd b1 d0 87 69 12 44 29 7c c2 0a 42 d3 3b 0e b3 d8 75 3a 28 d1 6e e1 35 6a 29 99 f3 a7 07 73 e6 47 bc de 6d f4 d6 9b a7 12 b2 06 63 b7 7d 58 53 6c 28 a6 ae a3 6b 9a 87 90 4b 24 79 5d 6d c6 e7 50 49 42 b7 9e b0 3a 48 eb 3e ac 64 a4 42 fa 7a 85 e6 2f 17 17 ae 13 dd 2d b9 17 26 70 fa f5 9b f3 fd 4a 4a 4d be a8 21 0e 50 42 52 42 9f 66 9c ad 40 91 e6 29 2a 41 8d c8 09 8c 5d Data Ascii: S!R&h,zOmxEq+>% 9b%Vr)p$'}0us_\[Q%Dbw..[U+5iD)\|B;u:(n5j)sGmc}XSl(kK$y]mPIB:H>dBz/-&pJJM!PBRBf@)*A]

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:18 UTC	810	OUT	GET /images/co_logo.png HTTP/1.1 Host: colorado.findyourunclaimedproperty.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://colorado.findyourunclaimedproperty.com/styles.cb38ba2e5e010baf.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1286796610.1744289835; _gat=1; _ga=GA1.1.1786083533.1744289835; _ga_LCNWMJ8RYG=GS1.1.1744289835.1.0.1744289835.0.0.0
2025-04-10 12:57:19 UTC	850	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 18710 Connection: close Last-Modified: Wed, 02 Apr 2025 17:22:13 GMT X-Amz-Version-Id: .TvvGbaUIboPUzPVnGI7OLkwoBwi9HJE Server: AmazonS3 Date: Wed, 09 Apr 2025 13:14:10 GMT Etag: "149c0ddf3f749d973234ed53dbfe4b7c" Vary: Accept-Encoding Via: 1.1 c2439c5d69ec72a2ab666c2eba104244.cloudfront.net (CloudFront) Age: 85389 Cache-Control: max-age=86400, must-revalidate Content-Security-Policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: NOSNIFF X-Frame-Options: DENY X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: I_mkuAmrK9030JJEcvEOh-x7T3yjSTGGNiDcrNZM87SiDgqc7VABIQ==
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 48 00 00 00 a0 08 03 00 00 00 01 c6 bc 9b 00 00 03 00 50 4c 54 45 4c 69 71 f1 f1 f1 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f1 f1 f1 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 7e 7c 7c 69 66 66 c2 c1 c1 23 1f 20 43 3f 40 35 31 32 db da db 25 21 22 ae ad ad 53 50 51 f5 f5 f5 9d 9b 9c 90 8e 8e 2d 29 2a 29 25 26 ee ee ee 35 2d 27 f2 f2 f2 d2 53 58 00 65 95 ff ff ff 23 1f 20 fb d3 27 c9 cd d3 fe fe fe 01 65 94 d0 52 57 27 21 21 57 8d 7f 9e 7b 4e fb fb fb 4c 3e 2e 7d 7d 7e 52 42 31 30 27 24 d4 5b 60 84 87 8b f5 f7 f8 0b 6a 92 d3 56 5b 66 51 39 06 54 7a 9a 42 46 5e 90 7d b1 b1 b2 45 39 2d 2b 24 23 7c 63 40 9f 7d 50 37 2e 27 d6 63 68 85 84 86 75 5d 3e 48 2c 2e 56 Data Ascii: PNGIHDRHPLTELiq~\|\|iff# C?@512%!"SPQ-)*)%&5-'SXe# 'eRW'!!W{NL>.}}~RB10'$[`jV[fQ9TzBF^}E9-+$#\|c@}P7.'chu]>H,.V
2025-04-10 12:57:19 UTC	2326	IN	Data Raw: 94 37 7a b0 c7 1a b5 23 d5 86 9e 5f 6c 4d ad 9d 39 4b cc d3 d8 f2 bf f1 c6 5d 71 63 d7 61 d0 20 cb c0 81 57 17 1b 1a 9f ad de 94 62 5f 6d 32 c8 c7 c4 05 ba 18 bd 3e 37 c3 00 82 ab e9 e8 a9 8b a9 66 9f 0b 99 de 5f 0a 8a 95 22 4c 27 a5 53 48 3a cd f9 f0 8d d3 3c 1e 99 03 c2 50 4a 1a e1 de f0 db cf fe ed 2b e1 fa b5 5f 2c d5 a3 69 eb c5 2f d6 ae e7 7e 75 af 60 d8 ef 89 70 24 b5 e3 00 d9 d2 c7 1c de 9b e7 df 51 97 7b 93 1c 29 b2 4b 04 7c fe 77 5d 36 6c 1c e4 ad 3b 4c be e3 cc 83 a4 33 84 ce 46 e1 20 be 65 7d 6d 04 c9 d5 d9 c8 a0 6b 71 77 73 1f 03 48 3a 6d bb 53 d7 f1 38 1b 54 7f 1b bb 0e c3 06 0d 67 a7 8b b9 d5 ee 2c dd 4a 7a 4f bd 7b 6e ba 53 4f bd eb 63 19 26 58 a9 17 a7 77 5d 46 ef e9 f3 20 4e 93 5b c4 40 24 80 fb dc 51 74 d2 19 1e 87 c7 e1 7c a8 b5 f5 0e Data Ascii: 7z#_lM9K]qca Wb_m2>7f_"L'SH:<PJ+_,i/~u`p$Q{)K\|w]6l;L3F e}mkqwsH:mS8Tg,JzO{nSOc&Xw]F N[@$Qt\|

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:18 UTC	795	OUT	GET /images/home_notification_1.png HTTP/1.1 Host: colorado.findyourunclaimedproperty.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://colorado.findyourunclaimedproperty.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1286796610.1744289835; _gat=1; _ga=GA1.1.1786083533.1744289835; _ga_LCNWMJ8RYG=GS1.1.1744289835.1.0.1744289835.0.0.0
2025-04-10 12:57:19 UTC	851	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 205725 Connection: close Last-Modified: Wed, 02 Apr 2025 17:22:12 GMT X-Amz-Version-Id: BQFWh4sqztW7IGPOHPXqCwwLKkQlxQMK Server: AmazonS3 Date: Wed, 09 Apr 2025 13:12:32 GMT Etag: "513bcfca25cde58baaed36c112910741" Vary: Accept-Encoding Via: 1.1 368bc8b1f5073a6f7cdb40029e9a5a88.cloudfront.net (CloudFront) Age: 85487 Cache-Control: max-age=86400, must-revalidate Content-Security-Policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: NOSNIFF X-Frame-Options: DENY X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: 8mKEO3k3P-LS9bOUt8n8oQ45QPi4xVU6cx8_VOYc12udY9T9waRlRQ==
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 95 00 00 03 71 08 06 00 00 00 b5 f3 42 87 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ff a5 49 44 41 54 78 5e ec 9d 07 7c 53 d5 fb c6 9f a4 0b 0a 85 16 68 29 94 55 f6 5e b2 87 28 cb 81 82 08 8a 0a c8 56 94 2d 8a 28 4b 96 8a 28 88 6c 28 7b 83 ec 3d 04 ca a6 cc 96 bd a1 50 ca 2e d0 dd 26 39 ff fb dc 24 5d b4 05 04 ff 3f d0 f7 eb a7 92 dc 71 ee b9 23 39 4f de 75 0c 4a 03 82 20 08 82 20 08 82 f0 0c 18 6d ff 0a 82 20 08 82 20 08 c2 df 46 44 a5 20 08 82 20 08 82 f0 cc 88 a8 14 04 41 10 04 41 10 9e 19 11 95 82 20 08 82 20 08 c2 33 23 a2 52 10 04 41 10 04 41 78 66 44 54 0a 82 20 08 82 20 08 cf 8c Data Ascii: PNGIHDRqBsRGBgAMAapHYsodIDATx^\|Sh)U^(V-(K(l({=P.&9$]?q#9OuJ m FD AA 3#RAAxfDT
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: 68 47 4f 64 75 76 45 9e fc d9 d3 b0 4e 47 e0 fc 8e 95 98 3b 75 1a 56 1c a3 35 4f 21 ec da 25 5c 3d b7 0b 8b ff f8 1d 4b ef 96 41 ab fe 93 30 73 c4 07 b0 de c2 94 e7 ce 47 2f 06 6e 5e 5a bf 0a 14 40 f6 64 07 31 20 6b a1 4c 38 bd 26 16 2d 46 77 46 f9 47 c2 4e d2 6b 2b 1f 4c fb 56 e0 68 66 2f dc 5c 31 13 1b ce dc c1 83 3b e7 e1 3f 75 20 a6 5c 7d 03 a3 e6 0c 41 3d 8f 50 04 ac 5a 8c 69 d3 e6 63 bf f5 43 80 87 31 6e f0 f2 ca 81 d2 05 b2 6b ef 9d b5 cf 70 33 bc 5b 52 e1 d2 e6 e9 98 b8 2e 14 06 4d 60 5e d8 35 0f 03 7b fc 8e b3 c5 da e1 d7 f9 d3 d1 bb 9a 7e f7 11 79 7e 1b 16 8e ff 05 63 fc 36 e2 78 7c 56 e4 cc 55 10 85 12 bf 10 e0 a4 3d 4b 75 73 9f c4 e6 eb 15 d0 b6 51 e1 24 f1 bb 82 f0 ef 45 e6 fe 16 04 1d 33 1e 5c 0e 42 e0 99 50 44 3a ba 23 6f c9 f2 28 9d eb c9 Data Ascii: hGOduvENG;uV5O!%\=KA0sG/n^Z@d1 kL8&-FwFGNk+LVhf/\1;?u \}A=PZicC1nkp3[R.M`^5{~y~c6x\|VU=KusQ$E3\BPD:#o(
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: ac 4d c9 24 1a ba e4 59 34 9d 2e 75 66 70 f3 35 33 ce b9 8e b1 99 2c dc ce 6c 75 be 66 c6 39 dd ef 63 c6 8c d1 cb 24 d1 1d 4e d7 38 6b 53 72 19 cf 49 10 04 e1 65 42 44 a5 20 08 2f 2d 14 8b 14 93 14 7e 9c ce 90 16 4a 0a 3d d6 7d 64 ad 47 66 4e 53 c8 d1 3d 9d 12 26 d8 30 d9 86 2e 73 5a 38 db b6 6d ab 8b 52 66 94 33 53 fc e3 8f 3f d6 e3 2c 99 d1 9d 14 0a 50 ba af 39 f7 36 05 23 e3 39 39 bf f7 dd bb 77 f5 3f 96 1c e2 1c e0 4c ee e1 6b 96 36 62 91 0d 26 0f d9 67 d3 61 7f 98 e9 cd b9 ca b9 0f 8f c3 92 46 ad 5b b7 46 a3 46 8d 24 29 47 10 84 97 12 49 d4 11 04 e1 5f 01 bf ca 38 eb 0c 63 23 59 54 9c 42 93 2e 71 5a 16 e9 12 a7 80 a4 f8 b3 5b 2d 39 af 37 5d d1 14 a5 8c 75 64 26 36 e3 2f 39 35 23 45 1e 5d e6 8c b9 4c 59 c6 87 d9 e5 2c 07 c4 1a 92 f6 c2 eb 2c 6e 4e 31 Data Ascii: M$Y4.ufp53,luf9c$N8kSrIeBD /-~J=}dGfNS=&0.sZ8mRf3S?,P96#99w?Lk6b&gaF[FF$)GI_8c#YTB.qZ[-97]ud&6/95#E]LY,,nN1
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: 83 c1 60 30 18 0c 46 a9 61 41 25 83 c1 60 30 18 0c 06 a3 d4 b0 a0 92 c1 60 30 18 0c 06 83 51 6a 58 50 c9 60 30 18 0c 06 83 c1 28 35 2c a8 64 30 18 0c 06 83 c1 60 94 1a 16 54 32 18 0c 06 83 c1 60 30 4a 0d 0b 2a 19 0c 06 83 c1 60 30 18 a5 86 05 95 0c 06 83 c1 60 30 18 8c 52 c3 82 4a 06 83 c1 60 30 18 0c 46 a9 61 41 25 83 c1 60 30 18 0c 06 a3 d4 b0 a0 92 c1 60 30 18 0c 06 83 51 6a 58 50 c9 60 30 18 0c 06 83 c1 28 35 2c a8 64 30 18 0c 06 83 c1 60 94 1a 16 54 32 18 0c 06 83 c1 60 30 4a 0d 0b 2a 19 0c 06 83 c1 60 30 18 a5 86 05 95 0c 06 83 c1 60 30 18 8c 52 c3 82 4a 06 83 c1 60 30 18 0c 46 a9 61 41 25 83 c1 60 30 18 0c 06 a3 d4 b0 a0 92 c1 60 30 18 0c 06 83 51 6a 58 50 c9 60 30 18 0c 06 83 c1 28 35 2c a8 64 30 18 0c 06 83 c1 60 94 1a 16 54 32 18 0c 06 83 c1 60 Data Ascii: `0FaA%`0`0QjXP`0(5,d0`T2`0J`0`0RJ`0FaA%`0`0QjXP`0(5,d0`T2`0J`0`0RJ`0FaA%`0`0QjXP`0(5,d0`T2`
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: 70 86 37 48 00 00 ff f4 49 44 41 54 98 bb f1 29 24 87 1c bf 4c 4a ec 33 e5 e9 39 ec da e5 0d 9f 2b 01 88 52 31 83 65 0d 3e 77 7b 2c 29 4e 10 8e 79 9d c4 f5 7b 61 78 16 f9 09 ea f5 34 f1 cc cb 03 5b bd 2e 23 be 6a 1b 58 eb be c0 45 cf cd d8 76 34 14 1a b6 f6 30 57 fd 50 30 df 88 6c a4 dc dc 89 ad 87 ce c1 ff a9 10 55 1b d4 46 45 d5 18 f8 6d db 80 cd 17 62 61 d4 b8 01 8c f3 db 4f 66 2c 02 8e 72 d7 67 d9 a2 81 89 2a b7 19 80 a3 bb 6e 41 d0 b0 22 a2 bc 36 c2 f3 c2 1b e8 59 72 ba 29 e8 fc 14 b6 f3 66 3a f7 8b f1 f1 25 69 ab 92 e2 14 9f bf 62 b9 09 f0 31 f8 04 76 de 48 85 b5 d9 27 9c de b2 0d c7 1e 89 61 d1 d8 02 ea af 2f c1 d3 7d 0f ae c6 18 e4 f3 1b 8a ed 5f f8 70 1d c6 ae 55 c7 f8 f5 83 51 37 a7 f3 e0 ec 23 e8 98 17 4e 5e bf 87 b0 67 91 f8 a4 6e 85 5a 95 64 Data Ascii: p7HIDAT)$LJ39+R1e>w{,)Ny{ax4[.#jXEv40WP0lUFEmbaOf,rg*nA"6Yr)f:%ib1vH'a/}_pUQ7#N^gnZd
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: 87 ff 4a 53 3c cd c9 f8 9d 2d aa 4f 6d c9 d3 e9 d8 67 bd 69 d0 92 30 ca 94 66 d2 95 45 bd 49 24 7c 85 66 87 f1 1f 69 92 52 cc 3a 1f 9a b2 36 9c d2 32 e3 e9 c8 8c 0e 24 6a e9 4b c7 ee 45 d0 af 53 3a 92 b9 51 07 7a 7f ce 34 9a bb f0 6b fa e8 55 4b b2 1f 7b 88 94 1f d5 12 5f a6 59 ad cc 69 c8 b6 7c be 81 8a 6d 72 88 2f 7c 4e ae f5 46 d0 2e e5 26 e9 14 fe eb 14 f2 34 37 a6 77 b6 a8 b6 90 c6 6e a0 0f 06 cf a1 53 8f a5 54 18 f9 0d 79 9a 39 d3 94 20 fe 3b 55 f1 b4 f6 4d 07 f2 5a 99 48 d2 bc eb f4 75 27 2b ea e8 1f a5 fc 24 96 f8 f2 2c 6a 65 3e 84 54 cd 56 ac 53 fe 70 07 8d eb e3 4d 5b 62 73 49 9c 16 4a 7e 3d ec c9 e3 d3 63 f4 f8 49 15 e3 29 83 3c bd 8a 6d f3 8f d0 38 3b 5b f2 3e 54 a8 dc 5e 76 7f 09 75 35 eb 46 df df 7b 4a d7 b7 7f 46 5d 45 86 d4 61 fc 62 5a b8 Data Ascii: JS<-Omgi0fEI$\|fiR:62$jKES:Qz4kUK{_Yi\|mr/\|NF.&47wnSTy9 ;UMZHu'+$,je>TVSpM[bsIJ~=cI)<m8;[>T^vu5F{JF]EabZ
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: 94 0b 8f 1a e5 ea 52 dd fd c4 59 a5 ef 7e fd 27 f2 02 73 5c 8d 78 51 f9 ff 49 d4 c5 7c ad 19 8b aa 1b 9b fe ab d4 61 52 29 47 c2 ef 53 f1 ce db 43 f0 ee a8 f7 f1 fe 7b 43 f1 f6 5b 83 31 5c fd 7b d0 5b 43 f0 f5 f1 87 b8 f1 db e7 e8 eb ec 8c b1 fb 4a de da fd e7 23 7f 84 d0 80 71 e8 e0 d8 19 0b c2 6a 10 e1 c5 21 98 d5 d1 09 c3 d7 a5 d4 e9 44 a3 42 81 cc 9b bf e1 f3 be ce 70 1e bf 8f 33 5a cd 32 e3 9f 4d cd f4 29 0e 99 85 8e 4e c3 b1 2e a5 2e 2c 4d 81 b4 e0 1f 31 6f d1 1a 2c f7 7d 0d 8e 6d 27 63 f7 c3 bf cf 44 59 76 ac 8a cc 9b f8 ed f3 be 70 76 1e 8f 7d 95 08 49 fe 28 14 01 e3 3a c0 b1 f3 02 54 74 e1 5a fa 8e 22 0d c1 3f ce c3 a2 35 cb e1 fb 9a 23 da 4e de ad 5e 51 0b 24 71 38 e6 3f 0a 6d 9d 7a 61 e9 4d f5 db ee eb 82 fc bb 38 b8 64 1a 26 4e 9c 8c c9 9f 7c Data Ascii: RY~'s\xQI\|aR)GSC{C[1\{[CJ#qj!DBp3Z2M)N..,M1o,}m'cDYvpv}I(:TtZ"?5#N^Q$q8?mzaM8d&N\|
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: b4 bc 3b b3 a8 51 b1 8e 42 12 e9 41 dd cc 1a d3 ec 3b dc fe ac 9d 2b 7f a2 4d 2c 10 e5 e4 dd a1 59 8d 0c 95 83 ca 5c 3a 37 be 16 d9 0e dc 40 7e 89 6c 7b 66 30 05 86 2b 07 60 c5 cb cc f4 a1 ef 6c ea d1 94 6b 05 f5 e7 d2 f5 69 f5 48 8f c9 e6 2f 66 c9 ea e7 c6 64 f8 f9 56 45 c7 2e 4d a0 4d 9f 19 92 e3 a2 02 e7 2f 8d fa 3a 8b 93 be a7 2f 99 34 fc 89 6e cb e3 3c 97 2e 7e 6f 4d 26 fd f7 c9 07 7c 99 3e df 91 4d bd 29 54 d4 9c eb 34 ad 9e 1e 35 fd c5 9f 72 5f ec a7 19 13 b7 51 30 2b 32 37 66 27 0d a8 56 83 c6 78 2b 92 92 e6 0e 35 8f ee cc 6a 44 86 ca 41 65 ee b9 f1 54 cb 76 20 6d f0 4b 64 36 ca a4 e0 c0 70 15 f2 94 1a b8 68 d4 93 72 55 01 ac 13 9e d3 44 9f 3a ad 8d 92 77 5a f2 c1 c0 b8 c6 d4 79 ca 3a d6 f9 78 90 87 fb 2f 34 b0 69 4d 72 98 76 91 ed 5b 2a b1 e5 5e Data Ascii: ;QBA;+M,Y\:7@~l{f0+`lkiH/fdVE.MM/:/4n<.~oM&\|>M)T45r_Q0+27f'Vx+5jDAeTv mKd6phrUD:wZy:x/4iMrv[*^
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: 10 27 4a 17 00 00 ff f4 49 44 41 54 70 8e ab 23 8b 8e 0d e3 72 a6 0e 7d b6 f9 35 49 33 bc 69 ac 95 2e b5 5e 1a 4a e2 dc 10 5a df e7 5b da ce 12 66 d6 b1 61 72 df d5 f9 6c 33 71 e6 d6 18 5b e5 8d 01 78 fe f5 7c e2 8b d9 ba d0 e1 be 3a 23 ac 81 2f be 9f 00 97 ee 2d 60 cd fc 5b 1c 17 85 57 12 20 cf 77 03 56 5d 4d 83 4d 93 06 a0 ec ca b0 b0 90 21 f2 c8 3e 5c 15 37 c0 e8 a9 fd 60 21 94 e0 e1 91 03 08 91 c8 f0 ea 52 12 5a 4c ec 01 53 e4 c1 77 c3 2a 5c 4d b3 41 93 06 84 ec ca 16 b0 90 45 e2 c8 be ab 80 40 07 3a 3a ac 8b 91 25 23 bb c9 5c 9c ba e3 0f ff db 07 30 b5 51 d1 84 08 87 ec cd 0b bc 48 c9 c1 d3 07 0f f1 56 cb 18 46 06 02 48 df 44 b2 75 65 6f e6 ce bb ce ce 6c 2f a7 c1 ba 89 3d 4c ab f6 c6 a4 19 5f a3 ef 17 4e 30 cf f2 c1 ba f5 77 f1 4e bf 1e 1a d9 8a a0 Data Ascii: 'JIDATp#r}5I3i.^JZ[farl3q[x\|:#/-`[W wV]MM!>\7`!RZLSw*\MAE@::%#\0QHVFHDueol/=L_N0wN
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: 4c 1f 49 5d ea 5b 91 e3 d8 3f e8 69 89 69 ed 02 34 95 25 a1 d0 25 ce a4 63 3e 52 d9 1f 73 a4 90 a7 8b 2e 19 0e f8 b3 8c 7e 72 af 4d a3 b6 63 4e c8 65 aa 90 2e 0a 91 d2 cb 03 63 a8 eb a8 dd 14 96 91 47 89 d7 5d a9 a3 95 03 fd 78 36 91 c4 49 aa c7 17 c5 f9 70 5b 96 da 2e be 4f f3 ec f5 c9 71 94 1b fd b6 62 13 ad fb de 99 cc ac c7 d3 39 f9 2d 2f 15 8d a7 7f 06 9f 76 28 4c 26 68 d8 7b 00 3a 5b 89 20 aa 52 1b 35 75 e3 10 15 23 61 83 70 3f ac 98 7d 16 4d a6 4d 47 eb 4a 22 54 6a 35 19 df b6 2d 38 03 cf 87 df 8a d9 38 db 64 1a a6 b7 ae 04 51 a5 56 98 fc 6d 5b f9 59 b5 d0 dc 19 43 46 76 83 b5 96 11 5a 8d 5d 01 af f3 0f 71 7a ba 0d ce af 71 c7 53 51 0e fc 0e ed c3 99 17 06 b0 a9 95 8d 9b e7 1f 40 12 13 8e 87 d7 8f e1 90 7f 12 0c 9c a6 c1 ed fb c6 10 49 62 10 fe f0 Data Ascii: LI][?ii4%%c>Rs.~rMcNe.cG]x6Ip[.Oqb9-/v(L&h{:[ R5u#ap?}MMGJ"Tj5-88dQVm[YCFvZ]qzqSQ@Ib

Timestamp	Bytes transferred	Direction	Data
2025-04-10 12:57:19 UTC	795	OUT	GET /images/home_notification_2.png HTTP/1.1 Host: colorado.findyourunclaimedproperty.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://colorado.findyourunclaimedproperty.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.2.1286796610.1744289835; _gat=1; _ga=GA1.1.1786083533.1744289835; _ga_LCNWMJ8RYG=GS1.1.1744289835.1.0.1744289835.0.0.0
2025-04-10 12:57:19 UTC	851	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 158474 Connection: close Last-Modified: Wed, 02 Apr 2025 17:22:12 GMT X-Amz-Version-Id: R5KZF2Y8H8OEPO7yw5PRUZaokheChgLE Server: AmazonS3 Date: Wed, 09 Apr 2025 13:12:32 GMT Etag: "e3e796c40a057b52d57c65a649bea802" Vary: Accept-Encoding Via: 1.1 4c1a2d98b0820f90f630f0721b0b6538.cloudfront.net (CloudFront) Age: 85487 Cache-Control: max-age=86400, must-revalidate Content-Security-Policy: default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: NOSNIFF X-Frame-Options: DENY X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P8 X-Amz-Cf-Id: Ogx4tQ92igDLqdMiKxrSsFQud0BSoB5XVbJ22kzqiI3FzpE5m-A0sQ==
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 d2 00 00 02 6c 08 06 00 00 00 11 24 9b 6f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ff a5 49 44 41 54 78 5e ec 9d 09 bc 8c d5 ff c7 bf 33 d7 b5 64 a7 ec 3b d9 45 0b 92 4a 52 42 c9 be af 65 ad 7f 5a 69 11 4a 4a b4 d8 ca 52 f6 2d b2 66 4b 21 12 15 8a 16 4b e4 67 2d 7b 42 b8 2e ee 9d f3 7f de 67 e6 b9 77 ee 98 cb bd 96 92 be ef d7 6b cc f2 3c cf 79 ce 39 33 73 cd e7 f9 7c bf df e3 31 0e a2 28 8a a2 28 8a a2 28 8a a2 28 4a 92 f0 06 ee 15 45 51 14 45 51 14 45 51 14 45 49 02 2a a4 15 45 51 14 45 51 14 45 51 14 25 19 a8 90 56 14 45 51 14 45 51 14 45 51 94 64 a0 42 5a 51 14 45 51 14 45 51 14 45 Data Ascii: PNGIHDRl$osRGBgAMAapHYsodIDATx^3d;EJRBeZiJJR-fK!Kg-{B.gwk<y93s\|1((((JEQEQEQEI*EQEQEQ%VEQEQEQdBZQEQEQE
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: 37 46 b6 25 10 a8 47 65 f1 3b f3 a4 d0 cb cf c9 6d 49 2a 27 10 6e e4 e0 95 5c 0d 9f 93 36 c5 ed a7 45 8e af 7b 57 ba f4 5f 23 a1 1f 97 f8 a3 43 db c9 2a 75 3a 37 95 c2 f6 33 6e e4 ec ba 49 32 fe bb 73 3f 20 27 97 4e 93 4d 55 9e 92 c6 39 ce fd 99 96 68 db 67 37 ca da 9f 4f 8a 71 e6 f5 f3 e1 c3 e5 c7 04 5f 5a 67 8e ea 3d 29 ad 8a f8 92 dc d7 d8 9d a3 e5 b9 de cb c4 ff b1 2b 24 f5 5a 55 93 73 3f 76 85 a4 59 f3 bb c5 ff b1 db 24 c3 9f ee 27 09 3e 76 0e 17 f7 77 50 51 14 e5 ea 47 85 b4 a2 28 ca 95 c2 9b 43 1a 0c 9b 20 cf 95 0b fc c0 77 84 ca 9a be ad e4 a9 d9 09 dd c6 04 1c 9b 2f ef be bf 46 4e e2 1a 79 52 49 85 1a 35 25 5b a2 7f a9 bd 72 c3 83 ed a4 65 c9 f0 39 cc 17 87 4f f6 7e 3c 5c be 4d 99 5f 52 d9 4e c7 ca ae a9 43 65 d6 81 44 7b 9c 34 32 d4 94 27 5a 15 Data Ascii: 7F%Ge;mI'n\6E{W_#Cu:73nI2s? 'NMU9hg7Oq_Zg=)+$ZUs?vY$'>vwPQG(C w/FNyRI5%[re9O~<\M_RNCeD{42'Z
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: 8a e6 14 61 43 3c bf fb ee bb 76 1e c2 c1 76 84 30 4b 4d 91 67 ce 58 a8 ae 0d 38 c1 b8 f3 f4 9b 02 61 6e c5 6d fa ef c2 3c 51 18 8c f9 63 0d 6b c4 bb 0b 17 27 10 c8 84 78 53 9d 1c 51 4c a8 37 fd c1 b9 e6 c2 08 e7 44 48 bb 20 b4 11 ec 44 19 20 b8 b9 e0 c0 f3 e0 b9 51 14 45 51 94 2b 89 3a d2 8a a2 28 ca 35 03 79 c9 ac 33 8c 68 43 64 f1 18 61 89 53 49 85 6b 04 21 42 1a 61 8d 98 c4 61 65 6d 64 f2 6b c9 b9 65 1f 6e 08 56 0a 66 71 9c 2b 96 11 ab 08 41 1c 67 c2 89 69 1f 10 6f b8 d9 14 38 a3 98 18 ed 20 2e 11 da b8 ae 08 4a 44 3a c5 b9 78 ee 3a e3 e1 60 99 2c 84 33 8e 2f 17 04 28 52 46 98 36 22 95 f0 73 c4 3a fb 70 4f 78 fa 97 5f 7e 69 8b 70 21 22 1f 7a e8 21 2b 52 71 88 29 9c 86 a0 25 2f 9b fe 72 43 bc 22 c6 39 8e d7 dd a5 b7 9e 78 e2 09 1b 72 8d e0 9e 34 69 92 Data Ascii: aC<vv0KMgX8anm<Qck'xSQL7DH D QEQ+:(5y3hCdaSIk!BaaemdkenVfq+Agio8 .JD:x:`,3/(RF6"s:pOx_~ip!"z!+Rq)%/rC"9xr4i
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: 97 e5 05 84 e6 5f cf 46 4f 93 05 c4 88 3b 83 e5 e3 96 e2 d8 c3 57 88 d5 ea 4a 47 ee 5c 03 c3 67 0e 43 d5 34 ca 44 fb f8 20 e6 cc dc 8e 4b 0f 9f 23 5a cd ef 91 41 9e cb 09 85 4b 35 c4 80 f1 ed e1 95 c6 ab 24 cc 2d 2b cd 6d ec 9c 31 1f bb af 3e 64 f2 4e ba 7a 53 14 45 9b 6f 7f 40 57 77 85 74 49 c6 c4 e1 ec 82 c1 f8 e1 e8 4b a6 ba 18 32 25 ec f3 b9 c2 bb b6 3f e4 67 8e e3 ca e3 7f 11 15 af 7f 76 46 c8 1c 50 73 e4 62 0c 0d b0 d2 1f 10 08 04 02 81 40 20 c8 98 a8 13 8b 31 39 f4 34 1e 3e 8f 36 b0 c3 b9 1d ea 80 02 ae fe e8 3c 7e 00 aa e7 d6 1f 16 bc 03 1a 44 5e d8 84 9f a6 ce c0 f2 97 bd 71 fa 7f 43 51 34 0b 87 44 b5 2f ff c2 da 49 df 60 ce a6 23 b8 fc f8 0d 60 93 1f 1e 55 5b a1 ef 84 6f 30 a4 ae 2b d2 34 7f 5f 5d 42 e8 d4 f1 f8 71 c7 df 50 db 10 e2 ad ca a1 fd Data Ascii: _FO;WJG\gC4D K#ZAK5$-+m1>dNzSEo@WwtIK2%?gvFPsb@ 194>6<~D^qCQ4D/I`#`U[o0+4_]BqP
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: cf ca 4e 49 00 00 ff f4 49 44 41 54 f2 0e 32 6b 5b 13 fd 7b fa c2 1a d1 38 b2 6c 05 2e 25 ad 13 51 e3 fc aa 10 bc 6a db 0f 0d ec f5 87 0c b0 b2 d6 17 a0 21 ea cb 08 5d 7b 12 31 b0 87 8f 7f 79 a4 10 17 96 8c dc 70 4c b1 d7 83 65 32 c1 d7 6d af c5 c9 18 c0 de c7 1f e5 53 bf 00 b9 1d 2d df fe ca 34 ef 57 0f 98 c4 b1 22 fc bd 54 50 df 0e 41 37 ff 00 74 9e bc 09 17 75 c2 06 af be a3 d1 d1 2c 61 d3 23 b3 86 ad 6d 8a eb 95 65 d0 67 58 2b 14 60 87 35 ff 9e c7 99 5b 89 95 2f 47 c1 76 9f a3 a7 a7 0a da 07 9b 30 cb 30 18 9b e6 6f 84 ac 39 0d 9f 1e 9f a2 9c 19 ea ca d2 f6 95 16 6f 8e ef c2 c1 67 ac cf 2e e5 05 af 14 ef 55 7a 74 c3 a2 5f 4e e1 58 e8 10 54 92 54 47 26 eb 4e ce 74 9d 4e d9 41 95 5a d9 21 8f 4e d9 49 3a d7 58 c6 54 70 cc 6d cb 8e 71 5d 1b 63 b0 0e 90 b9 Data Ascii: NIIDAT2k[{8l.%Qj!]{1ypLe2mS-4W"TPA7tu,a#megX+`5[/Gv00o9og.Uzt_NXTTG&NtNAZ!NI:XTpmq]c
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: c6 2e 86 fe a9 ef 8c dc d6 0e b9 98 d2 a2 98 28 24 2e f7 4b 24 e6 ad be 8b 50 ab a5 4e 21 53 c8 f3 a1 72 40 69 69 cd 8a fa f2 46 ac 39 95 72 7f c5 44 08 5a f6 9e c4 d7 44 6f 1f 83 b1 fb 93 4a 0b 79 2b 7d 8a 59 07 4f 60 39 1f 45 a3 68 9c 3f 7d 41 7f 2e 0b 79 bd 0f 2b 37 dc 41 82 a2 14 02 aa b9 98 14 72 a2 34 0a c2 ca 17 7d fa d6 84 1d eb 56 cf 2c 1b 85 11 6b a2 d1 ae 5f 6d 24 c6 5a 49 c2 52 b9 79 07 5e 9f fe 13 57 35 0a 14 6e dd 19 8d 1c f8 ab 6b a2 32 0f a9 f9 e6 24 be 1b f0 3d 52 bf 3a 16 57 e6 8d 85 ee d5 ef 5f 16 4d 21 f5 a7 a4 4d d1 69 ca 61 6b c7 d7 03 12 62 a2 12 d7 b7 27 12 83 64 b1 4d 96 a7 ec c1 92 32 92 23 5f e5 00 94 d6 35 04 6c 5c 73 2a 49 17 a4 84 b4 e6 b5 37 bb 5a 2d 50 9f 47 76 d1 3c c2 81 2d 47 61 bc 3b 2d e7 0d ee 3f 78 06 ad 3c 3f 9a 76 Data Ascii: .($.K$PN!Sr@iiF9rDZDoJy+}YO`9Eh?}A.y+7Ar4}V,k_m$ZIRy^W5nk2$=R:W_M!Miakb'dM2#_5l\s*I7Z-PGv<-Ga;-?x<?v
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: 0e c0 95 2b b7 61 57 c0 0d e6 e6 12 ef 31 d7 cf a4 40 3a d8 fe 0f c6 2c 1d 93 c1 51 7a 2d 41 a7 62 57 10 92 2a c7 f7 99 90 67 47 7e 57 69 82 9c a0 be 7c 0e a6 5d bf 1a b1 7a 05 40 91 92 1e 86 6d 46 98 ba 06 92 de 29 15 3b 64 96 70 f3 2c 24 c4 97 03 59 e4 84 e8 a3 eb b0 3a 69 43 8a c3 c7 1e 1a fe 91 86 d8 d6 c2 80 9e 3e b0 92 6c f1 ec 05 38 f3 78 27 96 6d b3 42 ab 80 c4 af d8 a4 44 cc 5f 81 58 72 ba 08 7a 4c 18 89 9e dd bb a3 7b a2 4f 4f 7c 3f b6 0b 8a 4a 25 cd a3 4e 62 d9 d2 d3 ef 9f 0e 31 2b 86 33 fc 33 bd b1 28 8a 92 85 45 1b 15 39 90 db c5 d8 d6 bd c6 c1 df 8f 21 42 8c 17 cf a2 2e 42 f3 8d 10 c9 74 eb 9f e6 a3 4b 7e 05 e8 ed 05 fc 15 12 6b d8 91 7e 58 14 2d 89 c2 c2 10 29 72 e4 46 bc 66 a7 19 72 e4 f0 f3 43 31 a5 e8 d7 c8 50 fc 7d 27 f1 18 8e be 73 1b Data Ascii: +aW1@:,Qz-AbW*gG~Wi\|]z@mF);dp,$Y:iC>l8x'mBD_XrzL{OO\|?J%Nb1+33(E9!B.BtK~k~X-)rFfrC1P}'s
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: b0 e9 e2 fa ea 58 b5 30 21 72 d8 16 29 69 d8 12 1f 53 09 0b 89 c0 2d 46 ec 90 59 ba c1 b3 90 34 7b 98 03 39 44 d2 43 d1 47 b1 6e f5 75 98 36 af 22 d8 3c 7c 0c 0f d3 26 96 7c 87 6d ad 01 e8 e9 63 05 7a b9 07 b3 17 9c c1 e3 9d cb b0 cd aa 15 02 6a a4 b0 be f0 27 e7 25 7e 5f b0 0a 17 a5 7c 4e 91 0b cd 7a b7 41 9e cf 38 f2 22 cf cd 42 db 81 57 d0 71 4d 20 da be 5b 30 d9 4c 2c 8a a2 64 e1 4c 90 29 72 20 b7 8b 21 98 b5 f0 41 bf e5 9b b1 65 cb 16 13 9f 5f 31 ae 6e 36 31 ba 14 c8 d9 68 12 36 8a 6d 9b 7e ee a9 ff 5d 8a 88 24 5a a6 40 81 32 65 74 6b 4c 4a 28 f2 96 44 b1 ec a2 ed 14 86 bb 77 12 2f f7 22 39 62 3b 3b 6b f1 bf 72 d8 b8 b8 1a b6 99 40 fb 0c bb b7 1f 41 54 89 46 68 ea 61 42 16 af 0f e2 f7 63 11 90 67 f7 44 51 9d 93 7d 8f c2 b5 35 7e 9a df 05 d2 eb fd 6f Data Ascii: X0!r)iS-FY4{9DCGnu6"<\|&\|mczj'%~_\|NzA8"BWqM [0L,dL)r !Ae_1n61h6m~]$Z@2etkLJ(Dw/"9b;;kr@ATFhaBcgDQ}5~o
2025-04-10 12:57:19 UTC	16384	IN	Data Raw: 08 ca f3 9d 00 00 6a ee 49 44 41 54 17 2f 7c 4b b2 09 52 76 3b 23 8d 5c 49 3c ff f3 9d f8 95 b4 7b 3d b6 05 19 77 88 2d be 4a 87 97 db e7 62 85 69 87 22 77 b3 e6 a8 e0 a2 82 26 7b 5c 7f ea f1 62 f7 30 d4 2e 51 1c 35 06 6f c3 d3 b8 9f eb 82 b0 79 c7 0b 54 6b 16 10 af ab c6 e8 82 36 63 c7 8b 6a 68 16 90 74 af 3a 57 3b f4 6d ee 29 ce 26 da 7a 64 18 ea 36 1a 8e 55 c7 6f e3 d9 f3 07 b8 b8 77 0e 7a d7 ac 87 05 59 ba a0 63 dc c0 93 a1 31 86 f6 2b 0d 57 95 0e 4f d6 8e c7 1c 53 83 16 c3 de 1e ec 3c f9 11 6e e5 07 62 a8 b1 41 9b f5 c5 82 d4 96 97 ac ad eb c5 f0 2d 9d 4d 87 3b 47 0e 20 c1 6d df c2 e6 d5 47 0c 3e 83 a2 c2 11 29 12 a6 a7 c7 8e e2 96 d6 0e c5 bb f4 44 65 69 79 fc d8 20 cc ed d1 1f 9b 1e 19 d5 23 e6 31 6e 3f 90 a6 7c 13 de 07 bf 52 12 ce 54 8e ff ba 87 Data Ascii: jIDAT/\|KRv;#\I<{=w-Jbi"w&{\b0.Q5oyTk6cjht:W;m)&zd6UowzYc1+WOS<nbA-M;G mG>)Deiy #1n?\|RT
2025-04-10 12:57:19 UTC	11018	IN	Data Raw: 4a ce 19 da d1 66 33 8e 37 ec da 6e 5a 3e 6f 2c 75 28 96 70 c1 4c 65 9f 83 6a 0e 99 49 cb f6 df b2 1c f4 27 97 48 87 5d a3 dd cb e7 d1 d8 0e c5 28 ad 92 9c 4b b2 cf 51 73 08 cd 5c b6 9f 6e 29 85 ea 82 f7 d0 a0 d2 99 c8 c5 3d 1b 65 4a 63 4f fe a3 03 93 f8 4d 91 99 d0 ad 7d cb 68 d6 0f b5 29 a7 d1 45 11 b5 bb 37 05 34 6c 4c 75 ab 94 20 1f df 72 d4 a0 fb 4f b4 ec e4 33 25 b9 8e 43 4b 7f 9e 5a 47 f3 c7 b6 a5 22 ae 09 63 91 ca 2e 23 15 a9 d1 44 e8 71 53 6a 54 ab 02 f9 66 75 26 b5 24 77 b5 07 b5 95 04 1b 15 44 fb 16 8c a7 ee 65 e5 0b 68 c5 da 8d a2 b9 5b af 50 88 39 67 1c 7d 93 e6 d4 f1 a2 b6 29 24 d2 7f a5 1e 68 1f 1f a3 55 73 46 51 53 2f a7 78 7b 35 f4 e1 e0 e9 b4 e4 40 50 fc 05 b2 b7 7b 7b 91 57 9c 0c 45 7f e4 ac 31 98 56 5f 35 6f 0b 26 84 5d a5 d5 c3 9a 52 Data Ascii: Jf37nZ>o,u(pLejI'H](KQs\n)=eJcOM}h)E74lLu rO3%CKZG"c.#DqSjTfu&$wDeh[P9g})$hUsFQS/x{5@P{{WE1V_5o&]R