Edit tour

Windows Analysis Report
https://www.wellsfargo.com/

Overview

General Information

Sample URL:	https://www.wellsfargo.com/
Analysis ID:	1417022
Infos:

Detection

Score:	22
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Phishing site detected (based on logo match)

Detected hidden input values containing email addresses (often used in phishing pages)

Found iframes

HTML body contains low number of good links

Invalid T&C link found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3552 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1704 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2024,i,13790965430040798669,7551964596815697510,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6452 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.wellsfargo.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Phishing site detected (based on logo match)

Source: https://adservice.google.com/ddm/fls/z/src=2549153;dc_pre=CP-j74KGl4UDFVMRdgYdAY4ITg;type=allv40;cat=all_a012;u1=1120240328061851126288949;u4=LOGIN;u5=n;u8=loginapp;u11=PROD;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DE

Matcher: Template: wellsfargo matched

Source: https://www.wellsfargo.com/	HTTP Parser: NDX:%pYI uKbBRam4)JJ'n"7!4y@;@92\|)^vM'}B[v@8sC^z<2sKX`iEUL5'pG"W9k{$\8'XEi"%g0yeOFfQEl4uSsW[eU!GM`3<bgFPD;&})^v@FTn]dObi=,vZ>g}!%L!w91r](m7##wBy@^%kZLQ9-cK]%@)q?Ea$dfCk.]KYI5[SL?>mtyY}!Px#`wZzBJe#Snu4m$4+OXDn-xSTy(V\|ESvJWfu[e4(Ml^tM'lJ $R`zzLkX1 1u-C{#D;Mr3y<k\|b[I;(q)/zK`W@pV[rw\q@<kk<cqOn.J.SAvgLJmLj:19}De@AglLfS$ vJ -?cyFb;Q?_: -F^.-`[rFK-{??`ARBJN06j=7k(3iJCi"tfsS%[O&q.!7rH/I1xCb{a(0RuV.yW70BWr\|B(xYB@$otYWvF9t^lS]$m"p:'o5LhWDrA^8h\eTz(!/g]xb,!g1&gJ2gL$N@48-8i%PH(t'K9a-[_\|F70J;\|@1-j0\|j&y2F8yQvA?5IZy5Cmc^:=pztVjK:q'R0KRg\|!@{+"HHRb],JLkSF9\|l[cxLkX!-fQ0<5^2@%xT^+hlJb!Y)T{L>oS?ks-\|E{Q"s69dGoDKp]YB#kW#QgNc\<DA"fL&jZjOJqR#JGz6Z@ ^(iGLh\D`uu(t&+s11ezMqY[3sC<#J7\|YQt0RN<W2PHp8SiOrRECzV'bI!'l cL0bRBKt*xXO>
Source: https://www.wellsfargo.com/	HTTP Parser: NDX:%pYI uKbBRam4)JJ'n"7!4y@;@92\|)^vM'}B[v@8sC^z<2sKX`iEUL5'pG"W9k{$\8'XEi"%g0yeOFfQEl4uSsW[eU!GM`3<bgFPD;&})^v@FTn]dObi=,vZ>g}!%L!w91r](m7##wBy@^%kZLQ9-cK]%@)q?Ea$dfCk.]KYI5[SL?>mtyY}!Px#`wZzBJe#Snu4m$4+OXDn-xSTy(V\|ESvJWfu[e4(Ml^tM'lJ $R`zzLkX1 1u-C{#D;Mr3y<k\|b[I;(q)/zK`W@pV[rw\q@<kk<cqOn.J.SAvgLJmLj:19}De@AglLfS$ vJ -?cyFb;Q?_: -F^.-`[rFK-{??`ARBJN06j=7k(3iJCi"tfsS%[O&q.!7rH/I1xCb{a(0RuV.yW70BWr\|B(xYB@$otYWvF9t^lS]$m"p:'o5LhWDrA^8h\eTz(!/g]xb,!g1&gJ2gL$N@48-8i%PH(t'K9a-[_\|F70J;\|@1-j0\|j&y2F8yQvA?5IZy5Cmc^:=pztVjK:q'R0KG5(3?49k`/d7[c ,(jBf5zeQ/j)x-8Af8>co?f3G0_.L+@b$m?vo]$>xlCs5?]VQq7:}T/o%]$d]cL:3b+ySl<yVKj]kM3kzEYdC,i_;wfOv,fLNptlScJgRX3PI8p89a\|<t2Vw:{26,K.QG-6A}\-gt49l/=kG't!c>I&r99A!qGNo]r>e.3g&qY@iB'\K^E`KryKcx@>[+ovZChuf2xFVeF+h\|""!?fSCnFNBul<Ck/?j\| GGahE0g}Kf77eP
Source: https://www.wellsfargo.com/#skip	HTTP Parser: NDX:%pYI uKbBRam4)JJ'n"7!4y@;@92\|)^vM'}B[v@8sC^z<2sKX`iEUL5'pG"W9k{$\8'XEi"%g0yeOFfQEl4uSsW[eU!GM`3<bgFPD;&})^v@FTn]dObi=,vZ>g}!%L!v8:sV m7##wBy@^%kZLQ9-cK]%@)q?Ea$dfCk.]KYI5[SL?>mtyY}!Px#`wZzBJe#Snu4m$4+OXDn-xSTy(V\|ESvJWfu[e4(Ml^tM'lJ $R`zzLkX1 1u-C{#D;Mr3y<k\|b[I;(q)/zK`W@pV[rw\q@<kk<cqOn.J.SAvgLJmLj:19}De@AglLfS$ vJ -?cyFb;Q?_: -F^.-`[rFK-{??`ARBJN06j=7k(3iJCi"tfsS%[O&q.!7rH/I1xCb{a(0PuV.yW70BWr\|B(xYB@$otYWvF9t^lS]aW(F`-w j/wC9h\|i@;ixA"bCBg?)udPtUdN2nrjDa8e%@:T('nC=4zMJr6Ru(yJ0T80BP4D9{D#!er0Bj/Si'-r!a,8^pYFC2oR<m\|pOc}0eYoE.g"-\v?0k(QwP;dy-&.1(TE3zF4U""^<Kv-bo\xB3aBelI9
Source: https://www.wellsfargo.com/#skip	HTTP Parser: NDX:%pYI uKbBRam4)JJ'n"7!4y@;@92\|)^vM'}B[v@8sC^z<2sKX`iEUL5'pG"W9k{$\8'XEi"%g0yeOFfQEl4uSsW[eU!GM`3<bgFPD;&})^v@FTn]dObi=,vZ>g}!%L!v8:sV m7##wBy@^%kZLQ9-cK]%@)q?Ea$dfCk.]KYI5[SL?>mtyY}!Px#`wZzBJe#Snu4m$4+OXDn-xSTy(V\|ESvJWfu[e4(Ml^tM'lJ $R`zzLkX1 1u-C{#D;Mr3y<k\|b[I;(q)/zK`W@pV[rw\q@<kk<cqOn.J.SAvgLJmLj:19}De@AglLfS$ vJ -?cyFb;Q?_: -F^.-`[rFK-{??`ARBJN06j=7k(3iJCi"tfsS%[O&q.!7rH/I1xCb{a(0PuV.yW70BWr\|B(xYB@$otYWvF9t^lS]$m"r8Li09lPs`OuhZ"YKjS%cQL[%d]/CIb__JwhMNc^6f{q$>M]A[;x_^HDZ1L!u,,)Rbi<0bpG?gTyN?cUz/qB)y%`"t_]-lK)4]Y<@<vz&pD< 4ILe}YNyN`,dI1kS.irK}Wf -@;"y37)u/q)W[:0t]"xAx3+QD4g[93hE):8wV)v)OnS%%F"bS%asZ7M'_l^:!6NaTgM]%]'eCYHD?jw&RDV!*FS^+p11ezMqY[3sC<#J7\|YQt0RN<W2PHp8SiOrRVH"2f'/
Source: https://www.wellsfargo.com/#skip	HTTP Parser: NDX:%pYI uKbBRam4)JJ'n"7!4y@;@92\|)^vM'}B[v@8sC^z<2sKX`iEUL5'pG"W9k{$\8'XEi"%g0yeOFfQEl4uSsW[eU!GM`3<bgFPD;&})^v@FTn]dObi=,vZ>g}!%L!v8:sV m7##wBy@^%kZLQ9-cK]%@)q?Ea$dfCk.]KYI5[SL?>mtyY}!Px#`wZzBJe#Snu4m$4+OXDn-xSTy(V\|ESvJWfu[e4(Ml^tM'lJ $R`zzLkX1 1u-C{#D;Mr3y<k\|b[I;(q)/zK`W@pV[rw\q@<kk<cqOn.J.SAvgLJmLj:19}De@AglLfS$ vJ -?cyFb;Q?_: -F^.-`[rFK-{??`ARBJN06j=7k(3iJCi"tfsS%[O&q.!7rH/I1xCb{a(0PuV.yW70BWr\|B(xYB@$otYWvF9t^lS]$m"r8Li09lP*s`OuhZ"YKjS%cQL[%d]/CIb__JwhMNc^6f{q$>M]A[;x_^HDZ1LT.}9zlO<]Q:hXqgQ')t_q=n1$s]Dl^/D@84lCi'Tl\$lbXpL{e#/q5CnJBb_Jn>Lk&,WVuJ};6D@6(rP1=5.)!\|T+%o`^EOu2$SoG^CZrBB1'=f8N6m;=dQvR(`YwBnU<vL]_q7Q5iNP0)LZ: sw^mU$&Q 6bzA%v3 BaQJh&.fo+zUc{WX4>vPZ]r"nHZ 4FqEWu(uC>\|>8dXK)eS=[_tI<sHBk_I9XW=&#%p4K\|#\iB7?<WVXKdM4,>3bSA!{Jgt=}>Z-'>IK5mRXbw@n8NHp+2G?2yG-q.\|}6T\|HYmN0f7oUP'%OcO?
Source: https://www.wellsfargo.com/es/	HTTP Parser: NDX:%pYI uKbBRam4)JJ'n"7!4y@;@92\|)^vM'}B[v@8sC^z<2sKX`iEUL5'pG"W9k{$\8'XEi"%g0yeOFfQEl4uSsW[eU!GM`3<bgFPD;&})^v@FTn]dObi=,vZ>g}!%L!y67y^"m7##wBy@^%kZLQ9-cK]%@)q?Ea$dfCk.]KYI5[SL?>mtyY}!Px#`wZzBJe#Snu4m$4+OXDn-xSTy(V\|ESvJWfu[e4(Ml^tM'lJ $R`zzLkX1 1u-C{#D;Mr3y<k\|b[I;(q)/zK`W@pV[rw\q@<kk<cqOn.J.SAvgLJmLj:19}De@AglLfS$ vJ -?cyFb;Q?_: -F^.-`[rFK-{??`ARBJN06j=7k(3iJCi"tfsS%[O&q.!7rH/I1xCb{a(NPuV.yW70BWr\|B(xYB@$otYWvF9t^lS]$m"pd"i0#rP)0GOuhZ"YJ,T:cQL[%d]/C\L@J9Wls/+lzN.q!%.#mI_X{46^)jSMi;5v@cg6:'M)NY?zD&c<:6oCAg6'j@nY0uI!s\|4Y6pUHT'gZ?P['4{-gJ;L %e]_T,dZ1bqe4Kr/%FdA@6Y-\xBYSBelI&k}E>Xbiv>&h&2kTNqU106o9)YS=tJa]17hK_+B5z1Ro {=Hh};Z'_$LJc(;[_!a+$Pz4fs1\|Y2e!ipGM
Source: https://connect.secure.wellsfargo.com/auth/login/present?origin=cob&LOB=CONS	HTTP Parser: NDX:%pYI uKbBRam4)JJ'n"7!4y@;@92\|)^vM'}B[v@8sC^z<2sKX`iEUL5'pG"W9k{$\8'XEi"%g0yeOFfQEl4uSsW[eU!GM`3<bgFPD;&})^v@FTn]dObi=,vZ>g}!%L!z:7rS/m7##wBy@^%kZLQ9-cK]%@)q?Ea$dfCk.]KYI5[SL?>mtyY}!Px#`wZzBJe#Snu4m$4+OXDn-xSTy(V\|ESvJWfu[e4(Ml^tM'lJ $R`zzLkX1 1u-C{#D;Mr3y<k\|b[I;(q)/zK`W@pV[rw\q@<kk<cqOn.J.SAvgLJmLj:19}De@AglLfS$ vJ -?cyFb;Q?_: -F^.-`[rFK-{??`ARBJN06j=7k(3iJCi"tfsS%[O&q.!7rH/I1xCb{a(NPuV.yW70BWrQ/qpOSx[$rYQh3qQTNq%>sQ\qIi.4)j,pAElA5j"Kd,1{6WC90pcx`K>_J'h}3_,LZ@8W1KvX6ET@^HG2v1;:6w[ c&u4rK)'MYxi;9I[$eCa^5x@'CbD'PSu">2@$m_1fC,r"+d@2W?@b-JQS]'h)f(:-Jwh\|r7@&.I\|WbSa\|(.!Pcvl&PQyUX8i}9h7Mu#IqI/ RpEBi;U4eXPsO]?An=6lGE;e-pT<Jr"l"TxhM45mM(`SiChZ!`_G3x6x,N{zY<4yMl$ZXwLsGmS\|G<n.x[XtL/)g@1wCr@2yX]wT>bb(aG`RO0gI%^-A`F=BB9i{/a\lm\;lxn6Q0YTYtwTg>kr3#{K )sXX@N>]/3pY$m71}4$K%Tj`OLY1L!f\|KeM)d"
Source: https://connect.secure.wellsfargo.com/auth/login/present?origin=cob&LOB=CONS	HTTP Parser: NDX:%pYI uKbBRam4)JJ'n"7!4y@;@92\|)^vM'}B[v@8sC^z<2sKX`iEUL5'pG"W9k{$\8'XEi"%g0yeOFfQEl4uSsW[eU!GM`3<bgFPD;&})^v@FTn]dObi=,vZ>g}!%L!z:7rS/m7##wBy@^%kZLQ9-cK]%@)q?Ea$dfCk.]KYI5[SL?>mtyY}!Px#`wZzBJe#Snu4m$4+OXDn-xSTy(V\|ESvJWfu[e4(Ml^tM'lJ $R`zzLkX1 1u-C{#D;Mr3y<k\|b[I;(q)/zK`W@pV[rw\q@<kk<cqOn.J.SAvgLJmLj:19}De@AglLfS$ vJ -?cyFb;Q?_: -F^.-`[rFK-{??`ARBJN06j=7k(3iJCi"tfsS%[O&q.!7rH/I1xCb{a(NPuV.yW70BWrQ/qpOSx[$rYQh3qQTNq%>sQ\qIi.4)j,pAElA5j"Kd,1{6WC90pcx`K>_J'h}3_,LZ@8W1KvX6ET@^HG2v1;:6w[ c&u4rK)'MYxi;9I[$eCa^5x@'CbD'PSu">2@$m_1fC,r"+d@2W?@b-JQS]'h)f(:-Jwh\|r7@&.I\|WbSa\|(.!Pcvl&PQyUv[#4I1U-xj>pf+Z@s}p1mQPq];wF;oa^iQ p1mbVfTHo,zd+&ov-J@JgX>8Xve]#j}Hi\|TbNV<z7`8] y2e _'lNRkW6\x=]t3#M2s<(l\C1hP+vJ@&2qNNoFTHh!s42'uAoHM{kN>;pVSc2lk^cB4-{={"`I}8R-\|[o.R#z7v^p:^=Iq1{Eaw<#Fj#@zDuP;\|P(z/!eeGd=WcE<,jDaP:'c9-G#/lY-dYopC4o{q`L'&@bwzj^nu[$ Y%%v#E;1%V^\s&#pD/-abOBamc?U>'I-iQTh08gI

Source: https://www.wellsfargo.com/	HTTP Parser: Iframe src: https://2549153.fls.doubleclick.net/activityi;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F?
Source: https://www.wellsfargo.com/	HTTP Parser: Iframe src: https://2549153.fls.doubleclick.net/activityi;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F?
Source: https://www.wellsfargo.com/	HTTP Parser: Iframe src: https://2549153.fls.doubleclick.net/activityi;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F?
Source: https://www.wellsfargo.com/#skip	HTTP Parser: Iframe src: https://2549153.fls.doubleclick.net/activityi;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F?
Source: https://www.wellsfargo.com/#skip	HTTP Parser: Iframe src: https://2549153.fls.doubleclick.net/activityi;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F?
Source: https://www.wellsfargo.com/#skip	HTTP Parser: Iframe src: https://2549153.fls.doubleclick.net/activityi;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F?
Source: https://www.wellsfargo.com/es/	HTTP Parser: Iframe src: https://2549153.fls.doubleclick.net/activityi;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F?
Source: https://www.wellsfargo.com/es/	HTTP Parser: Iframe src: https://2549153.fls.doubleclick.net/activityi;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F?
Source: https://connect.secure.wellsfargo.com/auth/login/present?origin=cob&LOB=CONS	HTTP Parser: Iframe src: //ad.doubleclick.net/ddm/activity/src=2549153;type=allv40;cat=all_a012;u1=1120240328061851126288949;u4=LOGIN;u5=n;u8=loginapp;u11=PROD;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ord=7018165804944.119?
Source: https://connect.secure.wellsfargo.com/auth/login/present?origin=cob&LOB=CONS	HTTP Parser: Iframe src: //ad.doubleclick.net/ddm/activity/src=2549153;type=allv40;cat=all_a012;u1=1120240328061851126288949;u4=LOGIN;u5=n;u8=loginapp;u11=PROD;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ord=7018165804944.119?

Source: https://connect.secure.wellsfargo.com/auth/login/present?origin=cob&LOB=CONS

HTTP Parser: Number of links: 0

Source: https://www.wellsfargo.com/	HTTP Parser: Invalid link: Help
Source: https://www.wellsfargo.com/	HTTP Parser: Invalid link: Quick help
Source: https://www.wellsfargo.com/	HTTP Parser: Invalid link: Quick help
Source: https://www.wellsfargo.com/	HTTP Parser: Invalid link: Help
Source: https://www.wellsfargo.com/	HTTP Parser: Invalid link: Quick help
Source: https://www.wellsfargo.com/	HTTP Parser: Invalid link: Quick help
Source: https://www.wellsfargo.com/	HTTP Parser: Invalid link: Help
Source: https://www.wellsfargo.com/	HTTP Parser: Invalid link: Quick help
Source: https://www.wellsfargo.com/	HTTP Parser: Invalid link: Quick help
Source: https://www.wellsfargo.com/	HTTP Parser: Invalid link: Help
Source: https://www.wellsfargo.com/	HTTP Parser: Invalid link: Quick help
Source: https://www.wellsfargo.com/	HTTP Parser: Invalid link: Quick help
Source: https://www.wellsfargo.com/	HTTP Parser: Invalid link: Help
Source: https://www.wellsfargo.com/	HTTP Parser: Invalid link: Quick help
Source: https://www.wellsfargo.com/	HTTP Parser: Invalid link: Quick help
Source: https://www.wellsfargo.com/	HTTP Parser: Invalid link: Help
Source: https://www.wellsfargo.com/	HTTP Parser: Invalid link: Quick help
Source: https://www.wellsfargo.com/	HTTP Parser: Invalid link: Quick help
Source: https://www.wellsfargo.com/#skip	HTTP Parser: Invalid link: Help
Source: https://www.wellsfargo.com/#skip	HTTP Parser: Invalid link: Quick help
Source: https://www.wellsfargo.com/#skip	HTTP Parser: Invalid link: Quick help
Source: https://www.wellsfargo.com/#skip	HTTP Parser: Invalid link: Help
Source: https://www.wellsfargo.com/#skip	HTTP Parser: Invalid link: Quick help
Source: https://www.wellsfargo.com/#skip	HTTP Parser: Invalid link: Quick help
Source: https://www.wellsfargo.com/#skip	HTTP Parser: Invalid link: Help
Source: https://www.wellsfargo.com/#skip	HTTP Parser: Invalid link: Quick help
Source: https://www.wellsfargo.com/#skip	HTTP Parser: Invalid link: Quick help
Source: https://www.wellsfargo.com/#skip	HTTP Parser: Invalid link: Help
Source: https://www.wellsfargo.com/#skip	HTTP Parser: Invalid link: Quick help
Source: https://www.wellsfargo.com/#skip	HTTP Parser: Invalid link: Quick help

Source: https://www.wellsfargo.com/	HTTP Parser: <input type="password" .../> found
Source: https://www.wellsfargo.com/#skip	HTTP Parser: <input type="password" .../> found
Source: https://www.wellsfargo.com/es/	HTTP Parser: <input type="password" .../> found
Source: https://connect.secure.wellsfargo.com/auth/login/present?origin=cob&LOB=CONS	HTTP Parser: <input type="password" .../> found

Source: https://2549153.fls.doubleclick.net/activityi;dc_pre=CIDN4PKFl4UDFaYKdgYd4tUFzw;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F?	HTTP Parser: No favicon
Source: https://2549153.fls.doubleclick.net/activityi;dc_pre=CLmiqfOFl4UDFXYQdgYdkywNxA;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F?	HTTP Parser: No favicon
Source: https://tag-wellsfargo.digital.nuance.com/tagserver/nuanceChat.html?UUID=WF_10006005	HTTP Parser: No favicon
Source: https://tag-wellsfargo.digital.nuance.com/tagserver/nuanceChat.html?UUID=WF_10006005	HTTP Parser: No favicon
Source: https://tag-wellsfargo.digital.nuance.com/tagserver/nuanceChat.html?UUID=WF_10006005	HTTP Parser: No favicon
Source: https://tag-wellsfargo.digital.nuance.com/tagserver/nuanceChat.html?UUID=WF_10006005	HTTP Parser: No favicon
Source: https://2549153.fls.doubleclick.net/activityi;dc_pre=CK6Ts_mFl4UDFREVdgYd2PIHKw;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F?	HTTP Parser: No favicon
Source: https://wellsfargo.digital.nuance.com/tagserver/postToServer.min.htm?siteID=10006005&codeVersion=1710907168986	HTTP Parser: No favicon
Source: https://connect.secure.wellsfargo.com/auth/login/present?origin=cob&LOB=CONS	HTTP Parser: No favicon
Source: https://connect.secure.wellsfargo.com/auth/login/present?origin=cob&LOB=CONS	HTTP Parser: No favicon
Source: https://connect.secure.wellsfargo.com/auth/login/present?origin=cob&LOB=CONS	HTTP Parser: No favicon
Source: https://2549153.fls.doubleclick.net/activityi;dc_pre=CNn08IKGl4UDFSgVdgYdKtkJ0A;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F?	HTTP Parser: No favicon
Source: https://adservice.google.com/ddm/fls/z/src=2549153;dc_pre=CP-j74KGl4UDFVMRdgYdAY4ITg;type=allv40;cat=all_a012;u1=1120240328061851126288949;u4=LOGIN;u5=n;u8=loginapp;u11=PROD;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ord=7018165804944.119	HTTP Parser: No favicon

Source: https://www.wellsfargo.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.wellsfargo.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.wellsfargo.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.wellsfargo.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.wellsfargo.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.wellsfargo.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.wellsfargo.com/#skip	HTTP Parser: No <meta name="author".. found
Source: https://www.wellsfargo.com/#skip	HTTP Parser: No <meta name="author".. found
Source: https://www.wellsfargo.com/#skip	HTTP Parser: No <meta name="author".. found
Source: https://www.wellsfargo.com/#skip	HTTP Parser: No <meta name="author".. found
Source: https://www.wellsfargo.com/es/	HTTP Parser: No <meta name="author".. found
Source: https://www.wellsfargo.com/es/	HTTP Parser: No <meta name="author".. found
Source: https://www.wellsfargo.com/es/	HTTP Parser: No <meta name="author".. found
Source: https://www.wellsfargo.com/es/	HTTP Parser: No <meta name="author".. found
Source: https://www.wellsfargo.com/es/	HTTP Parser: No <meta name="author".. found
Source: https://connect.secure.wellsfargo.com/auth/login/present?origin=cob&LOB=CONS	HTTP Parser: No <meta name="author".. found
Source: https://connect.secure.wellsfargo.com/auth/login/present?origin=cob&LOB=CONS	HTTP Parser: No <meta name="author".. found

Source: https://www.wellsfargo.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.wellsfargo.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.wellsfargo.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.wellsfargo.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.wellsfargo.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.wellsfargo.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.wellsfargo.com/#skip	HTTP Parser: No <meta name="copyright".. found
Source: https://www.wellsfargo.com/#skip	HTTP Parser: No <meta name="copyright".. found
Source: https://www.wellsfargo.com/#skip	HTTP Parser: No <meta name="copyright".. found
Source: https://www.wellsfargo.com/#skip	HTTP Parser: No <meta name="copyright".. found
Source: https://www.wellsfargo.com/es/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.wellsfargo.com/es/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.wellsfargo.com/es/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.wellsfargo.com/es/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.wellsfargo.com/es/	HTTP Parser: No <meta name="copyright".. found
Source: https://connect.secure.wellsfargo.com/auth/login/present?origin=cob&LOB=CONS	HTTP Parser: No <meta name="copyright".. found
Source: https://connect.secure.wellsfargo.com/auth/login/present?origin=cob&LOB=CONS	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.4:49766 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.0.128
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.0.128
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.0.128
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.0.128
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=1&d_coop_unsafe=1&ts=1711631938573 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.2.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=1&d_mid=33918683021254472264168527825999287273&d_coop_unsafe=1&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=wfacookieidsync%011120240328061851126288949%011&ts=1711631940641 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=1&d_coop_unsafe=1&ts=1711631938573 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.2.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=1&d_mid=33918683021254472264168527825999287273&d_coop_unsafe=1&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=wfacookieidsync%011120240328061851126288949%011&ts=1711631940641 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378
Source: global traffic	HTTP traffic detected: GET /event?d_dil_ver=9.5&_ts=1711631938588 HTTP/1.1Host: wellsfargobankna.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378
Source: global traffic	HTTP traffic detected: GET /tr?id=1578146899100389&ev=ALL_ALL_PAGE_WFHomepage&cd[currency]=USD&cd[value]=0.00&cd[Product]=&cd[Subproduct]=&cd[PageID]=&cd[customer_status]=n&cd[customer_type]=&dpo=LDU&dpoco=0&dpost=0 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr?id=1578146899100389&ev=ALL_ALL_PAGE_WFHomepage&cd[currency]=USD&cd[value]=0.00&cd[Product]=&cd[Subproduct]=&cd[PageID]=&cd[customer_status]=n&cd[customer_type]=&dpo=LDU&dpoco=0&dpost=0 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/identity/idl?pid=1317 HTTP/1.1Host: api.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=da61659a-abde-48a3-9419-2c57a11180c1 HTTP/1.1Host: adobedc.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=u4QNUHNh+jyNu8TIFBT3QA5Dr3exK+TQt3MHZUf1EPLBYZtSzM+L6okkoOgL/hHDws/ZLlrT5QZKM+38OhSYqglMZDWzJ5L1Pg2I5oBiVZiOinoH/bF+wVkMfzG4/pOEaTDL8Zwvvkc5kk/qs+LAKJAqXj1o2dT0XOIZli4LzDis
Source: global traffic	HTTP traffic detected: GET /event?d_dil_ver=9.5&_ts=1711631946944 HTTP/1.1Host: wellsfargobankna.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378; wellsfargobankna=33955380241426191774167127150413392378
Source: global traffic	HTTP traffic detected: GET /activityi;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? HTTP/1.1Host: 2549153.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/identity/idl?pid=1317 HTTP/1.1Host: api.rlcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr?id=1578146899100389&ev=ALL_ALL_PAGE_WFHomepage&cd[currency]=USD&cd[value]=0.00&cd[Product]=&cd[Subproduct]=&cd[PageID]=&cd[customer_status]=n&cd[customer_type]=&dpo=LDU&dpoco=0&dpost=0 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CIDN4PKFl4UDFaYKdgYd4tUFzw;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? HTTP/1.1Host: 2549153.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? HTTP/1.1Host: 2549153.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=YHbe1QUbihmucrQUO4JHIhcvVKBYP9uvN93z7Jh2hmdz1OBH+ibtv/Hg4A878ll+XjPj6vVKpdnbbUDar8zMkVyiU6WPgPPOl6idk5rQ6HlWVxQSXP58X2Q+H0EKsHmmHsxqYWZ0akz09MH6AF3bzfQwuFgRCjkpkxGO3g8nR4HI
Source: global traffic	HTTP traffic detected: GET /activityi;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? HTTP/1.1Host: 2549153.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CJeLjfOFl4UDFd0VdgYdAnwNgA;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? HTTP/1.1Host: 2549153.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CIDN4PKFl4UDFaYKdgYd4tUFzw;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=2c4120a6-8cbe-4983-b2ed-45670688b5d0&sn=1&cfg&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTG=2+craBM2NpGCqcUbcDHLWPK+sG+yERLLGemAr0XIShbTBoWTEijRwz35pUj+/UNc4JTlKa/+SR0oMqJVnq42l6hffJv3LGAiMcB+WND/2J/CUnCf2Sx97Yoy8XJJd0uKVvSqSYXgQcwxzrZCcyCJIFV9QDVLNfwnBPAT2DOxM46G; ROUTEID=.cligate1; AWSALBTGCORS=WtKY4zlHlqFjN7rysBcOeV/yyvkeg122+ahi6KwZXrAH9N2dSW1d9U4AOAOLb+hkwaAa9PrYyhO0AhE484Tfth3Rwss3zcu8MuaOMNsNHjiIYAHratWJ8GSPbcCc1e5zKeMSZl8s6h+5YiIDNurcxWofoZQNh/lOScfbtycUDuzf
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTG=2+craBM2NpGCqcUbcDHLWPK+sG+yERLLGemAr0XIShbTBoWTEijRwz35pUj+/UNc4JTlKa/+SR0oMqJVnq42l6hffJv3LGAiMcB+WND/2J/CUnCf2Sx97Yoy8XJJd0uKVvSqSYXgQcwxzrZCcyCJIFV9QDVLNfwnBPAT2DOxM46G; ROUTEID=.cligate1; AWSALBTGCORS=AMI00pYZBUblZN/9Bmi01p9YmJm1D86di5Z+/tSUvQrT+Do6gGLWzNb3mOfrnPZy1F7wNiB8iXbsuPsRF0FsxlM49Tlvar0qAFXr062Qb8Pjp8LyUCCKxVGwPzwplpy0UJsBy3SdMnv5SW+lNMtkB404Hc/qsMPMYA5leo16EQaE
Source: global traffic	HTTP traffic detected: GET /tr?id=1578146899100389&ev=ALL_ALL_PAGE_WFHomepage&cd[currency]=USD&cd[value]=0.00&cd[Product]=&cd[Subproduct]=&cd[PageID]=&cd[customer_status]=n&cd[customer_type]=&dpo=LDU&dpoco=0&dpost=0 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? HTTP/1.1Host: 2549153.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=f134fe53-5091-456a-be12-2dea853e8e15 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=5afea92c-2d16-47bb-bad5-3f8c2691ab16 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=900cd0b2-1c9d-47f7-a525-63111b62e5d0 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=317314e2-8dae-44f3-9162-d4a17bf67080 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=f2e33ec7-add7-4d65-bbc5-35397cba5374 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=8acba3f7-0ecc-4bd9-9f1e-c9ed2fbea068 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=6440b9bb-94c9-403c-a3ca-18f1176e2355&sn=1&cfg&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTG=2+craBM2NpGCqcUbcDHLWPK+sG+yERLLGemAr0XIShbTBoWTEijRwz35pUj+/UNc4JTlKa/+SR0oMqJVnq42l6hffJv3LGAiMcB+WND/2J/CUnCf2Sx97Yoy8XJJd0uKVvSqSYXgQcwxzrZCcyCJIFV9QDVLNfwnBPAT2DOxM46G; ROUTEID=.cligate1; AWSALBTGCORS=AMI00pYZBUblZN/9Bmi01p9YmJm1D86di5Z+/tSUvQrT+Do6gGLWzNb3mOfrnPZy1F7wNiB8iXbsuPsRF0FsxlM49Tlvar0qAFXr062Qb8Pjp8LyUCCKxVGwPzwplpy0UJsBy3SdMnv5SW+lNMtkB404Hc/qsMPMYA5leo16EQaE
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CLmiqfOFl4UDFXYQdgYdkywNxA;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? HTTP/1.1Host: 2549153.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/984436569/?random=1711631950119&cv=9&fst=1711631950119&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&hn=www.google.com&async=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/984436569/?random=1711631950134&cv=9&fst=1711631950134&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&hn=www.google.com&async=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CJeLjfOFl4UDFd0VdgYdAnwNgA;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? HTTP/1.1Host: 2549153.fls.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmzR0RneqXpgK8jsl51yer659bGIN36iFghAMYuq2FOXzc75hwX8SIWlTs2360
Source: global traffic	HTTP traffic detected: GET /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=70366921-0956-4540-aa73-5cb5ec2194d8 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CIDN4PKFl4UDFaYKdgYd4tUFzw;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=6440b9bb-94c9-403c-a3ca-18f1176e2355&sn=2&cfg=fc5c7ded&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=nwJqqH9Ar9RMzhM+CVdB5MVlivpFTLyOqvF2z2H3vRNDGuqNdT2JV7yQoeopyp1D0f6+7J92L+Ds4yNXbVW+l++RkgRlskErU4mRLbTVg8khY08gXp1HbGTrFZHP9VsuPc12ysIOc3HM/FvqzTt417j51KgYNWyWfLZsdwqX6ZUQ; AWSALBTGCORS=IrLpZ6muAXj+6QxA21qqt5qwYK+npptdL7BOv67jLJqieOCepZmv26elFwK0JO5V0EDZ/3BqHZ2iuZU2Ebto5W4jJQbJvb63ftw9jGSfEjc+lO9/KY66xnE8uzCpxyqJZGwKM+jefEr/AJt4wIx+5PZkNhRszaQ/Xk8Fqe6zWjT8
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CJqRxPOFl4UDFUc1dgYdYJsNTA;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? HTTP/1.1Host: 2549153.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmzR0RneqXpgK8jsl51yer659bGIN36iFghAMYuq2FOXzc75hwX8SIWlTs2360
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CLmiqfOFl4UDFXYQdgYdkywNxA;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984436569/?random=1711631950119&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&async=1&is_vtc=1&cid=CAQSKQB7FLtqwzXszmaXi0QUEjOcY3Wmdb1eUOmwgNG_8BJ2ZvlgCks6MA78&random=1285347098&resp=GooglemKTybQhCsO HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984436569/?random=1711631950134&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&async=1&is_vtc=1&cid=CAQSKQB7FLtqM5DLuAhk7bpblogvOuSpfhIyx29EWpc_8gvuaFbCRK6Erxyt&random=2498095841&resp=GooglemKTybQhCsO HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j92&tid=UA-107148943-1&cid=1511061535.1711631950&jid=329816228&_u=4GBACUAKBAAAAC~&z=1637724088 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j92&tid=UA-107148943-1&cid=1511061535.1711631950&jid=329816228&gjid=1416060457&_gid=1102582973.1711631950&_u=4GBACUAKBAAAAC~&z=1774189394 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
Source: global traffic	HTTP traffic detected: GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M50 HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M51 HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CJqRxPOFl4UDFUc1dgYdYJsNTA;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? HTTP/1.1Host: 2549153.fls.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CLmiqfOFl4UDFXYQdgYdkywNxA;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984436569/?random=1711631950119&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&async=1&is_vtc=1&cid=CAQSKQB7FLtqwzXszmaXi0QUEjOcY3Wmdb1eUOmwgNG_8BJ2ZvlgCks6MA78&random=1285347098&resp=GooglemKTybQhCsO HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984436569/?random=1711631950134&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&async=1&is_vtc=1&cid=CAQSKQB7FLtqM5DLuAhk7bpblogvOuSpfhIyx29EWpc_8gvuaFbCRK6Erxyt&random=2498095841&resp=GooglemKTybQhCsO HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j92&tid=UA-107148943-1&cid=1511061535.1711631950&jid=329816228&_u=4GBACUAKBAAAAC~&z=1637724088 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M50 HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M51 HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ADRUM_BTa=R:0\|g:cf73cecd-03b7-4433-bd6d-aa614a05eb2e\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; SameSite=None; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631952330
Source: global traffic	HTTP traffic detected: GET /javascript/highlight.js HTTP/1.1Host: cdn.schemaapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javascript/schemaFunctions.min.js HTTP/1.1Host: cdn.schemaapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /highlighter/prod/WellsFargo/v2/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20 HTTP/1.1Host: cdn.schemaapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonx-account-id: WellsFargosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36x-api-key: XPJKP-GI7DG-FVNWZ-45W51sec-ch-ua-platform: "Windows"Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WellsFargo/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20vbG9jYXRvci8 HTTP/1.1Host: data.schemaapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36x-api-key: XPJKP-GI7DG-FVNWZ-45W51sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WellsFargo/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20vbG9jYXRvci8 HTTP/1.1Host: data.schemaapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /highlighter/prod/WellsFargo/v2/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20 HTTP/1.1Host: cdn.schemaapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:655094f0-114a-41e4-b1a4-241f3f5a24f9\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631954486
Source: global traffic	HTTP traffic detected: GET /api/identity/idl?pid=1317 HTTP/1.1Host: api.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /event?c_app_id=WWW&c_page_type=BROWSER&c_page_id=locator&c_customer_type=&c_customer_status=n&c_product_code=&c_subproduct_code=&c_offer_id=&c_event_type=load&c_referrer=&d_cid=113287%011120240328061851126288949&c_sub_channel=&c_vendor_code=&c_offertype= HTTP/1.1Host: wellsfargobankna.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378; wellsfargobankna=33955380241426191774167127150413392378
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=2c4120a6-8cbe-4983-b2ed-45670688b5d0&sn=2&cfg=201c2b80&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=ZjWKT+8Fkk3op7T5ER8g2Roa8xMrJeHfrA97tpr8/drhe/bX0sB+JIObmlyBPvygTYR1UcOWirwivU5GZ8rl8WXW4W+LKBA1KycNXx3MdIAwfdYIF4IhSexXV2CRGj12TuthSAsRQx9zwJaX0YZql13AX27SeLuGUkigKNJ11zME; AWSALBTGCORS=ryqEN0/ykBuFSjdJEwecY/JrIo8XBk2qWAhr+acfgxo4vXDm28wo7Y45EUV4jnk7ZMfsDzxKMFu+QekCzN2ZT3a+cWou/Hq1xmvoDJR9I7/0AWdfO3D9coEZzKamveGyDzb7vPgLHXUOqlK2HAOp9nB8SVHh5vTjQjtG3DLGUsPy
Source: global traffic	HTTP traffic detected: GET /event?c_app_id=WWW&c_page_type=BROWSER&c_page_id=locator&c_customer_type=&c_customer_status=n&c_product_code=&c_subproduct_code=&c_offer_id=&c_event_type=load&c_referrer=&d_cid=113287%011120240328061851126288949&c_sub_channel=&c_vendor_code=&c_offertype= HTTP/1.1Host: wellsfargobankna.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378; wellsfargobankna=33955380241426191774167127150413392378
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=2c4120a6-8cbe-4983-b2ed-45670688b5d0&sn=3&cfg=fc5c7ded&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=ZjWKT+8Fkk3op7T5ER8g2Roa8xMrJeHfrA97tpr8/drhe/bX0sB+JIObmlyBPvygTYR1UcOWirwivU5GZ8rl8WXW4W+LKBA1KycNXx3MdIAwfdYIF4IhSexXV2CRGj12TuthSAsRQx9zwJaX0YZql13AX27SeLuGUkigKNJ11zME; AWSALBTGCORS=ryqEN0/ykBuFSjdJEwecY/JrIo8XBk2qWAhr+acfgxo4vXDm28wo7Y45EUV4jnk7ZMfsDzxKMFu+QekCzN2ZT3a+cWou/Hq1xmvoDJR9I7/0AWdfO3D9coEZzKamveGyDzb7vPgLHXUOqlK2HAOp9nB8SVHh5vTjQjtG3DLGUsPy
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/984436569/?label=N133CNyD82gQ2Z611QM&guid=ON&script=0&ct_cookie_present=false&random=927088412&sscte=1&crd=COG9sQIIucGxAgiXwbECIgEBQAE&pscrd=CJuR3quMpaT6QCITCN2xx_iFl4UDFXyKdwEdC9EK5jICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI6G2h0dHBzOi8vd3d3LndlbGxzZmFyZ28uY29tLw HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=6440b9bb-94c9-403c-a3ca-18f1176e2355&sn=3&cfg=201c2b80&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=rQ48TzPw8I/cejpkjSRoWjOMAQCc4h6Ht8zXHZp4ySU09lHKynfDJMs0smsJY8yGin0Vb5kem7P24HSa3zGEfJpufCdz+pSUv9EvCHmeeeehhvTXnqxK1G1mzuJIecUflW4Wg8YuUM7M1p67suZh/q05VAObTKwikrqT261YSuiu; AWSALBTGCORS=rQ48TzPw8I/cejpkjSRoWjOMAQCc4h6Ht8zXHZp4ySU09lHKynfDJMs0smsJY8yGin0Vb5kem7P24HSa3zGEfJpufCdz+pSUv9EvCHmeeeehhvTXnqxK1G1mzuJIecUflW4Wg8YuUM7M1p67suZh/q05VAObTKwikrqT261YSuiu
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/984436569/?label=N133CNyD82gQ2Z611QM&guid=ON&script=0&ct_cookie_present=false&random=927088412&sscte=1&crd=COG9sQIIucGxAgiXwbECIgEBQAE&pscrd=CJuR3quMpaT6QCITCN2xx_iFl4UDFXyKdwEdC9EK5jICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI6G2h0dHBzOi8vd3d3LndlbGxzZmFyZ28uY29tLw&is_vtc=1&cid=CAQSKQB7FLtqp_2qh1HgAbcX-xWI9UcuLryhv9bdVGexJxB2NaPj49XgyynX&random=562625253 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=wellsfargo_adh&google_hm=MTUxMTA2MTUzNS4xNzExNjMxOTUw&_rnd=0.7952115751210573 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=8AhmFclZYBbKjWXIesK9LxhC1ASo9bBnT6c2B6XjcyK8Q01Tx+XDtWgvA2mjDcWITgVFoeo9zTF6W7xIXArThxCdBhkfq0+WZ2NLn0tg24/iUDTizFsuKhoY3kmdbjh/yS95XsbW2Pevh7Bp51bJeASbigCN3s2JkIKmeb37Je2W
Source: global traffic	HTTP traffic detected: GET /activityi;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F? HTTP/1.1Host: 2549153.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CK6Ts_mFl4UDFREVdgYd2PIHKw;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F? HTTP/1.1Host: 2549153.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=6440b9bb-94c9-403c-a3ca-18f1176e2355&sn=4&cfg=fc5c7ded&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=8AhmFclZYBbKjWXIesK9LxhC1ASo9bBnT6c2B6XjcyK8Q01Tx+XDtWgvA2mjDcWITgVFoeo9zTF6W7xIXArThxCdBhkfq0+WZ2NLn0tg24/iUDTizFsuKhoY3kmdbjh/yS95XsbW2Pevh7Bp51bJeASbigCN3s2JkIKmeb37Je2W; AWSALBTGCORS=tdk3VzhzFOKtIgimMSPbyViI/cV0XTHQFN2ETwYhvERMVm3NmVtSWV0CQMQPM/hlbqmTD2yJRk3Y7Gya98XZrIskKLObq0mDx4d/kUkhlfdM7KR8XdaGly+qfTp07V1c/qfi3iXbV4+OAe//F+m9YJNxNgyH3+hnaTEAmql7pho2
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=8AhmFclZYBbKjWXIesK9LxhC1ASo9bBnT6c2B6XjcyK8Q01Tx+XDtWgvA2mjDcWITgVFoeo9zTF6W7xIXArThxCdBhkfq0+WZ2NLn0tg24/iUDTizFsuKhoY3kmdbjh/yS95XsbW2Pevh7Bp51bJeASbigCN3s2JkIKmeb37Je2W; AWSALBTGCORS=tdk3VzhzFOKtIgimMSPbyViI/cV0XTHQFN2ETwYhvERMVm3NmVtSWV0CQMQPM/hlbqmTD2yJRk3Y7Gya98XZrIskKLObq0mDx4d/kUkhlfdM7KR8XdaGly+qfTp07V1c/qfi3iXbV4+OAe//F+m9YJNxNgyH3+hnaTEAmql7pho2
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/984436569/?label=N133CNyD82gQ2Z611QM&guid=ON&script=0&ct_cookie_present=false&random=927088412&sscte=1&crd=COG9sQIIucGxAgiXwbECIgEBQAE&pscrd=CJuR3quMpaT6QCITCN2xx_iFl4UDFXyKdwEdC9EK5jICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI6G2h0dHBzOi8vd3d3LndlbGxzZmFyZ28uY29tLw&is_vtc=1&cid=CAQSKQB7FLtqp_2qh1HgAbcX-xWI9UcuLryhv9bdVGexJxB2NaPj49XgyynX&random=562625253 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /activityi;register_conversion=1;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F? HTTP/1.1Host: 2549153.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
Source: global traffic	HTTP traffic detected: GET /pixel?google_gm=AMnCDooB--uE3qqwM60W-aFIvHRoCOUhU6Ul6HroemNjvvKfJVwxfqQOG2V4li17-b9TX64bRRCx9kEPSj-5RJKKu2ZKwmFKSFf6TCRlcnlLlDJOmPbZ5BU HTTP/1.1Host: fcmatch.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:d9807aaa-c012-41fc-ad58-c5c96987ab65\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631958811
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CNKJ2fmFl4UDFfUy-QAdsh4LIQ;register_conversion=1;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F? HTTP/1.1Host: 2549153.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CK6Ts_mFl4UDFREVdgYd2PIHKw;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pixel?google_gm=AMnCDooB--uE3qqwM60W-aFIvHRoCOUhU6Ul6HroemNjvvKfJVwxfqQOG2V4li17-b9TX64bRRCx9kEPSj-5RJKKu2ZKwmFKSFf6TCRlcnlLlDJOmPbZ5BU HTTP/1.1Host: fcmatch.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wi/config/.json HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=c40b8a92-02fa-456b-ae31-ce3345e2ea42 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/984436569/?random=1711631963095&cv=9&fst=1711631963095&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F&ref=null&tiba=ATM%20and%20Bank%20Locations%20-%20Find%20Wells%20Fargo%20Bank%20and%20ATM%20Locations&hn=www.google.com&async=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CNKJ2fmFl4UDFfUy-QAdsh4LIQ;register_conversion=1;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F? HTTP/1.1Host: 2549153.fls.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
Source: global traffic	HTTP traffic detected: GET /wi/config/.json HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CK6Ts_mFl4UDFREVdgYd2PIHKw;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=2aba2bf0-2f1f-4c0d-856d-97df1acdd718 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984436569/?random=1711631963095&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F&ref=null&tiba=ATM%20and%20Bank%20Locations%20-%20Find%20Wells%20Fargo%20Bank%20and%20ATM%20Locations&async=1&is_vtc=1&cid=CAQSKQB7FLtq9dorHPZrAhU_zAc-Mdz_9Wyb2P8MCvCMkamBp_7erbHNCtHB&random=3949320223&resp=GooglemKTybQhCsO HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984436569/?random=1711631963095&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F&ref=null&tiba=ATM%20and%20Bank%20Locations%20-%20Find%20Wells%20Fargo%20Bank%20and%20ATM%20Locations&async=1&is_vtc=1&cid=CAQSKQB7FLtq9dorHPZrAhU_zAc-Mdz_9Wyb2P8MCvCMkamBp_7erbHNCtHB&random=3949320223&resp=GooglemKTybQhCsO HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /WellsFargo/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20vYWJvdXQv HTTP/1.1Host: data.schemaapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36x-api-key: XPJKP-GI7DG-FVNWZ-45W51sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /event?c_app_id=WWW&c_page_type=BROWSER&c_page_id=about&c_customer_type=&c_customer_status=n&c_product_code=&c_subproduct_code=&c_offer_id=&c_event_type=load&c_referrer=&d_cid=113287%011120240328061851126288949&c_sub_channel=&c_vendor_code=&c_offertype= HTTP/1.1Host: wellsfargobankna.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378; wellsfargobankna=33955380241426191774167127150413392378
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=wellsfargo_adh&google_hm=MTUxMTA2MTUzNS4xNzExNjMxOTUw&_rnd=0.2042591020981015 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=+4boTYi90yEn3KkYfEbYRcjnylQ/A9NermyVlD6n31NuzkFzgbxcqS2jm6xQzZPL6FWQIOJRF6VlLqteR0isEyKdCwB277R8Hg8m2PDdt8FQqBjWPd0IKd6uUz78NsxKGHntKLTXbQY+cRlSiTM3+BowUpmeHMaB6T3/5lZKGXpy
Source: global traffic	HTTP traffic detected: GET /wdcusprem/57907/onsite/onsiteData.json HTTP/1.1Host: resources.digital-cloud-prem.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WellsFargo/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20vYWJvdXQv HTTP/1.1Host: data.schemaapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_gm=AMnCDoqLmwev_v-dJR_RIm72duWb2y5tEqtm9i_436YxdwOxcVKacGuMPfkTZpOD_GyNbJGCvB4JpMmyKKgrCnYTxDxmc2WCHepVzjCY_rGduhqxSXWQvxA HTTP/1.1Host: fcmatch.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=+4boTYi90yEn3KkYfEbYRcjnylQ/A9NermyVlD6n31NuzkFzgbxcqS2jm6xQzZPL6FWQIOJRF6VlLqteR0isEyKdCwB277R8Hg8m2PDdt8FQqBjWPd0IKd6uUz78NsxKGHntKLTXbQY+cRlSiTM3+BowUpmeHMaB6T3/5lZKGXpy; AWSALBTGCORS=LE7ypjLm6rLk3Rk4AAKEx4oj6a2gOu+wCtKtrT51LVqxztMKshc7DBoR3tSdEOysrF5L0jy0dPwWXMyIGOAA6rohZW8nT1ij121fdWLp/V3MG0FVIeLVS3RM/p9sO28KdVWEwhRO8KS4OOkLEE9BkL7wXbY/cJEJoln65Eep4Jny
Source: global traffic	HTTP traffic detected: GET /event?c_app_id=WWW&c_page_type=BROWSER&c_page_id=about&c_customer_type=&c_customer_status=n&c_product_code=&c_subproduct_code=&c_offer_id=&c_event_type=load&c_referrer=&d_cid=113287%011120240328061851126288949&c_sub_channel=&c_vendor_code=&c_offertype= HTTP/1.1Host: wellsfargobankna.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378; wellsfargobankna=33955380241426191774167127150413392378
Source: global traffic	HTTP traffic detected: GET /wdcusprem/57907/onsite/onsiteData.json HTTP/1.1Host: resources.digital-cloud-prem.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "f911470fe0e560afcc355e2b7c2d14e0"If-Modified-Since: Wed, 27 Mar 2024 18:29:51 GMT
Source: global traffic	HTTP traffic detected: GET /wdcusprem/57907/onsite/onsiteData.json HTTP/1.1Host: resources.digital-cloud-prem.medallia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1Host: udc-neb.kampyle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_gm=AMnCDoqLmwev_v-dJR_RIm72duWb2y5tEqtm9i_436YxdwOxcVKacGuMPfkTZpOD_GyNbJGCvB4JpMmyKKgrCnYTxDxmc2WCHepVzjCY_rGduhqxSXWQvxA HTTP/1.1Host: fcmatch.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/984436569/?random=1711631966857&cv=9&fst=1711631966857&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Fabout%2F&ref=null&tiba=About%20Wells%20Fargo&hn=www.google.com&async=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
Source: global traffic	HTTP traffic detected: GET /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=f9ab8551-492e-489e-9017-87923a423d5d HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1Host: udc-neb.kampyle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=eyJldmVudHMiOiBbCiAgICB7InNlc3Npb25fc2NyZWVuX3NpemUiOiAiMTI4MHgxMDI0Iiwic2Vzc2lvbl9kdWEiOiAiTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2Iiwic2Vzc2lvbl9wbGF0Zm9ybSI6ICJXaW4zMiIsInBhZ2VfdGl0bGUiOiAiQWJvdXQgV2VsbHMgRmFyZ28iLCJwYWdlX3VybCI6ICJodHRwczovL3d3dy53ZWxsc2ZhcmdvLmNvbS9hYm91dC8iLCJ0cmFja2VyX3R5cGUiOiAiamF2YXNjcmlwdCIsInRyYWNrZXJfdmVyc2lvbiI6ICIyLjIuMjMiLCJldmVudF9uYW1lIjogIm5lYnVsYV9wYWdlX3ZpZXciLCJldmVudF90aW1lc3RhbXBfZXBvY2giOiAiMTcxMTYzMTk2NzM2MyIsImV2ZW50X3RpbWV6b25lX29mZnNldCI6IDEsInVzZXJfaWQiOiAiMThlODUzNzIwZTFhOS0wOTc3MWE4OTZiYjE2Yy0yNjAzMWU1MS0xNDAwMDAtMThlODUzNzIwZTMyZjgiLCJlbnZpcm9tZW50IjogImRpZ2l0YWwtY2xvdWQtdXMtcHJlbSIsImFjY291bnRJZCI6IDU3OTA1LCJ1cmwiOiAiaHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20vYWJvdXQvIiwid2Vic2l0ZUlkIjogNTc5MDcsImZvcm1JZCI6IG51bGwsImZvcm1UcmlnZ2VyVHlwZSI6IG51bGwsImthbXB5bGVfZGF0YSI6IHsibWRfaXNTdXJ2ZXlTdWJtaXR0ZWRJblNlc3Npb24iOiAiIiwiTEFTVF9JTlZJVEFUSU9OX1ZJRVciOiAiIiwiREVDTElORURfREFURSI6ICIiLCJrYW1weWxlSW52aXRlUHJlc2VudGVkIjogIiIsImthbXB5bGVfdXNlcmlkIjogIjQzOGQtMGE1Mi1mNDY0LTgxYzUtZTI4ZS1lOTBhLWNmNzktMTM1NSIsImthbXB5bGVVc2VyU2Vzc2lvbiI6ICIxNzExNjMxOTY3MzYwIiwia2FtcHlsZVVzZXJQZXJjZW50aWxlIjogIiIsIlNVQk1JVFRFRF9EQVRFIjogIiJ9LCJjb29raWVfc2l6ZSI6IDMwMDUsImthbXB5bGVfdmVyc2lvbiI6ICIyLjUzLjEiLCJvbnNpdGVfdmVyc2lvbiI6ICIyLjUzLjEiLCJoaXN0b3J5X2xlbmd0aCI6IDEsImV2ZW50X2xvY2FsX3RpbWVzdGFtcCI6IDE3MTE2MzE5NjczNjMsInBvc2l0aW9uIjogbnVsbCwiaXNVc2VySWRlbnRpZmllZCI6IGZhbHNlLCJwYWNrYWdlVmVyc2lvbiI6ICIyLjUzLjRfMjAyMzEyMTkyMjQxMDAifQpdfQ== HTTP/1.1Host: udc-neb.kampyle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wdcusprem/57907/onsite/onsiteData.json HTTP/1.1Host: resources.digital-cloud-prem.medallia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "f911470fe0e560afcc355e2b7c2d14e0"If-Modified-Since: Wed, 27 Mar 2024 18:29:51 GMT
Source: global traffic	HTTP traffic detected: GET /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=91ec6c7c-8196-4547-aa93-aae7a0c3b322 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984436569/?random=1711631966857&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Fabout%2F&ref=null&tiba=About%20Wells%20Fargo&async=1&is_vtc=1&cid=CAQSKQB7FLtqNwJNbOKCD8RWuHPVFqUby_9A18yf2qsu-oUA0HEXvCmokIXD&random=999063137&resp=GooglemKTybQhCsO HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track HTTP/1.1Host: udc-neb.kampyle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1Host: udc-neb.kampyle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1Host: udc-neb.kampyle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1Host: udc-neb.kampyle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984436569/?random=1711631966857&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Fabout%2F&ref=null&tiba=About%20Wells%20Fargo&async=1&is_vtc=1&cid=CAQSKQB7FLtqNwJNbOKCD8RWuHPVFqUby_9A18yf2qsu-oUA0HEXvCmokIXD&random=999063137&resp=GooglemKTybQhCsO HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:adb40a58-c631-4a90-a3cf-16274e4ce69c\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631964295
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:cdb8b227-8189-4ee7-98ab-dcfc84050def\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:4\|t:1711631970045
Source: global traffic	HTTP traffic detected: GET /api/identity/idl?pid=1317 HTTP/1.1Host: api.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /event?d_dil_ver=9.5&_ts=1711631972607 HTTP/1.1Host: wellsfargobankna.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378; wellsfargobankna=33955380241426191774167127150413392378
Source: global traffic	HTTP traffic detected: GET /api/identity/idl?pid=1317 HTTP/1.1Host: api.rlcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=403a3102-6806-4b08-ba29-c8d2c2b3d153&sn=1&cfg=fc5c7ded&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=0lXMS2tRKzWlkhkor7DnkTgliyyj/q9iF6fK+5gDlKQQ9W4eUb0DACI1KbugyuPTb/5T96staNzWzx9JWS6zrzenmGVd6YGE29xyPLtdHAU+d59kDgxyhYhm74b8X6HE5MKPKIXxYnIJJd6lQ+2DI/sXH3l0pNRJrm/AFAbd/ozQ; AWSALBTGCORS=mejjF97Yjy4e98r2HGWOMlE45r22R2UL0eDQThtYqnjdzVNv3/VWtRfhxI7qfr5h51vuEjLBSiHscjxpPD/NOj8+H4HOibtwnH+YNM2Fy25u3QWcRD0aPCl1xEPfUIyyQtSMQZHoY/Cu9KW02TsHVL4kkBsuc2z4neF0kIh/HVr9
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=403a3102-6806-4b08-ba29-c8d2c2b3d153&sn=2&cfg=fc5c7ded&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=0lXMS2tRKzWlkhkor7DnkTgliyyj/q9iF6fK+5gDlKQQ9W4eUb0DACI1KbugyuPTb/5T96staNzWzx9JWS6zrzenmGVd6YGE29xyPLtdHAU+d59kDgxyhYhm74b8X6HE5MKPKIXxYnIJJd6lQ+2DI/sXH3l0pNRJrm/AFAbd/ozQ; AWSALBTGCORS=mejjF97Yjy4e98r2HGWOMlE45r22R2UL0eDQThtYqnjdzVNv3/VWtRfhxI7qfr5h51vuEjLBSiHscjxpPD/NOj8+H4HOibtwnH+YNM2Fy25u3QWcRD0aPCl1xEPfUIyyQtSMQZHoY/Cu9KW02TsHVL4kkBsuc2z4neF0kIh/HVr9
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=403a3102-6806-4b08-ba29-c8d2c2b3d153&sn=3&cfg=fc5c7ded&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=FeShK3t/GqlbJ7Ba9Z9JfseYM6XM/8h8wwTYCJ9+RtdfROGfh2bYqaHrtF/60tTUbyfh4ESQiTECorjMnQm8WwNci8ByzWx/JJff3Ja0SC1yE4eNojsdHPwiJCVDMxjPZqmemvVLni899hlV18sQ/cwZH5ZvWqbx6p7V757RiOgf; AWSALBTGCORS=P+BkuOpiK3wPbQwm0HO3IDrlLyV5bJnvMWkZfkL4cGMZUFwSZUpoYiLkMLGBxdlYufz/hijBsR0tS/d47iZdYvI7ASVZ7R1R3pA8uj1K6vgsGsazit9nov/uFwTgD3RL6SbrCPtAV3VAgMyzJTr8vRLunBZO9X6TTRoqA4BQ7Bi/
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=tL8IdZ7QctA26s6msf+Ct4q6acoDx8QwSguP+Yrv1kSHTfY7Gy8OQcg2CtC31a557WObMJzjE+SKzMu7dTu+9SFsNtsMrcyUl1tmsvbB7Zw6zZbzp9iou6Hlrq2igxlEaUO1SJ3g30EfH54beuC5vNKGlotNS9Q3dBnz8/Zjz91B
Source: global traffic	HTTP traffic detected: GET /tr?id=1578146899100389&ev=CSBB_OLB_Secure_Login_PageView&cd[currency]=USD&cd[value]=0.00&cd[Product]=&cd[Subproduct]=&cd[PageID]=LOGIN&cd[CustomerType]=&cd[CustomerStatus]=n&dpo=LDU&dpoco=0&dpost=0&_rnd=0.06320417006807832 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://connect.secure.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=tL8IdZ7QctA26s6msf+Ct4q6acoDx8QwSguP+Yrv1kSHTfY7Gy8OQcg2CtC31a557WObMJzjE+SKzMu7dTu+9SFsNtsMrcyUl1tmsvbB7Zw6zZbzp9iou6Hlrq2igxlEaUO1SJ3g30EfH54beuC5vNKGlotNS9Q3dBnz8/Zjz91B; AWSALBTGCORS=oMQiGFmeeu1pJGGzpN6Dr1Q/OEWe0KYagxd0VjJFH7rl9Vx+Yamiz7nCEaOwngTKE59WSilCwc2VT9rK1VxEZU7NB6R+DJx3WLbxxW6Q7LwzwQcaNuScSJg5oXX8ob0MmPoF45+LsV9a+N/nB14CEuUO5yGM2e8APC8QP9XLA3HD
Source: global traffic	HTTP traffic detected: GET /ddm/activity/src=2549153;type=allv40;cat=all_a012;u1=1120240328061851126288949;u4=LOGIN;u5=n;u8=loginapp;u11=PROD;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ord=7018165804944.119? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://connect.secure.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
Source: global traffic	HTTP traffic detected: GET /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=7d57ee8f-2442-4298-8218-7b4c8f4a5dd2 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=9fa406fb-8541-4a53-bdc9-8d711b8258a5&sn=1&cfg=201c2b80&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=tL8IdZ7QctA26s6msf+Ct4q6acoDx8QwSguP+Yrv1kSHTfY7Gy8OQcg2CtC31a557WObMJzjE+SKzMu7dTu+9SFsNtsMrcyUl1tmsvbB7Zw6zZbzp9iou6Hlrq2igxlEaUO1SJ3g30EfH54beuC5vNKGlotNS9Q3dBnz8/Zjz91B; AWSALBTGCORS=oMQiGFmeeu1pJGGzpN6Dr1Q/OEWe0KYagxd0VjJFH7rl9Vx+Yamiz7nCEaOwngTKE59WSilCwc2VT9rK1VxEZU7NB6R+DJx3WLbxxW6Q7LwzwQcaNuScSJg5oXX8ob0MmPoF45+LsV9a+N/nB14CEuUO5yGM2e8APC8QP9XLA3HD
Source: global traffic	HTTP traffic detected: GET /activityi;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F? HTTP/1.1Host: 2549153.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
Source: global traffic	HTTP traffic detected: GET /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=097b5d70-c89b-4f9f-a889-04c866fba6b7 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/activity/src=2549153;dc_pre=CP-j74KGl4UDFVMRdgYdAY4ITg;type=allv40;cat=all_a012;u1=1120240328061851126288949;u4=LOGIN;u5=n;u8=loginapp;u11=PROD;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ord=7018165804944.119? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://connect.secure.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CNn08IKGl4UDFSgVdgYdKtkJ0A;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F? HTTP/1.1Host: 2549153.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
Source: global traffic	HTTP traffic detected: GET /activityi;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F? HTTP/1.1Host: 2549153.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=2549153;dc_pre=CP-j74KGl4UDFVMRdgYdAY4ITg;type=allv40;cat=all_a012;u1=1120240328061851126288949;u4=LOGIN;u5=n;u8=loginapp;u11=PROD;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ord=7018165804944.119 HTTP/1.1Host: adservice.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://connect.secure.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CNn08IKGl4UDFSgVdgYdKtkJ0A;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /wi/config/.json HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://connect.secure.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://connect.secure.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/984436569/?random=1711631984110&cv=9&fst=1711631984110&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Servicios%20Financieros%20y%20Banca%20por%20Internet&hn=www.google.com&async=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CJeJmIOGl4UDFeQTdgYdGREMTA;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F? HTTP/1.1Host: 2549153.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=9fa406fb-8541-4a53-bdc9-8d711b8258a5&sn=2&cfg=fc5c7ded&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=24viyQUey6YTZz9SWxEieya961hYXIRGXIBxCPovcIH06JO2IEJ6+4s3XCOv13reAyFgZ2aCidcTELM2fCEy69RcGir1p4HfQlDSi70hCg0ZGlQQ2fb73MH6To5SO6mKVg66uzE4d1W+4SzjZam/xoepGNYWlv8Lqr+UMZSI7ORu; AWSALBTGCORS=LsfCmqyogN6p6UtsclHvvgD5JXLA3pYqqS3Wdti156uedjEss4rPgU2Om3igFpRY5nLvy4Yv/6jrWorjApqtFdS7ZGWZz+DI5upamT8uR3rkoLjHN2ojB57jLkGiR2xrB6zt4t5bUXIJox9yRkDCWnW2Qe8Yjsy8xJDCVxPe9MOH
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=2c4120a6-8cbe-4983-b2ed-45670688b5d0&sn=4&cfg=201c2b80&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=24viyQUey6YTZz9SWxEieya961hYXIRGXIBxCPovcIH06JO2IEJ6+4s3XCOv13reAyFgZ2aCidcTELM2fCEy69RcGir1p4HfQlDSi70hCg0ZGlQQ2fb73MH6To5SO6mKVg66uzE4d1W+4SzjZam/xoepGNYWlv8Lqr+UMZSI7ORu; AWSALBTGCORS=LsfCmqyogN6p6UtsclHvvgD5JXLA3pYqqS3Wdti156uedjEss4rPgU2Om3igFpRY5nLvy4Yv/6jrWorjApqtFdS7ZGWZz+DI5upamT8uR3rkoLjHN2ojB57jLkGiR2xrB6zt4t5bUXIJox9yRkDCWnW2Qe8Yjsy8xJDCVxPe9MOH
Source: global traffic	HTTP traffic detected: GET /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=f9969528-fe00-4a85-9056-cebe4b4a3f85 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=82f6936a-61e1-4489-83e1-f802151ff0cd HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZD&msg=Assert%20fail%3A%20M50 HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://connect.secure.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZD&msg=Assert%20fail%3A%20M51 HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://connect.secure.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984436569/?random=1711631984110&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Servicios%20Financieros%20y%20Banca%20por%20Internet&async=1&is_vtc=1&cid=CAQSKQB7FLtq8cmscni_Vrr3VC7eBE-4YZJi1Rp-uBv1qnBtlVUWNkR-abHs&random=3080437878&resp=GooglemKTybQhCsO HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=9fa406fb-8541-4a53-bdc9-8d711b8258a5&sn=3&cfg=fc5c7ded&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=RTEYEnNcGjCmxyuIm9NQLJVpcnvByaG6OrYxhJXJeaxf8F5cYiK8jkC6AdjmeIPWZLfskNdw3zvcMWr9upXC0LqrBcpqi2euxMbaaX0h61gn1MKEYzvGLHaf4SqyP32ah/nG82IwYJi+pwWsujW5/ZmZGqfEirPHWatDNLZTXRRj; AWSALBTGCORS=RTEYEnNcGjCmxyuIm9NQLJVpcnvByaG6OrYxhJXJeaxf8F5cYiK8jkC6AdjmeIPWZLfskNdw3zvcMWr9upXC0LqrBcpqi2euxMbaaX0h61gn1MKEYzvGLHaf4SqyP32ah/nG82IwYJi+pwWsujW5/ZmZGqfEirPHWatDNLZTXRRj
Source: global traffic	HTTP traffic detected: GET /tr?id=1578146899100389&ev=CSBB_OLB_Secure_Login_PageView&cd[currency]=USD&cd[value]=0.00&cd[Product]=&cd[Subproduct]=&cd[PageID]=LOGIN&cd[CustomerType]=&cd[CustomerStatus]=n&dpo=LDU&dpoco=0&dpost=0&_rnd=0.06320417006807832 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=45f46bb8-25cb-4b71-83f6-d999b86f87f4&sn=1&cfg=201c2b80&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=RTEYEnNcGjCmxyuIm9NQLJVpcnvByaG6OrYxhJXJeaxf8F5cYiK8jkC6AdjmeIPWZLfskNdw3zvcMWr9upXC0LqrBcpqi2euxMbaaX0h61gn1MKEYzvGLHaf4SqyP32ah/nG82IwYJi+pwWsujW5/ZmZGqfEirPHWatDNLZTXRRj; AWSALBTGCORS=RTEYEnNcGjCmxyuIm9NQLJVpcnvByaG6OrYxhJXJeaxf8F5cYiK8jkC6AdjmeIPWZLfskNdw3zvcMWr9upXC0LqrBcpqi2euxMbaaX0h61gn1MKEYzvGLHaf4SqyP32ah/nG82IwYJi+pwWsujW5/ZmZGqfEirPHWatDNLZTXRRj
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=403a3102-6806-4b08-ba29-c8d2c2b3d153&sn=4&cfg=201c2b80&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=RTEYEnNcGjCmxyuIm9NQLJVpcnvByaG6OrYxhJXJeaxf8F5cYiK8jkC6AdjmeIPWZLfskNdw3zvcMWr9upXC0LqrBcpqi2euxMbaaX0h61gn1MKEYzvGLHaf4SqyP32ah/nG82IwYJi+pwWsujW5/ZmZGqfEirPHWatDNLZTXRRj; AWSALBTGCORS=RTEYEnNcGjCmxyuIm9NQLJVpcnvByaG6OrYxhJXJeaxf8F5cYiK8jkC6AdjmeIPWZLfskNdw3zvcMWr9upXC0LqrBcpqi2euxMbaaX0h61gn1MKEYzvGLHaf4SqyP32ah/nG82IwYJi+pwWsujW5/ZmZGqfEirPHWatDNLZTXRRj
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:a8df1606-5095-4f73-b978-a2a7710d5b72\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631972003
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CNn08IKGl4UDFSgVdgYdKtkJ0A;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CJeJmIOGl4UDFeQTdgYdGREMTA;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F? HTTP/1.1Host: 2549153.fls.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZD&msg=Assert%20fail%3A%20M50 HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:a8df1606-5095-4f73-b978-a2a7710d5b72\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631972003
Source: global traffic	HTTP traffic detected: GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZD&msg=Assert%20fail%3A%20M51 HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:a8df1606-5095-4f73-b978-a2a7710d5b72\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631972003
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984436569/?random=1711631984110&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Servicios%20Financieros%20y%20Banca%20por%20Internet&async=1&is_vtc=1&cid=CAQSKQB7FLtq8cmscni_Vrr3VC7eBE-4YZJi1Rp-uBv1qnBtlVUWNkR-abHs&random=3080437878&resp=GooglemKTybQhCsO HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:5da4e83e-e6d9-4808-82e3-5d09213116f7\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631986238
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/984436569/?random=1711631986884&cv=9&fst=1711631986884&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent%3Forigin%3Dcob%26LOB%3DCONS&tiba=Inicie%20sesi%C3%B3n%20para%20ver%20sus%20cuentas%20personales%20%7C%20Wells%20Fargo&hn=www.google.com&async=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://connect.secure.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984436569/?random=1711631986884&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent%3Forigin%3Dcob%26LOB%3DCONS&tiba=Inicie%20sesi%C3%B3n%20para%20ver%20sus%20cuentas%20personales%20%7C%20Wells%20Fargo&async=1&is_vtc=1&cid=CAQSKQB7FLtq9lany4GR9CtYjT6o-53gwdlTAU-fiNp_pm27b6paBKJ-zMZP&random=3270536526&resp=GooglemKTybQhCsO HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://connect.secure.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984436569/?random=1711631986884&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent%3Forigin%3Dcob%26LOB%3DCONS&tiba=Inicie%20sesi%C3%B3n%20para%20ver%20sus%20cuentas%20personales%20%7C%20Wells%20Fargo&async=1&is_vtc=1&cid=CAQSKQB7FLtq9lany4GR9CtYjT6o-53gwdlTAU-fiNp_pm27b6paBKJ-zMZP&random=3270536526&resp=GooglemKTybQhCsO HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=9fa406fb-8541-4a53-bdc9-8d711b8258a5&sn=4&cfg=201c2b80&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=uTjHMLaLxfjcAZ6RCPdCEtds2WtakOvISjUTWtC127mTH29h7LpTLZYGCS8EsDNa6jAdGhc2IMVbL6W59cHGcqZnBEYDlsFnaXhgd5ydeomcCfmi6kyMFiP56CDXwmnxCg0d62aEJYC8CjSM56/weC9aWZ6QjMSUljUhAM0bN/sI; AWSALBTGCORS=eLZHPBFb2ABev389ZVSZbJuWhRuBDqugH7G72CrFu1NsI4yZk2oPvzpqGtZq92gUOxkh4t5vhKTpU7Xx0hxAJi1M0t4PeOu2RoHC/XZAq/ZLnxSLFFNoaahTu8gv8qAkscKrdrXF4HXFToMqZEBa4WXFzbcaeJ4Nbkd+KVX3CFAL
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://connect.secure.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://connect.secure.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=uTjHMLaLxfjcAZ6RCPdCEtds2WtakOvISjUTWtC127mTH29h7LpTLZYGCS8EsDNa6jAdGhc2IMVbL6W59cHGcqZnBEYDlsFnaXhgd5ydeomcCfmi6kyMFiP56CDXwmnxCg0d62aEJYC8CjSM56/weC9aWZ6QjMSUljUhAM0bN/sI
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=TnF5e2rMlbmJeFh0q/iOQI4TwDwmf+cUtBRWDB9A8ZctjRW9kcKUVjmFaZJrqDC4JMnaUUiwgEcjZ8RBuMdGriHOBSbjXjkYjXZ+rWAFsDMDRRkxf5SpUoC/bwfXnYgndJXwI2jsqOpXYIq4j9GpG34dV3BZ6p1ioe/O7ZqkR8C2; AWSALBTGCORS=4WPX5g9CiMDGu9PxQQ4C/Gd9eatsWm7QOj34v2hA49IlIctPgqyJuuNAbn4DqHs6jlbZS0sxEgtoz6xTXHAVuNycZFWzIa3VtwUkZOWIVDFHZb45NiDIvxwVTM89CfnsE8RuePxZ97Xu6Ci2F7mdmhR5K5LoDaiva4OUcu0FvRGW
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=45f46bb8-25cb-4b71-83f6-d999b86f87f4&sn=2&cfg=fc5c7ded&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=uaQV2bRN6pwy39tpBnciYeNP1bEOL7l624cAHhaoMgIeiqiSvpezKqCqqIGtC44D2R0qSiFX9zo7j5W0Woj51nQf4Jt+t69QS217naXWqnva5hetVFkIYQUzgUeVlAvU48O3+p1MQ4Qma3mMJnoQw5ASuBgfsADNHtFEE8CGv7uT; AWSALBTGCORS=AKYdH/RKmPhDsJixdujGjmv6fi0Lnb3qJFGACUQtT2JzBFMUabTQv1Y68v++g1tlfDDQCNjlIbYFfoOWyiSfUFiGnQmZEXvmj6mhrqsvVVzBtSTLl57EOhcD4WbDhv6HON0P2/IsycXnc/B0Rl/GByMjXkjA8821oXT4gik7l9Mn
Source: global traffic	HTTP traffic detected: GET /wdcusprem/57907/onsite/onsiteData.json HTTP/1.1Host: resources.digital-cloud-prem.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://connect.secure.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://connect.secure.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "f911470fe0e560afcc355e2b7c2d14e0"If-Modified-Since: Wed, 27 Mar 2024 18:29:51 GMT
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:b14d05b9-5eab-4a43-8130-c3727d83728a\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631986995
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=45f46bb8-25cb-4b71-83f6-d999b86f87f4&sn=3&cfg=fc5c7ded&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=bZQ/tK7tydwGf95VdJbmQZurKeYoR8CoaVIN6qcMA2+uxqJGRy40T9I0vZRKYxHOvTEKkWcLvv3jjY69Rf9280xmcR6DQRXwpUeE68XSdM9G3x4Cy0lfMxirNOLh4eS/czb78h2fCbNaboYLxu47Djs5ewVpeBB+W6JQycISteeP; AWSALBTGCORS=1nneZpH7XEp7tcubFMweCig3Zpwyi8Yj0gyDbRMnKI8eAXi+d73HL155+NlJ2v5VKU6jtPx3GfK7ldx8pDkzS1Rup3BIX82/uHyL2c69EaCXQQPv+qW3TZodeiMnRp+Aplt6bvGoVGeLbCDxvXsruyFeJ620qfDSW5TYjRWfGXNg
Source: global traffic	HTTP traffic detected: GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1Host: udc-neb.kampyle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://connect.secure.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wdcusprem/57907/onsite/onsiteData.json HTTP/1.1Host: resources.digital-cloud-prem.medallia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "f911470fe0e560afcc355e2b7c2d14e0"If-Modified-Since: Wed, 27 Mar 2024 18:29:51 GMT
Source: global traffic	HTTP traffic detected: GET /v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track HTTP/1.1Host: udc-neb.kampyle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=eyJldmVudHMiOiBbCiAgICB7InNlc3Npb25fc2NyZWVuX3NpemUiOiAiMTI4MHgxMDI0Iiwic2Vzc2lvbl9kdWEiOiAiTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2Iiwic2Vzc2lvbl9wbGF0Zm9ybSI6ICJXaW4zMiIsInBhZ2VfdGl0bGUiOiAiSW5pY2llIHNlc2nDs24gcGFyYSB2ZXIgc3VzIGN1ZW50YXMgcGVyc29uYWxlcyB8IFdlbGxzIEZhcmdvIiwicGFnZV91cmwiOiAiaHR0cHM6Ly9jb25uZWN0LnNlY3VyZS53ZWxsc2ZhcmdvLmNvbS9hdXRoL2xvZ2luL3ByZXNlbnQ/b3JpZ2luPWNvYiZMT0I9Q09OUyIsInRyYWNrZXJfdHlwZSI6ICJqYXZhc2NyaXB0IiwidHJhY2tlcl92ZXJzaW9uIjogIjIuMi4yMyIsImV2ZW50X25hbWUiOiAibmVidWxhX3BhZ2VfdmlldyIsImV2ZW50X3RpbWVzdGFtcF9lcG9jaCI6ICIxNzExNjMxOTg5OTgzIiwiZXZlbnRfdGltZXpvbmVfb2Zmc2V0IjogMSwidXNlcl9pZCI6ICIxOGU4NTM3N2IwMTVjZS0wOWE2M2JhODM4NTk5YS0yNjAzMWU1MS0xNDAwMDAtMThlODUzNzdiMDI3NzIiLCJlbnZpcm9tZW50IjogImRpZ2l0YWwtY2xvdWQtdXMtcHJlbSIsImFjY291bnRJZCI6IDU3OTA1LCJ1cmwiOiAiaHR0cHM6Ly9jb25uZWN0LnNlY3VyZS53ZWxsc2ZhcmdvLmNvbS9hdXRoL2xvZ2luL3ByZXNlbnQ/b3JpZ2luPWNvYiZMT0I9Q09OUyIsIndlYnNpdGVJZCI6IDU3OTA3LCJmb3JtSWQiOiBudWxsLCJmb3JtVHJpZ2dlclR5cGUiOiBudWxsLCJrYW1weWxlX2RhdGEiOiB7Im1kX2lzU3VydmV5U3VibWl0dGVkSW5TZXNzaW9uIjogIiIsIkxBU1RfSU5WSVRBVElPTl9WSUVXIjogIiIsIkRFQ0xJTkVEX0RBVEUiOiAiIiwia2FtcHlsZUludml0ZVByZXNlbnRlZCI6ICIiLCJrYW1weWxlX3VzZXJpZCI6ICI1NTgzLWFhNzAtNWFmOS1mMmQ2LWQ0MTYtMGU3MS1jYzNhLTE3OWIiLCJrYW1weWxlVXNlclNlc3Npb24iOiAiMTcxMTYzMTk4OTk3NyIsImthbXB5bGVVc2VyUGVyY2VudGlsZSI6ICIiLCJTVUJNSVRURURfREFURSI6ICIifSwiY29va2llX3NpemUiOiAzMjM1LCJrYW1weWxlX3ZlcnNpb24iOiAiMi41My4xIiwib25zaXRlX3ZlcnNpb24iOiAiMi41My4xIiwiaGlzdG9yeV9sZW5ndGgiOiAxLCJldmVudF9sb2NhbF90aW1lc3RhbXAiOiAxNzExNjMxOTg5OTgzLCJwb3NpdGlvbiI6IG51bGwsImlzVXNlcklkZW50aWZpZWQiOiBmYWxzZSwicGFja2FnZVZlcnNpb24iOiAiMi41My40XzIwMjMxMjE5MjI0MTAwIn0KXX0= HTTP/1.1Host: udc-neb.kampyle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=6440b9bb-94c9-403c-a3ca-18f1176e2355&sn=5&cfg=201c2b80&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=PwmyLZ2gQlUoG9gX17GRxEwUQA75bAuYLKerwEvo/PaAF8D1s15L2tzMIVyWk+VO9AvZdCSDY3oqxtOuaEalVmd0Uzo723e5Qyflcvqiu+wA/8W/6v3ZMWO4mzvfHEGrwZe52lnt58q4SX07ftzq5DScuh9qw2MkoeOijC2n8fiS; AWSALBTGCORS=NBA3Ex6M3lxKudvTnFT/UTgjjf2oZGck+AmQV7TOkd9JVgaTvRyDa8GscHVdt09Fk74Bnuk8M6SfGpkMtEdaeh7bkVT0xFsf7zNkbJ/hHAq6+W+EOeYLJEpZqlAobMjRluLvYII2xPpv83kw6lcutyJlQZad/f7K/L5nP2WUtkNx
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZD/adrum HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:d46a70e9-e7a3-4744-864f-de3922c41ef8\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:4\|t:1711631990745
Source: global traffic	HTTP traffic detected: GET /api/identity/idl?pid=1317 HTTP/1.1Host: api.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=9fa406fb-8541-4a53-bdc9-8d711b8258a5&sn=5&cfg=fc5c7ded&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=jXXDU0DwO6w9ZjUGmtU7sQkyXSh/KVWiL26rpBBDSeazW5oQU4NIx7ZBW530i2ercos5IDBN0KNKm7IxSc1l3Q5/lgeMTFHV2vq0uGk282trmXYhf2TfHAyA6NpyZ18tCAw1+s4gf4SwcHb7sWRlZ+Z0dA89Vofck3rR/qu2orH1; AWSALBTGCORS=WVQwzGTPC7fNQ7hJFDRV9t7jRxdtuxQWmvR6E9du/yfALXjNrb8Uj6M4UQlzZaGjnOrv4eNeVrRAIu3mHu4/e5y7VHvSKYuhhbWI4gQ4cP3IkdYv2uHDcnhUcp+CLLAh6ElOCWvhFYwxl51bkwahMLkQqXUAh/IEr/a9sjkvHYer
Source: global traffic	HTTP traffic detected: GET /api/identity/idl?pid=1317 HTTP/1.1Host: api.rlcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:a3097cd2-090d-401c-ad0b-1ccb5aeae2cd\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:7\|t:1711631992672
Source: global traffic	HTTP traffic detected: GET /WellsFargo/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20vZXMvY2hlY2tpbmcv HTTP/1.1Host: data.schemaapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36x-api-key: XPJKP-GI7DG-FVNWZ-45W51sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WellsFargo/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20vZXMvY2hlY2tpbmcv HTTP/1.1Host: data.schemaapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=a77f2f58-57ce-4d1c-8339-460310ea325a&sn=1&cfg&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=oHmod1rVfccMBs7n4JczAASJWlsheOYD9G9dSpyAqkiJ4ylAfKShv1IJFX4W9Cwn6IWmg+1OhuQP2tsLZYfBwssUL2N817v42Ybph+cbQ1v9ur1/DxFMgUh/yAEs5DdGqqvXk+AWFsV+9jTmaZSIYy/7+Mo4BPvAEgSJuw4LnHTi; AWSALBTGCORS=uZyLDb4pIAh65zzVLil/PIgOmZ09P5WNP4G1TT2XhJN7eN1XCGbELyBSFF7QY9UV4OaRLhl9e0PKc6beF4m7CTKAJ7Q/kG42KiE9ugLwJDz+KVwduJo/aOprDxM5QYXrbtCWNd4qYbHzMBbxTT2LmlB0lHBLSsjYDDGahQRYvKpy
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=a77f2f58-57ce-4d1c-8339-460310ea325a&sn=2&cfg&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=oHmod1rVfccMBs7n4JczAASJWlsheOYD9G9dSpyAqkiJ4ylAfKShv1IJFX4W9Cwn6IWmg+1OhuQP2tsLZYfBwssUL2N817v42Ybph+cbQ1v9ur1/DxFMgUh/yAEs5DdGqqvXk+AWFsV+9jTmaZSIYy/7+Mo4BPvAEgSJuw4LnHTi; AWSALBTGCORS=JIErQW5QRrK4/NC/DNObaAguwTh1L/Aiuskn1djyi516hvwz2nDwoZCzuTrbMayncsk9t/UVqY38o1Z3RaZnUBzK+MYhHG47Hs4k+u1DCUdb5+crdgLn3pOzriCqeVYjeMT0y5aLZyOkZz247dUxP2oD+cGxpmJ86Lm4NhQR3Re7
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=wellsfargo_adh&google_hm=MTUxMTA2MTUzNS4xNzExNjMxOTUw&_rnd=0.528690021422805 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=a77f2f58-57ce-4d1c-8339-460310ea325a&sn=3&cfg=fc5c7ded&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=5dw9iknX8DmiJwsLoN7qebn4l1nviRZss/RdUV+VuFIWubnjRDyBO3X/k+P23T0sgbHpirV1ovmxL8hbCgqs2Ve+SLtFI6QcDLPvtPFYgE7uYMFFacDQXmL2sIrkuKQZ7gdjiiN+94/jm0pNw/jhAz4/3HN4+Hw0ADmFMVbObYp+; AWSALBTGCORS=/ZECdzSbMSa/lpZktC2ecA9htHU/1K/OcYhoQy9G3kP3LF6jVDSyi8MAgs3ETOqntmWHQUiARiqGB8+O/AG39bs+b//3BOF3v5I7acHWEsITE3HlPMjOnATebKZxbzEDsnTMQNzWGbMS3Y1NTbw8nlAVmkIhrTm1ZHoQ8KTmrPqd
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.2.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=0&d_mid=33918683021254472264168527825999287273&d_coop_unsafe=1&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&ts=1711631999701 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/984436569/?random=1711632000084&cv=9&fst=1711632000084&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&eid=376635470&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2Fchecking%2F&ref=null&tiba=Cuentas%20de%20cheques%3A%20abra%20una%20cuenta%20por%20Internet%20hoy%20mismo%20%7C%20Wells%20Fargo&hn=www.google.com&async=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_gm=AMnCDoppDmysQ0EwfuNyQisMDHjame1guHW2IIS6dxbAtlz8vxAtRDbqlIDtd545bq7TMCLXhLhdtkZoEea-6Rnwh-iv5AqzvhNWr7G3wxfANPyDUkwwgNk HTTP/1.1Host: fcmatch.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.2.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=0&d_mid=33918683021254472264168527825999287273&d_coop_unsafe=1&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&ts=1711631999701 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: wellsfargobankna.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378; wellsfargobankna=33955380241426191774167127150413392378
Source: global traffic	HTTP traffic detected: GET /wi/config/.json HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984436569/?random=1711632000084&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&eid=376635470&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2Fchecking%2F&ref=null&tiba=Cuentas%20de%20cheques%3A%20abra%20una%20cuenta%20por%20Internet%20hoy%20mismo%20%7C%20Wells%20Fargo&async=1&is_vtc=1&cid=CAQSKQB7FLtq9aGoUrlj6bBo2oPEvRqEL3w-tCAkG6FQ7Hc3MjC6klj22g1B&random=680170720&resp=GooglemKTybQhCsO HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=b482a243-3b29-434a-81f1-7ba1202c8c7c HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_gm=AMnCDoppDmysQ0EwfuNyQisMDHjame1guHW2IIS6dxbAtlz8vxAtRDbqlIDtd545bq7TMCLXhLhdtkZoEea-6Rnwh-iv5AqzvhNWr7G3wxfANPyDUkwwgNk HTTP/1.1Host: fcmatch.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZgVuWQAAA9eF_wAm&d_uuid=33955380241426191774167127150413392378 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9211132908&aam=33955380241426191774167127150413392378 HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wellsfargobankna.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/984436569/?random=1711632000084&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&eid=376635470&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2Fchecking%2F&ref=null&tiba=Cuentas%20de%20cheques%3A%20abra%20una%20cuenta%20por%20Internet%20hoy%20mismo%20%7C%20Wells%20Fargo&async=1&is_vtc=1&cid=CAQSKQB7FLtq9aGoUrlj6bBo2oPEvRqEL3w-tCAkG6FQ7Hc3MjC6klj22g1B&random=680170720&resp=GooglemKTybQhCsO HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=a6d541f2-f16a-487d-a378-34648a735afe HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /365868.gif?partner_uid=33955380241426191774167127150413392378 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wellsfargobankna.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZgVuWQAAA9eF_wAm&d_uuid=33955380241426191774167127150413392378 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=MzM5NTUzODAyNDE0MjYxOTE3NzQxNjcxMjcxNTA0MTMzOTIzNzg= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wellsfargobankna.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=9uw/F0p2GcTqCr9i30d7NihK7jz3x75pXcnhOYZ//v/3/5WySMDMc9zt4oMvjJs8TvURzJ3J+su76c4Luo+ZQd0sa0K3VIlYeenFaqG4/kdyU4yF4oUzEa8gGu3v7aNhzQB9FUZpsMrxFjU+Lfj3SUiY9SopgYlBT491Ugy2jJkW
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=21&dpuuid=213680604835005188846 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wellsfargobankna.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CKyqFhIxCi0IARCYEhomMzM5NTUzODAyNDE0MjYxOTE3NzQxNjcxMjcxNTA0MTMzOTIzNzgQABoNCILdlbAGEgUI6AcQAEIASgA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wellsfargobankna.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=HQrpMtAwzAkzrW2kfU9apE/NWjNTVN5fP4Qe7CFCrSk=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=ADOBE&_hosted_id=33955380241426191774167127150413392378&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wellsfargobankna.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=9uw/F0p2GcTqCr9i30d7NihK7jz3x75pXcnhOYZ//v/3/5WySMDMc9zt4oMvjJs8TvURzJ3J+su76c4Luo+ZQd0sa0K3VIlYeenFaqG4/kdyU4yF4oUzEa8gGu3v7aNhzQB9FUZpsMrxFjU+Lfj3SUiY9SopgYlBT491Ugy2jJkW; AWSALBTGCORS=9CT8jNK2RQrU81kDqO7dz0Iv54LdFD9HeAZ259YUQ9znSFPunQWI0jcPT/CEH3ece88LZkZL+VuWKxGYSI/UearT0tlKBRUBEdP4cw6DBQqWUTDfdnCKX/bXcj3lgGYq7Yr4NSzR2k8bcDEgW8nM8rjplKXgxpnQV9duzofowW2N
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=771&dpuuid=CAESEAYXrBaGbqB6HFcPdhpHR7g&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wellsfargobankna.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1957&dpuuid=375E6F2E0D8F6B9C2CEB7C8E098F6DFE HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wellsfargobankna.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=21&dpuuid=213680604835005188846 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399; dpm=33955380241426191774167127150413392378
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=bf3583479cfa2b30b4765233abf108d3347eb75cc59033dc0445efe44ff670a9b0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wellsfargobankna.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399; dpm=33955380241426191774167127150413392378
Source: global traffic	HTTP traffic detected: GET /ups/58782/cms?partner_id=ADOBE&_hosted_id=33955380241426191774167127150413392378&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wellsfargobankna.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIJuBWYCEPb8U-CJH60GQy4IhOZlKpkFEgEBAQHABmYPZtxI0iMA_eMAAA&S=AQAAAhyf74IaX1jvls8UIM27QZU
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=771&dpuuid=CAESEAYXrBaGbqB6HFcPdhpHR7g&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399; dpm=33955380241426191774167127150413392378
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1957&dpuuid=375E6F2E0D8F6B9C2CEB7C8E098F6DFE HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399; dpm=33955380241426191774167127150413392378
Source: global traffic	HTTP traffic detected: GET /wdcusprem/57907/onsite/onsiteData.json HTTP/1.1Host: resources.digital-cloud-prem.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "f911470fe0e560afcc355e2b7c2d14e0"If-Modified-Since: Wed, 27 Mar 2024 18:29:51 GMT
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=bf3583479cfa2b30b4765233abf108d3347eb75cc59033dc0445efe44ff670a9b0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399; dpm=33955380241426191774167127150413392378
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=30646?dpuuid=y-13al3Z5E2pE8CkorAJgl6rqMyZb7QOVtPr4-~A HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wellsfargobankna.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399; dpm=33955380241426191774167127150413392378
Source: global traffic	HTTP traffic detected: GET /event?d_dil_ver=9.5&_ts=1711632001776 HTTP/1.1Host: wellsfargobankna.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378; wellsfargobankna=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399
Source: global traffic	HTTP traffic detected: GET /sg/adobe/1/cm?gdpr=0&gdpr_consent= HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wellsfargobankna.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wdcusprem/57907/onsite/onsiteData.json HTTP/1.1Host: resources.digital-cloud-prem.medallia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "f911470fe0e560afcc355e2b7c2d14e0"If-Modified-Since: Wed, 27 Mar 2024 18:29:51 GMT
Source: global traffic	HTTP traffic detected: GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=eyJldmVudHMiOiBbCiAgICB7InNlc3Npb25fc2NyZWVuX3NpemUiOiAiMTI4MHgxMDI0Iiwic2Vzc2lvbl9kdWEiOiAiTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2Iiwic2Vzc2lvbl9wbGF0Zm9ybSI6ICJXaW4zMiIsInBhZ2VfdGl0bGUiOiAiQ3VlbnRhcyBkZSBjaGVxdWVzOiBhYnJhIHVuYSBjdWVudGEgcG9yIEludGVybmV0IGhveSBtaXNtbyB8IFdlbGxzIEZhcmdvIiwicGFnZV91cmwiOiAiaHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20vZXMvY2hlY2tpbmcvIiwidHJhY2tlcl90eXBlIjogImphdmFzY3JpcHQiLCJ0cmFja2VyX3ZlcnNpb24iOiAiMi4yLjIzIiwiZXZlbnRfbmFtZSI6ICJuZWJ1bGFfcGFnZV92aWV3IiwiZXZlbnRfdGltZXN0YW1wX2Vwb2NoIjogIjE3MTE2MzIwMDI1ODMiLCJldmVudF90aW1lem9uZV9vZmZzZXQiOiAxLCJ1c2VyX2lkIjogIjE4ZTg1MzcyMGUxYTktMDk3NzFhODk2YmIxNmMtMjYwMzFlNTEtMTQwMDAwLTE4ZTg1MzcyMGUzMmY4IiwiZW52aXJvbWVudCI6ICJkaWdpdGFsLWNsb3VkLXVzLXByZW0iLCJhY2NvdW50SWQiOiA1NzkwNSwidXJsIjogImh0dHBzOi8vd3d3LndlbGxzZmFyZ28uY29tL2VzL2NoZWNraW5nLyIsIndlYnNpdGVJZCI6IDU3OTA3LCJmb3JtSWQiOiBudWxsLCJmb3JtVHJpZ2dlclR5cGUiOiBudWxsLCJrYW1weWxlX2RhdGEiOiB7Im1kX2lzU3VydmV5U3VibWl0dGVkSW5TZXNzaW9uIjogIiIsIkxBU1RfSU5WSVRBVElPTl9WSUVXIjogIiIsIkRFQ0xJTkVEX0RBVEUiOiAiIiwia2FtcHlsZUludml0ZVByZXNlbnRlZCI6ICIiLCJrYW1weWxlX3VzZXJpZCI6ICI0MzhkLTBhNTItZjQ2NC04MWM1LWUyOGUtZTkwYS1jZjc5LTEzNTUiLCJrYW1weWxlVXNlclNlc3Npb24iOiAiMTcxMTYzMjAwMjU4MSIsImthbXB5bGVVc2VyUGVyY2VudGlsZSI6ICIiLCJTVUJNSVRURURfREFURSI6ICIifSwiY29va2llX3NpemUiOiAzMDYxLCJrYW1weWxlX3ZlcnNpb24iOiAiMi41My4xIiwib25zaXRlX3ZlcnNpb24iOiAiMi41My4xIiwiaGlzdG9yeV9sZW5ndGgiOiAxLCJldmVudF9sb2NhbF90aW1lc3RhbXAiOiAxNzExNjMyMDAyNTgzLCJwb3NpdGlvbiI6IG51bGwsImlzVXNlcklkZW50aWZpZWQiOiBmYWxzZSwicGFja2FnZVZlcnNpb24iOiAiMi41My40XzIwMjMxMjE5MjI0MTAwIn0KXX0= HTTP/1.1Host: udc-neb.kampyle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=30646?dpuuid=y-13al3Z5E2pE8CkorAJgl6rqMyZb7QOVtPr4-~A HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378; dpm=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399\|147592-1-1711632002396
Source: global traffic	HTTP traffic detected: GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PYY&msg=Assert%20fail%3A%20M50 HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PYY&msg=Assert%20fail%3A%20M51 HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sg/adobe/1/cm?gdpr=0&gdpr_consent= HTTP/1.1Host: trc.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track HTTP/1.1Host: udc-neb.kampyle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1Host: udc-neb.kampyle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PYY&msg=Assert%20fail%3A%20M50 HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:6053aa53-4d25-47eb-a17f-8f18b55ab04f\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631998963
Source: global traffic	HTTP traffic detected: GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PYY&msg=Assert%20fail%3A%20M51 HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:6053aa53-4d25-47eb-a17f-8f18b55ab04f\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631998963
Source: global traffic	HTTP traffic detected: GET /dcm?pid=5c420d2b-f139-4fee-b0c0-89a7b8ce9433 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wellsfargobankna.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=5c420d2b-f139-4fee-b0c0-89a7b8ce9433&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wellsfargobankna.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A7MgQcTp30bjotxx8RJq0t8\|t
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PYY/adrum HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:6053aa53-4d25-47eb-a17f-8f18b55ab04f\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631998963
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=139200&dpuuid=ZLVBG9sATvitfmBaiM_67A&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dadobe.com%26id%3D%24%7BDD_UUID%7D HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wellsfargobankna.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378; dpm=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399\|147592-1-1711632002396\|139200-1-1711632003398
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=adobe.com&id=33955380241426191774167127150413392378 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wellsfargobankna.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A7MgQcTp30bjotxx8RJq0t8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=adobe.com&id=33955380241426191774167127150413392378 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A7MgQcTp30bjotxx8RJq0t8; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZD/adrum HTTP/1.1Host: pdx-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:017c87ea-3e99-46ce-b663-7d19688f8189\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:6\|t:1711632005246
Source: global traffic	HTTP traffic detected: GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=9fa406fb-8541-4a53-bdc9-8d711b8258a5&sn=6&cfg=201c2b80&pv=2&aid= HTTP/1.1Host: gbxreport-prod.wf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=s9LxfQIZszJLxGjE80XfDJbQWw8w3k9PNpV1A3+4xqajdOTFYOAO9VLh1TGyJfvOjHfm6iMKIOXa8slB5Hg+lo6kisMCeDrVFQThDm8Z3jky2pmtgP+4rkBB9hir4sF62t1OVU5qWie0COpcNGwdmTXSoYDM3klNg0mdthiK/TKP; AWSALBTGCORS=ePODO1rryhFUxvR+/Aeo3CWm2QBe15pif/ACruKvJbkqr3sgZ0s6yZUkYDiBU6XU9n7CwOwo5tZsQMiQmdIuZ3WRCSN53w+IPiFSlezhSE4dNo0DwGxJY7cLueUILVmA6fy/ZML1m77jbwdd41rzWeP01yyUEEqF+xqWa/G3L/kD

Source: chromecache_312.2.dr	String found in binary or memory: WF.Component.SocialShare={};WF.Component.SocialShare.Options={"VisibleWidgetItems":["Facebook","Twitter"],"PopupItems":["LinkedIn","email"],"ParameterSharingStyle":"listed","ParametersToShare":["hmc",],"ParametersToNeverShare":["utm_source",],"Shares":{"email":{"Name":{"en":"Email","es":"Correo electrónico"},"ShareUrl":"mailto:?body=EMAIL_BODY&subject=EMAIL_SUBJECT","ImageClass":"email","DataMrktTrackingId":"12b2dcff-4d31-4358-9b5a-2ef159e3e6ae","OldStyleImageClass":"c52email"},"Facebook":{"Name":{"en":"Facebook","es":"Facebook"},"ShareUrl":"http://www.facebook.com/sharer.php?u=(THIS_URL?ss=fb)&t=THIS_HEADER","ImageClass":"facebook","OldStyleImageClass":"c52fb","TrackingCodeShort":"fb","TrackingCodeLong":"facebook","OpenInLightbox":true,"DataMrktTrackingId":"3b21794e-c658-46f4-900f-297d992ea6f9","LightboxUrl":"/exit/social?site=facebook"},"Instagram":{"Name":{"en":"Instagram","es":"Instagram"},"ShareUrl":"/exit/social?site=INSTAGRAM_MAYBE","DataMrktTrackingId":"15b799cb-d9d5-40e4-8be9-087e890bdd0e","ImageClass":"instagram"},"LinkedIn":{"Name":{"en":"LinkedIn","es":"LinkedIn"},"ShareUrl":"http://www.linkedin.com/shareArticle?mini=true&ro=false&url=(THIS_URL?ss=ln)&summary=THIS_TITLE&title=THIS_TITLE&source=","ImageClass":"linkedin","OldStyleImageClass":"c52linkedin","TrackingCodeShort":"ln","DataMrktTrackingId":"63acf149-eab5-49f1-b8f2-2be026ec13ca","TrackingCodeLong":"linkedin"},"Pinterest":{"Name":{"en":"Pinterest","es":"Pinterest"},"ShareUrl":"/exit/social?site=PINTEREST_MAYBE","ImageClass":"pinterest"},"Twitter":{"Name":{"en":"Twitter","es":"Twitter"},"ShareUrl":"http://twitter.com/share?url=(THIS_URL?ss=tw)&text=Discover THIS_HEADER from Wells Fargo - ","ImageClass":"twitter","OldStyleImageClass":"c52twitter","TrackingCodeShort":"tw","TrackingCodeLong":"twitter","DataMrktTrackingId":"415a27d6-dd26-4063-8081-5196399dc4dd","OpenInLightbox":true,"LightboxUrl":"/exit/social?site=twitter"}},"Strings":{"BeginningOfPopup":{"en":"Beginning of popup","es":"Comienzo de ventana emergente"},"EndOfPopup":{"en":"End of popup","es":"Fin de ventana emergente"},"Share":{"en":"Share","es":"Comparta"},"DisclosureHeader":{"en":"Share this page","es":"Comparta esta página"},"DisclosureText":{"en":"Choose a link above. We provide these links to external websites for your convenience. Wells Fargo does not endorse and is not responsible for their content, links, privacy policies, or security policies.","es":"Seleccione uno de los enlaces electrónicos arriba. Para su conveniencia, le proporcionamos estos enlaces electrónicos a sitios de Internet externos. Wells Fargo no avala ni se hace responsable por el contenido, los enlaces electrónicos, las políticas de privacidad o las políticas de seguridad de esos sitios de Internet."},"EmailIntro":{"en":"Hi,\n\nI thought you'd be interested in this page I found on wellsfargo.com: \n\n","es":"Pens equals www.facebook.com (Facebook)
Source: chromecache_312.2.dr	String found in binary or memory: WF.Component.SocialShare={};WF.Component.SocialShare.Options={"VisibleWidgetItems":["Facebook","Twitter"],"PopupItems":["LinkedIn","email"],"ParameterSharingStyle":"listed","ParametersToShare":["hmc",],"ParametersToNeverShare":["utm_source",],"Shares":{"email":{"Name":{"en":"Email","es":"Correo electrónico"},"ShareUrl":"mailto:?body=EMAIL_BODY&subject=EMAIL_SUBJECT","ImageClass":"email","DataMrktTrackingId":"12b2dcff-4d31-4358-9b5a-2ef159e3e6ae","OldStyleImageClass":"c52email"},"Facebook":{"Name":{"en":"Facebook","es":"Facebook"},"ShareUrl":"http://www.facebook.com/sharer.php?u=(THIS_URL?ss=fb)&t=THIS_HEADER","ImageClass":"facebook","OldStyleImageClass":"c52fb","TrackingCodeShort":"fb","TrackingCodeLong":"facebook","OpenInLightbox":true,"DataMrktTrackingId":"3b21794e-c658-46f4-900f-297d992ea6f9","LightboxUrl":"/exit/social?site=facebook"},"Instagram":{"Name":{"en":"Instagram","es":"Instagram"},"ShareUrl":"/exit/social?site=INSTAGRAM_MAYBE","DataMrktTrackingId":"15b799cb-d9d5-40e4-8be9-087e890bdd0e","ImageClass":"instagram"},"LinkedIn":{"Name":{"en":"LinkedIn","es":"LinkedIn"},"ShareUrl":"http://www.linkedin.com/shareArticle?mini=true&ro=false&url=(THIS_URL?ss=ln)&summary=THIS_TITLE&title=THIS_TITLE&source=","ImageClass":"linkedin","OldStyleImageClass":"c52linkedin","TrackingCodeShort":"ln","DataMrktTrackingId":"63acf149-eab5-49f1-b8f2-2be026ec13ca","TrackingCodeLong":"linkedin"},"Pinterest":{"Name":{"en":"Pinterest","es":"Pinterest"},"ShareUrl":"/exit/social?site=PINTEREST_MAYBE","ImageClass":"pinterest"},"Twitter":{"Name":{"en":"Twitter","es":"Twitter"},"ShareUrl":"http://twitter.com/share?url=(THIS_URL?ss=tw)&text=Discover THIS_HEADER from Wells Fargo - ","ImageClass":"twitter","OldStyleImageClass":"c52twitter","TrackingCodeShort":"tw","TrackingCodeLong":"twitter","DataMrktTrackingId":"415a27d6-dd26-4063-8081-5196399dc4dd","OpenInLightbox":true,"LightboxUrl":"/exit/social?site=twitter"}},"Strings":{"BeginningOfPopup":{"en":"Beginning of popup","es":"Comienzo de ventana emergente"},"EndOfPopup":{"en":"End of popup","es":"Fin de ventana emergente"},"Share":{"en":"Share","es":"Comparta"},"DisclosureHeader":{"en":"Share this page","es":"Comparta esta página"},"DisclosureText":{"en":"Choose a link above. We provide these links to external websites for your convenience. Wells Fargo does not endorse and is not responsible for their content, links, privacy policies, or security policies.","es":"Seleccione uno de los enlaces electrónicos arriba. Para su conveniencia, le proporcionamos estos enlaces electrónicos a sitios de Internet externos. Wells Fargo no avala ni se hace responsable por el contenido, los enlaces electrónicos, las políticas de privacidad o las políticas de seguridad de esos sitios de Internet."},"EmailIntro":{"en":"Hi,\n\nI thought you'd be interested in this page I found on wellsfargo.com: \n\n","es":"Pens equals www.linkedin.com (Linkedin)
Source: chromecache_312.2.dr	String found in binary or memory: WF.Component.SocialShare={};WF.Component.SocialShare.Options={"VisibleWidgetItems":["Facebook","Twitter"],"PopupItems":["LinkedIn","email"],"ParameterSharingStyle":"listed","ParametersToShare":["hmc",],"ParametersToNeverShare":["utm_source",],"Shares":{"email":{"Name":{"en":"Email","es":"Correo electrónico"},"ShareUrl":"mailto:?body=EMAIL_BODY&subject=EMAIL_SUBJECT","ImageClass":"email","DataMrktTrackingId":"12b2dcff-4d31-4358-9b5a-2ef159e3e6ae","OldStyleImageClass":"c52email"},"Facebook":{"Name":{"en":"Facebook","es":"Facebook"},"ShareUrl":"http://www.facebook.com/sharer.php?u=(THIS_URL?ss=fb)&t=THIS_HEADER","ImageClass":"facebook","OldStyleImageClass":"c52fb","TrackingCodeShort":"fb","TrackingCodeLong":"facebook","OpenInLightbox":true,"DataMrktTrackingId":"3b21794e-c658-46f4-900f-297d992ea6f9","LightboxUrl":"/exit/social?site=facebook"},"Instagram":{"Name":{"en":"Instagram","es":"Instagram"},"ShareUrl":"/exit/social?site=INSTAGRAM_MAYBE","DataMrktTrackingId":"15b799cb-d9d5-40e4-8be9-087e890bdd0e","ImageClass":"instagram"},"LinkedIn":{"Name":{"en":"LinkedIn","es":"LinkedIn"},"ShareUrl":"http://www.linkedin.com/shareArticle?mini=true&ro=false&url=(THIS_URL?ss=ln)&summary=THIS_TITLE&title=THIS_TITLE&source=","ImageClass":"linkedin","OldStyleImageClass":"c52linkedin","TrackingCodeShort":"ln","DataMrktTrackingId":"63acf149-eab5-49f1-b8f2-2be026ec13ca","TrackingCodeLong":"linkedin"},"Pinterest":{"Name":{"en":"Pinterest","es":"Pinterest"},"ShareUrl":"/exit/social?site=PINTEREST_MAYBE","ImageClass":"pinterest"},"Twitter":{"Name":{"en":"Twitter","es":"Twitter"},"ShareUrl":"http://twitter.com/share?url=(THIS_URL?ss=tw)&text=Discover THIS_HEADER from Wells Fargo - ","ImageClass":"twitter","OldStyleImageClass":"c52twitter","TrackingCodeShort":"tw","TrackingCodeLong":"twitter","DataMrktTrackingId":"415a27d6-dd26-4063-8081-5196399dc4dd","OpenInLightbox":true,"LightboxUrl":"/exit/social?site=twitter"}},"Strings":{"BeginningOfPopup":{"en":"Beginning of popup","es":"Comienzo de ventana emergente"},"EndOfPopup":{"en":"End of popup","es":"Fin de ventana emergente"},"Share":{"en":"Share","es":"Comparta"},"DisclosureHeader":{"en":"Share this page","es":"Comparta esta página"},"DisclosureText":{"en":"Choose a link above. We provide these links to external websites for your convenience. Wells Fargo does not endorse and is not responsible for their content, links, privacy policies, or security policies.","es":"Seleccione uno de los enlaces electrónicos arriba. Para su conveniencia, le proporcionamos estos enlaces electrónicos a sitios de Internet externos. Wells Fargo no avala ni se hace responsable por el contenido, los enlaces electrónicos, las políticas de privacidad o las políticas de seguridad de esos sitios de Internet."},"EmailIntro":{"en":"Hi,\n\nI thought you'd be interested in this page I found on wellsfargo.com: \n\n","es":"Pens equals www.twitter.com (Twitter)
Source: chromecache_325.2.dr	String found in binary or memory: return a;};u.map={};u.extend=[function(a,b){try{if((b['app_id'].toString().toLowerCase()=='WWW'.toLowerCase()&&b['canonical_page_url'].toString().toLowerCase()=='/'.toLowerCase()&&b['device_type'].toString().toLowerCase()=='DESKTOP'.toLowerCase()&&b['page_type'].toString().toLowerCase()=='BROWSER'.toLowerCase())\|\|(b['app_id'].toString().toLowerCase()=='WWW'.toLowerCase()&&b['canonical_page_url'].toString().toLowerCase()=='/'.toLowerCase()&&b['device_type'].toString().toLowerCase()=='TABLET'.toLowerCase()&&b['page_type'].toString().toLowerCase()=='BROWSER'.toLowerCase())){b['fb_ev_value']='ALL_ALL_PAGE_WFHomepage';b['fb_id']='1578146899100389'}}catch(e){utag.DB(e);}},function(a,b){try{if((b['app_id'].toString().toLowerCase()=='WWW'.toLowerCase()&&b['canonical_page_url'].toString().toLowerCase()=='/'.toLowerCase()&&b['device_type'].toString().toLowerCase()=='MOBILE'.toLowerCase()&&b['page_type'].toString().toLowerCase()=='BROWSER'.toLowerCase())){b['fb_ev_value']='FrontPorchHomePage';b['fb_id']='1578146899100389'}}catch(e){utag.DB(e);}},function(a,b){try{if((b['app_id'].toString().toLowerCase()=='WWW'.toLowerCase()&&b['canonical_page_url'].toString().toLowerCase()=='/com/'.toLowerCase()&&b['page_type'].toString().toLowerCase()=='BROWSER'.toLowerCase())){b['fb_ev_value']='ALL_ALL_PAGE_WFCommercialHomepage';b['fb_id']='1578146899100389'}}catch(e){utag.DB(e);}}];u.send=function(a,b){if(u.ev[a]\|\|u.ev.all!==undefined){utag.DB("send:95");utag.DB(b);var c;u.t="@@";u.i=[];u.p=["//www.facebook.com/tr?id=@@fb_id@@&ev=@@fb_ev_value@@&cd[currency]=USD&cd[value]=0.00&cd[Product]=@@product_code@@&cd[Subproduct]=@@subproduct_code@@&cd[PageID]=@@page_id@@&cd[customer_status]=@@customer_status@@&cd[customer_type]=@@customer_type@@&dpo=LDU&dpoco=0&dpost=0","","","","","","",""];u.delim="";u.cachebust="disabled";u.cachevar=""\|\|"_rnd";for(c=0;c<u.extend.length;c++){try{d=u.extend[c](a,b);if(d==false)return}catch(e){}};if(!b.fb_ev_value)return false;for(c=0;c<u.p.length;c++){if(u.p[c]!=""){var x=u.rp(u.p[c],b);if(x!=""){if(u.cachebust=="enabled"&&x.indexOf(u.cachevar)<0){if(x.indexOf("?")<0){u.delim="?";}else{u.delim="&";} equals www.facebook.com (Facebook)
Source: chromecache_522.2.dr	String found in binary or memory: return a;};u.map={};u.extend=[function(a,b){try{if((b['customer_type'].toString().toLowerCase()=='BOB'.toLowerCase()&&b['app_id'].toString().toLowerCase()=='loginapp'.toLowerCase())){b['fb_id']='1578146899100389';b['fb_ev_value']='ALL_ALL_Page_LoginApp_BOB'}}catch(e){utag.DB(e);}},function(a,b){try{if((b['customer_type'].toString().toLowerCase()=='COB'.toLowerCase()&&b['app_id'].toString().toLowerCase()=='loginapp'.toLowerCase())){b['fb_id']='1578146899100389';b['fb_ev_value']='ALL_ALL_Page_LoginApp_COB'}}catch(e){utag.DB(e);}},function(a,b){try{if((b['customer_type'].toString().toLowerCase()=='TPB'.toLowerCase()&&b['app_id'].toString().toLowerCase()=='loginapp'.toLowerCase())){b['fb_id']='1578146899100389';b['fb_ev_value']='ALL_ALL_Page_LoginApp_TPB'}}catch(e){utag.DB(e);}},function(a,b){try{if((b['customer_type'].toString().toLowerCase()=='WFA'.toLowerCase()&&b['app_id'].toString().toLowerCase()=='loginapp'.toLowerCase())\|\|(b['customer_type'].toString().toLowerCase()=='PCG'.toLowerCase()&&b['app_id'].toString().toLowerCase()=='loginapp'.toLowerCase())){b['fb_id']='1578146899100389';b['fb_ev_value']='ALL_ALL_Page_LoginApp_WFA'}}catch(e){utag.DB(e);}},function(a,b){try{if((b['app_id'].toString().toLowerCase()=='loginapp'.toLowerCase()&&b['page_id'].toString().toLowerCase()=='SUREPAY_LOGIN'.toLowerCase())){b['fb_id']='1578146899100389';b['fb_ev_value']='online_banking_zelle_signon_pageload'}}catch(e){utag.DB(e);}},function(a,b){try{if((b['app_id'].toString().toLowerCase()=='loginapp'.toLowerCase()&&b['page_id'].toString().toLowerCase()=='SERVICETYPE_LOGIN'.toLowerCase())){b['fb_id']='1578146899100389';b['fb_ev_value']='DPG_Security_Thematic_Secure_LogIn_FB_PageView'}}catch(e){utag.DB(e);}},function(a,b){try{if((b['app_id'].toString().toLowerCase()=='loginapp'.toLowerCase()&&b['page_id'].toString().toLowerCase()=='SERVICETYPE_LOGIN'.toLowerCase()&&b['dom.query_string'].toString().toLowerCase().indexOf('serviceType=ZelleHub'.toLowerCase())>-1)){b['fb_id']='1578146899100389';b['fb_ev_value']='online_banking_zelle_signon_pageload'}}catch(e){utag.DB(e);}},function(a,b){try{if((b['app_id'].toString().toLowerCase()=='loginapp'.toLowerCase()&&b['page_id'].toString().toLowerCase()=='SERVICETYPE_LOGIN'.toLowerCase()&&b['dom.query_string'].toString().toLowerCase().indexOf('serviceType=makeTransfer'.toLowerCase())>-1)){b['fb_id']='1578146899100389';b['fb_ev_value']='CSBB_Transfer_Secure_Login_PageView'}}catch(e){utag.DB(e);}},function(a,b){try{if((b['app_id'].toString().toLowerCase()=='loginapp'.toLowerCase()&&b['page_id'].toString().toLowerCase()=='SERVICETYPE_LOGIN'.toLowerCase()&&b['dom.query_string'].toString().toLowerCase().indexOf('serviceType=CONTROL_TOWER'.toLowerCase())>-1)){b['fb_id']='1578146899100389';b['fb_ev_value']='CSBB_ControlTower_Secure_Login_PageView'}}catch(e){utag.DB(e);}},function(a,b){try{if((b['app_id'].toString().toLowerCase()=='loginapp'.toLowerCase()&&b['page_id'].toString().toLowerCase()=='SERVICETYPE_LOGIN'.toLowerCase()&&b['dom.
Source: chromecache_406.2.dr	String found in binary or memory: try{(function(id,loader,u){try{u=utag.o[loader].sender[id]={}}catch(e){u=utag.sender[id]};u.ev={'view':1};u.t='@@',u.i=[],u.p=["//www.facebook.com/tr?id=@@fb_id@@&ev=@@fb_ev_value@@&cd[currency]=USD&cd[value]=0.00&cd[Product]=@@product_code@@&cd[Subproduct]=@@subproduct_code@@&cd[PageID]=@@page_id@@&cd[CustomerType]=@@customer_type@@&cd[CustomerStatus]=@@customer_status@@&dpo=LDU&dpoco=0&dpost=0","","","","","","",""];u.cachebust="enabled";u.cachevar=""\|\|"_rnd";u.map={};u.extend=[function(a,b){try{if(b['canonical_page_url'].toString().toLowerCase()=='/savings-cds/'.toLowerCase()\|\|b['canonical_page_url'].toString().toLowerCase()=='/checking/'.toLowerCase()){b['fb_ev_value']='PageView';b['fb_id']='1578146899100389'}}catch(e){utag.DB(e);}},function(a,b){try{if((b['app_id'].toString().toLowerCase()=='WWW'.toLowerCase()&&b['canonical_page_url'].toString().toLowerCase()=='/mortgage/buying-a-house/'.toLowerCase())){b['fb_ev_value']='MTG_C_Page_Mortage_BuyingAHouseStart';b['fb_id']='1578146899100389'}}catch(e){utag.DB(e);}},function(a,b){try{if((b['app_id'].toString().toLowerCase()=='WWW'.toLowerCase()&&b['canonical_page_url'].toString().toLowerCase()=='/mortgage/'.toLowerCase())){b['fb_ev_value']='MTG_Mortgage_Homepage';b['fb_id']='1578146899100389'}}catch(e){utag.DB(e);}},function(a,b){try{if((b['app_id'].toString().toLowerCase()=='WWW'.toLowerCase()&&b['canonical_page_url'].toString().toLowerCase()=='/es/mortgage/'.toLowerCase())){b['fb_ev_value']='MTG_ALL_Page_Mortgage_SpanishHome';b['fb_id']='1578146899100389'}}catch(e){utag.DB(e);}}];u.send=function(a,b,c,d,e,f){if(u.ev[a]){for(c=0;c<u.extend.length;c++){try{d=u.extend[c](a,b);if(d==false)return}catch(e){}};if(!b.fb_ev_value)return false;for(c=0;c<u.p.length;c++){if(u.p[c]!=""){var x=u.rp(u.p[c],b);if(x!=""){if(u.cachebust=="enabled"&&x.indexOf("_rnd")<0){x+="&"+u.cachevar+"="+Math.random();} equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: www.wellsfargo.com

Source: unknown

HTTP traffic detected: POST /event?d_dil_ver=9.5&_ts=1711631938588 HTTP/1.1Host: wellsfargobankna.demdex.netConnection: keep-aliveContent-Length: 429sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: https://www.wellsfargo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.wellsfargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=33955380241426191774167127150413392378

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: da61659a-abde-48a3-9419-2c57a11180c1vary: Origindate: Thu, 28 Mar 2024 13:19:08 GMTx-konductor: N/Ax-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: f134fe53-5091-456a-be12-2dea853e8e15vary: Origindate: Thu, 28 Mar 2024 13:19:10 GMTx-konductor: N/Ax-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 317314e2-8dae-44f3-9162-d4a17bf67080vary: Origindate: Thu, 28 Mar 2024 13:19:10 GMTx-konductor: N/Ax-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 5afea92c-2d16-47bb-bad5-3f8c2691ab16vary: Origindate: Thu, 28 Mar 2024 13:19:10 GMTx-konductor: N/Ax-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 900cd0b2-1c9d-47f7-a525-63111b62e5d0vary: Origindate: Thu, 28 Mar 2024 13:19:10 GMTx-konductor: N/Ax-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: f2e33ec7-add7-4d65-bbc5-35397cba5374vary: Origindate: Thu, 28 Mar 2024 13:19:11 GMTx-konductor: N/Ax-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 8acba3f7-0ecc-4bd9-9f1e-c9ed2fbea068vary: Origindate: Thu, 28 Mar 2024 13:19:10 GMTx-konductor: N/Ax-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 70366921-0956-4540-aa73-5cb5ec2194d8vary: Origindate: Thu, 28 Mar 2024 13:19:10 GMTx-konductor: N/Ax-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: c40b8a92-02fa-456b-ae31-ce3345e2ea42vary: Origindate: Thu, 28 Mar 2024 13:19:24 GMTx-konductor: N/Ax-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 2aba2bf0-2f1f-4c0d-856d-97df1acdd718vary: Origindate: Thu, 28 Mar 2024 13:19:25 GMTx-konductor: N/Ax-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: f9ab8551-492e-489e-9017-87923a423d5dvary: Origindate: Thu, 28 Mar 2024 13:19:28 GMTx-konductor: N/Ax-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 91ec6c7c-8196-4547-aa93-aae7a0c3b322vary: Origindate: Thu, 28 Mar 2024 13:19:27 GMTx-konductor: N/Ax-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 7d57ee8f-2442-4298-8218-7b4c8f4a5dd2vary: Origindate: Thu, 28 Mar 2024 13:19:43 GMTx-konductor: N/Ax-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 097b5d70-c89b-4f9f-a889-04c866fba6b7vary: Origindate: Thu, 28 Mar 2024 13:19:43 GMTx-konductor: N/Ax-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: f9969528-fe00-4a85-9056-cebe4b4a3f85vary: Origindate: Thu, 28 Mar 2024 13:19:45 GMTx-konductor: N/Ax-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 82f6936a-61e1-4489-83e1-f802151ff0cdvary: Origindate: Thu, 28 Mar 2024 13:19:44 GMTx-konductor: N/Ax-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: b482a243-3b29-434a-81f1-7ba1202c8c7cvary: Origindate: Thu, 28 Mar 2024 13:20:00 GMTx-konductor: N/Ax-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: a6d541f2-f16a-487d-a378-34648a735afevary: Origindate: Thu, 28 Mar 2024 13:20:01 GMTx-konductor: N/Ax-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close

Source: chromecache_475.2.dr, chromecache_621.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_326.2.dr	String found in binary or memory: http://cdn.appdynamics.com
Source: chromecache_436.2.dr, chromecache_480.2.dr	String found in binary or memory: http://code.google.com/p/episodes/
Source: chromecache_326.2.dr	String found in binary or memory: http://col.eum-appdynamics.com
Source: chromecache_475.2.dr, chromecache_621.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_621.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_436.2.dr, chromecache_480.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_297.2.dr, chromecache_316.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_567.2.dr, chromecache_720.2.dr	String found in binary or memory: http://www.glassboxdigital.com
Source: chromecache_524.2.dr	String found in binary or memory: https://)(www.)?(onlinemyaccounts.com
Source: chromecache_506.2.dr	String found in binary or memory: https://aetna.schemaapp.com/
Source: chromecache_311.2.dr, chromecache_265.2.dr, chromecache_325.2.dr, chromecache_389.2.dr	String found in binary or memory: https://api.rlcdn.com/api/identity/idl?pid=1317
Source: chromecache_298.2.dr	String found in binary or memory: https://apply.wellsfargo.com/banker
Source: chromecache_311.2.dr	String found in binary or memory: https://appointments.wellsfargo.com/maa/appointment/
Source: chromecache_311.2.dr	String found in binary or memory: https://businesscard.wellsfargorewards.com/ui-wf/#/rewardspoints
Source: chromecache_326.2.dr	String found in binary or memory: https://cdn.appdynamics.com
Source: chromecache_311.2.dr, chromecache_265.2.dr	String found in binary or memory: https://cdn.schemaapp.com/javascript/
Source: chromecache_695.2.dr, chromecache_341.2.dr, chromecache_325.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=wellsfargo_adh&google_hm=
Source: chromecache_699.2.dr, chromecache_524.2.dr	String found in binary or memory: https://cobrowse-wellsfargo.digital.nuance.com
Source: chromecache_326.2.dr	String found in binary or memory: https://col.eum-appdynamics.com
Source: chromecache_488.2.dr	String found in binary or memory: https://connect.secure.wellsfargo.com/ATADUN/2.2/w/w-642409/sync/js/
Source: chromecache_534.2.dr, chromecache_358.2.dr, chromecache_721.2.dr, chromecache_677.2.dr, chromecache_600.2.dr, chromecache_665.2.dr, chromecache_352.2.dr, chromecache_575.2.dr, chromecache_637.2.dr, chromecache_347.2.dr, chromecache_592.2.dr, chromecache_264.2.dr, chromecache_561.2.dr, chromecache_362.2.dr, chromecache_660.2.dr, chromecache_443.2.dr, chromecache_634.2.dr, chromecache_416.2.dr, chromecache_464.2.dr, chromecache_435.2.dr, chromecache_349.2.dr	String found in binary or memory: https://connect.secure.wellsfargo.com/accounts/start
Source: chromecache_534.2.dr, chromecache_358.2.dr, chromecache_721.2.dr, chromecache_677.2.dr, chromecache_600.2.dr, chromecache_665.2.dr, chromecache_352.2.dr, chromecache_575.2.dr, chromecache_637.2.dr, chromecache_347.2.dr, chromecache_592.2.dr, chromecache_264.2.dr, chromecache_561.2.dr, chromecache_362.2.dr, chromecache_660.2.dr, chromecache_443.2.dr, chromecache_634.2.dr, chromecache_416.2.dr, chromecache_464.2.dr, chromecache_435.2.dr, chromecache_349.2.dr	String found in binary or memory: https://connect.secure.wellsfargo.com/services/wallet
Source: chromecache_534.2.dr, chromecache_358.2.dr, chromecache_721.2.dr, chromecache_677.2.dr, chromecache_575.2.dr, chromecache_637.2.dr, chromecache_347.2.dr, chromecache_264.2.dr, chromecache_561.2.dr, chromecache_362.2.dr, chromecache_443.2.dr, chromecache_416.2.dr, chromecache_435.2.dr, chromecache_349.2.dr, chromecache_560.2.dr, chromecache_513.2.dr, chromecache_390.2.dr, chromecache_570.2.dr, chromecache_492.2.dr, chromecache_527.2.dr, chromecache_704.2.dr	String found in binary or memory: https://connect.secure.wellsfargo.com/transferandpay/billpay/
Source: chromecache_534.2.dr, chromecache_358.2.dr, chromecache_721.2.dr, chromecache_677.2.dr, chromecache_600.2.dr, chromecache_665.2.dr, chromecache_352.2.dr, chromecache_575.2.dr, chromecache_637.2.dr, chromecache_347.2.dr, chromecache_592.2.dr, chromecache_264.2.dr, chromecache_561.2.dr, chromecache_362.2.dr, chromecache_660.2.dr, chromecache_443.2.dr, chromecache_634.2.dr, chromecache_416.2.dr, chromecache_464.2.dr, chromecache_435.2.dr, chromecache_349.2.dr	String found in binary or memory: https://connect.secure.wellsfargo.com/transferandpay/p2p/home
Source: chromecache_311.2.dr	String found in binary or memory: https://consumercard.wellsfargorewards.com/#/tnc/tc006
Source: chromecache_334.2.dr	String found in binary or memory: https://ct.pinterest.com/v3/?tid=
Source: chromecache_506.2.dr	String found in binary or memory: https://data.schemaapp.com/
Source: chromecache_506.2.dr	String found in binary or memory: https://datatst.schemaapp.com/
Source: chromecache_687.2.dr, chromecache_623.2.dr	String found in binary or memory: https://developer.sec.wellsfargo.com/portal/documentation;https://developer.removesec.wellsfargo.com
Source: chromecache_687.2.dr, chromecache_623.2.dr	String found in binary or memory: https://developer.sec.wellsfargo.com/portal/myapps;https://developer.sec.wellsfargo.com/products;htt
Source: chromecache_687.2.dr, chromecache_623.2.dr	String found in binary or memory: https://developer.wellsfargo.com/;https://developer.wellsfargo.com/login;https://developer.wellsfarg
Source: chromecache_687.2.dr, chromecache_623.2.dr	String found in binary or memory: https://developer.wellsfargo.com/case-studies;https://developer.wellsfargo.com/all-products;https://
Source: chromecache_311.2.dr	String found in binary or memory: https://featuredemos.wf.com
Source: chromecache_687.2.dr, chromecache_623.2.dr	String found in binary or memory: https://feedback.digital-cloud-prem.medallia.com/
Source: chromecache_687.2.dr, chromecache_623.2.dr	String found in binary or memory: https://feedback.digital-cloud-prem.medallia.com/feedback/api/v2/feedback/submit
Source: chromecache_607.2.dr, chromecache_343.2.dr, chromecache_325.2.dr, chromecache_548.2.dr	String found in binary or memory: https://gbxreport-prod.wf.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report
Source: chromecache_475.2.dr, chromecache_621.2.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_269.2.dr, chromecache_633.2.dr, chromecache_664.2.dr, chromecache_493.2.dr, chromecache_461.2.dr, chromecache_617.2.dr, chromecache_379.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_269.2.dr, chromecache_493.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.21.1/LICENSE
Source: chromecache_379.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.24.1/LICENSE
Source: chromecache_617.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.30.1/LICENSE
Source: chromecache_633.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.32.0/LICENSE
Source: chromecache_664.2.dr, chromecache_461.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.36.0/LICENSE
Source: chromecache_534.2.dr, chromecache_358.2.dr, chromecache_721.2.dr, chromecache_677.2.dr, chromecache_600.2.dr, chromecache_665.2.dr, chromecache_352.2.dr, chromecache_575.2.dr, chromecache_637.2.dr, chromecache_347.2.dr, chromecache_592.2.dr, chromecache_264.2.dr, chromecache_561.2.dr, chromecache_362.2.dr, chromecache_660.2.dr, chromecache_443.2.dr, chromecache_634.2.dr, chromecache_416.2.dr, chromecache_464.2.dr, chromecache_435.2.dr, chromecache_349.2.dr	String found in binary or memory: https://icomplete.wellsfargo.com/oas/status/appl/pages/payroll-documentation
Source: chromecache_311.2.dr	String found in binary or memory: https://icomplete.wellsfargo.com/oas/status/personal-loans-rate-checker/getting-started/
Source: chromecache_657.2.dr	String found in binary or memory: https://iframe.arkoselabs.com
Source: chromecache_657.2.dr	String found in binary or memory: https://iframe.arkoselabs.com/$
Source: chromecache_311.2.dr	String found in binary or memory: https://images.cardlytics.com/?http://prehealthcheck.cardlytics.com&ot=f8h4ecv982xg5n1mfi5k&xt=
Source: chromecache_612.2.dr	String found in binary or memory: https://itunes.apple.com/us/app/wells-fargo-mobile/id311548709?mt=8
Source: chromecache_699.2.dr, chromecache_524.2.dr	String found in binary or memory: https://m.wfawellstrade.wellsfargo.com/resources/bmw/html/chat/nuanceChat-wf.html
Source: chromecache_699.2.dr, chromecache_524.2.dr, chromecache_459.2.dr, chromecache_414.2.dr	String found in binary or memory: https://media-wf1.digital.nuance.com
Source: chromecache_534.2.dr, chromecache_358.2.dr, chromecache_721.2.dr, chromecache_677.2.dr, chromecache_600.2.dr, chromecache_665.2.dr, chromecache_352.2.dr, chromecache_575.2.dr, chromecache_637.2.dr, chromecache_347.2.dr, chromecache_592.2.dr, chromecache_264.2.dr, chromecache_561.2.dr, chromecache_362.2.dr, chromecache_660.2.dr, chromecache_443.2.dr, chromecache_634.2.dr, chromecache_416.2.dr, chromecache_464.2.dr, chromecache_435.2.dr, chromecache_349.2.dr	String found in binary or memory: https://oam.wellsfargo.com/oamo/identity
Source: chromecache_534.2.dr, chromecache_358.2.dr, chromecache_721.2.dr, chromecache_677.2.dr, chromecache_600.2.dr, chromecache_665.2.dr, chromecache_352.2.dr, chromecache_575.2.dr, chromecache_637.2.dr, chromecache_347.2.dr, chromecache_592.2.dr, chromecache_264.2.dr, chromecache_561.2.dr, chromecache_362.2.dr, chromecache_660.2.dr, chromecache_443.2.dr, chromecache_634.2.dr, chromecache_416.2.dr, chromecache_464.2.dr, chromecache_435.2.dr, chromecache_349.2.dr	String found in binary or memory: https://oam.wellsfargo.com/oamo/identity/enrollment
Source: chromecache_569.2.dr	String found in binary or memory: https://pdx-col.eum-appdynamics.com
Source: chromecache_667.2.dr, chromecache_612.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.wf.wellsfargomobile
Source: chromecache_502.2.dr	String found in binary or memory: https://products.gobankingrates.com/p/
Source: chromecache_603.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net/activity;xsp=
Source: chromecache_687.2.dr, chromecache_623.2.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/57907/forms/2712/formDataV2_171144411022
Source: chromecache_687.2.dr, chromecache_623.2.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/57907/forms/2714/formDataV2_171144411133
Source: chromecache_687.2.dr, chromecache_623.2.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/57907/forms/2818/formDataV2_171144411168
Source: chromecache_687.2.dr, chromecache_623.2.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/57907/forms/3456/formDataV2_171144410711
Source: chromecache_687.2.dr, chromecache_623.2.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/57907/forms/3457/formDataV2_171144413212
Source: chromecache_687.2.dr, chromecache_623.2.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/57907/forms/3458/formDataV2_171144413168
Source: chromecache_687.2.dr, chromecache_623.2.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/57907/forms/4371/formDataV2_171144411168
Source: chromecache_687.2.dr, chromecache_623.2.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/57907/forms/4372/formDataV2_171144410621
Source: chromecache_687.2.dr, chromecache_623.2.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/57907/forms/4373/formDataV2_171144410775
Source: chromecache_687.2.dr, chromecache_623.2.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/57907/forms/4374/formDataV2_171144411293
Source: chromecache_687.2.dr, chromecache_623.2.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/57907/forms/4435/formDataV2_171144411604
Source: chromecache_355.2.dr, chromecache_553.2.dr	String found in binary or memory: https://resources.digital-cloud-prem.medallia.com/wdcusprem/57907/onsite/onsiteData.json
Source: chromecache_339.2.dr	String found in binary or memory: https://rtd-tm.everesttech.net/upi/?sid=
Source: chromecache_607.2.dr, chromecache_343.2.dr, chromecache_325.2.dr, chromecache_548.2.dr	String found in binary or memory: https://rubicon.wellsfargo.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report
Source: chromecache_728.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/iu3?pid=a9def04f-edd6-4cf4-94d3-d81bf2b33116&event=
Source: chromecache_699.2.dr, chromecache_524.2.dr	String found in binary or memory: https://static.wellsfargo.com/assets/js/wfui/ndep/nuanceChat-wf.html
Source: chromecache_675.2.dr, chromecache_325.2.dr, chromecache_666.2.dr	String found in binary or memory: https://static.wellsfargo.com/tracking/alloy/alloy.js
Source: chromecache_607.2.dr, chromecache_343.2.dr, chromecache_325.2.dr, chromecache_548.2.dr	String found in binary or memory: https://static.wellsfargo.com/tracking/gb/detector-dom.min.js
Source: chromecache_325.2.dr	String found in binary or memory: https://static.wellsfargo.com/tracking/hp/utag.js
Source: chromecache_265.2.dr	String found in binary or memory: https://static.wellsfargo.com/tracking/public-site/utag.js
Source: chromecache_718.2.dr, chromecache_451.2.dr, chromecache_325.2.dr	String found in binary or memory: https://static.wellsfargo.com/tracking/ytc/ytc.js
Source: chromecache_687.2.dr, chromecache_623.2.dr	String found in binary or memory: https://ubt-lb.digital-cloud-prem.medallia.com
Source: chromecache_459.2.dr	String found in binary or memory: https://wellsfargo.digital.nuance.com
Source: chromecache_687.2.dr, chromecache_623.2.dr	String found in binary or memory: https://wellsoffice.ceo.wellsfargo.com/portal/signon/index.jsp;https://wellsoffice.ceo.wellsfargo.co
Source: chromecache_687.2.dr, chromecache_623.2.dr	String found in binary or memory: https://wellsofficesit.ceo.wellsfargo.com/portal/signon/index.jsp;https://wellsofficesit.ceo.wellsfa
Source: chromecache_311.2.dr	String found in binary or memory: https://wholesalebank.wf.com/contact-us-form?
Source: chromecache_699.2.dr, chromecache_524.2.dr	String found in binary or memory: https://www.wellsfargo.com/?siteID=10006005&chatID=
Source: chromecache_722.2.dr	String found in binary or memory: https://www.wellsfargo.com/Clickthrough&RequestType=Click&COID=
Source: chromecache_699.2.dr, chromecache_524.2.dr	String found in binary or memory: https://www.wellsfargo.com/mortgage/
Source: chromecache_534.2.dr, chromecache_358.2.dr, chromecache_721.2.dr, chromecache_677.2.dr, chromecache_600.2.dr, chromecache_665.2.dr, chromecache_352.2.dr, chromecache_575.2.dr, chromecache_637.2.dr, chromecache_347.2.dr, chromecache_592.2.dr, chromecache_264.2.dr, chromecache_561.2.dr, chromecache_362.2.dr, chromecache_660.2.dr, chromecache_443.2.dr, chromecache_634.2.dr, chromecache_416.2.dr, chromecache_464.2.dr, chromecache_435.2.dr, chromecache_349.2.dr	String found in binary or memory: https://www.wellsfargo.com/mortgage/apply/application-unavailable
Source: chromecache_311.2.dr	String found in binary or memory: https://www.wfhmconsumerevents.com/aspx/events/selecteventbygroup.aspx?group=lift&event=2
Source: chromecache_312.2.dr	String found in binary or memory: https://www17.wellsfargomedia.com
Source: chromecache_655.2.dr	String found in binary or memory: https://www17.wellsfargomedia.com/assets/images/css/about/caret.gif)
Source: chromecache_655.2.dr	String found in binary or memory: https://www17.wellsfargomedia.com/assets/images/css/template/icon-mail-gray.png
Source: chromecache_655.2.dr	String found in binary or memory: https://www17.wellsfargomedia.com/assets/images/css/template/social_share_minus.png
Source: chromecache_693.2.dr	String found in binary or memory: https://www17.wellsfargomedia.com/assets/images/locator/messaging-icon-alert-24x24.svg
Source: chromecache_693.2.dr	String found in binary or memory: https://www17.wellsfargomedia.com/assets/images/locator/messaging-icon-informational-24x24.svg

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50614
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50618
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 50635 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50622
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50503
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50627
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50505
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50507
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50646 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50636
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50635
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50516
Source: unknown	Network traffic detected: HTTP traffic on port 50657 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50519
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50630
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50402
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50644
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50647
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50404
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50646
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50649
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50527
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50520
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50401
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50400
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50521
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50622 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50708
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50533 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50715
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 50672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50719
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50723
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50605
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50607
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50606
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50727
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50458
Source: unknown	Network traffic detected: HTTP traffic on port 50684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50443 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50457
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50699
Source: unknown	Network traffic detected: HTTP traffic on port 50254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50459
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50219
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50450
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50691
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50452
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50693
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50696
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50695
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50213
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 50712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50469
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50229
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50461
Source: unknown	Network traffic detected: HTTP traffic on port 50723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50465
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50464
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50466
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50587
Source: unknown	Network traffic detected: HTTP traffic on port 50673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50479
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50230
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50472
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50471
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50232
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50475
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50598
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50481
Source: unknown	Network traffic detected: HTTP traffic on port 50431 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50249
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50240
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50486
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50246
Source: unknown	Network traffic detected: HTTP traffic on port 50696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50250
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50492
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50491
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50656
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50537
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50415
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50657
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50659
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50650
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50531
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50652
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50651
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50533
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50532
Source: unknown	Network traffic detected: HTTP traffic on port 50513 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50425
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50667
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50424
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50666
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50426
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50668
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50429
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50661
Source: unknown	Network traffic detected: HTTP traffic on port 50702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50660
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 50465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50663
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50420
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50662
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50423
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50544
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50665
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50543
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50664
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50436
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50678
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50438
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50437
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50679
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50432
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50431
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50673
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50434
Source: unknown	Network traffic detected: HTTP traffic on port 50630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50675
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 50503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50689
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50449
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50681
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50683
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50685
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50442
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50684
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50445
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50687
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50664 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50526 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50423 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50188
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50469 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 50699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 50458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50297 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 50665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50493
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50495
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50377
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 50651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 50731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50479 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50662 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 50391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50389
Source: unknown	Network traffic detected: HTTP traffic on port 50516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50391
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50390
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50150
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50398
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50159
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50161
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50666 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50605 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50551 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50163

Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.4:49766 version: TLS 1.2

Source: classification engine

Classification label: sus22.phis.win@26/741@180/53

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2024,i,13790965430040798669,7551964596815697510,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.wellsfargo.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2024,i,13790965430040798669,7551964596815697510,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.wellsfargo.com/	0%	Avira URL Cloud	safe
https://www.wellsfargo.com/	0%	Virustotal		Browse

Source	Detection	Scanner	Link
medallia2.map.fastly.net	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
dualstack.tls13.taboola.map.fastly.net	0%	Virustotal	Browse
col.eum-appdynamics.com	0%	Virustotal	Browse
edge.gycpi.b.yahoodns.net	0%	Virustotal	Browse
adobedc.net.ssl.sc.omtrdc.net	0%	Virustotal	Browse
c1.wfinterface.com	0%	Virustotal	Browse
service.maxymiser.net	0%	Virustotal	Browse
ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud	0%	Virustotal	Browse
demdex.net.ssl.sc.omtrdc.net	0%	Virustotal	Browse
edge.adobedc.net	0%	Virustotal	Browse
pdx-col.eum-appdynamics.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://edge.adobedc.net/ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=c40b8a92-02fa-456b-ae31-ce3345e2ea42	0%	Avira URL Cloud	safe
https://pdx-col.eum-appdynamics.com/eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PYY&msg=Assert%20fail%3A%20M50	0%	Avira URL Cloud	safe
https://pdx-col.eum-appdynamics.com/eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PYY&msg=Assert%20fail%3A%20M51	0%	Avira URL Cloud	safe
https://edge.adobedc.net/ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=82f6936a-61e1-4489-83e1-f802151ff0cd	0%	Avira URL Cloud	safe
https://edge.adobedc.net/ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=7d57ee8f-2442-4298-8218-7b4c8f4a5dd2	0%	Avira URL Cloud	safe
https://edge.adobedc.net/ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=f9ab8551-492e-489e-9017-87923a423d5d	0%	Avira URL Cloud	safe
https://edge.adobedc.net/ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=2aba2bf0-2f1f-4c0d-856d-97df1acdd718	0%	Avira URL Cloud	safe
https://pdx-col.eum-appdynamics.com/eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZD&msg=Assert%20fail%3A%20M50	0%	Avira URL Cloud	safe
https://pdx-col.eum-appdynamics.com/eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZD&msg=Assert%20fail%3A%20M51	0%	Avira URL Cloud	safe
https://edge.adobedc.net/ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=a6d541f2-f16a-487d-a378-34648a735afe	0%	Avira URL Cloud	safe
https://pdx-col.eum-appdynamics.com/eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum	0%	Avira URL Cloud	safe
https://pdx-col.eum-appdynamics.com/eumcollector/beacons/browser/v1/AD-AAB-ABJ-PYY/adrum	0%	Avira URL Cloud	safe
https://)(www.)?(onlinemyaccounts.com	0%	Avira URL Cloud	safe
https://pdx-col.eum-appdynamics.com/eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum	0%	Virustotal		Browse
https://edge.adobedc.net/ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=8acba3f7-0ecc-4bd9-9f1e-c9ed2fbea068	0%	Avira URL Cloud	safe
https://pdx-col.eum-appdynamics.com	0%	Avira URL Cloud	safe
http://col.eum-appdynamics.com	0%	Virustotal		Browse
http://col.eum-appdynamics.com	0%	Avira URL Cloud	safe
https://pdx-col.eum-appdynamics.com	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
dart.l.doubleclick.net	172.253.63.149	true	false		high
col.eum-appdynamics.com	35.163.101.91	true	false	0%, Virustotal, Browse	unknown
adservice.google.com	142.251.163.155	true	false		high
d20qwf0wrdtevy.cloudfront.net	18.165.98.81	true	false		high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	0%, Virustotal, Browse	unknown
stats.g.doubleclick.net	172.253.62.154	true	false		high
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	52.45.39.174	true	false		high
idsync.rlcdn.com	35.244.154.8	true	false		high
dualstack.tls13.taboola.map.fastly.net	151.101.65.44	true	false	0%, Virustotal, Browse	unknown
api.rlcdn.com	34.107.165.188	true	false		high
cm.g.doubleclick.net	142.250.31.156	true	false		high
www.google.com	142.251.16.147	true	false		high
demdex.net.ssl.sc.omtrdc.net	63.140.39.130	true	false	0%, Virustotal, Browse	unknown
medallia2.map.fastly.net	146.75.29.230	true	false	0%, Virustotal, Browse	unknown
star-mini.c10r.facebook.com	31.13.66.35	true	false		high
fcmatch.youtube.com	172.253.63.139	true	false		high
ad.doubleclick.net	142.250.31.148	true	false		high
s.amazon-adsystem.com	52.46.155.104	true	false		high
d3nidttaq34fka.cloudfront.net	18.160.18.39	true	false		high
wf-prod-reports-961680909.us-east-1.elb.amazonaws.com	44.213.50.195	true	false		high
googleads.g.doubleclick.net	142.251.16.157	true	false		high
adobedc.net.ssl.sc.omtrdc.net	63.140.39.65	true	false	0%, Virustotal, Browse	unknown
fcmatch.google.com	172.253.122.113	true	false		high
ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud	34.200.65.202	true	false	0%, Virustotal, Browse	unknown
edge.gycpi.b.yahoodns.net	69.147.92.11	true	false	0%, Virustotal, Browse	unknown
cooladata.kampyle.com	35.241.45.82	true	false		high
d2unjxrejkh6j9.cloudfront.net	13.32.208.32	true	false		high
www17.wellsfargomedia.com	unknown	unknown	false		high
pdx-col.eum-appdynamics.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
resources.digital-cloud-prem.medallia.com	unknown	unknown	false		high
ups.analytics.yahoo.com	unknown	unknown	false		high
cm.everesttech.net	unknown	unknown	false		high
www.wellsfargo.com	unknown	unknown	false		high
gbxreport-prod.wf.com	unknown	unknown	false		high
connect.secure.wellsfargo.com	unknown	unknown	false		high
udc-neb.kampyle.com	unknown	unknown	false		high
media-wf1.digital.nuance.com	unknown	unknown	false		high
service.maxymiser.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
wellsfargo.digital.nuance.com	unknown	unknown	false		high
ort.wellsfargo.com	unknown	unknown	false		high
adobedc.demdex.net	unknown	unknown	false		high
dpm.demdex.net	unknown	unknown	false		high
aa.agkn.com	unknown	unknown	false		high
www15.wellsfargomedia.com	unknown	unknown	false		high
data.schemaapp.com	unknown	unknown	false		high
www10.wellsfargomedia.com	unknown	unknown	false		high
rtd-tm.everesttech.net	unknown	unknown	false		high
www.facebook.com	unknown	unknown	false		high
trc.taboola.com	unknown	unknown	false		high
c1.wfinterface.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
2549153.fls.doubleclick.net	unknown	unknown	false		high
s.yimg.com	unknown	unknown	false		high
static.wellsfargo.com	unknown	unknown	false		high
tag-wellsfargo.digital.nuance.com	unknown	unknown	false		high
cms.analytics.yahoo.com	unknown	unknown	false		high
edge.adobedc.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
rubicon.wellsfargo.com	unknown	unknown	false		high
cdn.schemaapp.com	unknown	unknown	false		high
wellsfargobankna.demdex.net	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.schemaapp.com/highlighter/prod/WellsFargo/v2/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20	false		high
https://dpm.demdex.net/ibs:dpid=21&dpuuid=213680604835005188846	false		high
https://adservice.google.com/ddm/fls/z/dc_pre=CIDN4PKFl4UDFaYKdgYd4tUFzw;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=*;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F	false		high
https://edge.adobedc.net/ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=c40b8a92-02fa-456b-ae31-ce3345e2ea42	false	Avira URL Cloud: safe	unknown
https://pdx-col.eum-appdynamics.com/eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PYY&msg=Assert%20fail%3A%20M50	false	Avira URL Cloud: safe	unknown
https://pdx-col.eum-appdynamics.com/eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PYY&msg=Assert%20fail%3A%20M51	false	Avira URL Cloud: safe	unknown
https://edge.adobedc.net/ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=82f6936a-61e1-4489-83e1-f802151ff0cd	false	Avira URL Cloud: safe	unknown
https://idsync.rlcdn.com/365868.gif?partner_uid=33955380241426191774167127150413392378	false		high
https://edge.adobedc.net/ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=7d57ee8f-2442-4298-8218-7b4c8f4a5dd2	false	Avira URL Cloud: safe	unknown
https://gbxreport-prod.wf.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=9fa406fb-8541-4a53-bdc9-8d711b8258a5&sn=2&cfg=fc5c7ded&pv=2&aid=	false		high
https://adservice.google.com/ddm/fls/z/dc_pre=CNn08IKGl4UDFSgVdgYdKtkJ0A;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=*;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F	false		high
https://udc-neb.kampyle.com/egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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	false		high
https://udc-neb.kampyle.com/egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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	false		high
https://gbxreport-prod.wf.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=a77f2f58-57ce-4d1c-8339-460310ea325a&sn=1&cfg&pv=2&aid=	false		high
https://udc-neb.kampyle.com/egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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	false		high
https://gbxreport-prod.wf.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=9fa406fb-8541-4a53-bdc9-8d711b8258a5&sn=1&cfg=201c2b80&pv=2&aid=	false		high
https://2549153.fls.doubleclick.net/activityi;register_conversion=1;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F?	false		high
https://gbxreport-prod.wf.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=45f46bb8-25cb-4b71-83f6-d999b86f87f4&sn=3&cfg=fc5c7ded&pv=2&aid=	false		high
https://2549153.fls.doubleclick.net/activityi;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F?	false		high
https://2549153.fls.doubleclick.net/activityi;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F?	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/984436569/?random=1711631950134&cv=9&fst=1711631950134&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&hn=www.google.com&async=1	false		high
https://gbxreport-prod.wf.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=403a3102-6806-4b08-ba29-c8d2c2b3d153&sn=2&cfg=fc5c7ded&pv=2&aid=	false		high
https://wellsfargobankna.demdex.net/dest5.html?d_nsid=0	false		high
https://adobedc.demdex.net/ee/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=da61659a-abde-48a3-9419-2c57a11180c1	false		high
https://gbxreport-prod.wf.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=9fa406fb-8541-4a53-bdc9-8d711b8258a5&sn=6&cfg=201c2b80&pv=2&aid=	false		high
https://tag-wellsfargo.digital.nuance.com/tagserver/nuanceChat.html?UUID=WF_10006005	false		high
https://fcmatch.google.com/pixel?google_gm=AMnCDooB--uE3qqwM60W-aFIvHRoCOUhU6Ul6HroemNjvvKfJVwxfqQOG2V4li17-b9TX64bRRCx9kEPSj-5RJKKu2ZKwmFKSFf6TCRlcnlLlDJOmPbZ5BU	false		high
https://dpm.demdex.net/ibs:dpid=477&dpuuid=bf3583479cfa2b30b4765233abf108d3347eb75cc59033dc0445efe44ff670a9b0da87c991749652	false		high
https://www.google.com/pagead/1p-user-list/984436569/?random=1711631950134&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&async=1&is_vtc=1&cid=CAQSKQB7FLtqM5DLuAhk7bpblogvOuSpfhIyx29EWpc_8gvuaFbCRK6Erxyt&random=2498095841&resp=GooglemKTybQhCsO	false		high
https://dpm.demdex.net/ibs:dpid=411&dpuuid=ZgVuWQAAA9eF_wAm&d_uuid=33955380241426191774167127150413392378	false		high
https://data.schemaapp.com/WellsFargo/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20vYWJvdXQv	false		high
https://s.yimg.com/wi/config/.json	false		high
https://dpm.demdex.net/ibs:dpid=1957&dpuuid=375E6F2E0D8F6B9C2CEB7C8E098F6DFE	false		high
https://2549153.fls.doubleclick.net/activityi;dc_pre=CNn08IKGl4UDFSgVdgYdKtkJ0A;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F?	false		high
https://edge.adobedc.net/ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=f9ab8551-492e-489e-9017-87923a423d5d	false	Avira URL Cloud: safe	unknown
https://fcmatch.google.com/pixel?google_gm=AMnCDoqLmwev_v-dJR_RIm72duWb2y5tEqtm9i_436YxdwOxcVKacGuMPfkTZpOD_GyNbJGCvB4JpMmyKKgrCnYTxDxmc2WCHepVzjCY_rGduhqxSXWQvxA	false		high
https://fcmatch.google.com/pixel?google_gm=AMnCDoppDmysQ0EwfuNyQisMDHjame1guHW2IIS6dxbAtlz8vxAtRDbqlIDtd545bq7TMCLXhLhdtkZoEea-6Rnwh-iv5AqzvhNWr7G3wxfANPyDUkwwgNk	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/984436569/?random=1711631950119&cv=9&fst=1711631950119&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&hn=www.google.com&async=1	false		high
https://edge.adobedc.net/ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=2aba2bf0-2f1f-4c0d-856d-97df1acdd718	false	Avira URL Cloud: safe	unknown
https://wellsfargo.digital.nuance.com/tagserver/postToServer.min.htm?siteID=10006005&codeVersion=1710907168986	false		high
https://www.facebook.com/tr?id=1578146899100389&ev=ALL_ALL_PAGE_WFHomepage&cd[currency]=USD&cd[value]=0.00&cd[Product]=&cd[Subproduct]=&cd[PageID]=&cd[customer_status]=n&cd[customer_type]=&dpo=LDU&dpoco=0&dpost=0	false		high
https://2549153.fls.doubleclick.net/activityi;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F?	false		high
https://wellsfargobankna.demdex.net/event?c_app_id=WWW&c_page_type=BROWSER&c_page_id=locator&c_customer_type=&c_customer_status=n&c_product_code=&c_subproduct_code=&c_offer_id=&c_event_type=load&c_referrer=&d_cid=113287%011120240328061851126288949&c_sub_channel=&c_vendor_code=&c_offertype=	false		high
https://2549153.fls.doubleclick.net/activityi;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F?	false		high
https://2549153.fls.doubleclick.net/activityi;dc_pre=CJeLjfOFl4UDFd0VdgYdAnwNgA;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F?	false		high
https://pdx-col.eum-appdynamics.com/eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZD&msg=Assert%20fail%3A%20M50	false	Avira URL Cloud: safe	unknown
https://pdx-col.eum-appdynamics.com/eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZD&msg=Assert%20fail%3A%20M51	false	Avira URL Cloud: safe	unknown
https://fcmatch.youtube.com/pixel?google_gm=AMnCDoqLmwev_v-dJR_RIm72duWb2y5tEqtm9i_436YxdwOxcVKacGuMPfkTZpOD_GyNbJGCvB4JpMmyKKgrCnYTxDxmc2WCHepVzjCY_rGduhqxSXWQvxA	false		high
https://edge.adobedc.net/ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=a6d541f2-f16a-487d-a378-34648a735afe	false	Avira URL Cloud: safe	unknown
https://pdx-col.eum-appdynamics.com/eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://2549153.fls.doubleclick.net/activityi;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F?	false		high
https://www.google.com/pagead/1p-user-list/984436569/?random=1711631950119&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&async=1&is_vtc=1&cid=CAQSKQB7FLtqwzXszmaXi0QUEjOcY3Wmdb1eUOmwgNG_8BJ2ZvlgCks6MA78&random=1285347098&resp=GooglemKTybQhCsO	false		high
https://gbxreport-prod.wf.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=2c4120a6-8cbe-4983-b2ed-45670688b5d0&sn=3&cfg=fc5c7ded&pv=2&aid=	false		high
https://pdx-col.eum-appdynamics.com/eumcollector/beacons/browser/v1/AD-AAB-ABJ-PYY/adrum	false	Avira URL Cloud: safe	unknown
https://2549153.fls.doubleclick.net/activityi;dc_pre=CLmiqfOFl4UDFXYQdgYdkywNxA;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F?	false		high
https://gbxreport-prod.wf.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=403a3102-6806-4b08-ba29-c8d2c2b3d153&sn=4&cfg=201c2b80&pv=2&aid=	false		high
https://connect.secure.wellsfargo.com/auth/login/present?origin=cob&LOB=CONS	false		high
https://cms.analytics.yahoo.com/cms?partner_id=ADOBE&_hosted_id=33955380241426191774167127150413392378&gdpr=0&gdpr_consent=	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/984436569/?random=1711632000084&cv=9&fst=1711632000084&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&eid=376635470&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2Fchecking%2F&ref=null&tiba=Cuentas%20de%20cheques%3A%20abra%20una%20cuenta%20por%20Internet%20hoy%20mismo%20%7C%20Wells%20Fargo&hn=www.google.com&async=1	false		high
https://www.wellsfargo.com/es/	false		high
https://wellsfargobankna.demdex.net/event?d_dil_ver=9.5&_ts=1711631938588	false		high
https://googleads.g.doubleclick.net/pagead/viewthroughconversion/984436569/?random=1711631963095&cv=9&fst=1711631963095&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F&ref=null&tiba=ATM%20and%20Bank%20Locations%20-%20Find%20Wells%20Fargo%20Bank%20and%20ATM%20Locations&hn=www.google.com&async=1	false		high
https://adservice.google.com/ddm/fls/z/dc_pre=CK6Ts_mFl4UDFREVdgYd2PIHKw;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=*;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F	false		high
https://cdn.schemaapp.com/javascript/highlight.js	false		high
https://edge.adobedc.net/ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=8acba3f7-0ecc-4bd9-9f1e-c9ed2fbea068	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://wellsoffice.ceo.wellsfargo.com/portal/signon/index.jsp;https://wellsoffice.ceo.wellsfargo.co	chromecache_687.2.dr, chromecache_623.2.dr	false		high
https://www17.wellsfargomedia.com	chromecache_312.2.dr	false		high
https://www.wellsfargo.com/Clickthrough&RequestType=Click&COID=	chromecache_722.2.dr	false		high
https://github.com/zloirock/core-js	chromecache_269.2.dr, chromecache_633.2.dr, chromecache_664.2.dr, chromecache_493.2.dr, chromecache_461.2.dr, chromecache_617.2.dr, chromecache_379.2.dr	false		high
https://static.wellsfargo.com/tracking/public-site/utag.js	chromecache_265.2.dr	false		high
https://github.com/jquery/jquery-color	chromecache_475.2.dr, chromecache_621.2.dr	false		high
https://resources.digital-cloud-prem.medallia.com/wdcusprem/57907/forms/3456/formDataV2_171144410711	chromecache_687.2.dr, chromecache_623.2.dr	false		high
https://ubt-lb.digital-cloud-prem.medallia.com	chromecache_687.2.dr, chromecache_623.2.dr	false		high
https://wellsfargo.digital.nuance.com	chromecache_459.2.dr	false		high
https://icomplete.wellsfargo.com/oas/status/appl/pages/payroll-documentation	chromecache_534.2.dr, chromecache_358.2.dr, chromecache_721.2.dr, chromecache_677.2.dr, chromecache_600.2.dr, chromecache_665.2.dr, chromecache_352.2.dr, chromecache_575.2.dr, chromecache_637.2.dr, chromecache_347.2.dr, chromecache_592.2.dr, chromecache_264.2.dr, chromecache_561.2.dr, chromecache_362.2.dr, chromecache_660.2.dr, chromecache_443.2.dr, chromecache_634.2.dr, chromecache_416.2.dr, chromecache_464.2.dr, chromecache_435.2.dr, chromecache_349.2.dr	false		high
https://github.com/zloirock/core-js/blob/v3.21.1/LICENSE	chromecache_269.2.dr, chromecache_493.2.dr	false		high
https://resources.digital-cloud-prem.medallia.com/wdcusprem/57907/forms/4371/formDataV2_171144411168	chromecache_687.2.dr, chromecache_623.2.dr	false		high
https://static.wellsfargo.com/tracking/gb/detector-dom.min.js	chromecache_607.2.dr, chromecache_343.2.dr, chromecache_325.2.dr, chromecache_548.2.dr	false		high
https://rtd-tm.everesttech.net/upi/?sid=	chromecache_339.2.dr	false		high
https://resources.digital-cloud-prem.medallia.com/wdcusprem/57907/forms/2818/formDataV2_171144411168	chromecache_687.2.dr, chromecache_623.2.dr	false		high
http://www.glassboxdigital.com	chromecache_567.2.dr, chromecache_720.2.dr	false		high
https://developer.sec.wellsfargo.com/portal/myapps;https://developer.sec.wellsfargo.com/products;htt	chromecache_687.2.dr, chromecache_623.2.dr	false		high
https://apply.wellsfargo.com/banker	chromecache_298.2.dr	false		high
https://ct.pinterest.com/v3/?tid=	chromecache_334.2.dr	false		high
https://oam.wellsfargo.com/oamo/identity/enrollment	chromecache_534.2.dr, chromecache_358.2.dr, chromecache_721.2.dr, chromecache_677.2.dr, chromecache_600.2.dr, chromecache_665.2.dr, chromecache_352.2.dr, chromecache_575.2.dr, chromecache_637.2.dr, chromecache_347.2.dr, chromecache_592.2.dr, chromecache_264.2.dr, chromecache_561.2.dr, chromecache_362.2.dr, chromecache_660.2.dr, chromecache_443.2.dr, chromecache_634.2.dr, chromecache_416.2.dr, chromecache_464.2.dr, chromecache_435.2.dr, chromecache_349.2.dr	false		high
https://static.wellsfargo.com/tracking/ytc/ytc.js	chromecache_718.2.dr, chromecache_451.2.dr, chromecache_325.2.dr	false		high
https://developer.wellsfargo.com/case-studies;https://developer.wellsfargo.com/all-products;https://	chromecache_687.2.dr, chromecache_623.2.dr	false		high
https://developer.wellsfargo.com/;https://developer.wellsfargo.com/login;https://developer.wellsfarg	chromecache_687.2.dr, chromecache_623.2.dr	false		high
https://www17.wellsfargomedia.com/assets/images/locator/messaging-icon-informational-24x24.svg	chromecache_693.2.dr	false		high
https://static.wellsfargo.com/tracking/hp/utag.js	chromecache_325.2.dr	false		high
https://feedback.digital-cloud-prem.medallia.com/	chromecache_687.2.dr, chromecache_623.2.dr	false		high
https://resources.digital-cloud-prem.medallia.com/wdcusprem/57907/forms/4374/formDataV2_171144411293	chromecache_687.2.dr, chromecache_623.2.dr	false		high
http://code.google.com/p/episodes/	chromecache_436.2.dr, chromecache_480.2.dr	false		high
https://connect.secure.wellsfargo.com/accounts/start	chromecache_534.2.dr, chromecache_358.2.dr, chromecache_721.2.dr, chromecache_677.2.dr, chromecache_600.2.dr, chromecache_665.2.dr, chromecache_352.2.dr, chromecache_575.2.dr, chromecache_637.2.dr, chromecache_347.2.dr, chromecache_592.2.dr, chromecache_264.2.dr, chromecache_561.2.dr, chromecache_362.2.dr, chromecache_660.2.dr, chromecache_443.2.dr, chromecache_634.2.dr, chromecache_416.2.dr, chromecache_464.2.dr, chromecache_435.2.dr, chromecache_349.2.dr	false		high
https://www17.wellsfargomedia.com/assets/images/locator/messaging-icon-alert-24x24.svg	chromecache_693.2.dr	false		high
https://featuredemos.wf.com	chromecache_311.2.dr	false		high
https://cobrowse-wellsfargo.digital.nuance.com	chromecache_699.2.dr, chromecache_524.2.dr	false		high
https://)(www.)?(onlinemyaccounts.com	chromecache_524.2.dr	false	Avira URL Cloud: safe	low
https://pdx-col.eum-appdynamics.com	chromecache_569.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://col.eum-appdynamics.com	chromecache_326.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.253.62.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
52.45.39.174	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
35.244.154.8	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
34.211.102.35	unknown	United States	16509	AMAZON-02US	false
142.251.111.148	unknown	United States	15169	GOOGLEUS	false
172.253.115.104	unknown	United States	15169	GOOGLEUS	false
34.107.165.188	api.rlcdn.com	United States	15169	GOOGLEUS	false
172.253.62.105	unknown	United States	15169	GOOGLEUS	false
44.219.57.96	unknown	United States	14618	AMAZON-AESUS	false
52.46.155.104	s.amazon-adsystem.com	United States	16509	AMAZON-02US	false
142.251.16.147	www.google.com	United States	15169	GOOGLEUS	false
172.253.63.149	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
142.251.16.148	unknown	United States	15169	GOOGLEUS	false
157.240.229.35	unknown	United States	32934	FACEBOOKUS	false
63.140.38.91	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
142.251.163.155	adservice.google.com	United States	15169	GOOGLEUS	false
69.147.92.12	unknown	United States	14777	INKTOMI-LAWSONUS	false
69.147.92.11	edge.gycpi.b.yahoodns.net	United States	14777	INKTOMI-LAWSONUS	false
151.101.1.44	unknown	United States	54113	FASTLYUS	false
63.140.39.65	adobedc.net.ssl.sc.omtrdc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
13.32.208.16	unknown	United States	16509	AMAZON-02US	false
172.253.63.154	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.65.44	dualstack.tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
18.235.137.175	unknown	United States	14618	AMAZON-AESUS	false
142.250.31.148	ad.doubleclick.net	United States	15169	GOOGLEUS	false
44.195.11.1	unknown	United States	14618	AMAZON-AESUS	false
18.160.18.39	d3nidttaq34fka.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
172.253.63.139	fcmatch.youtube.com	United States	15169	GOOGLEUS	false
52.206.37.105	unknown	United States	14618	AMAZON-AESUS	false
142.251.16.157	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
172.253.122.113	fcmatch.google.com	United States	15169	GOOGLEUS	false
44.213.253.195	unknown	United States	14618	AMAZON-AESUS	false
63.140.39.130	demdex.net.ssl.sc.omtrdc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
34.206.4.244	unknown	United States	14618	AMAZON-AESUS	false
18.165.98.81	d20qwf0wrdtevy.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
34.200.65.202	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud	United States	14618	AMAZON-AESUS	false
44.213.50.195	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
3.221.137.72	unknown	United States	14618	AMAZON-AESUS	false
63.140.38.132	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
23.23.167.174	unknown	United States	14618	AMAZON-AESUS	false
31.13.66.35	star-mini.c10r.facebook.com	Ireland	32934	FACEBOOKUS	false
142.250.31.156	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
3.208.238.164	unknown	United States	14618	AMAZON-AESUS	false
146.75.29.230	medallia2.map.fastly.net	Sweden	30051	SCCGOVUS	false
142.251.167.157	unknown	United States	15169	GOOGLEUS	false
35.163.101.91	col.eum-appdynamics.com	United States	16509	AMAZON-02US	false
35.241.45.82	cooladata.kampyle.com	United States	15169	GOOGLEUS	false
13.32.208.32	d2unjxrejkh6j9.cloudfront.net	United States	16509	AMAZON-02US	false
34.194.24.182	unknown	United States	14618	AMAZON-AESUS	false
18.160.18.115	unknown	United States	3	MIT-GATEWAYSUS	false
209.54.182.161	unknown	United States	21719	CHLUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1417022
Start date and time:	2024-03-28 14:18:01 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.wellsfargo.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus22.phis.win@26/741@180/53
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.wellsfargo.com/#skip Browse: https://www.wellsfargo.com/locator/ Browse: https://www.wellsfargo.com/about/ Browse: https://www.wellsfargo.com/es/ Browse: https://connect.secure.wellsfargo.com/auth/login/present?origin=cob&LOB=CONS Browse: https://www.wellsfargo.com/checking/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.16.94, 142.251.16.113, 142.251.16.139, 142.251.16.100, 142.251.16.138, 142.251.16.102, 142.251.16.101, 142.250.31.84, 34.104.35.123, 23.53.35.115, 23.53.35.114, 23.53.35.109, 23.53.35.104, 23.53.35.107, 23.50.66.142, 23.53.35.101, 23.53.35.103, 142.251.163.95, 172.253.62.95, 142.250.31.95, 142.251.167.95, 172.253.115.95, 172.253.122.95, 172.253.63.95, 142.251.16.95, 23.53.35.106, 23.53.35.105, 13.85.23.86, 72.21.81.240, 192.229.211.108, 23.53.35.113, 23.53.35.110, 20.166.126.56, 172.253.62.113, 172.253.62.139, 172.253.62.102, 172.253.62.100, 172.253.62.138, 172.253.62.101, 216.239.34.178, 216.239.32.178, 216.239.36.178, 216.239.38.178, 20.10.112.134, 151.101.66.49, 151.101.130.49, 151.101.194.49, 151.101.2.49, 20.3.187.198, 142.251.111.154, 142.251.111.155, 23.62.126.245, 23.209.55.118, 23.50.76.17, 172.253.62.94, 23.205.29.78, 23.12.147.23, 3.224.6.232, 44.205.232.210, 3.229.8.230, 52.22.219.31, 54.164.212.136, 34.200.140.230, 204.79.197.200, 13.107.21.200, 2
Excluded domains from analysis (whitelisted): e114945.b.akamaiedge.net, slscr.update.microsoft.com, e8463.a.akamaiedge.net, clientservices.googleapis.com, www15.wellsfargomedia.com.edgekey.net, e114055.b.akamaiedge.net, clients2.google.com, connect.secure.wellsfargo.com.edgekey.net, ocsp.digicert.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.google-analytics.com, e105383.b.akamaiedge.net, c1.wfinterface.com.edgekey.net, fs.microsoft.com, content-autofill.googleapis.com, dual-a-0001.a-msedge.net, cm.everesttech.net.akadns.net, ts-dnc-wf1.trafficmanager.net, www-alv.google-analytics.com, ts-dnc-wf1.eastus2.cloudapp.azure.com, edgedl.me.gvt1.com, c.bing.com, clients.l.google.com, www17.wellsfargomedia.com.edgekey.net, h2.shared.global.fastly.net, www.googleadservices.com, rubicon.wellsfargo.com.edgekey.net, www10.wellsfargomedia.com.edgekey.net, c-bing-com.a-0001.a-msedge.net, wu.azureedge.net, service.maxymiser.net.edgekey.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wi/config/.json
Preview:	{}

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6721)
Category:	downloaded
Size (bytes):	70231
Entropy (8bit):	5.38136310664853
Encrypted:	false
SSDEEP:	1536:t5k4hTA9AwOp32xLTzt4tiZD0xb4hoxcqV1yYD+5UEXDy:UfFxc6U
MD5:	674FCA9C90D20FF082F5B2957DE77812
SHA1:	6CD26C55343679B247FBD70CD23C7A1035DAF667
SHA-256:	2B6CB60AD9460608DB989A3097AE5E208ED32C2A6BC64B35BD84E844B5B1E5FB
SHA-512:	3AC360D3E0E5ED6A32474F87C21BF9B3703E56CEBC99357405A383B3D849D7B9B852B805AED19DB27CFCD3CEC6B0ED5E5376E0A55F7B4D357125EA4CE99EC4F7
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/public-site/utag.js
Preview:	//tealium universal tag - utag.loader ut4.0.202312141922, Copyright 2023 Tealium.com Inc. All Rights Reserved..var utag_condload=false;window.__tealium_twc_switch=false;try{try{try{if(utag_data&&utag_data.hasOwnProperty('tealium_js_path')){var new_path=utag_data.tealium_js_path.replace(/\/[^\/]+$/,'/');var utag_cfg_ovrd={path:new_path};}.else{var utag_data=utag_data\|\|{};utag_data.tealium_js_path="https://static.wellsfargo.com/tracking/public-site/utag.js";}}.catch(e){}}catch(e){console.log(e)}}catch(e){console.log(e);}.if(!utag_condload){try{try{try{utag_pad=function(a,b,c,d){a=""+((a-0).toString(16));d="";if(b>a.length){for(c=0;c<(b-a.length);c++){d+='0';}}.return""+d+a;};utag_visitor_id=function(t,a,b){a=utag_pad(t,12);b=""+Math.random();a+=utag_pad(b.substring(2,b.length),16);try{a+=utag_pad((navigator.plugins.length?navigator.plugins.length:0),2);}catch(e){}.a+=utag_pad(navigator.userAgent.length,3);a+=utag_pad(top.document.URL.length,4);a+=utag_pad(navigator.appVersion.length,3);a

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	238
Entropy (8bit):	6.779703555852391
Encrypted:	false
SSDEEP:	6:NfX/CUkUNj8IUwuASQoeUZ3H1j0vPDO2Pmby:xX/CAAAGUrdPm+
MD5:	C177BFC93A4FD345C550B35947FAAEF8
SHA1:	D169009C0093FB8639378C83E655639D83AD501D
SHA-256:	6E4B75880896E64417FD81A08780F4899BBFF7D3D0395487026AB1BC4B59B50B
SHA-512:	8FBBD48A5A05BE4899A0F2511F4CF23B936C2B6CF92B989CD16D7C14A5C28BED34D43232DBEA827103A881F72F89F259623F810A9CDEE77D4888AF25C8D81CD1
Malicious:	false
Reputation:	low
Preview:	GIF89a............&..)..+.....0..3..4.'A.+E..G.1J.6O.9Q.F\.Nc.Uj.ex.q..t..v...............................!.......,..........k ....BCick.A,.V.=2s]..t".,..x*C..#...CAf2.0....0:....[5...!.u8.`I...@...b.....r2OY1."7C..C?.0U4-#%.V+-!.;

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21636, version 1.13107
Category:	downloaded
Size (bytes):	21636
Entropy (8bit):	7.990375489786826
Encrypted:	true
SSDEEP:	384:+cazwi7j+7IoZ6Gk3Pb4w+pRBeAq8L0HMQUUDDUakvQtQPOQ/4hJl2Gfp96ZZn:d0ncIos/aRWoQUUfkSQ2Q/6lUt
MD5:	1A2740C8DF445989E4EE5F5396B6474C
SHA1:	A3F8545619FDD5B2A481952CD9E2C7B169BB43A6
SHA-256:	63673FAEF8532B2789DEE1AC7534F87B1A6A249590ACC7DA8644BEDA141794FC
SHA-512:	59DAA4BE9380B2E008279F75CFCEBA2E36AE8D5E0CEA9F8F7C3A48452C26ED138525EC6DF12BED4CA81E977730A6716F352A98D23E5A57A5601EF9EBED5DED73
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/fonts/wellsfargosans-lt.woff2
Preview:	wOF2......T........4..T"..33......................V..(....`..,..r..W.....8..Y.6.$..x..>.. ..b. ..(...7.........._..1l.f0.N.L7.........?).!..h.:..!....H.M.U.W.<M...U..}O.C.....j....."..w.Y....D...`.a.......B6..f'......F..r.........}.m@....8....?x......eee..g...d.0Hf..1.........<.h.y....j..).p..;.d.C(....p...Kx..Ed..D....{....I........}.K.y.3S.\....IW.c...ZBUV.B......s.{y..E.... ..$A..f..tY.....:......_7.k....\|.E.........}O.S...;.l&.."..P3d..YB.........)!..!..I:.JBKBMP....K}X.....v,.w..Ew...[.!.F6.^]Y..P.:.,4............a....,.`......{r.... 8...qe.....2K;K.jW.9..Eg..Ew...K3..B. .:...8..m...Pc..$.i./?.]....Z.....C#..~.$.#.z...[.1H..W&.r.<.??W...M..._`<...+.. ....TN'.H%&...O......-OK........dxD.V..@..#..'...W...s?..U..hR.X........H.].A......QNmfe.f......C.>...8RH!x...U..X"t..\|,...o../.2...27?...x...WQ...?...;FV..9u.P._.>!q..n:..aW. 40...V..............h0..0.DA..}.....~.\..`O..3...14......R.k.H2L.t.Un..a..6..6..(. .x.9..!q.m...nFA..I.^eOAO.(.

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	7363
Entropy (8bit):	7.9126108137572935
Encrypted:	false
SSDEEP:	192:rGwR6WNmnkrOd+L9l+jExGXZG5C3PQVkkBvttqdQg7:rH6WNmYOdg9IjpZG5CoVJtlA
MD5:	C885A0955F4F35B25BCECA71830F266D
SHA1:	4BBDC15DE0149DEE5E6FEAE4FB32A520A983A1CA
SHA-256:	5C18C7230C1E013E39D16AF91A84FDEDD4A6CB5874E26729F0883978C4BA229E
SHA-512:	BABBA242C4C67BF7D37F71F0234A8EB1AE2DEE6A1C01AB002590DAFA91483567099E99AA0E7FD6FC810917D550B204A74B7A39D9728293524F9CB50E094EF68E
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/rwd/Native_App_Phone_Personal_v8.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@.........................................8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe.......?...{....pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe.......?...{....pixi............ipma..........................iref........auxl..........mdat.....bg....2.....(P.+.!c.9...2l...S(.......T....L.....6}x.scI...&..7.%..G.....!&..g.>.B..(n}...vn.........=..d?..s...@...#...t..C6....ZfY'...&.b..'.8..,.XZ....v..V...!.;..].kG...........-H4+.....G.........N;2.9..#....)...m..\|.9U:zA.......^....v.$..t...D.n}..o......N6Z..{...'.6*[&....f.2X]......[i..A......e.....x>k9W.._.q..T>...-.T....T$s.V.'.-...2...y[.-&~.\|....zwh..m.DN..{?.c.+..>C._.#M..#....."...q..:?6..,.......t.....J.N.ZTS.....+..a;....Z.N.u#fQBN.xi....\...J.xyE.kM....3....8..}.K.....r...@.....bg.......2.1L...n.....<f....O

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65439)
Category:	downloaded
Size (bytes):	186188
Entropy (8bit):	5.381922074557814
Encrypted:	false
SSDEEP:	1536:AUSkK5fIqxZ8f5tzENqa8jkHgU7nR9VAGinw4tOv2FZ2ZhnrnCWQXxQQG+auu9jV:AU8ddlrnCWQXGK6IegajT8P4S1zna
MD5:	07665A682B153A40C2CC62F3427845E5
SHA1:	338BEFB86AA7F4E0091ABD82E3304564F79F2DA6
SHA-256:	BEB4DF2532E0D624AEDE98F61AE1A1CFE85EC9D0C2CA0E3FA9A67565F672C111
SHA-512:	862E3E950BA6561FE47B4D6AD681CADEB4905397216EFF860920DE508A77A5616BD43D6B838FC739FD2B0BA3C1C455F18C741167BE391B64849275B90A51E2C1
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/ui/javascript/homepage-ui/ps-homepage.6d7689b97dbe15e4a0d4.js
Preview:	/! For license information please see ps-homepage.6d7689b97dbe15e4a0d4.js.LICENSE.txt /.(()=>{var e={5397:(e,t,n)=>{var r={"./en.json":3776,"./es.json":9843};function o(e){var t=i(e);return n(t)}function i(e){if(!n.o(r,e)){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}return r[e]}o.keys=function(){return Object.keys(r)},o.resolve=i,e.exports=o,o.id=5397},3905:(e,t,n)=>{var r=n(8698);n(9653),n(6977),n(9600),n(1249),n(9554),n(1539),n(5212),n(7327),n(7042),n(2707),n(4916),n(3123),n(4678),n(2772),n(561),n(4747),function(){"use strict";if("object"===("undefined"==typeof window?"undefined":r(window)))if("IntersectionObserver"in window&&"IntersectionObserverEntry"in window&&"intersectionRatio"in window.IntersectionObserverEntry.prototype)"isIntersecting"in window.IntersectionObserverEntry.prototype\|\|Object.defineProperty(window.IntersectionObserverEntry.prototype,"isIntersecting",{get:function(){return this.intersectionRatio>0}});else{var e=function(e){for(

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	117131
Entropy (8bit):	5.331024773195004
Encrypted:	false
SSDEEP:	3072:4JKIJMdb+C4CUC6p+w4wUw6/+545U56h+I4IUI67psKWGljY7D7bJuj:VIJMdb+C4CUC6p+w4wUw6/+545U56h+P
MD5:	F71361393287D8202237EAA2BD82AA6B
SHA1:	0862BF6F7FFCA2B9A2637E20EF2355ED2C250D56
SHA-256:	6FEAA1D7D54E9CC9740F64D00859803AA03B9FC20DB6A728B98F262B3DAD554B
SHA-512:	4DBDD4593F371FEC7B95FB6CC121D3F889C404FCBD8881426D00FDFD8EEA7940E05B1809D4408827B76A7DA75E3C5A4497AA171ACCAB2F8161DAC48FDAA56A13
Malicious:	false
Reputation:	low
URL:	https://connect.secure.wellsfargo.com/auth/static/ui/loginaltsignon/public/stylesheets/wfui.8371e772fb2cafb2a7d0.css
Preview:	.ChildWindowOverlay__childWindowOverlay___HYtOy{background-color:rgba(0,0,0,.5);bottom:0;left:0;position:fixed;right:0;top:0;z-index:1}@media print{.ChildWindowOverlay__childWindowOverlay___HYtOy{position:relative}}.scroll-blocker__globalScrollBlockSlim___sZGXn,.scroll-blocker__globalScrollBlock___aGxaq{-webkit-overflow-scrolling:auto;overscroll-behavior:none}.scroll-blocker__globalScrollBlock___aGxaq{overflow:hidden}.scroll-blocker__localScrollContain___yArR5{overscroll-behavior:contain}.DialogContainer__dialogContainer___BwN_V{align-items:center;display:flex;flex:1 1 auto;flex-direction:column;justify-content:center;padding:0 10px}.DialogContainer__dialogContainer___BwN_V>div{background-color:#fff;border:1px solid gray;border-radius:2px;display:flex;flex:0 1 auto;flex-direction:column;max-height:100vh;outline:none;z-index:901}.DialogContainer__dialogContainer___BwN_V.DialogContainer__desktop___Q6E0f>div{max-width:360px}.DialogContainer__dialogContainer___BwN_V.DialogContainer__mobile

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1712
Entropy (8bit):	7.812135608309189
Encrypted:	false
SSDEEP:	24:FMTzC7DQ1AHk00QYbf95nJUOfRHqjWe/YjrtBd5dXcbYTYCsdIDWn8q+12TVoUfS:mTzSD3EQYbLm2dk/gmKXsdIDWNTVjfS
MD5:	C939DA49D435A33B6DA79639DD7B449E
SHA1:	B5C908F157D240C4B78F1E7A6C0808AA898C9C23
SHA-256:	60088561EB43FCA42FC2F9C996AF43347355642872EABFA97A943D2F28EE474D
SHA-512:	A52D504B8909FF855473E96079D1494D9EF4CC9C1C7A478C8C21F78EAAE6C6B35F7821D4B90ECC7B53533A806A2B8F865802C7C2C8C878AB200E4849AF9562ED
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/rwd/wf_logo_220x23.png
Preview:	RIFF....WEBPVP8X..............ALPH@......m.!9z{vzR.m.vj.8..m..dm.m{7.=..9.....=...H.w..:.D..$UND~...._.7$.......~...s...{.D...vN$...xm...Z....y....G.yia.97[...._.m-;...O...4..I..\3h+...:.G...::.%.[.......=..A.....q....M...H9h..X......?N..uj..&...B..m...8.......d...d...g....?.d].7....qI.\|..x.....d..........."....._nt..9...6...g.0.}.s.;..)+ .a...Z.....Y.....F......%......\Q\R....z....2.X.....zKjlt...Eot.{...\..^..cN.I/...>/`.d./.H]..2....5..2...{v@O ...W....i...-.0.f.]DR#'.v>..f...s....S..d..Dk..K...W....[...8^B....7.d...X`$.3Ij..\|:........K].<. .$.aF..S.l1.z..@vY..g.M.H .....u:.q.,....a..O@...-.X.s.\|rWII..[....,...U,.xK....b;....:p$..<@.I....B..B....{1.$..V.!..!2...@.(.n.n.z...dm...S..rI..xX.?.:o..C...b..L1+._.O...ww.E.A~3o..xF....n..q.J._..sK..Y.....S............#...e62.../....6w.....1. i..S.)8....6.},...}i.1.)a.7\|.F...I3........Q.o......,.a_\R.l`M.'..d..=,...,-5.8u7n6..Yz..H....#...=...T{..'l.......o).......}i.....w...3..S-S]F...&.3.=...z...v.S...

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	3491
Entropy (8bit):	7.751164503508139
Encrypted:	false
SSDEEP:	96:rGglmjMhlj7xhADjOWYmRwI5MaOmlE3FqvrB+XUyFgOw:rGQmjKljFO3YmRwIiawFqvkDFo
MD5:	F5742F16F69477C27FABFF2E3DF686C5
SHA1:	67C8646BA7C4435FA2AA78D3462BF9A7E6F90B00
SHA-256:	C13282ABBC5822B343BFC13BECEBBF9F8EB94A465520C5E1A8C41BEE46F75B6E
SHA-512:	C80DB9007FA01F7F2FF1B7BD3F37151E18DB21256FFF34425465CCFCF00135156E7BAF35FA0D8E0A4DFA3DE1DB9159E249EC52C056A72F5AAF3CDF1A2DAA6A6C
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/contextual/responsive/tab-table-compare/compare-gold-PREMIER-1400x170.png?impolicy=TTCDesktopXL
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@...................-.....................8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe................pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe................pixi............ipma..........................iref........auxl..........mdat.....%....2!Dl.....;...JZ8..=.F..>]+.f.]0o........%......4 2..Ll..qB...3I..$K_...X.&..~u..7..tU9..o..<.J..T>.....2Z,....6$......a.........&......W.-.u...w&@.E{.{.C..n........$.SX...T.l...~..;,>\.e..]....Nm.\|.rg&_...._...b..D....pO.=...T+.....[tI.I0..t.E.G0_..K.t.r...w..O...a..*5..y..%..j..:.]l...........2/....9.4p..E...%"S.IJ.h5".;.Q. .DK.n.J..e..G&...?..K?....~.+.c.~....j...\|..F........;Q:...3.W;.@...r....V.LI.1.nRD.M.rK....?..._^S.K. ..s.c>P.G{7.-a..t...y.-...psr..O.Y...)...wC.2w.E..q..~Q..>a....j/...e..R...#`gk.....<4H._.

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 220 x 23, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	2503
Entropy (8bit):	7.903665794779051
Encrypted:	false
SSDEEP:	48:TccKzwcoxK2VxCBNj6S6xHVnn9vfbLwCPgbffqOz4Xn7hOA4lBXjW0oeZ:TcWG2r6jUdnhTUbbffTMX7gbWheZ
MD5:	DC1968433C75A52613CCE778E0DAE0DA
SHA1:	AF08AB767909B9C9462D821E6384E2B1F1698E72
SHA-256:	10C1ACB80B088029EAB596925F58565E025206D10EF1EDDED0BF055DAC884BBF
SHA-512:	85B2E2BF833E8027C6DB1B13EA07D4287E41708A4684D41F0DD70CEE67EA8F0ABAE501666613C87D4A123D757092C7A5DFB4BAC7474857BBB7E076DA5839C485
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............\|.}....orNT..w.....IDATh..i.U....=.3.....Ad1.5.$..)....X.Q.h.DQ.ST...B.-..A.bb...e1..$.".D.. e.. .f...a`..._...;..%..}......}.O.>.......tA.s&..f..t..ZF..2..N.<m.....6..A.$I.F0.nt...le..x..KDwbp.~b.x-FR..J.;.......f........../.SF.5.E5..{....b0].D-;X.b.J..MO;...w..\...G.z<F.+..[.0..>k.^..O.hPB.....J.....&K...h......n.....I.F...L..E...p*P..].U2.~..I..;..8.'.n`..7.q7. .......5'iP...Z{=.wC.....F...j..F."....\.....X.....w.RJi.$.)..RJ78..-'.Ku..<....8..RJQ...SJw:.eJi`...U.E....F7j_..k..Rz.\|..4.Q...a..v{_?<..)Mu.J)...Z3=s.-H......T...2.......=..Tny.u..-......R.w......:.a..3.rS....@';.h.I.....\|+_...RS..,f.m.l.?9b.k..ii..Q......!nr....#":F.)...+..,.......V..2.y..C...%.FI..`.g.....Q1.v+..{....Zk_.p/K.s..%?..;~9..q..1.y.7...b........x(.0.<g..........0..`....M.8-.h.u6\|=K...4.X....\|.X.,..X..U..J...lk.....;T....h..1..4.p,S......y.".5..z..Z4G.s3...`&R..]...O............-...\....^Ey.9.>....L....d...E...d....1.......<7v..

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 672 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	99570
Entropy (8bit):	7.994754322998913
Encrypted:	true
SSDEEP:	1536:bKpN8xhTA01JJIJ6djIw6XitwngK7T/ONwUXFFHGiuthE9XTMAyv1:bKAxK01bIQdP6ZgK7TOrXFldutKdDy9
MD5:	82C82124A08D4DAFA1D612A4F1F91747
SHA1:	78E2F8B9C6672DE54E17E1D2B65A841B32BD8EF9
SHA-256:	B1B4013E3C72BA314A8A104400AEBD3F57B8D3852869A2B9A656B448C5D9788A
SHA-512:	C30049D443BE5666089B8814DF2369FBD169B2142A96DE1486B42296CA3F72E4E2D2AAF63E768B7743CE6309D42117886525775EADEEA26936E57B0290CE90F3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............r8......orNT..w.....sRGB.........IDATx...y.^Gq'....W.%k.l..cc..666..@^..a..e $..y3Y.2.B....2IH....H.ag..c...[`..y.-.....~.8]U...J.$?...\|..<}z....Vuu....... ...3...i0H.9..@.[J).Y..}4...U..Wu..\BF...r....U.N.K.J.I...w0.h.7g`....2,!...T~.G.8........4\.exT.`...._.@J../.]. %..r)......`.....o!..Xd.l....L.9^.%.{0.<......k.........iT~...l.....A........2Q....al.>.7.Ia>v]...;...3......n.,...\|C./\..(.0O.R....<wL...J.....u'..{.j.Ie>9.T..2D.7..... ...c.I.$v.....?O3..c.#..7.....A.9..I}.z..bM)..r."..A_.A.n....'3q.....N....f.lD....UuN........p.R....?K............2....h1..\u.!K/...M....SZ..R.....c.XS #.C&.$..v..fi...\p.!......P.....N-...%...\.INJ....r..<.U..y..f&.6.Q$ .....e.J.U.P....o97.'.'..Z.Vb$oa<R..W..].s/$.f..J.;.f..7.E'`.}[9#.a..V......5E....g........O.R.2.....s.....'.c..3..l..Lf.<.}O....J.2.l.[3..@...$5......3..w.pMC.A... ...........b..U{i4..K.i..co..\j..c.(=...g....O#..k.N..0[.M.cT.3.xo..h.u...qN...g.5...$

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=703-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&cb=1711631971855&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_ccd_findcreditcardrspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A542-228930-16%7Etcm%3A91-228643-32&promoSlot=2
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	1646
Entropy (8bit):	7.589012583203177
Encrypted:	false
SSDEEP:	48:rGAc/jamrArQ0VnN66Qna7eqOCn9+cGRvCB+wTscCe:rGPH6p57eqOCIBJCBbhCe
MD5:	F4EA54D2DE3587734104A7FE6AC34593
SHA1:	ABB69048123B667AD90DCBA04DA4F08A4A4AEEB7
SHA-256:	E802F40411F32BC8331100DE87C647C70071BBD2E29A44BEFCD52E48C6020205
SHA-512:	AB7C4E92A903D96F341D965D828AFF923BAA30D7388FE1675607D01CF541A476DD25D222D03C2026D7A946BD7A092F44ECFB715B42BAA332C0DF2ABB90F01A56
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/contextual/responsive/hpprimary/wfi_ph_o_enjoy300_1700x700.jpg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@...................`...#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe.......8........pixi............ipma..................hmdat.....!.......2...P..<.@...z.W..^..T[..].Ve...reS....`.>....{..^;..\q..?.L....1d>,h/.u...9.;=...U.dM..........MbL...~>u~..S.?.=....VV\.].6..).........u..\..gV{.....B.....[<%......m./..I9.^.b.w....i}.g..A...s..-..t.8v}...OF^........+.8.\.....3@P....[.&.t...."....<...r...BC.@..n..M.G.;.....Aul.?..i.....K. ..8.,.t".....,.d.=..^.7>..]...o.@...0A?.).....tj:g..}w......U..x..g..{a....,..>z...M.cHF.&X..d.?...).QR...-C..7...+..mS.Od....f.......39....Q.b.......V....Ws..]p........A..T]...PHt...r....2...H...iqO.&....jB)n.p..>./#.r[. f.c.M..qf-.%..q>.:e.Nl(..c.P.c$V.l:.o:p..oQ...m.V6Q.YF.....j..E..Q.6...4(.6..]......k}8...t..."........'7'.....<.0g..MI.Y...`.a..........V.#s.6........\2...&F

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=703-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&cb=1711631971859&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-304276-16%7Etcm%3A91-228643-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	319740
Entropy (8bit):	5.097902695367344
Encrypted:	false
SSDEEP:	1536:W4IjtC/KgkUTG5kZFi3WVrAe9p6N8aStNMNPn:WjfkxAp
MD5:	4EADCDB852968DD2CE67A96141D3557B
SHA1:	3017EA2B56C5871D61DBAD6170B0AD234FE1D1EC
SHA-256:	208FFE354F9062EAA7EA568AEB5F1030F8F58A12FF066FAE212DC03156B0B9FA
SHA-512:	F4634224148BA2BA6163C2A4907BF7BDCCB5A5BD8B8003AC7D8FE01080F610CBFA6491B76914A79F4722ACF43610159AC2BAD7E0E95B5C0D67ABE3CF028221EF
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/ui/css/publicsite-ui/ps-global.ef4b5cfb2367f87c93d9.css
Preview:	@font-face{font-display:swap;font-family:Wells Fargo Sans Regular;src:url(https://www17.wellsfargomedia.com/assets/fonts/wellsfargosans-rg.woff2) format("woff2"),url(https://www17.wellsfargomedia.com/assets/fonts/wellsfargosans-rg.woff) format("woff")}@font-face{font-display:swap;font-family:Wells Fargo Sans Condensed;font-stretch:condensed;src:url(https://www17.wellsfargomedia.com/assets/fonts/wellsfargosans-cd.woff2) format("woff2"),url(https://www17.wellsfargomedia.com/assets/fonts/wellsfargosans-cd.woff) format("woff")}@font-face{font-display:swap;font-family:Wells Fargo Sans Bold;font-weight:700;src:url(https://www17.wellsfargomedia.com/assets/fonts/wellsfargosans-bd.woff2) format("woff2"),url(https://www17.wellsfargomedia.com/assets/fonts/wellsfargosans-bd.woff) format("woff")}@font-face{font-display:swap;font-family:Wells Fargo Sans Light;font-weight:300;src:url(https://www17.wellsfargomedia.com/assets/fonts/wellsfargosans-lt.woff2) format("woff2"),url(https://www17.wellsfargome

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32088), with CRLF line terminators
Category:	downloaded
Size (bytes):	45340
Entropy (8bit):	5.280607883775467
Encrypted:	false
SSDEEP:	768:15JUH55WdroJwokCmkJmhdI9w96R0ho5BG9I:17U006oPtkXy
MD5:	5F310E2E2A558D76B916E137AEE73462
SHA1:	C7FF0190C9C2C414321211F3863E9E27F32B713E
SHA-256:	385196F0FCE7CEA80C2C99D971780ECB73DF9DEA6E5B2D95D19DF3AA849C7B1F
SHA-512:	57BDFCE66FF89336B5C8CF25B4DB3A2242D0DC18D8DE96F1D7F1CF9A8A50530F942C64B69578013607230BD850C5462472F814D003142D398AB15943BDA02E84
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/assets/js/wfui/appdynamics/adrum-ext.js
Preview:	!function(){new function(){if(!window.ADRUM&&!0!==window["adrum-disable"]){var t=window.ADRUM={};window["adrum-start-time"]=window["adrum-start-time"]\|\|(new Date).getTime(),function(t){!function(t){t.Cd=function(){for(var t=[],e=0;e<arguments.length;e++)t[e-0]=arguments[e];for(e=0;e<t.length;e++){var n=t[e];n&&n.setUp()}}}(t.monitor\|\|(t.monitor={}))}(t\|\|(t={})),function(t){!function(e){function n(t){return"undefined"!=typeof t&&null!==t}function r(t){return"object"==typeof t&&!e.isArray(t)&&null!==t}function o(t){return"function"==typeof t\|\|!1}function i(t){return"string"==typeof t}function a(t,n){for(var o in n){var i=n[o];if(s(n,o)){var u=t[o];r(i)&&r(u)?a(u,i):e.isArray(u)&&e.isArray(i)?t[o]=u.concat(i):t[o]=i}}return t}function s(t,e){return Object.prototype.hasOwnProperty.call(t,e)&&n(t[e])}function u(t){return i(t)?t.replace(/^\s/,"").replace(/\s$/,""):t}function c(t,e){var n=Array.prototype[t];return n?f(n):l(t,e)}function f(t){var e=Array.prototype.slice;return function(n){re

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 227x125, components 3
Category:	dropped
Size (bytes):	8215
Entropy (8bit):	7.942181836916506
Encrypted:	false
SSDEEP:	192:kAto2mEnPOlrtpoJpZQlQq1EQFaqA0tcf2cVq340qMX0MGvJHd:kCo2mEnnHuqca1ftAN0bJ9
MD5:	944CB6CAC2BC2979298228E69C376DF4
SHA1:	47C44DB27244F8813AABBB7424881671B8D5D50F
SHA-256:	091B8666D96D352485B33F9DC9B959C679BADEBD25F0B250EE0A9365431BFB48
SHA-512:	F64CBAFF570A5563BF7660627789D8C62985FBF9E70C7D0AD06DFE829FE637A7A7A1B0006080E9980E31266C82F30359F2B7143E01DFE1D661EC72952177DE28
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#....#)" ")1,,1>;>QQm............................................#....#)" ")1,,1>;>QQm......}...."..........6...................................................................%H!.E.v..n..`.V..C.....D.tR..&.:.'u.1Go.9B....;K.N<...x..Q.$....c5y..;X.t6.t.....<.u6.n. bc.q....OT.?..FQE(.^F..9.U..#A....<...cL.......T.vx./..\|....... ,...Z.h.]..s.l.q. "c..u.9.Nm`.....8+...?..5n?.y.0x}.A......f...-^Ju....`.....dT....u..q......'.5.!.q.i..K..gZ...u...3W.m!....c..Qejy....;..r.tqL.........!...\|..~._O.?..S..ewS......3@....#1.;..&..4....SN....@..T.L..?.vC...m...x.W.&..@.......:;....+..j:.+o+.Q..u.$.7..?.z.t..c...<\|T......>..ZOK.D.J.>.=...`V.4.P..........\6.'G.K..J....\|.y..3F.j..bQN0...)..D_......<.e.o1)7X..&.s.)Z...1..i.....:BW.....l..{.....G..9.d.\|k..jA..V...y.U!.9Q;.Av.E$.#>j......"+(E..3....J...('.m.2..0Z...w.ZF...N....si..Q.......)..............................!..."#&12............31x....+D.....l.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1579)
Category:	downloaded
Size (bytes):	10477
Entropy (8bit):	5.141535271797348
Encrypted:	false
SSDEEP:	192:VbFnNojImVVMbpK3TXvUcgbRmYaUsndJ3UYNzT5Qad9FMjnpBu4x0allS45/2vNd:VlNsImVVMbpKDBgFAU6J3UWgMn
MD5:	1B43322895375381818E60F92BB13F2B
SHA1:	9645AD0994E4E2CD17A44F3F191858C0231662ED
SHA-256:	C2D65814399A086C199018CE01B1DB21251958C6621939763C3F677D88B28516
SHA-512:	BB40CD4B98674580E078C267AB5EE2CD2562150D25DE8C0BAF7358161EEBB859B7BDEAE5EE7D5BE1E9CBD620C21855C368A35EE5AB1D410750E40158D1A8C47A
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/public-site/utag.478.js?utv=ut4.51.202206102106
Preview:	//tealium universal tag - utag.478 ut4.0.202206102106, Copyright 2022 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatecha

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 13 x 13
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.67642849577325
Encrypted:	false
SSDEEP:	6:CuKosJ7n24TPa81dltrKLdndnt/oQmcgVS:UFJ7n24TPa81dTuBT/NmcZ
MD5:	2A201ECA3DB2EA7B2D03163F9457F7BE
SHA1:	2F7BA42EE9595FD9883D987869A0566B07A98D09
SHA-256:	02D05B4FC30114A21E7AB91382C88EA0C3A07A56E6C141F8FF983DD408C67C40
SHA-512:	C7AAF37D673F14F9F76F015352CCB29CD37C69A036FE8AE35300A643C0E2783EDD13F5499CB8D127A2F7B13A5F36538C7799E5FE4C74A97B311285114A109791
Malicious:	false
Reputation:	low
Preview:	GIF89a......."b.#e.$g.$h.%j.V..]...................................................................!.......,..........M`"..(.".l+....l.?E..M....0`!T2. @..b...aD...^u%c.....!..$....=$e0.+uB.K.c>..;

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (533), with no line terminators
Category:	dropped
Size (bytes):	533
Entropy (8bit):	5.688079963946879
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHEGKrrSMUniUMCyEKJUb0U64wmaW:hMiRO9r9r8iUMzVJd4w4
MD5:	DB905B29A7CD40FF322861FA8485465B
SHA1:	CF2FFB112BF74D3043536380730E68EA7E55451D
SHA-256:	22630CA6378D31097BA07D42B8E70CFB5BFEAD74E4767E03964503D0DD6F3CED
SHA-512:	0CB46499C1EAED353857F7FAC71C24F761EFEE2F0E06D3FE10B85EE3E506067674F4532B1C34156A97A55A8A60CD9A5C6A20885592A5DB9A2A4609A8C39CD19F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CJqRxPOFl4UDFUc1dgYdYJsNTA;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=*;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F"/></body></html>

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 220 x 23, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	2503
Entropy (8bit):	7.903665794779051
Encrypted:	false
SSDEEP:	48:TccKzwcoxK2VxCBNj6S6xHVnn9vfbLwCPgbffqOz4Xn7hOA4lBXjW0oeZ:TcWG2r6jUdnhTUbbffTMX7gbWheZ
MD5:	DC1968433C75A52613CCE778E0DAE0DA
SHA1:	AF08AB767909B9C9462D821E6384E2B1F1698E72
SHA-256:	10C1ACB80B088029EAB596925F58565E025206D10EF1EDDED0BF055DAC884BBF
SHA-512:	85B2E2BF833E8027C6DB1B13EA07D4287E41708A4684D41F0DD70CEE67EA8F0ABAE501666613C87D4A123D757092C7A5DFB4BAC7474857BBB7E076DA5839C485
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............\|.}....orNT..w.....IDATh..i.U....=.3.....Ad1.5.$..)....X.Q.h.DQ.ST...B.-..A.bb...e1..$.".D.. e.. .f...a`..._...;..%..}......}.O.>.......tA.s&..f..t..ZF..2..N.<m.....6..A.$I.F0.nt...le..x..KDwbp.~b.x-FR..J.;.......f........../.SF.5.E5..{....b0].D-;X.b.J..MO;...w..\...G.z<F.+..[.0..>k.^..O.hPB.....J.....&K...h......n.....I.F...L..E...p*P..].U2.~..I..;..8.'.n`..7.q7. .......5'iP...Z{=.wC.....F...j..F."....\.....X.....w.RJi.$.)..RJ78..-'.Ku..<....8..RJQ...SJw:.eJi`...U.E....F7j_..k..Rz.\|..4.Q...a..v{_?<..)Mu.J)...Z3=s.-H......T...2.......=..Tny.u..-......R.w......:.a..3.rS....@';.h.I.....\|+_...RS..,f.m.l.?9b.k..ii..Q......!nr....#":F.)...+..,.......V..2.y..C...%.FI..`.g.....Q1.v+..{....Zk_.p/K.s..%?..;~9..q..1.y.7...b........x(.0.<g..........0..`....M.8-.h.u6\|=K...4.X....\|.X.,..X..U..J...lk.....;T....h..1..4.p,S......y.".5..z..Z4G.s3...`&R..]...O............-...\....^Ey.9.>....L....d...E...d....1.......<7v..

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	563
Entropy (8bit):	7.035266309569057
Encrypted:	false
SSDEEP:	12:6v/7+WHUNpR1FUmFcUt6tf1Jbet1NyxvKFyzLXVR03xnU3+I:+0NpbuQHcmt1cxKF8c3xn++I
MD5:	EC9C1E94B174218C5779C50FE7042F30
SHA1:	232E0FE573CE27162B8A345F850CD445181F5FAD
SHA-256:	B8E5B9F0FF90966AFF36F61280DC586FC21F0FA2E700644BB8F39CA32F3730A4
SHA-512:	E8583B202B270FA60FC50E9FA02032E7E5324F876600FBC0FBC3890A5DC746352CD2A00435C113772DDE1922097E56AC0C94253438E6FF5BF742F4E2BD5E6101
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....`......xPLTE...@00800930;31;30:20;30:32<40;32;31;20=30:32:20<40880:21;31:22;21:30:50;30;21:30;41;21:31:40920;30:20:20;20;40<30;22;31.U+....'tRNS.. o._`..@...P.. ....0.....Op...pp..f.V.....orNT..w.....sRGB........)IDATH...r. .E....E.hl.6.........<..}r.^.=W....zo!..:N..t.....1......Y.z.ar.....C!.i.K.U...5.}..lZ..Y.u.R.[...1~..){6..&lx....Yl.B4T[.....cF..\....]LKj..y.(.....)C3^..,&... m...mL.8e.\8.B.].M1.x.........?Zl&.........{.x..JI.<h......g....tq./..M .846..dk...U.....h.)..J..,._i.......v.7.?v[.S>..(....IEND.B`.

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	19628
Entropy (8bit):	7.983128715482965
Encrypted:	false
SSDEEP:	384:rqP2bkcBvCvG/FHVel5+ITr3Vm7V3dxYi/QkH2GsBiviW04WM5mYypZ:eiXvkGXel4Iw7NF8BiviWftQYypZ
MD5:	87490CCDFD428EEE95E906FBCE88432A
SHA1:	E1C384061E5AAF77BCF202341510DB8CDC2AE350
SHA-256:	936C825F599809216670E9444D31E555E587B6F9943A89681CFEF3621C5B0843
SHA-512:	C9325E6AE3526337E6038C08AB9926D44EA3E8A099FCD3A0EDC7AC8E35BD39F58E175B95C660D214690EF0CF60BFA1DCB05B181832465E8551DD175C9C2E1275
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/rwd/volunteers_cars_616x353.jpg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@..................K....#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe.......h...a....pixi............ipma.................K.mdat.....f&{......2........q@.. Cck.......M./J..._.s..v.w@S..Bc..+.B..b.-.....c........-..U.+.~...j......!Y.....$p..8....f....[...t.Ls...yY..5.JMt..gv..,....9....?W)s.OF.gCk"u.....M.=.W.-.J.?..Q.:th.{..H...H.......G]..F.....NZ...e...DS'._..T.J!!,F...qh.D..N.S...Ey..y.[o.{...m.. .J.=J6Z/...^UU.6....8yf..)C.>..",]........Gl....h.60<......v.PB......1L.!...?.J..-........(......&.......b.i......f!Q...i..h...I...hI......!rfZw;.1X.0.X....X......D......3...O........z.^2..T..._.47.H.K6.._..l.F3K!.....h0.I.....or].MU.s.hR..y.}.#.P...m.......q.=..~.4 .U..SMh{."......z{..._.n.~.u#R.WP..t..M.v4..@.gB..(D....F..F..P/T\.U...ql..'..s....l....b.......>].?..5...>a....1..n.....LO.x.Z.k+c..2.u..\.....9..?Av

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 616x353, components 3
Category:	dropped
Size (bytes):	38692
Entropy (8bit):	7.9773707247163035
Encrypted:	false
SSDEEP:	768:ZvG7POX1e3YHKGAbcmS2FSNheeJ3uPnsCUaq0puyk6LWm69R46cCcA+foLj:ZvG7POFeIHhFmXKMeEPnrUYuykwWmYRR
MD5:	4E64BCE05E75EE62D111A1443979413F
SHA1:	631A78F1492B81B7E6CF339EB10AD6A939295813
SHA-256:	4A5B98E86BC37F6A038AD8CE761E17CEFE3D7DCE918E3D987088FBBC57746B99
SHA-512:	7858C7837326B309B94DB64CA1D9A0170543F10E0E4C2BA4D9474CE9E202A2415C866D0F9B4361EA28C6D7F5FB9E736A1064977BA7C5EF8934EDF6C6D3D33221
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................+".."+2(2<66<LHLdd.............................................+".."+2(2<66<LHLdd.......a.h.."..........7....................................................................BG73..j........ty ..LHw.6r.(tU..N.L.K...z.P!..~........t8:...8:................=B...3e..Fd.>.2...o<.S...8.D.rK.J'v.....K.E.G..+..8.:6]^.g..g....f....ba_..E..4U..].\....^t9}....gl..ud.....K...../%.j,...(........................S's=L..}l..E..D...e....g..y.=.7.h...[p.e.2j.[N^........[=m..E..O....Ey...XJ{'..;..t~+fq....N...z@..N...Hk.9.C..'(.ZRy.]T........................#.[.r.v<.c.>...y.C.......h.Wk....D....4.m.c.\|..Ug.r.z?s~.i14...U.=w..u.t5~..O.....t_4x.kp:[*.9..... .1...8d......096I?.4.+.....8.....J.7...........#$.l.......z{....i.[...../?..:.qF...>B..!.2......{.z.ZZY.ADF.:....^.Ck.^....un..`g....6.........E.._Z.N...d.-..Rz.S.ZE.d.......p4t....MC.....`.......Srv..>f..Po>.n...`........z..3..[9-..H[.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	downloaded
Size (bytes):	106326
Entropy (8bit):	5.52689299206484
Encrypted:	false
SSDEEP:	1536:HeaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYJUhZ:+aQaOYw58ISTT4esfbw3h9N+rKW
MD5:	AB34788BB0FF19E7DA8AE85A28C60EFE
SHA1:	05756134A382E3CE923D55C033C07E91BE60E7B4
SHA-256:	1EEDA03EDBC2BB72AB44077BD30E718F3A9B2A2DCB493B9CC05976A2A1D7F2EC
SHA-512:	01602FC7ECD215E43B0081B853A5C35618E10436BCE6527FDE255981AEDFB701CA37DEB38FEB5D7EBE426851EAF90AE6FD1442C83B0C47767D05E8DFA6DC5E5A
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/tracking/ga/gtag.js?t=UA-107148943-1
Preview:	// gtag.js - 20230830115644.var GTAG_TYPE=function(){var gtagType,currentScript=document.currentScript\|\|function(){try{throw new Error}catch(err){var url=(/at [^(\r\n]$(.):.+:.+$$/i.exec(err.stack)\|\|[])[1];if(url){var scripts=document.getElementsByTagName("script");for(var i in scripts)if(scripts[i].src==url)return scripts[i]}}return null}();return currentScript&&-1!==currentScript.src.indexOf("gtag.js")&&(gtagType=void 0===currentScript.src.split("?t=")[1]?"CORE":currentScript.src.split("?t=")[1].substring(0,2)),gtagType\|\|"CORE"}(),GTAG_CONFIG={CORE:{id:"",salt:"ChAI8N/yiAYQ/sLpxs3R3/lOEhkAiCq8P5n+5Jl2lPYrrAqF+9CynSAMn5lfGgIrEQ==",name:""},UA:{id:"undefined"!=typeof utag_data&&"RETDL"==utag_data.app_id?"UA-19597165-1":"UA-107148943-1",salt:"ChAI8LztiAYQr7+BrOKYjbQiEicAfMDsaWrMhkFBMPGo10w27kKCufDm4bQPQHPe48IJzu3RQ+BdEMUaAsgU",name:"c"},DC:{id:"DC-2549153",salt:"ChAI8N/yiAYQ/sLpxs3R3/lOEiMAiCq8P0qN5GDJNKlTfLLeTfVz4qOpT6tg/+q6HwGf3lZdJxoCdtg=",name:"c"},AW:{id:"AW-984436569",salt:"Ch

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (574), with no line terminators
Category:	dropped
Size (bytes):	574
Entropy (8bit):	5.673539774962436
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHfqDBGKURENUniUMCyEKJUb0U6sCORwmav:hMiRO9q8EiUMzVJdsCORwp
MD5:	800ECECF13AE8D52525DBA3896F91A74
SHA1:	A810933CD36F15F0B8064C447C9E58B3765711EA
SHA-256:	9A8BC000CAD5113D890276870EAE93C9F6A1AEF410EBDE714DF750CFE41E6215
SHA-512:	973F6C230E82A06DBA4F50FD9901480AD5EF77EBE778E57DBA3BC49B2A114379711BE479D7764037EE8386050C50C729D44673ACAACE632C884CACC1FA183C18
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CNKJ2fmFl4UDFfUy-QAdsh4LIQ;register_conversion=1;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=*;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F"/></body></html>

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 27, 8-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	334
Entropy (8bit):	7.038888953436083
Encrypted:	false
SSDEEP:	6:6v/lhPEt/0kq/IuRZCr986B/BaxNCI3Iyi/QMwQDDu8YVv2rlvtJp:6v/7818woZuJBQ73PiYwPuJVv2ZB
MD5:	4655FDFC187C94A45DE7DBE46B10F328
SHA1:	C72B185CABB0B2FF6145531ACB0F6DDF6388E151
SHA-256:	34F8652DB04885C191B371A2DFA0ED8E8F66A2F358DA68B3674B530B36BE2C7F
SHA-512:	F431184629DD2D2093C90D8F9B60886FC013E903B394A2EC74041508966BA4565DD14CC205AAEFC459735372FAB8C83213D0F19CCAE5897F6D9B52EC2D0E5946
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............P_P~....orNT..w.....IDAT..M.MK.q...........BID...!.U...E.J."..T2.q.s_~-..\|8.r.p..C)...T...V../.-.Fo........(..`....kP!@....D.H((..{..Lpp>.]4..$(a~x.o..6..7.`0>z....>"...Dq....;.Uc.7.5V.N..8..t\|.s.....3.j.d$2<.......... ....Ji.....e...#.y.....Q../).F..l...p.6...o...f/....N...-Yv.~.".<........IEND.B`.

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5560
Entropy (8bit):	4.317655758021296
Encrypted:	false
SSDEEP:	96:S9cCqTEb4CXNcC9I8H0WXd76I0D35rJyoShzesVOxf6AifyQQGonPCAJ09tqeHu4:OcCq4b4CXNVfH0WV65rcD4sVOxfafyhO
MD5:	5B661F1F0045DECE3B8D90F28DE4EBC0
SHA1:	13DE4A39FB5908DDBD2DBE220B1F2C1E5A6044FA
SHA-256:	780B98A3861AA8D4AFE428953AD3B9E988A74CD5F064B4A1EB453F5D901221E7
SHA-512:	F007138B4CDB4D494731BEC68F6A5B4ED20E64691D8975790B4B29D43695C4C79483EC62C32A65E750887A80834BEAC5052C5F9CF3444ACCCC37D3D9E1E6DA8C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="211px" height="22px" viewBox="0 0 211 22" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 52.2 (67145) - http://www.bohemiancoding.com/sketch -->. <title>BIM/logo/large-211x22</title>. <desc>Created with Sketch.</desc>. <g id="BIM/logo/large-211x22" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <rect fill="#D71E28" x="0" y="0" width="211" height="22"></rect>. <g id="Wells_Fargo" fill="#FFFFFF" fill-rule="nonzero">. <path d="M45.112,14.1709 L47.1692,14.1709 L47.1692,21 L29.9977,21 L29.9977,18.5142 L32.4262,18.5142 L32.4262,3.4854 L28.4862,3.4854 L23.4857,21 L19.5143,21 L15.457,6.4855 L11.2859,21 L7.3142,21 L2.2857,3.4854 L0,3.4854 L0,1 L9.3143,1 L9.3143,3.4854 L6.6286,3.4854 L9.9713,15.5426 L13.9715,1 L18.0857,1 L22.1715,15.5716 L25.4574,3.4854 L22.6574,3.4854 L22.6574,1 L46.8836,1 L46.8836,7.4854 L44.8263,7.4854

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	694
Entropy (8bit):	7.172721138254676
Encrypted:	false
SSDEEP:	12:6v/7+rO9ze/gsy7DlRRPtR8S1mvTBdc10beXc9k5NRuNFy5O+OjNsK7Qk06+WoIX:kPh5PHbkrbc1ies9kTRueO+Ot7X8WoIX
MD5:	9A77102E024DC9D27D6B691986684355
SHA1:	2F6DCF10179CEE31F8464F086E9204835CA47AB3
SHA-256:	14CABA1F2BCCA844B9BEAE1DA303BCCDC5D7CB97D0D37A7EB9C1A0D37B18218B
SHA-512:	0BC56BF64A70E814F321A9F90673B4BA52968CC6384C391C4CDBE39F70E0B6FAC664500193072FAAD6665C6CC53BAD2B4EBBF24089EF0FC7FB0FF1CBE31CDF8E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....`.......PLTE...e]Zh``g^\f\\```f][f]\f^\d`\h\\h`\h`Xf^[f^\e`Zf^\g]\p``d\\e]\e^\p`Pc\\f^\e^\f^[e``e^\d^\eZZf\Yf][f^[f^]g^[e]]e`]f`\g][g\Zg^ZhXXi^[f^[e_]h]Zf^\C.W.../tRNS.` oP.p..@@@ ..0...@...P.._0o.0P...``P... _.`..gq....orNT..w.....sRGB.........IDATH..Qs.0../N@4......NP1.]...........:.K..f.~#..n...+2.....2.......\|H...`..kM5V..4i.....&..-....D.. .0..K.._.mZ..t...A.....Q..R..C....l..Z.8.....5`..lJ.....gF...IK..L....IDT..v.......~_.i}T..us..w.81.....$.."...U...~<?....ISF..M...KCD...v[<^q.X...s...N$.@.1F...D.8TD..... .BP.wzo...=Aj....h.c"..Kl^.P{...]......5r.p>.;..bFO5..z.,f.v.1CN.......~.v>....<...O8.%8-..ql.....nt,3k"=.....IEND.B`.

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	212428
Entropy (8bit):	5.846875382656166
Encrypted:	false
SSDEEP:	1536:vHs3hvKk6X7g4I1VE/P5QD3ihhv6YBFQxO1J2zm1vpcSKKsw0Wtmg3fd95RhMliS:/4KI4Iuh5hc+5sli/7kdIMv18weD4AaX
MD5:	170E371BA122E3FD64EBEFF6CC369040
SHA1:	FC605D9B2FB4DB43776DC7B315FD952D03D70AB6
SHA-256:	7B45E755DC9057B4666894684B8C9740FA35BFE815A74616D832663489710262
SHA-512:	6DE03AFAA4844C1D6958AB853ADD97BC02B68923A1F919BFE38C83804B323FC85FF024B6047278AAC5BB3EAE4360E1354A62AD89AD847837F178106DF181B02C
Malicious:	false
Reputation:	low
URL:	https://connect.secure.wellsfargo.com/CGCuB/5Xeh6/hj8dzB/iW_3/b5OQbGm60V9ihE/dW1ccAkbBg/HyB/aAxE2bDY
Preview:	(function jrwRRSCszG(){tA();D2A();j2A();function r2A(){return [-c2A];}var jFA=r2A();var QcA=U2A();R2A();H2A();var IcA=b2A();var VA=I2A();function I2A(){return [l2A,Q2A,z2A,w2A,-Y2A,O2A,-m2A,d2A];}var Er=function Mr(s0,A0){var h0=Mr;while(s0!=Dz){switch(s0){case rz:{var t0=A0[mz];B0=function(q0,v0){return f0.apply(this,[Nz,arguments]);};s0=Dz;return S0(t0);}break;case nz:{s0=Dz;for(var k0=g0(V0[T0[L0]],I0);l0(k0,L0);--k0){AA[V0[k0]]=function(){var Q0=V0[k0];return function(z0,w0,Y0,O0,m0){var d0=b0.call(null,Gz,[H0(H0([])),w0,Y0,R0,m0]);AA[Q0]=function(){return d0;};return d0;};}();}}break;case Kz:{s0+=Fz;var V0=A0[mz];}break;case Zz:{s0=Dz;var U0=new Date();if(mz){throw U0;}}break;}}};var r0=function(){return c0.apply(this,[xz,arguments]);};var dz,jz,mz,Hz,Fz,Rz,rz,Jz,Uz,cz,bz;var F0=function(J0,j0){return J0==j0;};var D0=function(){return c0.apply(this,[Pz,arguments]);};var b0=function N0(G0,n0){var K0=N0;do{switch(G0){case pz:{Z0=x0I0+P0W0-p0;X0=W0+C0+E0+I0;M0=W0E0+P0C0+p0;sc=C0*

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7108), with no line terminators
Category:	downloaded
Size (bytes):	7108
Entropy (8bit):	5.236528981569229
Encrypted:	false
SSDEEP:	192:LcJxlag3gqT699fiibrElqgX10PQttHc1sRlSsii5:LSx3wqT6fiibWX10PQtt81sRlS1+
MD5:	91A3833CCFFBAE0B31A6CCA516216880
SHA1:	9284E1BB265D09E17E10407F280072B9D938BEC5
SHA-256:	182475449B1DC308C4D183FE50D348AB2F4E882AAC99C0945762629C9FE65F9D
SHA-512:	84F2D5F942A23D854844FC4A70F60BC198D4C2AEA0BC753C70AA219F52EEC2D47BEE4DBA4306ADF8FC9322555B0B7311792D3C508B56EFE387A9095269FAEB40
Malicious:	false
Reputation:	low
URL:	https://media-wf1.digital.nuance.com/media/launch/sdkChatLoader.min.js?codeVersion=1710907168986
Preview:	var __webpack_exports__={};(function(){function log(message){if("undefined"!=typeof console&&console.log)console.log(message)}function secureProtocol(url){return url.replace(/^HTTPS?:/i,"https:")}v3Lander.isWebSDK=true;v3Lander.v3Frame=false;v3Lander.domReady=false;v3Lander.domState="defer-failed";v3Lander.buDataCallbackFcn=null;v3Lander.inqSiteDataFun=null;v3Lander.inqRulesEngineFun=null;v3Lander.mbusToLoad=[];v3Lander.page=null;v3Lander.cgIDs=null;v3Lander.loadedMbuRuleDataFuns=[];v3Lander.jsonAPIData=null;v3Lander.jsonMbuData=null;v3Lander.reInitChatData=null;v3Lander.initV3Frame=function initV3Frame(){if(window.opener)window.clientwin=FrameBridge.o1p();else window.clientwin=window;window.inqFrame=window;window.name=opener?"_inqPersistentChat":"inqV3";if(this.isBupMode\|\|this.isRplMode)this.requestPage();else insertLandingTag()};v3Lander.reload=function reload(){this.domReady=false;setTimeout(_reload.bind(this),50)};function _reload(){window.inqFrame=null;window.Inq=void 0;this.start

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	694
Entropy (8bit):	7.172721138254676
Encrypted:	false
SSDEEP:	12:6v/7+rO9ze/gsy7DlRRPtR8S1mvTBdc10beXc9k5NRuNFy5O+OjNsK7Qk06+WoIX:kPh5PHbkrbc1ies9kTRueO+Ot7X8WoIX
MD5:	9A77102E024DC9D27D6B691986684355
SHA1:	2F6DCF10179CEE31F8464F086E9204835CA47AB3
SHA-256:	14CABA1F2BCCA844B9BEAE1DA303BCCDC5D7CB97D0D37A7EB9C1A0D37B18218B
SHA-512:	0BC56BF64A70E814F321A9F90673B4BA52968CC6384C391C4CDBE39F70E0B6FAC664500193072FAAD6665C6CC53BAD2B4EBBF24089EF0FC7FB0FF1CBE31CDF8E
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/rwd/icons/tab-table-icons/checking-4-premium-sparkly_hand-OFF.png
Preview:	.PNG........IHDR...0...0.....`.......PLTE...e]Zh``g^\f\\```f][f]\f^\d`\h\\h`\h`Xf^[f^\e`Zf^\g]\p``d\\e]\e^\p`Pc\\f^\e^\f^[e``e^\d^\eZZf\Yf][f^[f^]g^[e]]e`]f`\g][g\Zg^ZhXXi^[f^[e_]h]Zf^\C.W.../tRNS.` oP.p..@@@ ..0...@...P.._0o.0P...``P... _.`..gq....orNT..w.....sRGB.........IDATH..Qs.0../N@4......NP1.]...........:.K..f.~#..n...+2.....2.......\|H...`..kM5V..4i.....&..-....D.. .0..K.._.mZ..t...A.....Q..R..C....l..Z.8.....5`..lJ.....gF...IK..L....IDT..v.......~_.i}T..us..w.81.....$.."...U...~<?....ISF..M...KCD...v[<^q.X...s...N$.@.1F...D.8TD..... .BP.wzo...=Aj....h.c"..Kl^.P{...]......5r.p>.;..bFO5..z.,f.v.1CN.......~.v>....<...O8.%8-..ql.....nt,3k"=.....IEND.B`.

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8097)
Category:	downloaded
Size (bytes):	8550
Entropy (8bit):	5.424146933358963
Encrypted:	false
SSDEEP:	192:Tky7zu+sufOXk+p27sEVKCNfD2XYYBXsYd72aoHvLQlfoNRIy:TR3+s7ZVNfDuVoHvLQpoNr
MD5:	CA611E1AD5CE488BAF7E687E039008F9
SHA1:	2152DB6945B63D78A718AA87E1F1CCEA350B8809
SHA-256:	0ABD344691477DB2AC8E91CF0CE28160BAD6B8B4BA6D192DFC000BB2E63F83E4
SHA-512:	3BCF08209D3E848412DB0B3324DAB97645E86E430250FA84D8821FDF31D05A665148110715660FC7CC8F21C5394EA7C6A1C41AE4BBDCCFBF89F85B110DB5DD79
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/main/utag.117.js?utv=ut4.51.202112070053
Preview:	//tealium universal tag - utag.117 ut4.0.202102172208, Copyright 2021 Tealium.com Inc. All Rights Reserved..try{(function(id,loader,u){try{u=utag.o[loader].sender[id]={}}catch(e){u=utag.sender[id]};u.ev={'view':1};u.t='@@',u.i=[],u.p=["//pixel.everesttech.net/px2/@@amo_user_id@@?px_evt=t&@@amo_event@@=1&ev_transid=@@amo_transid@@","","","","","","",""];u.cachebust="disabled";u.map={};u.extend=[function(a,b,c,d){try{if(1){c=[b['mpuid'],b['cp.utag_main__st']];b['amo_transid']=c.join('_')}}catch(e){utag.DB(e);}},function(a,b){try{if((b['page_id']=='OSMA_APPL_THANKYOU_PAGE'&&b['product_code']=='CHK'&&b['subproduct_code']=='RC')){b['amo_user_id']='2619';b['amo_event']='ev_CHK_RC_AMO_OSMA_APPL_THANKYOU_PAGE'}}catch(e){utag.DB(e);}},function(a,b){try{if((b['page_id']=='OSMA_GETTING_STARTED_PAGE'&&b['product_code']=='CHK'&&b['subproduct_code']=='RC')){b['amo_user_id']='2619';b['amo_event']='ev_CHK_RC_AMO_OSMA_GETTING_STARTED_PAGE'}}catch(e){utag.DB(e);}},function(a,b){try{if((b['product_code']

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	4941
Entropy (8bit):	7.856531786691112
Encrypted:	false
SSDEEP:	96:rGgrrEffw3kpjEHECuzEZ+gFtb8xuk4uksPEeO1z0eM0D:rGKmfwUpmEJzeRjbHuksPOAED
MD5:	14BB82F8BB08FE013B0E5D96F775972D
SHA1:	D6445F877D8014328578EC8B8C4CFD9F9986957D
SHA-256:	70675BD4498CC3FB57349FEC570BE14A24495B047D3B7337EE88CB281A7D156D
SHA-512:	45CDC947E5E26AE20121866D34D0E2AE04D9E7EA1DCC1548FF3B0D90B5F95A998EDB0F44EA77B75A0742F6CBA72E336BE9F7276DA16685CF5F4897C13AF51F4A
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/rwd/photography/616x351/magic_card-scaled-616x351.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@.........................................8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe.......h..._....pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe.......h..._....pixi............ipma..........................iref........auxl..........mdat.....f&z...2.....,P......_.u...i~...D.Q"...6.\;.....auIk..<...c....`;E.fI.a?.....}....8}....+.:hK......si d..\H..'w..!P..:.c4.....X$.QY5.O.pR.v.[;..E.iQ............iI.D.8.NU....V. .7.\..&..n8.B..$.]...Pk....3.B\.o...w....y..U).......:...[..8`..;...=.C.t...z....6+..z...S. UZ.".e...v..^....&(....Pp.D._.3....=p..4R....*W-.2H ........g.2.<G.`Er..++..aG...{...w..k.&7a...Q._B.c......k<...z.$..k4.B3.....A2....'gk$.d.t....}.....R. Ntg..^`.V6.G(H. ........ZJ..d.N.B..S..3..I.-..i...L6]3......z..c5e.MJ(..W...=..#.,b>>Bg"mL...M"

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F%23skip&cb=1711631945420&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-228930-16%7Etcm%3A91-228643-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (15480)
Category:	downloaded
Size (bytes):	335687
Entropy (8bit):	5.374473583049841
Encrypted:	false
SSDEEP:	3072:4boQf6LbVxcaOl2pu+537IsXVz2xE+uG27G:yGV24ug371XVzipp
MD5:	4BF08DF5D2BFDD425E9CA9F779C26545
SHA1:	E572370906F6FCBA646ECE6628387E5C4F570E5D
SHA-256:	0491B2122A2979EEFFA07292376DE821E6E0119CDFD617D14F5F417AD52E28BE
SHA-512:	09A56C40C7FCD92803EE2BD7E2FE64CB0A235E016B4D5B1F81981661A352FC12C5C3C4692DD0C00839C1E021620CEBC1DF936958212F997B905DB370C2A9E4C9
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/main/utag.js
Preview:	//tealium universal tag - utag.loader ut4.0.202402281844, Copyright 2024 Tealium.com Inc. All Rights Reserved..var utag_condload=false;window.__tealium_twc_switch=false;try{try{if(utag_data&&utag_data.hasOwnProperty('tealium_js_path')){var new_path=utag_data.tealium_js_path.replace(/\/[^\/]+$/,'/');var utag_cfg_ovrd={path:new_path};}}.catch(e){};}catch(e){console.log(e);}.if(!utag_condload){try{try{var utag_data=utag_data\|\|{};if(utag_data["app_id"].toLowerCase()=="www"){utag_data["canonical_page_url"]="";var linkCanonical=document.querySelector("link[rel='canonical']");if(linkCanonical!==null&&linkCanonical.getAttribute("href")!==undefined){utag_data["canonical_page_url"]=linkCanonical.getAttribute("href").replace(/^(([^:\/?#]+):)?(\/\/([^\/?#]*))?/,"");}}}.catch(e){};}catch(e){console.log(e);}}.if(!utag_condload){try{try{try{var pagesToOptimize=["/biz/","/es/biz/","/online-banking/","/help/online-banking/sign-on-faqs/","/com/","/locator/","/help/","/checking/","/mortgage/rates/","/mor

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8155)
Category:	downloaded
Size (bytes):	230740
Entropy (8bit):	5.336669342497741
Encrypted:	false
SSDEEP:	1536:1AT4apsaKxLoLbkdAPk5/QJRG0kFmhpUk0kg50Pmmd2CzCjh1NxDAun7uc4Gfblr:a4vazcMbM0koMkgMCvB7ucDnh
MD5:	758921DE578BE65AF7CD423453C6610C
SHA1:	83F9DEDB1DBD975BF469159FC19F0CBBF1FC273F
SHA-256:	1258B94638BE4969B584DF7660D7678A03890FC482D315004CF77640B19FD7FF
SHA-512:	C3C2A430EF9251B77A79F23BB92CCB5E368880095F5AC5C5B786538BDF83569FA12E0E56FF13A1D1677CBCBF8C4BF2A55101DE7B4F6DA9945DDE9409ACD630F6
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/js/global/global.js
Preview:	var WF={};$("html").removeClass("no-js");if($("html").attr("class")==""){$("html").removeAttr("class");}window.WF_NUANCE=window.WF_NUANCE\|\|{};WF.Browser={};WF.Component={};WF.Strings={"Components":{"BalloonHelp":{"beginningOfPopup":{"en":"Beginning of popup","es":"Comienzo de ventana emergente"},"endOfPopup":{"en":"End of popup","es":"Fin de ventana emergente"}},"FAQ":{"imgOpen":{"en":"Collapse","es":"Contraer"},"imgClosed":{"en":"Expand","es":"Mostrar"}},"LightboxOverlay":{"closeDialog":{"en":"Close Dialog","es":"Cierre diálogo"},"openDialog":{"en":"Opens Dialog","es":"Abre el di.logo"},"errorEncountered":{"en":"Error Encountered","es":"Se ha encontrado un error"},"oneMomentPlease":{"en":"One moment, please...","es":"Espere un momento, por favor..."},"plsWaitGettingInfo":{"en":"Please wait. We're getting your information.","es":"Por favor espere. Estamos buscando su información."},"infoCurrUnavail":{"en":"This information is currently unavailable.","es":"En este momento

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F&cb=1711631936565&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_ccd_findcreditcardrspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-228930-16%7Etcm%3A91-228643-32&promoSlot=2
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 616x353, components 3
Category:	dropped
Size (bytes):	46359
Entropy (8bit):	7.984299753541204
Encrypted:	false
SSDEEP:	768:OsFB3sPEpnNaarC8qhjYdGSeZbmLJp6Ms8GLl/9hFR4rgLiSwi2sn5t4I+:Os73scpNaarFqidEZIGLlFhF+rgLtF5y
MD5:	DCF7437B7A206B67E8A55258CEEA28AE
SHA1:	88E53C53F0878DF1B91A66FEAAA14FD8FAE4AF48
SHA-256:	360A07438B52EE265A76B81E252FA33B85D462168D6998B6E35DF8DF2899E9D3
SHA-512:	5EB936E4E1669E5CDEECE3BBEAB659C83A882D50FC02AE89E732853C58288EDC8D2EA961FE45A6DC19D10ADEDC83D6C9348DDD2E7BC949DCEE8AFD26F26A7233
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#....#)" ")1,,1>;>QQm............................................#....#)" ")1,,1>;>QQm......a.h.."..........6....................................................................H....C..Q..f1.(..).d`.P.>p..... B...........1.`8&@...2.........0.......0.... 1.. 8....U0$......;...`....i.8.h..As...#...c&8..0.p...d.L...0....`....0`..A.....(...20........A....d....9.`......r.J.D....tC.G.`..z.4Z.Ma....p....b.y0.l.).C9 ........@.....3..0.........8.......02` 8... 8...&N......0..<@&2P.0......F.i....P.e!..b.!A@C....l.f...../.d.....PL..D*.....@.F.......8....\...kqY-.;f.T<.'OA^..:X...]...F......K ........(......Pk..6.t.-.B.7...../..;..1..i...u...c$t(d..U...... -.2.. .'..0....pne.....d..`.. .U.........._-t....zB...._.........-..!.W.W.&.V.../.\....7.b.-p.rD..^.M..s]\-......t.v.{.r........H...T.L..T..:f:a.....L....B..8.....`.2.....BX...c...T.&.C3....N...r.0...w.,..n......9........{...._.s.~\|.$........tl.....m#.O3..Z

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 148 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4705
Entropy (8bit):	7.936962022368759
Encrypted:	false
SSDEEP:	96:ZqMsuukPLtVETRQ/hYXlGQcN9aMGPqlr+1V+N+MadRmdOi5lhk5:0MpzPLtVETRQ/iXllcbaMkqd+XTVAdFW
MD5:	4D6E0A7C2AF1820AAC3C2A9B4E194CF1
SHA1:	47F2AF01B5BEFB347C468FE69AF363EB8EE6338C
SHA-256:	D92F4C64AC8AD6DE5CDB01E0A3C9E6267D2B88B93B6509EB1CD7084BA2382548
SHA-512:	547309B919884F7DB986D87AC25C5000ADC6068D869B1717936DF9C2FE418774A8FCB0F096C236B7B57413B441E3F35EFF638604D358B943B7ACEF3B9E6AFB27
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......d.....`.......orNT..w.....sRGB.........IDATx..yt.U....^..$@B....... pF...(.<.."..s.Q....Qq...Q..aFqP..O...#..H..U a1..A..$.].{.d.t....R.sr.u...].Z..~.....yy....ev.g...9.!D.8..&....f..H..DG.$.MY..w.{;.w..(..Jg..d...\..q...<....g`..v.v"b.....UP%."k+.6....S...@...C8%@Xo.........].u....K.x..c5.@..Ij. Af.]".v........DX...^/.n>\|/...FT.+....,.D..x.......sa..ws.=WC..JY.W...p#....K&.+...>f^..1..,.e.@.@........]..~..$..@.g._..zu ,.:....=.od`...d..2...0..2....5.w.%,...ilG....#!..3S..,.....?^g.q..............W.v.$B&...].U.........Y.Kn........m.q..nVO!$...e.c.:...y.....!"....D.$..L_.......B..).e~.@...A..9..A.e...T..Xh........>.%...8M...rq^.p..{..._)...1.j.@@..d.<h...jm....q.. ..BD[i..z..V..~...\|g..A.....r.....&b.....bl"..e......e./IX..J.....Pp.G.#.(uB.1...=9. .....W.Hz.Fm+.(....x5..."!FDC..lX4....Ru.....9#...6Jj.0...#Q...l....+0.O5...Cc6W........Dn.O......BD...."j..0....:..........$...Y...d.7.....\|.s>......$......_j56\.......@

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5560
Entropy (8bit):	4.317655758021296
Encrypted:	false
SSDEEP:	96:S9cCqTEb4CXNcC9I8H0WXd76I0D35rJyoShzesVOxf6AifyQQGonPCAJ09tqeHu4:OcCq4b4CXNVfH0WV65rcD4sVOxfafyhO
MD5:	5B661F1F0045DECE3B8D90F28DE4EBC0
SHA1:	13DE4A39FB5908DDBD2DBE220B1F2C1E5A6044FA
SHA-256:	780B98A3861AA8D4AFE428953AD3B9E988A74CD5F064B4A1EB453F5D901221E7
SHA-512:	F007138B4CDB4D494731BEC68F6A5B4ED20E64691D8975790B4B29D43695C4C79483EC62C32A65E750887A80834BEAC5052C5F9CF3444ACCCC37D3D9E1E6DA8C
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/css/template/homepage/homepage-horz-logo.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="211px" height="22px" viewBox="0 0 211 22" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 52.2 (67145) - http://www.bohemiancoding.com/sketch -->. <title>BIM/logo/large-211x22</title>. <desc>Created with Sketch.</desc>. <g id="BIM/logo/large-211x22" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <rect fill="#D71E28" x="0" y="0" width="211" height="22"></rect>. <g id="Wells_Fargo" fill="#FFFFFF" fill-rule="nonzero">. <path d="M45.112,14.1709 L47.1692,14.1709 L47.1692,21 L29.9977,21 L29.9977,18.5142 L32.4262,18.5142 L32.4262,3.4854 L28.4862,3.4854 L23.4857,21 L19.5143,21 L15.457,6.4855 L11.2859,21 L7.3142,21 L2.2857,3.4854 L0,3.4854 L0,1 L9.3143,1 L9.3143,3.4854 L6.6286,3.4854 L9.9713,15.5426 L13.9715,1 L18.0857,1 L22.1715,15.5716 L25.4574,3.4854 L22.6574,3.4854 L22.6574,1 L46.8836,1 L46.8836,7.4854 L44.8263,7.4854

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22424, version 1.13107
Category:	downloaded
Size (bytes):	22424
Entropy (8bit):	7.991719692427671
Encrypted:	true
SSDEEP:	384:ZWomH3hR7XCKb7GSa5mSWAmtXnCe83/17wdTgm6keJR60vqy:ZWDL7va5mSWbn4cdEmhJvy
MD5:	0A1639EBE9FAB396657A62AA5233C832
SHA1:	9B58164729AD918DD7255E4856F9DA7F3A90BFDE
SHA-256:	631F3B6267A831A8D67C45E480B5D5A2601F10FF8708BCF3A45A41B377A129CC
SHA-512:	A3786F7C1188BCBDDCABE54E40DFBC77D842B1A19D2CCA56CEDAEB3C1A8126B3C203AC8B6297268C94AEDF270BE2B822AA8AC0DE9E1E5C6D42BC7866324D8128
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/fonts/wellsfargosans-rg.woff2
Preview:	wOF2......W........H..W4..33......................V..V....`..,..r..W.....T...6.$..x..>.. ..b. ..m.1.'p.S.._w.(U....L6...J.9.t2..8..../.......b.<.......M..-......>.NC.02.6..NY.W._u.. ..&?x~.....d.:..{..TnxSy.hi...KT.?...&}./v..K..>...........j.o.."oiIi..&...=N....,a,q...p.+......E....3>.HuT...:\|.C..q..Ug.L......y...0.[].....3G.n..{!.I @.-D..!..@.rX..y..H....Q.!z...X.r...R.ST..Qj(...Y....i.>..nVKju.m.my.{.UNf...;.OxD...6.>. ..8. .(.......>}k.F.8....QSp..^....}..Zv........A.9....H./.x;T...jtX...C_....-qy.B.s.4`..UJ.L..Vez\|.k'..).r.\."Y).....~...,P..(Q....).{.#..@@...=..../..~..w..o...y.e.....l...M..B..)...O.d...)v....D..&......q..Y.Y.._....c..q;........Dk......I.H....fn..._w...^..v.'.y.E.....6eg.......Q...&i......E.<....vj.....r...(.S=}......0O..... ...T.B..d...o...:.%.o....%$P.=.....H..S...s.R......EX.....$.3@Rg.R.... 1......y.C. ..8.p)9...s.\..s.quM.2..r]..w.Je_....V'.g..,..0.z.q..P..5.(..*Li.....Z......:!S.._}..h$....!..$:..A$.F..sH....Uj.Hf...a...o..,.

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=703-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&cb=1711631971832&event=DisplayFatNav&eventType=Presented&eventDescription=DisplayFatNav&clist=tcm%3A283-226512-16%7Etcm%3A91-226306-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	206
Entropy (8bit):	5.563352062149379
Encrypted:	false
SSDEEP:	3:CsD0/6HZoPiTPXgreVlt2lllplnJl/RLmtwRGJPs6nxFsB0/AR1u1En:NdHZoP6PFPMJRiSMJU680/M16E
MD5:	3B70F000E6D59FD2E88632B720C65F13
SHA1:	2C68365E11BAA49D7E17951D6B07DBE77BB853C2
SHA-256:	86891EDC929C26F6626B3A841E761A59ADFECB4826C8037017DD76127B70DC0C
SHA-512:	9F2E1F617F42FD3796FB317545840F65174DEA269F38BD60A908F0FEC032AC644A8205BBB3250EB82FC395E06FFCF4BEF9A37ED875362E7109586FA0C2FA059A
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/locator/icn_alert_16x16.gif
Preview:	GIF89a.............?2.O>.~c..o..{.........)..G..c..v.......................................................!.......,..........K ..q8c.J..H..&...i.&t...!`R.JB...J...l.....(b=....(.-..e..pv..hyN[....;

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F%23skip&cb=1711631945418&offerType=iaRendered&slotId=WF_CON_HP_PRIMARY_BNR&offerId=C_chk_digitalcashbonusrspv_hpprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-251670-16%7Etcm%3A91-223657-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (445), with no line terminators
Category:	dropped
Size (bytes):	449
Entropy (8bit):	5.326941944943739
Encrypted:	false
SSDEEP:	6:qTthqIY9UxVHmEvX6jHzKRwszpuEIRuL5loXFNRXuRYA/bRIM2PLVe/NX96rzRHS:qTEuxVZgH/sI0llokRt/Jq5e/mvRy
MD5:	D68F5C79B585EEAADA3EBC02208C314C
SHA1:	A2EA8912707E477EB1B559187B600CE01BECE9E1
SHA-256:	7154FA4E43375900E0A5763222D361B4AAC5C08DB03EBCD76573615794FF8DD2
SHA-512:	D483E4ECF5C81D644D182186D2E20162F9830C0DE8B99D3C43192402987654943CFDD3724DE43DEE6307530A5FE18F98A35A7D1863E902AF3D5A4ACBA11E8086
Malicious:	false
Reputation:	low
Preview:	<!doctype html><html lang="en"><head><title>HTTP Status 405 . Method Not Allowed</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 405 . Method Not Allowed</h1></body></html>

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8954)
Category:	downloaded
Size (bytes):	48622
Entropy (8bit):	5.260770856393266
Encrypted:	false
SSDEEP:	768:zVJfHIOPkda4Q28wfq6sM81ntO1vuUy9dPk3BAVFO9MFW+S0wU7bZoBzz:zHfHIOPkda4Q28wfq6sM81ntO1vuUy90
MD5:	B4FF5EB6908B895A9FD19C9B287448DD
SHA1:	B31FCC293D428CF2B9864BE033E7D62094ABB8B3
SHA-256:	7155C0EB9111B5F95D673E25156D4780C6FAEBE69AADD09A408D59241BA91FA4
SHA-512:	34F6880AC678CED787A465D72324B7A40C20104BF4D34DB236CC736E4E93254D2FA033F25161B3D1B7974FDDF30948A532CFBFF8AA4E652BE843A3FB7DD3C23A
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/locator/public/css/style.css
Preview:	*{font-family:arial,helvetica,sans-serif}body{margin:0;font-size:100%;background-color:#eaeff8}#shell{width:991px;margin:0 auto 10px auto;border-width:0 2px 2px 2px;border-style:solid;border-color:#ced4dd;background-color:#fff}#masthead{float:none;width:975px;margin:0 0 7px 8px;padding:0;height:62px;vertical-align:top;border-top:5px solid #f2f1ec}#brand{float:left;width:auto;height:62px;margin:0;padding:0}#mLogo{margin-left:2px}#utilities{float:right;width:auto;font-size:75%;margin:4px 15px 0 0;padding:0;color:#b2b299}#url{display:none}#printWrap{margin-bottom:10px}#title{border-bottom:1px solid #666;vertical-align:top;margin:11px 0 15px 19px}#printLink{display:block;float:right;width:10em;margin:-7px 0 0 0;padding:10px 0 0 25px;font:normal 68% arial,helvetica;background:url("https://www17.wellsfargomedia.com/assets/images/locator/wfa/al_printer_btn.gif") 0 7px no-repeat}#appStatus{display:block;float:right;margin:-7px 0 0 0;padding:10px 30px 0 23px;font:normal 68% arial,helvetica;back

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7302), with CRLF line terminators
Category:	downloaded
Size (bytes):	228090
Entropy (8bit):	5.42581816342078
Encrypted:	false
SSDEEP:	3072:oTjxrio4zQGF2zCrOgD8kdcoRlu1bk1WnDoxxs:oTjxX4zvF7rOqcoTu1MWnDKy
MD5:	6D7629492FB2C41FDF09E8694B934263
SHA1:	C09618864C075C804FCB3D12C4984E040F76A257
SHA-256:	FB5F9A9D349004862AB1A8B10F35D4F7C0305398E7CB65AAA997FFAB45B91F37
SHA-512:	3D61ECCBB9F0B2C91165E40D607F65353F96AD0A10579E647AD0131BD5A2570830B6DC06FE50965CB4512477497F8A94D29B1B9E42EF91F55C85B99D3B6947A8
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/hp/utag.js
Preview:	//tealium universal tag - utag.loader ut4.0.202402161948, Copyright 2024 Tealium.com Inc. All Rights Reserved...var utag_condload=false;window.__tealium_twc_switch=false;try{try{try{if(utag_data&&utag_data.hasOwnProperty('tealium_js_path')){var new_path=utag_data.tealium_js_path.replace(/\/[^\/]+$/,'/');var utag_cfg_ovrd={path:new_path};}else{var utag_data=utag_data\|\|{};utag_data.tealium_js_path="https://static.wellsfargo.com/tracking/hp/utag.js";}}..catch(e){}}catch(e){console.log(e)}}catch(e){console.log(e);}..if(!utag_condload){try{try{try{utag_pad=function(a,b,c,d){a=""+((a-0).toString(16));d='';if(b>a.length){for(c=0;c<(b-a.length);c++){d+='0';}}..return""+d+a;};utag_visitor_id=function(t,a,b){a=utag_pad(t,12);b=""+Math.random();a+=utag_pad(b.substring(2,b.length),16);try{a+=utag_pad((navigator.plugins.length?navigator.plugins.length:0),2);}catch(e){}..a+=utag_pad(navigator.userAgent.length,3);a+=utag_pad(top.document.URL.length,4);a+=utag_pad(navigator.appVersion.length,3);a+=uta

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (675)
Category:	downloaded
Size (bytes):	45592
Entropy (8bit):	5.389872585096535
Encrypted:	false
SSDEEP:	768:QHpoJjyT2C82x1AHcccBJO9r/vu/2Uiqquezs98UaS0:QtG2PycccnEeNNK
MD5:	69C630C91C0669D3C88D29C9860EA4B5
SHA1:	1AD3E1B9C9E737B6A26006D5C98D86C8048AB6DC
SHA-256:	B78D57E1736F692E67A9F3E3762B84993E8984D3D7D72BC9A55E4913880EF3D7
SHA-512:	534508190D4E3D43781FD0219D7B7A033CA0C91100D38DAED8217DD56F026DAD3E39E1E6EE2F99992FAB9C3BB8FA30F6530D34988FA1B69137EA007A959F9922
Malicious:	false
Reputation:	low
URL:	https://connect.secure.wellsfargo.com/auth/static/scripts/adrum-ext.js?v=4D023E4E06
Preview:	;/* Version b4436be974de477658d4a93afb752165 v:4.3.7.1, c:0d3eed23ace0d0cbfc4e91c26b1d12e18f6eded6, b:9384 n:9256-4.3.7.next-build /(function(){new function(){if(!window.ADRUM&&!0!==window["adrum-disable"]){var g=window.ADRUM={};window["adrum-start-time"]=window["adrum-start-time"]\|\|(new Date).getTime();(function(a){(function(a){a.Cd=function(){for(var a=[],b=0;b<arguments.length;b++)a[b-0]=arguments[b];for(b=0;b<a.length;b++){var c=a[b];c&&c.setUp()}}})(a.monitor\|\|(a.monitor={}))})(g\|\|(g={}));(function(a){(function(b){function f(a){return"undefined"!==typeof a&&null!==a}function e(a){return"object"==typeof a&&!b.isArray(a)&&null!==a}function c(a){return"function"==.typeof a\|\|!1}function d(a){return"string"==typeof a}function h(a,c){for(var d in c){var n=c[d];if(q(c,d)){var z=a[d];e(n)&&e(z)?h(z,n):b.isArray(z)&&b.isArray(n)?a[d]=z.concat(n):a[d]=n}}return a}function q(a,b){return Object.prototype.hasOwnProperty.call(a,b)&&f(a[b])}function n(a){return d(a)?a.replace(/^\s/,"").replace

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	1662
Entropy (8bit):	7.348685543137452
Encrypted:	false
SSDEEP:	48:rGo/jvMBVbGadC9g1y5ttbFLegZsUoeTMOZE/J3em1cv62uB3x:rGgvkDWegZs0T7ZE/ygD
MD5:	E218A28576F6620622D48155284B5551
SHA1:	D189E371B0CE3DAC93F0B9E660C426D932DA9274
SHA-256:	F990B81E77666BAC79E3F1F9399B7763CA7EB64B1D70ACEA21CBE954413CC0C3
SHA-512:	C8646C9EA768715B3CB3773D62B2CD579F5335672B47144513C170E88AFB6FCDF2E68F89D72006340F5D9D071578EE0FDC7861131328265F1B4D69869FB7AB8E
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/rwd/first_time_experience-account_summary.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@.........................................8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe...........d....pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe...........d....pixi............ipma..........................iref........auxl..........mdat........2..D.....H.-.[....q.D.!.)...z>P..v..YE.f.c.Nk...)..n...As.fBh..`j?.wzH{.......[h..@SC..`..K.....X.......7..1....J..r.Di.v..r...^.C8.-_"...J..S....+..G0!.Sh#T.R.W1.H.h.....UY..(2..u.rA.J.....c..O.....i.sl5.@8$.4................O....X(>tL...)'^..b....jz.;..$.~(.G..I...D.H.....*....k.==,..?...\h.MC..73....../..?Iez..\|.r......>\t]x:'..1.\..j.'>...N...1Z...6.....s....D..LH......s&.n.c....(P..p.s..........m?...+..m}/..:.Z.).R&;..=N..t.....{.F.......$..w9..G....J.tx...k.e.q.{7'.............@...2..D....<P.8.....'.Q8.y#Bp...B

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (807)
Category:	downloaded
Size (bytes):	21046
Entropy (8bit):	5.3674306157234914
Encrypted:	false
SSDEEP:	384:izHBB59zatOWs+zD41eooBh5BOLA+YHC2Nv+O:Ov2sWqmhuLA+YHv
MD5:	D34412CD97E7875CBA3B3E159815639C
SHA1:	4105732674E73CF75FE2F8A968750142F9EC2606
SHA-256:	2CC361F4D633040BF9AB7417B24DFFE997CF35865B879BE9DB2F3603910F0185
SHA-512:	723385CA7A67AE77E7137446503DBDF4A99F710E38A40DBD0C8712F4FFBEFD300153CC9B9FD50CCFAEF2E01CB29E8B6C148BA3AA7D68EBF00FF6EFE937977CF1
Malicious:	false
Reputation:	low
URL:	https://wellsfargo.digital.nuance.com/tagserver/postToServer.min.htm?siteID=10006005&codeVersion=1710907168986
Preview:	<!DOCTYPE html><html><head><title></title></head><body><script>.function Logger(){this.enabled=!1;this.setEnabled=function(a){this.enabled=a};this.log=function(a){this._log("log",arguments)};this.debug=function(a){this._log("debug",arguments)};this.error=function(a){this._log("error",arguments,!0)};this._log=function(a,b,c){if(this.enabled\|\|c){b=this._addPrefixToArguments(b);try{this._writeToConsole(a,b)}catch(e){}}};this._writeToConsole=function(a,b){var c="log";void 0!==console[a]&&(c=a);console[c].apply(console,b)};this._addPrefixToArguments=function(a){a=.this._convertArgumentsToArray(a);a.unshift("postToServer (origin: "+location.origin+"):");return a};this._convertArgumentsToArray=function(a){return Array.prototype.slice.call(a)}};var PersistentStorage=function(){function a(){var a=b()?e().getItem("PSConfiguration"):!1;logger.debug("Persistent storage configuration: "+a);if(!a\|\|"localStorage"!==a&&"cookie"!==a){var a=!1,d=window.location.href;try{window.localStorage&&-1!=d.indexO

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	26047
Entropy (8bit):	7.990027570786181
Encrypted:	true
SSDEEP:	768:o3MMnU9edLro58QpYW8iFU4mHtDoaMSJNEAMvShiy9PQ7XL4:o8MnU9edLro5j3B0HtbHJNBjPQ7XL4
MD5:	4AA85F9ED12A348C7490E98BCF1FEC3A
SHA1:	75900095AED6DBEC455488BAB6C2E19EF39822C6
SHA-256:	5EAD96F291CAF3D3C0B3252305FED5BDA4540E448F69112A7B8F1A289DC01347
SHA-512:	7FDD827230F8DDC62F05E00718D2CD404883E4D635C156C6816A9CAAFEE16CF288F6F4FAE4E900C441BE3C962126EF8736FC5483A057DC77BEBADF139C185CEB
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/contextual/responsive/hpprimary/autograph_journey_hppb_1700x700.jpg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@..................d....#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe.......8........pixi............ipma.................d.mdat.....!.......2...LH../..zE.j....L.S...].Q.V.s,...i......!&w.}...'.n..{.z..5....+.......^C...p\o(.G{\|Xz,%.F..5!Y.!3,V..H..iW{...C....-.;...:R.A../...l.u]..7...s..._i......?...(.yi..]f....a.C..2.y........$...$.+..Y]BRZ..Z.4$..K}X7..B.........-...=.x@.z..m.{.9O=.s.B....4....jE$......3...7+........1...j.=Hc!.....:.<.f .(I.I..z.\... .'..."......F..$z..y..p.....P......9..4.H...a.h...b$Pwa...F.3M....,.L..u......L.o.\|..Ce..a.....Pb.......8.j#.....>.V8.4....(..K...H.?.T....\....k..:......x...j...dP[....>.M...3...?...._.../?.%.jF..cgU..4...J.\|......r..R.....7V.....a...(M.6....p..6..L.2(.~..G.B.`...'..]X.x.^p}...t)..w..4{.k....A... .V..6Md...z..X.u....2@..[[..*..(s.P.@&.X.Ho.\r...4..I.!.

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	140
Entropy (8bit):	5.602596996364713
Encrypted:	false
SSDEEP:	3:W1Z/F1/6l3FloKvQCHlQbdp+i0piKXr71dhlu7ld1iRMbN9l:W1Zyl3TTv/O+n39dahSRaN9l
MD5:	A85905C05711D5485BBE67ACEE57123F
SHA1:	131BD0F9AFFC5F1E8ACDCA358D70E3B15CC62977
SHA-256:	91B1EC7259A674B4306CA1CF680BA09852DECEFA9F3EB5F521A55DE81D697102
SHA-512:	11035DBC753FF73CB1454CF28FE9A19674CF99304815ABBBD6B75CC5428BCBE0926F780FC5FA2CFB7D330EE250EF0DAB08BFAD1D2892C10D84C21D60802BA37F
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/css/template/chevron-right-blue.png
Preview:	RIFF....WEBPVP8X..............ALPH7....`R..c.<.1..!....P.2.!.ud...........L.V.7.Soe.Uai...VP8 &........*......P%..t.......&...H._.Z&...

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 15, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	181
Entropy (8bit):	6.091445064563821
Encrypted:	false
SSDEEP:	3:yionv//thPlHwtz/gksKXtMlsLtsddhNjvWNpHswcUQBgcU43gfPWkwbUD1SxAjp:6v/lhPKtz/gksKXtksR8jOIp39kwbMSo
MD5:	63ACAD90E575BBCF1A6D9244F65E6592
SHA1:	EFBC178CB56C48C0BB9818F279D09F94DFF69B02
SHA-256:	20161BB90CD19A4AD63862E5BA28DAA4E5067C92FBBFA22733D14432531145BC
SHA-512:	2D764D0EF86D924E90F1BD4B8D04EA0BF28EC3F79D402FA22652EE66E3FD68C67C67CB70C3AC5BDD9330B76449EC7374A3DE305F2AAC8D0F828811086534E7D5
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/global/chevron-large-left-grey.png
Preview:	.PNG........IHDR.............w.......orNT..w.....sRGB........bIDAT..c`@.......(B......\vt....0..n.."...!...:.*X..d..7`....H.).0..R.S....Gx.!\|.....G..00.../X.N.......IEND.B`.

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (548), with no line terminators
Category:	downloaded
Size (bytes):	548
Entropy (8bit):	5.68920887336068
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHzTrd52UniUMCyEKJUb0U6sCORwmaZr:hMiRO9Y/dTiUMzVJdsCORwz
MD5:	1CBD440F9743748D3D23A03029AD360F
SHA1:	72EAFA18C154B2A91EAFBECE85ED1D29306171C0
SHA-256:	BE1FA53F222017AAAEE7C785ACF176FBA6436D4A2FEF1BE8853EA6C48F66D86C
SHA-512:	3678201D5A764374CE9ECDC89403DE143108D224D3F8AF040CB5442299CB54ADA5532960855FDF3CDFD99D4CC4C090E72C98E443A7B1621478C799418AEAE860
Malicious:	false
Reputation:	low
URL:	https://2549153.fls.doubleclick.net/activityi;dc_pre=CNn08IKGl4UDFSgVdgYdKtkJ0A;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CNn08IKGl4UDFSgVdgYdKtkJ0A;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=*;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F"/></body></html>

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1695)
Category:	downloaded
Size (bytes):	3346
Entropy (8bit):	5.38223233778049
Encrypted:	false
SSDEEP:	96:6bRCnP4ReIZB/UmklHXm/HXQ3HXxIo2bpxpl8JoQnWz:6bQnP4gIZ+3lHXm/HXQ3HXxIo2Fl8Joh
MD5:	08CAC36A66602C0459164D345C3411C9
SHA1:	3232FC39A314DD3715125D62DBB91B89A1429E51
SHA-256:	B3B16D2B9CA746C8879E52C71BAD011D538FC04111F979B3D45F3B05B43A900E
SHA-512:	99795B1E98B97B41171967D1387D78278F19B01C9E200A4D006C486935F3C064D2D23AE58B6724B034FB9EF149C3839946ED6291537965AF68610820FFEAF9CF
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/public-site/utag.476.js?utv=ut4.51.202310021848
Preview:	//tealium universal tag - utag.476 ut4.0.202310021849, Copyright 2023 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<35){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(th

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2293)
Category:	downloaded
Size (bytes):	54583
Entropy (8bit):	5.530089716500794
Encrypted:	false
SSDEEP:	1536:5CFzjza+mSvgCc28PxT4CE6/BPoFWo86W+M:6rQ+M
MD5:	E66327AAB117A7ADD2A13D7C9B59AA7B
SHA1:	355FC074AB8134BE491F563EA36D6186FF9561B2
SHA-256:	A208508B0F4BE77B0F3C8788E5C49DAC1041CF855D0E133934E5573DAE3C07A5
SHA-512:	14B3B9278CC77F2A1B34CBCA3B270F451CC33EFEAC32CDFBDBB5232DC1CAB55DE4FC18B02588861ADCA93BAE1D3F4D1296EDF1F79C3F55008F6ACF34838362D3
Malicious:	false
Reputation:	low
URL:	https://connect.secure.wellsfargo.com/jenny/nd
Preview:	var nsygsqez="ic",NDS_LISTEN_FOCUS="fc";function validateSessionIdCookie(a){if("string"!==typeof a)return!1;for(var b=["\x3d",":","\r","\n"],c=0;c<b.length;c++)if(-1!==a.indexOf(b[c]))return!1;return!0}var NDS_LISTEN_TOUCH="to",NDS_LISTEN_KEYBOARD="kb",NDS_LISTEN_DEVICE_MOTION_SENSORS="dm",NDS_LISTEN_MOUSE="mo";.function nssktnj(a,b){var c,d;if(nsyxgomkar(a)\|\|nsztp(a))for(c=0;c<a.length;c+=1)b(a[c],c,a);else if(nsyxg(a)){for(d in a)Object.prototype.hasOwnProperty.call(a,d)&&b(a[d],d,a);var e=nssktnj.ie8extraEnums;for(c=0;c<e.length;c+=1)d=e[c],Object.prototype.hasOwnProperty.call(a,d)&&b(a[d],d,a)}}function nsggzusrbx(a){for(var b=[],c=0;c<a.length;c++)-1===b.indexOf(a[c])&&b.push(a[c]);return b}.var NDS_LISTEN_FORM="fr",NDS_LISTEN_ALL="de",NDS_LISTEN_NONE="no",nsggzusr="focus",nstgfdkj="blur",nskfpasbbx="touchstart",nsggzusrb="keydown",nskfpasbb="keyup",nslrdgunfe="devicemotion",nsggzus="deviceorientation",nssktnjv="mousemove",nsemouzsz="click",nslrd="submit";.function nsskt(a){a=nsir

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	772
Entropy (8bit):	7.286490991811477
Encrypted:	false
SSDEEP:	12:6v/7+iu7J1gTf8/e9uCnQMS+w4JjJF9m/lfSrK73+L0gzruuGmD+WGcZqGMd7q43:hUom9uB3xiqfGruuvpGcZqGqF1GA8y
MD5:	56A040E223DAF66E407C97A3A56F2DB1
SHA1:	1472B7328135CD2066286C230BE69F2659480D34
SHA-256:	BEAB1A208D997C2ABCDB8C4CDE3481B1DACD9E1334B32FC69DDA09FB7D6117E2
SHA-512:	D9E98ACC10E78B335B306D5EE7200F33D1B6423A4C073AB214E49A0D50E4B80B4A7AEB4C3736B70FBEB3A2CA1F10DB3DF813482355716162617D76E90D92C62D
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/rwd/icons/tab-table-icons/checking-2-overdraftfree-dollar-OFF.png
Preview:	.PNG........IHDR...0...0.....`.......PLTE...h`\g\Zf]\f^]e^\g]\g][f^[h``p``f^\f^\g^Zf^\e]\d\\p`PeZZe^\f^[g^^e^\e]Zf][```g^\d^\c\\h`Xf_\f][f_]g_[f^\e`]f`\f\[e][f^[e]]f^[h\\d`\e`Zg^[e]]f^\h]ZhXXf^\..k...2tRNS.@...._ .....@.0o.O.`..o.P .p...`P...`.@@0...` \_."....orNT..w.....sRGB.........IDATH...v.0.E.M.........d.2en..?n....q.Z}...h;.d.}...........w^(........u..U..X2...`......1.G...Z.H.....F...(.'y..n.l......"A.[.u.m.....1....!.... ".)..L=l.\|..D.A....0...........~..0...K._..O..Z..\Kc..6.I.@....YX.0...V.8.+......u.u..e..px...,...~..Q#t..D...../J.C_$M.!...n...Xysi....C..?o..".\|....../.j..m...m..@..6P....O7Q.Q.:..^.n.j.W..C.x%2....A...qT~...a..d,... ".<B.A..D...'.....<.w...*D......E.-`n.3...r.P.ko..5.5._u...6.>...k.-&.C......IEND.B`.

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 6 x 9, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	169
Entropy (8bit):	6.066609770037952
Encrypted:	false
SSDEEP:	3:yionv//thPlUlluw4Uyxd0vhqO8+1DmH2qnpK7ePV+qWpydhfRl/Vp:6v/lhP68wEaO+1DmHRnprN6CJRldp
MD5:	9DBD5ACDD8BA142719E04B6980665B1E
SHA1:	916E39E97B17E0D5423C43A5F6569570338D4C32
SHA-256:	3E72471278601589C8718B1A74E9D45144E597ED2CDEAFD3274FF95A9C93C6E7
SHA-512:	606405DEF5EEC08C82BE73B7065F613AC53FC0D3A943BEAE395A6C0A54F97A8B6C80EFC876235578017E17026F845A7A751A3CF6632D1B9FD87B02DB9906FAF1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............]....pIDATx.b.,........@......8...x;.. K.... .A.d.j.D..d...I.Ai.d.L....A....X..[...*......................&......dC._.z$.....IEND.B`.

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3237)
Category:	downloaded
Size (bytes):	11194
Entropy (8bit):	5.343795424561491
Encrypted:	false
SSDEEP:	192:2bFnNojImVVMwKpTXv161EyzcYr2hjCWCYrQ5+QBHYrQ5rwkxHYrQ5rik/YrQ5rc:2lNsImVVMwKp/oiyzcqTqQ5+8qQ5rwki
MD5:	B7D078E49A0D7B507DBFF8CF78554EC3
SHA1:	89020FD9ED1678F2FD3D97FA6008BA5A5875B1CC
SHA-256:	34D6AF1ED862F62EDE259DEDABCADBA6446C1E9182CD70B19C66CB3ACEDAE93D
SHA-512:	B2B0124F2D7AB969E80A2B0F10C4D1CCE8089191D95946DAF48E5DD36550ADA1DD59E64AA65452AE5FC9DFE32ED67380A268D45611E9F50CF9D48B33D5D14A74
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/tracking/secure-auth/utag.9.js?utv=ut4.51.202108231941
Preview:	//tealium universal tag - utag.9 ut4.0.202109221726, Copyright 2021 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatechang

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2329)
Category:	downloaded
Size (bytes):	2782
Entropy (8bit):	5.573020454337658
Encrypted:	false
SSDEEP:	48:OquhEv/KIkJRCFdnp5xRJPJxbQgCNexYypJxbQgxYGJDcJ9du+SJ9duHrCmNlQ0Y:9sk/Kkp5xzbQgCNexYyxbQgxYbu+CuHk
MD5:	C792CF1585B002B81FF79EBEFBF8D25F
SHA1:	37A7C7A35A78CFDB69B302085D6C99A66B111AA9
SHA-256:	02F981FE1710C0F2511C37A62578FDA656557DD1BD2E92AB0A1EE7D535A3607E
SHA-512:	49424293C8505964170EC68CC0386014EA66B6331FC7D3F52CA9E6338034807EA408236E013E00F1A20B4F10C95D655D2D17958564C131F4AE8288B86B91FD01
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/main/utag.126.js?utv=ut4.51.202201260133
Preview:	//tealium universal tag - utag.126 ut4.0.202201260134, Copyright 2022 Tealium.com Inc. All Rights Reserved..try{(function(id,loader,u){try{u=utag.o[loader].sender[id]={}}catch(e){u=utag.sender[id]};u.ev={'view':1};u.t='@@',u.i=[],u.p=["https://rtd-tm.everesttech.net/upi/?sid=@@tm_sid@@","","","","","","",""];u.cachebust="enabled";u.cachevar=""\|\|"_rnd";u.map={};u.extend=[function(a,b){try{if(b['dom.pathname']=='/locator'\|\|b['dom.pathname']=='/locator/'\|\|b['dom.pathname']=='/locator/index'){b['tm_sid']='oAZBbyLtVlU7vTZMEAIx'}}catch(e){utag.DB(e);}},function(a,b){try{if(b['dom.pathname']=='/checking'\|\|b['dom.pathname']=='/checking/'\|\|b['dom.pathname']=='/checking/index'){b['tm_sid']='txlj0bKktI2bsX0Jinoi'}}catch(e){utag.DB(e);}},function(a,b){try{if(b['dom.pathname']=='/international-remittances/asia'\|\|b['dom.pathname']=='/international-remittances/asia/'\|\|b['dom.pathname']=='/international-remittances/asia/index'){b['tm_sid']='gkkY2QQOkgEBJ4nHcUPa'}}catch(e){utag.DB(e);}},function(a,b){t

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 14 x 12, 8-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	134
Entropy (8bit):	5.688712884261591
Encrypted:	false
SSDEEP:	3:yionv//thPlZ7l4llkkMlehkxtTZUh0VkQz2K5qlXWCh4DOsnMXjp:6v/lhPW/Rkehkp4rO5EXWbDHMp
MD5:	ED07B484AF73610193CB8C7850A060D3
SHA1:	6ACDB6FA2EB7890A132B7E24938A27B548CCB544
SHA-256:	D6D272E61CCF4D57B23962568358F87656A7F820F580AB071D11FDE58F6E45E6
SHA-512:	00F4FC8F68FD1C80871146AA9A62BC8580C61134385DCDBD5AFD158BAE926716217C15DC986EDE8E0AB4445ACF500E8D22550AC8D1B40E98ECA13C1759124508
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............w.......orNT..w....@IDAT..... .D.[..S.d..`..OC..4O.OE.....Qr(..=>..G..y....d].. .o!..,'....IEND.B`.

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1071)
Category:	downloaded
Size (bytes):	2539
Entropy (8bit):	5.340592700813952
Encrypted:	false
SSDEEP:	48:Y3ybRQ+8e4nPWNnR6IMI+wB/edm20z+Gkh2jBksimMSoQnWQ:qybRCnP4ReIZB/Um+GJjBksnJoQnWQ
MD5:	47057E93093059B6AE4917B6015BD8FE
SHA1:	C6B654398FC654F415BCD1CFF05F926D9193FC65
SHA-256:	2C7310C0BBCF2BECB50249819D7D0D68636930BAB7307962D020CEBF0D9DE42C
SHA-512:	7904DFAB7F4674D299931D614BF507FF9372F1085571EAC4D64E9068A6E77C37385C3492D2EF1AE50D0FB9A21CE6D3B570990F63BF998FB152E221EE48241A12
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/main/utag.431.js?utv=ut4.51.202107202150
Preview:	//tealium universal tag - utag.431 ut4.0.202107202316, Copyright 2021 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<35){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(th

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F&cb=1711631936569&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_ccd_tk1biltcardlaunchrspv_smlpromo&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-242364-16%7Etcm%3A91-228643-32&promoSlot=3
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2179)
Category:	downloaded
Size (bytes):	6859
Entropy (8bit):	5.367912388266328
Encrypted:	false
SSDEEP:	192:GbcnP4gIZqWN2lNcok+QA0GJWcY2iNo826Rh2wzwf5JXrSZ:GQP4BZqNNcok+QA0GJWcYDNo8fwfc
MD5:	498E64F367D82BC9D7B357F2A2D43451
SHA1:	54AD15434950786F7A09AF6C098C8E5B9695A2E7
SHA-256:	70D39A4E196C5842271569EEFE6CC70D3F3C8DD26935CA96A3D8A3EC69FC677D
SHA-512:	50D783C7CE2024957A1157E91A9505ECB9A96AF6248661961A78271D5C8F2FD95B0951BC4D49C3599EDE305F6A7E822AB691B9C93D21A343D5A67D59FFE1F83E
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/main/utag.319.js?utv=ut4.51.202312270235
Preview:	//tealium universal tag - utag.319 ut4.0.202312270236, Copyright 2023 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.loader===undefined){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(this.readyState=='complete'\|\|this.readyState=='loaded'){this.onreadystatechang

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58424)
Category:	downloaded
Size (bytes):	101677
Entropy (8bit):	5.465876137494016
Encrypted:	false
SSDEEP:	768:dylKVOsRbJycoAXI4CZ0KbQ98mqD2FFvP:fVOsRb/x+mHP
MD5:	31DD5F36F50DB98918F0C352954B5CB3
SHA1:	967C7D1E672835F795E8B54C018A0ED4743C4925
SHA-256:	B4C20CA7D31458B75CF182D939960C86E5AA5E757BD435253A793794EE2925B2
SHA-512:	B8B7BE27E7752E129E73C071298B8C9F5E34A0A2FE425198E17BDE82A3488594C3F1F937D3B8F212D1B34FA4B1EF85E7C36A14666E80C6687A2E12CC9BDC56DE
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/main/utag.381.js?utv=ut4.51.202402272302
Preview:	//tealium universal tag - utag.381 ut4.0.202403181830, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatecha

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30608)
Category:	downloaded
Size (bytes):	40239
Entropy (8bit):	5.428270629242046
Encrypted:	false
SSDEEP:	384:sJlNsImVVMbpKDBgFAUGNoAWVQpwNoAW0QsYsrNoAW0QsY/qsoAWVoHxYX7OHxYA:sJlKVRBgvM18W
MD5:	8FE6DF2D5C1D9F8756690D7DC02EBD59
SHA1:	7AC9C47A18ABF415213BF9B6BF03CE114D89E978
SHA-256:	8D7350B7229D1C82070B23252BA6DA2C0A0C1AAAAF02C3307A9484E2D38D790C
SHA-512:	F9A1C1505A6F0DE6266769D9C7ED5D6B02D9D7EC72751FF86B4CE51CE0461585FD13AC5E401BF59EBA6CB07A86BC491043F62CFB666D53D1E318826971A44597
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/main/utag.384.js?utv=ut4.51.202402272302
Preview:	//tealium universal tag - utag.384 ut4.0.202402281844, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatecha

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 14x12, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	100
Entropy (8bit):	5.810273725411821
Encrypted:	false
SSDEEP:	3:k1ZHvlluzlSEn6Yfp1M61pebPAc78uNIGK3Z7/l:6ZuJSEn6YfpGYpEPAZv5t
MD5:	2111574E74E460EC1017F734FC79532F
SHA1:	C271B01CFAF21FF54F56C5FEE6F37280D717E034
SHA-256:	96FA56988B10FFFDB76A9F00065865C1082260D2DFE2A8DFEF9960E2BBB7BFB8
SHA-512:	A3CD41F5FB790FBA5071255B06EC95A7DC87C5898B1F1997354D3961D7ED1C9469FECE465F646DFEF763A114D6413105041B1AAE4C22396FE37C46395526870A
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/css/template/img_print.png
Preview:	RIFF\...WEBPVP8 P........*......P%....OF`...(...(?g...>.[f....7.e..H.v.Kr......6....}..\...

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
URL:	https://gbxreport-prod.wf.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 48x48, components 3
Category:	dropped
Size (bytes):	1321
Entropy (8bit):	7.454957041367448
Encrypted:	false
SSDEEP:	24:EqZVqZhcxs/b3arntqkcP+L2UaqMiebB8zUorlbTmZIY2iMSG3zcbT0NL9F4Nkj:I7raT33aU7S8IQZTfX32k9vj
MD5:	C15F8F1CEFE4097C449FCABCB0C6FD8B
SHA1:	34017A751117B6266EF4E57BA36663741853B755
SHA-256:	4736211B5D3557DB531D7EF9D5B762E346C984B9A709E422864C8810B1A4378D
SHA-512:	53AD698647E8CAF70F0B6AB356D175706ADDF1A75C2CB889401C0D8BFE3DB4BB607F95D7D24D346855839730020A180A1620A81B4E9858F26933D8FDA57342E7
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................&$&22C...........................................................&$&22C......0.0.."..........4...................................................................y.Q.T....:Q.Zf.h.%k\|.qWl.?.7.....Ha.D..._...1.............................!.Aa..W.. %023Rb..........?...\K..sc.....a_...4nw.#.Mw...['...y.9mR.......N.TG .on;'<j~-..YA...-.YNV$HRa.2$y..o.oj9...\|..s?....%..\|........W8.Y..22.b.&..D...Z."s.V.........x....4v...c...d.@"...5.cY.C......:.#.@..qE.&y.6}..Mz...]...a.p...C......T.....[....c.xEncd..4pO.%.g.L..kz.U.$b....A.1.m.....Gt..8..!S.uF;.q..w-s....r.M6ICo)fL8.4(...D.P..W.i.+.......A9..i........%.&.}.....j"\|...x.D..&.^.AW..fG..}..;.sE..'..E..P.Ya.cy2)x....z..!..aV=.G'eD.....Go....k.2....Z.....hFb..?'mI."d.3f..(.9.E..W.._........%x.Ic-..wq.q..c.U.j.Qy]W.ZT.......j0..g..j{.9X..j....2.Y..b9.h.p..rp..b..:...1...!....w...U../......!.......................!.21Q..a.......

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	6055
Entropy (8bit):	7.930102515770256
Encrypted:	false
SSDEEP:	96:rGP3rL10wkW5I5M6+dtwxJFXqhcs1O348e2WgzXU6vgaQRR/ieOwkNF3681Zb5xj:rGPr736+dSx6hcaOoCWYXU/dieOL31v7
MD5:	0D39ABED84951D90513D49781CFCD9CF
SHA1:	BEA561402499036A4136C9325072A4D8EEEE1BF6
SHA-256:	A7094A071D7A9495DB4D6C49A259B7D81DC1E81133B238FB85043AACA9493927
SHA-512:	22A018A5D88CF696ED3ECABEF3A7DE3FE7CA1A28A00B653A02891104A7FB9B054FED1B18CDAD64F938450049CD23AB4C0800A70CD24B52E50CAB49F8D3E6886E
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/contextual/responsive/hpprimary/wfi_ph_a_218584479_sp_1700x700.jpg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@.......................#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe.......8........pixi............ipma...................mdat.....!.......2.-Dx..I$P.GA..@.9@....+...Xv:.:.Gv@{..(......p..n..o....e2.V..0...u.........f.H4l@'1.\|.v....u...8G......b/Y.Pc..'d.7..qG...w..0.j\|...G.1..5M.'d..w,nL..7..=gy..9...FV.........a...o9g.....P>.../.v.e.-..".WK.l\|..8.....U.......u...../.h"..)........a......#.ed.u.nL.7..B.@`.H6..Fv.@.b..E>...\|..\|~....=.v.}<..y...<...A.....[.........)n...k..z.i..h.zh."@.......DEj;0.F....%h....!...+Z.....C..Q.5'o.L_3C].T<..6.#,..!-..........ne...]...3B?.w.i...F..._.......M.{...."b5.^y=L...\|..=!....?3..7....f........t..z.o.K0W.-....{...<H..Uy.=g...q.c.}.t...,.............UI.2."?]..b.~O....fv@....C.........:....Dp......q?...h.fZe`.P.,z%...o..M.p.^...0.zC.V#]..Df..7...D.%..@.U<.J]aYq.(..o....]y.s.H.

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	772
Entropy (8bit):	7.286490991811477
Encrypted:	false
SSDEEP:	12:6v/7+iu7J1gTf8/e9uCnQMS+w4JjJF9m/lfSrK73+L0gzruuGmD+WGcZqGMd7q43:hUom9uB3xiqfGruuvpGcZqGqF1GA8y
MD5:	56A040E223DAF66E407C97A3A56F2DB1
SHA1:	1472B7328135CD2066286C230BE69F2659480D34
SHA-256:	BEAB1A208D997C2ABCDB8C4CDE3481B1DACD9E1334B32FC69DDA09FB7D6117E2
SHA-512:	D9E98ACC10E78B335B306D5EE7200F33D1B6423A4C073AB214E49A0D50E4B80B4A7AEB4C3736B70FBEB3A2CA1F10DB3DF813482355716162617D76E90D92C62D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....`.......PLTE...h`\g\Zf]\f^]e^\g]\g][f^[h``p``f^\f^\g^Zf^\e]\d\\p`PeZZe^\f^[g^^e^\e]Zf][```g^\d^\c\\h`Xf_\f][f_]g_[f^\e`]f`\f\[e][f^[e]]f^[h\\d`\e`Zg^[e]]f^\h]ZhXXf^\..k...2tRNS.@...._ .....@.0o.O.`..o.P .p...`P...`.@@0...` \_."....orNT..w.....sRGB.........IDATH...v.0.E.M.........d.2en..?n....q.Z}...h;.d.}...........w^(........u..U..X2...`......1.G...Z.H.....F...(.'y..n.l......"A.[.u.m.....1....!.... ".)..L=l.\|..D.A....0...........~..0...K._..O..Z..\Kc..6.I.@....YX.0...V.8.+......u.u..e..px...,...~..Q#t..D...../J.C_$M.!...n...Xysi....C..?o..".\|....../.j..m...m..@..6P....O7Q.Q.:..^.n.j.W..C.x%2....A...qT~...a..d,... ".<B.A..D...'.....<.w...*D......E.-`n.3...r.P.ko..5.5._u...6.>...k.-&.C......IEND.B`.

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2772), with no line terminators
Category:	downloaded
Size (bytes):	2772
Entropy (8bit):	5.081816666138841
Encrypted:	false
SSDEEP:	48:LQ/IclNrcnT07OgQ4/wio2SY/kaG6L/MGd6X3:LQ/T2ZgD/3RL/MxX3
MD5:	E250B6EDCD5A9770ABA40172DA570D82
SHA1:	1E9CB11346FDC2C066945877F82CBC99C19B242A
SHA-256:	26D5BA3650F37D809B09B974E26DF5DFC68E6A349AEC44C955EDD68FAE5D68EA
SHA-512:	11ECA4745A0152ADE274BB4FFFBE60AF86FA832BB0C7B2404DA746464392C68B69C7B546A887FCFC348116760FBCAF6DEE76BC6E9B9A260971B0758C1A6DF8C4
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/locator/public/js/locator.js
Preview:	var sessionKey="";if((location.pathname==="/locator"\|\|location.pathname==="/locator/"\|\|location.pathname==="/locator/index/")&&document.body.id==="searchResults"){var srchForm=$("#searchForm")[0];var formData=new FormData(srchForm);var queryString=(new URLSearchParams(formData)).toString();history.replaceState(null,"",srchForm.action+"?"+queryString);}$(document).ready(function(){$("#holidayHoursSection").find("dt").each(function(index){$(this).text(toTypeCase($(this).text().trim()));});fieldAndLabelShowHide();$("#searchForm").click(function(){$("#multiLocationFlag").val("N");return true;});if($("#mainSearchField").length>0&&$("#mainSearchField").val()===""){$("#mainSearchlabel").removeClass("hidden");}else{if($("#mainSearchField").length>0){$("#mainSearchlabel").addClass("hidden");}}var input=$('<input id="WFtemp" />').get(0);var supportsPlaceholder=("placeholder" in input);$("#WFtemp").remove();if(!supportsPlaceholder){$("input[placeholder]").each(function(){if(!this.value){this.valu

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12669)
Category:	downloaded
Size (bytes):	366684
Entropy (8bit):	5.585350357335179
Encrypted:	false
SSDEEP:	6144:3FAZITzoboAd4NL7zCd76s7YMX/ZL+R80UJVCR:3FRTzZACNL7zG7NX/ZL+R7
MD5:	2958FA8632F4E7FE1C36491190E096AC
SHA1:	F4AC8DAA366486713759EFB62950C5517F310D41
SHA-256:	6AA606ED689E61A4C9C959C43E8B66EBA4C943CBABFB39A8DA74F4A3A0D24C44
SHA-512:	6E0776A2330413ADC781AA03DDEA52BB2AD5E198B6B5C1BC40352A6648A4514065D22E733E620F525B47B3BD2C456D8D30D6952D68A252EFA60A561905AE8704
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/tracking/medallia/wdcusprem/57907/onsite/generic1703025661264.js
Preview:	.(function(window){window.MDIGITAL=window.MDIGITAL\|\|{};window.MDIGITAL.version='2.53.1';})(window);window.KAMPYLE_CONSTANT={PLACEHOLDERS:{URL_PREFIX:'https://resources.digital-cloud-prem.medallia.com/',USERSNAP_CDN_URL:'//screencaptue-cdn.kampyle.com/',USERSNAP_HOST_PREFIX:'//screencapture.kampyle.com/',COOLADATA_SRC_PREFIX:'https://resources.digital-cloud-prem.medallia.com/',COOLDATA_API_HOST:'udc-neb.kampyle.com/',USERSNAP_V4_HOST_PREFIX:'//scp.kampyle.com',USERSNAP_ONPREM_HOST_PREFIX:'https://md-scp.kampyle.com/',USER_AGENT_CLIENT_HINTS_LIST:'["brands", "mobile", "platform", "architecture", "model", "bitness", "platformVersion", "fullVersionList", "wow64", "uaFullVersion"]'},SRC:{OPEN_SANS:'resources/form/FormBuilder/vendor/fonts-googleapis/css/open-sans-v14.css',COOLADATA:'resources/onsite/js/cool-2.1.15.min.js',OOPS:'resources/onsite/images/oops.svg'},FORM_HEIGHT:'450',FORM_WIDTH:'450',COOKIE_EXPIRATION:365,DELAY_BETWEEN_TABS_TRIGGER_MS:550,DEVICES:{DESKTOP:'desktop',MOBILE:'mobil

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F%23skip&cb=1711631945422&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A182-228910-16%7Etcm%3A91-223671-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1323
Entropy (8bit):	4.855276794291571
Encrypted:	false
SSDEEP:	24:SNIcqlR3wtZJnpQLF0mbP0cnk3J6U9lG4PIkT8KRR:SpqTwtzpQLF0kOOxKz
MD5:	601E7066C58EDBFCDEC2179541E8597E
SHA1:	BBABE0C5F88AD2AB11C1EC594AF799E0441E2B3B
SHA-256:	82EBE1AD137A9DFA650931255E777C313FC1E970A6F442F5E54AF817509C74B6
SHA-512:	63E50D2510A2D08FAFFF54E6B461C5740E56351594404AA8B91AC83C942FDA5F7E173D0F46FE29200FBB3DD1B42AD93FA8A60F91BB9C9244EFA31625B10573A9
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/assets/js/wfui/ndep/css/nuance-chat.css
Preview:	.floating-nuan-chat {.. position: fixed;.. height:1px;.. width:1px;.. right:0px;.. bottom:0px;.. background: transparent;.. background-repeat: no-repeat;.. background-attachment: fixed;.. border-style: none;.. border-width: 0px;.. z-index: 99999;.. padding:0px;.. transition: height 200ms linear, opacity 1000ms linear;.. box-sizing: border-box;..}..body {.. margin:0px;..}....body.chatopen {.. position: fixed;.. width: 100%;.. top: 0px;.. overflow: hidden;..}..../..@media only screen and (min-width : 320px) and (max-width : 560px) {.. body.chatopen {-webkit-text-size-adjust: none;}..}../.....floating-nuan-chat iframe {.. width: 1px;.. height:1px;.. opacity: 1;.. z-index: 100;.. position: relative;..}.....floating-nuan-chat iframe.enter {.. opacity: 1;.. box-shadow: 0px 0px 6px rgba(0,0,0,0.15);.. border-radius: 0;.. border: 0;..}.......floating-nuan-chat.adjust-height {.. top:0px;.. height:auto !important;..}.....floating-nuan-chat.adj

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F&cb=1711631936553&event=DisplaySignOn&eventType=Presented&eventDescription=DisplaySignOn&clist=tcm%3A84-224415%7Etcm%3A83-2046-8
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 14 x 10
Category:	dropped
Size (bytes):	207
Entropy (8bit):	6.204218631572008
Encrypted:	false
SSDEEP:	3:CE1VH9mbM/rfcc8TtU7SDPzI69aqt93ltrllTllgp5x3PwKvvO4A2W/G3lYBdo5k:t1E8t8TF7L4qt9l6p5x3IWlA05isbQV
MD5:	7912E8F9615C6847CA8B604FA4D79173
SHA1:	E0CF43E33782B44DF70DFD84A3D17D6C3EFC7FAC
SHA-256:	404F2D94B91F4BA400DE9278964879322CA5DE2DD828CB1DD6B362CB47F12D84
SHA-512:	CC345C194D87492407DABFD3AC312F0F331AC7C197D84D59C767C81755DE102E2B44FB276773EE877C435B86A7F8D4F55F1DEE5772315AC4A28FA16CA65FB136
Malicious:	false
Reputation:	low
Preview:	GIF89a.......#..,))-**0,,LIIMJJYVV...........................................................................!.......,..........L.&..A0c...0.g....%...m...D...h......8..MeA]X4..$.....(......V.MT....@..CI..;

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x423, components 3
Category:	dropped
Size (bytes):	28911
Entropy (8bit):	7.9582416185933855
Encrypted:	false
SSDEEP:	768:/xQ9AayEtqTBW1gXcuRg8ImJktHW41pRyOwlPs:JQnyEtu6grRg8at2oRyXlE
MD5:	309AB99D66D4CD8123141DE1FDBE9239
SHA1:	B01C99803BCAAD899F84AD9F45610A0A1D401530
SHA-256:	A1B9DFAA0C5238FB6030754D2C5CD8BF94E6CAB51A3AA3089D4D88CE7248E006
SHA-512:	7CCC41921902E259F504F6C4BDB7368850806CB9C42C6A9915F811132E86DE0F278B2D4702DDF387DFBBBCFEA6B6EAD468B353A8A1172C4688058FB535C7041D
Malicious:	false
Reputation:	low
Preview:	......JFIF............................................................................%%2..............................................................%%2........8.."..........5...................................................................c.B...M.-.yG.....d..3+`.'%2..FJ.j...\.....e.a.i.X.9F(.0........1.J....L...4.:.S&2..Hc.B....1..>.$)3$R.....&Jd...A=..n}..6Lqz..........X..x.]G.i..+.....@PBO:..z..9...]..$J.%...l...[..!i).......H\Q.c..3T.y.Q01.h1.[.FJ.K.<[z.5..........Z.0........z.Zd..-...\|...q..5...@...I...6...x.]G.i,0b...-j..d.B.....z...z.t...\.....!.....-\..Y...5...LQ..KT..(.".(@".1....Z..V.G..Z.....D.<.S..cc\-....=....2S-M\|.x.?B...n=m...".....H.....n5..H..1e....`..j.h\Hy7.....9.P..f........,.&....H.FI1..d....V.1....L.^.E.T..T..x....@R.......Nf......t..{Y\|?X.sP....k}..}:......T......!.\9@9.Yq....{...Q5.Z@....yg...zg..O9...2....oK....&.H..`..1..)\|`.....Y1.DXc.......4.:.%c...KP..t..^.......o..-.<..........>.]]................k.\@...y..lrf..Z.Bo..z.y..<

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7683), with no line terminators
Category:	dropped
Size (bytes):	7683
Entropy (8bit):	5.803214511992741
Encrypted:	false
SSDEEP:	192:fKK/haHi+k13mUxPkKCGMT9Q1HlHr8g7U9Vg3yvqdkrwilihrY:fKK0HRk13nFkKxMMHlHr8gEg3yvqdkr1
MD5:	DEE1AA50BA3707F20CD6C5FE8BF4D867
SHA1:	56261B988ACF496E1AD6B5CFB739916911F412C8
SHA-256:	9E5DE32675050BBA163026674801D9AD998E68346B378AE74BD9872D738CCABB
SHA-512:	F12F13468FFE419B20AE7C56BEEA9967137EF3FEEF67E3BA30CA3CEAB74DCB68B1C7AFCF8C0954D2FCC7D46498A6E4A5571464748701EBB32A2BFC017D0F9DF4
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var e,t,n,r={},o={};function i(e){var t=o[e];if(void 0!==t)return t.exports;var n=o[e]={id:e,loaded:!1,exports:{}};return r[e].call(n.exports,n,n.exports,i),n.loaded=!0,n.exports}i.m=r,e=[],i.O=function(t,n,r,o){if(!n){var a=1/0;for(l=0;l<e.length;l++){n=e[l][0],r=e[l][1],o=e[l][2];for(var c=!0,u=0;u<n.length;u++)(!1&o\|\|a>=o)&&Object.keys(i.O).every((function(e){return i.O[e](n[u])}))?n.splice(u--,1):(c=!1,o<a&&(a=o));if(c){e.splice(l--,1);var s=r();void 0!==s&&(t=s)}}return t}o=o\|\|0;for(var l=e.length;l>0&&e[l-1][2]>o;l--)e[l]=e[l-1];e[l]=[n,r,o]},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,{a:t}),t},i.d=function(e,t){for(var n in t)i.o(t,n)&&!i.o(e,n)&&Object.defineProperty(e,n,{enumerable:!0,get:t[n]})},i.f={},i.e=function(e){return Promise.all(Object.keys(i.f).reduce((function(t,n){return i.f[n](e,t),t}),[]))},i.u=function(e){return"public/js/"+e+"."+{PredictiveBanking:"5b0ea3c123340aba4582",DevTools:

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	9198
Entropy (8bit):	4.53575154289712
Encrypted:	false
SSDEEP:	96:WlldYhV6u7LspZ50p/SwoE56nzTDmyzpCdukvC:WPdk6u7L85USwoLvZyuk
MD5:	CD112F1ACB59EF6E59E09C0EFFD8CE2A
SHA1:	BC104CD92ADC32A8F695300D2B0CC69C2776F6AF
SHA-256:	6780D0B2BC67397895EF7B8845261EEE7B9B22610B026835362128942DA5FB7C
SHA-512:	4ACA546509ACE5BA9DD09D6ECD7E112CA012E672E1F7ADB1D514EE7F52FB896855ACD08101E2C96B555B4DD8410576AFC486518B7407185C7AF215DAED568B38
Malicious:	false
Reputation:	low
Preview:	............ .h...6... .... .........00..........F...(....... ..... .........................(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...'...(...(...(...'...(...(...'...'...'...(...(...(...(...(...(...3)...%..'...+!..5,..)...+!..8/..:0..4+..(...(...(...(...(...+".......... ...`Y......?7..7/..........xr..&...(...(...(...%...E>..........)!..........mh..............-&..$...(...(...(..."...up..........UP..................\|v..........[T..%...(...(...$...........zv..........XS....../&..{u......vq..PH...%..* ..'...<4......mh..KD..........+#......YT...z......,&..<5......9/../%..............:3..........NG..............................8...* ..<3..B9..@7..!..90..1'..1'..B:..C:..C:..B9..D;..C;..<3.. ..(...'...&...'...(...'...'...'...&...&...&...&...&...&...'...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(.

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 14x10, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	144
Entropy (8bit):	6.350078776366144
Encrypted:	false
SSDEEP:	3:OZHb/0ATqFZsYudTfLwuu7fZqFkYy0iFBC2C985aXUZ4EQinLl:OZjNgZsYuoqFURPI9jkZfQeR
MD5:	F23F57B454992C0B1DCDC21A0837F1A1
SHA1:	EDFF422C5F7D2D76D2C5EC9DE3D93ACFA3F2892D
SHA-256:	BF1E6F72675798207C575A7D7C228AA3EB8C15A8F974B67F5A1EAFEC77206440
SHA-512:	C1E3DC8B0551D4ED3A1DD5FE908854800443D34B623B8E72FEA03A0241722711156394442003F2175842E860900B1FCD5306CA787DDAAF55D2129AE6714A43D8
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/css/template/equal_housing_lender.png
Preview:	RIFF....WEBPVP8 \|........*......P%..............>....."9...YJ..A~..Y..XWK9.Q.c...N.O....<....K.....:..A~.o...X...HQ..2..Vn\|.R.r.u......w....

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27073)
Category:	downloaded
Size (bytes):	29707
Entropy (8bit):	5.373689360984442
Encrypted:	false
SSDEEP:	384:KjP4BZWMbFfHXh+HXSHNQsoAWVRNo8QXSNo8QQYNo8Qs3No8QZvNo8QLlNo8QP36:KjPEWC8cWqtMkiN1foBd1V
MD5:	319C2D66ED782AD5AC5974F15501BE1E
SHA1:	11ADF62E5BA6249822C7B3317B13D1E5F88A2D7C
SHA-256:	7AF4656B014D877462B14A4CB4F340453C77D12030CE325C0A4EFB0012ED7965
SHA-512:	9960C0417C49FB75C180F5A37617BE6419A15421E331186CB021E07D7F80593412C5A912CB9D0E0D38589EEBF206F1114DCB55661364D2D6D5B7331ADF027F27
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/main/utag.424.js?utv=ut4.51.202311021817
Preview:	//tealium universal tag - utag.424 ut4.0.202311022132, Copyright 2023 Tealium.com Inc. All Rights Reserved..var dotq=dotq\|\|[];try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.loader===undefined){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(this.readyState=='complete'\|\|this.readyState=='loaded'){this.onread

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	4.798269164201573
Encrypted:	false
SSDEEP:	12:XGaJ8EWogR3WGn2sQuabmWF3HyR+78C7ccdNQWu6edW9REZ:XGoH1sQVS+78tvZ
MD5:	11E6B612207ABF064158E69540C16E24
SHA1:	9E3912485514553B2E17B578C8340986F1172B4D
SHA-256:	8670DA3C95C03B59B091EAC882B67E0B59B765C455B8D871ABD2E55D4618573B
SHA-512:	2A1257C597A985AE9DA8A029A2BAB00E2CDA2106026578AC382C7319F4754D42C47E51F59A3F45F1228E4E036B00707A9B087D6DBF18821327F187E4E79EA24F
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .........................B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...C...C...C...C...C...C...C...F...F...C...C...C...C...C...C...C...)...aY..pi..WO..)...A8..)...)...)...8...2(..)...)...`X..)...)...)...KB..zt..rk..PH..LC..qj..)...)....z...%..)...WP..ZR..OG..)...ha..c[......c\..rl..)...WP.......z......?5..YQ......C;..wq..)...WO......VN...z..H?..6-..ME..8.......................oh..le..).......\|v...z..QI..* ..............ys..g`..mg..D;..jc..oh..PH..).......................ME..)...)...)...=4..NF......ld.......y..)....z.......\|..TM..xr..c\..)...)...VN..bZ..]V..3)..........RJ..).......jc..............MD..\T..g`..8/..)...)...)...)...)...)...)...........bZ..qj......KC...$..)...)...)...)...)...)...)...)...)...TL..7-..)...0&..mg..)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...).

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	258837
Entropy (8bit):	5.364506857080055
Encrypted:	false
SSDEEP:	6144:FiPYIJMdb+C4CUC6p+w4wUw6/+545U56h+I4IUI6LQ1psK0vyddOwSdih:FiPYIJMdb+C4CUC6p+w4wUw6/+545U5w
MD5:	19E81306DFAF56E6362A1B2376469D8F
SHA1:	14057ECD75A27428292D64E30C8CAC1B7701EE7A
SHA-256:	3897D72826D632483C1905E3E971E1939C94F9C5151460F47C31156CEF209300
SHA-512:	98BCC7BD8258082E8132C8331B424C81E2C133B187588E75034166DA39CA8E7350A268210B4B2C0019B7CB1625A5020098D6C900B6A91EDD21234C8AB83A471E
Malicious:	false
Reputation:	low
URL:	https://connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/stylesheets/wfui.c749bdd84a38b3f40770.css
Preview:	.AccessibilityText__accessibilityText___oIzQa{position:relative}@keyframes WorkingOverlay__fadein___AjhKI{0%{opacity:0}to{opacity:1}}@keyframes WorkingOverlay__rotate___HH_H6{0%{transform:rotate(0deg)}to{transform:rotate(359deg)}}.WorkingOverlay__common-overlay___o4X2c,.WorkingOverlay__fusion2___aYcBz{align-items:center;bottom:0;display:flex;flex-direction:column;justify-content:center;left:0;position:fixed;right:0;top:0;z-index:3}.WorkingOverlay__fusion2___aYcBz{background:linear-gradient(180deg,#ccddf0,#fff 98.44%);top:24px}.WorkingOverlay__fusion2___aYcBz .WorkingOverlay__spinner___Jswbx{display:flex;height:295px;justify-content:center;width:295px}.WorkingOverlay__overlay___Qhjkq{align-items:center;background-color:rgba(0,0,0,.5);bottom:0;display:flex;flex-direction:column;justify-content:center;left:0;position:fixed;right:0;top:0;z-index:3}.WorkingOverlay__overlay___Qhjkq .WorkingOverlay__spinner___Jswbx{animation:WorkingOverlay__fadein___AjhKI 1s}.WorkingOverlay__overlay___Qhjkq .

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=703-289271-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2Fchecking%2F&cb=1711631997176&event=DisplayMasthead&eventType=Presented&eventDescription=DisplayMasthead&clist=tcm%3A703-245958-16%7Etcm%3A91-223647-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 319 x 635, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	38953
Entropy (8bit):	7.975316488709095
Encrypted:	false
SSDEEP:	768:Jy8CHQkw67g5naQk3LooyCU//+CDqIjxYPNnkhes6g+DgVXL:Q8CHVwQMnaQGQCo/+JImFkzL
MD5:	E6122BEAF9FFCF6BECADA3BB5DED2DD3
SHA1:	1174AE5F3F04D5DE450604F80B5133DFD2262BDE
SHA-256:	60673C8CA8BB7CEFFCFB9148E5D5CEAA0FF23D6A18610FB4C910674F02450ED7
SHA-512:	2B6610F8B5ADD98BE083D232C8D7FB4EA5BDB4FD99116EAB257C500FA80F5A633B3026A155FE83392C2A5BB0FEC25157AA54AD5AFD693FB533752882530A5AEC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...?...{........L....pHYs.................sRGB.........gAMA......a.....IDATx...\|........I..R.I..TPQ.f... (J.)..A...T.)6P:."].....C.!......I.\M.............fvF.'...^...m.T.J/.....W..x.a.&......V..8...wDXX.Q8.....;...^........U.? ..~~......2.a..Azz:233.!....!%9Y.KKM........4`....8......6..G.]h`P...........\H.I........u...".j.up.v.?.=oE. T.M......f..a...e.......'!......V...T..',.6...(P....a,..@.......M.bz...Q.a.E...1..'H.c..AZz..L...=b.y..lko.po+....-.0..~\|<...h..X>,l.lH...Zx..oo.E.....2....j...}.i)).2........I7WQ...kS.dI.....;.d.Fd.Tmm!.V..uP......R..{..0.....w#2...U.....V......v...\)$._.`...."......y.@....a.W...hq.N..,\|...~~~(^.d.....9V@..H..........0...0.-Z.._w..9b.8...k..C}......1..b....O%...e...1?2'}U..e..`...,.7n 5%ex.Uf[..I....Y...qid.co.........._.>u%...(..H.-9..w.+............{">.....C..D/=...._4J......78884......lc..Uwk)].\|%GX}.K/3...#a.....4.+......x..,........u..h,L..W......+....(Ae.*P......u[..)))m.U.i....x.C

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F&cb=1711631936567&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-242364-16%7Etcm%3A91-228643-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (511), with no line terminators
Category:	downloaded
Size (bytes):	511
Entropy (8bit):	5.708493421906231
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHmDY9trrSMUniUMCyEKJUb0U64wmaW:hMiRO99D4r8iUMzVJd4w4
MD5:	0BE3E2FAA9886CF50C29D0018DCA9360
SHA1:	5130FDFFFC6400EA91317700D2A9ADDDD743E530
SHA-256:	ECC2CD2DBD5D6B57021A3E77E512479C9CF95EC9AD78C1FD2BD556791C283DED
SHA-512:	6F48B53D17437DFADB426B13DA7ED9BDF96DB53B0B2983509CE1B12F2873E001D137C49BEEEDDE78FB21258AFDF3F89DD8CE1E294D25FF390BC01068BD340B8F
Malicious:	false
Reputation:	low
URL:	https://2549153.fls.doubleclick.net/activityi;dc_pre=CLmiqfOFl4UDFXYQdgYdkywNxA;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CLmiqfOFl4UDFXYQdgYdkywNxA;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=*;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F"/></body></html>

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (490), with no line terminators
Category:	dropped
Size (bytes):	490
Entropy (8bit):	5.689521685897494
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEH0LHGKriUniUMCyPowmaW:hMiRO9v9JiUMzQw4
MD5:	CA2BC317F09C6A2E8F59FFB22662EFD9
SHA1:	2A9863D08FEABF5D55470E0DAD0575344D0C2419
SHA-256:	48FB2BE1B52AA57492F2EAA2C3281A6D0191F46A5034B5D205C36401858E3A56
SHA-512:	D1AE598860FD031BDC3C4BC12649ED58EF0ECD7BC5357862622D90B491DB19B1CA5143E85E8998BD945AA92FB50F690BB53634E5A3DD72F272240C5294F02420
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CJeLjfOFl4UDFd0VdgYdAnwNgA;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=*;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F"/></body></html>

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (38636), with NEL line terminators
Category:	downloaded
Size (bytes):	501449
Entropy (8bit):	5.294791125368762
Encrypted:	false
SSDEEP:	3072:7oCuN/zL2b5d5wilS7S2UGg7bSp+0gnQNeeJa3fSqaN3a01QaP4Bq:7o0bf2NAj03N3q0GaPX
MD5:	6E430482EB2B0CD7A402ECC6E5078D3F
SHA1:	C812A5FEE382E45E0112FF57C6A3B78CFB0FC940
SHA-256:	13B32021E99460BCABC60341A96E8978D9DD88929083DFD777422E09242D8641
SHA-512:	21953C1976E77DFB490912302B350E404B70B6A85F13D138F90A922DA5AA860DFBAE2BE334040B51959C93D1DFE325CEE73184D63104C6EA342F0867BAEA7B1A
Malicious:	false
Reputation:	low
URL:	https://media-wf1.digital.nuance.com/media/launch/ci/InqFrameworkService.js?codeVersion=1710907168986
Preview:	!function(){var e={9662:function(e,t,n){var i=n(614),s=n(6330),a=TypeError;e.exports=function(e){if(i(e))return e;throw a(s(e)+" is not a function")}},9483:function(e,t,n){var i=n(4411),s=n(6330),a=TypeError;e.exports=function(e){if(i(e))return e;throw a(s(e)+" is not a constructor")}},6077:function(e,t,n){var i=n(614),s=String,a=TypeError;e.exports=function(e){if("object"==typeof e\|\|i(e))return e;throw a("Can't set "+s(e)+" as a prototype")}},1223:function(e,t,n){var i=n(5112),s=n(30),a=n(3070).f,o=i("unscopables"),l=Array.prototype;null==l[o]&&a(l,o,{configurable:!0,value:s(null)}),e.exports=function(e){l[o][e]=!0}},1530:function(e,t,n){"use strict";var i=n(8710).charAt;e.exports=function(e,t,n){return t+(n?i(e,t).length:1)}},9670:function(e,t,n){var i=n(111),s=String,a=TypeError;e.exports=function(e){if(i(e))return e;throw a(s(e)+" is not an object")}},8533:function(e,t,n){"use strict";var i=n(2092).forEach,s=n(9341)("forEach");e.exports=s?[].forEach:function(e){return i(this,e,argu

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, progressive, precision 8, 672x170, components 3
Category:	dropped
Size (bytes):	12053
Entropy (8bit):	7.87021887704649
Encrypted:	false
SSDEEP:	192:LYrAUYveq0wayKaUvxJnKxsfO6LssQmlxCpKeGltiJ/xeuBYxP/FdAuFRw:ez/I0JKufOMrlcvGq/4P/FdAuXw
MD5:	EA74477E58D92E0021B435E810DCF045
SHA1:	5D3833DB701186B56A933F496A6BDA9C0BD4CC58
SHA-256:	30A73E6875353B8029463A6E18C4EBBD6BBD24AD00EE76E882E0AF6D1D3F220C
SHA-512:	9EC2CE359D25B44EBA4B5C1C78A92CEE5559D71903262058F824F58566475E2D7D13A76BF75B745ED987DD4C2C1AC28003C5519D1AA52A00B4FABFEF27622DDC
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.................................................................&$&22C...........................................................&$&22C..........."..........8..............................................................................fJ.e.Qw.................J..5a..XisV.\....7d.7..f..n..~.z^..O....Vy.J..B..H.........J)$Q(..JR..(.Q....HQ!D.V;..*(..e.Te.l.X..X..k..5.X..R.4.^.....9.I.<....~.\|..........{....;..;.{..>a...

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x423, components 3
Category:	dropped
Size (bytes):	66765
Entropy (8bit):	7.979447399811473
Encrypted:	false
SSDEEP:	1536:iuU4cBfxhgJP0uXArtGdddPfLnbyKa2lQCMA0uJctCReIwCY5:mxhgJP0uXArtGdbPruKz0uxw/
MD5:	FD1732A08762E932C6FB619F1398506E
SHA1:	864D8A45B2D1E7D370A23AB6A3D3E57C65982BCB
SHA-256:	21D9B16FE15142CBF6DF1F9774E6B43B599EDA12524455665BAA08929D8A6F55
SHA-512:	4301B94DE128F19361C9A846E2F5CE18F5772D7A270826A9E74161320DDB54C8CBC23DD5D783DD3F6D06BBDEBCB0417821F8EEA829F96709843F00FB2A5E3CCC
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................&$&22C...........................................................&$&22C........8.."..........8.....................................................................%{..x.e.U..a+.].DVt.B..#%A.L...H...mW<q...Ux1..W%F..SA\.k.FJS.yc....%,.z....G+P...&P....0..(@.."e..2..2@q.....M.....q.f...Yq..r...H....A..1..T`....b...j..x........J..}...Y...F.7.zRF..\...V..Zh..m..\V,.!e.p.e.AI#...E..E+...b4W%F6Q...Vs.r...(.I....#.Eq,....G9SjJ.Q.f1.....@J...^.5.DJ..TI2!...X.j...J.\.k........$...1.c.&.-6......ls!0...`.L.21...5...)H(...`.'.R..C.'m.V..uP,@OQ]........N4.$..J.4...S..\|.:...A....5.&........Z..K6.r..x.{..z"'.m.....^1D..2.r.d....+$.N.V4..R.".EV1.............r!.8.T........\........T.!...k..J#.5....i"....T.8.^.Nw.e......J..IbyW..r..\.T...............;..&..BF#.. ..+.........B.....EGH.R.Pb.@..Q..i..LU..x...#^..P.p.UF(...D..8....(..X...(E..R..........T2....9..a...iqUm..J.F...L....$.BL..,...

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 15, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	181
Entropy (8bit):	6.08407418371658
Encrypted:	false
SSDEEP:	3:yionv//thPlHwtz/gksKXtMlsLtsddhlHu3KynAqIXKGoBy9utIB99+dyW1eGBMo:6v/lhPKtz/gksKXtksRUHu3KyAbqEkc8
MD5:	F2ACDE43D0694B9931313A6EA22B8E45
SHA1:	280BA762C2604781C3E1872AD728AFEE48A5FDB5
SHA-256:	ADE9D3139032EF52A4790C2F5000AF2AC22CBAF6D1E80A56A86DA9B373CE1E11
SHA-512:	88CABB4B9C316233496E9D6E7CBB091C68028C05651E4D543D922A5EA088F3B4954D0C7532352A3753D71C9DA83D89F76D2986F5F868E36070FE6755F3F0BCFA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............w.......orNT..w.....sRGB........bIDAT..c``..N.O.f@..W....N.G..eO....C8-;..D8..Y..<.dMdW4....s.B)2i...9.B...I..Zp.C(.-.'..Xez.zd!..yX.P1>w....IEND.B`.

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	28177
Entropy (8bit):	4.188473397039138
Encrypted:	false
SSDEEP:	384:6kQNYIxh+FLJYF2ZZ3a3ASDKo5ZbeGgviDjVS:7QNYIxh+FLiF2ZZ3a3ASDTnkqDjY
MD5:	6D6AF9375CDD7A8F593D2E989C255151
SHA1:	21C78BBDE9A9E7593DC61E4744CEBD0A41F8D625
SHA-256:	23670519D243639950FFFAFC31DF36ADFA208053A6459484A4F847851F42625C
SHA-512:	259C4F17E78EFF02EC6C45CC7571F093985F5378281792806261E4E0AC60964EC421C3BCAEEA3C0F1AC4FE7C85DBE02E7C66AEF8837D0E2157AE2840089752CB
Malicious:	false
Reputation:	low
URL:	https://tag-wellsfargo.digital.nuance.com/tagserver/frame-bridge.js
Preview:	/*. FrameBridge object stays as a communication handler between Nuance Bootstrap in the parent page and everything within the sand boxed iframe. * @typedef FrameBridge. /..var FrameBridge = function () {. /. site id retrieved from window. * @type {string}. /. var siteID = window.name;.. /. parent page set unique ID for iframe communication. * @type {string}. */. var UUID = getParameterByName("UUID", document.URL);. var sourceWin;. var cssName = "chatui";. const configName = "uiconfig.json";... window.v3LanderConfig = {};. var popoutWindow = null;. var openerWindow = null;. var uiConfig;.. if (window.parent.opener) { . // popout will always contain siteID or else consider it as new window. const paramSiteID = getParameterByName("siteID", document.URL);. if (paramSiteID) {. setOpenerWindow();. if(openerWindow) {. siteID = paramSiteID;. u

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=703-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&cb=1711631971829&event=DisplayMasthead&eventType=Presented&eventDescription=DisplayMasthead&clist=tcm%3A283-224274-16%7Etcm%3A91-223647-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35846)
Category:	downloaded
Size (bytes):	35889
Entropy (8bit):	5.4796256266817025
Encrypted:	false
SSDEEP:	384:y8QkSSXI2OCj27cj1Dfo2Y2rJLO+Pv5H9AeHAmvApNkStktL5/CohDAI5jUWZ1V0:y8/Sip1g+zAL1NkW01jZUT0dX2knK
MD5:	0A40602DB7616A31C9DA4548EE920190
SHA1:	878E01CB0C90CB247AABC137327655A6FCFFCBD5
SHA-256:	6C771BD1C269646A76015F2F6410A40C031E5ADEA88F665BFE9AE15A972AB6AB
SHA-512:	F300EF35835CCFA6CDE375B24BD2DCFC8374D6E698E857431BED0404D5DD3634E09C92A0EFA7F2015B92A80831C06AE7363F2EBF8407854E04D2970B8363EB48
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/tracking/ga/ga_conversion_async.js
Preview:	// ga_conversion_async.js - 20210826102720.(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object")}var ca=ba(this),da="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),t={},v={};function x(a,b){var c=v[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}function A(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in t?f=t:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&"es6"===c?f[d]:null;b=b(c);null!=b&&(a?l(t,d,{configurable:!0,writable:!0,value:

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	981
Entropy (8bit):	6.569168691158682
Encrypted:	false
SSDEEP:	24:rGDc/jcadMmP/xVAc4nMjJG0057JBpaicK3:rGo/j/hVAc4nuwZL5N3
MD5:	7EF0112CEF89BB8DC7DA0C706FA8F529
SHA1:	64941F59433754F214BC7C8F9EB8F550F4C630D1
SHA-256:	D14F4933769B2263652B1153584B343D1461A486F946DB7736AAB700D72A25D2
SHA-512:	D10D7B70F5A900C7191BF4D89615ADB81B7560C1E0FA43460A1B6DC045164A4B4359B9FB9E838EA8502B188F223CCD4D4FAD5D522D565D01CA7A3B0436904B9E
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/rwd/icons/marketing_belt_icons/why_WF-contactless-64x64.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@.....................................%...8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe.......@...@....pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe.......@...@....pixi............ipma..........................iref........auxl.........!mdat.........@2..FP.<P.{K .......p....)wgg.Z..F._..I9..A....ee.xnYQg.B._.V\|.s.9.....m..>..;.....WS.W~o..!..gp.......d11{eo.......U...A>c\..R...w........#..]._.0...q.....'J".s..a.mA`..$5.h...J..6.I,....jnv5...E.M........\|..y.8.......-.z.............2...@.<....j.[Y( ....\.I....0....SbL..&.D.cY.A.i.......7...z.e.,Qm..Q.7...U.T.6..8&...?...N..t.Q.n...;.d...s..0G.-bc.n..wJ..&9..^..(..uf_.....<..f.*.Hg.f.cyb..v....8).Bl...v.<......X. .5...9...'(:.gQ.(..: ..zUvm...M...,..VKu.w...:...x.t.......vTaS.(\|....0+...

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22172, version 1.13107
Category:	downloaded
Size (bytes):	22172
Entropy (8bit):	7.991257861510623
Encrypted:	true
SSDEEP:	384:qaWsUfUlEqD8i7vKi+Oms1GYox4cU92YiuLX1maJGl1Ec8U:sseAZDsOF1GzsRwpjf
MD5:	F0307736C3A6EF356722F1DC3E9FA3F4
SHA1:	E29EA90BA786F0E08CAA770DCFDFE923F619BEBD
SHA-256:	6BC7E16D4B6822A6867D7DD9F9D29F5FD77CD803750B0FE38A92309D9EB00704
SHA-512:	9B4900FD00085AF1623E1A94628C870366CF43765FC8B002450B5DD436820D5BBFF146A0BB71DF21E30FA3D1F13AAB7EA209038E5275216C5D47FF578A299CB5
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/fonts/wellsfargosans-bd.woff2
Preview:	wOF2......V........@..V7..33......................V.......`..,..r..W.....D....6.$..x..>.. ..b. ..-...'p.S.:]oVUa .'..;... .....18..P...!...s....n....3I0Cus.HE.T..S...Z`.t..I......q.#....~...-.p....+R..f..+.\|..W..]:..Do..H0Qz..FT..`^3.Sh.%.>.>....k_....$....I..7../V..n3..X.c....l.......U...Rm.6z./!.x.....yI...._.....RO..9...a.%YT.........}..EI ..B......4@...).fT....SL.....V......:2(ZC.....[.v.qQ.6T...iI..d.#.d.i.@..gd.A....Z/G....t.. YH7..~.}..!&...H......2P.k...J....sW...Eo..]....R.3<.D..K.R...........f.}m..k+t..7 0...h...K........&...N......<..=.......(.u...n..n\|.NlBH...Qg[eQ$L.i.FB.$....M..n.8........F#z..L&......$I.$I.$9ix....$/...K...}$.K.... ...$b.6.`.R.=w..M.......u.UhyG..V.V....R(.....fy.1..0....._.&.e....s.\|.....N..r...........}..n........<!"....o.@.vc.....X\|k....;.....`......y...e.mY5..........x.%.....DR$.Y ad...V..]..3[V$\.CG...K.w(..K..K^2...O~..U.FT./l..T...j%P m.x),/.Z.c.rQ.?.....a..v.RL.L........@..........)\`p`x..):...\..I}.]..r*..n...{5.

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4327)
Category:	downloaded
Size (bytes):	41503
Entropy (8bit):	5.415774278925538
Encrypted:	false
SSDEEP:	768:kWkq71QO9AwXpiW2xSMwORFUY4UYiZkPi0xbjUXxcYDo+CQTR/NjjvxMDi:Bk4aO9AwXp32xLTzt4tiZD0xb4hc6TRX
MD5:	41245FBE6F313A4C3B45B1998DA21C5E
SHA1:	E9D42014308F0A7CBFA0E28A24C30FC2C7809E7E
SHA-256:	BFA576E69559FD610B6B9210C8AC907DDE9DCC437EFBEA5FBE1BFE6809244399
SHA-512:	58B14E5F03C4996917D6009815684E204401CB94F7534C36F7A2033AA7B782833F708DC070EB8127D558786C48F460F5ABE2B607E90B0F8EDD83A67B9313AEE1
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/tracking/secure-auth/utag.js
Preview:	//tealium universal tag - utag.loader ut4.0.202312141949, Copyright 2023 Tealium.com Inc. All Rights Reserved..var utag_condload=false;window.__tealium_twc_switch=false;try{try{try.{if(utag_data&&utag_data.hasOwnProperty('tealium_js_path')){var new_path=utag_data.tealium_js_path.replace(/\/[^\/]+$/,'/');var utag_cfg_ovrd={path:new_path};}.utag_pad=function(a,b,c,d){a=""+((a-0).toString(16));d='';if(b>a.length){for(c=0;c<(b-a.length);c++){d+='0'}}.return""+d+a};utag_visitor_id=function(t,a,b){a=utag_pad(t,12);b=""+Math.random();a+=utag_pad(b.substring(2,b.length),16);try{a+=utag_pad((navigator.plugins.length?navigator.plugins.length:0),2)}catch(e){};a+=utag_pad(navigator.userAgent.length,3);a+=utag_pad(top.document.URL.length,4);a+=utag_pad(navigator.appVersion.length,3);a+=utag_pad(screen.width+screen.height+parseInt((screen.colorDepth)?screen.colorDepth:screen.pixelDepth),5);return a};var userAgentArr=['GomezAgent'];utag_data.isItDynatrace='false';userAgentArr.forEach(function(userAge

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	759
Entropy (8bit):	5.971711236339539
Encrypted:	false
SSDEEP:	12:rGDc//Lca//5UKDlTgmRM2/xW7/l4zZTFo936yZtEfeeEv1en:rGDc/jca6IMmP/xVTFAlDEfg8n
MD5:	58F2D131AC1F74384AB690056ADEBDBC
SHA1:	D83DB302F80CBF57CE9D3ABDC57E9FD6C719831D
SHA-256:	2D2C7052FE7B3BF0CD9A2C403A0FC80AC5F5ECD4C78A5BF750A5FE96CED5D52C
SHA-512:	F335D9B3BEF24E93246E44CD9CA8B89D2EBF1ED8C132331373C668FE23D2FB33F0291BDDDB4F6CB5F19BCB6D0A94E16F8F3063E117BB85D5C689A6480D0F6123
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/rwd/icons/marketing_belt_icons/why_WF-local_ATMs-64x64.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@...........................m.............8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe.......@...@....pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe.......@...@....pixi............ipma..........................iref........auxl.........Cmdat.........@2..FP.<P.w.M.=_.l././T..Bj..L<..pI.8....7...8Oe.1........q.,U.2A..}0.....P.<x.s...\|.1$..a..{..Ry...E.k.uu.#.\.A.[..'.E...Kr8....Ix.uB.2...4s.GE....-..G..................2{FP..<.@.G.kL...{.X.t](.9.X<.....]z]... .Dnl.;<...Y..nGUl.4.Z.Ju.4...C..W..{-..=.\.....{*h.N10e....i.v/.@^.z..I..>..P.

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 686 x 1000, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	16614
Entropy (8bit):	7.910004164070899
Encrypted:	false
SSDEEP:	384:MOXwh2Le0jDg544QlWSH0USeZbIXktJL+RJ6+67H:MqwsDg5ulXUUN66d+R8nH
MD5:	E7673C2B9A3C5DD21B8FC528551950C1
SHA1:	CCA7EC59449AFE4335DBF968C11AE34942ABA28F
SHA-256:	94FF650BBCDBC77DB561E7ACA8ED87F70C13A9E9E98272B2328D0F5A6E0ED92B
SHA-512:	49A5D3E920E5A3082B6ED66DBE9649F42BCED4233D7DDAF7B9A290C24DD9E9F4B8EBEAC7C10A66DE6A20DF1504BDBAB56351AA65457AF66A12B7E3D83C28BE34
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(W......PLTE.....................................................................................................................................................................................................................................................................................c......tRNS.````....m....orNT..w.....sRGB.......?`IDATx.....6....&.....KKj.VR..H.x.^;3.3...6.*mF...?.........~.#u..._.:.XUI.......?...^......X$'@..w..?....d..'.......T/..4..?5........}. ...k....g.d.\..f.....Z.jd..2.s.Ow{.:..c.....>...LZ......}..x].=&!P!...0T..;....ZC.ud..T.Z...u...z8..A@v..........}0....me?....SO2..k....^...lZY....+!..5.~...'..."f.......i..[.I}M.N......6+......<p.;.,m..6.>.C..C.h1...4....v,.m.....4W....y&k..b....S...X&.B...>....?(..>.6?.....X..L....V..$>:.NWG:.7.L..3.+l.[...{E....^5~.WJ\|.Z\m..=..1.p.A...l.....&.V......<.g.V....z..../........V.....~3.....8.\......\|..\....>.5..y.7.^...\|....g.?......}....W;.}..q

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1187 x 406, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	122520
Entropy (8bit):	7.983975967891246
Encrypted:	false
SSDEEP:	3072:U2l8QM0PSvfGkTnPN9QT9/NXPSGK/CQyAisQSgiZC42yF5Bq:n9MJXdPN9QDXtKyAHQOZHBq
MD5:	F789C5418360C76F7822A5DC5C09B41A
SHA1:	CED1C552C6D9EA6CD2627996C8CEFDAF6BB507D9
SHA-256:	16864DB3E3B28CC63C8AB1D0A111CDED0D9D0D63AA90D4E9AE788A0E967A174D
SHA-512:	F5F27977255688C98CA4F410591FD1637AEF8370E6BA865610BC7768764A6BF1C24EE964B3D710B6D597921A431C26B48EC145C8DDD36C73D47E692064E3871C
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/sprite/responsive-sprite-v11.png
Preview:	.PNG........IHDR..............u@.....pHYs.................sRGB.........gAMA......a....-IDATx....\|....?3....@..DmS.....L[.....M.os....k..Ji..-...8f...B0..Z'..-.n.e....q...%-x.-....6...E.4...33..h$.f$;.....3s.s>.9..`..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a.....Nq..n......"..R...58=X..;...`.......?.c-=......[q...Zpz+.......D._.=P....{.=.h.c.../..8...n...._.x....v<.w\....~..q..W.s\|.;...9.......;.v.......;.v.....E.C....3..~ig.x"Y.0[..}.....#[.8`...F..x......M.M.,.o..0...L..x....7.K5....n..'..(<.M..p.._....c..;s.......UU..W...'Fc....B(0.......X<...[l......WJ8>#....No#.WJ8..7..F>..p..V...n.%...@R...4.@.i[..H.J.._..v(..@.z2%~m.A{S..F...@.BITlK&.....k?.N7....:-)....U....4K.@S.........O@...f..u._F.U"(5@....?...2..........,5K...

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F&cb=1711631936548&event=DisplayMasthead&eventType=Presented&eventDescription=DisplayMasthead&clist=tcm%3A84-224274-16%7Etcm%3A91-223647-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 318 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10129
Entropy (8bit):	7.927220663111267
Encrypted:	false
SSDEEP:	192:8SrGi7H+2ZYEmgwchVTc+ku/1Um+kd9t5oonBKW+sSbiz9L9n:7iYewjMG/XymtXoonAWay
MD5:	CC0E9D9DE617FDC5054E27EB4D39E2D1
SHA1:	5EFBA7A698E3590319DC99C978FE806F58B53E1F
SHA-256:	56C0A55220054D31D511F444F93D50E0875990D8816DB9354474B51560DFA3B1
SHA-512:	7B06524FCF4A2360980293B15DC994F7421DA21C36ACD769E8D666B2E20497D43FDB19E754E97A45985F440EC5ED7F6A3F9F77E7A6FB1A0EF322289995B071D3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...>...`.............pHYs.................sRGB.........gAMA......a...'&IDATx..}.....nu..g.......d......[\.D...G...o....(((...c........od1WQ4.u0.A... ..(.....9s...u.......3.I....g...o._}..W..)(((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((..4fs.._2.{m.G.....xa7...7..\.3.#..iL.f...;.!.q.....c......6..#./....$7...;.<.r.....J....tb....?.~..5.0..k...%}<^m7^.n..i.m....<...}.....q..1........z.}o.+f..l..E/w^.q....1z...}..m..lR\|l;nv..4......fDf..`..kS.N...%.!....."..6lp.#.R7...AR..m.o.........u"i...9..i....u.I7f...].M?.........o.}....\|..0...c...}...v..........gt..<...1}{tr...[.{{o8F...l.%..QA.......k......v..}^.9...=6....g....;(..U.V.6..F..{.p.n....srz...q..r...4...7.x.qd.u...........,t..9M.F....Q...W......).....ToN.....ws%.g..Zn.ja...\..1{..~.z...[....AW..(..nH....6}....7.m..U.&?..v.......F6.M.f....#>.gg...".xo.......l...s...`6......]..(h.[.C...K.NQ..5......k]:.Mr.jt.}.Q..'

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1453
Entropy (8bit):	7.796117443316261
Encrypted:	false
SSDEEP:	24:gaHxp3H6L63CZHlTjPIgyjY6WU9YuVgDfg1wA560nWz7x4:garHMwgyjY6VYuMAk0M7x4
MD5:	9921173323F53B9E476D01269CE6BC2B
SHA1:	41E125B4A816F5C346159CE28C32659A3AB4D80F
SHA-256:	869E94FBE314E86261FF0DCFD5A52175D02298B8C6633140CDC0A544BB7721C5
SHA-512:	A478C7C8F362A7D2F64D6473F90533227E2144BFE6C7389D8615BAF00A15DBA28B529C49E16684CEC7ADE08C48E27D5D2ECF2A1E525B738E0269F97A47636AA1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....sRGB.........gAMA......a.....pHYs..........o.d...BIDATXG.W{PTU.W..{0.k.bR...F...i.F)3....^.(.<D\|@..P..AY...cE$.@.V.AF".....E..BA<...~}.....{.......=.{......7.CD...a##...(...V...._._ba.K.x..g\|X....g^..].?..` jh.3W)4..>....G.S...^.@...M.Y.mll.I,.3.6."Z<wQC.a?..>..=RF..]&"z.>iN$.B2..k.(<.7r..].L.".N/...t.&a1k".:?(..s./~..~ys....!..a.Y....h.RH...}O.."..........K.$....C..b.9.d..`K....1.\|.l)JKKo..v.....^.f.VTP@..f.o.....K.:......ckk{....$.....KW...;.1CT..;DC..?....?..:......I]..a'Sss....6.Rp."!.{...=N....Y..w.....HjNJ7>.wA...7../6faR/,d.....u.S%..w.Z'..8.................z....r.8.....U.t&.;^Tc6.B...v0O...X...f,.......!..G...{....s.Z;&...4oZ.w.......7...'.c9::Z.!.0%.y;A....v..1r.Op...n.......=>..}j.X2....:^NO.....2..w.$5'..eZ.@...1..?.........t........c..b.L.{..2...h"v.l.../.m..R...%...`.!..@.....f..) ..f./mO....:N.....%...^-W.4...t.(8w.V.D.../.,..;..B..qqX...... ..I..r....;l\|.i.........2.m..8(.zzz.P.........)bNp.

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 15, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	181
Entropy (8bit):	6.091445064563821
Encrypted:	false
SSDEEP:	3:yionv//thPlHwtz/gksKXtMlsLtsddhNjvWNpHswcUQBgcU43gfPWkwbUD1SxAjp:6v/lhPKtz/gksKXtksR8jOIp39kwbMSo
MD5:	63ACAD90E575BBCF1A6D9244F65E6592
SHA1:	EFBC178CB56C48C0BB9818F279D09F94DFF69B02
SHA-256:	20161BB90CD19A4AD63862E5BA28DAA4E5067C92FBBFA22733D14432531145BC
SHA-512:	2D764D0EF86D924E90F1BD4B8D04EA0BF28EC3F79D402FA22652EE66E3FD68C67C67CB70C3AC5BDD9330B76449EC7374A3DE305F2AAC8D0F828811086534E7D5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............w.......orNT..w.....sRGB........bIDAT..c`@.......(B......\vt....0..n.."...!...:.*X..d..7`....H.).0..R.S....Gx.!\|.....G..00.../X.N.......IEND.B`.

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1280)
Category:	downloaded
Size (bytes):	4925
Entropy (8bit):	5.356740569264796
Encrypted:	false
SSDEEP:	96:wbcnP4ReIZB/mwGteyIqKlu1bytgd4N5IXlOJpsJJUQh52b:wbcnP4gIZ5Gt/I+1etqwW2b
MD5:	373195F42E45544150714CF15C2E1B6B
SHA1:	628200927B2B0F9125CF9E2F59E134EA0C00B55C
SHA-256:	A846ACA7C9641D8D211B69B9F63C5C394EBA8A53B27A75F5BDEA3DC09A3284DB
SHA-512:	B31D0B5F9742F0A77A806F374F0EB6145C8BDD5AC5C230670A5EA978DA47329FBCC3EE8814E28538AA99752E7022DD534718B4FA5771243AD3EC5F59A6AB3DEC
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/main/utag.249.js?utv=ut4.51.202103111723
Preview:	//tealium universal tag - utag.249 ut4.0.202103240000, Copyright 2021 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.loader===undefined){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(this.readyState=='complete'\|\|this.readyState=='loaded'){this.onreadystatechang

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F&cb=1711631936555&event=DisplayMarquee&eventType=Presented&eventDescription=DisplayMarquee&clist=tcm%3A402-311164-16%7Etcm%3A91-223657-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	206
Entropy (8bit):	5.563352062149379
Encrypted:	false
SSDEEP:	3:CsD0/6HZoPiTPXgreVlt2lllplnJl/RLmtwRGJPs6nxFsB0/AR1u1En:NdHZoP6PFPMJRiSMJU680/M16E
MD5:	3B70F000E6D59FD2E88632B720C65F13
SHA1:	2C68365E11BAA49D7E17951D6B07DBE77BB853C2
SHA-256:	86891EDC929C26F6626B3A841E761A59ADFECB4826C8037017DD76127B70DC0C
SHA-512:	9F2E1F617F42FD3796FB317545840F65174DEA269F38BD60A908F0FEC032AC644A8205BBB3250EB82FC395E06FFCF4BEF9A37ED875362E7109586FA0C2FA059A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............?2.O>.~c..o..{.........)..G..c..v.......................................................!.......,..........K ..q8c.J..H..&...i.&t...!`R.JB...J...l.....(b=....(.-..e..pv..hyN[....;

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 2400x1600, components 3
Category:	dropped
Size (bytes):	625433
Entropy (8bit):	7.977894313869884
Encrypted:	false
SSDEEP:	12288:zG54feLIvIn0l5o3ZEczyUA1LOhJLzEg8w0Czs6jACo50HO6f+nweTVN:zGymEgpvJ9LQghXo6j3mWOeef
MD5:	A7BEEC55ACF059F8F2E69B35FD93A671
SHA1:	E3C3D2CC20962E77BE670F7F7E9F08D855F9FEBA
SHA-256:	B8325D272C72A041414D9FB349E9D4BCA5E7FC8AD66F47A719E491960AFA5683
SHA-512:	61438965AFBDE68B9EE7655887E1B55D190B1826585DD678EFA4D460B7B85442522F7CD5481ADABF4B66A2FD5F4B7DF7CB398BB0A7E2CBE0AFE6FBE20A116B6E
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......7......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1B20403A172068118C148E5FB0FF97FD" xmpMM:DocumentID="xmp.did:CA169CC5080911EB969BC937CBB9FE7F" xmpMM:InstanceID="xmp.iid:CA169CC4080911EB969BC937CBB9FE7F" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3f40b60e-410a-4887-8fff-57393b0828ee" stRef:documentID="adobe:docid:photoshop:a924066a-05e1-a14c-998d-3602b587ac56"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM..........Z...%G......

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 26708, version 1.13107
Category:	downloaded
Size (bytes):	26708
Entropy (8bit):	7.9931593287496545
Encrypted:	true
SSDEEP:	768:NqcUCwKb4mdzrl3vUSwXTRoji0iG6dlLsCPlT:NqrCwkTlLwV0izRPZ
MD5:	885D42AB7FFCFFC42ED29816C3CE9727
SHA1:	3D84CB41DDFB5BF8627E2B9DC867237BEA47BAAD
SHA-256:	AEB7B3BFC4281D35B02DFDE05AC7A6C0D3DAA7F3123B35A9CBD4B5A8E3F3C310
SHA-512:	1B64EA9A7598A69DC5837F70AF7EB702171FB55DFC58AA071A5EFE70522676DA4CBC1D3AF054AB3B8F325143479D484388917E015E9AB61B5B7322077461FB11
Malicious:	false
Reputation:	low
URL:	https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargoserif-rg.woff2
Preview:	wOF2......hT..........g...33......................V...~..H.`..6..r..W.....(..%.6.$.....J.. ..b. ..G...7P.v...m..q.....l.....xss......'1o6....IchR0) 2.."A.(....$.d2).5....T".T....c!.......]..W.'.P<.c..+>U..$wE3>.9..c.....ar..u..G...w.Y....[.o&2j.`.......:................0s.?...$......b.XIf+..,z...z"E.x...e.d.....V...4......b.c ..9B....._[..{o"..d....b.......\J.e1...Y`m.~.*-...Y.@.jje.........X.U...(...1..H.R.m..zy#...7.B.h.}....n...NO.E......e.....1....%H...W.......).X.......t....[.$..U....Vh7J.......[...%.}....[.f. .2B)`H.. ..b.z..z...S.>...,.,.$.m9M..<..x!......i...N...p..._......_./.......e`Y... [.../......w.L...2..qXf.w...8......4.S.;kNv./..NE..U.....T..H.....c..W..>...!......x_U.hn\....K.Vu..X.....w.........{.Xywf."D..bD..O..@..u....."5."+..".$e....G.i.jmCT.vq>..H.E5jUW.....V...l. F[.(i..g....z...l/.........F.@..6........P3.9.M.. ...J:...&...h.hd....>....5......>..J.K6.x..i%..sr.....Fdglj.wZ..V..G..^..!.W...&^..!B..%g8.....B....t.lJ7

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1872)
Category:	downloaded
Size (bytes):	2332
Entropy (8bit):	5.521957340527071
Encrypted:	false
SSDEEP:	48:oaEv/KKdLmOiSAkV2NJxHXQY2JxHXMrP8qJxHXxrfymllQ020dqe:Tk/KKdLZizo2tHXQYcHXmP8YHXxffQ0J
MD5:	CCC7D587D4482E755243CB685CA43DE7
SHA1:	1F575D3E54FFBC389D930FFD3FA300D658644439
SHA-256:	576F35CD1964268E8B5C7008F48AD637EC777025A7DAEB3D9B96CAA2408F8D95
SHA-512:	F60A3178AB7F4110000EE4EF3D2A48557766A62E9F1C14DCBFAFF318249C48090ECF9EA998D53F53941CADFA367D9551BF9401BB30B3E4A7AF5F8FDE2E9FADFE
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/public-site/utag.473.js?utv=ut4.51.202310021848
Preview:	//tealium universal tag - utag.473 ut4.0.202310021849, Copyright 2023 Tealium.com Inc. All Rights Reserved..try{(function(id,loader,u){try{u=utag.o[loader].sender[id]={}}catch(e){u=utag.sender[id]};u.ev={'view':1};u.t='@@',u.i=[],u.p=["//www.facebook.com/tr?id=@@fb_id@@&ev=@@fb_ev_value@@&cd[currency]=USD&cd[value]=0.00&cd[Product]=@@product_code@@&cd[Subproduct]=@@subproduct_code@@&cd[PageID]=@@page_id@@&cd[CustomerType]=@@customer_type@@&cd[CustomerStatus]=@@customer_status@@&dpo=LDU&dpoco=0&dpost=0","","","","","","",""];u.cachebust="enabled";u.cachevar=""\|\|"_rnd";u.map={};u.extend=[function(a,b){try{if(b['canonical_page_url'].toString().toLowerCase()=='/savings-cds/'.toLowerCase()\|\|b['canonical_page_url'].toString().toLowerCase()=='/checking/'.toLowerCase()){b['fb_ev_value']='PageView';b['fb_id']='1578146899100389'}}catch(e){utag.DB(e);}},function(a,b){try{if((b['app_id'].toString().toLowerCase()=='WWW'.toLowerCase()&&b['canonical_page_url'].toString().toLowerCase()=='/mortgage/buy

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	15941
Entropy (8bit):	7.979468158522898
Encrypted:	false
SSDEEP:	384:rRCg0xSlKxJfnaSW0SHymWapUOVBdoQ2m6Jnds2aV/tRDMS:Q0gjzS9myD6Jnv+/F
MD5:	093DC61FD7B0036526BF39AE69597887
SHA1:	A27C677F83B0554434422C99B5519ACE95DDB23A
SHA-256:	F5A1BEE943C64E915CC0223D3CC7E402B70794950377EB8EF040C835FAD7E156
SHA-512:	DC227478E5F13EE3B344D692E1EEB568D377BF45E5160184403B396883ED3645F0C9F701BF4BE984EC9C71D9A86802F43A0D618566ED063533CF8A0539F10903
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/contextual/responsive/smlpromo/wfi000_ph_g_557715963_616x353.jpg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@..................=7...#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe.......h...a....pixi............ipma.................=?mdat.....f&{......2.z.... .@..\ Y.....zl.r"....h...MRiD.6.S3(...2sX.W...X.Nzd.Y.-.F^.....}....c.....=.8..4.....1....0..w...t....=`.....T...w.Z.....i.g.&w.......g..Z.v..Ofb)@{.l...M..R.i..f.7...rd....~..yi&.[.p4b;.....E...._.&.J...........b.lB..@&]...<%.......0....0....?..F..=..H.z.{....c..&hA3...z......v....E....".m........"..B.....ijb.BX.yT....c6......D..!.~..7l..rf?.?.D.1....4.C..B....C..(9....3.G \.x........./. h..,.\...*..K....rR...\|....4.X...jAO}.c-.?MI.7L.$=.ZONZ.....)....s...a....k.mu.......S..8.&..$...I...Q........-QK....JSS..8x8..i.l.......c...%...z.9n=%.+..%d.'....$...+.......]...5...{.g.....X..l.:.$..5....>fM......&.o.^2P......t...O...u........H....e..{.3.ki..pl...6..z......Y

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.384183719779188
Encrypted:	false
SSDEEP:	3:tU3VeC0erPc2iz:tUle3ejc2A
MD5:	5B8787F8A442DC24BDA6A32087052622
SHA1:	F39DDFA56ACA6E1364D4485ACBAEAD80C58B1CC4
SHA-256:	68F78054A9B48F337D6787DDD1DFAAA56F689D0B8BB5767D2B0AB08C90D79838
SHA-512:	4471B64D470DCA11D3DA422C0729879C33A3614DAC8E42414CF240D944614F4AC17178E51D94B4248C2735E98284AEF8CD98D80C0CFE862EA89485727F4C8B32
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwlavCuBKJsUHRIFDX8fnQUSBQ09mRRr?alt=proto
Preview:	ChwKDQ1/H50FGgQIVhgCIAEKCw09mRRrGgQISxgC

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1022)
Category:	downloaded
Size (bytes):	5625
Entropy (8bit):	5.338288323698047
Encrypted:	false
SSDEEP:	96:01O4ZYfqB/0GLFisiooyYrQbMYrQV3Yr2hnjCWDDSKkruWDQJU7U8CN98zHUcxfQ:01O4CfqZiohYrQbMYrQV3Yr2hjCWC3Ih
MD5:	AFB83CB0C351CF06179A4E19D73AB7BE
SHA1:	77E67C47F724A1A96839FC4EF843B5366100A62B
SHA-256:	3636799D3181248D5DB968A7851B9AA972EA77F64B3CBA9CE6B0A8933106C0C2
SHA-512:	563CC90E051E133EB73A4F4D6F9F2715590322E4224D20C54A1318828AEB59ED3112C139EBFD7C2396C947070643F0E2FF953EA6633E34DE1C9BB9F5405B8C89
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/tracking/secure-auth/utag.3.js?utv=ut4.51.202112091836
Preview:	//tealium universal tag - utag.3 ut4.0.202012011749, Copyright 2020 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=function(o){var a,b,c,l;a=document;if(o.type==="iframe"){b=a.createElement("iframe");b.setAttribute("height","1");b.setAttribute("width","1");b.setAttribute("style","display:none");b.setAttribute("src",o.src);}else if(o.type==="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.src=o.src;}if(o.id){b.id=o.id;}if(typeof o.cb==="function"){b.hFlag=0;b.onreadystatechange=function(){if((this.readyState==='complete'\|\|this.readyState==='loaded')&&!b.hFlag){b.hFlag=1;o.cb();}};b.onload=function(){if(!b.hFlag){b.hFlag=1;o.cb();}};}l=o.loc\|\|"head";c=a.getElementsByTagName(l)[0];if(c){utag.DB("Attach to "+l+": "+o.src);if(l==="script"){c.parentNo

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8132)
Category:	downloaded
Size (bytes):	147356
Entropy (8bit):	5.357710527887075
Encrypted:	false
SSDEEP:	3072:FIUEqnAgQCZ97uBlEselpiNMZSg0anS7jKG:1naCL7m+YiIgVS7jF
MD5:	B45C7895AD823063FE769A4ECF588423
SHA1:	F5EF8C4A69014A8E068AACD65E36D45C03ED8738
SHA-256:	A13A1DBADD7391D5984F21B9FD4833DCCA40E47D1B8AF5B57E8259596164F390
SHA-512:	97A8460F247E994EC307EFF1B3F06465AF9F749D58531B54CFFC89ED73EBF341EDF48401621435AB67480C981E523C2CBAD7A1E567A4FAE99B9012B5CB0707C0
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/locator/public/js/public_common.js
Preview:	var assetsBasePath=(typeof akamaiImageHostUrl!=="undefined")?akamaiImageHostUrl:"https://www17.wellsfargomedia.com";if(self!=top){if(document.images){top.location.replace(window.location.href);}else{top.location.href=window.location.href;}}var domReady=function(handler){if(typeof $==="function"){$(function(){handler();});}else{alert("Jquery not loaded..");}};function addEvent(obj,evType,fn){if(obj.addEventListener){obj.addEventListener(evType,fn,false);return true;}else{if(obj.attachEvent){var r=obj.attachEvent("on"+evType,fn);return r;}else{return false;}}}function removeEvent(obj,evType,fn,useCapture){if(obj.removeEventListener){obj.removeEventListener(evType,fn,useCapture);return true;}else{if(obj.detachEvent){var r=obj.detachEvent("on"+evType,fn);return r;}else{alert("Handler could not be removed");}}}function findPos(obj){var curleft=curtop=0;if(obj.offsetParent){do{curleft+=obj.offsetLeft;curtop+=obj.offsetTop;}while(obj=obj.offsetParent);}return[curleft,curtop];}function getScro

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	526
Entropy (8bit):	7.399792866445076
Encrypted:	false
SSDEEP:	12:G27Ds9Xda12lplm21FVSuXmDMGVFuaYlOThwl6zXMj1DNeC:R7DsEW1FVSuXmbXRC
MD5:	CA743053BCE3493B932876555F9BACC5
SHA1:	89FB52F6517D4F2FA07FE71C33EEB2AA1676BCB7
SHA-256:	9DC0E3746D9AF9D06D8D135150885A3154037B7C4AFB65A8118CF4DF083A1C29
SHA-512:	DCA27701FD51EC891D44EC1F89071069938898A275615CB1DA21903BE7F039432D389AB3BBD289907573C131E1F86C04D8EB5EB032B31A2112DCE3BBAF016C76
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/contextual/responsive/smlprimary/creditcard_color_gradient_64x64x.png
Preview:	RIFF....WEBPVP8X........?..?..ALPH'.....s..g'vJ.....m;.l.m..g...].(..UDL...'5....}.#.^B.7p........7.....xkD..Tj.O..8!..h$.N.{ .h.E..c........l-Rq...o..^.].[;.F9.Q..b.+..)Jd.S..,'..W-..\..D._/..N.....Q.Yb./..)Bd.S.L.R..;...02..%#.?"{..!z.H....h.OR9.&}.n.c.S<...I..,F.~.....xS.P....3..f..}%..B/m8....U...9#.k..11...\|.....VP8 ....p....@.@.>.`.L?.#.0......f....^...m;.p....T%./..4U....>?..Q"..0X.4.l.V...U?..\S..]So..z.iI.......B.L..G....d.$1...k\|.M%q ..Mz8...ln.Q.......y.........X..M..Rq./...jU.; ..}5...

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1187 x 406, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	122520
Entropy (8bit):	7.983975967891246
Encrypted:	false
SSDEEP:	3072:U2l8QM0PSvfGkTnPN9QT9/NXPSGK/CQyAisQSgiZC42yF5Bq:n9MJXdPN9QDXtKyAHQOZHBq
MD5:	F789C5418360C76F7822A5DC5C09B41A
SHA1:	CED1C552C6D9EA6CD2627996C8CEFDAF6BB507D9
SHA-256:	16864DB3E3B28CC63C8AB1D0A111CDED0D9D0D63AA90D4E9AE788A0E967A174D
SHA-512:	F5F27977255688C98CA4F410591FD1637AEF8370E6BA865610BC7768764A6BF1C24EE964B3D710B6D597921A431C26B48EC145C8DDD36C73D47E692064E3871C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............u@.....pHYs.................sRGB.........gAMA......a....-IDATx....\|....?3....@..DmS.....L[.....M.os....k..Ji..-...8f...B0..Z'..-.n.e....q...%-x.-....6...E.4...33..h$.f$;.....3s.s>.9..`..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a.....Nq..n......"..R...58=X..;...`.......?.c-=......[q...Zpz+.......D._.=P....{.=.h.c.../..8...n...._.x....v<.w\....~..q..W.s\|.;...9.......;.v.......;.v.....E.C....3..~ig.x"Y.0[..}.....#[.8`...F..x......M.M.,.o..0...L..x....7.K5....n..'..(<.M..p.._....c..;s.......UU..W...'Fc....B(0.......X<...[l......WJ8>#....No#.WJ8..7..F>..p..V...n.%...@R...4.@.i[..H.J.._..v(..@.z2%~m.A{S..F...@.BITlK&.....k?.N7....:-)....U....4K.@S.........O@...f..u._F.U"(5@....?...2..........,5K...

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5905)
Category:	downloaded
Size (bytes):	144464
Entropy (8bit):	5.248760977453949
Encrypted:	false
SSDEEP:	3072:iPT1fGl6A8UTiDjYR0Kqb5/vDKepZOFAz392uP8afup98co3ynJcsoLm7f0Eonj:iPT1fGl6A8NDoaQAz392uP8afuvcCnJQ
MD5:	AC0FA9F8534C97A3D1445984FD1CE708
SHA1:	AB57735F00913E9BDD8BED70C2D972D6DFA0A250
SHA-256:	7F51F47F83BCCEF04249F4DF8CFFD26CB21FA1D5A702740F0EC18C12D32C86DF
SHA-512:	F0C70F4E7573DE10C9F0D6C6924DDEEFA637EFF3C8F4F858142D8E544B5A595DB312E802FC2387F6C6C5B61ED0B37884789D9A7F4A55AB4777FD06AB2C20A46B
Malicious:	false
Reputation:	low
URL:	https://media-wf1.digital.nuance.com/media/launch/site_10006005_default_jssdk.js?codeVersion=1710907168986
Preview:	/* Timestamp: Tue Mar 19 20:59:32 PDT 2024 , Code Version: 1710907168986 */.var RENDERINGCONTEXT={};var JSSDK_RENDERER=(function(){var jssdk_renderer={};var addToJssdkRenderer=function(func_name,func){jssdk_renderer[func_name]=func;}.var RenderAbstractCondition=function(conditionObj,rule,evt,extraArgs){if(typeof conditionObj==="boolean"){return conditionObj;}.if(conditionObj.type=="And"){return RenderAnd(conditionObj,rule,evt,extraArgs);}else if(conditionObj.type=="Or"){return RenderOr(conditionObj,rule,evt,extraArgs);}else if(conditionObj.type=="Not"){return RenderNot(conditionObj,rule,evt,extraArgs);}else if(conditionObj.type=="DateListTest"){return RenderDateListTest(conditionObj,rule,evt,extraArgs);}else if(conditionObj.type=="ListTest"){return RenderListTest(conditionObj,rule,evt,extraArgs);}else if(conditionObj.type=="NumberCompare"){return RenderNumberCompare(conditionObj,rule,evt,extraArgs);}else if(conditionObj.type=="NumberRangeCompare"){return RenderNumberRangeCompare(condit

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2088
Entropy (8bit):	7.835617837872755
Encrypted:	false
SSDEEP:	48:AotvKD+dKFRwAd8y6Hizhfxo0UMQppHuZY7C/oCXj/r5i+:NMzHp6+7UMQjHG7rFi+
MD5:	B4F7871F036398988EFB0A550CB67D27
SHA1:	D39CF385293D268C6D83E446398004DD7ADE3D34
SHA-256:	4EF26E2996754AA57A19BB8BA0F2BC8CB1875979E78EBF59254F52AD095260C6
SHA-512:	2E9E02DA00D228B806BF9B91C91825CD793CB669A985E62F0D8D0EA23EF2E66240DBE2D610A3C7205B0BB1CABDA1DAB2FD13BE58B43DCA765F917B2E9DB46987
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....orNT..w.....IDATx..[}.\U...s..lwF(+..%bL...-b.m..mIk.4.......1...&.4.)....."(.F..eK).].PR..T..P...]v...w..{.....7]...s.y.....\|.s.......@...........TEU.........M.^.N..8. ..+._H`....n..S.h!=...-....@1..Dq..P..'..E..7:..bi.....C` ..%(.:.....U..@. 0.6.4...t..*C...(..E.q.`.. 77u.z`]WmV@...\|.^......"....R...@".....mD............_..u...C.....%.<.........\|r.-^..L.jT.Sp^....Mw}-..E5M38.d.UN.Z....2..6E"I).P..`.V......#.S.\...?.a...Q.,.....o.6....2.W.\...@q..~.Co..)....K..{}.U2.U.U.....S7.....o..<...+~420.k.CD.?.~.K..]..}.:-I.ga....w...%........q.b...l-..{P..@0...KQ:..m..w.....$.x.4zGH":.P;.@.{...s..........m.w^.}..X...gPi..P3...-{..a..9x.......D.J0AvW%........I...JP...@.B...,..}.k....a.....(.....#7....,~..O..@.../5.s...9 :V9. ..?.dZN..4..-b.p...........W.myf.......b.t._ J...........H:Jp...t.x.9...d.R.....pp..'.~i.3+o?;.P.(......9..S.v=...'..}..7.4w...T....>...P.}r.o.."...~.e`._t..~...Y..PAC.....o..o.Sc,.....

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8159)
Category:	downloaded
Size (bytes):	10210
Entropy (8bit):	5.069331812018328
Encrypted:	false
SSDEEP:	192:Y6BeQ3SJ/NvkK8RjptpvNM73zJgLCeQ5OFLlUgP:9BeQ3SJ/VkK8RjptpvNM73zJgdQalUgP
MD5:	D098AF530C24B4B46BBC2C07A26F1BDF
SHA1:	A588F14E183DA25BC01437FB11E577FA87F75C4E
SHA-256:	C1556E2469FCB3FBA63122D961F771923C6349E59914ABCA440CBCB3835A1AC1
SHA-512:	446566F76DA62B7B037CE322F4C0038902F59F2F452B9BC188B81EF4D75B4EE8CD62C4866134AE32AAC8807B25B6644A9C6F7B158B097226D0B49DA84649B657
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/locator/public/css/locatorPrint.css
Preview:	ul{list-style-type:none;margin:0;padding:0}ul,ol{font-size:100%}li{margin:0}h2{color:#666;font-weight:bold;font-size:16px}h2.subdued{font-size:14px;background-color:#fff;padding:0}legend{display:none}div.c60content,div.c60contentSelected{background-color:#fff}address{font-style:normal}.primaryBtn{_width:1px;overflow:visible}#directionsPage #searchLinks{display:none;margin-bottom:10px}#directionsPage #searchLinks a{padding:0 10px}div.tabInfoBox{width:370px;z-index:200;display:block;zoom:1;position:absolute}div.tabInfoBox li{display:block;margin:0}div.tabInfoBox .heading{font-weight:bold}div.tabInfoBox .contentDivs{float:left;width:94%}div.tabInfoBox div.getDirModule{margin:15px 0;position:relative}div.tabInfoBox input.getDirField{width:98%}div.tabInfoBox div.buttonContainer{text-align:right;margin-top:6px}div.tabInfoBox div.getDirHeading{font-weight:bold;margin-bottom:3px}div.tabInfoBox label.getDirLabel{margin:4px 0 0 4px;color:#ccc;position:absolute}div.tabInfoBox div.section{margin-b

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://fcmatch.youtube.com/pixel?google_gm=AMnCDoppDmysQ0EwfuNyQisMDHjame1guHW2IIS6dxbAtlz8vxAtRDbqlIDtd545bq7TMCLXhLhdtkZoEea-6Rnwh-iv5AqzvhNWr7G3wxfANPyDUkwwgNk
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	592
Entropy (8bit):	7.008334896418272
Encrypted:	false
SSDEEP:	12:6v/7+UyPSto+ruEVRIaL3s2t3G1QLOK4AoS+fYYBhRsyPOx1eGc:b62cuwLtiQLZ4ArohRsyWxMr
MD5:	EFF8B904D79448163D14D0C403D84EBC
SHA1:	9DFC4BAE28FFE145A54A677A2BDBA09723893D3E
SHA-256:	ECDE9E6BE76247CA785BBF8C550683D5A53DBF4AD7D5514FB32BBCAE23FCED1C
SHA-512:	DC6085E03E99EA1BDFC87C4D8F858F6E4B333E23E09B9C888D853CA41C13FF61139EAAC9717C0F61DDCA634979DF4FC45589B54A4227861676A6C4BF13E542BF
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/rwd/icons/tab-table-icons/checking-3-teen-hat-OFF.png
Preview:	.PNG........IHDR...0...0.....`.......PLTE...p``h``e^\e]\g]\f^[e`]e]Zf]\h`\g][e^\p`Ph`Xf^\f`\g\Zf^]f^\hXXf^[f^\g^Zd\\eZZf^[e`Zc\\f^[f\Yf\\f_\g_\f^\d`\g^^h\\f][```e^\e]]g_[f_]f^\=^.....,tRNS.. o.._``.@... .P.. ...@0.0P.PP...@O@p..`..L..]....orNT..w.....sRGB........2IDATH..T.r. ......(.P.&m.......ftR1...yO77.....Z-..c..w.C...39dm.4d.b..Ix..Es...#d......O.@H.KG.. l...sm9.n ..>t[.................)\|.....(.P.......e.dL..C.C.1..S.C.).S..GI..m;..A..}.....tYGTe.../...)..5.6.....w....../.<..X....3E.e.\|.....Wo..r.27c.ki...K.."...g.P.5..{.R.x.....$..f.Y...\......xy.....IEND.B`.

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	593
Entropy (8bit):	7.059279390524087
Encrypted:	false
SSDEEP:	12:6v/7+OnoY74n07GZThfVNlGyASQve1g0JNKWYB2DtpsF9QYY:yoZCGZ3XlTe0JIWYB0pUQYY
MD5:	DEF37D254D673B4697656E0020E2B076
SHA1:	9ABB54AF2E5FCCA7F6DE0CFCF8F92791F8210A72
SHA-256:	CE15171C0AF80138AEEA2153695965183320A4015211AED567C769CE3FBEA40D
SHA-512:	00DB9D17F24C3D76BA00411B7A9926328B042AC900E415F51DB3E94E5B045664E72319DE138C1F24D53CB86DA8EE7778310C41A7B66845CEE307E66913D52AA9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....`.......PLTE...f_]g]\h``h\\f\[f^[e^\f^\h`X```g][p``f`\e^\f_[g\Ze`Zf]\f^]e]\f^\h`\e]]eZZp`Pd\\c\\f][e]Zf^[h]Zg^[e^\f^[f^\d`\g_[f^\f^[g^\g^^f^\...t...*tRNS... @... ...Po..0...@`0.@Pp`.`....@.._oO}.......orNT..w.....sRGB........;IDATH...v.@.E.N.P...\...m.....\.C...q..sB ..._+-.{.."`m@....E...H"(@)I..(%...$.}. b.."<I@.......]....h...VrF..RA.b..S2...)..Yh.......lr..\#...kQ..P.....^.8Ux......Ox.?.`..g..>i.$../.."8.G....74s.....X...'.~.d..w....W.8.......o>...aH_...]N.+>.{0......}~HyJ......!..\.'D...L....l0d.!..j..<..:......pi..cV.N...d....IEND.B`.

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	11187
Entropy (8bit):	4.996262015664328
Encrypted:	false
SSDEEP:	192:SNKzeHPiZ2qqFSNuORa1xmebjChcZ+wzZRgUb+/SJEDQFUnu558v5kmtP23unW//:7NEmeW/4AbQc+p
MD5:	8A5FBB72EDC2ACC89EC4B5AAC2B64E76
SHA1:	E14BF32C9DF16ED4474BAAC57CC6648114F2FED5
SHA-256:	75AE54756321A073C52DC6E7107992B44B21FB069FB021B8492B271DB420C708
SHA-512:	8E23493CBBF534F2EF8B7D53D006EA5E252672786DDBAD410DB13D1129BA23CF177629CB8F124D65DCB0479E5353AFA9A0211863695C94B589DB09CFEF03C6DD
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/assets/js/wfui/ndep/css/nuance-c2c-button.css
Preview:	#nuanMessagingFrame {.. position: fixed;..}...nuance-chat-button {.. cursor: pointer;.. display: flex;.. align-items: center;.. justify-content: center;.. color: white;.. position: fixed !important;.. transition: transform 250ms ease-out, opacity 250ms ease-out,box-shadow 250ms ease-out;.. border-radius: 50%;.. background-repeat: no-repeat;.. background-size: 100% 100%;.. background-attachment: fixed;.. z-index: -1;.. outline:none;.. padding: 0;.. }.. .. .nuance-chat-button:focus {.. box-shadow: 0 0 0 1px #5a469b !important;.. border-radius: 50px;.. border: 4px solid #FFFFFF !important;.. }...../...nuance-chat-button.ready, .nuance-chat-button.disabled {.. background: #183850; / Old browsers * /.. background: -moz-linear-gradient(top, #183850 0, #183850 25%, #192c46 50%, #22254c 75%, #22254c 100%); /* FF3.6-15 * /.. background: -webkit-linear-gradient(top, #183850 0,#183850 25%,#192c46 50%,#22254c 75%,#22254c 100%);

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	236
Entropy (8bit):	6.615904118901226
Encrypted:	false
SSDEEP:	6:UAi1Z4lNjX/WM9EedMMOYJ8TmJfpJ+B8IvKDSgf3SLZYwmLw5ELhQv1lSalGbKp:Ud1GL7W8ddGYJhpJ+B8yKWa3AZYwGw5n
MD5:	8CF6735DF721C60AFFADB70AD95732EB
SHA1:	AE8A42EBBD6B60630E2C612E924C4FD66A4ACA33
SHA-256:	8DC5436DCE4423F0E53E85904B6DC0552C1C8BBDE0DD4EC1C929A1C272201C4C
SHA-512:	CF1F8C4E7B66D67154ABDE401215736E063D3D466C3AF6CA020952AA64FC3447D0C27341829B208C3CD9F9109C78306607E0E27B1735A1B74CCFF584FB1FFDC1
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/css/template/homepage/homepage-magnifying-glass.png
Preview:	RIFF....WEBPVP8X..............ALPH......[m....:...6%...w../.}..P.;K$......Kf........o.S.]v"....~....@.)oP.5..y]y...,zQ..j....?..... ..+.U...i...M.(..z)..?4..........=RW.t=P......pc.)I.a... .BNry.r..VP8 ....0....*......P%...p...$@.

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1080 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	125725
Entropy (8bit):	7.992192321564617
Encrypted:	true
SSDEEP:	3072:g86xi2EtcdEva7qkHru6bP7cyJ8DsdoBz9c3:z642ecOi7qkLugvuoW4
MD5:	F0FF8E95CA0584DBAFF134261FD46C72
SHA1:	BF9BDA7B01BCD66709084D1EE665834CE4EC2697
SHA-256:	8FF4502DFCD8D4389032DF71898A0FEFAF402144BCBA5A528375D3546DFA3C98
SHA-512:	AACC3CF1B4C0363478BF43BFBB98CF4DAEEE81DDFD4FC35B2EE939F97400293F53FB7EE37AD60D7C4D234DEF37EDC50F1993240255C05EA203F0FB4907D24ACA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8.........H.......orNT..w.....sRGB.........IDATx...{..WU....kf&..=$!.......4.Q..4E." ....X..{.J..j_....w...X...F....!7r..3af23.\......{...g...$..&.s.....^..n{?r./..\D...BE P.B....T.W\|..T...\.YzFD..a.....D.0.....i...".9..x~..n,.T.m~v_..g.=.....i.i.v..G......g...L....[....J.1..{.~..G...D'z.8&...4\D.S..G#~.e..~g.`]..z......].q...,.."Z2o.h<..bs......c)..T.ox..+vn.T....7=......hL...)3i4..{^`(..o..&.v.n#7...s7.-.U.f.2..1.....$.S.u...I.].X....fPg..M.0.....y..s...E..X..f...T:....N..L...a....'m............o.....g.]......&.\|e\|>s~..$..8.Y&..\..(.i.=..>.... 3.I.b....x.x..ltb....$...............H.1o....5.aqJ.pf>.....T.d&.m.?.....we~+k.".j..;}6.5./.5!.P[.].9mL..8.m...'J.r...a..t.4X..?+..R5CL..l$(....S.....K.. Np.G..{.xT....Y..d.....>.S_.CPQ..fA.I.....6.L.P.....b.M..1.>..F.'.I.i.`6.;....3..H2.X4..@Hb..G.A...3.3...~.f....&C...9Js.0..*.......@..........M....f......6..0;.e....i....y....W:....HV..$...W.L.>'.......PU....a.RV.n...@5p..Mv\M

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1080 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	120137
Entropy (8bit):	7.99266800403243
Encrypted:	true
SSDEEP:	3072:4VC1NlhQZQYUIvIPFRt+5Dw7+6NwrIn4qH5I2:gCnQZhvIPFf+5a3bnd5I2
MD5:	D0AA1680F3D0BDC56EC022B528515CBC
SHA1:	18324690F2ED2D8898BC34ABA9429D176BC1553D
SHA-256:	EF0A684146D6FABC9C9AAFD7E23E22BE0407D0CF9B9796BDF8E2AF3385BE91CA
SHA-512:	E53828A4F5C6CAD0588B9CDFE7E46A28B05998CC7E94D2BC7014DE37B6192776E481EEC861AC84A68201F6FB079856A4E06E3E8955ED74BAE453BF7186A88CDD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8.........H.......orNT..w.....sRGB.........IDATx...y.eWu..~cW..R..E4...^B...<.\..p.Mk06...ILc.v^..&7..G..p..`.<c.k!...-$ZYBF...TU.F.....Xs..1.:.H.&a/(...k.1G7..f.d.`". ..""RJ.."...../..".e.o.N.\|..J.J.D.A).......t:U.n....n[LL%..7...C].W.c......d(a....h]....>.;..j..]...?.....TyJ.;<.Sy..RZ....%.....2....6..u.....FG..4&K...w..G...g.?.[3...?......._.u.?...i.P..g.....Q.s{jR@!;.P.....>.?.I...\x.....7.+..$..>..U..Z...8ceJ...b..x...J......\.NU..k..D.F\|[..Z..0._.3.S."....d".'..9...kb.....x]c}.'...0...\..X.c.a...R....T.pq.......V/.`.E.1. ^/F..}...1K4S...vR...TiCk.5.......x..2............3..j@.....,\G.X.Y....l.O..f..:@.@1E.+..(E R...g...........7.k....f....,...<...H.+....x...I..(E...4X]......#.O.T;,.../...c-o~l.U)...W.E$....m{B.Mp../6L..8...y9t.(.>b..V.<...].,...@....R.2m[.,...Ey....S;R........&....>.@.b.2.m.]."....u@2.c<..T..c...K.,/.......*.`:..=a.;...v..n...7.u..,.h..c......w.P.%V..6.>.......f..[....?...l...O..).$8M..P..

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	3238
Entropy (8bit):	7.83684275603001
Encrypted:	false
SSDEEP:	48:rGAc/j1ABJ7vZP7z/Og42lafUJVXkxUeZr1C3OnjdhIM7N8z2IJwArS:rGP1qRZPfzlafue51XjoIN8S0wh
MD5:	B2B20E9A8B7F1D26E02FC00E49D9F10B
SHA1:	02A811B7C986CEE47A85DC0ECAFA94F4990E477E
SHA-256:	6FF55039759FE1F906EF55E36BD33410145686F666FDEC66F52C3D7D61811E23
SHA-512:	83B01B8AED0268172833078A1B1447138921E3E6EC719D1BCFDCBE73412C7C6743CD46B63959C55CF1D97404DF9FF52366F51D6323AB5131353D36C2776168A1
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/contextual/responsive/tab-table-compare/compare-green-CAB-1400x170.png?impolicy=TTCDesktopXL
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@.......................#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe................pixi............ipma...................mdat.....%......4 2..L.........e.C<..KC`..b....S..`e\|...............u..E..'K'.~..,.....?.....J...4..tH..=x.c.N.......m.p..a...-.h.>.i/.....{...Cm.UGP..4FF.d-b.uV4...6.....c.T..>.q..\..,YO,VY...>g...Y.e.....]..O.]..v.(.,Qq....w..Zx.3.~....<.h".v..A....2....G.\|:'.........7A....J. .k..9R.&.V...V_...}........T.xSjn[.I..u...R.b#..r....l.d-.T....b....,...&[...0.w5A..B.......28..9...i,.E..+...............Y..(.q...`:.[...S(x.i..)j..S....7...1..).h%...h.....t..N..,..G.m...l/wD.7#.....8k_.S...1.%h....7..n.E...s'L.....w.J..b.....R.S...zcx7...........n..tR....A...7....Uy.....e$'....j..e.N.8%}JX.......TXT.x.W....;....U..K..s.J...e.........E2...S.wfo"5.N.....y..#{a..5.X.@.........\.\|..%I5^m..~...u.x".

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	downloaded
Size (bytes):	106326
Entropy (8bit):	5.52689299206484
Encrypted:	false
SSDEEP:	1536:HeaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYJUhZ:+aQaOYw58ISTT4esfbw3h9N+rKW
MD5:	AB34788BB0FF19E7DA8AE85A28C60EFE
SHA1:	05756134A382E3CE923D55C033C07E91BE60E7B4
SHA-256:	1EEDA03EDBC2BB72AB44077BD30E718F3A9B2A2DCB493B9CC05976A2A1D7F2EC
SHA-512:	01602FC7ECD215E43B0081B853A5C35618E10436BCE6527FDE255981AEDFB701CA37DEB38FEB5D7EBE426851EAF90AE6FD1442C83B0C47767D05E8DFA6DC5E5A
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/ga/gtag.js?id=UA-107148943-1
Preview:	// gtag.js - 20230830115644.var GTAG_TYPE=function(){var gtagType,currentScript=document.currentScript\|\|function(){try{throw new Error}catch(err){var url=(/at [^(\r\n]$(.):.+:.+$$/i.exec(err.stack)\|\|[])[1];if(url){var scripts=document.getElementsByTagName("script");for(var i in scripts)if(scripts[i].src==url)return scripts[i]}}return null}();return currentScript&&-1!==currentScript.src.indexOf("gtag.js")&&(gtagType=void 0===currentScript.src.split("?t=")[1]?"CORE":currentScript.src.split("?t=")[1].substring(0,2)),gtagType\|\|"CORE"}(),GTAG_CONFIG={CORE:{id:"",salt:"ChAI8N/yiAYQ/sLpxs3R3/lOEhkAiCq8P5n+5Jl2lPYrrAqF+9CynSAMn5lfGgIrEQ==",name:""},UA:{id:"undefined"!=typeof utag_data&&"RETDL"==utag_data.app_id?"UA-19597165-1":"UA-107148943-1",salt:"ChAI8LztiAYQr7+BrOKYjbQiEicAfMDsaWrMhkFBMPGo10w27kKCufDm4bQPQHPe48IJzu3RQ+BdEMUaAsgU",name:"c"},DC:{id:"DC-2549153",salt:"ChAI8N/yiAYQ/sLpxs3R3/lOEiMAiCq8P0qN5GDJNKlTfLLeTfVz4qOpT6tg/+q6HwGf3lZdJxoCdtg=",name:"c"},AW:{id:"AW-984436569",salt:"Ch

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x423, components 3
Category:	dropped
Size (bytes):	8379
Entropy (8bit):	7.255535557632721
Encrypted:	false
SSDEEP:	96:ScSiXq/7UOTbRvSDTp5eoMccHq4Wx9mVZTCI3gVHYpuyU4ErD4H/:ScSiXqDbRvSDT2q4iEr+ggyurDS/
MD5:	180A5D98EC38EA1692195676FF2B3BA7
SHA1:	404655DB717D7B09FA6CDC5C7FA85561618E484C
SHA-256:	CAF288F8F93A8BD4554013A9464722FFE3E873793A0160105995F8F7F681E4D2
SHA-512:	85FC5572345C00A73E178BE299F3C1BBE02745A1F2B67AF160EE67C40F33566D125DECF251E6E24E0197B5E5CE2C3153F19B8EA756F559AEBB19B193A56E6D94
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................&""&0-0>>T.......................................................&""&0-0>>T........8.."..........6...................................................................tLj...................................................LL.......................................................................................................LL.......................................................................................................LL.......................................................................................................LL..........................................G..y.G..y.G..y..G........LL...........................................J...WW.:....tTs..Q.EG:.].j......................................................K...N\|.s}...M...Q.@........LL...............................................U..`lO.{...c.........10.........................................)....g.j.i..lB...ss/..#7........_..-...5hi

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 227x125, components 3
Category:	dropped
Size (bytes):	8517
Entropy (8bit):	7.947276775769913
Encrypted:	false
SSDEEP:	192:ZvG+/OunxkgZ82a8KXppZkkgOCp5P3X/yRbhQu4mwP1L:ZvV2uxJZb/K50kZw5PfyRVQu4mY1
MD5:	72DFEA15D2925489746DB66C3C4F7185
SHA1:	3ECD2C481A12D95BE89A72387A34673A9327750B
SHA-256:	483592D006B4B24795BE2B828F764D4FAA1D37954FB605899B21E3F6CB330329
SHA-512:	CB4458F12BE44DD95F1044D190B1C814A816756AF699A80B9D1045EBAAED607FF8157FEF08F8A992C0872799E9D3733D5D3FC6A80339B3FAF33D2B7424470B43
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................+".."+2(2<66<LHLdd.............................................+".."+2(2<66<LHLdd.......}...."..........5.................................................................._5p.\..ai\|U.\&..B....r6....'.I......o]...6..a.s=4..#.m...7.On......\|.j..(.C(.+.}.......x..\|w..ug...DJ...6.......B.`.qA....E...(.B../f.R..68......!.I.Z..h..}M.........N.a...L.1..}K.=.L.w.'..fRkL....CKU.$..F.v.i.Ln..y.}...J...fV...2...\|.#..j..a'.t6.>..Bp........:2.*.K....e#...\|._.).....d...;..1..9D........,5.c.."V=#<.L9u^....:1..J.....x7.xx..L....i./....P...X.....X.08.B..R.!iH.....UK.6.R.4...5..p.v.3..."...u6gt1.f..O.P0.l.qP%..\|/..8.."6.*I4...b.\|U.`.2{T..KT.n/,.}...........d.k:...P......}.z.6Wor....S....w.........L./K.c..\....&.$.(^.r.\..M.+_G.o..3.Y.W,.NZ..^qu......>.....R..s.h...a...L.m..AsK.._..IaKr".q.?`^....J,`.....)P....m......&Q.Y.......'...............................!".#12.............`"..;....Mc..^..&g...

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 686x1000, components 3
Category:	dropped
Size (bytes):	3238
Entropy (8bit):	2.8372420844495134
Encrypted:	false
SSDEEP:	48:/llXGVt1t3PVt1t3n5ajqKGi+JqkwLDk9lS:/Ov/fv/XojvZ+QkwLDMlS
MD5:	7788126E37E51A41EA65394DD8F96F9B
SHA1:	115547E6E0DD5246F96D623AD78F49AFFC06F93E
SHA-256:	2EA269E3AB15FFFE884F7BD14B4D031B5AD61CAF406A7C68AF5761421D33F43A
SHA-512:	90DD331ECF2C92DA2C9B5C9317FE0E694AC2B7AA54367DDF1F8877EAF865018DE3A99129C224329627770BA685F9CEB5C51BC07592D8D3DFA9AAAF3B9455CF67
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..................................................)... ... ...).?.'...'.'...'.?.8.C.7.3.7.C.8.d.N.F.F.N.d.s.a.\.a.s...}.}.............5............................................)... ... ...).?.'...'.'...'.?.8.C.7.3.7.C.8.d.N.F.F.N.d.s.a.\.a.s...}.}.............5..........."..........+........................................................"P............... ...................................."..(."..(..................................

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (599)
Category:	downloaded
Size (bytes):	48109
Entropy (8bit):	5.371147928648613
Encrypted:	false
SSDEEP:	768:aTxv9ZxLf3xpz+8H77umOZ98/o20uoKCfrs9pWwyNn69UmvxbCQj2E+B:wxv9zxvnuRZ98/oooKgY469PgF
MD5:	AECCB854B0A76AA9F478E466C8011B29
SHA1:	625D31CBEB8978CF2419F58D14BBA92A42DBB45C
SHA-256:	7F0D10BC282C3D7B0EB4D7527303490F8D3B86A1C65E293C2D9F0793006441E6
SHA-512:	A0E4FEC306EDE63869B30BEFEE8C54DE38694D724AD86306587E59D641921119659852241A9316DA80C56C2A560EEAA73B537A3F8725C87ABD11B0BE551FFF31
Malicious:	false
Reputation:	low
URL:	https://connect.secure.wellsfargo.com/auth/static/scripts/adrum-ext.b4436be974de477658d4a93afb752165.js
Preview:	;/* Version b4436be974de477658d4a93afb752165 v:4.3.7.1, c:0d3eed23ace0d0cbfc4e91c26b1d12e18f6eded6, b:9384 n:9256-4.3.7.next-build /(function(){/... Copyright (c) 2013, AppDynamics, Inc. All rights reserved... Derivative of Google Episodes:.. Copyright 2010 Google Inc... Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License... See the source code here:. http://code.google.com/p/episodes/.*/.new function(){var g=window.ADRUM;if(g&&g.q&&!0!==window["adrum-disable"]){(function(a){(function(b){b.R=function(f){function e(a){

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 616x353, components 3
Category:	dropped
Size (bytes):	31860
Entropy (8bit):	7.9766987289667
Encrypted:	false
SSDEEP:	768:ZvsS+NKA5zbL5v11WP+QGdF6RAJx2HrZXLaP5sIZCzspu:ZvsvFtP5N1WP+QGdYA2HtAqX4pu
MD5:	53459EFA868AC95A1474DB33B26615D8
SHA1:	C5F4E30407A8987884A701B5F5DB30298B86456E
SHA-256:	9109DA38420B9F11F43C1ADD06C1663044654C43D952B460197B169773640336
SHA-512:	35F62AF608643CF516E931CAF3979D90EFA15D3A62FE6AB1ED9248FB48E9E5BD5705AA87FBA751C003CDEE99F7DA29F931067A270BAF0B7E713F37E225591D02
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................+".."+2(2<66<LHLdd.............................................+".."+2(2<66<LHLdd.......a.h.."..........6....................................................................xt....i.(.....i&...J.) ...... ..9.O.`%.b......w..\.....>..N.28J.x.wy....A\..-......+................C...B..U..0!.V..,D....k.fzt;y8...t......(1.n...c...........2....RQDj.fSe...#..X... .Bu.CDd..]..+!.V3....%a7.G>.mS.T...G.;.E..E.I&..m..v..............3X.z....])....O:...H}C5..FA.......x.u.q.P..+/@........fg.Ghw".....^...CUP3. .D.#.."+.Z.#..u...N.fe...Jij...X...^..f..}......x..H.%.................).$.....%..G..m...C$...l/:$).@..l.....k/.l.k&..Tv..:SR.....ZZ.......r...$S.....=..Q._..n0.{.B.V.hX.XM5YZ....f+:r\-.u...`..>..Q.WoP.%.....Z......:E...@)A@.f..*....K..O.R..x%7...a9.I.H+...PQm\|.:..F..4..U...Q...H$.......!_.]G._..u3.-..'.=....I=.]..N.ugE.`.7Z.......Mu)..?&2..T..D9...J.Wv../....K;l..,....!0.Y....1...F.`.VL^...8.

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	4.798269164201573
Encrypted:	false
SSDEEP:	12:XGaJ8EWogR3WGn2sQuabmWF3HyR+78C7ccdNQWu6edW9REZ:XGoH1sQVS+78tvZ
MD5:	11E6B612207ABF064158E69540C16E24
SHA1:	9E3912485514553B2E17B578C8340986F1172B4D
SHA-256:	8670DA3C95C03B59B091EAC882B67E0B59B765C455B8D871ABD2E55D4618573B
SHA-512:	2A1257C597A985AE9DA8A029A2BAB00E2CDA2106026578AC382C7319F4754D42C47E51F59A3F45F1228E4E036B00707A9B087D6DBF18821327F187E4E79EA24F
Malicious:	false
Reputation:	low
URL:	https://connect.secure.wellsfargo.com/favicon.ico
Preview:	............ .h.......(....... ..... .........................B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...B...C...C...C...C...C...C...C...F...F...C...C...C...C...C...C...C...)...aY..pi..WO..)...A8..)...)...)...8...2(..)...)...`X..)...)...)...KB..zt..rk..PH..LC..qj..)...)....z...%..)...WP..ZR..OG..)...ha..c[......c\..rl..)...WP.......z......?5..YQ......C;..wq..)...WO......VN...z..H?..6-..ME..8.......................oh..le..).......\|v...z..QI..* ..............ys..g`..mg..D;..jc..oh..PH..).......................ME..)...)...)...=4..NF......ld.......y..)....z.......\|..TM..xr..c\..)...)...VN..bZ..]V..3)..........RJ..).......jc..............MD..\T..g`..8/..)...)...)...)...)...)...)...........bZ..qj......KC...$..)...)...)...)...)...)...)...)...)...TL..7-..)...0&..mg..)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...)...).

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	831
Entropy (8bit):	6.25196099079147
Encrypted:	false
SSDEEP:	24:rGDc/jcakJMm33NVRJdNs8OOP3qIZaK4X:rGo/jKtVRv62zZri
MD5:	026F5E731899C436DBBEC268E870905A
SHA1:	160ED7B7FE9A30E81AAE6F1136DB6CE939113A7E
SHA-256:	2A242450947C5C9D9496CD2D4ACB67D50B269F5CE36070C3B98C4F88DB3307DB
SHA-512:	417E8436122C7480BBE66105B0C6251859E922BF9DFBABEC26E89F98CE122DCEF1B24364405701ED85A23EE32A77E412AD6DE3B4597778248F7F5E9A1A1EA0E3
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/homepage/position-2-bg-gradient.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@...........................D.............8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe................pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe................pixi............ipma..........................iref........auxl..........mdat.....fj..@2{.P.<P.rp-Zn.1..jS.. t....=...C. ..\|?).`.>t.)..'....v.........b.n.:......k..c..+.e,~...v....w.....F...)..Gfb.<....U.....fj......2..D....<P...L..m....K0`$@v.t..,....~......:XH.).......m.<:.>(g^.[A'..O..N[..lV2.7N...r.o..zC.....z.D...t..l./..@V..`.9[.!..8_.~...?.K....m%b..D....x].Q\|......k.y.I.W..a.......1..(.......{...t.2f(..8l...:.y ?...Jv.zP..(3....

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 2400x1600, components 3
Category:	downloaded
Size (bytes):	625433
Entropy (8bit):	7.977894313869884
Encrypted:	false
SSDEEP:	12288:zG54feLIvIn0l5o3ZEczyUA1LOhJLzEg8w0Czs6jACo50HO6f+nweTVN:zGymEgpvJ9LQghXo6j3mWOeef
MD5:	A7BEEC55ACF059F8F2E69B35FD93A671
SHA1:	E3C3D2CC20962E77BE670F7F7E9F08D855F9FEBA
SHA-256:	B8325D272C72A041414D9FB349E9D4BCA5E7FC8AD66F47A719E491960AFA5683
SHA-512:	61438965AFBDE68B9EE7655887E1B55D190B1826585DD678EFA4D460B7B85442522F7CD5481ADABF4B66A2FD5F4B7DF7CB398BB0A7E2CBE0AFE6FBE20A116B6E
Malicious:	false
Reputation:	low
URL:	https://www10.wellsfargomedia.com/auth/static/images/COB-BOB-IRT-enroll_balloons.jpg
Preview:	......Exif..II*.................Ducky.......7......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:1B20403A172068118C148E5FB0FF97FD" xmpMM:DocumentID="xmp.did:CA169CC5080911EB969BC937CBB9FE7F" xmpMM:InstanceID="xmp.iid:CA169CC4080911EB969BC937CBB9FE7F" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3f40b60e-410a-4887-8fff-57393b0828ee" stRef:documentID="adobe:docid:photoshop:a924066a-05e1-a14c-998d-3602b587ac56"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...HPhotoshop 3.0.8BIM..........Z...%G......

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F%23skip&cb=1711631946265&event=PageLoad&eventType=PageLoad&eventDescription=PageOnLoad&device_type=DESKTOP
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	5413
Entropy (8bit):	7.860516153960108
Encrypted:	false
SSDEEP:	96:rGgdr7l8q8aAd3JrGU9k76vKIks3PReplJShZuWJZLQkO+Ha5:rGYd8q8ZP9w/IPApyHPJR2+Ha5
MD5:	1A9EF0009BE10C1F00930317632A6494
SHA1:	1014371AE381CF7C96C1EEB092A08B41B1EBD3B5
SHA-256:	3CA412723632FD13798BAD01CF2DA4F5D2EE208C10BB21B9CA0E164F73E6311A
SHA-512:	14680A2EE92407C8ECD33039AC5CF083EF7AE2C87FF8081A6581437CE18B70A5A1019A3A01848E38E5CE62AC591216B811AA23DDB5D403848C5CD923CE9627F3
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/photography/lifestyle/227x125/corporate-responsibility_227x125.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@...................7.................2...8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe...........}....pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe...........}....pixi............ipma..........................iref........auxl.........qmdat........0.2+....@.o.tg......*......M_<}.s.^...6X....`........0@...2.&.....q@...)...-.h2.....QU!.Y.S......'...w..........G.K..' .uK.H...6x..\........\)..S..0~..5....2o.1..R.NB........mm..X.j..:...'..>.y."..W.._....iL<.c.....1-...........6...T..H{.)3..u.$.....fW.9..n..`n3m.Xh(..r...).+.x.U..O..v.1..(....6.C..XS.\...s..t!.K..N".....Q ..H...[Vkf.r..N....v.z. $..Q.T1.tD......\|...j_....@..T;\|.QP.T^Ec. 0.(.-...B@.q.1.....7...T.@...[...2..mp`'q.Ms.Q0.v.Z......^..'.A...R..$K..].)!.r.....B.......L..4......Hw.oHuUA!,Y..u.a9%^C0.....r.5.t

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	212428
Entropy (8bit):	5.846875382656166
Encrypted:	false
SSDEEP:	1536:vHs3hvKk6X7g4I1VE/P5QD3ihhv6YBFQxO1J2zm1vpcSKKsw0Wtmg3fd95RhMliS:/4KI4Iuh5hc+5sli/7kdIMv18weD4AaX
MD5:	170E371BA122E3FD64EBEFF6CC369040
SHA1:	FC605D9B2FB4DB43776DC7B315FD952D03D70AB6
SHA-256:	7B45E755DC9057B4666894684B8C9740FA35BFE815A74616D832663489710262
SHA-512:	6DE03AFAA4844C1D6958AB853ADD97BC02B68923A1F919BFE38C83804B323FC85FF024B6047278AAC5BB3EAE4360E1354A62AD89AD847837F178106DF181B02C
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/Gs-MsplhtTCbdHi0nQ/L17a0NtQtD/XiFNdAE/dxNBS/HoSPUQ
Preview:	(function jrwRRSCszG(){tA();D2A();j2A();function r2A(){return [-c2A];}var jFA=r2A();var QcA=U2A();R2A();H2A();var IcA=b2A();var VA=I2A();function I2A(){return [l2A,Q2A,z2A,w2A,-Y2A,O2A,-m2A,d2A];}var Er=function Mr(s0,A0){var h0=Mr;while(s0!=Dz){switch(s0){case rz:{var t0=A0[mz];B0=function(q0,v0){return f0.apply(this,[Nz,arguments]);};s0=Dz;return S0(t0);}break;case nz:{s0=Dz;for(var k0=g0(V0[T0[L0]],I0);l0(k0,L0);--k0){AA[V0[k0]]=function(){var Q0=V0[k0];return function(z0,w0,Y0,O0,m0){var d0=b0.call(null,Gz,[H0(H0([])),w0,Y0,R0,m0]);AA[Q0]=function(){return d0;};return d0;};}();}}break;case Kz:{s0+=Fz;var V0=A0[mz];}break;case Zz:{s0=Dz;var U0=new Date();if(mz){throw U0;}}break;}}};var r0=function(){return c0.apply(this,[xz,arguments]);};var dz,jz,mz,Hz,Fz,Rz,rz,Jz,Uz,cz,bz;var F0=function(J0,j0){return J0==j0;};var D0=function(){return c0.apply(this,[Pz,arguments]);};var b0=function N0(G0,n0){var K0=N0;do{switch(G0){case pz:{Z0=x0I0+P0W0-p0;X0=W0+C0+E0+I0;M0=W0E0+P0C0+p0;sc=C0*

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F%23skip&cb=1711631945419&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-288016-16%7Etcm%3A91-228643-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=703-289271-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2Fchecking%2F&cb=1711631997175&event=DisplayProductTabTable&eventType=Presented&eventDescription=DisplayProductTabTable&clist=checking-product-table-es%7Emost-popular-es
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	1083
Entropy (8bit):	6.807116061169352
Encrypted:	false
SSDEEP:	24:rGDc/jcaEIMmP/xVML5fCMaW8EJ3WRUUAv6zOFvHt:rGo/j1hVMLx8Jm/vZ5t
MD5:	1BE95B0B232926A8F3015E422DC7D26A
SHA1:	9D9C8A27B6A0A5FCEAF3A36DA19296E9822B4B2F
SHA-256:	8351DA32A7B86365880337290FEE8D5D3C3BF9F6B0BDC7AE8C8991930C63DBAE
SHA-512:	855F1D04A6A67ACA97B19B44F91777CDB4B193907AC98BBD0DDA955B40DD04329E0D94696779E5C21627C0D3D59786DA330563D6B15980DA42ADFD9F73866427
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/contextual/responsive/smlprimary/wfi000_ic_b_cash-stack_color-gradient_64x64.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@.....................................t...8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe.......@...@....pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe.......@...@....pixi............ipma..........................iref........auxl..........mdat.........@2..FP.<P....}ls..s...._..`.{.SE.O9.^.X9...dI%.Rk~.gyvW.s.V=Fj)..3....q7...{5.)..5n.........u...h..'...".......6..K+..R.w...j.a.N7.......%..N?..8...pW.\z..L...j....m..B):}5.... @....X].#....t[1c.U..wl..Rg/(.g^...q.b$t.:.C..)\#..@.M.{j.1.Q....:.............2..FP..<.@.T(.........>....3=c.o....].w.&.a.H.!..:..6e.....G....o..u.FG....>..g.M.G`W.-P.U_.x...7d....)=.....H...~o=.o..]xq.._kv.~x......z...u.N.#..&.8..W.WL..h..Y......R.....j-.~..D.....S.-.`#d. 2[N..:...g........?[j.P.l.&.{...6m.?.Q..9eo)%.....[nE...f...Lr..X.jv.

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	9198
Entropy (8bit):	4.53575154289712
Encrypted:	false
SSDEEP:	96:WlldYhV6u7LspZ50p/SwoE56nzTDmyzpCdukvC:WPdk6u7L85USwoLvZyuk
MD5:	CD112F1ACB59EF6E59E09C0EFFD8CE2A
SHA1:	BC104CD92ADC32A8F695300D2B0CC69C2776F6AF
SHA-256:	6780D0B2BC67397895EF7B8845261EEE7B9B22610B026835362128942DA5FB7C
SHA-512:	4ACA546509ACE5BA9DD09D6ECD7E112CA012E672E1F7ADB1D514EE7F52FB896855ACD08101E2C96B555B4DD8410576AFC486518B7407185C7AF215DAED568B38
Malicious:	false
Reputation:	low
Preview:	............ .h...6... .... .........00..........F...(....... ..... .........................(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...'...(...(...(...'...(...(...'...'...'...(...(...(...(...(...(...3)...%..'...+!..5,..)...+!..8/..:0..4+..(...(...(...(...(...+".......... ...`Y......?7..7/..........xr..&...(...(...(...%...E>..........)!..........mh..............-&..$...(...(...(..."...up..........UP..................\|v..........[T..%...(...(...$...........zv..........XS....../&..{u......vq..PH...%..* ..'...<4......mh..KD..........+#......YT...z......,&..<5......9/../%..............:3..........NG..............................8...* ..<3..B9..@7..!..90..1'..1'..B:..C:..C:..B9..D;..C;..<3.. ..(...'...&...'...(...'...'...'...&...&...&...&...&...&...'...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(.

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1395)
Category:	downloaded
Size (bytes):	4036
Entropy (8bit):	5.266746572465814
Encrypted:	false
SSDEEP:	96:eicnP4ReIZB/o1ybFLeRyHXxtHXmEHXoJ1foQJUG/IYcYI7GRGnIuXoIRvySh7:eicnP4gIZWMbFZHXxtHXmEHXoJ1fo3G6
MD5:	B657BC70DAF83E2BFA67858035FE0901
SHA1:	1D69F612A9498AF24FCD94E369D1B2002B57C04F
SHA-256:	3190AC2272B5E1696F8DC1F92CEACF685B905CED989E71DD0E558339DCE359B3
SHA-512:	B120ABBA876268AB4E7D4802566B107DB1BC9CE1EDF9C75CE532A497048325CD755FD89F14364C8CE39776C1222D741263917EDED6735D95122C24622D61D907
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/public-site/utag.487.js?utv=ut4.51.202310021848
Preview:	//tealium universal tag - utag.487 ut4.0.202310021849, Copyright 2023 Tealium.com Inc. All Rights Reserved..var dotq=dotq\|\|[];try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.loader===undefined){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(this.readyState=='complete'\|\|this.readyState=='loaded'){this.onread

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F%23skip&cb=1711631945417&event=DisplayMarquee&eventType=Presented&eventDescription=DisplayMarquee&clist=tcm%3A402-251670-16%7Etcm%3A91-223657-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1071)
Category:	downloaded
Size (bytes):	2158
Entropy (8bit):	5.298026311475136
Encrypted:	false
SSDEEP:	48:6hbRQ+8e4nPWNnR6IMI+wB/edm20zQll1XdmMSoQnWr:4bRCnP4ReIZB/UmUl1XUJoQnWr
MD5:	F4D859C7B49FA343D9C8B25C689D837E
SHA1:	C571CF8C4AA455CD656785571A398B03BDA70254
SHA-256:	49E726AA41E4128560776F794AEAE8F9648B7045769CF240AB3FF4F5D002D529
SHA-512:	5958666FE7F0AF06CBDE4A3877E16D1687D5B6ABB328D32BE6E40BB291D42C64975AE5EE3A073B64BC9156654539EBF17A2EAF97C3646F21F000BB9C66CF8A03
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/main/utag.379.js?utv=ut4.51.202207272202
Preview:	//tealium universal tag - utag.379 ut4.0.202207272203, Copyright 2022 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<35){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(th

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=703-289271-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2Fchecking%2F&cb=1711631997176&event=DisplayFatNav&eventType=Presented&eventDescription=DisplayFatNav&clist=tcm%3A703-245989-16%7Etcm%3A91-226306-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=703-289271-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2Fchecking%2F&cb=1711631997177&event=DisplayTabTableCategory&eventType=Presented&eventDescription=DisplayTabTableCategory&clist=es-checking%7Eproduct_compare_tables
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 48x48, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	500
Entropy (8bit):	7.528974537281716
Encrypted:	false
SSDEEP:	12:cxlyt9BgSHdVvKdO49mG3otG4H9m+V/N7GLhAEeEZoC3VX:c0oS9lKd59mG3MFmvxoC1
MD5:	756B27D9892687495692A979B591E358
SHA1:	F866BC738AFE5A5725F3810E98E4213FA48220D9
SHA-256:	91ECE1E76122D521F4F53C95E88FF9DAE9C41AE12FFF955380EE6606F70088FB
SHA-512:	8FA6481D763164AE76C25E75FC21F08C86D5D9D266BC7F20D1404291DCCBB299E3A193F1802F03A0785C7AFD8425156DDCFC2EFCE510493C4E67A68F30C37A8D
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/rwd/favicon_48x48.png
Preview:	RIFF....WEBPVP8 ....p....0.0.>.X.M'."..X...l...^>.d..n....5.C..;..5h4wV$...uyA.......s...1.......wR.....k=.....q[YqY#u.J..h........H?..8.......K...G}f....v..eh..NN..4...h#b-....0......ty...i.U.....m....#0..3...&....?.Ux...%.B.t.".....)r0. ....o.,X....[.<.(.\|.A..J....N...s.#..,T=n3.u.]#Ljm..2.W..a.....@.6...=.W!..Q#...i.P......[..q.v.....\?. .6W.yE...2z..s.^~.P...&+.Ci..j../.c....4...b.....!w[..n.2:..d..^25.fU..9.x=...%..}.CK}.f.+.+..%.N9...*..u6..l!(..........n.+.i..pu.....

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	downloaded
Size (bytes):	106326
Entropy (8bit):	5.52689299206484
Encrypted:	false
SSDEEP:	1536:HeaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYJUhZ:+aQaOYw58ISTT4esfbw3h9N+rKW
MD5:	AB34788BB0FF19E7DA8AE85A28C60EFE
SHA1:	05756134A382E3CE923D55C033C07E91BE60E7B4
SHA-256:	1EEDA03EDBC2BB72AB44077BD30E718F3A9B2A2DCB493B9CC05976A2A1D7F2EC
SHA-512:	01602FC7ECD215E43B0081B853A5C35618E10436BCE6527FDE255981AEDFB701CA37DEB38FEB5D7EBE426851EAF90AE6FD1442C83B0C47767D05E8DFA6DC5E5A
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/tracking/ga/gtag.js?t=DC-2549153
Preview:	// gtag.js - 20230830115644.var GTAG_TYPE=function(){var gtagType,currentScript=document.currentScript\|\|function(){try{throw new Error}catch(err){var url=(/at [^(\r\n]$(.):.+:.+$$/i.exec(err.stack)\|\|[])[1];if(url){var scripts=document.getElementsByTagName("script");for(var i in scripts)if(scripts[i].src==url)return scripts[i]}}return null}();return currentScript&&-1!==currentScript.src.indexOf("gtag.js")&&(gtagType=void 0===currentScript.src.split("?t=")[1]?"CORE":currentScript.src.split("?t=")[1].substring(0,2)),gtagType\|\|"CORE"}(),GTAG_CONFIG={CORE:{id:"",salt:"ChAI8N/yiAYQ/sLpxs3R3/lOEhkAiCq8P5n+5Jl2lPYrrAqF+9CynSAMn5lfGgIrEQ==",name:""},UA:{id:"undefined"!=typeof utag_data&&"RETDL"==utag_data.app_id?"UA-19597165-1":"UA-107148943-1",salt:"ChAI8LztiAYQr7+BrOKYjbQiEicAfMDsaWrMhkFBMPGo10w27kKCufDm4bQPQHPe48IJzu3RQ+BdEMUaAsgU",name:"c"},DC:{id:"DC-2549153",salt:"ChAI8N/yiAYQ/sLpxs3R3/lOEiMAiCq8P0qN5GDJNKlTfLLeTfVz4qOpT6tg/+q6HwGf3lZdJxoCdtg=",name:"c"},AW:{id:"AW-984436569",salt:"Ch

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1070)
Category:	downloaded
Size (bytes):	5152
Entropy (8bit):	5.360972179368085
Encrypted:	false
SSDEEP:	96:Od7UmS6tv5OTg9XjMTAw9mUpQxw7K4qPhripIWpgXfZlHQ78:URp5nXWXnuFPhrxWpWfQw
MD5:	A407BB44C69E338D3B541B2C613FD9FE
SHA1:	EB6E2BD48F248B6F47501144ADBF458B0FED4C31
SHA-256:	69E3766EC5A8A5F04647FCEF2B0D4AE83F9C6D6AEAED1757F589E0BDB50B9F09
SHA-512:	556856A23D23D41F796A2745D7080E4EBFE67525D9CA561110EF7C548725583F3ED4994C1FEDDA5C39276D0304B490A8D8C47EC94C57EB84833DB69BCBEB6EEB
Malicious:	false
Reputation:	low
URL:	https://tag-wellsfargo.digital.nuance.com/chatskins/launch/inqChatLaunch10006005.js?chatVersion=sdk
Preview:	/* Timestamp: Tue Mar 19 20:59:30 PDT 2024 , Code Version: 1710907168986 */.if(!window["v3Lander"]&&navigator.userAgent.indexOf("Opera")==-1&&navigator.userAgent.indexOf("MSIE 6")==-1&&(navigator.userAgent.indexOf("MSIE 7")==-1\|\|navigator.userAgent.indexOf("Trident")!=-1\|\|navigator.userAgent.toLowerCase().indexOf("media center")!=-1)){window.v3Lander={allowTaggingInsideFrameSet:false,codeVersion:"1710907168986",disableXframeToIjsf:false,hostToPath:{},isExitChat:false,isJSSDK:true,isLegacy:true,isObfuscated:true,isRplMode:false,maxIframeCreateAttemptCount:3,mediaServer:"https://media-wf1.digital.nuance.com",noJSHosting:true,noChatFrame:false,postToServerName:"postToServer.min.js",siteID:"10006005",skipDomReadyTest:false,staticClientURL:"https://wellsfargo.digital.nuance.com",tcFrameworkName:"tcFramework_jssdk.min.js",useJSHelperForIJSF:false,v3HostedFileURL:"/view/nuanceChat-wf.html",appInsightsEnabled:false,useResolvePageWSDomain:false,resolvePageWSDomain:"",vanityDomain:"https://wells

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F&cb=1711631936562&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_chk_digitalcashbonusrspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-251513-16%7Etcm%3A91-228643-32&promoSlot=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	563680
Entropy (8bit):	5.357462435343029
Encrypted:	false
SSDEEP:	6144:Vw3sHxRL9mGo5GsG0GJd61JxkJFUeM07bZinbd2YxeBXNxDnYpH:GCD6hkFUV04AXznE
MD5:	893BED56BA5573201BDCDE5A932E561E
SHA1:	D2DE79189F034B06DD1ACE34C70FA0293EAF54F0
SHA-256:	12AEEFE8AC9A9B640EA6F7B02F4564E2C963E07DD64EF7EB9C2A3AE93685890F
SHA-512:	8A4C1076B8775880424D4A2814AE1346D08B810AA971169D7F26483392D6F358FA3C39706AAED1C74AA926C4D5704AE1F6F56A45639A70630B5E947B51F4048C
Malicious:	false
Reputation:	low
Preview:	/! For license information please see vendor.e69a15c07c19c3e48a3b.js.LICENSE.txt /.(self.webpackChunkwibac_accounts_ui=self.webpackChunkwibac_accounts_ui\|\|[]).push([["vendor"],{16873:function(t,e,n){"use strict";n.d(e,{$:function(){return J},A:function(){return I},B:function(){return T},C:function(){return L},D:function(){return m},E:function(){return _},F:function(){return z},G:function(){return B},H:function(){return c},I:function(){return N},J:function(){return F},L:function(){return K},M:function(){return tt},N:function(){return et},O:function(){return Z},P:function(){return R},Q:function(){return it},R:function(){return j},S:function(){return Y},T:function(){return D},U:function(){return rt},V:function(){return C},Z:function(){return Q},a:function(){return U},a4:function(){return nt},b:function(){return $},d:function(){return q},e:function(){return A},f:function(){return H},g:function(){return W},h:function(){return V},i:function(){return g},j:function(){return E},k:function(){r

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	138645
Entropy (8bit):	5.367107057821606
Encrypted:	false
SSDEEP:	1536:zUclZcizl0cibBlZci7zl0cicm8RTv0rJ90FDDsGX:gR4s
MD5:	8A8E24A49B0B01C1D2B1D9C6D7B81D94
SHA1:	290AF043C400B6AFA1A9388DD997FE74F23D059C
SHA-256:	AC392DB467319B021CB9B5FB473643F9E4A4F1BE7A44656015811F612EB6D0D2
SHA-512:	ACA29F1A48270FE13574297D647B2891AFDEC2D07360D985B84EE10C026B871220175AB49C124ED06021F3C6FBACA1B72D43BB15B3554521176F7D67B417400B
Malicious:	false
Reputation:	low
URL:	https://connect.secure.wellsfargo.com/auth/static/ui/loginaltsignon/public/stylesheets/src_app_page_login_Login_js.7bcb9ada66a4959d7c4c.chunk.css
Preview:	.SignOnDisclosures__disclosure___yfK65{background-color:#fff;width:83%}.SignOnDisclosures__disclosure___yfK65 p{font-size:1rem;margin:0 24px 16px}@media screen and (min-width:48rem) and (max-width:67.4375rem),screen and (min-width:67.5rem){.SignOnDisclosures__disclosure___yfK65.SignOnDisclosures__desktop___H9t42{border-radius:10px;margin:0 auto 54px;max-width:870px}}@media screen and (max-width:35.5625rem),screen and (min-width:35.625rem) and (max-width:47.9375rem){.SignOnDisclosures__disclosure___yfK65.SignOnDisclosures__desktop___H9t42{display:flex;flex:1 1 auto;flex-direction:column;width:100%}}.SignOnDisclosures__disclosure___yfK65.SignOnDisclosures__mobile___L3Iav{display:flex;flex:1 1 auto;flex-direction:column;width:100%}.SignOnDisclosures__disclosure___yfK65 div[class=c20notnot] *{font-size:1rem}.SignOnDisclosures__disclosure___yfK65 div[class=c20notnot]{display:block}@media screen and (min-width:48rem) and (max-width:67.4375rem),screen and (min-width:67.5rem){.SignOnDisclosure

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	274
Entropy (8bit):	5.364759736843847
Encrypted:	false
SSDEEP:	6:wBqWnTHpGWiTa2ATHp672yK20QIjpVBVWRAIBC5YCmIGc2SRarSoA:qpGWt7p6CyKBQIlFWRAiC58Sh
MD5:	A5C92CEEAA15D09115E76490FD16947E
SHA1:	750EEBF4106F35594A17DE65371142650E211CBD
SHA-256:	35D590C74B6924C2A3C14AF9528EE618D435C96DA9B9718FC60288454050580F
SHA-512:	8A32A8CD8767325F02CD0B2BB3200DB0813510359A3AA179A42C5C9ACFFC61E594AFB816ABD2EBF66BCFEDB14DF3C262C63A8DB9310D89C3A2659F97EAA99745
Malicious:	false
Reputation:	low
Preview:	<HTML><HEAD>.<TITLE>Service Unavailable</TITLE>.</HEAD><BODY>.<H1>Service Unavailable - Zero size object</H1>.The server is temporarily unable to service your request. Please try again.later.<P>.Reference #15.45680117.1711631972.9f836a62.</BODY></HTML>.

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	downloaded
Size (bytes):	106326
Entropy (8bit):	5.52689299206484
Encrypted:	false
SSDEEP:	1536:HeaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYJUhZ:+aQaOYw58ISTT4esfbw3h9N+rKW
MD5:	AB34788BB0FF19E7DA8AE85A28C60EFE
SHA1:	05756134A382E3CE923D55C033C07E91BE60E7B4
SHA-256:	1EEDA03EDBC2BB72AB44077BD30E718F3A9B2A2DCB493B9CC05976A2A1D7F2EC
SHA-512:	01602FC7ECD215E43B0081B853A5C35618E10436BCE6527FDE255981AEDFB701CA37DEB38FEB5D7EBE426851EAF90AE6FD1442C83B0C47767D05E8DFA6DC5E5A
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/ga/gtag.js?t=UA-107148943-1
Preview:	// gtag.js - 20230830115644.var GTAG_TYPE=function(){var gtagType,currentScript=document.currentScript\|\|function(){try{throw new Error}catch(err){var url=(/at [^(\r\n]$(.):.+:.+$$/i.exec(err.stack)\|\|[])[1];if(url){var scripts=document.getElementsByTagName("script");for(var i in scripts)if(scripts[i].src==url)return scripts[i]}}return null}();return currentScript&&-1!==currentScript.src.indexOf("gtag.js")&&(gtagType=void 0===currentScript.src.split("?t=")[1]?"CORE":currentScript.src.split("?t=")[1].substring(0,2)),gtagType\|\|"CORE"}(),GTAG_CONFIG={CORE:{id:"",salt:"ChAI8N/yiAYQ/sLpxs3R3/lOEhkAiCq8P5n+5Jl2lPYrrAqF+9CynSAMn5lfGgIrEQ==",name:""},UA:{id:"undefined"!=typeof utag_data&&"RETDL"==utag_data.app_id?"UA-19597165-1":"UA-107148943-1",salt:"ChAI8LztiAYQr7+BrOKYjbQiEicAfMDsaWrMhkFBMPGo10w27kKCufDm4bQPQHPe48IJzu3RQ+BdEMUaAsgU",name:"c"},DC:{id:"DC-2549153",salt:"ChAI8N/yiAYQ/sLpxs3R3/lOEiMAiCq8P0qN5GDJNKlTfLLeTfVz4qOpT6tg/+q6HwGf3lZdJxoCdtg=",name:"c"},AW:{id:"AW-984436569",salt:"Ch

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=703-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&cb=1711631971835&event=DisplaySignOn&eventType=Presented&eventDescription=DisplaySignOn&clist=tcm%3A84-224415%7Etcm%3A83-2046-8
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=222-145737-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fabout%2F&cb=1711631989397&event=LinkActivated&eventType=autoload&eventDescription=DisplaySmallCarouselItem&clist=182-147916-16~223-6266-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	downloaded
Size (bytes):	106326
Entropy (8bit):	5.52689299206484
Encrypted:	false
SSDEEP:	1536:HeaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYJUhZ:+aQaOYw58ISTT4esfbw3h9N+rKW
MD5:	AB34788BB0FF19E7DA8AE85A28C60EFE
SHA1:	05756134A382E3CE923D55C033C07E91BE60E7B4
SHA-256:	1EEDA03EDBC2BB72AB44077BD30E718F3A9B2A2DCB493B9CC05976A2A1D7F2EC
SHA-512:	01602FC7ECD215E43B0081B853A5C35618E10436BCE6527FDE255981AEDFB701CA37DEB38FEB5D7EBE426851EAF90AE6FD1442C83B0C47767D05E8DFA6DC5E5A
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/ga/gtag.js?t=DC-2549153
Preview:	// gtag.js - 20230830115644.var GTAG_TYPE=function(){var gtagType,currentScript=document.currentScript\|\|function(){try{throw new Error}catch(err){var url=(/at [^(\r\n]$(.):.+:.+$$/i.exec(err.stack)\|\|[])[1];if(url){var scripts=document.getElementsByTagName("script");for(var i in scripts)if(scripts[i].src==url)return scripts[i]}}return null}();return currentScript&&-1!==currentScript.src.indexOf("gtag.js")&&(gtagType=void 0===currentScript.src.split("?t=")[1]?"CORE":currentScript.src.split("?t=")[1].substring(0,2)),gtagType\|\|"CORE"}(),GTAG_CONFIG={CORE:{id:"",salt:"ChAI8N/yiAYQ/sLpxs3R3/lOEhkAiCq8P5n+5Jl2lPYrrAqF+9CynSAMn5lfGgIrEQ==",name:""},UA:{id:"undefined"!=typeof utag_data&&"RETDL"==utag_data.app_id?"UA-19597165-1":"UA-107148943-1",salt:"ChAI8LztiAYQr7+BrOKYjbQiEicAfMDsaWrMhkFBMPGo10w27kKCufDm4bQPQHPe48IJzu3RQ+BdEMUaAsgU",name:"c"},DC:{id:"DC-2549153",salt:"ChAI8N/yiAYQ/sLpxs3R3/lOEiMAiCq8P0qN5GDJNKlTfLLeTfVz4qOpT6tg/+q6HwGf3lZdJxoCdtg=",name:"c"},AW:{id:"AW-984436569",salt:"Ch

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 616 x 351, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	48976
Entropy (8bit):	7.983865685148854
Encrypted:	false
SSDEEP:	768:ZPQVzQiKkYC4bt0m8yUlXTmGSgb1T7V0lHOksdzwjiMnBqDFOxPaRLg/Bkf1NdH3:ZmQiyX6TyUNTNvtV4H9sdMbBqY6QC
MD5:	86B0049967B2D7EEFA5009913AD8C6DC
SHA1:	4BE13C91436B33207F34ABBA2CF84F00BA6F91BF
SHA-256:	BE49BA8D23D56FC1799A8117BF40510CB7655AAC5C55547DB563975B9735CFC1
SHA-512:	D82ABED7426D191DA7F3BD290F5CFF9D96044C877C6AAD7E0C545B866F59C76BB27421C4DE4ABC3DFEA56650A220A19F28164E65B24B815868C6867CC2F60A31
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...h..._......x0.....orNT..w.....IDATx..w\|..}..Tu....H....2,..Q.]..*.`Y.$..x.r.k[..>.l.Y.A..p.t..$...j.6i#7...2........?j.H....f@...4.....{z...Bk..b.X,...q.....b.X,..e>V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.V.Y,...b.4.n.'Pw..J.{..#$......W..1..=.......[o).!........B.%W.B...B...L.-.1!."..%.mz}...p6.j@.....F......tm/,.4......".g.n{."5..X.&......y..T.. ...}..ICc.Z:....d5.1..:..:..w9!.0.z.\...a......{?.[L..q....ML..{.x...!h..I.e..\..-.Ch....3..^_G.'..}.4h..49.#jxS)h...X.$..5.5Q.g.o..-7.\a.o..Q.k.._H.....!.@....eJP0..W.44V..9.Z@...'....Y[H...x...........t..@......@s.5..+.....@X.9.....a.\....Ax1...AJ.K.4..............$.w..Xz.

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=222-145737-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fabout%2F&cb=1711631965087&event=PageLoad&eventDescription=DisplaySmallCarouselItem&clist=182-147916-16~223-6266-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 16x27, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	168
Entropy (8bit):	6.564146684998368
Encrypted:	false
SSDEEP:	3:2ZHjDHOlsJRo/DdhUl+PEIIVaqE6Wcic8YIkeYvG/QPkNSMfkWwABpKEd/:2ZbaIldIIRVWciOQQMN/s3AfKU
MD5:	1D52C531F04FD5F5292149AE7D0EB1AC
SHA1:	9BE952BEDE3CAF9D09B61C45EBC9CD959F4F6B29
SHA-256:	3885AEE8E727F793D5DE34AF1C81BF3783CABD9B3AA7713F3337CB9F103EFD74
SHA-512:	E8645E39BABF40B3F2317AD8BA3DD676DEA9061DDA96033DFE3FFE1C7292AB2BF6F4256E9DD93CAD4FA97DBB9AB82A045C8EF971B4C3E7CD786B5D7175FB8329
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/locator/arrowPointerForMap.jpg
Preview:	RIFF....WEBPVP8 ....P....*....>m,.E."....@.......T....:T.`.............3.......f.3...#.w)..U..T.9Y.x[b.....V.l.'..hZu.~.L...>...x..&..#$.N.\|.@..DF6;!.s.n.d./.8..

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F&cb=1711631936559&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-251513-16%7Etcm%3A91-228643-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	9198
Entropy (8bit):	4.53575154289712
Encrypted:	false
SSDEEP:	96:WlldYhV6u7LspZ50p/SwoE56nzTDmyzpCdukvC:WPdk6u7L85USwoLvZyuk
MD5:	CD112F1ACB59EF6E59E09C0EFFD8CE2A
SHA1:	BC104CD92ADC32A8F695300D2B0CC69C2776F6AF
SHA-256:	6780D0B2BC67397895EF7B8845261EEE7B9B22610B026835362128942DA5FB7C
SHA-512:	4ACA546509ACE5BA9DD09D6ECD7E112CA012E672E1F7ADB1D514EE7F52FB896855ACD08101E2C96B555B4DD8410576AFC486518B7407185C7AF215DAED568B38
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/icons/ico/favicon.ico
Preview:	............ .h...6... .... .........00..........F...(....... ..... .........................(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...'...(...(...(...'...(...(...'...'...'...(...(...(...(...(...(...3)...%..'...+!..5,..)...+!..8/..:0..4+..(...(...(...(...(...+".......... ...`Y......?7..7/..........xr..&...(...(...(...%...E>..........)!..........mh..............-&..$...(...(...(..."...up..........UP..................\|v..........[T..%...(...(...$...........zv..........XS....../&..{u......vq..PH...%..* ..'...<4......mh..KD..........+#......YT...z......,&..<5......9/../%..............:3..........NG..............................8...* ..<3..B9..@7..!..90..1'..1'..B:..C:..C:..B9..D;..C;..<3.. ..(...'...&...'...(...'...'...'...&...&...&...&...&...&...'...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(.

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8185)
Category:	downloaded
Size (bytes):	339401
Entropy (8bit):	5.158548280809413
Encrypted:	false
SSDEEP:	6144:g1FlnqC3RbWzz2HCN31Ml226e5od11CmBnB1sxLFwjqcB:gVnHS34CN3ymBnBixLklB
MD5:	017BE916440864BD21A28D4B6EA071EB
SHA1:	6693248F99F3CBDECCB3D2C2D5D71E272A1B5A67
SHA-256:	6429EE4169A7D44117D38F6BCAE32FA80133B222E6BC28EAEB22C18DC9D38C1B
SHA-512:	71D8520937CEBE028B64D945DE50FD854017393565533D21C6AD28F2D8787784D36E42BDE17411E360FED1569C5A7D6578C1D9D449C0F34BEA2161CC29859D65
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/js/frameworks/jq/jquery-ui.js
Preview:	/! jQuery UI - v1.13.2 - 2022-07-14. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sorta

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 319 x 635, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	39457
Entropy (8bit):	7.976206586166605
Encrypted:	false
SSDEEP:	768:SlpqSKLwZWoWdGO00INg0Q/N8V//nqGTUbjJscyeeapJ7Ax6QcaFaYo:SrqSK8oIO00INRKNcXLUfJhyokxFcSa7
MD5:	6F0A8D26C8C2A78CA75BA9173D78C01A
SHA1:	0262E86156A9369E042EBB50AB22F218352FCF13
SHA-256:	B830CDE810A1A33826CE7C93E3E2B9780B8CE9192F6605FA97BB1D3A2365DDFF
SHA-512:	B956FA394E60A137F89BCA81F8E858464F8D4CED3C6833803D57C77D06D697EE82AAAE5E2D97E38648EB4C9C06E83804FA89DD4001E378BAF2D4E3B4548A7E96
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...?...{........L....pHYs.................sRGB.........gAMA......a.....IDATx...\|.....7R...t.).T...DQ..A.....(.".((EE.+.A...{.NBM......M..r...........2.;.}...4 :::....{.t.:/.F..........0....(.t.dQ....m o...}.1:r.B. hm..........+.? .\|.....W...J>..T...........<.....rs......Z.G.Q.a.9........7X.]x`P........1..@.!.Y...oaA...EY...Jr...?....L.V\.aa.......0F.e...I.ii..ha.N.......].O.=a.u.....U.a..Z`.B.3.....v.?....&..}!.jU.=.a.D0..e....[..=...`....[$..HX{..2.c/.RS)%)I!E.. j.......I.....Ah.e...7h....Oy99?.xy....X..n...$..{.Z...c...&'......z.C.m.?tP.........=.a.g.789!!. ?.....+.Q.&....o}hDDdX8...0.....K..I...=+".V.....0..=...`.tuY...q.....F.Z..>>..X...*.;..=.1>.>.a\..0..V-Bx....Y.,....1>../...1..bT...'.;4t!....I_...V.z<...0.K..JnN.FM.\|h.6f-?4p.ED..1...T.UK.....-.?..v...'.O...Y..RXH9.%G.....].o//.H5..@`...DjJ....c.P.K...../.%tNz.......HNI....m...j..:..D:..S/.^f....a........(,(...T...!X...H`.\..%...Aqu`..>.+..3.%p.A...7.04V.p.srrzF5k..Rz.g.M4&

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 672 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	99820
Entropy (8bit):	7.994035523333656
Encrypted:	true
SSDEEP:	3072:FoKrjGIpnU0Pk/AyHt2HsDllzl4jyfqPV5xz/dq:FoKri2YAY4HsDllzl4jyCP1dq
MD5:	2FF7DBEEB42A5C10AB351791CB943372
SHA1:	2C9FA7718FDCF698C4B4DEE24CFC46F8B2B0269F
SHA-256:	F4F1FBEDE9FAAC6A1C122383D5694163DAB613EDFD872A83BCE4260A271FA299
SHA-512:	D344A0162072704A5F400D3D2E9146F593488F27B77A9712C8B9C96A411174547E5C620ED59189AFF769710CA3D50C762B967FDDF4001BE1ABC1C3BF46CB70EE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............r8......orNT..w.....sRGB.........IDATx...w.eGq&.?}.wr..Q.i.5J#... .d.....Xl...6...?.z.9a.g..e.:b.{Y.$....A.....h..9...?NW.S.}....fw..4....P]]....?}....)%...... ...$..o)..d.G..4.V:.^....RW.X..s...n..)...%......RT...Y.....J.....?.y..%4.............R.....#.G........U..F.1!!.ZUuL.N..%....f.5..YZdJ....f..-.fd.4@.C.4.z)..UU.LRI...H..A..w..+.(A..$.o.[..E.R...p.....mr..I..u.......H.y...Rx4c>}..@3k.Zj\|4i#%.a6.D...=.[W...2g..}..8..Y.VUDE.v.m...%....N`9#9....r.f.c..s.~.r...-#.4/.:.{.........B~.9.!.I.U...)c`V@.Wu.8m.....w6....95\dO.,9..2A.5.d.HOS.9w....j..+...NF..wRq\#.....2..QHG.Y,-...6.vB.x}.PE#5....e..`.uE....%C.\.b..J..r/!..r/k.`84..dC....{]=...."....I.r5...#.P....{^m..m.Jl.....3<...W ..[...Wx....\|}..9.{X..%.Zf.R.9.^Z....N.3EIU..P^....Xs_+..%.%Y....Z...H.hu2.!S.......>.....<._Hy.....ne...P..%.1...s)8Kk.Z ydTcX....L-..s... ..M..Z...3y.C.;n...1`....V...M.>..p\|.uYRz.....SSQ.pV.{.@...S....Z.]bk.2.{.6.(..J.

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	9509
Entropy (8bit):	7.958760912497084
Encrypted:	false
SSDEEP:	192:rGELn8Mj7lXvcvzvbcrGAJeat0o/yRH9fxkWUjln18xPYZwGqR:rv8gJcvDceat0zxnUjWgZwG6
MD5:	7A0B51861C394095AD293455E1F73487
SHA1:	DE990E366D599E6409FB0BA455F1F20025A8EA6C
SHA-256:	CF36884477936F09035C242837296ABFD2BCF1AE15DE21E83E3C1D25891514A9
SHA-512:	FB08858839C8F029B12CF7F75D82AA80B9888A7539C5C414836DC2C6259CD280891F8C6985381879EF06113A989411C1DA391BEA505BC3FAA3CE69A7FD3A2FC5
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images//css/tools/locator/usaMap.gif
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@..................$....#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe...........O....pixi............ipma.................$.mdat.....b=.....4 2.H.....a@.^..".U......wq.~>.#..Q.v..L...E?.w..{.x...$.y.......#e.....5./.z'...G...j.^pd.3...A..;T.uA..HN1i.kQK...$.{.pc.......mkHi.4..q..9.c....R.3.....+..h.L.2[Z"7V.....TT...P..Q`H..g.,.P.&..E.k..\...[.Ha i.....x]..z.....w.:.zC6.]....I&#.Y..8!..dy?S5..0.x..b.......G4...Eg&..l;^.gP....1LfS......p.8..[y...\|..6eF....L.,.'....w,.cb..y1.L..^d...0p....$..$...5.._...mFo;.q.&...C..job\.G....<.D...1U.,.PC.a..TPc..1..3*..=..(.`...j.(.Q......o.T.....\|u......(.&.l.._....z....0#.......+...tJ...:.@q...(.WJ..ciH.p.}?.o...m.....3.(..y.UQC~.7..4.0..JAo.4.;..[Gt...=\|.gq.5... u...#... X..B..\:.kE.`pz5..l..r\|...1....[....c..o.lX..1}...8u...d0.6.a....^...%...g.O.P.....#.>.O.;.....qeaF..9....

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	67151
Entropy (8bit):	5.3735382664152755
Encrypted:	false
SSDEEP:	1536:mbsPhwWuBAAks/ip+5yUqpqcsR8hwLOfwUkTDu8wZJO/MupOXljIPUYgf17SLvvT:b1gR8horis/Lit0UYgFv7y
MD5:	95970DAC2A9043B60DA54B3F70ECC320
SHA1:	88854E35A02CFEE55DFA07F2A528EADAB7035525
SHA-256:	C6CF0D0ED0ABA5AF54ABAB83456FF2C7A1237A924D28475A46B0539D73A3C3EB
SHA-512:	7BE826E3253F90838F9309507E6E981A19ADCD8EDDA310854027A346AB3208496E6A3FB15A3B71B21462732D68878B5A5EB2AAFB7C7F9CF76E8978B0253681E1
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/assets/js/wfui/ndep/js/nuan_websdk_bootstrap.js
Preview:	try{var div=top.document.createElement("DIV");div.innerHTML='<div id="nuance-chat-anchored" style="position: fixed; width: auto; right:20px; bottom:20px; z-index: 999999;"></div>',top.document.body.appendChild(div.firstChild)}catch(t){}try{var div1=top.document.createElement("DIV");div1.innerHTML='<div id="nuance-chat-anchored-2" style="position: fixed; width: auto; right:20px; bottom:20px; z-index: 999988;"></div>',top.document.body.appendChild(div1.firstChild)}catch(t){}try{var div2=top.document.createElement("DIV");div2.innerHTML='<div id="nuance-chat-anchored-mobile" style="position: fixed; width: auto; right:20px; bottom:84px; z-index: 999988;"></div>',top.document.body.appendChild(div2.firstChild)}catch(t){}try{var div3=top.document.createElement("DIV");window.WFA.body.hasNavstrip?div3.innerHTML='<div id="nuance-chat-anchored-wim-mobile" style="position: fixed; width: auto; right:0 !important; bottom:106px; top: unset !important; z-index: 999988; visibility: visible"></div>':div3

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (599)
Category:	downloaded
Size (bytes):	48109
Entropy (8bit):	5.371147928648613
Encrypted:	false
SSDEEP:	768:aTxv9ZxLf3xpz+8H77umOZ98/o20uoKCfrs9pWwyNn69UmvxbCQj2E+B:wxv9zxvnuRZ98/oooKgY469PgF
MD5:	AECCB854B0A76AA9F478E466C8011B29
SHA1:	625D31CBEB8978CF2419F58D14BBA92A42DBB45C
SHA-256:	7F0D10BC282C3D7B0EB4D7527303490F8D3B86A1C65E293C2D9F0793006441E6
SHA-512:	A0E4FEC306EDE63869B30BEFEE8C54DE38694D724AD86306587E59D641921119659852241A9316DA80C56C2A560EEAA73B537A3F8725C87ABD11B0BE551FFF31
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/assets/js/wfui/appdynamics/adrum-ext.b4436be974de477658d4a93afb752165.js
Preview:	;/* Version b4436be974de477658d4a93afb752165 v:4.3.7.1, c:0d3eed23ace0d0cbfc4e91c26b1d12e18f6eded6, b:9384 n:9256-4.3.7.next-build /(function(){/... Copyright (c) 2013, AppDynamics, Inc. All rights reserved... Derivative of Google Episodes:.. Copyright 2010 Google Inc... Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License... See the source code here:. http://code.google.com/p/episodes/.*/.new function(){var g=window.ADRUM;if(g&&g.q&&!0!==window["adrum-disable"]){(function(a){(function(b){b.R=function(f){function e(a){

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	4206
Entropy (8bit):	7.875264586872504
Encrypted:	false
SSDEEP:	96:rGPvLruSXfoSZyxXG4pb/4wB8GBs0etdFnJxefaKrRTuwEu:rGXTXffeGETBA4Z9TuDu
MD5:	C62A4D637ED5E9EA17095A4D08E1BCF6
SHA1:	18AD5419741065FA48ED327DD55C482119FE7CF3
SHA-256:	DEAE0F7E700F9440C9AD3F948EF8D44D47BF45B32F62F39CDFFBF9A53E7B32A5
SHA-512:	9EFF0E81B65DD73CF96312F29ECEA24AC96A4F233291F233CE8A70E46236776DB27894FC408887965F404B422457697E1718019FC15885579F663B490DE101CE
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/photography/lifestyle/227x125/investor-relations_new_227x125.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@...................`...#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe...........}....pixi............ipma..................hmdat........0@...2.......q@.......4.7\|..^..%.M.[.lg..0/).A)s....wCDr.6jM/P.WK.hD.{.G..F.7.!../......0.t9..Z.......6'.....x1w.`...v.f.2.....R.S.............`q.Q..0........k.....i....5zZ.f...C.6"..t>.K..U>.....4...0......?....e..p+...s.4y$...$.....6.{{....O.^G....p..D;...(..Y.......I...`....r...D.f...6.n@.ncU...%..8.....o?..I.F....A8&.&.SM.G.(O..lb...6..@s.......2..7..F....1-....;h....d.....W.......H....lri1.4...K.)..,.U.....TQ'.z..........._%.}n....P12.g...}..._.....[z.......G......6.4..S....UX.....lw.F...#.......:...3.w0....R.c1K<e.G...0.....5.....!h.Q V.#.P._nf.OA`_.......W~..2...31.9&..y.:Q..a!vs.Gk~..)..%.^m....C..)...Rk[.......lj..U........r..28O.........}......J)0.7...-......`t

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	5950
Entropy (8bit):	7.920907553039265
Encrypted:	false
SSDEEP:	96:rGPemL1YRFsy/sDx2DFShhwjXkKVQFF5iLy6bCQbZXqtDtuKzqjDTljS17s1/qDI:rGmmmUyBB8hwjXo56hbCQNiDUKYMi1R/
MD5:	21227E69ABDA61C4955173D770C09059
SHA1:	51D5110613311289AB245BA1DCF71091421D2B2D
SHA-256:	F30B1B58F2D4FFAC155A05D71C153DCD69859F19B2D97082226FC0080A4C882B
SHA-512:	D18329AE881A0166DF97C06BB13C339F1ABE7893D25620E6A9CAEF2290BB9555F6130F4126C72B20C4925A36A27A07214E0233178642E0EC85C1C51AEF989E02
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/contextual/responsive/hpprimary/wfi_ph_a_218584479_1700x700.jpg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@...................0...#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe.......8........pixi............ipma..................8mdat.....!.......2.,Dx..I$P.GA..@.9@....+...Xv:.:.Gv@{..(......p..n..o....e2.V..0...u.........f.H4l@'1.\|.v....u...8G......b/Y.Pc..'d.7..qG...w..0.j\|...G.1..5M.'d..w,nL..7..=gy..9........\|.&.....^1w..h.c"....s"2.P..0.....C.&$.l.8k........^..H&..d.n)......S{..lUb.?.{Im....[,...z...5......t.j.........fB..L.$....R...;....$..[..e............S..1~....-..c..!.~.8D,~.Z?._.a.e.......9.kL-'b.J.&So.N.Y)..pvsg..Ak.>\`.q"..d[E.t.!.]C..S..}K...9..../..0.<.le......-.,DCh....J....L....z..w...E.~...o.q.'%.].=.j..........D.be..?..;=4...m..\......C.e.....0..q.....s[bf..VaKM.\@.Z.@..e.d......~....%t$. ....ix.B.........%.T......F.sH:#.e.y..Z.\|.J....G.....I..t.(.x.a.t.D.FdP..HiL.0O.....#.(.....O.\U......zbR.

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65453)
Category:	downloaded
Size (bytes):	1276313
Entropy (8bit):	5.455363610854926
Encrypted:	false
SSDEEP:	6144:9m8Rm8XxBsgLVvWT8gLdiea9BC2UdySh/k0Q9JjxOK8H3mdbwvm86m88m8nm8giB:7xagLVvWuVQb4mWda1eHpo
MD5:	0975EEE0B6CAE38CF6FF312B3E2A9523
SHA1:	492F61C8A76C4B3E35B5F5D2FB6758ABE491D1F4
SHA-256:	611B68D261943775D048AF2E6C6257C88E3C3740EEC75F3C60554155ECE18BC7
SHA-512:	AB4E0EE9BD35B89937D96D246EB874D8CD7DCC22222594273D260AB444E0E0EBFF85E095073A0C6D1587DC55FE4110697D1089076840CD46196BFAAA96CFEF31
Malicious:	false
Reputation:	low
URL:	https://connect.secure.wellsfargo.com/auth/static/ui/loginaltsignon/public/js/wfui.bdc043673ba39c8d7cb3.js
Preview:	/! For license information please see wfui.bdc043673ba39c8d7cb3.js.LICENSE.txt /."use strict";(self.webpackChunkloginapp_alt_signon=self.webpackChunkloginapp_alt_signon\|\|[]).push([["wfui"],{34934:function(t,e,r){r.d(e,{Z:function(){return Tf}});var n=r(67294),o=r(28216),i=r(87498),a=r(68448),c=r(14662),u=r(25184),l=r(17633),s=r(28924),f=function(t,e,r,n){return function(t){return null!==t\|\|!1}(t)&&function(t,e,r){return t\|\|e\|\|!r}(e,r,n)},h=function(){return(window.outerWidth-10)/window.innerWidth*100},p=r(5038),d=(r(82526),r(41817),r(41539),r(32165),r(66992),r(78783),r(33948),r(72443),r(39341),r(73706),r(10408),r(30489),r(89554),r(54747),r(68309),r(68304),r(88674),r(65069),r(47042),r(39714),r(91038),r(74916),r(57327),r(92222),r(21249),r(79753),r(83710),r(69070),r(78011),r(95362)),v=r(56833),y=r(77264),m=r(70281),g=r(1088),b=r(86527),w=r(95150),_=r(75357),E=r(90479),O=r(65418),L={content:"PageContent__content___NacAd",emergencyMessage:"PageContent__emergencyMessage___yC9V4"};function

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 616x353, components 3
Category:	dropped
Size (bytes):	45269
Entropy (8bit):	7.972967488974093
Encrypted:	false
SSDEEP:	768:11NRnHUnXteeK3Eyru6kad8JtbruWoCTrAYpJQ5rXDac/8O4Tu0B6d029:11Igr3RSXh8ZmJsCEOL1A
MD5:	B069A3F141E42A2C2B2B8DA533E2FFB7
SHA1:	EAFEC9059349539DEBBC73DA970B2488BE06ECC2
SHA-256:	CF4D0969FAE5A808BC6745EFA7B241EE36E0D7307604961E7F1E19C41F334786
SHA-512:	097170052B8B5A1700B5F1388E19923782068800B760838F62B8C16C744F49319BECEF3E857BD09C296A3591FC13B3178C881636B2C52BD406452FBF37030A56
Malicious:	false
Reputation:	low
Preview:	......JFIF.................................... ..... 1.$..$.1,5+(+5,N=77=NZLHLZnbbn............................ ..... 1.$..$.1,5+(+5,N=77=NZLHLZnbbn............a.h.."..........4..................................................................,/..j....Q....y.\|.j..;...S.!.Pm...:<..e..~..[.......Bq...^...=.z/......R.T..8,'z..M.\|..-V..BO9...N.<$.,Y....f....)..n...!Fm1....U..`z...iYH.}.h].....].f%.-.A..%.3...C.[.+...(8m......U.mg.k;=.w..L..g....8.@e...\|o.....Awl...0pF..?..uEV...[.^..y.z:............6i..W..h...e!i.\.}.s.R.n...-...#..c...ZBun.....6l..24.#..Y...373.wRx{_..zW.A.....=R.....,Z... .0r.,^Hx....G. 0.3.U......I..C..g.I.#..5.1.>.b##.....t6ed.L..9)%.........m...~Rw..p'@J...d...Ua...w..~...o...,4(W.n..C.`5V..0..N..<b.V`..L\|.........d.l..)1.Tf.x0c....`,L..-$. .........m....l..).?J.^A.u..>.YB2............K.}..F.e.I Xln.[.;D2q.e.=...G.....q\|[Y...vi^...O...+:.0..C...8&]....X.I0J....`Vbe....<+.b.....U...e.go... YE....[.t....e8.....T..le&..i..\|w..t.{X..=

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	2938
Entropy (8bit):	7.7005898390718075
Encrypted:	false
SSDEEP:	48:rGo/j3tV0goyM1GEtQT8++MnlM6/KUjN7mzbKimEXAVpESp+:rGgd/oyMqT8++Mnl4ewnKyAV1+
MD5:	7758BA1D1113D500353A6E225F3FC973
SHA1:	1159F4C9E04A78EAE241EA970968C2B0E0090043
SHA-256:	E4E556166A660F2266DACD263AAD1ADAE61D9F935209D59498B247518C0CE89F
SHA-512:	C9015B488D0FCCEA8B77B655DC199E92F7AF43A685374A9B8E03DF451BB02C77AFCF63B0377AFE16BD9CCA4F702A23D0268EDEC01EAAA657102CB3D534D21469
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/contextual/responsive/tab-table-compare/compare-blue-EVD-1400x170.png?impolicy=TTCDesktopXL
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@.........................................8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe................pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe................pixi............ipma..........................iref........auxl..........mdat.....%....2"D........+..)..2....u..a0LE>f..~T......%......4 2..D....,P..e.......e2........(.....x.....%.T......0D."......a..5.[}....l@6H..:.s.ox....\|.j+.......N.....#.a$w.Q%ES.........)S. rOT0..Df.\|._Z;...g....R.5.....?...6.(^..Q.I...w...uKN.=..J....".j.p.VBq\|.;.4j...v.Z..0.wQZ..`......6..4..,.j..[...`(sn...XC.\|....V..LO...".?"O...Q...........w.R.4...Cw.....~.E.. ..EFK....\|...#...].-...z3#y[....wy....7.3.8m.:.F.gW...7s.2.&......p*~..l..\|........OP.a...O5K.....8.D...#.....C.._....B.B!e......V.....t.......5..\|ey4..y-K+-......

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1448
Entropy (8bit):	5.197709720450731
Encrypted:	false
SSDEEP:	24:4ismAWc6AFDA9OdzdkZy/l+NvDFZr2pLdXiggQvDgyAeT7M9sa5KovuH4sRWZ8/U:9Az6Qc946El+NvDn65RHgQvEZk7qsa5L
MD5:	9FECD3AEF5C5E934141650771C54D380
SHA1:	A8CA748119F6597E9197AB758B26DC15C2EA99DF
SHA-256:	C3DA138D9164DB792BA6876AA7582949C985B072EE1AC5DE2B20FC60153226C0
SHA-512:	7AEE301C4C446E39516208F9FA4DD36B6AF91BBEA5641A131BECD54740F46FF925FDADE4DBE1F6DCAF77CD5A9E9E73DCFBEFCE47162BE0F97C57D4125F824961
Malicious:	false
Reputation:	low
URL:	https://connect.secure.wellsfargo.com/auth/static/prefs/atadun.js
Preview:	var ndURI = ndURI \|\| '';..var isNative = isNative \|\| false;..var counter = 0;....(function(ndURI, isNative) {...var interval = setInterval(function(){....if(!isNative && counter <= 15){.....if(document.querySelector('form[action*="auth/login/do"]')){......clearInterval(interval)......if(ndURI === '') {.......ndURI = 'https://connect.secure.wellsfargo.com/ATADUN/2.2/w/w-642409/sync/js/';......}......if(ndURI !== '') {.......var baseUrl = ndURI;.......var idx = baseUrl.indexOf("/ATADUN");.......var jsURI = baseUrl.substring(0,idx);.........nds=window.ndsapi\|\|(window.ndsapi={});.......nds.config={q:[],ready:function(cb){this.q.push(cb)}};.......nds.config.ready(function() {........// Set Placement as Login........nds.setPlacement('Login');........// Bind to the submit button on the page........nds.sendOnSubmit();.......});.........js = document.createElement("script");.......fjs = document.getElementsByTagName("script")[0];.......js.src = jsURI + "/jenny/nd";.......fjs.parentNode.insertBe

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	6188
Entropy (8bit):	7.938100626310892
Encrypted:	false
SSDEEP:	96:rGPdu0i6SRew5gIEYj+P1knQ4S27R4f1TFaiyJBBTOJLB1xcYMiLguUk4/PKYVGV:rGlxwv4P4SiRmhyl/Yvq6iG85/mH
MD5:	8DBB29D6A43F34763A4867912C8FD410
SHA1:	C472829ECE17A6CB3EBF159C2BAF83423987EEF5
SHA-256:	C7361D7AA4C5415655A4C0C68459582919ECAE13C6331BEB82CC526F012B9A13
SHA-512:	88FF7E8224B63C0070F6C14E1AE87F3CCB6E32AB1DEB59CD2BB4E1F895CE07A5DEC8191962291DF2C942D830B8E8EBA07F56C928E3CFF3D7080B46FD9D26B84A
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/photography/lifestyle/227x125/blogs-and-social-media_new_227x125.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@.......................#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe...........}....pixi............ipma..................&mdat........0@...2.......q@....%Dyr...].gS0..7..)7.......f(/1....J...U<}S..^R..Q;..P........U8.8wjsB.3"^.@.q.......Ly.....q.q!S....y.^.x.......=$u..,?m8..bL..t...4.z..3..O.......Z..>......56i./.#... .".z.X.T{.1.p{4a<.k..f.V.m.....@....<C...'....X..V...D.....M....l7)..>...Vh...}.....>..4.8O.$t<..}n[v...Ja.w.o..)Q%.........yY.@........C9[25..2....+9R..U5..r....... .[...Q..KGZ..E.Vj.._..oF.X.v..[W9..a~.5a..4.[.Jv....s....K..2..{v...Oz.(.....]......A..bK.s..l...:.LP.v...k8....8B..V......Ye.c.`..@0$0.K.T.?j......;` M.6-%......Q..q3.Xu...3..{....GJU.=....c....3.Z..1 .o.N1...}RG....!=.d...v...B.v.U...O......P}K..&..8..8.T..*C.?\|..[....R...n.....^X.W.q.2.B.{%&E'NP.G..............<..x&x..Lp..1..

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (40828), with NEL line terminators
Category:	downloaded
Size (bytes):	52225
Entropy (8bit):	5.450988635531463
Encrypted:	false
SSDEEP:	768:UL7KwjCCghBAfhCpCqybFHdzVXxGtl9zo1PhSWOS/r+:U/oAffFH/XIHa1PhrK
MD5:	7558DD36A5A3D8D44BB1A04601AE6560
SHA1:	C703AF3F738020A778D4C67BDE5181147E8D2B10
SHA-256:	1975E599CE211EC13716B9BA70636A011421D0AA38052BE6A00302F6B9E15586
SHA-512:	37BD53CAEBA26716AF5333E34CF8D3805283FA8A5642912DFA9F843A090F18A481A19C854BD90D51F1DFBDB525B8532080A72CE5A0DB10239F64F7AF96915DA6
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/ui/javascript/homepage-ui/homepage_iaoffer.705fde810a89594dac63.js
Preview:	(()=>{var t={659:(t,e,r)=>{r(1249),r(9554),r(1539),r(4747),r(7327),r(1038),r(8783),r(3210);t.exports={deferredImages:function(){var t,e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:[];(t=e.length?e.map((function(t){return document.querySelector(t)})):document.getElementsByTagName("img")).length&&Array.from(t).filter(Boolean).forEach((function(t){if(t.classList.contains("deferred")){var e=t.getAttribute("data-deferred-src");e&&t.setAttribute("src",e),t.removeAttribute("data-deferred-src"),t.classList.toggle("deferred")}}))},convertSupTagToUnicode:function(){document.querySelectorAll("sup").forEach((function(t){"SM"===t.innerHTML.trim()&&(t.innerHTML="℠"),"TM"===t.innerHTML.trim()&&(t.innerHTML="™"),"."===t.innerHTML.trim()&&(t.innerHTML="©"),"."===t.innerHTML.trim()&&(t.innerHTML="®"),"."===t.innerHTML.trim()&&(t.innerHTML="℗")}))}}},6548:(t,e,r)=>{r(2772);var n,o,a=r(7109),i=a.postLogger,c=a.timestamp,s=a.loadResponseData,u=a.isVisible,l={},d="

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 13x13, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	124
Entropy (8bit):	6.108486460059302
Encrypted:	false
SSDEEP:	3:s1ZH3lltlaolS1AND0Ql0ZxzB187fbcDKqPCS3IoPhvH:iZxSKNl0LD87fbcWnEIoBH
MD5:	B80507BFEC5BE813B52F1EE8AA0B6F83
SHA1:	A8E5AA0067BB50586C5F41C6ED9B5F444B7F9A9B
SHA-256:	1F8D4ADC7F7BB23AA45CE0008B8B08371992BF97954185ED29E7804566B8CDC9
SHA-512:	6B6425AEE6E1EE3E95FE909877A87D2B7EA492834E73E1FD36AB9C6A1E22891302DADD6EE97DE2E36C8042870E4C6D2BA92C9B4332FFD9B99D648758A9C3B5DD
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/locator/more-information-icon.gif
Preview:	RIFFt...WEBPVP8 h........*......P%..t..g.8.....]q.V#DT#...r.?...z~.QnR.$...!'..H3-.. ....)..Um...(..-......4.... .'..`..

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65505)
Category:	downloaded
Size (bytes):	77203
Entropy (8bit):	5.163307616954647
Encrypted:	false
SSDEEP:	1536:YqaDGan/LZqAF1XKS5EUqqbszkTWsKin5:odZtbsz2W8
MD5:	DD67EF7BF5D168E7123D934CFD21AC80
SHA1:	EB66AB8B5ED10640C50C460C271BE086F63E0FFB
SHA-256:	5466D536089D3AF772430020C62A83DC680CD9169200840742E51181BA81FD75
SHA-512:	E52B72F81F8DA05BB2AFD6A6E223AB5104E5108FA1AB16BC0CF16BF4C60E99353A8B402442E34FDA6E4D635E965FBC2DD5FB2BA63E81EFC1CD30058A16850EEB
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/alloy/alloy.js
Preview:	// alloy.js - 20220818153712.!function(){"use strict";if(document.documentMode&&document.documentMode<11)console.warn("The Adobe Experience Cloud Web SDK does not support IE 10 and below.");else{var e="Chrome",n="Edge",t="EdgeChromium",r="Unknown",o=function(e,n){return-1!==e.indexOf(n)},i=[e,n,t,"IE",r],a=function(e){return o(i,e)},c=Object.getOwnPropertySymbols,u=Object.prototype.hasOwnProperty,s=Object.prototype.propertyIsEnumerable,d=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var n={},t=0;t<10;t++)n["_"+String.fromCharCode(t)]=t;if("0123456789"!==Object.getOwnPropertyNames(n).map(function(e){return n[e]}).join(""))return!1;var r={};return"abcdefghijklmnopqrst".split("").forEach(function(e){r[e]=e}),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},r)).join("")}catch(e){return!1}}()?Object.assign:function(e,n){for(var t,r,o=Uo(e),i=1;i<arguments.length;i++){for(var a in t=Object(arguments[i])

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (720)
Category:	downloaded
Size (bytes):	1944
Entropy (8bit):	5.46847699009299
Encrypted:	false
SSDEEP:	24:/O5zJIXvuPQa8VyIaoK8d7mQMJHvIOtmRY/Itt7Ik39hr55uIO/3nIRWU9w0XO0C:2KgJTS7m9Zm7H9rg/IwUrVgzs9p4J
MD5:	7A6398DA8CC630BB2F632D7065E5AADC
SHA1:	B261CD158976191A50E6AA55CA2E63440205D11F
SHA-256:	1EB822991702356EFC7F44C031EDA1C3932396C708416BEFB0A7165F3E651692
SHA-512:	59902182A0F23ECAB4626AD39E546AF48281F3B6D9C6537A2A085619B291292530EC786EB2E7EF1FC19E80A9D6437D1741B603D161E189E1ADFE971A08A0863F
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/tracking/medallia/wdcusprem/57907/onsite/medallia-digital-embed.js
Preview:	.(function(){if(!window.KAMPYLE_EMBED){var onPremEmbedRegex=/\/[a-zA-Z\d-]+\/\d+\/onsite\/medallia-digital-embed\.js$/;var genericPathRegex=/\/[a-zA-Z\d-]+\/\d+\/onsite\/generic\d{13}\.js$/;window.KAMPYLE_EMBED={kampyleInit:function(){var t=document.createElement('script');t.type='text/javascript';t.async=true;t.src=KAMPYLE_EMBED.getGenericLocation();t.charset='UTF-8';document.body.appendChild(t);},kampyleLoadLogger:function(){},kampyleEventHandler:function(elem,eventType,handler){if(elem.addEventListener){elem.addEventListener(eventType,handler,false);}.else if(elem.attachEvent){elem.attachEvent('on'+eventType,handler);}},isSupported:function(){var trident=window.KAMPYLE_EMBED.getUserAgent().match(/Trident\/(\d+)/);var msie=navigator.userAgent.match(/MSIE (\d+)/);return!(trident\|\|msie);},getUserAgent:function(){return navigator.userAgent;},getGenericLocation:function(){var genericLocation=location.protocol+'//'+'resources.digital-cloud-prem.medallia.com/wdcusprem/57907/onsite/generic1

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F&cb=1711631936571&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A182-228910-16%7Etcm%3A91-223671-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	693
Entropy (8bit):	7.106979621870627
Encrypted:	false
SSDEEP:	12:6v/7+E4k3buLRX+FCxoWiQq+2y8bapJ+Kh6MxzMgZ1lVTqbeXFI4ir:c4kiV+cxliQj2rusMxzMaqiIpr
MD5:	9218120E11C11FF91C8637A9638A95E1
SHA1:	FD436BD2D33EE198B1BF6CC98E370E061CBFD8C5
SHA-256:	7A4C21EDBFADA664C96363B232A7D5B81DE9AFE8ED9B933881F8706E1573555B
SHA-512:	0E94C32261E5003B8957804D54D79D02AC0591908BD4B4C2975D8494804156B217C1CA518B7DA78499DB9C2E975AFF4402750DC7CE162E1E568F767AF5201D1D
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/rwd/icons/tab-table-icons/checking-4-premium-sparkly_hand-ON.png
Preview:	.PNG........IHDR...0...0.....`.......PLTE...:20800933=30@00920:32;31<40:21;21500:22;30:50;31<30;40:20;30:00:31;21930:30<40;20;31:20;42910;31:30;20;21880;32:32:30;30:20;30;33;22;41:50;31......./tRNS.` oP.p..@..0..0..p._0..o..p....... ....._..`..\z....orNT..w.....sRGB.........IDATH..U]W. .. ..5.hK.[.1._.......n...>..y&.w23!...x..L..y..R\C....^.....<.....p)...0.p........u&.f.`...TU.n...j.)...[.%<H.K..H..+.O.P....... ..........>$.{o......._.1..^r.l%"....Q~o.$...:.......a.......N.......(.O.mH.'l.izT.....b...x...w.#.@.Q.;...I.N.t3....a............K.i..`.p.H...n...............t...=......S.....^..P........@5;.l....q..=c,..wi...."..m.iG...]^<RJ...k....&...rA....IEND.B`.

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62592)
Category:	downloaded
Size (bytes):	62642
Entropy (8bit):	5.422216556027663
Encrypted:	false
SSDEEP:	768:8yg8TNc7PmJZtxizNmLkC5BBnxJ24v9vVxwbF5bZsxi:8Qc7K3sN0J24v9vVxw7Zs4
MD5:	C62371524140EAD995766EB1A945BD63
SHA1:	8BCDE2E6C106A3CA494914677F5DDD7941B6ED50
SHA-256:	01B058814273911ED2D7E723DB7F91352AF49D26CC5C352ED5156671094F95C6
SHA-512:	856C93125B40481E39EA2FAA93A2D224B884DA6A6F7E87199393DC619F3F9ED2848F93E19D546B6F90A5D15E7DA3FBE8FA2A2BEA2E89D0EC6C7A5E610A459DEC
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/assets/js/wfui/ndep/websdk/nuance-websdk-loader.js
Preview:	!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=157)}([function(t,e,n){(function(e){var n=function(t){return t&&t.Math==Math&&t};t.exports=n(

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (720)
Category:	downloaded
Size (bytes):	1944
Entropy (8bit):	5.46847699009299
Encrypted:	false
SSDEEP:	24:/O5zJIXvuPQa8VyIaoK8d7mQMJHvIOtmRY/Itt7Ik39hr55uIO/3nIRWU9w0XO0C:2KgJTS7m9Zm7H9rg/IwUrVgzs9p4J
MD5:	7A6398DA8CC630BB2F632D7065E5AADC
SHA1:	B261CD158976191A50E6AA55CA2E63440205D11F
SHA-256:	1EB822991702356EFC7F44C031EDA1C3932396C708416BEFB0A7165F3E651692
SHA-512:	59902182A0F23ECAB4626AD39E546AF48281F3B6D9C6537A2A085619B291292530EC786EB2E7EF1FC19E80A9D6437D1741B603D161E189E1ADFE971A08A0863F
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/medallia/wdcusprem/57907/onsite/medallia-digital-embed.js
Preview:	.(function(){if(!window.KAMPYLE_EMBED){var onPremEmbedRegex=/\/[a-zA-Z\d-]+\/\d+\/onsite\/medallia-digital-embed\.js$/;var genericPathRegex=/\/[a-zA-Z\d-]+\/\d+\/onsite\/generic\d{13}\.js$/;window.KAMPYLE_EMBED={kampyleInit:function(){var t=document.createElement('script');t.type='text/javascript';t.async=true;t.src=KAMPYLE_EMBED.getGenericLocation();t.charset='UTF-8';document.body.appendChild(t);},kampyleLoadLogger:function(){},kampyleEventHandler:function(elem,eventType,handler){if(elem.addEventListener){elem.addEventListener(eventType,handler,false);}.else if(elem.attachEvent){elem.attachEvent('on'+eventType,handler);}},isSupported:function(){var trident=window.KAMPYLE_EMBED.getUserAgent().match(/Trident\/(\d+)/);var msie=navigator.userAgent.match(/MSIE (\d+)/);return!(trident\|\|msie);},getUserAgent:function(){return navigator.userAgent;},getGenericLocation:function(){var genericLocation=location.protocol+'//'+'resources.digital-cloud-prem.medallia.com/wdcusprem/57907/onsite/generic1

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1310)
Category:	downloaded
Size (bytes):	2954
Entropy (8bit):	5.410582797169917
Encrypted:	false
SSDEEP:	48:blabRQ+8e4nPWNnR6IMI+wB/edm20zfNOzAAzVQsYsaRJxNOz9Az9Qs+1T9mMSoR:gbRCnP4ReIZB/UmfNOzAAzVQsYsaJNOR
MD5:	9EF87EE96033190CC922ADAD0933EC1A
SHA1:	BEB71DA0B41EE11DCF0DE704AB040C30391D2069
SHA-256:	B63247E5BAC5DAD45C3F980B03E9D95E4A46EF0EDB3CE1BC61B577F9B170DCD6
SHA-512:	1CE6DC703969A52FF9EE421A190BE9B196235446D26F2E9A1975034A3FE8250C1B0D3F73F8A7155480E501CDA6BA018C7D6BAD66BE898D899626741FB2E96027
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/main/utag.403.js?utv=ut4.51.202309250453
Preview:	//tealium universal tag - utag.403 ut4.0.202309261748, Copyright 2023 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<35){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(th

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=703-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&cb=1711631971866&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A182-228918-16%7Etcm%3A91-223671-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F%23skip&cb=1711631945421&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_ccd_choicerspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-304276-16%7Etcm%3A91-228643-32&promoSlot=3
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	463
Entropy (8bit):	5.625741081583268
Encrypted:	false
SSDEEP:	12:rGA0X//LcAP93FSM13lSvOG7bgHI7uVOEXTQWL/+t:rGA0X/jcy97AvOG7bgo7uVOEXTQWL/+t
MD5:	4BA6A57B8C9F52EDE1B958BD4B63700B
SHA1:	22A693EB43A2A76AB994782BC50CC262F986A240
SHA-256:	C13A85DF86FED8E3D77B952A59A1736743127F1422873B47B4D0A59092C62DE2
SHA-512:	913B0F3CB62C5C3DE6C1825EC9A0864A8631508A05704B764B54B489169AD23F149809BD8E2F3BE3BB765B8DA5ED3A7E0910957B206E17AB79BB27FDC6816F07
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/homepage/position-1-bg-gradient.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@.......................#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe................pixi............ipma...................mdat.....fj......2..D....<@..NmkCd....a?\....,)-.w=...e.n.)....q=....@r...".......+KX..f....Ia!.9z.u......$.j:...v..z.d.g.-.....0...d..................e.V...c.8.j..`.1..=..u....yF.2..P.`

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2299), with no line terminators
Category:	downloaded
Size (bytes):	2299
Entropy (8bit):	5.065713404473587
Encrypted:	false
SSDEEP:	48:WF4rTdOe3lBXsfgvMYyYvTEV+m4ewxhAk8P:CWVBXsg+Y+45n2P
MD5:	BD244E1B891B02E1257DC6FB99604EB6
SHA1:	296C431C92027441C5B184F88B5C2E6A0AE7464C
SHA-256:	81F845E2D1EF874C2C93F6200FB004EEBEA26DD567D854D59F7A572F1B9B66E1
SHA-512:	35742B760D92EE5BBDC8838DF9A60FC203DD00FB4DBA00D70D3CF6FAF7374BD4F6E4AA65F821850AA3BB2EA0EB2FD84C43D1D97B450977A65242982C85C9440E
Malicious:	false
Reputation:	low
URL:	https://cdn.schemaapp.com/javascript/schemaFunctions.min.js
Preview:	function schemaLoad(h,g,f,b,d){window.schema_highlighter=window.schema_highlighter!==undefined?window.schema_highlighter:{accountId:h,key:g,stripUrls:f===undefined?true:f,testMode:b,fetchFromHighlightJsCache:d,output:true};const k=new Set(["Brother","KaplanNorthAmericaLLC","Aetna/AetnaMedicare"]);if(window.schema_highlighter!==undefined&&window.schema_highlighter.accountId!==undefined&&!k.has(window.schema_highlighter.accountId)&&window.schema_highlighter.accountId.startsWith("SonovaAG")&&window.schema_highlighter.fetchFromHighlightJsCache){window.schema_highlighter.fetchFromHighlightJsCache=false}if(window.schema_highlighter.accountId===undefined&&h===undefined){return}else{if(window.schema_highlighter.accountId===undefined&&h!==undefined){window.schema_highlighter.accountId=h;window.schema_highlighter.key=g;window.schema_highlighter.stripUrls=f===undefined?true:f;window.schema_highlighter.testMode=b;window.schema_highlighter.fetchFromHighlightJsCache=d;window.schema_highlighter.outpu

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1579)
Category:	downloaded
Size (bytes):	10463
Entropy (8bit):	5.133795319129033
Encrypted:	false
SSDEEP:	192:jbFnNojImVVMbpK3TXvUcgbRmYaUshd/3UmNzT5Qad9FMjnpBu4x0allS45/2vNK:jlNsImVVMbpKDBgFAUg/3UsgME
MD5:	AB4745D183B02AECC2F060184D98883D
SHA1:	6EA6F3D306BDA585B0743F4760D6A9AE368A2C40
SHA-256:	9C4CF53FEF9222FC5D6659FA4B776FE20D64C46886C3D96547AAAE16134AFB2A
SHA-512:	2420B5F4E6F6C9C351A6EA65925DD092381C6D7FA641E37A30026B098CCAAAEEFA044884C35383626963526C6414E10368B718282E05D4338A92C23EBA8DB56C
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/tracking/secure-auth/utag.7.js?utv=ut4.51.202010230514
Preview:	//tealium universal tag - utag.7 ut4.0.202010230514, Copyright 2020 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatechang

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	405
Entropy (8bit):	5.2097897155393245
Encrypted:	false
SSDEEP:	12:rGA0X//LcAiY3FSM13lSy0y84LhDlKHrlR:rGA0X/jcS7AZH4BlKHrb
MD5:	08E3EEC615BB3F7D07A95E1E79F96189
SHA1:	C05EF7184EEDCB31AEE442AD8C474FF306B1D473
SHA-256:	89026CD6AC7B7314C1A5B075471D09A9B672AC011254541C9D2B521B90C6CB3E
SHA-512:	3FEA8796185B5617376CE7549B0D501BEF3EFB92B6DEF144A157C4094AB75C2F9542C93F35799391EF3B635916CE5A26B768904077E6886B61AB2755F064C430
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/homepage/position-3-bg-gradient.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@.......................#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe................pixi............ipma...................mdat.....fj......2wD....<@..Nm3.....7li..!./&.:u.v...[.K..w..D...jf....D..X<..XO..B4....gU.&.d.G...."}N0.Y.-a..mn..p-t....F0.e..e..?..#/

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1784
Entropy (8bit):	4.602522437719863
Encrypted:	false
SSDEEP:	48:chAvfHgiWhxe8mCDVGTn0s1OUe1OxSOhPl5bHbV:hvfAnLeY0Tn0s1Ob1OxSOhPl57B
MD5:	21EBCE5AFA61A8CC8EA7913C4A4C3310
SHA1:	AD5B77867A48C3E240F04611F25D27AF0C1BE59B
SHA-256:	7BFAB3D904C5EFFC47FE1577C20615A1EFCF84F2A6E1B8E5CCAA501AC657FCAB
SHA-512:	8B63D23DE9D23477D68AEB6C17C107F0BB50B5AA5D0E0B94B1E520C66EA54BF89DC41A637FC661BA81A11BDEBCDC271AACC7439D6E6055B505231DD12F42215E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 20.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="20px" height="20.7px" viewBox="0 0 20 20.7" style="enable-background:new 0 0 20 20.7;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<path class="st0" d="M10,16.1c-2.1,0-3.8-1.6-3.8-3.7c0-2,1.7-3.7,3.8-3.7s3.8,1.6,3.8,3.7C13.8,14.5,12.1,16.1,10,16.1z M7.8,6.7..c0-1.2,1-2.1,2.2-2.1c1.2,0,2.2,1,2.2,2.1v1.4c-0.7-0.3-1.4-0.5-2.2-0.5c-0.8,0-1.5,0.2-2.2,0.5V6.7z M13.5,9V6.7..c0-1.9-1.6-3.4-3.5-3.4c-1.9,0-3.5,1.5-3.5,3.4V9C5.6,9.9,5,11.1,5,12.5c0,2.7,2.2,4.9,5,4.9s5-2.2,5-4.9C15,11.1,14.4,9.9,13.5,9..L13.5,9z M10,11.4c0.2,0,0.3-0.1,0.3-0.3V9.6c0-0.2-0.1-0.3-0.3-0.3c-0.2,0-0.3,0.1-0.3,0.3v1.5C9.7,11.3,9.8,11.4,10,11.4z.. M8.9,12.5c0-0.2-0.1-0.3-0.3-0.3H7.1c-0.2,0-0.3,0.1-0.3,0.3c0,0.2,0.1,0.3,0.3,0.3

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	4074
Entropy (8bit):	7.804359689091091
Encrypted:	false
SSDEEP:	96:rGgn9jqwZCiwKy72VNwTCp51xm86PfN77V9qstSk:rGS9F1wKyicq5/m8KfNf3J
MD5:	1F6F59B1428AFE075A94D83875303C3D
SHA1:	8D7B3C54411C064E7E048CC6BD47B6F46B76BFC5
SHA-256:	277D8A8176325AA06F557D8CC983E56B929C24BFF9589C568BA5164FC1158BBF
SHA-512:	0DCCDBD87411D0D8554EDF85B4BE8B1007B53BE2FA885ECA9E170F1C954BB651FAA996F86F186C1C9DDBF55DDE143D8527FAA14888A0657BE1873FDF62495D4D
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/contextual/responsive/tab-table-product/tab-table-product-CAB_test-1400x170.png?impolicy=TTPDesktopXL
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@...................4.....................8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe.......8........pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe.......8........pixi............ipma..........................iref........auxl.........6mdat.....i.K..2'Dt.....;f..JZ8..=.F...I.W...1-....W9.`.....i.K.....2..Dt... P.s...y..k(...s.....2.qB...\|N.@ ...p.......7.......'q.dlf...-../..\|.,h%...\Q..fU...;UQpt.g^...,...=..y..Z4..nV.qale.....[.:?.hP..AeFx...;..mM..(.m..N.S........QZ..d\|...N....Y%.D.X..I!r....W/4S.5..p.w.+.w..e`YT.l....p$.....4;q....@..M.......E...h-.6;.i...w..C8;'.UW....... I.......e.u.l...i,.f.S.......r...Gd]7R0vW`.l.\|.$ qe..6...<.8.z/.\.b....n.....K.m.X..{!.`.(!....x...>...e5....Q}i..].=:$*.nwI.m.RQ.8..[}.'..."..h.S.C.......~g..y...`jgm.P.pR.....g...h:

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=222-145737-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fabout%2F&cb=1711631982147&event=LinkActivated&eventType=autoload&eventDescription=DisplaySmallCarouselItem&clist=182-147918-16~223-6266-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 489 x 335, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	15473
Entropy (8bit):	7.974866633350404
Encrypted:	false
SSDEEP:	384:tOvS8Y6EycX1Ic10k4Ln6o1ffOusMbaddFrOWvpHP/SByePtC:ESVydlnR1fNskaddrgyK4
MD5:	0787079D45CEA17BE73F01A3C8A5595A
SHA1:	8ADB47AC61C8688ACCB7D6E11D06B154CAC9FF91
SHA-256:	F779F3033354FFEDF7399A315CF5DD83CDF868668B36A3319EF55BA20B2B5CD3
SHA-512:	D92A0B29F22248184274608AEDE50EE2008A9C4158A592FE838A4DE37507EDC0A3A8E271F20DB33A17754772E1D1EF333CD2A8F94DF446E0779311B3AA0F5369
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......O.....^U.V...:PLTE..........q3.Z...........s5.o...........}F.\|.Q.w=..................c........................................................................................................................................................................................................................................}9..................B.R........................................................................................................................................................................o.z.....orNT..w...9.IDATx..}..+W}..}..]]I#.+....4..<....'.I..Cp.C..8..`....)$@.Ic 1I.:..M....[..4g.2..C....t.F...=...0G.q..G.q..G.q..G.q..G.q...}..........8b...........0W.m.S...o...P...........~.....~..Ld....l?D......z.o.v..}..T.Z4...y\|9<UkF...#...t.f...!...,N....A.a.c(..k..d..u..w..=..!..(...;1...}.......c1..V.E......."}.i51....X..........R......{....&.A<.....b.?.

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&cb=1711631992649&event=PageLoad&pid=tcm:703-289271-64&ptid=tcm:703-236593-128&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2Fchecking%2F&clist=84-224686-16~91-2049-32\|283-123521-16~91-223645-32\|703-292423-16~91-223645-32\|283-198954-16~91-223645-32\|283-238518-16~91-223645-32\|283-239272-16~91-223645-32\|283-97371-16~91-223645-32\|283-38072-16~91-223645-32\|283-148263-16~91-223645-32\|283-291874-16~91-223645-32\|703-6793-16~91-223645-32\|703-228728-16~91-228650-32\|283-286154-16~91-223645-32\|84-226264-16~91-223649-32\|84-239082-16~91-223645-32\|84-257669-16~91-223645-32\|703-245958-16~91-223647-32\|283-241194-16~91-236597-32\|703-245989-16~91-226306-32\|283-289298-16~91-223671-32\|182-291810-16~91-288600-32\|703-289915-16~91-223650-32\|182-291810-16~91-288600-32\|703-289836-16~91-223650-32\|703-289694-16~91-223644-32\|182-291810-16~91-288600-32\|703-289330-16~91-228644-32\|182-291810-16~91-288600-32\|703-289284-16~91-223650-32\|703-289285-16~91-244416-32\|703-289286-16~91-244416-32\|703-289287-16~91-244416-32\|703-289289-16~91-223650-32\|182-291810-16~91-288600-32\|283-239567-16~91-223673-32\|703-289311-16~91-223650-32\|182-291811-16~91-288600-32\|703-291151-16~91-226307-32\|703-246011-16~91-223668-32\|703-246025-16~91-223675-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8018)
Category:	downloaded
Size (bytes):	19465
Entropy (8bit):	5.2528456340050385
Encrypted:	false
SSDEEP:	384:jJDr8UG2sNIYcJRl0Cu2SmYB05NXZTjCpRrymZ9UDAW:NDr8UG2QIYcJRl0Cu2SmYB05NXZTjCpY
MD5:	C08D9B42CCD0F8BE509D048E1ED8E232
SHA1:	37DED6A11B828DF30349565AE964E15A2A901355
SHA-256:	9A96091A61972566FB255008CE92D1F3077F6371E19411BF77851B37971AA6A8
SHA-512:	086FE79A9CBBC87CE3B12ACC0E67B8DDBF7EB80B55C9061288B95C58932C207039CAA92331F8A514A082E5607C57196E1CEDB190801C0D7AE9848E5A4A0F9ABF
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/locator/public/css/print.css
Preview:	body{margin:0;padding:4pt;background-color:#fff;font-family:arial,helvetica,sans-serif;color:#000}#masthead{width:100%;height:55pt;margin:0 0 5pt 0;padding:0;vertical-align:top;border-bottom:1px solid #000}#brand{float:left;width:168pt;margin:0 5pt 0 0;padding:0;vertical-align:top}#logo{padding:0 2pt 0 0}#contentCol{width:99.5%;margin:0;padding:0;vertical-align:top}#printWrap{position:absolute;top:65pt;left:3pt;width:600pt;margin-bottom:5pt;clear:right}#main{padding:7pt 0 6pt 0}#leftCol{display:none;width:0}#printHeader{display:block;font-size:1em;border-bottom:1pt solid #000;width:100%;vertical-align:top;padding-bottom:4pt}#title{padding:0;margin:0}.prMarker{font-weight:bold;padding:0 4pt;font-size:110%}div.clearer{display:none}/\/#contentCol{float:left}div.clearer{display:inherit;clear:left;line-height:0;height:0}/**/a.navCurrent:link,a.navCurrent:visited{text-decoration:none}a.subNav:link,a.subNav:visited{text-decoration:none}img{display:inline;border:0}a.closeLink{display:none}#t

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8077)
Category:	downloaded
Size (bytes):	97628
Entropy (8bit):	5.312914188365569
Encrypted:	false
SSDEEP:	1536:HAvUXrr5nSDjotcZxhMV1Ez9tgn1Emi7G6S9tXE79aCBsU1+TU5G2q0sBQCpu9Lv:H8XzmB6SLIH1+TUd5fCpuhQ47GK0eaO
MD5:	D49F5BD057488231FDCC675E2FE9F568
SHA1:	C81BE8CDA5BEAB5BD767A63BEE8AAFC08E037CE4
SHA-256:	3C536CEDE8C67B4BDA531F82B77F3678E52026398492010245D3870C87A1623E
SHA-512:	D00BC0D962DCBCDD26EBE0C0AE67A8A698CDEF74A1C83EB282BB4CDEC492F2DB34067B34E02CF9A3E247DC766F6B5EA2B3978C0CE26B278250FCE1FC0B611685
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/js/vendor/jquery.min.js
Preview:	/! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document){throw new Error("jQuery requires a window with a document");}return t(e);}:t(e);}("undefined"!=typeof window?window:this,function(C,e){var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e);}:function(e){return t.concat.apply([],e);},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType;},x=function(e){return null!=e&&e===e.window;},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t){for(r in c){(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);}}n.head.appendChild(o).parentNode.removeChild(o);}function w(e){return null==e?e+"":"object"==typeo

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4209)
Category:	downloaded
Size (bytes):	5856
Entropy (8bit):	5.521760659364492
Encrypted:	false
SSDEEP:	96:rbRCnP4ReIZB/Um9voYrFooYrKaoYrkPEoYrlKXoYrKYrQbfYrQ5Z5YrQ5rikJYO:rbQnP4gIZ+8voYrFooYrKaoYrMEoYrlD
MD5:	15BD844E81D95845C29B50EC9F3E100C
SHA1:	B4694AB4AD0384DB500C155B371DF093790F01F6
SHA-256:	D05C6EECE255484BABBEDEB74B3A5B19DAAA9763049E08362B82CFDF1FC8BFBE
SHA-512:	3A2F98E778FA0F19261CBC75972FA2C0C85D4723239D853ED44A27C82B9BFF98327F811FA2303211043BB549CE19047D200D070E12A283807B0470BAA1CA6451
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/tracking/secure-auth/utag.4.js?utv=ut4.51.202108231941
Preview:	//tealium universal tag - utag.4 ut4.0.202109221726, Copyright 2021 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<35){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(this

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35846)
Category:	downloaded
Size (bytes):	35889
Entropy (8bit):	5.4796256266817025
Encrypted:	false
SSDEEP:	384:y8QkSSXI2OCj27cj1Dfo2Y2rJLO+Pv5H9AeHAmvApNkStktL5/CohDAI5jUWZ1V0:y8/Sip1g+zAL1NkW01jZUT0dX2knK
MD5:	0A40602DB7616A31C9DA4548EE920190
SHA1:	878E01CB0C90CB247AABC137327655A6FCFFCBD5
SHA-256:	6C771BD1C269646A76015F2F6410A40C031E5ADEA88F665BFE9AE15A972AB6AB
SHA-512:	F300EF35835CCFA6CDE375B24BD2DCFC8374D6E698E857431BED0404D5DD3634E09C92A0EFA7F2015B92A80831C06AE7363F2EBF8407854E04D2970B8363EB48
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/ga/ga_conversion_async.js
Preview:	// ga_conversion_async.js - 20210826102720.(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object")}var ca=ba(this),da="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),t={},v={};function x(a,b){var c=v[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}function A(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in t?f=t:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&"es6"===c?f[d]:null;b=b(c);null!=b&&(a?l(t,d,{configurable:!0,writable:!0,value:

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (350)
Category:	dropped
Size (bytes):	4354249
Entropy (8bit):	3.624143056023977
Encrypted:	false
SSDEEP:	12288:CfLeSqzRTTVqdndI11h0fip4T/laQgeGOTnHdZuu:CQTVqdndq4TtaQgeGOTnHdZuu
MD5:	8EE41D7C05B84DAE84A46E16D2006AD8
SHA1:	ED9F0AEBBB27F2577E2B0397B2AEFDEDFB36770C
SHA-256:	A9826332063FAC41AD4EF1C3B930DDA48F73961380CD1B1F9BD81AD1E51C6E1E
SHA-512:	71D27565327B667340A8BF5B36D933F8679E616DAD4AE4444E2825CDC60718F3AF660FC8B0E498F7B8F07068D7DC699F43CF4F88206ECB5B9DA7AA4CEBB810B2
Malicious:	false
Reputation:	low
Preview:	{. "admin-config" : {. "siteID" : 10006005,. "chatSkinFormat" : "json",. "noJSHosting" : true,. "noChatFrame" : false,. "clientStaticUrl" : "https://wellsfargo.digital.nuance.com",. "cacheSolutionEnabled" : true,. "cobrowseSettings" : [ ],. "businessUnitDictionary" : {. "19001160" : "10006499",. "19001161" : "10006500",. "19001162" : "10006501",. "19001163" : "10006502",. "19001164" : "10006503",. "19001165" : "10006504",. "19001166" : "10006505",. "19001167" : "10006506",. "19001168" : "10006507",. "19001169" : "10006508",. "19001170" : "10006509",. "19001171" : "10006510",. "19001172" : "10006511",. "19001173" : "10006512",. "19001174" : "10006513",. "19001175" : "10006514",. "19001176" : "10006515",. "19001177" : "10006516",. "19001178" : "10006517",. "19001179" : "10006518",. "19001180" : "10006519",. "19001181" : "10006520",. "19001182" : "100

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	downloaded
Size (bytes):	106326
Entropy (8bit):	5.52689299206484
Encrypted:	false
SSDEEP:	1536:HeaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYJUhZ:+aQaOYw58ISTT4esfbw3h9N+rKW
MD5:	AB34788BB0FF19E7DA8AE85A28C60EFE
SHA1:	05756134A382E3CE923D55C033C07E91BE60E7B4
SHA-256:	1EEDA03EDBC2BB72AB44077BD30E718F3A9B2A2DCB493B9CC05976A2A1D7F2EC
SHA-512:	01602FC7ECD215E43B0081B853A5C35618E10436BCE6527FDE255981AEDFB701CA37DEB38FEB5D7EBE426851EAF90AE6FD1442C83B0C47767D05E8DFA6DC5E5A
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/ga/gtag.js?t=AW-984436569
Preview:	// gtag.js - 20230830115644.var GTAG_TYPE=function(){var gtagType,currentScript=document.currentScript\|\|function(){try{throw new Error}catch(err){var url=(/at [^(\r\n]$(.):.+:.+$$/i.exec(err.stack)\|\|[])[1];if(url){var scripts=document.getElementsByTagName("script");for(var i in scripts)if(scripts[i].src==url)return scripts[i]}}return null}();return currentScript&&-1!==currentScript.src.indexOf("gtag.js")&&(gtagType=void 0===currentScript.src.split("?t=")[1]?"CORE":currentScript.src.split("?t=")[1].substring(0,2)),gtagType\|\|"CORE"}(),GTAG_CONFIG={CORE:{id:"",salt:"ChAI8N/yiAYQ/sLpxs3R3/lOEhkAiCq8P5n+5Jl2lPYrrAqF+9CynSAMn5lfGgIrEQ==",name:""},UA:{id:"undefined"!=typeof utag_data&&"RETDL"==utag_data.app_id?"UA-19597165-1":"UA-107148943-1",salt:"ChAI8LztiAYQr7+BrOKYjbQiEicAfMDsaWrMhkFBMPGo10w27kKCufDm4bQPQHPe48IJzu3RQ+BdEMUaAsgU",name:"c"},DC:{id:"DC-2549153",salt:"ChAI8N/yiAYQ/sLpxs3R3/lOEiMAiCq8P0qN5GDJNKlTfLLeTfVz4qOpT6tg/+q6HwGf3lZdJxoCdtg=",name:"c"},AW:{id:"AW-984436569",salt:"Ch

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22424, version 1.13107
Category:	downloaded
Size (bytes):	22424
Entropy (8bit):	7.991719692427671
Encrypted:	true
SSDEEP:	384:ZWomH3hR7XCKb7GSa5mSWAmtXnCe83/17wdTgm6keJR60vqy:ZWDL7va5mSWbn4cdEmhJvy
MD5:	0A1639EBE9FAB396657A62AA5233C832
SHA1:	9B58164729AD918DD7255E4856F9DA7F3A90BFDE
SHA-256:	631F3B6267A831A8D67C45E480B5D5A2601F10FF8708BCF3A45A41B377A129CC
SHA-512:	A3786F7C1188BCBDDCABE54E40DFBC77D842B1A19D2CCA56CEDAEB3C1A8126B3C203AC8B6297268C94AEDF270BE2B822AA8AC0DE9E1E5C6D42BC7866324D8128
Malicious:	false
Reputation:	low
URL:	https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargosans-rg.woff2
Preview:	wOF2......W........H..W4..33......................V..V....`..,..r..W.....T...6.$..x..>.. ..b. ..m.1.'p.S.._w.(U....L6...J.9.t2..8..../.......b.<.......M..-......>.NC.02.6..NY.W._u.. ..&?x~.....d.:..{..TnxSy.hi...KT.?...&}./v..K..>...........j.o.."oiIi..&...=N....,a,q...p.+......E....3>.HuT...:\|.C..q..Ug.L......y...0.[].....3G.n..{!.I @.-D..!..@.rX..y..H....Q.!z...X.r...R.ST..Qj(...Y....i.>..nVKju.m.my.{.UNf...;.OxD...6.>. ..8. .(.......>}k.F.8....QSp..^....}..Zv........A.9....H./.x;T...jtX...C_....-qy.B.s.4`..UJ.L..Vez\|.k'..).r.\."Y).....~...,P..(Q....).{.#..@@...=..../..~..w..o...y.e.....l...M..B..)...O.d...)v....D..&......q..Y.Y.._....c..q;........Dk......I.H....fn..._w...^..v.'.y.E.....6eg.......Q...&i......E.<....vj.....r...(.S=}......0O..... ...T.B..d...o...:.%.o....%$P.=.....H..S...s.R......EX.....$.3@Rg.R.... 1......y.C. ..8.p)9...s.\..s.quM.2..r]..w.Je_....V'.g..,..0.z.q..P..5.(..*Li.....Z......:!S.._}..h$....!..$:..A$.F..sH....Uj.Hf...a...o..,.

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1090)
Category:	downloaded
Size (bytes):	4560
Entropy (8bit):	5.314921149828292
Encrypted:	false
SSDEEP:	96:nbcnP4ReIZB/oFiyjyVypxl5EuLbWJUU+Oh5/cC:nbcnP4gIZqdGspx3EihUJEC
MD5:	389A2B5DF08337C70ED0EC2795EFFDF5
SHA1:	169CDA9EF1FC39D810D2B4D99D9621A13C1DA795
SHA-256:	050E2AA89C3945FA04373C714347297146ADEBC89EFFA9E41C0DF8090BA0ED51
SHA-512:	B9E91F5140BFE2BECD680B4CF017BCB85F9212FD05C539E93DEF2188A9EEBE5F951617B7560CB3EDB7FE2C850CBCBFD84374DCA21287BCE4733D452373182BBB
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/tracking/secure-auth/utag.21.js?utv=ut4.51.202310311820
Preview:	//tealium universal tag - utag.21 ut4.0.202310311820, Copyright 2023 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.loader===undefined){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(this.readyState=='complete'\|\|this.readyState=='loaded'){this.onreadystatechange

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Non-ISO extended-ASCII text, with very long lines (63482)
Category:	downloaded
Size (bytes):	101271
Entropy (8bit):	5.407405047888995
Encrypted:	false
SSDEEP:	1536:suWQgJ9r5zCrOgD8VVw2QTMLoJjFiCzNOYQXkz4bkHVtocMIQ:sxzCrOgD8kdcoRlu1bk1WB
MD5:	3F2DCA23E9684E29203AFCF41962DE58
SHA1:	7FBC790E646CAB74361CCC22D397D8956B91342A
SHA-256:	7286FBF4E21DECFD53F8D7A4BE89BFD8910CA13CD8FE6B0A9CC5DA3D17663B5E
SHA-512:	EFC1BDA7C8144B73DD1D33B4E8D82CE487C0CABA94BD1CA69926AEEE22C6D5F5AF98BBFC8EC8C78A64B251049F4A907BC9EF0AA515C3CABBD3D9B9BF41E8FEB6
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/public-site/utag.269.js?utv=ut4.51.202206232058
Preview:	//tealium universal tag - utag.269 ut4.0.202206232114, Copyright 2022 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag===undefined){utag={};}if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=function(o){var a,b,c,l;a=document;if(o.type==="iframe"){b=a.createElement("iframe");b.setAttribute("height","1");b.setAttribute("width","1");b.setAttribute("style","display:none");b.setAttribute("src",o.src);}else if(o.type==="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";b.src=o.src;}if(o.id){b.id=o.id;}if(typeof o.cb==="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatechange=function(){if(this.readyState==="complete"\|\|this.readyState==="loaded"){this.onreadystatechange=null;o.cb();}};}}l=o.loc\|\|"head";c=a.getElementsByTagNa

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	9198
Entropy (8bit):	4.53575154289712
Encrypted:	false
SSDEEP:	96:WlldYhV6u7LspZ50p/SwoE56nzTDmyzpCdukvC:WPdk6u7L85USwoLvZyuk
MD5:	CD112F1ACB59EF6E59E09C0EFFD8CE2A
SHA1:	BC104CD92ADC32A8F695300D2B0CC69C2776F6AF
SHA-256:	6780D0B2BC67397895EF7B8845261EEE7B9B22610B026835362128942DA5FB7C
SHA-512:	4ACA546509ACE5BA9DD09D6ECD7E112CA012E672E1F7ADB1D514EE7F52FB896855ACD08101E2C96B555B4DD8410576AFC486518B7407185C7AF215DAED568B38
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/icons/favicon_16x32x48.png
Preview:	............ .h...6... .... .........00..........F...(....... ..... .........................(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...'...(...(...(...'...(...(...'...'...'...(...(...(...(...(...(...3)...%..'...+!..5,..)...+!..8/..:0..4+..(...(...(...(...(...+".......... ...`Y......?7..7/..........xr..&...(...(...(...%...E>..........)!..........mh..............-&..$...(...(...(..."...up..........UP..................\|v..........[T..%...(...(...$...........zv..........XS....../&..{u......vq..PH...%..* ..'...<4......mh..KD..........+#......YT...z......,&..<5......9/../%..............:3..........NG..............................8...* ..<3..B9..@7..!..90..1'..1'..B:..C:..C:..B9..D;..C;..<3.. ..(...'...&...'...(...'...'...'...&...&...&...&...&...&...'...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(.

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, progressive, precision 8, 227x125, components 3
Category:	dropped
Size (bytes):	8846
Entropy (8bit):	7.8446544509121505
Encrypted:	false
SSDEEP:	192:Z9orhJd5lnzTarJAQuiluC2SAzw9+jj4fdgvOhwluH284Pn:k11lzTeAQuiwCHAzbjuVwleP4P
MD5:	486AC437B3C9BC9C954C55BD549B4808
SHA1:	99DCF35E5F31ED71464DE2211E4C5C600A79C352
SHA-256:	92D5873493D76BC84698C21D03438909D82AF4DCB080A22C3997A07D96509D65
SHA-512:	288FC6460A76CF4BD1278CDD0FC18F5EC610E92D6C062ECC51A71FFC9AE2B52D40530706DE66A3D856121851ADA1D8ED73A76D7A144AC175DECDB8CB11DBF003
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..................................................#....#)" ")1,,1>;>QQm............................................#....#)" ")1,,1>;>QQm......}...."..........6..................................................................ed.O.u....1.........Jd;...G.z$n.{.{.mx..;.}..........S..n.j..6.-..._.[..@qt-S......EkK^x..^r....Cwi.i.q?C..4{Tf.w....w]_..]<.<q../.G...>....a.........6gv.~..#..I..[.&.`....L.[.. ..Z.u(.8r..9..!..Q.Rq...

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	26587
Entropy (8bit):	7.98976943305458
Encrypted:	false
SSDEEP:	384:rRC41v96YkaOBLdtMaCMz29kCYKSREKAzJAC3QcmAVbS0T0ZvWLWsLslT:99cYkZLdPCa29kCY/REnA0mOS0aCYlT
MD5:	45A212CA9ACC61F0BB2570FAD9B1EF6D
SHA1:	0766DA6ABE3D736412CEBA81A699A55110FEB6B5
SHA-256:	99DADE4264E8D662C215BF128F8911BF7E53123D661D9783C0A4260970FD51FB
SHA-512:	20CB40FCB10A7C81A8A2FDE7302AA3759CB9B7B735AAAE2D15FEFF293232D7C645945E3BE098284D6A77F6EED6397BB56872BDAC8C10AE301A88F27CC6896A87
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/contextual/responsive/smlpromo/wfi000_ph_g_482407060_616x353.jpg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@..................f....#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe.......h...a....pixi............ipma.................f.mdat.....f&{......2....p.E.Q@.2s"D......x.3.y.5QWv..A9m.@.L.K..7..%..P....BG..z..qM..F.)."^.q..34..C....kt..[...Q....Y.d.R.@!W./\|...5w.-.<...n..5..........q..F.....aT.O...oG(,.A.n..}.n....Y...(.]_.x....}._..R..u.x<W....@.gz%....@.....:(i.?m.g...}...J.?W1..D...._Z...F........ u.\i.y...@4...:..5.n.Pw.p...jz..f}>..S..7.....t.....:.?T.TEz......;i............J...J.....n.~M.../<...%l/C8V.y..c..&.vm.....j...!.=.N6.=........K..{.....;.)...q...0..m...,.N..,m...3......[c{./.b.Zs/.Z..Ho_m.U.oI.... ...y..h..f..E..)..=.....[s{...Ui......qn......5...7...{......#...`....\k].0......m...C...i..E...1.....d\|...7e5I..r...q`./.$^.;.W..r.P...&U2z~..p.F.p...m.&"`............eZ.W&..".{..).../.....Y].0.u..I....

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	30860
Entropy (8bit):	7.990919394367342
Encrypted:	true
SSDEEP:	768:YMLdcbVUeLRWS7B5+K0xpI4jMBYHukE91yoHbRXOl8GJ:YYcZNJ7aK0nI4jMOHukAXOHJ
MD5:	6E75964FB01AE452F65C9FA41CD3326E
SHA1:	1A0909CC3F5290BB291F4D35ABDC4DF63767EF9E
SHA-256:	417DF9B440B214AA81B429A205291AFB424C1AE8A3C9143DD22E17BEFAADA5E2
SHA-512:	0118F850245C5860CDC895A7615D923207957027A835BCA45AFF405B936D6DF1BC67E71F8533B64D113E63EB25412D9ADE9AF7468042965FB738E8066D88D21C
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/rwd/women-in-greenhouse_616x353.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@..................w~...#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe.......h...a....pixi............ipma.................w.mdat.....f&{......2.......,.@.+R...8.{.:h..`b...Z..=.kO.Tr$.>..\B..(G.q..4y.R...K...........KK.....B..yN..sJ.y.Z...n.V.2.../..6~.z...LGY9 R..n..-\......D+.59......?R.....j.O......K&...).Yb...B*.C0X...m_v.b.\|y..VRmR...00.z..]'E..g..#..[.....@M...-~U5...b.]....p......:...T...s.........]u.E..KH..p....8.1\f..Z.xx....v. y..t.2.!y.$.&.f.<..._.a..,...k....U.{......-./.ahIF.e.....BV...m...D...I.......Z.))O#f....j.....i..jl.x.._.^K.ZlVjYrQ.IB.EW.h.....p4..h...9.A.d../c.....8.;... ..} .Lf_KC.>..s}.......v.c...vf..5S./..;..#...-7ulJ..h.g.....6...6..{...,..AL.QZ..xt..H.%..0.H.>Ku...Y......n...?/...D.2Eq..ho.n....d..0..X...u.:.~.N..[&.%..R........>.g7....\|..k....u.v7D..e..{c..w].8..q...M.............hZs..+

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F&cb=1711631936556&offerType=iaRendered&slotId=WF_CON_HP_PRIMARY_BNR&offerId=C_ccd_tk1autographjourneyrspv_hpprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-311164-16%7Etcm%3A91-223657-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	7530
Entropy (8bit):	7.917310622880141
Encrypted:	false
SSDEEP:	192:rGstWZrMejH96LPPFjLjG0YFPIkK2jkLQdnKBGbDBiJNFFQ:ryZr50HlZsAA7NCDQ
MD5:	7B5B18B199D8782A95BD789DF07EF9B1
SHA1:	DC3B5C9907F9DDA8A9A006D7A490C82927F49ECA
SHA-256:	F1C4E5FF6DA873D66B9C1B1E3DF690FFC432112A2A82AD61509567EC3F0DFC30
SHA-512:	4A374A91596ACF8E9F8A6687E35D9B70EF1D3254482F80A2599333C5D5A8B39BC1033E70FDA55E0D2E82B5E54910C0121FFAAF5E3E1C392D2EC853150A053EE3
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/rwd/Native_App_Phone_Personal_v10.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@.........................................8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe.......?...{....pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe.......?...{....pixi............ipma..........................iref........auxl..........mdat.....bg....2.....(P.+.!c.9...2l...S(.......T....L.....6}x.scI...&..7.%..G.....!&..g.>.B..(n}...vn.........=..d?..s...@...#...t..C6....6%F.....W.oz.D.p.a.e...s..]..b.>......b[.....N0.[.`D..6.......J.HO..o....h.}...Y..T7....N!9...y.F...../......{U=.....&..T.].w...@[..4.O..([`:..@..............G......e..,....Hut..(.m."...Z.d(?@M=...%RH........{...8.......2s....P...r.xc.#l...D.'U.Y.....3..F. T&..=.,zH.+....X'.. ?.....{.I=....Vi....d....e.{..S.x9......W...bG..^.....u.f....n2.^K.,v6.....bg.......2.3L...n.....<f....O.....\Y..

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 227x125, components 3
Category:	dropped
Size (bytes):	4922
Entropy (8bit):	7.9039005861577465
Encrypted:	false
SSDEEP:	96:/8EgeNr/XhC1GzcstS7hIC7J3iIYoiUA/RGfR3iIrT/sue:/8dkAsslIC7J3dYPpuvrT/m
MD5:	B8DB53B9FBCB0C63CACB184C9590525A
SHA1:	D47FF314F86B3AE82917B8AAD38C326E7893A674
SHA-256:	57A8A270EFECB173166F43EA60FE9220710BC436D83F56C4CDE6C07A63F42B7B
SHA-512:	1EBA4124BEFAAC88484659C71A4D91C8EA42C815029FB737B8A531BA764F727D1BCFF075DACD42E366AD0A3B851C1538ACAC5D18073D888DFE75860ACD2FCF55
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|.......}...."..........3..................................................................X........W.....2If....\H..pI,d........Q.4..Bu.+Q.+K..x........X5.+...-..Q.&...c....../9..Z.!\|.D.-..H.L....W'gQ...(.Yq...S.{4k..C...@.9...5.y.M..,.d..&r...".S..V.]./._G..%/T.s`..;.H..^..".V]...G..."1...:.&.U..U.G=.T...E.......C.c.....7q...../.^\|$..K.....eiC:.J.....Ok.^.\..F.}...h..0=P....D...%_".B..zC5....4n.5.....u.J..w-qB.~..."}\......<.+.R..Ec!....-...u@j.R6...}.2./...}.....o-...eZ..J.1...Vp.k....~.8..P]..hY...#&..PX.]..o.OEh.7.. y.-...k.)).<........Jh..C.J..~.g....3b.......J(.........y.....y.....".h.7...e...Z.....Mzxz...K~Oa.l]c8.sA.r...-._...,..............................!1."203AQ. $............c._C...o......R..5....3...}O.-\.R&.{..Q..b.w#$..9.i....0...l......c...H.....7.R.*..n..X3...~W@"...)rj...\.W.[..

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (995)
Category:	downloaded
Size (bytes):	5110
Entropy (8bit):	5.324519219154127
Encrypted:	false
SSDEEP:	96:GbcnP4ReIZB/oF1PuLNbNyPyZyrA+KH2paJUU+Oh5/QH:GbcnP4gIZqzPiqaorA9H2jUJYH
MD5:	9DBBFAC68ED93D4BAD2520FD8494CDBE
SHA1:	72693717CC1D02E108B059324B885EAD83B99CD1
SHA-256:	0745C80E3916F08A2CFAA9B97CFC7F505C885104A99127D905EF9F9E0969323D
SHA-512:	7B0B02853EE381221819CDAAE58FCF1A0DE7CE62355634D4F3898D7DCA3DDC31AEA072370ECB540BC33403E05D89FC3BA889C86C8D5906950DC136CC124C7A67
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/public-site/utag.483.js?utv=ut4.51.202310311854
Preview:	//tealium universal tag - utag.483 ut4.0.202307272146, Copyright 2023 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.loader===undefined){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(this.readyState=='complete'\|\|this.readyState=='loaded'){this.onreadystatechang

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8157)
Category:	downloaded
Size (bytes):	12863
Entropy (8bit):	5.2637226616028165
Encrypted:	false
SSDEEP:	192:N+E0MoSoz4oEjIqLaIM7LQcqaz+nfmR54MGQ+Xa7B9Mf19O9IeK+bk:N+dMoSo0n0q+I0MpVuH4MGQw6K90mem
MD5:	CD1E78CFE215C69E4A3A10F4B7D9DC50
SHA1:	4C2680573974566C69033732B36F1CF9463E7A2D
SHA-256:	1A66DC84A41804E2322B5EC09396983AAE3B03ED6BC7C70F82A6AD2127E743E1
SHA-512:	8B68454A8856502EDDE7B8FD6D85D4EB95D7CFF6B6F82C5BFC54A25F044586053FB5BCA30E8AE9D9FE88705F603A34896BAB707115A1F0695667F1665CA48FDA
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/locator/public/js/balloonHelpStandalone.js
Preview:	var WF={};$.each("address\|article\|aside\|audio\|canvas\|command\|datalist\|details\|dialog\|figure\|figcaption\|footer\|header\|hgroup\|keygen\|mark\|meter\|menu\|nav\|progress\|ruby\|section\|time".split("\|"),function(idx,val){document.createElement(val);});$("html").removeClass("no-js");if($("html").attr("class")==""){$("html").removeAttr("class");}var assetsBasePath=(typeof akamaiImageHostUrl!=="undefined")?akamaiImageHostUrl:"https://www17.wellsfargomedia.com";WF.Browser={};WF.Component={};WF.Strings={"Components":{"BalloonHelp":{"beginningOfPopup":{"en":"Beginning of popup","es":"Comienzo de ventana emergente"},"endOfPopup":{"en":"End of popup","es":"Fin de ventana emergente"}}},"Shared":{"beginningOfPopup":{"en":"Beginning of popup","es":"Comienzo de ventana emergente"},"cancel":{"en":"Cancel","es":"Cancele"},"close":{"en":"Close","es":"Cierre"},"continue":{"en":"Continue","es":"Continúe"},"endOfPopup":{"en":"End of popup","es":"Fin de ventana emergente"},"item":{"en":"item","es":"ítem

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=703-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&cb=1711631971841&offerType=iaRendered&slotId=WF_CON_HP_PRIMARY_BNR&offerId=C_chk_digitalcashbonusrspv_hpprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-251670-16%7Etcm%3A91-223657-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35581), with no line terminators
Category:	downloaded
Size (bytes):	35581
Entropy (8bit):	5.2838776561511445
Encrypted:	false
SSDEEP:	768:fyiAsKzmv/QKbgnfUf++qjR3DVb7INWYjXetOTOdlp8WYrn6XnFpSRzv3irWAQam:02Kp2Pt7Qy/yqB1b
MD5:	D85CCACB0EB9D3218E83A08541B6A977
SHA1:	BD3126B49E5A8578E5FC22526AFEBEDCED2594CA
SHA-256:	4488001E86DF8792B6F5257B19992D470BA5DC37288E6407810B19F3901AB4A5
SHA-512:	319E28CD059894E90DD9BA1797A567637C1226B8C77048BF59ED838A369E6C13D699B651272BF4EAD0BDE34B1058DF4FC42EE4A4EFE90ADD6CBD0F418FBADCBF
Malicious:	false
Reputation:	low
URL:	https://cdn.schemaapp.com/javascript/highlight.js
Preview:	(()=>{"use strict";var t={417:(t,i,e)=>{Object.defineProperty(i,"t",{value:!0}),i.endpoints=i.i=void 0;const s=e(734),n=e(983),o=e(131),r=e(846),h=e(989),u=e(844),c=e(20),l=e(116),a=e(675),d={o:"https://api.schemaapp.com/markup/markup?url=",h:"https://api.schemaapp.com/query-service/query",u:"https://apitst.schemaapp.com/query-service/query",l:"https://cdn.schemaapp.com/",v:"https://hunchwww.s3.amazonaws.com/",p:"https://data.schemaapp.com/",g:"https://datatst.schemaapp.com/"};i.endpoints=d;class v{constructor(t){this.m=t,void 0!==window.location.port&&""!=window.location.port?this.O=window.location.origin.replace(":"+window.location.port,"")+window.location.pathname:this.O=window.location.origin+window.location.pathname}P(t){this.O=t}createPattern(t,i){const e=[];for(const s of t)null!=i&&s["@type"]!=i\|\|e.push({type:s["@type"],members:new Set(s.members)});return e}static T(){return Object.prototype.hasOwnProperty.call(window,"schema_highlighter")?window.schema_highlighter.key:""}stati

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1264)
Category:	downloaded
Size (bytes):	6626
Entropy (8bit):	5.304486386506096
Encrypted:	false
SSDEEP:	96:vbcnP4ReIZB/oFb1ZRhWwteJU5+Oh5/XNw9FNw94o:vbcnP4gIZqp1ZRhWwf5JPNwXNwmo
MD5:	FE45A8355E82D56534CF6AF627A0D85E
SHA1:	2595B4DC5932DC01AD73574BDC1C7D4D910307BB
SHA-256:	4B33AE0554A8FA1AB2B32A6B41BCE92ABE4B0FC7F70C24F458BCA6D00F6601D9
SHA-512:	2A2FFCE1F1DAB738B54A2762A37E90950D428C14B3B13483D131CAEE2F8C8949310F1D3A9000E3B238F9DD4D0972F52259AE8EC1E183A426A2C81227F5192E72
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/tracking/secure-auth/utag.5.js?utv=ut4.51.202311272156
Preview:	//tealium universal tag - utag.5 ut4.0.202312270312, Copyright 2023 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.loader===undefined){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(this.readyState=='complete'\|\|this.readyState=='loaded'){this.onreadystatechange=

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=2549153;dc_pre=CP-j74KGl4UDFVMRdgYdAY4ITg;type=allv40;cat=all_a012;u1=1120240328061851126288949;u4=LOGIN;u5=n;u8=loginapp;u11=PROD;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ord=7018165804944.119
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 9 x 58
Category:	dropped
Size (bytes):	432
Entropy (8bit):	6.556547792224034
Encrypted:	false
SSDEEP:	12:EiQsq8xlArdMH2eeuWHA1JVR7YIFOgKuYE:Ei9qmlMdu2WvJVR7YIMDE
MD5:	AA4C4C4BCDB0441E936A57E8909017A7
SHA1:	776D81B1F2B714941ECC76548DFA3E4EE8E3DBB5
SHA-256:	08D3C7E86B8ED5101D92155126292566310E0CC8B7DE244AA1BA20530D26A592
SHA-512:	C0172DA68CCECA7D70F5694268727538773745B6370948D0EE532F7699EA6DD6EF71206E1C5DA3D5DDADE2F82587436C021F1AA3440EB8E70AB23E84C91B4F37
Malicious:	false
Reputation:	low
Preview:	GIF89a..:....................................................................................................................................................................................................!.......,......:....@.#.I.....BL$....B,,.....f$GPFP...."U`.-. ...%...)..'$.# .Os...'.s'..' ...sW...))"x)...s...C."...........).D...3..")........"...338.....8.:88...:676..:7.73.7..........:........H......\.......;

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12669)
Category:	downloaded
Size (bytes):	366684
Entropy (8bit):	5.585350357335179
Encrypted:	false
SSDEEP:	6144:3FAZITzoboAd4NL7zCd76s7YMX/ZL+R80UJVCR:3FRTzZACNL7zG7NX/ZL+R7
MD5:	2958FA8632F4E7FE1C36491190E096AC
SHA1:	F4AC8DAA366486713759EFB62950C5517F310D41
SHA-256:	6AA606ED689E61A4C9C959C43E8B66EBA4C943CBABFB39A8DA74F4A3A0D24C44
SHA-512:	6E0776A2330413ADC781AA03DDEA52BB2AD5E198B6B5C1BC40352A6648A4514065D22E733E620F525B47B3BD2C456D8D30D6952D68A252EFA60A561905AE8704
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/medallia/wdcusprem/57907/onsite/generic1703025661264.js
Preview:	.(function(window){window.MDIGITAL=window.MDIGITAL\|\|{};window.MDIGITAL.version='2.53.1';})(window);window.KAMPYLE_CONSTANT={PLACEHOLDERS:{URL_PREFIX:'https://resources.digital-cloud-prem.medallia.com/',USERSNAP_CDN_URL:'//screencaptue-cdn.kampyle.com/',USERSNAP_HOST_PREFIX:'//screencapture.kampyle.com/',COOLADATA_SRC_PREFIX:'https://resources.digital-cloud-prem.medallia.com/',COOLDATA_API_HOST:'udc-neb.kampyle.com/',USERSNAP_V4_HOST_PREFIX:'//scp.kampyle.com',USERSNAP_ONPREM_HOST_PREFIX:'https://md-scp.kampyle.com/',USER_AGENT_CLIENT_HINTS_LIST:'["brands", "mobile", "platform", "architecture", "model", "bitness", "platformVersion", "fullVersionList", "wow64", "uaFullVersion"]'},SRC:{OPEN_SANS:'resources/form/FormBuilder/vendor/fonts-googleapis/css/open-sans-v14.css',COOLADATA:'resources/onsite/js/cool-2.1.15.min.js',OOPS:'resources/onsite/images/oops.svg'},FORM_HEIGHT:'450',FORM_WIDTH:'450',COOKIE_EXPIRATION:365,DELAY_BETWEEN_TABS_TRIGGER_MS:550,DEVICES:{DESKTOP:'desktop',MOBILE:'mobil

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2771)
Category:	downloaded
Size (bytes):	2797
Entropy (8bit):	5.280589076753442
Encrypted:	false
SSDEEP:	48:5FZp/sZ3lYQK7ArfSM3eI+bF1QkMSsKclMtPp/7FKgAs3te6N5vD9T5AyNBP:jf/6lkUrff3eHLhMSs2c67b9xP
MD5:	0AE62A83927125E9B9DFA97F89AF9D3F
SHA1:	EFB68F49F2B9B6B5567BF26A17015EDE289E429D
SHA-256:	618688D9849FEF712931832C71E01BE145D1791D6DA917A702AB86A74CE66089
SHA-512:	F568EFBA8E55B52E66BAA9AD4D9E3CA8FC0B95B002C57583FD58701C7FFF2424A4DD81CDAB21A4F8FC1EF5B27A691CC054FD434087F4958197F45C7625D5F0CD
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/ga/ec.js
Preview:	// ec.js - 20210826102714.(function(){var e=window,f="push",k="length",l="prototype",q=function(a){if(a.get&&a.set){this.clear();var d=a.get("buildHitTask");a.set("buildHitTask",n(this,d));a.set("_rlt",p(this,a.get("_rlt")))}},r={action:"pa",promoAction:"promoa",id:"ti",affiliation:"ta",revenue:"tr",tax:"tt",shipping:"ts",coupon:"tcc",step:"cos",label:"col",option:"col",options:"col",list:"pal",listSource:"pls"},t={id:"id",name:"nm",brand:"br",category:"ca",variant:"va",position:"ps",price:"pr",quantity:"qt",coupon:"cc","dimension(\\d+)":"cd","metric(\\d+)":"cm"},u={id:"id",name:"nm",creative:"cr",position:"ps"},v=function(a,d){this.name=a;this.source=d;this.e=[]},w="detail checkout checkout_option click add remove purchase refund".split(" ");q[l].clear=function(){this.b=void 0;this.f=[];this.a=[];this.g=[];this.d=void 0};q[l].h=function(a,d){var b=d\|\|{};"promo_click"==a?b.promoAction="click":b.action=a;this.b=x(b)};q[l].j=function(a){(a=x(a))&&this.f[f](a)};q[l].i=function(a){var d=x(

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	593
Entropy (8bit):	7.059279390524087
Encrypted:	false
SSDEEP:	12:6v/7+OnoY74n07GZThfVNlGyASQve1g0JNKWYB2DtpsF9QYY:yoZCGZ3XlTe0JIWYB0pUQYY
MD5:	DEF37D254D673B4697656E0020E2B076
SHA1:	9ABB54AF2E5FCCA7F6DE0CFCF8F92791F8210A72
SHA-256:	CE15171C0AF80138AEEA2153695965183320A4015211AED567C769CE3FBEA40D
SHA-512:	00DB9D17F24C3D76BA00411B7A9926328B042AC900E415F51DB3E94E5B045664E72319DE138C1F24D53CB86DA8EE7778310C41A7B66845CEE307E66913D52AA9
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/rwd/icons/tab-table-icons/checking-1-popular-star-OFF.png
Preview:	.PNG........IHDR...0...0.....`.......PLTE...f_]g]\h``h\\f\[f^[e^\f^\h`X```g][p``f`\e^\f_[g\Ze`Zf]\f^]e]\f^\h`\e]]eZZp`Pd\\c\\f][e]Zf^[h]Zg^[e^\f^[f^\d`\g_[f^\f^[g^\g^^f^\...t...*tRNS... @... ...Po..0...@`0.@Pp`.`....@.._oO}.......orNT..w.....sRGB........;IDATH...v.@.E.N.P...\...m.....\.C...q..sB ..._+-.{.."`m@....E...H"(@)I..(%...$.}. b.."<I@.......]....h...VrF..RA.b..S2...)..Yh.......lr..\#...kQ..P.....^.8Ux......Ox.?.`..g..>i.$../.."8.G....74s.....X...'.~.d..w....W.8.......o>...aH_...]N.+>.{0......}~HyJ......!..\.'D...L....l0d.!..j..<..:......pi..cV.N...d....IEND.B`.

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=222-145737-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fabout%2F&cb=1711631973156&event=LinkActivated&eventType=autoload&eventDescription=DisplaySmallCarouselItem&clist=182-147917-16~223-6266-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 27248, version 1.13107
Category:	downloaded
Size (bytes):	27248
Entropy (8bit):	7.981881212486688
Encrypted:	false
SSDEEP:	384:STtoIZY3e4U5v6xrAaEIZaUEgKdiSRtBmJOwvA74TJ7jQU0GHx3AnlF3uCD66:Sz2uj96xr/0U+PcqGQU0GR3CuCD66
MD5:	FF6C57CE65F6B9565134E775E8E02F97
SHA1:	9DC5C5603BDE97F09ECA9D4915A2A3CC0AFD5528
SHA-256:	49306EBC5E31624D95CA16E0BE08E32A73D163498E648A926E25F15027D9F5D6
SHA-512:	E3685C7961F64BC2CC751EA93A6AE298D3C7C604C04B89443F04142A8FAFC9D35FD1A0BAFB907251E1B9F9AB9DC6ABF5DD389740D545A89E0F1000B98EC078D6
Malicious:	false
Reputation:	low
URL:	https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargosans-rg.woff
Preview:	wOFF......jp.......D..33....................GDEF..W..........k/lGPOS..X....H..1V.K.(GSUB..d.............OS/2.......Y...`e.<.cmap...........,.#..cvt ...@........!...fpgm.............0.6gasp..W..........(.&glyf......D...tN.Z..head.......6...6.v\.hhea....... ...$.&..hmtx...T...`...x..B.loca................maxp....... ... .K..name..V........b6#\.post..W........ ...(prep...L.......m.;.i......33w..._.<............0.........1..................x.c`d``...;.........."(.......,.......K...K......./.a..........x.c`a.c............!.B3.b.`..`a.fefb."..........P.....p...7........0r...Ar.....)..a..].....x....-I....~.mklsm{..m.....m....I...C....9.......+.{.....}...I.......7.a...Z.......w...kU..T...Z..i.O..W...ezS....ug`.k.v.8.v.rw.f.n7....0m.....p.k]...k]..7Ae....j....S..V.~....o...5.O.3.Un4U..b.v.h..X..^..[..A.......<.L...r..s......5.7ju...S5.9.-.&...a.d..V(..N....6.I...0..,f4..j....5.m...A.n....e./...9.._..~.5.wh.?.>.D..u....}z...,.{X...7...x..{C...D.^...)..9+c^.h..C[..5).[.}'.[j._

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x502, components 3
Category:	dropped
Size (bytes):	12394
Entropy (8bit):	7.31012971322371
Encrypted:	false
SSDEEP:	192:dqL8A4PxImRGrLDcC2Hayo1gU5jCXm6CpGXJTnUIfw:MQAkRGr/cC2Hayo1gHXrXJTUSw
MD5:	2E30A7E99550D186BAF12B5BE34AE58E
SHA1:	F4F34A5700BAF4FAAF7569D71EF16D82DA79867D
SHA-256:	D61279080071DE570110A33A08930AD5EBB2BA5A2A1DA2064E8F9DB2B1C14929
SHA-512:	A120DF2EA402BB65AB2D5730AC945AD7D6CD64C92BDDACF490C94C41A99BD6BBEE98CF52100DDC17602AD0C3BD132662381D6E6F4118F337EC2594E545DC3974
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.................................................................&$&22C...........................................................&$&22C........8.."..........7....................................................................h....................................................................................................................................................................................................................

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1280), with CRLF line terminators
Category:	downloaded
Size (bytes):	1746
Entropy (8bit):	5.462732365713136
Encrypted:	false
SSDEEP:	48:QaOcv/K7DCO1JxHXMrW+gJxHXQWCm9F4l2lEqb:73/K7zFHXmWPHXQWf4lTU
MD5:	CB577436F67F5DFD4380C2C2BD489DCA
SHA1:	AA0AB27C6EA5014735881B0B9682B57ADC9A69E3
SHA-256:	839B252A917D315AFE88DFC270D8DC177076075B432F3A70E4FEBD695C22D8C7
SHA-512:	05BE1B2FD53863122729B2B5D9B58CE5D8D0D77D2661AF1661288C0D78EF57F36ED382EF852F63DF3A56D9AF959851CA69B236D1AAA49C1520E074F7028F7B83
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/public-site/utag.471.js?utv=ut4.51.202302020736
Preview:	//tealium universal tag - utag.471 ut4.0.202302021851, Copyright 2023 Tealium.com Inc. All Rights Reserved...try{(function(id,loader,u){try{u=utag.o[loader].sender[id]={}}catch(e){u=utag.sender[id]};u.ev={'view':1};u.t='@@',u.i=[],u.p=["//pixel.everesttech.net/px2/@@amo_user_id@@?px_evt=t&@@amo_event@@=1&ev_transid=@@amo_transid@@","","","","","","",""];u.cachebust="disabled";u.map={};u.extend=[function(a,b,c,d){try{if(1){c=[b['mpuid'],b['cp.utag_main__st']];b['amo_transid']=c.join('_')}}catch(e){utag.DB(e);}},function(a,b){try{if((b['app_id'].toString().toLowerCase()=='WWW'.toLowerCase()&&b['canonical_page_url'].toString().toLowerCase()=='/mortgage/'.toLowerCase())){b['amo_user_id']='2622';b['amo_event']='ev_MTG_ALL_Page_Mortgage_Adobe_Home'}}catch(e){utag.DB(e);}},function(a,b){try{if((b['app_id'].toString().toLowerCase()=='WWW'.toLowerCase()&&b['canonical_page_url'].toString().toLowerCase()=='/mortgage/buying-a-house/'.toLowerCase())){b['amo_user_id']='2622';b['amo_event']='ev_MTG_A

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (8030)
Category:	downloaded
Size (bytes):	22053
Entropy (8bit):	5.260867132803337
Encrypted:	false
SSDEEP:	384:TpH+7hCjTmhDAwdAfZiKQ/QNif0IIDWTXnmesUedQxSd0/YU:Td+NCjTmtAwdAcKQ/QckWLmeIdQxd/YU
MD5:	E350099DFDC1F2678CA8523EDE9BB4CA
SHA1:	55A5B7ED3A8D0F394F00394E057A87282B06F55F
SHA-256:	041871FB396A2814D37A81B615F23F3E41E6F1C1945D754CF763139F22048269
SHA-512:	F48142ADAC57FA6DD7F4904DC03FDA1EC9A4C960198FECED443FC357D5F704EDADCA1506BD4367C3514A35DCB072495B707993FEEC556A78FDA02E71C205782A
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/js/global/constructors/12Lightbox.js
Preview:	WF.Component.LightBox=function(trigger,options){if(!trigger.id){trigger.id=WF.Utils.generateUniqueId(trigger);}this.elem=trigger;this.id="LightBox_"+trigger.id;this.version="1.0.1";var self=this;var cache="",contentContainer=$("<div/>"),darkBackdrop=$("#c28backdrop"),defaultHeight=500,defaultWidth=722,destPid="",dimensions={},dir="",exitHeightAdjust=190,exitWidthAdjust=0,fadeTime=300,helperDialog=$("<div/>"),mainContainer=$("#c28lightbox"),margin=50,maxHeight=500,maxWidth=722,showHideSpeed=600,stdHeightAdjust=39,stdWidthAdjust=0,targetPageExtraJs=[],timer,videoWidth=775;var stdOptions={pleaseWaitDelay:1500,timeout:10000,onTimeout:false,postInit:false,beforeOpenFunc:false,afterCloseFunc:false,disableCache:false,isExit:false,isQuiz:false,exitPageDestination:"",noCloseButton:false,showPrintIcon:false,url:"",method:"GET",parameters:{}};this.addDialogCloseButton=function(){helperDialog.append('<div class="closeButton"><a href="#" class="c7 utilitybtn" role="button">'+WF.Strings.Components.L

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	539218
Entropy (8bit):	5.371745192783868
Encrypted:	false
SSDEEP:	6144:gHHffJedawxr8wWAnIwZTEGAYSjNqvfBKUHX6Ua5UPZafIeo28Pi93RkY8:gPAJZQG7f4fIeGifI
MD5:	83FFD347153EB7C5EFF2B98773CC3384
SHA1:	BA9F0AF575647C7668B67E9029B2104B216B7026
SHA-256:	46D3342EC6EF1F3DA751E4312426754199BB2394BF1EA80C87763B69670DA9CF
SHA-512:	46FEAA5FC25BD660DA892C7F753E25AF2EE7A63E076F0E3722370BDF4316608813AE217FA5535FD26AFF8BD9BA59E22E871D2459EC6BEB1E86ADB6ACD56749DA
Malicious:	false
Reputation:	low
URL:	https://media-wf1.digital.nuance.com/media/launch/tcFramework_jssdk.min.js?codeVersion=1710907168986
Preview:	var __webpack_exports__={};function Base64(){var _PADCHAR="=",_ALPHA="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",_VERSION="1.0";var _getbyte64=function _getbyte64(s,i){var idx=_ALPHA.indexOf(s.charAt(i));if(-1===idx)throw"Cannot decode base64";return idx};function _decode(s){var pads=0,i,b10,imax=s.length,x=[];s=String(s);if(0===imax)return s;if(imax%4!==0)throw"Cannot decode base64";if(s.charAt(imax-1)===_PADCHAR){pads=1;if(s.charAt(imax-2)===_PADCHAR)pads=2;imax-=4}for(i=0;i<imax;i+=4){b10=_getbyte64(s,i)<<18\|_getbyte64(s,i+1)<<12\|_getbyte64(s,i+2)<<6\|_getbyte64(s,i+3);x.push(String.fromCharCode(b10>>16,b10>>8&255,255&b10))}switch(pads){case 1:b10=_getbyte64(s,i)<<18\|_getbyte64(s,i+1)<<12\|_getbyte64(s,i+2)<<6;x.push(String.fromCharCode(b10>>16,b10>>8&255));break;case 2:b10=_getbyte64(s,i)<<18\|_getbyte64(s,i+1)<<12;x.push(String.fromCharCode(b10>>16));break}return x.join("")}function _getbyte(s,i){var x=s.charCodeAt(i);if(x>255)throw"INVALID_CHARACTER_ERR: DOM E

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65428), with CRLF line terminators
Category:	downloaded
Size (bytes):	495700
Entropy (8bit):	5.352843424823112
Encrypted:	false
SSDEEP:	6144:+p3mqYFEC4N538BplQBPtWqd1c417O96C6ZPFh60k:+tYZBpyvWV4C9R0k
MD5:	78FCF85CEEFF56D4EFF50EE7E8B4558C
SHA1:	E5ED2F78BAFE00DF11C65219C085E7910BEAAC9A
SHA-256:	4E7C7E367FA805BF24ACDEBF54E6D58CC2EF189FEF9B4645EDFFEC21352E7650
SHA-512:	FFCC798C1FAA9D8770B7150BABFA04117E4629FCD664FFEC0ED03DC78BC7388DDE9AD194501FDDE777A38E9852442687F871DBB8B0A63982364AA8623C859A81
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/gb/detector-dom.min.js
Preview:	/.. Version: 6.6.118B257 .. * Copyright (c) 21-09-2023 GlassBox http://www.glassboxdigital.com.. */....!function(k,I,e,se,y,ue){if(e\|\|!function(e,n){if(void 0!==e[n])return void 0!==e.console&&"function"==typeof e.console.log&&console.log("WARNING[Glassbox-1301]: detector script has been loaded more than once. Please fix to have a single detector loading. (Extra script loading will be ignored)"),1;try{e._gbLocalStorage=e.localStorage}catch(e){"SecurityError"===e.name&&console.log("[Glassbox] localStorage is not available.")}try{e._gbSessionStorage=e.sessionStorage}catch(e){"SecurityError"===e.name&&console.log("[Glassbox] sessionStorage is not available.")}if(e._cls_config&&e._cls_config.noStorageRecDisable&&(!e._gbLocalStorage\|\|!e._gbSessionStorage))return console.warn("[Glassbox] Recording has been disabled because browser storage is not available (are cookies disabled?)"),1;if(void 0===e.NodeFilter)return 1;if(e._cls_config&&e._cls_config.disableDetector)return e._cls_config={}

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	266
Entropy (8bit):	4.763778208095146
Encrypted:	false
SSDEEP:	6:qTIuJLzLcbkZLReQ8jWR0NNEXW0YBtKNhdxkGXnAqJm8eYkNv7q8VuNVgCtp4Qb:qTpQk1ReQ8lfhtKtxk3qJmG3VgHQb
MD5:	A671BC4E541AADC71FD7812D93AF15E7
SHA1:	3B8C76AC113E54F3D413E09807F3661C72D0F6B5
SHA-256:	EF16255038C7C5847295C3C434243418D898B7B40A9095AEEB65E3DDB7579383
SHA-512:	459DCEA278DC9CB188C05523AE6FEB0658BDFE0FBD5174304CFFB17A029315FFE837FB06CD8D7CC70C81CBEF7265E0D02D776709F0C0A3CDA4C5061430F30996
Malicious:	false
Reputation:	low
URL:	https://tag-wellsfargo.digital.nuance.com/tagserver/nuanceChat.html?UUID=WF_10006005
Preview:	<!doctype html>.<html>.<head>. <title></title>. <meta http-equiv=Content-Type content="text/html; charset=utf-8">.</head>.<body>.<script type="text/javascript" charset="utf-8" src="/tagserver/frame-bridge.js"></script>.<div id="si-app">..</div>.</body>.</html>

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1952), with no line terminators
Category:	downloaded
Size (bytes):	1952
Entropy (8bit):	5.258662649672487
Encrypted:	false
SSDEEP:	48:Cwv5EgQsXiHj2rww88hinbJIqktjM+oKhyILPrC:nOgpsw/eb+qIjMGLzC
MD5:	E7CF4C458B327AB7ED31E0936CCD404F
SHA1:	970BF05073F91AD6B8F21521F7C9886F71F2AF1D
SHA-256:	52B687A685D2239142BE0DB5335C5710951BA8C2B39A44431A40F156B4D9312D
SHA-512:	23BC667EFA366DB075822438F4AE00E3344CFEA8E78646EB70515546497A91039B9983B13F7A8FA82905903E17A3B33F4FABDB5292CDA2FDA108162ACB533749
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/assets/js/wfui/appdynamics/appdEUMConfig.js
Preview:	(function(){var appDEUMSwitch=window&&window["appDEUMSwitch"];var enableAppDGlobally=true;var shouldExecuteScript=enableAppDGlobally&&appDEUMSwitch!=="off";if(!shouldExecuteScript){return;}var currentNonce=null;if(document.currentScript){currentNonce=document.currentScript.nonce\|\|document.currentScript.getAttribute("nonce");}else{if(navigator.userAgent.toUpperCase().indexOf("TRIDENT/")!==-1\|\|navigator.userAgent.toUpperCase().indexOf("MSIE")!==-1){$(document).find("script[nonce]").toArray().some(function(value){currentNonce=$(value).attr("nonce");});}}window["adrum-start-time"]=(new Date).getTime();window["adrum-config"]={userEventInfo:{PageView:function(context){return{userData:{wfacookie:window&&window["wfacookie"]\|\|{},CustomerSegment:"TPB"}};}}};function getMeta(metaName){var metas=document.getElementsByTagName("meta");for(var i=0;i<metas.length;i++){if(metas[i].getAttribute("name")===metaName){return metas[i].getAttribute("content");}}return"";}(function(config){var beaconURL="https

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F%23skip&cb=1711631945419&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_ccd_tk1reflectcardtestarspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-288016-16%7Etcm%3A91-228643-32&promoSlot=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 32032, version 1.13107
Category:	downloaded
Size (bytes):	32032
Entropy (8bit):	7.986553913717687
Encrypted:	false
SSDEEP:	768:b+mPAjWEmbbhn2DIA9T9dadDPbsG7eB++dUIbetXpRQVh2RJm/kc+:SmYmb1n2DlTHadvKdUIa+VhaVr
MD5:	75F198499F6DC491731565E26A7CD146
SHA1:	71478203E459F78E81B8815A9B01199D170882EC
SHA-256:	AD5C529C601C130FB49941DB045B584A4B0854BB8317047C7B94DBC8AA1B6800
SHA-512:	0CF65E74EC2C2BE6540DF4B12E4351F1274C07F0B25F3CD6B6CA6C8E6F6C927290CBB6CDE0E328E976CB312E37378702127F2020AB48CE7E7A062BF0FC3869C2
Malicious:	false
Reputation:	low
URL:	https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargoserif-rg.woff
Preview:	wOFF......} ..........33....................GDEF..j........./%0#GPOS..j.......C.>...GSUB..w$.......H.{/.OS/2.......Y...`g.:.cmap...........6.Kcvt ............)%..fpgm.............0.6gasp..i..........(.&glyf......UO....m.Dhead.......6...6..].hhea....... ...$.4..hmtx...T...b......3.loca............4^imaxp....... ... ....name..h........b6#\.post..i........ ...(prep...X.......G#.V.......33.-U._.<............0.........?..................x.c`d``...;.........."(.......V.......a...a......./.a..........x.-...A....Ob.....X.[...XYA...r.}..........."Ew.0.P...j.!M.......y.;K.H....D.........x....-I.EwU..m.m.m.c.c...m.YU.....K.R:.....v....../R.`I........<.]@..".........o...F..Fg>.t2....6..aN......H\|7T?(c...g.fB%3I.....f.&.,;T..0.. ..........+.R..g.._.f....7U.s@-.6*....t.3.T..j....]...].......zBKha....N.l'......P]...i.`........a;.&A...y.24......x..b..c.&0..ej..T..R-.n....:f..:.....f%v.a...>....F.v....v...j.R.\eU.>....S~.Q5.Mjc_g].#...?.....p.i{.f..........X...].r.=U.O

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1712
Entropy (8bit):	7.812135608309189
Encrypted:	false
SSDEEP:	24:FMTzC7DQ1AHk00QYbf95nJUOfRHqjWe/YjrtBd5dXcbYTYCsdIDWn8q+12TVoUfS:mTzSD3EQYbLm2dk/gmKXsdIDWNTVjfS
MD5:	C939DA49D435A33B6DA79639DD7B449E
SHA1:	B5C908F157D240C4B78F1E7A6C0808AA898C9C23
SHA-256:	60088561EB43FCA42FC2F9C996AF43347355642872EABFA97A943D2F28EE474D
SHA-512:	A52D504B8909FF855473E96079D1494D9EF4CC9C1C7A478C8C21F78EAAE6C6B35F7821D4B90ECC7B53533A806A2B8F865802C7C2C8C878AB200E4849AF9562ED
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/es/images/rwd/wf_logo_220x23.png
Preview:	RIFF....WEBPVP8X..............ALPH@......m.!9z{vzR.m.vj.8..m..dm.m{7.=..9.....=...H.w..:.D..$UND~...._.7$.......~...s...{.D...vN$...xm...Z....y....G.yia.97[...._.m-;...O...4..I..\3h+...:.G...::.%.[.......=..A.....q....M...H9h..X......?N..uj..&...B..m...8.......d...d...g....?.d].7....qI.\|..x.....d..........."....._nt..9...6...g.0.}.s.;..)+ .a...Z.....Y.....F......%......\Q\R....z....2.X.....zKjlt...Eot.{...\..^..cN.I/...>/`.d./.H]..2....5..2...{v@O ...W....i...-.0.f.]DR#'.v>..f...s....S..d..Dk..K...W....[...8^B....7.d...X`$.3Ij..\|:........K].<. .$.aF..S.l1.z..@vY..g.M.H .....u:.q.,....a..O@...-.X.s.\|rWII..[....,...U,.xK....b;....:p$..<@.I....B..B....{1.$..V.!..!2...@.(.n.n.z...dm...S..rI..xX.?.:o..C...b..L1+._.O...ww.E.A~3o..xF....n..q.J._..sK..Y.....S............#...e62.../....6w.....1. i..S.)8....6.},...}i.1.)a.7\|.F...I3........Q.o......,.a_\R.l`M.'..d..=,...,-5.8u7n6..Yz..H....#...=...T{..'l.......o).......}i.....w...3..S-S]F...&.3.=...z...v.S...

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	597
Entropy (8bit):	6.946919342379814
Encrypted:	false
SSDEEP:	12:6v/7+V6ekQfSFx9Fl8V4aEh6ruhZVPUrKK+/Nghn7cJN:/kKSFxF8maEzZ5GKTVgh+
MD5:	D510E2B8AAF073CBD8471D5F83FF08C2
SHA1:	64AD2532BE3F9400556DA4A8A99A2495FF8603DF
SHA-256:	2C29512C945ECD3D3CC510B421A2B9B708D39BFDF6666D8D8667341B784AE63A
SHA-512:	FCB1221E33A58956AEC3D7C9BC3F46E0400CC5D4BBC39C1A33D96158C23DDBCC53C45EC085D95816DA5756C421C94DB2ADAC0EDBFC9E56D45AEE6F836656063B
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/rwd/icons/tab-table-icons/checking-1-popular-star-ON.png
Preview:	.PNG........IHDR...0...0.....`.......PLTE...;22;31800<40;31;21;31<40:20@00;32880=30930;40:32:50:32:21;21;30;21;20;30:20:30;20;41:50;31:31:00:30:20910920:22;30933:40<30;40;31...x...+tRNS... @..... Po..0.....`.p.`..0...p._oO.p.M\....orNT..w.....sRGB........;IDATH...r.0.Fc..?.A.....m...!.#...^.w.\|'gg...._+N...I...4....kO....0FQ..c...P.V@P\..BP..".-.>.I...1.4.3w.$.m..t1.....<M.[......p.q..s.M.....Yc5....J.x......y.p.-!(yC....G.w..9....fu.X.#..-.5.ou.w>.z?..[.`7.?......9.7ur..v.....s;..?,....u....:B!eqE....Ir..\n..>.%..7.o...5m..n'op......?...,...w....~..S...[..1R}\....IEND.B`.

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=703-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&cb=1711631971838&event=DisplayMarquee&eventType=Presented&eventDescription=DisplayMarquee&clist=tcm%3A402-251670-16%7Etcm%3A91-223657-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8261)
Category:	downloaded
Size (bytes):	186203
Entropy (8bit):	5.290977856311598
Encrypted:	false
SSDEEP:	1536:EQGrHx//hPQsARqjx3B35ne8kMkfWpzgjVRvK6auu+gCnZdj5LnW/8l/sLspPK:EV/FVU3kCZJ5LnW/8l/sLCK
MD5:	4795C33C9C3D051649EBC2F705C831F0
SHA1:	6B3570FE8BDA1F42DC057724F1B77659FA8FE027
SHA-256:	7E55B88D8D77F81AC6494500298B820CDA843E9F5CEF812711DD7D418F2A3FED
SHA-512:	154F8447DD5DAC689BFF92595619C704EFCDBAFFB99BEB68DCEE70B8B1DF913D994C9A9EEA7BC4AC8F00BAC1465A13A934C68E2C740E5FF3FB9BF91258C35A12
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/css/template/global.css
Preview:	/! normalize.css 2012-03-06T10:21 UTC - http://github.com/necolas/normalize.css /article,aside,details,figcaption,figure,footer,header,hgroup,nav,section,summary{display:block}audio,canvas,video{display:inline-block;display:inline;zoom:1}audio:not([controls]){display:none;height:0}[hidden]{display:none}html{font-size:100%;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}html,button,input,select,textarea{font-family:sans-serif}a:hover,a:active{outline:0}#shell header[role="banner"],header[role="banner"]{margin-bottom:0;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;background-color:inherit;position:inherit}body{margin:0}h1{margin:0 0 .67em 0 font-size:2em}h2{margin:0 0 .83em 0 font-size:1.5em}h3{margin:0 0 1em 0;font-size:1.17em}h4{margin:0 0 1.33em 0;font-size:1em}h5{margin:0 0 1.67em 0;font-size:.83em}h6{margin:0 0 2.33em 0;font-size:.75em}div,table,td,th{padding:0}fieldset{margin:0;padding:0;border:0}legend{padding:0;margin:0;color:#5f5f5f}blockquote{margin:0

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56823)
Category:	downloaded
Size (bytes):	57276
Entropy (8bit):	5.476869019821665
Encrypted:	false
SSDEEP:	384:3RBHXU1HXqPHXKcHXrFHXmIHXr2HXQXHX1llHXWwHXs7HXg/HXAMHXY3HXzZHXXv:3RBVmTs0MGF
MD5:	1263F6D25CAD31ECF1B6FB48B038950B
SHA1:	7B18384D4FE3C04C2C891270FCD5FE47364042E7
SHA-256:	232CE188FA64EBB3158B001FC51F0C18C504EE0D6510166C0E575EC82BD223E9
SHA-512:	8C3973DCB8722806DD610DA01B65F3F7CDAEAFBF7430EAB70F5D004E8286E8BC99F51EA7AF55F286226643219AF370E8AB1A111751305194E404CE5C37274B95
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/main/utag.136.js?utv=ut4.51.202310231954
Preview:	//tealium universal tag - utag.136 ut4.0.202310241827, Copyright 2023 Tealium.com Inc. All Rights Reserved..try{(function(id,loader,u){try{u=utag.o[loader].sender[id]={}}catch(e){u=utag.sender[id]};u.ev={'view':1};u.t='@@',u.i=[],u.p=["//www.facebook.com/tr?id=@@fb_id@@&ev=@@fb_ev_value@@&cd[currency]=USD&cd[value]=0.00&cd[Product]=@@product_code@@&cd[Subproduct]=@@subproduct_code@@&cd[PageID]=@@page_id@@&cd[CustomerType]=@@customer_type@@&cd[CustomerStatus]=@@customer_status@@&dpo=LDU&dpoco=0&dpost=0","","","","","","",""];u.cachebust="enabled";u.cachevar=""\|\|"_rnd";u.map={};u.extend=[function(a,b){try{if((b['app_id'].toString().toLowerCase()=='WWW'.toLowerCase()&&b['canonical_page_url'].toString().toLowerCase()=='/biz/business-credit/credit-cards/'.toLowerCase())){b['fb_ev_value']='BOB_CC_Page_Microsite_PageLoad';b['fb_id']='1578146899100389'}}catch(e){utag.DB(e);}},function(a,b){try{if((b['app_id'].toString().toLowerCase()=='WWW'.toLowerCase()&&b['canonical_page_url'].toString().toL

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	693
Entropy (8bit):	7.106979621870627
Encrypted:	false
SSDEEP:	12:6v/7+E4k3buLRX+FCxoWiQq+2y8bapJ+Kh6MxzMgZ1lVTqbeXFI4ir:c4kiV+cxliQj2rusMxzMaqiIpr
MD5:	9218120E11C11FF91C8637A9638A95E1
SHA1:	FD436BD2D33EE198B1BF6CC98E370E061CBFD8C5
SHA-256:	7A4C21EDBFADA664C96363B232A7D5B81DE9AFE8ED9B933881F8706E1573555B
SHA-512:	0E94C32261E5003B8957804D54D79D02AC0591908BD4B4C2975D8494804156B217C1CA518B7DA78499DB9C2E975AFF4402750DC7CE162E1E568F767AF5201D1D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....`.......PLTE...:20800933=30@00920:32;31<40:21;21500:22;30:50;31<30;40:20;30:00:31;21930:30<40;20;31:20;42910;31:30;20;21880;32:32:30;30:20;30;33;22;41:50;31......./tRNS.` oP.p..@..0..0..p._0..o..p....... ....._..`..\z....orNT..w.....sRGB.........IDATH..U]W. .. ..5.hK.[.1._.......n...>..y&.w23!...x..L..y..R\C....^.....<.....p)...0.p........u&.f.`...TU.n...j.)...[.%<H.K..H..+.O.P....... ..........>$.{o......._.1..^r.l%"....Q~o.$...:.......a.......N.......(.O.mH.'l.izT.....b...x...w.#.@.Q.;...I.N.t3....a............K.i..`.p.H...n...............t...=......S.....^..P........@5;.l....q..=c,..wi...."..m.iG...]^<RJ...k....&...rA....IEND.B`.

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49163)
Category:	downloaded
Size (bytes):	49189
Entropy (8bit):	5.504519901607344
Encrypted:	false
SSDEEP:	768:N+RnvGL00gsFDcoJNtWwXwyZLFyOW5LBSoyv/VNafZICgYUDSVREwCsfZL:N+dUckJSw3py3LBSot+wCsZ
MD5:	8402E9EBDF9290C018B0617018227681
SHA1:	2D840FCD6C3008D9ACA747BA0CE056B496DB8E1B
SHA-256:	0B2AF045ACAFBDF14516BF55F310568036ACE959946D16EDB1ACEBCD58029D22
SHA-512:	45E7359043E0076DA916475F5294E62F139C85FE42CB0D53E1DCCC08E8DCB39E717B3C3D4B291B21E059FE760BFB4EC2AE224EC06744DF9B25B177784A3C9D9B
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/ga/ga.js
Preview:	// ga.js - 20210826102731.(function(){var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};var q={},r=function(){q.TAGGING=q.TAGGING\|\|[];q.TAGGING[1]=!0};var t=function(a,b){for(var c in b)b.hasOwnProperty(c)&&(a[c]=b[c])},v=function(a){for(var b in a)if(a.hasOwnProperty(b))return!0;return!1};var x=/^(?:(?:https?\|mailto\|ftp):\|[^:/?#]*(?:[/?#]\|$))/i;var y=window,z=document,A=function(a,b){z.addEventListener?z.addEventListener(a,b,!1):z.attachEvent&&z.attachEvent("on"+a,b)};var B=/:[0-9]+$/,C=function(a,b,c){a=a.split("&");for(var d=0;d<a.length;d++){var e=a[d].split("=");if(decodeURIComponent(e[0]).replace(/\+/g," ")===b)return b=e.slice(1).join("="),c?b:decodeURIComponent(b).replace(/\+/g," ")}},F=function(a,b){b&&(b=String(b).toLowerCase());if("protocol"===b\|\|"port"===b)a.protocol=D(a.protocol)\|\|D(y.location.protocol);"port"===b?a.port=String(Number(a.hostname?a.port:y.lo

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.384183719779188
Encrypted:	false
SSDEEP:	3:tU3VeC0erPc2iz:tUle3ejc2A
MD5:	5B8787F8A442DC24BDA6A32087052622
SHA1:	F39DDFA56ACA6E1364D4485ACBAEAD80C58B1CC4
SHA-256:	68F78054A9B48F337D6787DDD1DFAAA56F689D0B8BB5767D2B0AB08C90D79838
SHA-512:	4471B64D470DCA11D3DA422C0729879C33A3614DAC8E42414CF240D944614F4AC17178E51D94B4248C2735E98284AEF8CD98D80C0CFE862EA89485727F4C8B32
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnCW-Xnd9IyghIFDX8fnQUSBQ09mRRr?alt=proto
Preview:	ChwKDQ1/H50FGgQIVhgCIAEKCw09mRRrGgQISxgC

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7263), with no line terminators
Category:	downloaded
Size (bytes):	7263
Entropy (8bit):	5.675512360928675
Encrypted:	false
SSDEEP:	96:+2T0UaZNzkkghwVV2Vj/kieRnSznMoiv6BLFrnDTI2hm7dku8i+AjGzc0z+l:R41PkLwSh/kJRloB/Y2hm7dkuaJQ
MD5:	F7095CE189283A78AD795E5D96C24617
SHA1:	C6292EB6C0D3317D1C294F71204595563BE967F7
SHA-256:	966E43CD8245BED949E71D34CA8E0E0A3208EA9D6EB19E73986FA1C73BC7A603
SHA-512:	30168F975BD5E7457611925652483CC78D203FA7B20A00479A3FA1BCFBE73EA1D9DFA66159A66FEB34A9829CC35E2C417790EEE2767F25575F2C326DFF7EF801
Malicious:	false
Reputation:	low
URL:	https://connect.secure.wellsfargo.com/auth/static/ui/loginaltsignon/public/js/runtime.882e83e8f44325722892.js
Preview:	!function(){"use strict";var e,r,n,t={},o={};function a(e){var r=o[e];if(void 0!==r)return r.exports;var n=o[e]={id:e,loaded:!1,exports:{}};return t[e].call(n.exports,n,n.exports,a),n.loaded=!0,n.exports}a.m=t,e=[],a.O=function(r,n,t,o){if(!n){var i=1/0;for(l=0;l<e.length;l++){n=e[l][0],t=e[l][1],o=e[l][2];for(var s=!0,c=0;c<n.length;c++)(!1&o\|\|i>=o)&&Object.keys(a.O).every((function(e){return a.O[e](n[c])}))?n.splice(c--,1):(s=!1,o<i&&(i=o));if(s){e.splice(l--,1);var p=t();void 0!==p&&(r=p)}}return r}o=o\|\|0;for(var l=e.length;l>0&&e[l-1][2]>o;l--)e[l]=e[l-1];e[l]=[n,t,o]},a.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return a.d(r,{a:r}),r},a.d=function(e,r){for(var n in r)a.o(r,n)&&!a.o(e,n)&&Object.defineProperty(e,n,{enumerable:!0,get:r[n]})},a.f={},a.e=function(e){return Promise.all(Object.keys(a.f).reduce((function(r,n){return a.f[n](e,r),r}),[]))},a.u=function(e){return"public/js/"+e+"."+{DevTools:"e433e050e8883bc8662a",Interdiction:"7d16

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 9x58, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	150
Entropy (8bit):	6.302021690438183
Encrypted:	false
SSDEEP:	3:oZHljl4PkgnEkwx10C0PRWvZvSkIwqIMvqRZBLqOswn:oZ0MgEjB0JWFXIwqIMvYZBLvsw
MD5:	8FC1B0056C107DE5048F40A5D9B19D3D
SHA1:	DD21CF9E0002C68090891454127A4CCC141A78AC
SHA-256:	5F358EC5148E17EAAEFEFB5EC411DEB757F33C7903BEB57FA74F9F99750D6C77
SHA-512:	80B7D36DF109D7C5446E88419DB5A89CF04BEFEF9D96DED0E6873C519DAAD6E31B2A8CE427B1CD056C9D2F185B52D4881E1D41E7F95E011B2081A014B9EC2251
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/css/template/bg-search-2.png
Preview:	RIFF....WEBPVP8 ....p....*..:.>...B!.....q- ..$.n........}C........9ZoP.n..s...\|%.1ME..5.Q.-c.....L\|..<.P...J.,......2f.......c\|.$.e..#....U.c..1L..

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F%23skip&cb=1711631945421&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-304276-16%7Etcm%3A91-228643-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7166), with no line terminators
Category:	downloaded
Size (bytes):	7166
Entropy (8bit):	5.243757345022173
Encrypted:	false
SSDEEP:	192:9vENV3l7eCjUjJR9WvW7C2cpydmLGANf8:9vg8
MD5:	E3CF94E5A4DED00171EAF35F78819D4B
SHA1:	7AE33714A45DB6ABBEE990362B282240264288B0
SHA-256:	62575AB13C76DD901434C782BF0FE360CA100F517EBF4A7C650694A3EC5C4120
SHA-512:	F7C59CEB94FD27CE98EBA1A188A460C51B037DA5BE2BDE8DDA7A1715691323E584BD75C857FE93A004E6DF06F1F5FA34E64D0B94F8BBC5B6D4FAE83D9282C39B
Malicious:	false
Reputation:	low
URL:	https://connect.secure.wellsfargo.com/auth/static/ui/loginaltsignon/public/stylesheets/main.6539fceb73733687f14d.css
Preview:	.MenuBar__bar___bKAcd{bottom:0;display:flex;flex-direction:column;height:100%;justify-content:center;margin:0;padding:0 20px 0 0;position:absolute;right:0;top:0}.MenuBar__bar___bKAcd ul{margin:0;padding:0}.MenuBar__bar___bKAcd ul li{color:#fff;font-size:.8125rem;line-height:1rem;margin:0;padding:0}.MenuBar__bar___bKAcd ul li a{cursor:pointer}.MenuBar__bar___bKAcd ul li:not(:last-of-type){padding-right:16px}.MenuBar__bar___bKAcd.MenuBar__dc___nzKHA ul li{color:#3b3331}.MenuBar__bar___bKAcd.MenuBar__dc___nzKHA ul li svg path{fill:#3b3331}.HamburgerIcon__icon___J3EKg{fill:#204097}.MenuButton__button___Vg6qr{bottom:0;display:flex;flex-direction:column;height:100%;justify-content:center;position:absolute;right:0;top:0}.MenuButton__button___Vg6qr button{height:100%;padding:11px 17px}.MenuButton__triangle___hy72p{bottom:0;left:24px;opacity:0;position:absolute;transition:opacity .25s}.MenuButton__triangle___hy72p.MenuButton__active___BECNq{opacity:1}.MenuButton__triangle___hy72p path{fill:#fff

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	139179
Entropy (8bit):	5.317709222059923
Encrypted:	false
SSDEEP:	1536:e4qB6vOPSHbf0CSJ3QdP4m0gnkk7tmDCGWoyVHsCDlegzPp+K2tFhOu13b3uMI04:ISoyNDlL+K2tFQLWA
MD5:	FC3CE21754826979E4923D0EA0D93032
SHA1:	28D8F599B30B4447E12F3848BD0B2C5119D49686
SHA-256:	60607198755BE9E29CAE7F3963D69D5EB8D48B301D23ED02DAB604C1E0423426
SHA-512:	285C726D7AC1C67EF430C34079ED8CBDFF0CEAD62D74C369EC80DAD849E57574D5259A255EA16DB710B39EB07EDF7F066B7FF72052E0A5675C29DB4CAD416892
Malicious:	false
Reputation:	low
Preview:	{"accountId":"http:\/\/schemaapp.com\/db\/WellsFargo","url":"https:\/\/www.wellsfargo.com","templates":[{"@id":"http:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/Template20230223205052","updated":"2023-11-08T20:07:47.662Z","@type":"HighlightTemplate","categorizedBy":["CollectionPage"],"label":"Mortgage: VA Loan Program","hasHighlight":[{"@id":"http:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/Highlight-20230223205323788-13636","@type":"TagDefined","xPath":"manual","value":"https:\/\/www.wikidata.org\/wiki\/Q1210094","propertyPath":["about","Thing","sameAs"]},{"@id":"http:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/Highlight-20230223210401999-4023","xPath":"( \/\/div[1]\/div[1]\/img[1] )","propertyPath":["image","ImageObject","url"],"@type":"TagXPath"},{"@id":"http:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/Highlight-20230223205405681-3949","xPath":"stored","value":"https:\/\/internal.www.wellsfargo.com\/#SharedDataItem","propertyPath":["author"],"@type":"TagS

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	5261
Entropy (8bit):	7.9149336124481975
Encrypted:	false
SSDEEP:	96:rGPk7s7+4GaUFlrkanYplpSW8ozGVkjSsa0MnbbktisYDtoZBaco+l8N:rGs7oBUTAanYpllWkuUMnb5sStgho+Y
MD5:	DB6F6F4CD473AEFD2AF4A2B3B4A51359
SHA1:	71927E5AA26004B9E46C6A078244D53975080C87
SHA-256:	948CB4B68761E89622A38D2796C9A13FF04C8BBE0C26529582EDD5A8BF487894
SHA-512:	BC886E78D294E9DA2850EE6671F18D8ADA7816FE9692A101F817379FDAB952B4BDC5397394938CFB56768925975F6F59ECD43A1A6BF87DE3960E6B7EFE52FA41
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/photography/lifestyle/227x125/responsible-lending_new_227x125.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@.......................#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe...........}....pixi............ipma...................mdat........0@...2.&...I$.@.GN.#q.L...N.......n....Q7D.V.{n.w...dU. .R.......A`?,..F2...R.!........H..^... i:..(.K..R....{.D..%{8n.(AH[:@......`.. .J.T.x.y.cKlJ....fT.~........^.%N."........k...-.....R..K<.c[.....n..0>.F..l.laa....2....t-....I.2.k+v.....l....O..s..2...\|4..~.G.t.A.WK.3.`..DzAW..]_J.&..t..9..x.o#..L..S.I..Qo.+.\..~GT.:~.$....U........... G... .........5...{V..4.QQ.z......Cr..kL9h..4.#-...!<w....&.}.G..9m...;..z.X...#....p.K5[.........M...)...9v...Q....h..~`1..kM..(..:0o.Y~.zqk....6.g..-\;=lb.Hoj.w..o..e..o#.?..........D....6..:.\.A..7....g.I.0&.....A.....%..f..,..zNU.r.....A..F...u.5m.......Y......lRf.....c.u.....q...2...k1..Z=\.$H..z,.b.7..h.oy.'..VU.3.. w.B..wWRuFYF.....Ng.<..(

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	3878
Entropy (8bit):	7.870576543513719
Encrypted:	false
SSDEEP:	96:rGP052MoSoAq0ITfsyyketAwaAfbU8LGREKEVyk5IqXE:rGM52MojAcgJbKwamo8yCKs55fXE
MD5:	319420238D1D5BB3B655B4B960E4E464
SHA1:	E0486D034D0BAB83E4B0D9F5A19101367BD8AF69
SHA-256:	119EC5FDABE9AB6EC47BCBDD318AF587150454CFF9848282FD3A458CEBE4CA6B
SHA-512:	0E62393535809651E9D9383841AA9FCD59D9395FCD1E00FEA2B120D5A86869BD24E78C7B30AC1A23A18AEF3704B316EB0581D8985DF63C4AB7B70E1FF0B95A81
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/photography/lifestyle/227x125/logo_sign_227x125.jpg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@.......................#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe...........}....pixi............ipma.................. mdat........0@...2.......q@._B..Jv.....b......./.}....D.yg.0...x..y.b._.r)~k.a.......J... <.f..=.C.Q.!.\|7...."..e.i..\!.t.)3g..^.>....9..,-...j.onMrv..?.M..u$.........s\q4A.1.....`...Q..%.HZr.n.$..M.J-w.. .37C.6..h}.u.l..H....x......$M6l..].......8..G...T.Y.;k.8EiP..dcN0........%...2.\|..B...NXZ62..D....).y(~}{d..{U.yR...)..J..a(.............1..f.t....^..n...9L,N......>!... B...6..j.K,.!!q..+./[.U...,0......o^[...{L.\|&x$..Y...J.....V1Fg....<.A....7.......G./......A6...`._.s=!er...k......6y..fy=.C.N...?.....]...p".X.GH...p.U..F...E'J.....5VC...p....og.>....?...&....1b.........c.Q8.1..C..A.\...@.O.bX/.k..e.....uxY......%..9.-}s.....~QL.iBG4.X...v.....80.u4]..SE.".S.^...'.\|..././<.n..0t...

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&cb=1711631962437&event=PageLoad&pid=222-145737-64&ptid=91-22367-128&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fabout%2F&clist=182-147925-16~223-6266-32\|182-39119-16~223-3757-32\|84-149545-16~91-2043-32\|84-36000-16~91-1924-32\|84-240095-16~91-1924-32\|84-257670-16~91-1924-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 227x125, components 3
Category:	dropped
Size (bytes):	9768
Entropy (8bit):	7.948128479960208
Encrypted:	false
SSDEEP:	192:MEm39KztWVKYeKRpljGQfUI9tW0KUSuIN+2Y3JeGv9h:MEm3kMIQpcQN9tPIN+2+z9h
MD5:	91B7203B3A834779283461A07B362A27
SHA1:	F708022D90EC805548011456D1851F0AE6D2C098
SHA-256:	ABFDE041209504664ADD54D53505530F9C8EEA9CA17E5C175E7650DC23186D86
SHA-512:	ABC6CAD00C1BDC45D6212ED17669C3A9A3B85C5E40C8477A899D9F81F5CA37F0E8185563BD9ACA03AD05111E14868E1C11C5E59B9277F779FF1A070CA9AF1115
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#....#)" ")1,,1>;>QQm............................................#....#)" ")1,,1>;>QQm......}...."..........6...................................................................M...h...#.s<].M\|....U>5\|..h.V.P.n.....A (..w...<e`./..m-...d...{KR'....%^..1,......$L...).,k...In.........(.`.j.....e..\|..b#.E.4...{)Wf.d.WN......t..R.;..Ggg.k...9#...]+..g.!.Bz#........f.} .34.[.p..F=9&....k....e.8^&<xK.a....@.+>...V/E...7s0..'.}...9.Z..R..0.d7e+-.,"....>tC.T..X.[......spS.1..".....kkM-."7!J.rs.A..$.1..;..d.:e..w..K..H].9......Y .\.....12nF.."..:...m...3......m.!.....S..Mn...I.(....[_..5.3=.........a..(h.E{.....f._,.52...U...&...e.J91........RR...`.&.M..uZ...6.q.L...@.v`.Kb..u....?...\|O..D.//\|...L.p%>........-..~<...<.FA&M.(....;.:..Y..a....eKi.<.0....9.{(4..Bp...Ixv..\......W.g.5......D.*,.p.J.H....`<..9..MQ.6g....).............................!.."1.2A#C..............QgA..k;..dkQ

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F%23skip&cb=1711631945408&event=DisplaySignOn&eventType=Presented&eventDescription=DisplaySignOn&clist=tcm%3A84-224415%7Etcm%3A83-2046-8
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 227 x 125, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	50854
Entropy (8bit):	7.990037955873547
Encrypted:	true
SSDEEP:	768:uVDp+m87mVp590DEcqRIgXZ787JSKoPHKl9WUmpau67OEpvMKy+V4sPWCMVfxo2W:Ggm8BYDIIAKKmUmpddEvu+HWCMbo2W
MD5:	8D4035A5FB982DC9CB06D9DED8BC1EFF
SHA1:	F64C1432A9A48F741801BA8670969ECCB9E09DC2
SHA-256:	77730DB010D8C7198E99EB78BFC12D6E13BA457F1FDECCABE80B0BA36B04FA34
SHA-512:	B6D8104E48516841B7D96AB591B5078471BDF6AF0398BB24CF5B59ED4F8C8169A0B59E9B0428CC57E6801ABE9979648AA1EC0ADFD375FDA24BF414A96CF7608A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......}.....P.......orNT..w.....IDATx...w.$.y..""M.j.=..g..`w.7.@....(.P...yD.:").]....u(.G.(K."HJ.@.C..!..k.vvwv.k_..E..#2..{zfg..'w{..+32".....L...^. e]........QBb.@....!....!...."..(.u.?....y.^.a.....U...........\|../.O...E....2.X.....g.....Uk.5..Z....Bz.\.\|.__..M..`n.)..W.Dd\|.W..gZd. .-JIP...!..6]B..n...4.H..y...R..._ .>...n....b........5..^...d.5.7q...7...:..}$.../lG.a1..u.k..Z.5.<k..:.Z.1.3..1.=km....t.....;......4.'{..D\..o.T....>_h<_A"I.....4.dF"..Zk1.../..0k.2.3."...=..j.um.........n,...$. T)..E.1......x/.g.3..g+.....(@......X3..x#.....!.`-.j.uEq...{E.Za...Z....p_(zK..hO...b..%........k1.h. ri6y..w.....R.....9%.BH..hk..hO.!0Fb.{.QgJ....G...'H"C..G....6_u..,...Z..........Zh......;..M;...o].0.'...v.K..AkM.R.\c..R*Q.}.2.Q.1F_S0\|[G1G.nQ..K......`....T...@Z........y3.$....r...n....(.N.u.z.^..ap...R..>.MT!.^....h....n5.L.......+.....<_.......I).3.C.0F .E....0.+.d>%.RV&.F.........X......{..:.[IH!A.6..Y.r.8...t..X...R.

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=703-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&cb=1711631971845&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A542-288016-16%7Etcm%3A91-228643-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
URL:	https://rubicon.wellsfargo.com/glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 227x125, components 3
Category:	dropped
Size (bytes):	7568
Entropy (8bit):	7.933080708017865
Encrypted:	false
SSDEEP:	192:Wi78F5s3+AKUKzg04oTMGKPZQ6KHzArOgoj3TAUD:NAF5k+hUKzxYGKPZQVHzvPrD
MD5:	9B9FF3CA08D7D9B21A7A35061F282402
SHA1:	58BE647FC59A0CED34ED577DE41947D3195D40A7
SHA-256:	93920304D0EB791FF28A4C2E01B9EE7FE8879672169592BA2434E83E47FF3FBF
SHA-512:	89B45A40A30A6DED5E7183C498675610C09A99A778F956A7865B7F8CCF8667DCB60E61A9D3A26A7514CD481420BB3BFEE0EDFD5F99AD3F77F699CAEDAD419F0B
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................#....#)" ")1,,1>;>QQm............................................#....#)" ")1,,1>;>QQm......}...."..........5.....................................................................#....'Q....\...EcS.W..Kq...$..=.P.l`..3..A...6 .B.......Ai......D;.g[.]U...'..._Z.~....s</........o.=.....O..E...."J.F.z...t..S.0p.s.W=..t.....W.>a.vn..lY9.\....%.]..W`.A..........@.-I...<.?!hc4{..1.3.e...F.4.E'Q...[Uo....v.,r......Z...n.Ia...3...v.v.W+....".....Z..[.L.w..u.....2U..:....<....m...[H...DK..#.d.;. .x.6$l...k..d..Zf.\|.._.8.0:l.\.o..q<..%k..v"v.B.Z..<.....M....AHp.[-L......3L[BQ9{......O.{...;....-.I..&...2..<...YLx.Z....s.s....uc......Fd.5.........ji../.....o.\|j..}.d..o&J.N.Z...Zg..I....W..@.).v.KJ.XK~GLB..tgpl..Y..A.....@......3.J.hz....~.boT(e.'.?....K..r.e......l.j.....C_..l..N....8.M..pi...O..."...Y....................................!.."#1. 25A............y..5.k"g.V.../@...UE...J...

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (928), with CRLF line terminators
Category:	downloaded
Size (bytes):	22812
Entropy (8bit):	4.866420532489667
Encrypted:	false
SSDEEP:	384:EGtygYPVg73Ed4Hc0NzaVataAojNAmYmnnBVcpg:ZPmK34UzcNAmYmnn/cpg
MD5:	1DC0E41FAD1D4ADA6E5FC2BBA86BE134
SHA1:	02B036D8DF88FB394C93B9BD33EA894BDC254025
SHA-256:	C1F53C9EA86EFCE515A0906EB02E413DF5E3416CA8AFC5436817ABD5B8F01A82
SHA-512:	08AD6FAFC866D2CC9963B2EB2FD05F513EB3542C8A91BE28429F0A4A7A37D31AAB12AB638CB4AF045E1837EADACF364147CF7E201940213DBDA7B8BFDF2DE34A
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/assets/js/wfui/ndep/js/nuan-c2c.js
Preview:	/************************ Custom Bootstrap C2C rendering logic *******************************/.... var BootStrapC2C = function(options) {.. options = Object(options);.... /.. * Messages to be read out-loud to a client who is using screen-reader when the user focuses (tabs over) the Click2Chat.. * button... .. @type {{resume: string, start: string, end: string}}.. */.. this.accessibilityMessages = {.. end: "End Chat",.. resume: "Resume Chat",.. start: "Start Chat",.. onMinimize: "Chat window minimized. To resume, select chat button or press alt plus 1",.. newMessageSingular: "You have {count} unread message.",.. newMessagePlural: "You have {count} unread messages.",.. onDisplay: "Chat available, press ALT plus 1 to open",.. openChat: "Chat window open, press ALT plus 2 to minimize and ALT plus 9 to end chat.".. };.. for (var prop in options.accessi

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1317)
Category:	downloaded
Size (bytes):	2961
Entropy (8bit):	5.434648791352099
Encrypted:	false
SSDEEP:	48:FhbRQ+8e4nPWNnR6IMI+wB/edm20zfYOz8QtYNE1nJxNOz8QIE1nv3WmMSoQnWI:nbRCnP4ReIZB/UmfYOz8QtYNqzNOz8Q/
MD5:	6AEDB7426C48B548874C016FAF3F6E24
SHA1:	E3E8420BD3E75E7E6319A3F00A8C2AFF6E33961A
SHA-256:	8221FF8F89F7C212AB6CB02B5EDF294CA06322A313CCD0FA8F5D17356CB07D88
SHA-512:	73C20C026EDC10A49B09DA52168835E7B58FCDC297ECBA90357281C095F94BEC3712AE4799DCDB468577C64BC2A9BC2C6A038F4FEF3AB0BAF54047414AF24E4F
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/main/utag.413.js?utv=ut4.51.202304062006
Preview:	//tealium universal tag - utag.413 ut4.0.202207272203, Copyright 2022 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<35){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(th

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11249)
Category:	downloaded
Size (bytes):	12893
Entropy (8bit):	5.4296788737409765
Encrypted:	false
SSDEEP:	384:eUP4BZ+8No8WGQPMSxYQiOSxYQUFoSxYQZcSxYQwC0qSxYQwCwMMSxYQ+C0CSxYP:eUPEbL0k
MD5:	CF52B2373B661817477C14E004F10BB3
SHA1:	612BC5E0797295CB3465BAA259688A0F18515230
SHA-256:	DE351C8E428A2D2FEF7AD03ED6C555CE133282DD311841253CEBD9B496A42DF0
SHA-512:	57895E25CACB24FFA46440114E88E8CFB7546B26FC985A0C8AE2AB11424EB20802351846386F9BB366D396E20934A16A15D6DEC98E0DCCBBFEB05C54D0D98ACB
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/main/utag.518.js?utv=ut4.51.202311011941
Preview:	//tealium universal tag - utag.518 ut4.0.202311022132, Copyright 2023 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<35){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(th

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	91
Entropy (8bit):	4.1925825200734
Encrypted:	false
SSDEEP:	3:YXLfcglsW0GxoW/eYJzAXWMSIp24brEJ4:YaixoW/9FMSUrZ
MD5:	3944D2F4EF92AF425D5A341E3D40D7A8
SHA1:	4392645F29C17DED10D16622BA237CE690224FD9
SHA-256:	9369B2673DB55DE20067C87D7BE63F4197A69C3236D0A1C108000B938594B9DF
SHA-512:	D233DEE1FBC2143015BB77156AF6BA35D64FDF634A08F69EE7DB092282AA540ADEE892E00CE2C136D004FF7BC262D485D07B16872198790B5FA1E4EA57E4A8CA
Malicious:	false
Reputation:	low
Preview:	{"reason":"Invalid arguments","events_count":"0","results":{},"version":"5","status":false}

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1436)
Category:	downloaded
Size (bytes):	6130
Entropy (8bit):	5.332667811806168
Encrypted:	false
SSDEEP:	96:rbcnP4ReIZB/oFs9H2lH27Rh2szwtyJU5+Oh5/PrSJ:rbcnP4gIZqWN2lH27Rh2szwf5JXrSJ
MD5:	1DBC94793BD7975BE8DFF603888269D5
SHA1:	4A8EDCB113772392EABAA19C39145F753DD5B1A1
SHA-256:	781AA3B411FCBEBADFEE0E6EE2637CCD8B1095DD29A2F6E1327079674B74BA42
SHA-512:	B879E30468D3CD1E7A26AFC1B9DCFBACAE595DF1D3064704D32C23171D7E1F4DC12710DEE0C7D8664CD665C00BED4289709E2D326966321BD8354C2A24FFA1A7
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/public-site/utag.319.js?utv=ut4.51.202311272229
Preview:	//tealium universal tag - utag.319 ut4.0.202312270305, Copyright 2023 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.loader===undefined){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(this.readyState=='complete'\|\|this.readyState=='loaded'){this.onreadystatechang

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	870
Entropy (8bit):	6.324346191335972
Encrypted:	false
SSDEEP:	12:rGDc//Lca//FXcKDlTgmRM2/xW7/l4zZ6Zl0HLCXiGAQRlyUYg7WCyUnYYJZXvxp:rGDc/jcaeIMmP/xV6P0cHRRq7Ur6Sl
MD5:	2B9904AEC470236B436D86ED35898B9F
SHA1:	1D131697B076F164FFE545DCF80126C1B1625519
SHA-256:	E8448CB8BFDE5E115D7F94C161D2E3228604C7C09ACA7CF7ED3D3D0C84D558FF
SHA-512:	8AB017C96E8A180A95C33E46A3ADEE41A2F5A2207B25AD48F13A389B37403CD2850510D87BD045BA417F367D7C910DA24ACD7A04BF721B69E4477FF5B86B004B
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/rwd/icons/marketing_belt_icons/why_WF-security_lock-64x64.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@.........................................8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe.......@...@....pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe.......@...@....pixi............ipma..........................iref........auxl..........mdat.........@2...@<.@.j.}.f..T..=.....;..4...]v.....I..Z....?\|...(...A.i.........W....#.-./-?..>...~.7N.n&.`......\|e....Ac..gh...:.\..[c.c.,.H.?N...\|.\.e.....w.].cc...ts#].k.W-...j..~.....N..:.......lm.~..0.............2...@.<...../........d%.........RV...Aa....3hC.3..qsg.0,..iS..... .p.e.&..d...c..ER..MSQ].F.m5<r..t....<.......$...~..J...C.2=..7....F.}_/.......S,...<..D.#..H .....>...r..C:...."`...,.I-.

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	1312
Entropy (8bit):	7.025195743242392
Encrypted:	false
SSDEEP:	24:rGDc/jca39MmP/xVG2/lapDoaJ9SmliGdNpqBeg5sF4MGyivCU9:rGo/jvhV2QjGXpqBLeFhGyi6g
MD5:	8A1948AAB5A32F3927C64D664A682D02
SHA1:	56BE10D121AE26F76852187DDAA2E8A9BD33842B
SHA-256:	3FA27AD97E563ADF6BDCD071C54CD43F4282EFA59A8C9C6141D567F46941559C
SHA-512:	D603538FF8F371909F55E6F4EE357BAB994C6BDE4BF07C8C5707EC106B6D7C1CF42A83B3CE3F847FCC6128A80B28D76E4522D707152A19A7D973FB109289B2F1
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/contextual/responsive/smlprimary/wfi000_ic_b_mobilepay_color-gradient_64x64.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@...........................c.............8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe.......@...@....pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe.......@...@....pixi............ipma..........................iref........auxl.........lmdat.........@2...@<.@./..T...W-.3.C....DoH..>.T`\v..f..f.B.U...f?.y4.E..)......M..Q..:...]..?.....:2q^..1}.k.Ir....b.j..>Rko!.4....5....b.D.>6.aa..J.......a.z....!..%n.\|...1.f..3....,.&..4......=....{LJ.Q..v{..f..w...K........%!X;..c...G.....\|...w&...'.......A./...I...6M...r..5W......... ..!.....cG...G.jJ(A.V....M.;p.e..5.Q.aF.{.P.g<b...m...^....7...a..s..D.....\|{.t..:..v4........k...?:.RjC.k.v..............2..FP..<.@....y.x.u.7.....]9..3p7...o.z...A....X.*.g....D n.D..A1..+..Q.......b].p.>gp.h.i2.;.....!.2.<=(.".h..$.3

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15032)
Category:	downloaded
Size (bytes):	15059
Entropy (8bit):	5.365297825525622
Encrypted:	false
SSDEEP:	384:p40C/wTGLq+MYe2LrExHg3FmPS4KtmAshNnyyRgm:s4nRRxhAmKsryyr
MD5:	7A5EC882B57DF1CFF1EDE91DDAFE202C
SHA1:	BA692DA656E93B474B2C2559409B6CAE1D2A2A76
SHA-256:	052776CE5BB96D76CCED9B9D9D5CC8AB2110E33EABA59F6CD3259642A83FF4D4
SHA-512:	DBEB2EE98BA87B67496D6C79F5AE277BBAE6301FB94CF58F756E49B86C80CDC0A51DF3F51A2FABDDEB9C995FE45ADECB78F9CE13508E16286EC74DADF57BB998
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/ytc/ytc.js
Preview:	// ytc.js - 20210709140535.!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=0)}([function(e,t,n){"use strict";function r(){if("undefined"==typ

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1171897
Entropy (8bit):	5.562952830809171
Encrypted:	false
SSDEEP:	24576:rnuQXo+tlVjfThdsNegXEe+GBR3D8jRSPrOS5nqW6n+jCpukC8lcbpIcsLe6Fw5G:rnuQXo+tlVjfThdsNegXE2R3D8jRSPri
MD5:	4A4C8AF07D36EC82A25C430670776CDF
SHA1:	DB69F117114A32772FF054B68A5BAF1F0C27DA29
SHA-256:	7C24F7990624F3C959A80B2CE2BC3B8E4165E65D48AAEFA19B7448A596966F34
SHA-512:	EE44036571977F47A0D6BFB2342AD8E269C590C8869CD7BF15D1C1BF9061C8386206AA2548407D581AB5AAA68A8FE959B0CDAF794687A59176A498273930E70E
Malicious:	false
Reputation:	low
URL:	https://connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/js/main.8ff9514e474c17aca0f7.js
Preview:	(self.webpackChunkwibac_accounts_ui=self.webpackChunkwibac_accounts_ui\|\|[]).push([["main"],{95765:function(e,t,a){"use strict";a.d(t,{A:function(){return Bt}});a(62062);var n=a(96540),r=a(9404),o=a.n(r),i=a(10540),s=a(71673),c=a(89767),l=a(56847),u=a(8936),d=a(26306),m=a(20209),p=a(58168),f=a(62488),h=(a(52675),a(2008),a(51629),a(83851),a(81278),a(79432),a(26099),a(23500),a(64467)),y=a(80296),g=a(19460),v=a(69835),_=a(15676),E=a(71418);function A(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function b(e){var t=e.account,a=e.children,r=e.displayType,o=t.type,i=(0,c.A)(),s=(0,n.useContext)(E.y).location===v.$C.CUSTOMIZE,l=o===v.X9.EMPLOYER_SPONSORED_RETIREMENT&&i.isDesktop()&&!s,u=r===v.iP&&l,d=(0,n.useState)(!1),m=(0,y.A)(d,2),p=m[0],f=m[1],b=function(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 489 x 335, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	15473
Entropy (8bit):	7.974866633350404
Encrypted:	false
SSDEEP:	384:tOvS8Y6EycX1Ic10k4Ln6o1ffOusMbaddFrOWvpHP/SByePtC:ESVydlnR1fNskaddrgyK4
MD5:	0787079D45CEA17BE73F01A3C8A5595A
SHA1:	8ADB47AC61C8688ACCB7D6E11D06B154CAC9FF91
SHA-256:	F779F3033354FFEDF7399A315CF5DD83CDF868668B36A3319EF55BA20B2B5CD3
SHA-512:	D92A0B29F22248184274608AEDE50EE2008A9C4158A592FE838A4DE37507EDC0A3A8E271F20DB33A17754772E1D1EF333CD2A8F94DF446E0779311B3AA0F5369
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......O.....^U.V...:PLTE..........q3.Z...........s5.o...........}F.\|.Q.w=..................c........................................................................................................................................................................................................................................}9..................B.R........................................................................................................................................................................o.z.....orNT..w...9.IDATx..}..+W}..}..]]I#.+....4..<....'.I..Cp.C..8..`....)$@.Ic 1I.:..M....[..4g.2..C....t.F...=...0G.q..G.q..G.q..G.q..G.q...}..........8b...........0W.m.S...o...P...........~.....~..Ld....l?D......z.o.v..}..T.Z4...y\|9<UkF...#...t.f...!...,N....A.a.c(..k..d..u..w..=..!..(...;1...}.......c1..V.E......."}.i51....X..........R......{....&.A<.....b.?.

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://fcmatch.youtube.com/pixel?google_gm=AMnCDoqLmwev_v-dJR_RIm72duWb2y5tEqtm9i_436YxdwOxcVKacGuMPfkTZpOD_GyNbJGCvB4JpMmyKKgrCnYTxDxmc2WCHepVzjCY_rGduhqxSXWQvxA
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2736), with CRLF line terminators
Category:	downloaded
Size (bytes):	11006
Entropy (8bit):	5.340340435975653
Encrypted:	false
SSDEEP:	192:zUqnNojImVGMVKp2Xe16WgycXPYD5iREzSBCOqHxY+UANLHXCY+Ub45b5K9Y/3U4:zdNsImVGMVKYOolXPYD5iREz/HxY+HHq
MD5:	618B009A46C7EFD82AA9273D63663BFC
SHA1:	D4F6BB88FBC58942FC28300D7592F52F1F391BD5
SHA-256:	5E902E9C08B55250A131B8EA31C2EE243AC8D5D4B13D3B092825E9626A5DBCB3
SHA-512:	220357FFE3DE5AC63030455240021AA9E1E1534AEE0239E46861632DBB70B80CFBEA6DA20FD97A45814C64C35DAA78C6A67C4E50F2E713E69EFD043854A1E178
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/public-site/utag.477.js?utv=ut4.51.202310021848
Preview:	//tealium universal tag - utag.477 ut4.0.202401242248, Copyright 2024 Tealium.com Inc. All Rights Reserved...try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}..var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatec

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65443)
Category:	downloaded
Size (bytes):	239622
Entropy (8bit):	5.374580025222004
Encrypted:	false
SSDEEP:	3072:IhH8vqrn3WTXenI4y4afKLmqbV9RFiKSDIKzW4c:WqQSDkp
MD5:	9B0BBA0FF5FD034902CC4D730D3E7F06
SHA1:	9B26098DB1308DB16798E953148BBE587DDF5FC2
SHA-256:	3A7AA2E427F0F5A8CFD2A3C2A797CB0843CE1A58F2CEA526B0B4CD97D6A1C903
SHA-512:	758D409F6A2EBDDCC596570CF1F008E2573904F10FC77AF329EC7DBE2C15857F46B605DB3FEFAF4F111AD4F325A633B57962B8B927B2C296F51B387D148FE885
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/ui/javascript/publicsite-ui/ps-global.6bd929467a6d932fec55.js
Preview:	/! For license information please see ps-global.6bd929467a6d932fec55.js.LICENSE.txt /.(()=>{var e={5397:(e,t,n)=>{var r={"./en.json":3776,"./es.json":9843};function o(e){var t=i(e);return n(t)}function i(e){if(!n.o(r,e)){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}return r[e]}o.keys=function(){return Object.keys(r)},o.resolve=i,e.exports=o,o.id=5397},3905:(e,t,n)=>{var r=n(8698);n(9653),n(6977),n(9600),n(1249),n(9554),n(1539),n(5212),n(7327),n(7042),n(2707),n(4916),n(3123),n(4678),n(2772),n(561),n(4747),function(){"use strict";if("object"===("undefined"==typeof window?"undefined":r(window)))if("IntersectionObserver"in window&&"IntersectionObserverEntry"in window&&"intersectionRatio"in window.IntersectionObserverEntry.prototype)"isIntersecting"in window.IntersectionObserverEntry.prototype\|\|Object.defineProperty(window.IntersectionObserverEntry.prototype,"isIntersecting",{get:function(){return this.intersectionRatio>0}});else{var e=function(e){for(va

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65453)
Category:	downloaded
Size (bytes):	1660038
Entropy (8bit):	5.428073059535916
Encrypted:	false
SSDEEP:	49152:zf0L0hZZkcCwJhGjKjycXQcp1uvh1g63lI420q44mvrN0n:zfzuvhjGn
MD5:	E66A9580C71E334F52FBCA8939789B5A
SHA1:	CDCAFF21157B43D032E753F2CCAE16F2DBB912E8
SHA-256:	8F8105111FC55B4CD0B2BE419FB6BDBA09BB079E3D8D6833DC8C3F890DAB39B3
SHA-512:	5FA82699AAA353BC7350546B435854730470000AE0DE29D31005D59795DBB0BEE70AE963910C36AFE6B581E46DB3884BE94894BEA455F2CB1B7AF18E82B595C3
Malicious:	false
Reputation:	low
URL:	https://connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/js/wfui.7da5daa5ec19e9914fda.js
Preview:	/! For license information please see wfui.7da5daa5ec19e9914fda.js.LICENSE.txt /."use strict";(self.webpackChunkwibac_accounts_ui=self.webpackChunkwibac_accounts_ui\|\|[]).push([["wfui"],{98225:function(e,t,n){n.d(t,{A:function(){return d}});n(52675),n(25276),n(69085),n(79432),n(94170);var r=n(96540),o=n(61225),i=n(10540),a=n(9280).A,c=n(39159),u=n(52133),l=["handleContentClick"];function s(){return s=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},s.apply(this,arguments)}function f(e,t){if(null==e)return{};var n,r,o=function(e,t){if(null==e)return{};var n,r,o={},i=Object.keys(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0\|\|(o[n]=e[n]);return o}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0\|\|Object.prototype.propertyIsEnumerable.call(e,n)&&(o[n]=e[n])}return o}var p=(0,i.n7)({h

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8077)
Category:	downloaded
Size (bytes):	97628
Entropy (8bit):	5.312914188365569
Encrypted:	false
SSDEEP:	1536:HAvUXrr5nSDjotcZxhMV1Ez9tgn1Emi7G6S9tXE79aCBsU1+TU5G2q0sBQCpu9Lv:H8XzmB6SLIH1+TUd5fCpuhQ47GK0eaO
MD5:	D49F5BD057488231FDCC675E2FE9F568
SHA1:	C81BE8CDA5BEAB5BD767A63BEE8AAFC08E037CE4
SHA-256:	3C536CEDE8C67B4BDA531F82B77F3678E52026398492010245D3870C87A1623E
SHA-512:	D00BC0D962DCBCDD26EBE0C0AE67A8A698CDEF74A1C83EB282BB4CDEC492F2DB34067B34E02CF9A3E247DC766F6B5EA2B3978C0CE26B278250FCE1FC0B611685
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/locator/public/js/jquery.min.js
Preview:	/! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document){throw new Error("jQuery requires a window with a document");}return t(e);}:t(e);}("undefined"!=typeof window?window:this,function(C,e){var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e);}:function(e){return t.concat.apply([],e);},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType;},x=function(e){return null!=e&&e===e.window;},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t){for(r in c){(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);}}n.head.appendChild(o).parentNode.removeChild(o);}function w(e){return null==e?e+"":"object"==typeo

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8185)
Category:	downloaded
Size (bytes):	339401
Entropy (8bit):	5.158548280809413
Encrypted:	false
SSDEEP:	6144:g1FlnqC3RbWzz2HCN31Ml226e5od11CmBnB1sxLFwjqcB:gVnHS34CN3ymBnBixLklB
MD5:	017BE916440864BD21A28D4B6EA071EB
SHA1:	6693248F99F3CBDECCB3D2C2D5D71E272A1B5A67
SHA-256:	6429EE4169A7D44117D38F6BCAE32FA80133B222E6BC28EAEB22C18DC9D38C1B
SHA-512:	71D8520937CEBE028B64D945DE50FD854017393565533D21C6AD28F2D8787784D36E42BDE17411E360FED1569C5A7D6578C1D9D449C0F34BEA2161CC29859D65
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/locator/public/js/jquery-ui.js
Preview:	/! jQuery UI - v1.13.2 - 2022-07-14. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sorta

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2939
Entropy (8bit):	7.90060198541403
Encrypted:	false
SSDEEP:	48:Ontz/a01elsFAw45T3/oU7VwI6ag1LmMFKO1S3j3C3KQI9ILuPJODg29KbmmoDa:mLrzu3NwUn6XplFKO1S37QHI7Pk9ZmV
MD5:	D3B4232704316445CBDBB3638FBFB6E3
SHA1:	879E7CE04FA770BE70AE62800F8093556CB58604
SHA-256:	121009A1771B4DFB8D71529D44FFB7C12C6EAA58DA19A44DC86D2E7E2D2384BF
SHA-512:	BFE3D8A384114C72E38B76EEC134B7CB4925669591C4CF1C3D355501C683440CE0258EF5862A0D0F07F9F4FDDD0C110507F3E15738E7D6078B84436175DF0BE8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....orNT..w....5IDATx..].]G...kf.9..............j...j.`Zi......XhQ...... .......}.D-.`..}...i..&..\|...af.......&...r...\|.Yk..k.....e....f...`&...f...`&.K...o.4#.A...a#......4.2.....B..1...&}...J.j.u..X".Ur.%jjW$...(.U!jjO.Iz.!.....5&....."..#..Y...../...D .1....P.a>...-=._....U.b4MD%.N..z!.Y.{.. FE...F.0E...L...w.K.h..F.!.%.......{.x.@..r...3../....0...\|.._...b ..6W.+...wNL.;...m.I.....kL..P......5M.6@...,F..A...~`ae.{.{.G.....?...M.z...t.=...}'..).'@.y..?....n....5...j......>.._.u.n4q>..a..x.......+.?.?..)..M..Ep)`0t.....].Kwe.............j..u.........a.j.nK...E.%..E1.lm.Z;:...5D....9..w....5.....d.-.I.%.......>....<..W...n\|.>.................?..y.#...^6.M.......m.....Mk...^j+.!.o.`...b.6@q....c..T8.jXe3nv..j.n..ssfa.1...{.,.."3o...S..E.W.wn?7n..v.....).7.i+&..q*...>[qS.t.#..t.]X..{D.S./..L..[...+.2!...LOO..k.Z.k...i#.t{...QD.b.e..TLt.......l...m.N@...=.....}.#H...kZ>..4.....:.....]

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40702
Entropy (8bit):	5.123227793791931
Encrypted:	false
SSDEEP:	384:6id4xmx2NNh1id4xmx2NNh6+cU4xmxNNhzYgII32qhMxW22GVSJNhcMxW22NGVSY:Gz5zYg/mqJ8RTfInes4g
MD5:	F911470FE0E560AFCC355E2B7C2D14E0
SHA1:	70C99DD84B5BD747DD5B209E63F70A71E80438D0
SHA-256:	2E45459BA2E9E58BD49C6DA5C33DA625B1F0C384D2A47D0EC0D3756029FE9959
SHA-512:	48A7D9CF023F8DCB56878FF2EF632E027403622E93734AAACBA1847330BAAD13282828287D0C492944AA2758E3798E09423A4BD7C4F3FA66D216BB2764D3C9D1
Malicious:	false
Reputation:	low
Preview:	{. "sbtServerDomain" : "https://ubt-lb.digital-cloud-prem.medallia.com",. "sbtEnvPrefix" : "wdcusprem_",. "endUserIdentifier" : { },. "formNodes" : [ {. "formId" : "4435",. "isCustomHtmlEnabled" : "false",. "urlVersion" : "V2",. "formHtmlUrl" : "/**ONPREM_URL_PREFIX**//md-form/website/1.15.3/index.html",. "formDataUrl" : "https://resources.digital-cloud-prem.medallia.com/wdcusprem/57907/forms/4435/formDataV2_1711444116048_###LANGUAGE_CODE###.json",. "formWidth" : "450",. "formHeight" : "450",. "isFixedSize" : "false",. "isFullWidthEmbedded" : "null",. "designSettings" : {. "formBackgroundColor" : "",. "thankYouPageBackgroundColor" : "". },. "formLocalizationSettings" : {. "defaultLanguage" : "en",. "useCustomParam" : "false",. "customParam" : "null". },. "formJsonRelativePath" : "wdcusprem/57907/forms/4435/formData1711444116048_###LANGUAGE_CODE###.json",. "formJsonV2RelativePath" : "wdcusprem/57907/forms/4435

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	166530
Entropy (8bit):	5.296902077708606
Encrypted:	false
SSDEEP:	1536:o/oFIxolS0tDmNBgJ4wEHBhkuOOYL8iylgNxP:MoIohhEHBquOOYL8iylgNR
MD5:	3E847063F2ECAE3CD7E04BDD7ECCE66E
SHA1:	7E3EDDEF4E832DE3A7EA30342A557262F85C5C71
SHA-256:	5D76CC3DD9C9EF8AF497658DF249794D560A4094E5D2A1E80BC43DC720B7E2BD
SHA-512:	2778DC65108B9C84E3236E53EFC30D0164E0726341FFA9EAED4F05ECB5052B7584FCE42C0F1034A366CB9D1DBFE70317C05913C69622A623C936B1E55760FD68
Malicious:	false
Reputation:	low
URL:	https://connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/stylesheets/main.38832ae5988e63f8952d.css
Preview:	.MessageCount__count___c_Qks{color:#00698c}.MessageCount__count___c_Qks.MessageCount__tpb___a0fUi{color:#5a469b}.MessageCount__count___c_Qks .MessageCount__icon___pVz4Q{padding-left:4px}.MessageCount__count___c_Qks .MessageCount__icon___pVz4Q path{fill:#00698c}.MessageCount__count___c_Qks .MessageCount__icon___pVz4Q.MessageCount__tpb___a0fUi path{fill:#5a469b}.MessageCount__countContainer___U9o__{height:21px}.MessageCount__topBar___wRc3R{position:relative}.MessageCount__topBar___wRc3R .MessageCount__messageCount___xyRz3{background:#d71e28;border-radius:7px;color:#fff;font-family:-apple-system-body,Wells Fargo Sans,Verdana,Arial,Helvetica,sans-serif;font-size:.75rem;font-weight:700;padding:0 3px;position:absolute;right:-4px;top:-3px}.TopBar7MHeader__topBarContainer___V5h4b{left:0;position:fixed;right:0;top:0;width:100%;z-index:1}.App__app___R9dgF [data-page-content]{background:none}@media (orientation:landscape){.App__lifestyle___Skscu.App__tablet___js9wO img{display:none}}.App__lifesty

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 616x353, components 3
Category:	dropped
Size (bytes):	51143
Entropy (8bit):	7.98140816017798
Encrypted:	false
SSDEEP:	1536:Y1cvUWD4wHuvKbDN8A3U+XppgoNXm1tlenlj:g+hIwjOo5mzlelj
MD5:	5D32E05B0A91F8297175A874253142E0
SHA1:	F9F58624DC5DDF5F9F1BB0BD4D9D818FFD8E4DD4
SHA-256:	B30BE25D8117203ACBC8CDC89A1E09E933CDF301490DF1C891277B3D536EC902
SHA-512:	86F2FB95FF4BA83681AAF5195928E2370BD0C15A9E254D9C0B901D7423FABFFAE1B8A92E0A4C3B81805E3FF85C1D6C863B0EA506971CD3DB83DF6C70BC9A50EF
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................&""&0-0>>T.......................................................&""&0-0>>T......a.h.."..........6...................................................................T....;...../...Lt..[..e...?.......94c;...B..,m.K...9.$a.u9Y..@.OD.~.$y.jM..C..X....:9{.B`.UYY.....4.......N..7..{k. ...Q...wp{.....w.W.W.0...M..AusG..Wi}....`.C@...B.%....V/wH.QWe[..X<.l...t......G$U$.I .m67..Y>t.=....E..o.Y)..E1VO.m.. P...#. >Y.EV...f.(.O......P./...vh.2}ve..>=......K..d.F2Pz.aPeS.x.f..\|~...9...8[...=y.f`B>.c.2\|.u.Q.].N/-...K...%.m.^...Z...[...,.4...j...N...Hq...g.D+.R..7..\|......-+..+.0t;3.V.n.d.....#X......,...AXSYCE&AQ(...H.NF.X}K,e.u7.u#....\|..aBm...].4Z.W.y?_.....\|..1....f...Tv\.._...s7...b.\.^.,...M...-.....I...'.K..B...5.z...)q..+.(._y.e...i..9..w;vn.f.Y...pa.yuV..fOS....j@...<Z...9+.b..Xx...(..... H. ...:).*!C.........Mw...g`h^..../_.5.gg.u.....^WL.\........m.s.zTU..a..r./.."....a.D...e...

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22600, version 1.13107
Category:	downloaded
Size (bytes):	22600
Entropy (8bit):	7.989474204912855
Encrypted:	false
SSDEEP:	384:X4TnfMKBnolaid+tMKsLZqy+1EooqFdf8THOgmFtI2ErNX0sAZwk+pcHgXvCdFPh:XWXBolb+tMKoc1E1qFdgHOujisY+pcHt
MD5:	83DF8749C013F13019FA8E0912041759
SHA1:	2BBFFCF012A59E47661C0A37EDDA0FC772992AE7
SHA-256:	AB9D8C97B35ED86B6224ACA911AA304A0D7DBCBD28E00A4C6585B96E28ED30BA
SHA-512:	60EF81E9500E9B33E9D799D4BD56F8EF4DF5DFDC88A42D5739C3DA65733CFAEDD42AA0DC623D46B370DC750C693CBE0C473C92E6C4C2A7BED2C7DA33B8BCEE84
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/fonts/wellsfargosans-sbd.woff2
Preview:	wOF2......XH.........W...33......................V..V....`..,..r..W.....d....6.$..x..>.. ..b. ..!...7.m.15"..z......18..P.)b6"v;@.D.....$.c8.6H......B..@C.d.a..aeZ.S.)...d .+.1....K.....}..sU@..L.r.IT.....v...5q..Dls.j.PYo.H.;2A....&>"......M.W.[..t...q."......v..M....C.........$..6...+..)W.Z...@.....6.....b......Xr........].Q5..'..Uz...m..C.....1.@m.p.#g........}..(4bh.........AM...d:@.R.b.?3j...m.Ki...Ws._..!?P..TJJI&Iv.E.../......,.].T.Z.p/U..m.O......5.n.;x@.._A.A. r.....<.y^..\..s.....Z-k..+7w...w..#..Z..B...."....IQ....v..rg.9..;N.p.;.N.;.\.r....\|x....4.......\..O...\#...T+d%..":J...J....!.$..;K.N..}H.9".{2...Q..E.k..O.#.z73.............'T.S.._...?M?.a..:(..E.Rp...&.......jn.9...F.Q[..-.E.........]%.V.bp.... .#S.$...S.t...L ..d.e..J......4.i...;.e.*...uj.:u.Z..7..!e....A[.).!....x.0....?.C...hZ.Y...........fO.R...g..OFT..&..&....@..I.. .._...U.."r5......T...{......:6..?)......p}.Kg...X....D.x...p.._U....%P..!L...t....:...3.w.........\|..6@.($

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	3870
Entropy (8bit):	7.7945990857980085
Encrypted:	false
SSDEEP:	96:rGgLgjvXqprUUv/AWU4aMj6LB7B6US+N5yI3q1jtXffIJFaaARo6xM:rGGgjXoUUvIGR6LC5rIaVRfIvFWo6i
MD5:	B4513599AB7D7CCE1871315DF07C8FE9
SHA1:	0BC2A5916ED912026BE91F6427966C3E1467AA2B
SHA-256:	BE7AC6C34F784DDF2BBB9BD61CA015A6F256D9C0957C020E72277473CC41304F
SHA-512:	5F35ABF01F34C6589F4F0A5AEC897274C04AB89B64E5BA9FDBC08E8D781A6FBE5FC6B9174461375B2C98920EE8A1DDA285B698457EE40E84038F211FBC57D431
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/contextual/responsive/tab-table-product/tab-table-product-EVD_test-1400x170.png?impolicy=TTPDesktopXL
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@...................4.....................8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe.......8........pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe.......8........pixi............ipma..........................iref........auxl.........jmdat.....i.K..2'Dl.....;...JZ8..=.F...I.W...1-....W9.`.....i.K.....2..Dl.q..P.s...=......~.zK9....,.l.&......z.c2?.uy..Q..0.YP..........I.`......F:..tk.f9Bl`a.G.v....<.......<.1.m..h..t..V..3R..="....L....z..+Ez..~=...S...B.......\F.i...F..Ju....ieP<.P.:.%..b._..........wJD....Vc...]kvZ.q}:. %..G..?.....9S....!'...Ecq\.u....v.Z....(<6.....<...s..n..._h....Rr..jHIH.s..T=.K&.m1.'*;X.Z?.M..\.ss.!e.A=..o.TQ3.v......4ol..Y.TB&i.h5...~..z>jf?.h.....).....h..f..%.A..?..a...L...H.....%d....y.j....)..#.v.....q.R..I..;../8..+

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1784
Entropy (8bit):	4.602522437719863
Encrypted:	false
SSDEEP:	48:chAvfHgiWhxe8mCDVGTn0s1OUe1OxSOhPl5bHbV:hvfAnLeY0Tn0s1Ob1OxSOhPl57B
MD5:	21EBCE5AFA61A8CC8EA7913C4A4C3310
SHA1:	AD5B77867A48C3E240F04611F25D27AF0C1BE59B
SHA-256:	7BFAB3D904C5EFFC47FE1577C20615A1EFCF84F2A6E1B8E5CCAA501AC657FCAB
SHA-512:	8B63D23DE9D23477D68AEB6C17C107F0BB50B5AA5D0E0B94B1E520C66EA54BF89DC41A637FC661BA81A11BDEBCDC271AACC7439D6E6055B505231DD12F42215E
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/css/template/homepage/homepage-lock.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 20.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. width="20px" height="20.7px" viewBox="0 0 20 20.7" style="enable-background:new 0 0 20 20.7;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<path class="st0" d="M10,16.1c-2.1,0-3.8-1.6-3.8-3.7c0-2,1.7-3.7,3.8-3.7s3.8,1.6,3.8,3.7C13.8,14.5,12.1,16.1,10,16.1z M7.8,6.7..c0-1.2,1-2.1,2.2-2.1c1.2,0,2.2,1,2.2,2.1v1.4c-0.7-0.3-1.4-0.5-2.2-0.5c-0.8,0-1.5,0.2-2.2,0.5V6.7z M13.5,9V6.7..c0-1.9-1.6-3.4-3.5-3.4c-1.9,0-3.5,1.5-3.5,3.4V9C5.6,9.9,5,11.1,5,12.5c0,2.7,2.2,4.9,5,4.9s5-2.2,5-4.9C15,11.1,14.4,9.9,13.5,9..L13.5,9z M10,11.4c0.2,0,0.3-0.1,0.3-0.3V9.6c0-0.2-0.1-0.3-0.3-0.3c-0.2,0-0.3,0.1-0.3,0.3v1.5C9.7,11.3,9.8,11.4,10,11.4z.. M8.9,12.5c0-0.2-0.1-0.3-0.3-0.3H7.1c-0.2,0-0.3,0.1-0.3,0.3c0,0.2,0.1,0.3,0.3,0.3

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	166530
Entropy (8bit):	5.296902077708606
Encrypted:	false
SSDEEP:	1536:o/oFIxolS0tDmNBgJ4wEHBhkuOOYL8iylgNxP:MoIohhEHBquOOYL8iylgNR
MD5:	3E847063F2ECAE3CD7E04BDD7ECCE66E
SHA1:	7E3EDDEF4E832DE3A7EA30342A557262F85C5C71
SHA-256:	5D76CC3DD9C9EF8AF497658DF249794D560A4094E5D2A1E80BC43DC720B7E2BD
SHA-512:	2778DC65108B9C84E3236E53EFC30D0164E0726341FFA9EAED4F05ECB5052B7584FCE42C0F1034A366CB9D1DBFE70317C05913C69622A623C936B1E55760FD68
Malicious:	false
Reputation:	low
Preview:	.MessageCount__count___c_Qks{color:#00698c}.MessageCount__count___c_Qks.MessageCount__tpb___a0fUi{color:#5a469b}.MessageCount__count___c_Qks .MessageCount__icon___pVz4Q{padding-left:4px}.MessageCount__count___c_Qks .MessageCount__icon___pVz4Q path{fill:#00698c}.MessageCount__count___c_Qks .MessageCount__icon___pVz4Q.MessageCount__tpb___a0fUi path{fill:#5a469b}.MessageCount__countContainer___U9o__{height:21px}.MessageCount__topBar___wRc3R{position:relative}.MessageCount__topBar___wRc3R .MessageCount__messageCount___xyRz3{background:#d71e28;border-radius:7px;color:#fff;font-family:-apple-system-body,Wells Fargo Sans,Verdana,Arial,Helvetica,sans-serif;font-size:.75rem;font-weight:700;padding:0 3px;position:absolute;right:-4px;top:-3px}.TopBar7MHeader__topBarContainer___V5h4b{left:0;position:fixed;right:0;top:0;width:100%;z-index:1}.App__app___R9dgF [data-page-content]{background:none}@media (orientation:landscape){.App__lifestyle___Skscu.App__tablet___js9wO img{display:none}}.App__lifesty

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	downloaded
Size (bytes):	106326
Entropy (8bit):	5.52689299206484
Encrypted:	false
SSDEEP:	1536:HeaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYJUhZ:+aQaOYw58ISTT4esfbw3h9N+rKW
MD5:	AB34788BB0FF19E7DA8AE85A28C60EFE
SHA1:	05756134A382E3CE923D55C033C07E91BE60E7B4
SHA-256:	1EEDA03EDBC2BB72AB44077BD30E718F3A9B2A2DCB493B9CC05976A2A1D7F2EC
SHA-512:	01602FC7ECD215E43B0081B853A5C35618E10436BCE6527FDE255981AEDFB701CA37DEB38FEB5D7EBE426851EAF90AE6FD1442C83B0C47767D05E8DFA6DC5E5A
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/tracking/ga/gtag.js?id=AW-984436569
Preview:	// gtag.js - 20230830115644.var GTAG_TYPE=function(){var gtagType,currentScript=document.currentScript\|\|function(){try{throw new Error}catch(err){var url=(/at [^(\r\n]$(.):.+:.+$$/i.exec(err.stack)\|\|[])[1];if(url){var scripts=document.getElementsByTagName("script");for(var i in scripts)if(scripts[i].src==url)return scripts[i]}}return null}();return currentScript&&-1!==currentScript.src.indexOf("gtag.js")&&(gtagType=void 0===currentScript.src.split("?t=")[1]?"CORE":currentScript.src.split("?t=")[1].substring(0,2)),gtagType\|\|"CORE"}(),GTAG_CONFIG={CORE:{id:"",salt:"ChAI8N/yiAYQ/sLpxs3R3/lOEhkAiCq8P5n+5Jl2lPYrrAqF+9CynSAMn5lfGgIrEQ==",name:""},UA:{id:"undefined"!=typeof utag_data&&"RETDL"==utag_data.app_id?"UA-19597165-1":"UA-107148943-1",salt:"ChAI8LztiAYQr7+BrOKYjbQiEicAfMDsaWrMhkFBMPGo10w27kKCufDm4bQPQHPe48IJzu3RQ+BdEMUaAsgU",name:"c"},DC:{id:"DC-2549153",salt:"ChAI8N/yiAYQ/sLpxs3R3/lOEiMAiCq8P0qN5GDJNKlTfLLeTfVz4qOpT6tg/+q6HwGf3lZdJxoCdtg=",name:"c"},AW:{id:"AW-984436569",salt:"Ch

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	450254
Entropy (8bit):	5.3301393755226565
Encrypted:	false
SSDEEP:	6144:MY8jyLzTnN+VOV01oFF5MVGn9YV9hTCbE:DzTNJViD
MD5:	D0B6756C53D7FF783A223C0763CE8975
SHA1:	E2C293B55AE5678D2F89ED849C7E254ABDAE3521
SHA-256:	C9A9066BC98414AC5B98E46133BD18108C0814420676FAF024EC951AEEB61255
SHA-512:	46CCA0A95D7C1EB62B4F280D96DEA0B7FF0CF1C71B27BED77BC4434AECB0925E0879C1FAAB941EC7DED2F7A0BB8CD2211DBBDF792D27A36AC66D7ACA3A5F8AAB
Malicious:	false
Reputation:	low
URL:	https://connect.secure.wellsfargo.com/auth/static/ui/loginaltsignon/public/js/vendor.205d1bb1b9499f39d551.js
Preview:	/! For license information please see vendor.205d1bb1b9499f39d551.js.LICENSE.txt /.(self.webpackChunkloginapp_alt_signon=self.webpackChunkloginapp_alt_signon\|\|[]).push([["vendor"],{35852:function(t,e,n){"use strict";n.d(e,{A:function(){return R},B:function(){return m},C:function(){return L},D:function(){return w},E:function(){return s},F:function(){return z},G:function(){return W},H:function(){return I},J:function(){return U},K:function(){return Z},L:function(){return X},M:function(){return tt},N:function(){return J},O:function(){return rt},P:function(){return N},Q:function(){return nt},R:function(){return M},S:function(){return q},T:function(){return j},U:function(){return P},Y:function(){return Y},_:function(){return G},a:function(){return D},a3:function(){return et},b:function(){return F},d:function(){return $},e:function(){return A},f:function(){return B},g:function(){return H},h:function(){return V},i:function(){return g},j:function(){return k},k:function(){return a},l:function(

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	238
Entropy (8bit):	6.779703555852391
Encrypted:	false
SSDEEP:	6:NfX/CUkUNj8IUwuASQoeUZ3H1j0vPDO2Pmby:xX/CAAAGUrdPm+
MD5:	C177BFC93A4FD345C550B35947FAAEF8
SHA1:	D169009C0093FB8639378C83E655639D83AD501D
SHA-256:	6E4B75880896E64417FD81A08780F4899BBFF7D3D0395487026AB1BC4B59B50B
SHA-512:	8FBBD48A5A05BE4899A0F2511F4CF23B936C2B6CF92B989CD16D7C14A5C28BED34D43232DBEA827103A881F72F89F259623F810A9CDEE77D4888AF25C8D81CD1
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/locator/icn_error_16x16.gif
Preview:	GIF89a............&..)..+.....0..3..4.'A.+E..G.1J.6O.9Q.F\.Nc.Uj.ex.q..t..v...............................!.......,..........k ....BCick.A,.V.=2s]..t".,..x*C..#...CAf2.0....0:....[5...!.u8.`I...@...b.....r2OY1."7C..C?.0U4-#%.V+-!.;

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2634
Entropy (8bit):	7.880166534008472
Encrypted:	false
SSDEEP:	48:zW4dbe2Lr8O6uJhlDq6Osbe/n+VmbyhrUM4JQ1SpMCHbaxFIBWt+g0Re:aobx8A2WW+qyhrV4JESD7axFIBWt+gEe
MD5:	F9906D63CEC3FF40020A446BBC7BC3A9
SHA1:	855204CEED6D88586D184C9757BD356E7580B026
SHA-256:	58C9BE2F839EA082919F1E4C155FEF503B63AC83A1D6288BCEC0C5254D2A3A91
SHA-512:	9FF3AE14E0C26C0C2074F4B6151C8C07D3426E3F144D6E2A968C2FB529040FB8C1C2729BF2960EC3DA3E5F3D66D65087C41354BC6C5684733B2052EE39EE57A6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....orNT..w.....IDATx..[}pT....s..H.ZD........... .T....m.P..T......3..1e..jK..J.RD..Cj....2.........\|.{....+.,..n...;....}...=...9.......0>..Jw...[.[..:.SI.!P..PB,.n&..[z.U[.74t.........hk.:@G..........o...../.}......fhGG..L..`....)..[7...u..B..V..\....w...v.....t.9..l~.............K....N....?..D...h.%..>.tKA.x..Q...R...t.[3....W].C..2[.T4./(..J.......3.......8..b..@...R..:......U..+}...AB...?dL...kr.D...8.A.m.@AE....D.k...9....a.....z......)1....g..I.{....J..#>u:\|........>......<.h.E.b... .:.d B........s..<..y.\|.g..'2..J.{~.n. XyY.4.p..z.DZn...B.....a.....(. .........0....x...e...+.......w.r......9VZv....Dp....._.6.n...(...(D...H!.@A...D.]&../. ..V.....%u.%....xu...u. .....xu?:.a.....s.....,.....~Q...f...V...+..7C.]e..[O....3..=..q.33D.m.._...:....v..9...a..<.`X.......>.5.Iv!....?..../.....L1N...B.?.kd.#..`+1T.{..r..X=)...._7.O..o>.i.m..'.9x.P..f.B.%.L:....a?..L...].v.c.[.}w.:4.....c.......&.......T..

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15058)
Category:	downloaded
Size (bytes):	16702
Entropy (8bit):	5.441932751611097
Encrypted:	false
SSDEEP:	384:SUP4BZ+UNQPo8Wrt0DrpDJNoAWVQsYslGNoAWVQsY/+NoAWVQLYNoAWVQCCwKNoF:SUPEf0DrpDcBt
MD5:	F8ED7A36884E442C03847E482647B8E1
SHA1:	BAE9CC143BF67DFEB1A99270B8F82666290B98C2
SHA-256:	A69E6FB58DF72540553B75552E4721C8E1D57086789F1D0A84C1BF49DB0B1956
SHA-512:	49DAF8679C2ACFA3620EF2401B4043E27FF9F5CC5AA95FBB1FCFE0B033B9E87E14D9562E44B0FA07B79F97A8A991EA2E7E847C1E96C65889926149E3637C450E
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/main/utag.328.js?utv=ut4.51.202207272202
Preview:	//tealium universal tag - utag.328 ut4.0.202207272203, Copyright 2022 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<35){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(th

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://fcmatch.youtube.com/pixel?google_gm=AMnCDooB--uE3qqwM60W-aFIvHRoCOUhU6Ul6HroemNjvvKfJVwxfqQOG2V4li17-b9TX64bRRCx9kEPSj-5RJKKu2ZKwmFKSFf6TCRlcnlLlDJOmPbZ5BU
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 27448, version 1.13107
Category:	downloaded
Size (bytes):	27448
Entropy (8bit):	7.98132102863624
Encrypted:	false
SSDEEP:	768:hnXNntK0VpqAlZ63YBEVql7dT03qIwMqoRP+CD66:J9tK0VzlZkUEVqlB03szEFD66
MD5:	E048B978A6860C135C788B69A0893951
SHA1:	DF9CB3940D26C86C0D5562073729136C38270810
SHA-256:	178500E4966AA916264480D83ED5DEF33333CC703EA7E1DE1009E057DF8EEA0D
SHA-512:	4F746DC80A60E4AFF4066042BE6E5F3358AF80CD1499561EC2990F76A19DE6B231584BEC82D4EDDAD9DE16E34666048F4B0F503150ED6D239530324BB7C50EFB
Malicious:	false
Reputation:	low
URL:	https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargosans-sbd.woff
Preview:	wOFF......k8.......\|..33....................GDEF..X..........k/lGPOS..YD...Q..1V.<}.GSUB..e.............OS/2.......Y...`fp>.cmap...........,.#..cvt ...p........(..vfpgm.............0.6gasp..X..........(.&glyf......D...tR..Qhead.......6...6.u\.hhea....... ...$.%..hmtx...T...n...x.A7hloca...@.........Y.Umaxp....... ... .x..name..Wt.......b6#\.post..X........ ...(prep...\........&........33.5.._.<............0.........)..................x.c`d``...;......._Y.."(..............K...K......./.a..........x.-...B.........hB:...%....@d\.\|r.kUG$@w:..eC]ri.\.T..9L..'N.5lq....s..I.(..Y.@....@.....x..c.<g..o2.7..k.m.m.m.m....9.N.v..9y.77....$I...>..7Jq^I_.i..G....@....>W...n.....]...."...nzL.....7.......j.E.*.k'..}.1...2.k..,..+...V....m......>......$?.~...9\|3MjMZ.M...O....0..T.].n._..,0..aq.......`L.........X>.z\|%..3.^........u.....ia...c'..a.t?..Yb........~h.u5.^......`!.6\|....4.V..G...i.\|L.E}.Q..;k..._..O...^.....>.B0.\..i-f..e..'s...5....K..Hq?...{.....~..g...5.

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=703-289271-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2Fchecking%2F&cb=1711631997161&event=PageLoad&eventType=PageLoad&eventDescription=PageOnLoad&device_type=DESKTOP
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	754
Entropy (8bit):	7.140943188090096
Encrypted:	false
SSDEEP:	12:6v/7+no/z59rasfXW9rXBsrioZkSO45m0j+Wnhk0D2IoD1Oj4OMstT:/o/z59raWGrCpxm0j+chPo4Yst
MD5:	6B7F76538B6DC15084570B2437DE1FE1
SHA1:	450D7C0E390FA1FDBAAC9F20D81FC776E47FC7B8
SHA-256:	93FDB81F02A253E14BAD30D868B379BA112BCACBBC9067B8CBB7567CEA529FC3
SHA-512:	F4301CAB40350CC0DF3E5A6A030103E07BD82EA8BA0B68AC32FEC646066013065053D580C6F26DFB075BDDAE2C1F6643466327FF3A4E9F2E99207EB50549A226
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....`.......PLTE...<40:32:32:21;31;31;32;30800@00:22;20;30:30:20;30;21:50930;31:40:31<30:20;42933;21<40;30=30:30920;20;22;21;31:20500:30910:00;41;40:50880:20;31vC.\.../tRNS.@...._ .......0o.O.`.o..P.pp...0..0.p` ..U.Z....orNT..w.....sRGB.........IDATH..U.r.0..-vb.....B.:...=..w.X2..if.qg.&KG...N.....M.H.X...&...jm.:/...n..s.7....`..~.R<.9.G.bz..I%.>.qD.dqOZ..O.O..b#..KU.. ..j......C.gD.bj%..4V#%..8.[.........h.1.O...<."8.;!......S..B..v.bDY..D..1)O...h.J$...V.pD..Ns`..dX...M?q(..0..,..>.@.Y@....HR. $..I.TPt..c..o...%.^."i......P...5q.~.Th.7.....a.".P"k....y..DUu....>N..r.....2 t.O8..Aj.......r._2.<>c.*-g..M\|....._...A....(.......b.G..~C}..M.'........].....j>V...........%(7..`'....IEND.B`.

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	562
Entropy (8bit):	7.497063066477136
Encrypted:	false
SSDEEP:	12:C271bFizKnACRn59PPtIJ7XF+0/cNDBKjkiiMnKOBhQBKvB+:175FizOnGrcNDCkiphNvk
MD5:	2BCDE1C3190B4AF34B91259D18DCC641
SHA1:	3E6B6735A8876B4A326648142FAB032A8BC57999
SHA-256:	DE658330C0F53DE61D10240F572508C31EE9DB580F34B856430724F2E499104C
SHA-512:	55C26D65ED26968C5FFF8568E7371211BA3BE1E534A50CAFBDEF144746CC97E11E3F62B6AA18838DA9A848B6534B630F552A3DF9EB9007AD10A1CB203A6E4303
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/contextual/responsive/smlprimary/wfi000_ic_b-wf_icon_ui_card_gradient_64x64.png
Preview:	RIFF...WEBPVP8X........?..?..ALPH.....pZk.\|.uX........@e..L..(.M.3..FRU....t..l..$...;.....j.M....c.23{...{.L...S..".S!6...q..SM..dS5z..3..6}mrl...p.+1`..h.,b.x.<.cM.....O...wc..(h{X..V..-.....'..........b...........`.VP8 D........*@.@.>.T.L?.."1......f...y.U.........3.._..P..KOi."rI.`..SIQ..>..w..F<..qI....Po..6...O...d.B....?.?..C=...6.vzDB%_.....,..CN...;..C..M.]I.2O............i5..v..g..g5M....\|!....Pkk..9?......v......a.........h.'.Y3./X......h>.........ip...@.c.E..G.....W.{.C.\|8..=.JM.Q...V.z..f..`o.....1..L....D...x....

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	139179
Entropy (8bit):	5.317709222059923
Encrypted:	false
SSDEEP:	1536:e4qB6vOPSHbf0CSJ3QdP4m0gnkk7tmDCGWoyVHsCDlegzPp+K2tFhOu13b3uMI04:ISoyNDlL+K2tFQLWA
MD5:	FC3CE21754826979E4923D0EA0D93032
SHA1:	28D8F599B30B4447E12F3848BD0B2C5119D49686
SHA-256:	60607198755BE9E29CAE7F3963D69D5EB8D48B301D23ED02DAB604C1E0423426
SHA-512:	285C726D7AC1C67EF430C34079ED8CBDFF0CEAD62D74C369EC80DAD849E57574D5259A255EA16DB710B39EB07EDF7F066B7FF72052E0A5675C29DB4CAD416892
Malicious:	false
Reputation:	low
URL:	https://cdn.schemaapp.com/highlighter/prod/WellsFargo/v2/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20
Preview:	{"accountId":"http:\/\/schemaapp.com\/db\/WellsFargo","url":"https:\/\/www.wellsfargo.com","templates":[{"@id":"http:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/Template20230223205052","updated":"2023-11-08T20:07:47.662Z","@type":"HighlightTemplate","categorizedBy":["CollectionPage"],"label":"Mortgage: VA Loan Program","hasHighlight":[{"@id":"http:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/Highlight-20230223205323788-13636","@type":"TagDefined","xPath":"manual","value":"https:\/\/www.wikidata.org\/wiki\/Q1210094","propertyPath":["about","Thing","sameAs"]},{"@id":"http:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/Highlight-20230223210401999-4023","xPath":"( \/\/div[1]\/div[1]\/img[1] )","propertyPath":["image","ImageObject","url"],"@type":"TagXPath"},{"@id":"http:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/Highlight-20230223205405681-3949","xPath":"stored","value":"https:\/\/internal.www.wellsfargo.com\/#SharedDataItem","propertyPath":["author"],"@type":"TagS

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56578)
Category:	downloaded
Size (bytes):	450058
Entropy (8bit):	5.199776779064708
Encrypted:	false
SSDEEP:	1536:2BmkHKJSbpxbi9X/Fu4Aa97ewpIpkanF7sMTe8NqsudfU0OnBfyJPgyHumtmPX8X:0xzUmfsScP6+QVROTBH
MD5:	96816C62E90CEE95DDEB81CAF58BFADD
SHA1:	296533CACF3B71EA9B125B056F8C3F4A4EA3E748
SHA-256:	6CF6ADE63CE939D3E3630500328990E6EA7758D77DA1F5DDF560D112C9028682
SHA-512:	B928989F682608487DE1D1E6F40F9D2D74AE01C8EC92EBEDE8D24ED0243957B5FDE01F883BC20F8E19692557248A741161DE9E9FE7BD4AB0427E1996BEFBA128
Malicious:	false
Reputation:	low
URL:	https://media-wf1.digital.nuance.com/media/launch/site_10006005_default_helper.js?codeVersion=1710907168986
Preview:	/* Timestamp: Tue Mar 19 20:59:31 PDT 2024 , Code Version: 1710907168986 */.var JSSDK_HELPER={helperGlobalJSFunctions:{},helperExecutionBlockingFunction:null,helperInlineJSFunction:{},helperGlobalObjects:{},helperCustomJSFunction:{},globalJSVars:{}};JSSDK_HELPER.helperGlobalJSFunctions["genericDatapassFormatter"]=function(dataobj,extraData){var data='';if(typeof dataobj=='object'&&dataobj!=null){for(var key in dataobj){if(typeof dataobj[key]!='undefined'&&dataobj[key]!=null&&typeof dataobj[key]!='function'&&key!="SAML_URL"&&key!="KEEP_ALIVE_URL"&&key!="TAG_SERVER_URL"&&key!="CHAT_ROUTER_URL"&&key!="CO_BROWSE_URL"&&key!="MEDIA_URL"&&key!="CLIENT_STATIC_URL"&&key!="PS_HOSTED_FILE_URL"&&key!="HTML_PATH"&&key!="HTML_NAME"&&key!="INQ_CHAT_LAUNCH_URL"&&key!="DEEP_LINK_URL"&&key!="FIRST_NAME"){if(key=='CLIENT_PLATFORM_CODE'\|\|key=='CLIENT_APP_CODE'\|\|key=='FULL_NAME'\|\|key=='LANGUAGE_INDICATOR'\|\|key=='DAYS_PAST_DUE'){if(dataobj[key]!=''){if(typeof dataobj[key]=='object'){data+='<br/><b> - '+key+

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 15, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	181
Entropy (8bit):	6.08407418371658
Encrypted:	false
SSDEEP:	3:yionv//thPlHwtz/gksKXtMlsLtsddhlHu3KynAqIXKGoBy9utIB99+dyW1eGBMo:6v/lhPKtz/gksKXtksRUHu3KyAbqEkc8
MD5:	F2ACDE43D0694B9931313A6EA22B8E45
SHA1:	280BA762C2604781C3E1872AD728AFEE48A5FDB5
SHA-256:	ADE9D3139032EF52A4790C2F5000AF2AC22CBAF6D1E80A56A86DA9B373CE1E11
SHA-512:	88CABB4B9C316233496E9D6E7CBB091C68028C05651E4D543D922A5EA088F3B4954D0C7532352A3753D71C9DA83D89F76D2986F5F868E36070FE6755F3F0BCFA
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/global/chevron-large-right-grey.png
Preview:	.PNG........IHDR.............w.......orNT..w.....sRGB........bIDAT..c``..N.O.f@..W....N.G..eO....C8-;..D8..Y..<.dMdW4....s.B)2i...9.B...I..Zp.C(.-.'..Xez.zd!..yX.P1>w....IEND.B`.

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F&cb=1711631936551&event=DisplayFatNav&eventType=Presented&eventDescription=DisplayFatNav&clist=tcm%3A84-226512-16%7Etcm%3A91-226306-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	2744
Entropy (8bit):	7.799061514678082
Encrypted:	false
SSDEEP:	48:rGAc/jQAcZzJoNSo29fAOQl3kSFIH2NqCAVTEhQECw43DG7fI8LWvQDNwGm5HVGp:rGPQxMNxCA1kIIWNA5IRCt6M8LWSFm5a
MD5:	2ECC08E1CB7BE2B868E97F1DA83AAE84
SHA1:	4A07434AB9B8B9770AA194873FA1F40A1DAA9BB7
SHA-256:	742262FEB5FE1315C1B93F6A982CFFA20B989BB23DF34338E85DE4FC88EADF3A
SHA-512:	7A8F5F6EF95A931F94A81C6EBEE2C6CE0E1A4B2993DACE82F3F8BFCBA981F48A18BC7AC0BCE82F75557B93A2BBBCEB2152F257632082D8465923DB2D7CEB92D8
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/contextual/responsive/lpromo/wfi_ph_enjoy_525_1600x700.jpg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@.......................#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe.......8........pixi............ipma...................mdat.....!......2.......q@.....Y.-.......d3.n..h!)<..q,.a..Z...u.....'..H. .b..O...'[..j..@)J+.K{...]...il..4......k...k.v...h.n....$.{"`1... .i.}.......... .;.9s5S.Yv..e+...#.;..Ef...M....1...N.s.K.Xt.u..7>..[...s0......Em....~mgAI.bz.....r.K1n...6...r..M\|.}..s....Yhc...$..'..;...u'.D....[E.t...$.yICu..P....1~...x.e..../.X..!?..g....#2...D..l.}nnYr.x...?...!.s..jrd.....I..(.b..}.......[y.i....=...Y9..-..o....gl..J..9"..ht....t..+...C&Z....TC.c.p.M..m.......4rR.U..c#............T< .,.'"..A. X.&.n.c..!......]...I...J.).S6....H.5...*hD.H.b.4S.M.x.....Vg..C......n.Y../>ft.(...D..`.-K...;.NY.z......'...E3./....D.......,....Hc]`...WLI..]ef.mv").I...=.......u.}...}..M..G) ."O...z..h#.fe..~

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52907)
Category:	downloaded
Size (bytes):	54551
Entropy (8bit):	5.169449693352306
Encrypted:	false
SSDEEP:	384:KUP4BZ+8HXexHXXxHXyxHX2xHXVxHXDxHXMxHXdxHX1xHXjxHXqxHXqxHXExHXLa:KUPEnmuMw+bTBZdK
MD5:	450D3A9882B4624DB941596C588ACFED
SHA1:	9A5F98FC833C867152E0B31BB0240707CD24469E
SHA-256:	51190A075A82C36BB98520ADC948C8FCFF2F470A18D5011B38AF763A618ED9AD
SHA-512:	EB22144AD9FC1C7CEFD00D220EF4A09EA22EDF035B48178BD00D1BA353519C87CECD5109F3BB74F36575BDE67C3F4AC095E60DFE5D2E758716CF428F63038DC8
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/main/utag.316.js?utv=ut4.51.202311012045
Preview:	//tealium universal tag - utag.316 ut4.0.202311022132, Copyright 2023 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<35){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(th

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4060), with no line terminators
Category:	downloaded
Size (bytes):	4060
Entropy (8bit):	5.232126675758463
Encrypted:	false
SSDEEP:	48:AwjFfLdsFfGjFfLdTjFfLdKjFfLdrFfLdJJb/Jv7bNyg2Sv2a9c+cYlPAAfRm7LW:AAYgT6vNtd7Zq6F4MMVrMj
MD5:	FD04D5DC344F4F0A7738D3E93A46F611
SHA1:	F4C29CF0955192A4A9261A0542EBA14673E480EE
SHA-256:	7F55C6503B6B9AFB16A2FB1696206F9EF0DBE5EB0D02D56368AA67C7FA2D1477
SHA-512:	C68D41CFD283526330305306295E2609B3F56D162D5A2BA9C559A7C981B2407CB1A74F803360396DFC8E8AEA17AAFB8377D1EF7E61B9855074DFE6AD6537A7E2
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/css/about/about-us.css
Preview:	.AboutUs-item{border-bottom:1px solid #d5d5d5;margin-bottom:27px;background:#fff;background:-moz-linear-gradient(top,rgba(255,255,255,1) 85%,rgba(237,237,237,1) 100%);background:-webkit-gradient(linear,left top,left bottom,color-stop(85%,rgba(255,255,255,1)),color-stop(100%,rgba(237,237,237,1)));background:-webkit-linear-gradient(top,rgba(255,255,255,1) 85%,rgba(237,237,237,1) 100%);background:-o-linear-gradient(top,rgba(255,255,255,1) 85%,rgba(237,237,237,1) 100%);background:-ms-linear-gradient(top,rgba(255,255,255,1) 85%,rgba(237,237,237,1) 100%);background:linear-gradient(to bottom,rgba(255,255,255,1) 85%,rgba(237,237,237,1) 100%)}.AboutUs-content{position:absolute;width:227px;top:0;left:0;z-index:1;display:none;padding:11px 11px 19px 11px;border:1px solid #c6c6c6;background-color:#fff;box-shadow:1px 0 1px rgba(0,0,0,.15);font-family:Verdana,Arial,sans-serif}.AboutUs-content p{margin-left:9px;font-size:90%}.AboutUs-content .cta,.AboutUs-item .cta{margin-left:9px;padding-right:15px;f

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65453)
Category:	dropped
Size (bytes):	1660038
Entropy (8bit):	5.428073059535916
Encrypted:	false
SSDEEP:	49152:zf0L0hZZkcCwJhGjKjycXQcp1uvh1g63lI420q44mvrN0n:zfzuvhjGn
MD5:	E66A9580C71E334F52FBCA8939789B5A
SHA1:	CDCAFF21157B43D032E753F2CCAE16F2DBB912E8
SHA-256:	8F8105111FC55B4CD0B2BE419FB6BDBA09BB079E3D8D6833DC8C3F890DAB39B3
SHA-512:	5FA82699AAA353BC7350546B435854730470000AE0DE29D31005D59795DBB0BEE70AE963910C36AFE6B581E46DB3884BE94894BEA455F2CB1B7AF18E82B595C3
Malicious:	false
Reputation:	low
Preview:	/! For license information please see wfui.7da5daa5ec19e9914fda.js.LICENSE.txt /."use strict";(self.webpackChunkwibac_accounts_ui=self.webpackChunkwibac_accounts_ui\|\|[]).push([["wfui"],{98225:function(e,t,n){n.d(t,{A:function(){return d}});n(52675),n(25276),n(69085),n(79432),n(94170);var r=n(96540),o=n(61225),i=n(10540),a=n(9280).A,c=n(39159),u=n(52133),l=["handleContentClick"];function s(){return s=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},s.apply(this,arguments)}function f(e,t){if(null==e)return{};var n,r,o=function(e,t){if(null==e)return{};var n,r,o={},i=Object.keys(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0\|\|(o[n]=e[n]);return o}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0\|\|Object.prototype.propertyIsEnumerable.call(e,n)&&(o[n]=e[n])}return o}var p=(0,i.n7)({h

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (507)
Category:	downloaded
Size (bytes):	6138
Entropy (8bit):	5.311904233773305
Encrypted:	false
SSDEEP:	96:/LYPtvFLciyhgdy7xXJnDFLKhAZCMjzP4afaCNoUan2lQDHDFZ5CVVhQlYZboYHR:/LYPtvFLciyhgdy1XJJKhA5uCey+HDFa
MD5:	8D3CE846F0A7E9CE82D4C6BF10583568
SHA1:	0568E1B7EBF8CA2DF281643E3E20C2B6CE1DC4E2
SHA-256:	8C89C4BB17014CF4021F93D14D96BDC4D4DD5404CEDBF83D89A6A8A7CFDFA5A1
SHA-512:	0562086549AD75E5AEEEF2118FB9E84C2BA9A1E16372CEAF74FDCDDDF0C086E12B638BD266D3200173014BA091F780E9F50C838A8ED225EDBA71B978582063AA
Malicious:	false
Reputation:	low
URL:	https://connect.secure.wellsfargo.com/auth/static/prefs/login-userprefs.min.js
Preview:	'use strict';var ATADUN_PATH="/auth/static/prefs/atadun.js",isNative=isNative\|\|!1,loginUrlBase=null,scriptParent=null,getUrl=window.location,upjsErrors=[],isEncoded=!1,loginSignonBtn="",collectDeviceInfoConfig=!1;.function disableSubmitsCollectUserPrefs(b){for(var a=0;a<b.elements.length;a++)if(null!=b.elements[a].type){var c=b.elements[a].name.toLowerCase();if("submit"==b.elements[a].type\|\|"button"==b.elements[a].type&&-1!=c.indexOf("submit"))b.elements[a].disabled=!0}return addLoginFormFieldsAndSubmit(b)}.function base64EncodingforNDSPMD(b){if(!(loginSignonBtn&&loginSignonBtn.disabled\|\|isEncoded)&&b&&b.elements["nds-pmd"]){var a=b.elements["nds-pmd"].value;""!==a&&(a=btoa(unescape(encodeURIComponent(a))),b.elements["nds-pmd"].value=a,isEncoded=!0)}}function addExceptionsToForm(b){if(0<upjsErrors.length){var a=document.createElement("input");a.type="hidden";a.name="jsError";for(var c=upjsErrors[0],d=1;d<upjsErrors.length;d++)c=c+","+upjsErrors[d];a.value=c;b.appendChild(a)}}.function

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 686x1000, components 3
Category:	dropped
Size (bytes):	3127
Entropy (8bit):	2.3099512765079684
Encrypted:	false
SSDEEP:	48:/llXGVt1t3PVt1t3GQB+VRGGGGGGSGGGGGGXMODid26:/Ov/fv/Ww+146
MD5:	11F724D51BF528A00D56B2FBDAD76D93
SHA1:	74B9AC6AB923926485F9D98EB648326EF7EDB3F0
SHA-256:	6479BA8947559226909296B93E16FEE284E8118B0038FFF924097C38615684F2
SHA-512:	CE34A416FEB21F92AB0C9EDA7B9B42C9DB1BA996CA328DEB22ED44388D603324B120FB0647AC590F3087AEB82EAC2465829AD3933B93E16327759C6B0E1D5567
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..................................................)... ... ...).?.'...'.'...'.?.8.C.7.3.7.C.8.d.N.F.F.N.d.s.a.\.a.s...}.}.............5............................................)... ... ...).?.'...'.'...'.?.8.C.7.3.7.C.8.d.N.F.F.N.d.s.a.\.a.s...}.}.............5..........."..........)......................................................D..................................................................................................

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F%23skip&cb=1711631945420&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_ccd_findcreditcardrspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-228930-16%7Etcm%3A91-228643-32&promoSlot=2
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=703-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&cb=1711631971852&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A542-228930-16%7Etcm%3A91-228643-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	2833
Entropy (8bit):	7.804582559779277
Encrypted:	false
SSDEEP:	48:rGAc/jZRAeYAeayS18VHe6m4CGHuHArd290tE4CPiMfsa6nlhbBrr5kzLy1azMws:rGPzl/yS1++6GHArWJi35r5Q+Qv7g
MD5:	CD9083E8E35C8B6C5211CA5079428871
SHA1:	96D6F2D7AB42B27808AD0EF66F0A4D5D021A0AA0
SHA-256:	A548A813FB25721B453ACAFC2336A89AC43D0F97D7377BE2D543ED6876FFA8CE
SHA-512:	7409BDE8CD7F396DC919B2F5117FF11B760032D57EE95C242EE3EEF2A734389BC5D1C7D3C0160E501F3171E79906ACE614CB3C1609DB76E502CC590D8D3F8254
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/photography/lifestyle/227x125/leadership_governance_new_227x125.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@.......................#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe...........}....pixi............ipma...................mdat........0@...2.....I$.@..kbc.2.Gy....wC.Do..N=....x...=..v. G._9n./..d...1..9=.2W./.n...4R.....5.{.L...W!.JY.M.m..Fk.R....D>..>.b..;..(K..+...fF...Gs...QA...~}.W..O....9..!=........7c!W.1!^..^.......{.od.DR. p..l...).\|N ...'t'.3:ut..q.....m...8...U...3...$...Dy...K.U.3+................".P....q.T.V..\|.}1.<.y.J...........S..x.^"..6..y.!.......m.......W..t\5[.-).t..{...z\(...A..=.:(*.1t9`.......vf.....>.ozf.g.~.G..?B.'.....}",....k..@.Z..d..^O..0.m..=L.7 ;.9g..i"f..#r....<n.`..fCX,/O......0).m....vz....)+j.i.C`..qi...&..;.h.X.-w.l.B....{6..C..Q0.E.+"....B`....^}o.2e...F.f....D.......E..L-....[H-`7.c&.....$.....Wa$<%.I.S{..J>.4m.oP...4.O....}.....L..%..j.9.q.$.<...%.>.%.......v.....

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	5132
Entropy (8bit):	7.9042489575483605
Encrypted:	false
SSDEEP:	96:rGPCwxMMBBbKff9GQXEMMlyM6byu/XXZEmnbW35G0aNVqA:rGqwxXBBen9GQUXl1w/5W35GPz
MD5:	2393571CF3AEEAA77287FB78A77A9181
SHA1:	A4E6CF3949BB53092590A30D9D4CF04DD88D78E8
SHA-256:	DC344B4A8E50F3E5DB446AD4C2FB19276D1613B287C5CEAFE6A009FE6C3F2A05
SHA-512:	605D0AB57DFFB4EB62A5BF4D773E93D897C7C3E3FB179999FB9B916DF9F3273DA35AE92B92A39E3E41E7FADA739A0761BDD9C33201DB1687A788BC28CBA2C091
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/photography/lifestyle/227x125/working-at-wells_fargo_new_227x125.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@.......................#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe...........}....pixi............ipma...................mdat........0@...2.%.....a@.H.i0..#m.CNo!(t~.U.....).\|..(.D..z6[1w8.a.v.._.:.^../..u.r.#......$..=..-.;..EV.e...>..j.....`....y.W.N~....4~4`.......<y...\..2......i[...Q%.Y.C..S.8..a.>....^\|gm..F...c.:.f./jmW%.P.G..x.P.8.......<...A.M.+fl-A..D.....g..^.f6..$...D.c..66.BG.Z~.Wr..v&^P...w....E4..H..Cm.T.w....4..%f!....l...'$T>7...(.....X2.}8Y.N...m.sol.[...fFgI.j.e.0.t]$.Q..Y.-GKe #..\..mp.s.y...T0.UP....6.zr.3..,.1.q........k..m..)DH....TK.W...(.~[..:Q}.%.f....mk..h.......u.S}....i...8Y.U.<\|iST..].....I...ecNMa.j...S...l.j..0]..fD.?.._G.N(0...6..c............-.........*...g...%..#.B...0...r.2.j:.\|.....p.,).V.p.lt8.F(............cj..qk...poW9W{..4..>..)...@.#.+C.....0~.9.#8....#.0.....q...I$,@

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	563680
Entropy (8bit):	5.357462435343029
Encrypted:	false
SSDEEP:	6144:Vw3sHxRL9mGo5GsG0GJd61JxkJFUeM07bZinbd2YxeBXNxDnYpH:GCD6hkFUV04AXznE
MD5:	893BED56BA5573201BDCDE5A932E561E
SHA1:	D2DE79189F034B06DD1ACE34C70FA0293EAF54F0
SHA-256:	12AEEFE8AC9A9B640EA6F7B02F4564E2C963E07DD64EF7EB9C2A3AE93685890F
SHA-512:	8A4C1076B8775880424D4A2814AE1346D08B810AA971169D7F26483392D6F358FA3C39706AAED1C74AA926C4D5704AE1F6F56A45639A70630B5E947B51F4048C
Malicious:	false
Reputation:	low
URL:	https://connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/js/vendor.e69a15c07c19c3e48a3b.js
Preview:	/! For license information please see vendor.e69a15c07c19c3e48a3b.js.LICENSE.txt /.(self.webpackChunkwibac_accounts_ui=self.webpackChunkwibac_accounts_ui\|\|[]).push([["vendor"],{16873:function(t,e,n){"use strict";n.d(e,{$:function(){return J},A:function(){return I},B:function(){return T},C:function(){return L},D:function(){return m},E:function(){return _},F:function(){return z},G:function(){return B},H:function(){return c},I:function(){return N},J:function(){return F},L:function(){return K},M:function(){return tt},N:function(){return et},O:function(){return Z},P:function(){return R},Q:function(){return it},R:function(){return j},S:function(){return Y},T:function(){return D},U:function(){return rt},V:function(){return C},Z:function(){return Q},a:function(){return U},a4:function(){return nt},b:function(){return $},d:function(){return q},e:function(){return A},f:function(){return H},g:function(){return W},h:function(){return V},i:function(){return g},j:function(){return E},k:function(){r

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4814
Entropy (8bit):	4.898120841070492
Encrypted:	false
SSDEEP:	48:YF+WOmRQWpycOB4RHqh0nJDjJCCu5ouWNVp9PONHsrvD:WZOajQo70GL
MD5:	4E0235D9C13593DE8787AC420D357280
SHA1:	CC965DB6C3361D663680A5AFC775FEFADB12724E
SHA-256:	92A4E6EB8E8EB630FAE0E56D40E9C729D2E6F0FFB3996F76046756CAE936FEFD
SHA-512:	A8D8822477E38927523DAB78B7C1D8EC818334DB057127CBBB39C710D1562FDA5C381E1ABD8A2D588399AA45871DC3BBF59970A38E474D2A278E8248AA9A0AE0
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_BankerUI_ErrorMessage","pageUrl":"https://apply.wellsfargo.com/banker","pageHash":"","selector":"[class^=\"BlockMessage__content\"] span","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3

Chrome Cache Entry: 666

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1430)
Category:	downloaded
Size (bytes):	6539
Entropy (8bit):	5.325240397175215
Encrypted:	false
SSDEEP:	96:BbcnP4ReIZB/oFRLWcatJtFRB6J/SNNyLxhTCJUU+Oh5/zdQF:BbcnP4gIZqb3atJtFz6J/S/k5UJiF
MD5:	E7F87718B4ED12D31B6D61833A8ED3EE
SHA1:	F294B493DAEC7BC1C8BE27CD45E1A1846BDEA6CC
SHA-256:	5B8A216C50E13ACE2189E3613E4A626F698EB90F180CB0D37BFBE31E838233A7
SHA-512:	20D88241F41C7CC7C42C5F29C9BD1290EC246E0BA1A29D6CC0126734B7CFC435B2879C100BECA044C29F1CFE3714E93899776A09943657344E47F9C2A77C35DE
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/public-site/utag.485.js?utv=ut4.51.202302101820
Preview:	//tealium universal tag - utag.485 ut4.0.202302101820, Copyright 2023 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.loader===undefined){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(this.readyState=='complete'\|\|this.readyState=='loaded'){this.onreadystatechang

Chrome Cache Entry: 667

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1171897
Entropy (8bit):	5.562952830809171
Encrypted:	false
SSDEEP:	24576:rnuQXo+tlVjfThdsNegXEe+GBR3D8jRSPrOS5nqW6n+jCpukC8lcbpIcsLe6Fw5G:rnuQXo+tlVjfThdsNegXE2R3D8jRSPri
MD5:	4A4C8AF07D36EC82A25C430670776CDF
SHA1:	DB69F117114A32772FF054B68A5BAF1F0C27DA29
SHA-256:	7C24F7990624F3C959A80B2CE2BC3B8E4165E65D48AAEFA19B7448A596966F34
SHA-512:	EE44036571977F47A0D6BFB2342AD8E269C590C8869CD7BF15D1C1BF9061C8386206AA2548407D581AB5AAA68A8FE959B0CDAF794687A59176A498273930E70E
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkwibac_accounts_ui=self.webpackChunkwibac_accounts_ui\|\|[]).push([["main"],{95765:function(e,t,a){"use strict";a.d(t,{A:function(){return Bt}});a(62062);var n=a(96540),r=a(9404),o=a.n(r),i=a(10540),s=a(71673),c=a(89767),l=a(56847),u=a(8936),d=a(26306),m=a(20209),p=a(58168),f=a(62488),h=(a(52675),a(2008),a(51629),a(83851),a(81278),a(79432),a(26099),a(23500),a(64467)),y=a(80296),g=a(19460),v=a(69835),_=a(15676),E=a(71418);function A(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function b(e){var t=e.account,a=e.children,r=e.displayType,o=t.type,i=(0,c.A)(),s=(0,n.useContext)(E.y).location===v.$C.CUSTOMIZE,l=o===v.X9.EMPLOYER_SPONSORED_RETIREMENT&&i.isDesktop()&&!s,u=r===v.iP&&l,d=(0,n.useState)(!1),m=(0,y.A)(d,2),p=m[0],f=m[1],b=function(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22600, version 1.13107
Category:	downloaded
Size (bytes):	22600
Entropy (8bit):	7.989474204912855
Encrypted:	false
SSDEEP:	384:X4TnfMKBnolaid+tMKsLZqy+1EooqFdf8THOgmFtI2ErNX0sAZwk+pcHgXvCdFPh:XWXBolb+tMKoc1E1qFdgHOujisY+pcHt
MD5:	83DF8749C013F13019FA8E0912041759
SHA1:	2BBFFCF012A59E47661C0A37EDDA0FC772992AE7
SHA-256:	AB9D8C97B35ED86B6224ACA911AA304A0D7DBCBD28E00A4C6585B96E28ED30BA
SHA-512:	60EF81E9500E9B33E9D799D4BD56F8EF4DF5DFDC88A42D5739C3DA65733CFAEDD42AA0DC623D46B370DC750C693CBE0C473C92E6C4C2A7BED2C7DA33B8BCEE84
Malicious:	false
Reputation:	low
URL:	https://www15.wellsfargomedia.com/wfui/css/fonts/wellsfargosans-sbd.woff2
Preview:	wOF2......XH.........W...33......................V..V....`..,..r..W.....d....6.$..x..>.. ..b. ..!...7.m.15"..z......18..P.)b6"v;@.D.....$.c8.6H......B..@C.d.a..aeZ.S.)...d .+.1....K.....}..sU@..L.r.IT.....v...5q..Dls.j.PYo.H.;2A....&>"......M.W.[..t...q."......v..M....C.........$..6...+..)W.Z...@.....6.....b......Xr........].Q5..'..Uz...m..C.....1.@m.p.#g........}..(4bh.........AM...d:@.R.b.?3j...m.Ki...Ws._..!?P..TJJI&Iv.E.../......,.].T.Z.p/U..m.O......5.n.;x@.._A.A. r.....<.y^..\..s.....Z-k..+7w...w..#..Z..B...."....IQ....v..rg.9..;N.p.;.N.;.\.r....\|x....4.......\..O...\#...T+d%..":J...J....!.$..;K.N..}H.9".{2...Q..E.k..O.#.z73.............'T.S.._...?M?.a..:(..E.Rp...&.......jn.9...F.Q[..-.E.........]%.V.bp.... .#S.$...S.t...L ..d.e..J......4.i...;.e.*...uj.:u.Z..7..!e....A[.).!....x.0....?.C...hZ.Y...........fO.R...g..OFT..&..&....@..I.. .._...U.."r5......T...{......:6..?)......p}.Kg...X....D.x...p.._U....%P..!L...t....:...3.w.........\|..6@.($

Chrome Cache Entry: 670

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 671

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1153
Entropy (8bit):	7.770698837905602
Encrypted:	false
SSDEEP:	24:7Il9S1Bt74S2Ej/EUXXlYISpmNVll6+xNLcGG6wsTMXyu:70KT885XXWInDllRC6ECu
MD5:	A5EB29D9E670553BA40485E3441F4139
SHA1:	87EE77CF13F9A4A140DC6071B780D6EDE05CF5D7
SHA-256:	6DB397217E64579889BA5E55D8E4361EECC163E5F7E2529A9FC671BD3F7C49ED
SHA-512:	9BF1020D76CE5D2CA234E194AA4F7468268DB6F4DCF14619BBC1B4982AF08EB6E8A498741D613EC62098C61AAAE11D1621E992EC5619D1F1F34E68FE10ED56EF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....orNT..w....;IDATx..ZMh.U...s.........+y-".. ...[.t).\d..f#.b.B......n.(..ua.Lm...F,...4.h..b.t.\|.f........63s.9.s.=...D..%J.(Q.D.B......1..@.@.v....bz.m>.....Bh.s........\.^.J.B.M..A.!...3....&.6. ....Q.'.T....#Q......,.nH......C".Z..'....2.....Q.XF.Bz.....w.A(...........au0.....i...^...:p......f./.....7..$.:....\|...j...@...c......Z;...#.?r..k.{...Q..P.q.....zk........K...=....SE..?.}....6.=...7..?..1H.NG.....$F...$.V..k@...K.......@.].V\..8a..pc..7.8.Y.!X.s...~..&.A.a.6.yh..$..yT.....<..C.vf.{RS!...!....+D...f...M.......J.o....8-;.....g....O...b.... ,......s....Xj..`.a.X`.TpC...].. ....W.7....O.....ug.l#..v..F.s.[.5..........'N..Z.!.[v..&...Z.....b...8.<c.xs.G1.......w.......{. ...7{On.7SP0......A..fm.`.i..n.,M.F.i`..R....x.C....\..0...P.A.%..;....@i..%.............`.x...Dl...........M.../.j.E.}..L?.n.g,D.....65{.hW.+....]rL......?..q....Z.~.v......n_.P.m....B.L....Q.'.Y...!.......H.T....52Fi=_.y

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=703-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&cb=1711631971863&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_ccd_choicerspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A402-304276-16%7Etcm%3A91-228643-32&promoSlot=3
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 674

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13153), with no line terminators
Category:	downloaded
Size (bytes):	13153
Entropy (8bit):	5.364978195480882
Encrypted:	false
SSDEEP:	192:AImBwE1ckbqYxPkOiib/37QcOMnrCTTMpHQiwK/n8Q3:AbwBFib/37QcOMrC/et3
MD5:	F3C9050688119C2590130D1DC2A63FC7
SHA1:	C48648D7B3F1352326BDBCB78CE3B9EF4DFCE43E
SHA-256:	9C41899F7296D8D7366508188DCD05262262780A92CED9C53D1C3725970557CB
SHA-512:	A102F311E07F3A698E5443C93FC5C49A08F6C6A49CBD03E28605D204ED7A2ACA6EDD4A8366026A472D4DDAD33FE3149A4AF7C9781F9F039A31B1CC9E59DFF70A
Malicious:	false
Reputation:	low
URL:	https://connect.secure.wellsfargo.com/auth/static/ui/loginaltsignon/public/js/main.216c4a458ca3dd512817.js
Preview:	"use strict";(self.webpackChunkloginapp_alt_signon=self.webpackChunkloginapp_alt_signon\|\|[]).push([["main"],{66931:function(e,t,n){var a=n(67294).createContext();t.Z=a},25977:function(e,t,n){n.d(t,{$Z:function(){return _},ES:function(){return p},GK:function(){return u},QB:function(){return c},d0:function(){return a},l5:function(){return s},nu:function(){return o},o5:function(){return l},pD:function(){return r},qJ:function(){return i}});var a="FETCH_QRCODE",r="SET_QR_RESPONSE",o="SET_FIDO_RESPONSE",u="SET_FIDO_ERROR",l="SET_UN_PLACEHOLDER",c=function(){return{type:a}},i=function(e){return{type:r,payload:e}},s=function(e){return{type:o,payload:e}},p=function(e){return{type:u,payload:e}},_=function(e){return{type:l,payload:e}}},51429:function(e,t,n){n.r(t);n(46872)},71340:function(e,t,n){var a=n(67294),r=n(73935),o=n(87498),u=n(9257),l=n(15861),c=n(70885),i=n(64687),s=n.n(i),p=(n(66992),n(41539),n(88674),n(78783),n(33948),n(28216)),_=n(78215),f=n(43284),m=n(46872),d=n(34934),g=n(37889),v=

Chrome Cache Entry: 675

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1552)
Category:	downloaded
Size (bytes):	6647
Entropy (8bit):	5.316285843784743
Encrypted:	false
SSDEEP:	96:tbcnP4ReIZB/oFRLWc2tJtFRB68uSNRLxhTlJUU+Oh5/3w:tbcnP4gIZqb32tJtFz68uSfwUJvw
MD5:	490C2E2CA3D2FD8325B9C9F4D3868431
SHA1:	C580E11BC24CA1632AE1E465DAA60B52ADB69FBD
SHA-256:	8C2EE39291D48226EA52E6D797241CAC968EA7FA64F2612A7475C1FC63B0F5DA
SHA-512:	780D4F9B23F0437B66C632706894646E5D5CD50988127DF99A1883C11BFE558CF401938B7BDFF67629A16E05D5B04FD464B069B62E90588B32115A93E3CB4505
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/main/utag.505.js?utv=ut4.51.202401260008
Preview:	//tealium universal tag - utag.505 ut4.0.202401260020, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.loader===undefined){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(this.readyState=='complete'\|\|this.readyState=='loaded'){this.onreadystatechang

Chrome Cache Entry: 676

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14899)
Category:	downloaded
Size (bytes):	15352
Entropy (8bit):	5.699135763446339
Encrypted:	false
SSDEEP:	192:9kyR5fG+RaR4RGRQRJRbRyRUJFpFvFKFmFUFbFCF+FcFPNDNeNDNwNLNlNMNvNt3:9RPGa2waNoAWVQsY/KSo8Q2L
MD5:	479FEE1497E8ED53FE632CD4110AF660
SHA1:	42FF77F5FE23AC8AFF0D4837F9E5CB0FB8A918C0
SHA-256:	00153616BCD7E705949FA43E3573C41B7808DFE57255D1DCC42E24C4DAD5EFA8
SHA-512:	5FEDAED13EFB95268E672F8B888E7D0214C93A57B4B6EE26A4DE19495F4E9C23BB80BAD63EB1CCC9A0ECC79EE3039243EEB54673436BE9381F35C689F97D10CD
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/main/utag.129.js?utv=ut4.51.202207272202
Preview:	//tealium universal tag - utag.129 ut4.0.202207272203, Copyright 2022 Tealium.com Inc. All Rights Reserved..try{(function(id,loader,u){try{u=utag.o[loader].sender[id]={}}catch(e){u=utag.sender[id]};u.ev={'view':1};u.t='@@',u.i=[],u.p=["//www.googleadservices.com/pagead/conversion/@@gsp_convid@@/?label=@@gsp_conv_label@@&guid=ON&script=0","","","","","","",""];u.cachebust="disabled";u.cachevar=""\|\|"_rnd";u.map={};u.extend=[function(a,b){try{if(b['dom.pathname']=='/biz/merchant/thank-you'\|\|b['dom.pathname']=='/biz/merchant/thank-you/'\|\|b['dom.pathname']=='/biz/merchant/thank-you/index'){b['gsp_convid']='938783839';b['gsp_conv_label']='OaF7CKiw-2IQ3-jSvwM'}}catch(e){utag.DB(e);}},function(a,b){try{if(b['dom.pathname']=='/biz/merchant/thank-you1'\|\|b['dom.pathname']=='/biz/merchant/thank-you1/'\|\|b['dom.pathname']=='/biz/merchant/thank-you1/index'){b['gsp_convid']='938783839';b['gsp_conv_label']='XQ0pCMz1-2IQ3-jSvwM'}}catch(e){utag.DB(e);}},function(a,b){try{if(b['dom.pathname']=='/biz/merch

Chrome Cache Entry: 677

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 678

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text
Category:	downloaded
Size (bytes):	1145
Entropy (8bit):	5.194205277734087
Encrypted:	false
SSDEEP:	24:mmH3JVgal9YFgLF8CGSRWU/yCW5p11+Wl2o/R493kwTEv+QTEh:mwJVt9YFHCGSwU6CY1oYR49UPv+vh
MD5:	EEF560566C8D50491E00C65DF68AD266
SHA1:	C3CE83F6E009E7F46EEF497BA2758BCFEE36A080
SHA-256:	7BA3F491B102904E43F23B0FFFC9312800A2E35EA255367AE0DC00301476FA9B
SHA-512:	30EF0D3B319A2E7698326363A827E98E795490E4AD39F460FA9A37BC3F5AB094DBD50BFC27F4FE4461CE6AF0E435E40FC65ACBFDA2041D5C29C52BF2C8E3F728
Malicious:	false
Reputation:	low
URL:	https://connect.secure.wellsfargo.com/accounts/static/7M/accounts/short/accounts-cache.js
Preview:	. (function main() {. var hashedNames = [. "runtime.7b96d11d41a730864e0a.js",. "vendor.e69a15c07c19c3e48a3b.js",. "main.8ff9514e474c17aca0f7.js",. "wfui.7da5daa5ec19e9914fda.js",. "main.38832ae5988e63f8952d.css",. "wfui.c749bdd84a38b3f40770.css".]. function miniGET(src) {. var xhr = new XMLHttpRequest(). xhr.open('GET', src). xhr.send().}. function getSelfScriptSrc() {. var allScripts = document.getElementsByTagName('script'). var scriptCount. for (scriptCount = 0; scriptCount < allScripts.length; ++scriptCount) {. if (. allScripts[scriptCount].src &&. allScripts[scriptCount].getAttribute('src').indexOf('accounts-cache') !== -1. ) {. return allScripts[scriptCount].getAttribute('src').replace('short/accounts-cache.js', ''). }. }. return ''.}. (function cacheAccountsAssetsInJs() {. var commonPath = getSelfScriptSrc(). hashedNames.forEach(function nameHandler(name) {. if (name.indexOf('.js') !== -1) {. miniGET(commonPath.concat('public/

Chrome Cache Entry: 679

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	258837
Entropy (8bit):	5.364506857080055
Encrypted:	false
SSDEEP:	6144:FiPYIJMdb+C4CUC6p+w4wUw6/+545U56h+I4IUI6LQ1psK0vyddOwSdih:FiPYIJMdb+C4CUC6p+w4wUw6/+545U5w
MD5:	19E81306DFAF56E6362A1B2376469D8F
SHA1:	14057ECD75A27428292D64E30C8CAC1B7701EE7A
SHA-256:	3897D72826D632483C1905E3E971E1939C94F9C5151460F47C31156CEF209300
SHA-512:	98BCC7BD8258082E8132C8331B424C81E2C133B187588E75034166DA39CA8E7350A268210B4B2C0019B7CB1625A5020098D6C900B6A91EDD21234C8AB83A471E
Malicious:	false
Reputation:	low
Preview:	.AccessibilityText__accessibilityText___oIzQa{position:relative}@keyframes WorkingOverlay__fadein___AjhKI{0%{opacity:0}to{opacity:1}}@keyframes WorkingOverlay__rotate___HH_H6{0%{transform:rotate(0deg)}to{transform:rotate(359deg)}}.WorkingOverlay__common-overlay___o4X2c,.WorkingOverlay__fusion2___aYcBz{align-items:center;bottom:0;display:flex;flex-direction:column;justify-content:center;left:0;position:fixed;right:0;top:0;z-index:3}.WorkingOverlay__fusion2___aYcBz{background:linear-gradient(180deg,#ccddf0,#fff 98.44%);top:24px}.WorkingOverlay__fusion2___aYcBz .WorkingOverlay__spinner___Jswbx{display:flex;height:295px;justify-content:center;width:295px}.WorkingOverlay__overlay___Qhjkq{align-items:center;background-color:rgba(0,0,0,.5);bottom:0;display:flex;flex-direction:column;justify-content:center;left:0;position:fixed;right:0;top:0;z-index:3}.WorkingOverlay__overlay___Qhjkq .WorkingOverlay__spinner___Jswbx{animation:WorkingOverlay__fadein___AjhKI 1s}.WorkingOverlay__overlay___Qhjkq .

Chrome Cache Entry: 680

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	9509
Entropy (8bit):	7.958760912497084
Encrypted:	false
SSDEEP:	192:rGELn8Mj7lXvcvzvbcrGAJeat0o/yRH9fxkWUjln18xPYZwGqR:rv8gJcvDceat0zxnUjWgZwG6
MD5:	7A0B51861C394095AD293455E1F73487
SHA1:	DE990E366D599E6409FB0BA455F1F20025A8EA6C
SHA-256:	CF36884477936F09035C242837296ABFD2BCF1AE15DE21E83E3C1D25891514A9
SHA-512:	FB08858839C8F029B12CF7F75D82AA80B9888A7539C5C414836DC2C6259CD280891F8C6985381879EF06113A989411C1DA391BEA505BC3FAA3CE69A7FD3A2FC5
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/css/tools/locator/usaMap.gif
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@..................$....#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe...........O....pixi............ipma.................$.mdat.....b=.....4 2.H.....a@.^..".U......wq.~>.#..Q.v..L...E?.w..{.x...$.y.......#e.....5./.z'...G...j.^pd.3...A..;T.uA..HN1i.kQK...$.{.pc.......mkHi.4..q..9.c....R.3.....+..h.L.2[Z"7V.....TT...P..Q`H..g.,.P.&..E.k..\...[.Ha i.....x]..z.....w.:.zC6.]....I&#.Y..8!..dy?S5..0.x..b.......G4...Eg&..l;^.gP....1LfS......p.8..[y...\|..6eF....L.,.'....w,.cb..y1.L..^d...0p....$..$...5.._...mFo;.q.&...C..job\.G....<.D...1U.,.PC.a..TPc..1..3*..=..(.`...j.(.Q......o.T.....\|u......(.&.l.._....z....0#.......+...tJ...:.@q...(.WJ..ciH.p.}?.o...m.....3.(..y.UQC~.7..4.0..JAo.4.;..[Gt...=\|.gq.5... u...#... X..B..\:.kE.`pz5..l..r\|...1....[....c..o.lX..1}...8u...d0.6.a....^...%...g.O.P.....#.>.O.;.....qeaF..9....

Chrome Cache Entry: 681

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=703-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&cb=1711631971511&event=PageLoad&eventType=PageLoad&eventDescription=PageOnLoad&device_type=DESKTOP
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 682

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65422)
Category:	downloaded
Size (bytes):	373680
Entropy (8bit):	5.425166591748796
Encrypted:	false
SSDEEP:	3072:nJSb2G5nT3zxFCxDjZh01HpHjuXyRWX9zVZOu+4mdU4Yx6H/hEQaiSSAeI9ZtjYf:m2G5T3vEQK4DJHaiuroSZTnXS3nUG
MD5:	FA4DB9D56933F5C24A9C1064B4704809
SHA1:	955EA5A7D870DF4A328DF90EB61FE6CCDD889D9E
SHA-256:	E53B3ACACF30CE82262CBC3385668971A28A06485E2EA66FD00137F2CF64AC6B
SHA-512:	B072627E3F0CEC458DB350D70FE230D725074D981A2EA9A73E7519F568FF5CEE7C247A6EE3D1A659658A01B9F5B5D64B325A35FD5E43A60B4EAA43AC08926337
Malicious:	false
Reputation:	low
URL:	https://connect.secure.wellsfargo.com/auth/static/ui/loginaltsignon/public/js/src_app_page_login_Login_js.5f5af73c8b2d0d226f2e.chunk.js
Preview:	/! For license information please see src_app_page_login_Login_js.5f5af73c8b2d0d226f2e.chunk.js.LICENSE.txt /."use strict";(self.webpackChunkloginapp_alt_signon=self.webpackChunkloginapp_alt_signon\|\|[]).push([["src_app_page_login_Login_js"],{75951:function(e,t,n){n.r(t),n.d(t,{default:function(){return Sf}});var r=n(15861),o=n(70885),a=n(64687),i=n.n(a),l=n(67294),c=n(28216),u=n(46872),s=n(42720).Z,f=(n(19601),n(82526),n(82772),n(47941),n(24812),n(75918).Z),d=n(87059),p=["submitForm","children"];function m(){return m=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},m.apply(this,arguments)}function y(e,t){if(null==e)return{};var n,r,o=function(e,t){if(null==e)return{};var n,r,o={},a=Object.keys(e);for(r=0;r<a.length;r++)n=a[r],t.indexOf(n)>=0\|\|(o[n]=e[n]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(r=0;r<a.le

Chrome Cache Entry: 683

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	754
Entropy (8bit):	7.140943188090096
Encrypted:	false
SSDEEP:	12:6v/7+no/z59rasfXW9rXBsrioZkSO45m0j+Wnhk0D2IoD1Oj4OMstT:/o/z59raWGrCpxm0j+chPo4Yst
MD5:	6B7F76538B6DC15084570B2437DE1FE1
SHA1:	450D7C0E390FA1FDBAAC9F20D81FC776E47FC7B8
SHA-256:	93FDB81F02A253E14BAD30D868B379BA112BCACBBC9067B8CBB7567CEA529FC3
SHA-512:	F4301CAB40350CC0DF3E5A6A030103E07BD82EA8BA0B68AC32FEC646066013065053D580C6F26DFB075BDDAE2C1F6643466327FF3A4E9F2E99207EB50549A226
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/rwd/icons/tab-table-icons/checking-2-overdraftfree-dollar-ON.png
Preview:	.PNG........IHDR...0...0.....`.......PLTE...<40:32:32:21;31;31;32;30800@00:22;20;30:30:20;30;21:50930;31:40:31<30:20;42933;21<40;30=30:30920;20;22;21;31:20500:30910:00;41;40:50880:20;31vC.\.../tRNS.@...._ .......0o.O.`.o..P.pp...0..0.p` ..U.Z....orNT..w.....sRGB.........IDATH..U.r.0..-vb.....B.:...=..w.X2..if.qg.&KG...N.....M.H.X...&...jm.:/...n..s.7....`..~.R<.9.G.bz..I%.>.qD.dqOZ..O.O..b#..KU.. ..j......C.gD.bj%..4V#%..8.[.........h.1.O...<."8.;!......S..B..v.bDY..D..1)O...h.J$...V.pD..Ns`..dX...M?q(..0..,..>.@.Y@....HR. $..I.TPt..c..o...%.^."i......P...5q.~.Th.7.....a.".P"k....y..DUu....>N..r.....2 t.O8..Aj.......r._2.<>c.*-g..M\|....._...A....(.......b.G..~C}..M.'........].....j>V...........%(7..`'....IEND.B`.

Chrome Cache Entry: 684

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	855
Entropy (8bit):	6.263042797498727
Encrypted:	false
SSDEEP:	24:rGDc/jcaWMmP/xVzkKtvldEXSWLbLhPHoWpztc:rGo/jKhVgKzGvvLRHZptc
MD5:	4FC56D4269535843EF3388440F236A55
SHA1:	080397FC7EC8E3FCADE27E46398EBBD408C892A6
SHA-256:	E4150049E82502DDBD1B5022F05E30C73E45AEA747160826E731FB82C308E717
SHA-512:	4101EB1A5B2430097AC30303816B9A96044BD89847CDB4A149570A2C641E437AB1F54B55BEABD223B26BEA670C303103E444CF1C62754CA8C179A089D93454B1
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/global/btn-close-x.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@...........................C.............8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe....... ... ....pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe....... ... ....pixi............ipma..........................iref........auxl..........mdat......?..2\|.@<.@. .......d7M->{.u.qu%K.e9.K..4_l~..E....W...f..!....`.b..G.zv^...<..@u.k..N]LK...........q7.lr.<$.e.{....W.[h.G4........?....4 2...@.<.......W$........R..Y.q..G.+].....{$W.:.(..h.1<...R<....D.F-,O..z.?..n1..}k..@\|..^an.W......`.....q...HnRk.d'`.h..`H@d..gz..'......J.....Yl.}@....5<\|.....A.ka2....5..@~......v..5.=.`FQi8Z..vn-?.uv..P...}.k.......)d.u...+j.K..1~QO..B.h...RfP

Chrome Cache Entry: 685

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x423, components 3
Category:	dropped
Size (bytes):	28530
Entropy (8bit):	7.956837562997854
Encrypted:	false
SSDEEP:	768:/xQ9tynkkjjeCmSjw4/VzKJJ3QRErzl8yVU:JQHHQXLw4/VzNyW
MD5:	D0A955175A5ED0B0AAD524B5B4CB5BF9
SHA1:	064D108126C4DAB4A1A0F11CEBF1F379B0B61DBF
SHA-256:	7798A0EF2503E854F0D1EECAAEE3960A8BB06D06E4B32B62C659A5EE6178EA1C
SHA-512:	A49905C6C36D3991B680D07C96BE1369FBF8E8833F4662E2267FC1472D707006030E9C0536DE77A80D7078F93A59DB16BC4A5CE5255C1EA37E96DAA7F11D64CF
Malicious:	false
Reputation:	low
Preview:	......JFIF............................................................................%%2..............................................................%%2........8.."..........5...................................................................c.B...M.-.yG.....d..3+`.'%2..FJ.j...\.....e.a.i.X.9F(.0........1.J....L...4.:.S&2..Hc.B....1..>.$)3$R.....&Jd...A=..n}..6Lqz..........X..x.]G.i..+.....@PBO:..z..9...]..$J.%...l...[..!i).......H\Q.c..3T.y.Q01.h1.[.FJ.K.<[z.5..........Z.0........z.Zd..-...\|...q..5...@...I...6...x.]G.i,0b...-j..d.B.....z...z.t...\.....!.....-\..Y...5...LQ..KT..(.".(@".1....Z..V.G..Z.....D.<.S..cc\-....=....2S-M\|.x.?B...n=m...".....H.....n5..H..1e....`..j.h\Hy7.....9.P..f........,.&....H.FI1..d....V.1....L.^.E.T..T..x....@R.......Nf......t..{Y\|?X.sP....k}..}:......T......!.\9@9.Yq....{...Q5.Z@....yg...zg..O9...2....oK....&.H..`..1..)\|`.....Y1.DXc.......4.:.%c...KP..t..^.......o..-.<..........>.]]................k.\@...y..lrf..Z.Bo..z.y..<

Chrome Cache Entry: 686

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	4746
Entropy (8bit):	7.903951256852233
Encrypted:	false
SSDEEP:	96:rGPNZugDza1WZU223PmbI+mY1LdffIez0iwudpGmG/0+c3/Gij0vLB:rGV5ziWAPnBYNd/z0kd4mHrOXDB
MD5:	198484D413352D0CF1DD45873F6FCA18
SHA1:	EFCD689E88574664CD853835069D7201D05026A1
SHA-256:	443924738F63B80C46C7911DA733900B46E5764EC92E1A61C4AF89E1B1EECEA4
SHA-512:	07AF2680CA94CC58EB6F630E1F55DE86DC04EEB90C02AF75E14A04BC53A414C4BC836535A846FF20E43ED4323C4DA0E4F4682D8FB5E2EF06605E001238A478F0
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/photography/lifestyle/227x125/newsroom_227x125.jpg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@...................\|...#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe...........}....pixi............ipma...................mdat........0@...2.".... .@..9t?V.Y>....A2....m;....^.........K..y+..[....S.aQjq.....S..{.o=>O....4w~.,[6MG2..{.../.q.<F.=>..:..[.M9....9...We.f..Y.r..b.9.AxY..d}$.0....s.0.;w..zi9r.?...{....m.8..f..Qy..M..UZK....@.a.../.ab[.f..o.....Z"}.SE..{.Z.c....v.f..9......2' .{..Z.B5~.>.\|.~K..Zu....#.u...1,.....2.fu(......5..#...WF...MB.....S......V.7rxC<.Q..?......F..........q/..Rn#..]ap...L.v.?....R5..x......(.S.$N.......>..{..(.........y.d.c3+ug...{1r...v........K...<8p.....u..c...6.Vl.z.<.ft..t..W...KZ26......{..../.Z..N9..@..V....mR>...y>0..o.....#b.g.S..3@.-h9.....Fg.`..'...ew..j...J.e...........a..9....:.........!B..'....2[/o...e..kn .S.hf..*.7whWEe...ke2'.;.c......\|..xs;....(D..\.o].I.

Chrome Cache Entry: 687

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	40702
Entropy (8bit):	5.123227793791931
Encrypted:	false
SSDEEP:	384:6id4xmx2NNh1id4xmx2NNh6+cU4xmxNNhzYgII32qhMxW22GVSJNhcMxW22NGVSY:Gz5zYg/mqJ8RTfInes4g
MD5:	F911470FE0E560AFCC355E2B7C2D14E0
SHA1:	70C99DD84B5BD747DD5B209E63F70A71E80438D0
SHA-256:	2E45459BA2E9E58BD49C6DA5C33DA625B1F0C384D2A47D0EC0D3756029FE9959
SHA-512:	48A7D9CF023F8DCB56878FF2EF632E027403622E93734AAACBA1847330BAAD13282828287D0C492944AA2758E3798E09423A4BD7C4F3FA66D216BB2764D3C9D1
Malicious:	false
Reputation:	low
URL:	https://resources.digital-cloud-prem.medallia.com/wdcusprem/57907/onsite/onsiteData.json
Preview:	{. "sbtServerDomain" : "https://ubt-lb.digital-cloud-prem.medallia.com",. "sbtEnvPrefix" : "wdcusprem_",. "endUserIdentifier" : { },. "formNodes" : [ {. "formId" : "4435",. "isCustomHtmlEnabled" : "false",. "urlVersion" : "V2",. "formHtmlUrl" : "/**ONPREM_URL_PREFIX**//md-form/website/1.15.3/index.html",. "formDataUrl" : "https://resources.digital-cloud-prem.medallia.com/wdcusprem/57907/forms/4435/formDataV2_1711444116048_###LANGUAGE_CODE###.json",. "formWidth" : "450",. "formHeight" : "450",. "isFixedSize" : "false",. "isFullWidthEmbedded" : "null",. "designSettings" : {. "formBackgroundColor" : "",. "thankYouPageBackgroundColor" : "". },. "formLocalizationSettings" : {. "defaultLanguage" : "en",. "useCustomParam" : "false",. "customParam" : "null". },. "formJsonRelativePath" : "wdcusprem/57907/forms/4435/formData1711444116048_###LANGUAGE_CODE###.json",. "formJsonV2RelativePath" : "wdcusprem/57907/forms/4435

Chrome Cache Entry: 688

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2225), with no line terminators
Category:	downloaded
Size (bytes):	2225
Entropy (8bit):	5.178167799869125
Encrypted:	false
SSDEEP:	48:DDGGrvfmv+PWrpIB5lzcfwcGLeUF6g8aa6RBCBQB2cfb73fSf8o:nRrmv+PYeV9B/o
MD5:	5DC259BB29069DFB7A2519E64417D713
SHA1:	59B219F78CB5D8CE77724969C5409B022735907B
SHA-256:	0C7F9629C4C19B612EE75F02E5C93F2624AE0CE980AE533505BC3A32EC185E2E
SHA-512:	C00D4AD88B493BF438BAE87A761322381ACC37054CFC1A13CDD66D605B873A62D984F104582CEE9E7883A640C2E0CCE9782D6374171AAF858E26D9C6D810E3E8
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/js/about/aboutSections.js
Preview:	WF.Component.AboutUsSections=function(){var link="";var newId="";var offset=0;var fadeSpeed=500;var obj={};$(".AboutUs-item").each(function(){link=$("a",this).attr("id");newId=link.replace("link","content");obj=$(this);var clist=WF.Utils.getClist(this);$(this).clone().appendTo($(this)).attr("id",newId).attr("class","AboutUs-content hatched").find(".AboutUs-details").removeClass("AboutUs-details");$(this).attr("aria-haspopup","true");$(this).find("h2 > a").data("newId",newId).data("obj",obj).bind("click keypress",function(e){if(e.type=="keypress"&&e.keyCode!=13){return;}var popObj="#"+$(this).data("newId");var object=$(this).data("obj");offset=$(object).offset();$(popObj).css({"top":offset.top+10,"left":offset.left+10});$(".AboutUs-content").fadeOut(fadeSpeed).attr("aria-hidden","true");$(popObj).fadeIn(fadeSpeed,function(){$(popObj).find(".c28aLink").each(function(){new WF.Component.LightBox(this);});$(popObj).find("h2").attr("tabindex",0).focus();}).attr("aria-hidden","false");$("body

Chrome Cache Entry: 689

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (570), with no line terminators
Category:	dropped
Size (bytes):	570
Entropy (8bit):	5.685107324804818
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHlGKrd52UniUMCyEKJUb0U6sCORwmaZr:hMiRO9+9dTiUMzVJdsCORwz
MD5:	D2162F9C8AD0A99C4745EDA4666405B2
SHA1:	276B0A526AA9AD1AEA6CD86800DD98B8E971E9F7
SHA-256:	DD5D2D7E140CA2AB117851F5919BB4473C2D8DBBC36AFAB205D1DBEEF82460C4
SHA-512:	820D13294CCD6D3731CE5CEB59A1A43136A5F4DE872D876414DFAC8DAFC08F9FB76027420AC6D96FD7668211C32EC2D7093FF7B53FBBDD22905F0C204B7056D3
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CJeJmIOGl4UDFeQTdgYdGREMTA;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=*;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F"/></body></html>

Chrome Cache Entry: 690

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	176629
Entropy (8bit):	5.083522515735529
Encrypted:	false
SSDEEP:	768:04aunpghjtC/KA48yclXxkUK+jCaOBMNjNWqi3WXFDQZNupObTfqzmAXOwLfQmxA:04IjtC/KgkUTG5kZFi3WVrYe9pK7
MD5:	302C9539C218DA6FF7BF82709C07CB66
SHA1:	804C12C7BBE49B6F1CD406AB5DC80756E5922E03
SHA-256:	F4E9541E56687BB795FC52DCA8A4DC030BF09979DD67391000208BEA42E0870A
SHA-512:	55359219C39E953844C9DE291A6A28EA45E65D45336454CBCD3D4E96CBF2725A41BC81EBD7BD0C5668F50B2F703F006246F37F2864024B79872330FEA7D1E91C
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/ui/css/homepage-ui/ps-homepage.b9d57c43c00e81dd5d96.css
Preview:	@font-face{font-display:swap;font-family:Wells Fargo Sans Regular;src:url(https://www17.wellsfargomedia.com/assets/fonts/wellsfargosans-rg.woff2) format("woff2"),url(https://www17.wellsfargomedia.com/assets/fonts/wellsfargosans-rg.woff) format("woff")}@font-face{font-display:swap;font-family:Wells Fargo Sans Light;font-weight:300;src:url(https://www17.wellsfargomedia.com/assets/fonts/wellsfargosans-lt.woff2) format("woff2"),url(https://www17.wellsfargomedia.com/assets/fonts/wellsfargosans-lt.woff) format("woff")}@font-face{font-display:swap;font-family:Wells Fargo Sans SemiBold;font-weight:600;src:url(https://www17.wellsfargomedia.com/assets/fonts/wellsfargosans-sbd.woff2) format("woff2"),url(https://www17.wellsfargomedia.com/assets/fonts/wellsfargosans-sbd.woff) format("woff")}@font-face{font-display:swap;font-family:Wells Fargo Sans Bold;font-weight:700;src:url(https://www17.wellsfargomedia.com/assets/fonts/wellsfargosans-bd.woff2) format("woff2"),url(https://www17.wellsfargomedia.co

Chrome Cache Entry: 691

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	597
Entropy (8bit):	6.946919342379814
Encrypted:	false
SSDEEP:	12:6v/7+V6ekQfSFx9Fl8V4aEh6ruhZVPUrKK+/Nghn7cJN:/kKSFxF8maEzZ5GKTVgh+
MD5:	D510E2B8AAF073CBD8471D5F83FF08C2
SHA1:	64AD2532BE3F9400556DA4A8A99A2495FF8603DF
SHA-256:	2C29512C945ECD3D3CC510B421A2B9B708D39BFDF6666D8D8667341B784AE63A
SHA-512:	FCB1221E33A58956AEC3D7C9BC3F46E0400CC5D4BBC39C1A33D96158C23DDBCC53C45EC085D95816DA5756C421C94DB2ADAC0EDBFC9E56D45AEE6F836656063B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....`.......PLTE...;22;31800<40;31;21;31<40:20@00;32880=30930;40:32:50:32:21;21;30;21;20;30:20:30;20;41:50;31:31:00:30:20910920:22;30933:40<30;40;31...x...+tRNS... @..... Po..0.....`.p.`..0...p._oO.p.M\....orNT..w.....sRGB........;IDATH...r.0.Fc..?.A.....m...!.#...^.w.\|'gg...._+N...I...4....kO....0FQ..c...P.V@P\..BP..".-.>.I...1.4.3w.$.m..t1.....<M.[......p.q..s.M.....Yc5....J.x......y.p.-!(yC....G.w..9....fu.X.#..-.5.ou.w>.z?..[.`7.?......9.7ur..v.....s;..?,....u....:B!eqE....Ir..\n..>.%..7.o...5m..n'op......?...,...w....~..S...[..1R}\....IEND.B`.

Chrome Cache Entry: 692

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	4809
Entropy (8bit):	7.845809051670585
Encrypted:	false
SSDEEP:	96:rGgZVPWDvhbdWe08NBnfttMfQNBiCB+AqGT8yiCdwJPsc7ijckVLS1GJ+:rGQVKKQqW+jGT8ytc73kVLS1GJ+
MD5:	844034EBD8E64B104B9373D015F498DC
SHA1:	1DA698D95D0DB2AD69A3FF237EB1CC8D8EEE9AEA
SHA-256:	F6930E9A0F38B8D2552F56EE84EA3F627225390B147469BA66AF667ED90D0ACA
SHA-512:	C43B961449DEF65BD4F6155891C70DDF29EF13F01A4717A5E09A09FFEDDA5920D2F79975B02CF16D99AC2CEF0E4630FCA8B879657ABF3288EDF1569651DA685F
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/rwd/photography/318x96/stars_for_promo-318x96.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@.....................................7...8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe.......>...`....pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe.......>...`....pixi............ipma..........................iref........auxl..........mdat.....!...T2.....$P...=X..:G35/....r..C.e<!.c.K]%h.........LBw....b...$C.-...N...M..7..z=.pF.A._...b...\|@...`Y..JKL,y>..u.....1_.L.L......b..)....$#/.B5...i.-.sJB..I.........2.r.....s.m.o-.%...:..a_.TZ...C..M..v...=(......2A...d.-.\...../V.....;..3......VN"..:I..d/..$>(..0....R3.(.....V.....O..s.?N.....'....t.E.x......bY.*.to.....I .}....40..>....gt..utM.Z.....du......7.U..gtL...p..#m...j....!......f<.i$^ ..]j.:.p;.wu.&3.$..>E_Tv...4......{...&.;.p...c-..~.1...J.I..Uu.+.;.a..4.g......'9.^d.U...-r#Gf.&....F.....\|7.J..0...

Chrome Cache Entry: 693

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8258)
Category:	downloaded
Size (bytes):	180217
Entropy (8bit):	5.274492606620331
Encrypted:	false
SSDEEP:	1536:x71uIScpEpt1VRiEpdi17rH43/eV2XsARstbCBiPne8PMkfWpzeoNJ/kq8IL+lCa:9cuQ/s7bCUCf+z
MD5:	EDC0D4CC2F12082988F8A35346B09E4A
SHA1:	5E8C7F014DB8A431EABC5BAD81CB824560084140
SHA-256:	A5C39846CAB390D624CFF1169E349DF1EFB90473C741E1692CBDCFE586ABF9E4
SHA-512:	A5DDB5113A286813426E03CFBFEDDA2D00807051DB689D3160FD3313A4B60DC0477165E6F3D3BB62DE613BB225E975BB5B7CF4FDBA27BBC894E9883E966AFA1C
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/locator/public/css/locator.css
Preview:	/! normalize.css 2012-03-06T10:21 UTC - http://github.com/necolas/normalize.css /article,aside,details,figcaption,figure,footer,header,hgroup,nav,section,summary{display:block}audio,canvas,video{display:inline-block;display:inline;zoom:1}audio:not([controls]){display:none;height:0}[hidden]{display:none}html{font-size:100%;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}html,button,input,select,textarea{font-family:sans-serif}a:hover,a:active{outline:0}#shell header[role="banner"],header[role="banner"]{margin-bottom:0;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none}body{margin:0}h1{margin:0 0 .67em 0}h2{margin:0 0 .83em 0}h3{margin:0 0 1em 0;font-size:1.17em}h4{margin:0 0 1.33em 0;font-size:1em}h5{margin:0 0 1.67em 0;font-size:.83em}h6{margin:0 0 2.33em 0;font-size:.75em}div,table,td,th{padding:0}fieldset{margin:0;padding:0;border:0}legend{padding:0;margin:0;color:#5f5f5f}blockquote{margin:0 40px 1em 40px}b,strong{font-weight:bold}dfn{font-style:italic}mark{back

Chrome Cache Entry: 694

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F&cb=1711631936563&event=DisplayMarketingSmallPromo&eventType=Presented&eventDescription=DisplayMarketingSmallPromo&clist=tcm%3A402-228930-16%7Etcm%3A91-228643-32
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 695

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1071)
Category:	downloaded
Size (bytes):	2546
Entropy (8bit):	5.345510176715368
Encrypted:	false
SSDEEP:	48:PhbRQ+8e4nPWNnR6IMI+wB/edm20z+GkhhSBksimMSoQnWK:5bRCnP4ReIZB/Um+GASBksnJoQnWK
MD5:	61AD56DD3B4D3DA490969FB7A686D18C
SHA1:	0F011129EBA9E0E5669D3A90CFD19B6C9D52DB1B
SHA-256:	4524F0EA65A8BAC84F3D0FDA8BFF99FDF2B3361AF5EC0B6E5C6C301B1D516269
SHA-512:	AD5509DBBDF95699A18A3DA7168B0D8C0B8CC4D92CD548453774E365673FC3AC2545FEE2DA825101A573E886EA5D7E60B196A756939CBA07B3B1DD1192BCBF16
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/public-site/utag.479.js?utv=ut4.51.202206101522
Preview:	//tealium universal tag - utag.479 ut4.0.202206101522, Copyright 2022 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<35){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(th

Chrome Cache Entry: 696

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3575), with no line terminators
Category:	downloaded
Size (bytes):	3575
Entropy (8bit):	5.176035221022858
Encrypted:	false
SSDEEP:	48:SPZQbj+vgXgkcrutgllu+SpK03NXjZ1iIqSzVK4aUJUgKA549iiSui9mI3ap:YQbbTcnGpPBR3K4aiPKh/A9Dap
MD5:	A69131981E4C5DD485CCBF91D7A51D65
SHA1:	EAAB0D5AEE1A7C15312C6C30B0F77011418641D7
SHA-256:	4442B42985CC16BB842DDB52B64E865E816C6F6DD38A5E104F925EE27A76E2E8
SHA-512:	A84EE702075700CAB739BE2281AE2047750AA61A72B2B60BED974DA62B5B0FCDD2E70530A7E5ECE482096C5B4B2E2A7BFAFDB9959D2D368E25BA59190A51B1C0
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/locator/public/css/survey.css
Preview:	#survey{position:absolute;z-index:2;display:none}#survey .surveyContent{width:250px;height:inherit;border:1px solid #9c9c9c;background:#fff;padding:10px;margin-left:-50px;position:relative}#survey .right{margin-left:-162px;position:relative}#survey .surveyTab{border-width:1px 1px 0 1px;border-color:#9c9c9c;border-style:solid;background:#fff;width:80px;padding:0;height:30px;margin-left:15px;z-index:60;margin-bottom:-1px;margin-top:-8px;position:relative;5px 0 4px -2px #ccc;-moz-box-shadow:5px 0 4px -2px #ccc;-o-box-shadow:5px 0 4px -2px #ccc;-webkit-box-shadow:5px 0 4px -2px #ccc;filter:progid:DXImageTransform.Microsoft.Shadow(color=#aaaaaa,direction=90,strength=3)}.faded{opacity:.30;filter:Alpha(Opacity=30)}#feedbackClose{margin:4px 0 0 5px;text-align:left;white-space:nowrap;padding:none;width:100px}#feedback{float:right;margin:1px 0 0 0;margin-right:30px;position:relative;z-index:3;width:70px;text-align:center}#feedbackClose{display:block;float:right;margin:4px 23px 0 0}#feedbackClose

Chrome Cache Entry: 697

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 698

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (468), with no line terminators
Category:	downloaded
Size (bytes):	468
Entropy (8bit):	5.68290928516699
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHeiariUniUMCyPowmaW:hMiRO9XJiUMzQw4
MD5:	0EBB5B2BA04BC80B5F70261034B6DDB4
SHA1:	BE7C29C57705A7FFEA4C06C5FD163F8A73FA655A
SHA-256:	7E1ECD20BE7492C226BD15CBDAA5F00AFB7B40BCC2AE7F22953DC51EA2EC938B
SHA-512:	BB850F77ADAC59476D8BAEF0CF6311F13754C6B89B02B846631C46FA60AF8E6DA5F3D796D06E76DFB734116CA4AE6D0816491E4C452CF3F93831F35BA25FCB81
Malicious:	false
Reputation:	low
URL:	https://2549153.fls.doubleclick.net/activityi;dc_pre=CIDN4PKFl4UDFaYKdgYd4tUFzw;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CIDN4PKFl4UDFaYKdgYd4tUFzw;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=*;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F"/></body></html>

Chrome Cache Entry: 699

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (350)
Category:	downloaded
Size (bytes):	4354249
Entropy (8bit):	3.624143056023977
Encrypted:	false
SSDEEP:	12288:CfLeSqzRTTVqdndI11h0fip4T/laQgeGOTnHdZuu:CQTVqdndq4TtaQgeGOTnHdZuu
MD5:	8EE41D7C05B84DAE84A46E16D2006AD8
SHA1:	ED9F0AEBBB27F2577E2B0397B2AEFDEDFB36770C
SHA-256:	A9826332063FAC41AD4EF1C3B930DDA48F73961380CD1B1F9BD81AD1E51C6E1E
SHA-512:	71D27565327B667340A8BF5B36D933F8679E616DAD4AE4444E2825CDC60718F3AF660FC8B0E498F7B8F07068D7DC699F43CF4F88206ECB5B9DA7AA4CEBB810B2
Malicious:	false
Reputation:	low
URL:	https://media-wf1.digital.nuance.com/media/launch/all_10006005.json?codeVersion=1710907168986
Preview:	{. "admin-config" : {. "siteID" : 10006005,. "chatSkinFormat" : "json",. "noJSHosting" : true,. "noChatFrame" : false,. "clientStaticUrl" : "https://wellsfargo.digital.nuance.com",. "cacheSolutionEnabled" : true,. "cobrowseSettings" : [ ],. "businessUnitDictionary" : {. "19001160" : "10006499",. "19001161" : "10006500",. "19001162" : "10006501",. "19001163" : "10006502",. "19001164" : "10006503",. "19001165" : "10006504",. "19001166" : "10006505",. "19001167" : "10006506",. "19001168" : "10006507",. "19001169" : "10006508",. "19001170" : "10006509",. "19001171" : "10006510",. "19001172" : "10006511",. "19001173" : "10006512",. "19001174" : "10006513",. "19001175" : "10006514",. "19001176" : "10006515",. "19001177" : "10006516",. "19001178" : "10006517",. "19001179" : "10006518",. "19001180" : "10006519",. "19001181" : "10006520",. "19001182" : "100

Chrome Cache Entry: 700

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (995)
Category:	downloaded
Size (bytes):	6901
Entropy (8bit):	5.439223739150236
Encrypted:	false
SSDEEP:	96:nbcnP4ReIZB/oF1juLSyQycy9MIK2eK2prGihM3Y7vSqvMc0JUU+Oh5/Ie0:nbcnP4gIZqzji79R9wrGiKo7ZbDUJge0
MD5:	C19DC959E28E39131499D5699EE70F20
SHA1:	7E29D6EB61AB3003A06B8B9999FAD9CEB857310D
SHA-256:	677AE76B8930E8C361338B964A5D6BFFC53D2163EF0F2B8DA1011EF98DB155E8
SHA-512:	FB32CBCDB73767BE04B60AA5ADD3D9DA07E48CE61EABADB802EF21315EE44EC4ED601754710D66DA23D6FBDECCF830C2C9879E0FFCA443CFA3E7BE3613F1752D
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/main/utag.471.js?utv=ut4.51.202310311807
Preview:	//tealium universal tag - utag.471 ut4.0.202310311809, Copyright 2023 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.loader===undefined){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(this.readyState=='complete'\|\|this.readyState=='loaded'){this.onreadystatechang

Chrome Cache Entry: 701

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	292
Entropy (8bit):	6.9666073872898675
Encrypted:	false
SSDEEP:	6:6v/lhPO6TkN+Uklnt0OKXmQtFbD/3NmSQfzcQn1fGNRC4fRO3NVp:6v/7Pr5lnSqc/dmcQ1fGNjfRO3N7
MD5:	872099179ED03DB16BEDA138832EF5AD
SHA1:	3080013A2930827D93FB210A09FD54BE4301F82E
SHA-256:	33B92421ED8061F976E181BDCC26C325EFE73E6B1ABD8755B5D85B16C7FE50EA
SHA-512:	44FD64344808C72E38FCE3E900D18019D421D34F1C24E2E399E611B3602EB2AF0EF6DF5268A822202EC5A28E8A2147C7E36666D5C657E2F893D2AD124D476F4F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............7.....orNT..w.....IDAT(..NBq.....ln4.&..@%Z.L..@B.3.x.".7p...8..^......=..p/s.s.w.s~;)..T.L.}X...r91..^i..U.a.....a...z...+..N.....C.B3...K.(tr......p..B.,.3s.<.0U).]..A.u+....L.F.-.l..kO..B............<..r.kg*).........W....2.}.q?tU:R.Q....IEND.B`.

Chrome Cache Entry: 702

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 703

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49163)
Category:	downloaded
Size (bytes):	49189
Entropy (8bit):	5.504519901607344
Encrypted:	false
SSDEEP:	768:N+RnvGL00gsFDcoJNtWwXwyZLFyOW5LBSoyv/VNafZICgYUDSVREwCsfZL:N+dUckJSw3py3LBSot+wCsZ
MD5:	8402E9EBDF9290C018B0617018227681
SHA1:	2D840FCD6C3008D9ACA747BA0CE056B496DB8E1B
SHA-256:	0B2AF045ACAFBDF14516BF55F310568036ACE959946D16EDB1ACEBCD58029D22
SHA-512:	45E7359043E0076DA916475F5294E62F139C85FE42CB0D53E1DCCC08E8DCB39E717B3C3D4B291B21E059FE760BFB4EC2AE224EC06744DF9B25B177784A3C9D9B
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/tracking/ga/ga.js
Preview:	// ga.js - 20210826102731.(function(){var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};var q={},r=function(){q.TAGGING=q.TAGGING\|\|[];q.TAGGING[1]=!0};var t=function(a,b){for(var c in b)b.hasOwnProperty(c)&&(a[c]=b[c])},v=function(a){for(var b in a)if(a.hasOwnProperty(b))return!0;return!1};var x=/^(?:(?:https?\|mailto\|ftp):\|[^:/?#]*(?:[/?#]\|$))/i;var y=window,z=document,A=function(a,b){z.addEventListener?z.addEventListener(a,b,!1):z.attachEvent&&z.attachEvent("on"+a,b)};var B=/:[0-9]+$/,C=function(a,b,c){a=a.split("&");for(var d=0;d<a.length;d++){var e=a[d].split("=");if(decodeURIComponent(e[0]).replace(/\+/g," ")===b)return b=e.slice(1).join("="),c?b:decodeURIComponent(b).replace(/\+/g," ")}},F=function(a,b){b&&(b=String(b).toLowerCase());if("protocol"===b\|\|"port"===b)a.protocol=D(a.protocol)\|\|D(y.location.protocol);"port"===b?a.port=String(Number(a.hostname?a.port:y.lo

Chrome Cache Entry: 704

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 705

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (45363)
Category:	downloaded
Size (bytes):	45414
Entropy (8bit):	5.300818808431322
Encrypted:	false
SSDEEP:	768:9kEJvVgYXNCZJQ8vm6hzvyJ3rXuN3mpHRiffkO:9jVg2wi8e6hzkrXuNWziff3
MD5:	D2F998C1741CE8B5768A5B34F2E7E6DA
SHA1:	EDE473A41E31D7C87E0DE4BA674900559A005D5F
SHA-256:	34F8E20451F74C530F6B6E29A9CB93FA13FF6268566B976289BC991D1E59F517
SHA-512:	1FD4187B4336328BAF43ECFE886141F138AABAF5A74FAA4D947D5E98E5E8C9CB26F0921DCF16D8E56CD575B3BD250E1D258D9AE957394CD7F9B656C7FDB20E40
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/assets/js/wfui/container/wfui-container-bottom.js
Preview:	!function(t){var n={};function r(e){if(n[e])return n[e].exports;var o=n[e]={i:e,l:!1,exports:{}};return t[e].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(t,n){if(1&n&&(t=r(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t.__esModule)return t;var e=Object.create(null);if(r.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var o in t)r.d(e,o,function(n){return t[n]}.bind(null,o));return e},r.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(n,"a",n),n},r.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},r.p="",r(r.s=179)}([function(t,n,r){(function(n){var r=function(t){return t&&t.Math==Math&&t};t.exports=r(

Chrome Cache Entry: 706

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2575)
Category:	downloaded
Size (bytes):	20670
Entropy (8bit):	5.134159331659284
Encrypted:	false
SSDEEP:	384:ilNsImVVMlKpA3easDSgp8ilpin3UPDFGlu:ilKV1nDxp7lgn+DFB
MD5:	CBC6A7A6729DDBAFEB954B2688E4E4BB
SHA1:	A18E5362444CD63D08180A035E3D07C52E699F34
SHA-256:	DE5F63B7382D3479F84E396EB2B19EA62BE6A30A6292BBF5B95D46716BE552C7
SHA-512:	D31A0B4FD359B8A087A366D14CFBBAE6B5F888209F26D7DCB85FB1D6293D4346C3023CAE3AC83E7E8D00FC0FB7AF44CAD2643031A97160F188E0FAEBA31F1FB0
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/tracking/secure-auth/utag.10.js?utv=ut4.51.202302082203
Preview:	//tealium universal tag - utag.10 ut4.0.202302082203, Copyright 2023 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatechan

Chrome Cache Entry: 707

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 708

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 672 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	99383
Entropy (8bit):	7.991641287721878
Encrypted:	true
SSDEEP:	3072:jzDac6wyLYGYiG+a/y/OaJ3s9cYbj8R1z:fQ8UGby58Rf8R1z
MD5:	AB13E93ECBCC474206750E909DEC55F0
SHA1:	EA9E5865FBF04B23C631CAB78BF083B37DD39F61
SHA-256:	784A37D2A3D3EBC7C58A236E06C8F0159B9938791E4CFC6EF278F0EBC090F8B7
SHA-512:	90ED1B786BE9C68880943E85DBA5AFD34250326C06263E29FC67DA8A683D41F9FA05EDDE59D28B2320FA2CE69C4508E57128CE5B134E7DF22E0ED8D1486864C3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............r8......orNT..w.....sRGB.........IDATx...w..Gq'....;Qw.H..4.YB..,!..... ...........u......^..w.w. X#,@...(X9..h...h.&...=...tU}...#.....}F.....]]]]....~.._.l....r.....z...3........ .\t....V9.=ei'...R......R.9..#..F..>...C..>..$. ...u.=...,}.t)...1\..%..jC..\|....=<...\.H.8N.X.{>g...B....<.....~..h..2......9K...C....?..~V.4..JC..Q9..HK.^..~....(.....Xm...H4.Y..p$.I.x..4.o...;...D..K)!O.....H...UZ...:.......`f.z.G..q3,9.!.j..GdN.@..Z#O......g.I..R...q.`....cv.~.L.. .-a.7..z..I%..~..~H)..s.1-.A....9.,...9'...^J]..rBN4.....?i...\|.yDGu.?....q9+.:Zu.g..$}.tr.'.9...K..-@F...l...N....r.,\|.N.;........[.6...B.......W.d....o.q..l<..9..c.\.K9w..Kq.E.A..N..>u4 ...A.m.d'..Y+Y..:.+.f.Q.\.Z..2.W.~.2.R..F}....B...@....Hbe.V....}k?'...#.~..Zi.U:.G..q..s0..T.p...x.@j].BKUo..3...6.8.2...........e.J...S.....(..L.......c.Tv.a^....t.......\}..d....L....l.Hmd..E.bt.......K.....:]P...F..<}.....b.x..V.+m646..)..xd.s.F. m....x.....

Chrome Cache Entry: 709

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	24880
Entropy (8bit):	7.98835883347526
Encrypted:	false
SSDEEP:	384:rwonIuwoMFZldZeTQAaqk05WDYYdxOQNAO2iKv48G09+AIeaKsocZFMuYF:DIuHAZbIQZ0UX7Fa/1B+APaKsocDMuYF
MD5:	BF978A151BA3F10A7412E8CD5FBDB863
SHA1:	2AF8E9C16C4F1E96BA1E86BEEE63521C802C2CCE
SHA-256:	AC555D446E447B4C8CF2BF2DD377D53C3B21FAF83DA3259DC8839C782EBA1D9E
SHA-512:	9F4E9A46F019C2C8A5B11026C92679ADB57F8CBCA69271CFA2028DC1DB44C90C6F597603FDA8594FEBBB6521F4C51C6A7F330CBB04F20AD6E4793009627531FC
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/contextual/responsive/smlpromo/wfi000_ph_g_1200094303_616x353.jpg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@..................`"...#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe.......h...a....pixi............ipma.................`mdat.....f&{......2...Dl.q..P..Ig..(..g{......X....C6....a.....L.9.p.#. .6..2?..]9z.S.7....]...x.y(.jv.' ..].kR.RkV......QB=..+i...Tx8...5.G....,.5I<+.({qW.].;.i7..IT./..M.:...W.<c.#@Z.e.4..F....g.<.k.Sw=..U.B.G.....=...b]Q>..x..H`..Fjd.a.n..mI...4...\.%&...M.[.......b...3.aySO..S.3...a.....D.....k7...W.g.....z...)G.M.....R....C....}2..Y.{.U.4..eb{..A...-..NU..4.d...u...b.Ymz7.g.4E*..H...p....l..q.vI)....s.:..Y.S.b.v.>dl.!.......~.A.OA..._.5{z.j....I.#Q5.B2]hU.:qK....).Q0.m..x....w....EZ....:.{m..\|.xx.m.E.h..u+.W.. .gs).q..._:$~....v.`....@.j..Cq...:..>&k.....p".:X. .K.d.3.5..].@...\|#.X..:.&T.b.....=B^?.`.....I....:;.!qV;~.C......`....7.##r.....D.#.O\|..Z..........e...?c....a6,<..._O.....Pt.....Q0.+

Chrome Cache Entry: 710

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	3211
Entropy (8bit):	7.741746594138459
Encrypted:	false
SSDEEP:	96:rGgFbYnpDuB7rWntTb/SYN4sGKu0RVUVn:rGgknoB7ideYNu/I8
MD5:	A5B6AAE3577157B66DEAFD117391EE6D
SHA1:	64B9DAFA65FBF3741D9E88075C08FA18657719BE
SHA-256:	7E857FF224BDC293E30BF1A345BD6FA896484AEFCC9C001EF46ECEA54F01AE95
SHA-512:	EC9F4520C484B223EB799C4F3EEC45C1DB75B40BB880F84DBD1A9DE81F8FE6AAC672394E6BB5A6C50389CEAD2CAC2DA6A1CAE6D5AE99C64EBEF92B151223F654
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/contextual/responsive/tab-table-compare/compare-red-PRIME-1400x170.png?impolicy=TTCDesktopXL
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm.........4iloc....D@.........................................8iinf..........infe........av01.....infe........av01.....iprp....ipco....colrnclx...........av1C........ispe................pixi.........8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....av1C........ispe................pixi............ipma..........................iref........auxl..........mdat.....%....2"Dx.I...=.h.%...z.)....x...a.e.."......%......4 2..Lx..qB...8.,........"Pk...NB#.._h...`...5\|..."...mm..>....!....$."o]...s....".>.75.l*.M.;L.rV..h.Od;.t..[....m.\|......f>....-.D+!...uY..%.nO......=../..L..:E.~.C.Q........k,z..L.....A.,..0..~H...$..v'..={..#..tk9.m..&.a.k...........FWp...^._.a..G[~.K1.fg.l.I..!......HR.?........[.9.x0..d]q.[....k...G...2..^.R<I...}e0c)._........I.Y..-.s8.5\.#...F+....."?.%(O.....^.&.,wJ.7..ua..&..\|.5.4e\|+.y.sg....J......}..k.....m.Rwwd.}.}a......]....4...c.7!#x.m'.....h.,....y,.6.]..

Chrome Cache Entry: 711

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (552), with no line terminators
Category:	downloaded
Size (bytes):	552
Entropy (8bit):	5.666876376333995
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHNbvPURENUniUMCyEKJUb0U6sCORwmav:hMiRO90viiUMzVJdsCORwp
MD5:	306B8A87CE0AA42A19A59AB10C7651B5
SHA1:	9E8746D57479C63BBC1A6C674CE7E3EF485702C7
SHA-256:	6BA83BC1ADA1AF91B04F9C56CB11CEE7F73515821A788D3282C066BC544CB814
SHA-512:	7A0F55B3F82C0BEB8D038D815FD6D04E3E1725ABB14CD92AC83629730C4638FDE564EE68A2F49ACA813D70EFA0CE23A48AD7C20581B8D91B36602E2C73E63EA8
Malicious:	false
Reputation:	low
URL:	https://2549153.fls.doubleclick.net/activityi;dc_pre=CK6Ts_mFl4UDFREVdgYd2PIHKw;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CK6Ts_mFl4UDFREVdgYd2PIHKw;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=*;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F"/></body></html>

Chrome Cache Entry: 712

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, progressive, precision 8, 227x125, components 3
Category:	dropped
Size (bytes):	8428
Entropy (8bit):	7.84513484099987
Encrypted:	false
SSDEEP:	192:kavBsJ0BlABi9r8xVKO1cXr9fiijJ159kxqX2EGHy:kExD9r8xVKO1cXpJmxqX2fS
MD5:	E1213031E8EB811168EB772EE55B4177
SHA1:	1C7551674BB1CE3420475BE81333368C6A82693F
SHA-256:	43B659EC90F7FCD8C701314519D232A6B2833C654792313A184DA9EB316856DB
SHA-512:	B16B6AB98728D6989C981C2CCA7B85E29758EEA6A69D789DBA0123F4D3AAD29D0FE624B8A1A902EEC18394ED15695F14FEE74080AA814694ED64E58935E5BE5D
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..................................................#....#)" ")1,,1>;>QQm............................................#....#)" ")1,,1>;>QQm......}...."..........6...................................................................wx..p....YKB......we.e..)VU.Uk...1..f..y./"...Y!Y.....X.ee.b.X...g.%.......o-.nI...VP.._Qvf.....5..&*.#..@x_U....z..>..@..R.1"9....k\.$..../.....5...Cs..-..O8.6..?..u...T.}-Z..^..Ho...R....Ob..l.....rH.

Chrome Cache Entry: 713

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	563
Entropy (8bit):	7.035266309569057
Encrypted:	false
SSDEEP:	12:6v/7+WHUNpR1FUmFcUt6tf1Jbet1NyxvKFyzLXVR03xnU3+I:+0NpbuQHcmt1cxKF8c3xn++I
MD5:	EC9C1E94B174218C5779C50FE7042F30
SHA1:	232E0FE573CE27162B8A345F850CD445181F5FAD
SHA-256:	B8E5B9F0FF90966AFF36F61280DC586FC21F0FA2E700644BB8F39CA32F3730A4
SHA-512:	E8583B202B270FA60FC50E9FA02032E7E5324F876600FBC0FBC3890A5DC746352CD2A00435C113772DDE1922097E56AC0C94253438E6FF5BF742F4E2BD5E6101
Malicious:	false
Reputation:	low
URL:	https://www17.wellsfargomedia.com/assets/images/rwd/icons/tab-table-icons/checking-3-teen-hat-ON.png
Preview:	.PNG........IHDR...0...0.....`......xPLTE...@00800930;31;30:20;30:32<40;32;31;20=30:32:20<40880:21;31:22;21:30:50;30;21:30;41;21:31:40920;30:20:20;20;40<30;22;31.U+....'tRNS.. o._`..@...P.. ....0.....Op...pp..f.V.....orNT..w.....sRGB........)IDATH...r. .E....E.hl.6.........<..}r.^.=W....zo!..:N..t.....1......Y.z.ar.....C!.i.K.U...5.}..lZ..Y.u.R.[...1~..){6..&lx....Yl.B4T[.....cF..\....]LKj..y.(.....)C3^..,&... m...mL.8e.\8.B.].M1.x.........?Zl&.........{.x..JI.<h......g....tq./..M .846..dk...U.....h.)..J..,._i.......v.7.?v[.S>..(....IEND.B`.

Chrome Cache Entry: 714

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7683), with no line terminators
Category:	downloaded
Size (bytes):	7683
Entropy (8bit):	5.803214511992741
Encrypted:	false
SSDEEP:	192:fKK/haHi+k13mUxPkKCGMT9Q1HlHr8g7U9Vg3yvqdkrwilihrY:fKK0HRk13nFkKxMMHlHr8gEg3yvqdkr1
MD5:	DEE1AA50BA3707F20CD6C5FE8BF4D867
SHA1:	56261B988ACF496E1AD6B5CFB739916911F412C8
SHA-256:	9E5DE32675050BBA163026674801D9AD998E68346B378AE74BD9872D738CCABB
SHA-512:	F12F13468FFE419B20AE7C56BEEA9967137EF3FEEF67E3BA30CA3CEAB74DCB68B1C7AFCF8C0954D2FCC7D46498A6E4A5571464748701EBB32A2BFC017D0F9DF4
Malicious:	false
Reputation:	low
URL:	https://connect.secure.wellsfargo.com/accounts/static/7M/accounts/public/js/runtime.7b96d11d41a730864e0a.js
Preview:	!function(){"use strict";var e,t,n,r={},o={};function i(e){var t=o[e];if(void 0!==t)return t.exports;var n=o[e]={id:e,loaded:!1,exports:{}};return r[e].call(n.exports,n,n.exports,i),n.loaded=!0,n.exports}i.m=r,e=[],i.O=function(t,n,r,o){if(!n){var a=1/0;for(l=0;l<e.length;l++){n=e[l][0],r=e[l][1],o=e[l][2];for(var c=!0,u=0;u<n.length;u++)(!1&o\|\|a>=o)&&Object.keys(i.O).every((function(e){return i.O[e](n[u])}))?n.splice(u--,1):(c=!1,o<a&&(a=o));if(c){e.splice(l--,1);var s=r();void 0!==s&&(t=s)}}return t}o=o\|\|0;for(var l=e.length;l>0&&e[l-1][2]>o;l--)e[l]=e[l-1];e[l]=[n,r,o]},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,{a:t}),t},i.d=function(e,t){for(var n in t)i.o(t,n)&&!i.o(e,n)&&Object.defineProperty(e,n,{enumerable:!0,get:t[n]})},i.f={},i.e=function(e){return Promise.all(Object.keys(i.f).reduce((function(t,n){return i.f[n](e,t),t}),[]))},i.u=function(e){return"public/js/"+e+"."+{PredictiveBanking:"5b0ea3c123340aba4582",DevTools:

Chrome Cache Entry: 715

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	downloaded
Size (bytes):	106326
Entropy (8bit):	5.52689299206484
Encrypted:	false
SSDEEP:	1536:HeaHwaOYw5pa/nKuq5STTKR/v26kNguIt9bigw3hKJEsKTN+gK3+qV1j9MMYJUhZ:+aQaOYw58ISTT4esfbw3h9N+rKW
MD5:	AB34788BB0FF19E7DA8AE85A28C60EFE
SHA1:	05756134A382E3CE923D55C033C07E91BE60E7B4
SHA-256:	1EEDA03EDBC2BB72AB44077BD30E718F3A9B2A2DCB493B9CC05976A2A1D7F2EC
SHA-512:	01602FC7ECD215E43B0081B853A5C35618E10436BCE6527FDE255981AEDFB701CA37DEB38FEB5D7EBE426851EAF90AE6FD1442C83B0C47767D05E8DFA6DC5E5A
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/tracking/ga/gtag.js?t=AW-984436569
Preview:	// gtag.js - 20230830115644.var GTAG_TYPE=function(){var gtagType,currentScript=document.currentScript\|\|function(){try{throw new Error}catch(err){var url=(/at [^(\r\n]$(.):.+:.+$$/i.exec(err.stack)\|\|[])[1];if(url){var scripts=document.getElementsByTagName("script");for(var i in scripts)if(scripts[i].src==url)return scripts[i]}}return null}();return currentScript&&-1!==currentScript.src.indexOf("gtag.js")&&(gtagType=void 0===currentScript.src.split("?t=")[1]?"CORE":currentScript.src.split("?t=")[1].substring(0,2)),gtagType\|\|"CORE"}(),GTAG_CONFIG={CORE:{id:"",salt:"ChAI8N/yiAYQ/sLpxs3R3/lOEhkAiCq8P5n+5Jl2lPYrrAqF+9CynSAMn5lfGgIrEQ==",name:""},UA:{id:"undefined"!=typeof utag_data&&"RETDL"==utag_data.app_id?"UA-19597165-1":"UA-107148943-1",salt:"ChAI8LztiAYQr7+BrOKYjbQiEicAfMDsaWrMhkFBMPGo10w27kKCufDm4bQPQHPe48IJzu3RQ+BdEMUaAsgU",name:"c"},DC:{id:"DC-2549153",salt:"ChAI8N/yiAYQ/sLpxs3R3/lOEiMAiCq8P0qN5GDJNKlTfLLeTfVz4qOpT6tg/+q6HwGf3lZdJxoCdtg=",name:"c"},AW:{id:"AW-984436569",salt:"Ch

Chrome Cache Entry: 716

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=702-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2F&cb=1711631936402&event=PageLoad&eventType=PageLoad&eventDescription=PageOnLoad&device_type=DESKTOP
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 717

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/assets/images/global/s.gif?log=1&pid=703-224111-64&pageUrl=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&cb=1711631971849&offerType=iaRendered&slotId=WF_CON_HP_SML_PRIMARY&offerId=C_ccd_tk1reflectcardtestarspv_smlprimary&jsLogging=iaCallLog&device_type=DESKTOP&clist=tcm%3A542-288016-16%7Etcm%3A91-228643-32&promoSlot=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 718

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1142)
Category:	downloaded
Size (bytes):	3772
Entropy (8bit):	5.234041779914185
Encrypted:	false
SSDEEP:	96:FicnP4ReIZB/o1ybFLeRMcPYrQ5rik51foQJUG/IYcYI7GRGnIuX2IRvySAJ:FicnP4gIZWMbFMPYrQ5rik51fo3G/IYf
MD5:	ECC23176AA665855C451BCEB08CA718E
SHA1:	AD9D1D43415AA1800B2F2C024D07E1E9042CFED6
SHA-256:	384F41D37D3A9BE1A72E761589096FCCE4119150EA81EAD29BA758514D321E94
SHA-512:	63A059663EF62A8AFCA74327224947705777F11AF3EB23BF9AA0639F13E3DD51C3834DD9AF6D202B10BBD7E8DA5734E78FF2DC3CEA73834AB1D1A099A37E1D2F
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/tracking/secure-auth/utag.15.js?utv=ut4.51.202109220050
Preview:	//tealium universal tag - utag.15 ut4.0.202108181700, Copyright 2021 Tealium.com Inc. All Rights Reserved..var dotq=dotq\|\|[];try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.loader===undefined){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(this.readyState=='complete'\|\|this.readyState=='loaded'){this.onready

Chrome Cache Entry: 719

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 720

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65428), with CRLF line terminators
Category:	downloaded
Size (bytes):	495700
Entropy (8bit):	5.352843424823112
Encrypted:	false
SSDEEP:	6144:+p3mqYFEC4N538BplQBPtWqd1c417O96C6ZPFh60k:+tYZBpyvWV4C9R0k
MD5:	78FCF85CEEFF56D4EFF50EE7E8B4558C
SHA1:	E5ED2F78BAFE00DF11C65219C085E7910BEAAC9A
SHA-256:	4E7C7E367FA805BF24ACDEBF54E6D58CC2EF189FEF9B4645EDFFEC21352E7650
SHA-512:	FFCC798C1FAA9D8770B7150BABFA04117E4629FCD664FFEC0ED03DC78BC7388DDE9AD194501FDDE777A38E9852442687F871DBB8B0A63982364AA8623C859A81
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/tracking/gb/detector-dom.min.js
Preview:	/.. Version: 6.6.118B257 .. * Copyright (c) 21-09-2023 GlassBox http://www.glassboxdigital.com.. */....!function(k,I,e,se,y,ue){if(e\|\|!function(e,n){if(void 0!==e[n])return void 0!==e.console&&"function"==typeof e.console.log&&console.log("WARNING[Glassbox-1301]: detector script has been loaded more than once. Please fix to have a single detector loading. (Extra script loading will be ignored)"),1;try{e._gbLocalStorage=e.localStorage}catch(e){"SecurityError"===e.name&&console.log("[Glassbox] localStorage is not available.")}try{e._gbSessionStorage=e.sessionStorage}catch(e){"SecurityError"===e.name&&console.log("[Glassbox] sessionStorage is not available.")}if(e._cls_config&&e._cls_config.noStorageRecDisable&&(!e._gbLocalStorage\|\|!e._gbSessionStorage))return console.warn("[Glassbox] Recording has been disabled because browser storage is not available (are cookies disabled?)"),1;if(void 0===e.NodeFilter)return 1;if(e._cls_config&&e._cls_config.disableDetector)return e._cls_config={}

Chrome Cache Entry: 721

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4627
Entropy (8bit):	4.921626263590475
Encrypted:	false
SSDEEP:	48:YF+eQWpycOB4RHqh09IqlZCCu5ouWNVp9PONHsrMYw:uOalpLQo70GZw
MD5:	8990F20F9B4B9CF455FF6357BE6644F2
SHA1:	3709E90EB73A91A9895956DEDA63378A45AC7C9D
SHA-256:	A704A22D1F836D90150F66A94372316B9D416FE02CAA7EC20EE52328EBFBF431
SHA-512:	EE0C2E732800D0177DFB3E0B5196388B6B3DC423507F91A872122D6C6F97A94B8C5B2FDA8602C25C5922230C4FE44BB03C41BBEABE5826973A217DF9B3CBFA45
Malicious:	false
Reputation:	low
Preview:	{"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wallet","pageHash":"#/services/wallet","selector":"[class^=\"HomePage__addedWalletMessage\"] p","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_OAMEnrollment","pageUrl":"https://oam.wellsfargo.com/oamo/identity","pageHash":"","selector":"h1.title","accessor":"innerText","accessorMethod":"property","maxLength":100,"sessionTerminator":false},{"name":"CA_ErrorMessage","pageUrl":"","pageHash":"","selector":".ErrorMessage__errorMessageText___3b9lQ","accessor":"innerText","accessorMethod":"property","maxLength":150,"sessionTerminator":false},{"name":"CA_ErrorMessage_RoleAlert","pageUrl":"","pageHash":"*","selector":"p[role='alert']","accessor":"innerText","accessorMethod":"property",

Chrome Cache Entry: 722

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2715), with no line terminators
Category:	downloaded
Size (bytes):	2715
Entropy (8bit):	5.273597083416576
Encrypted:	false
SSDEEP:	48:JgF/8ueSId/m6P6DzvFHvwNQpTa/fhfK/hvHEDY/rDXftJHUDwyRP+vpTM:80tSIJWnvBYNaQf5Uhj/fz3ylJ
MD5:	CD521230176837A4A67774586A3B880C
SHA1:	B27CBFC0FAD7AB0E2EA9205E347F577AC6623DCC
SHA-256:	84BBAA858FE566665F3D4B5C97431C4E56D8A023FC72615A27D0171614851886
SHA-512:	D6962D9FC641A5E3C267B618C2E0A7A01C870317289B32B5E3568E30970C9FB819F31825111C7BFD2D7ECA6F865AF81BA59FC1FA8F0B0EED4C69E3B9CFD4AE42
Malicious:	false
Reputation:	low
URL:	https://www.wellsfargo.com/js/global/tas.js
Preview:	(function(){var presetSec=3000;var irequestTimeOut=600;function createRequest(){var req;if(window.XMLHttpRequest){req=new XMLHttpRequest();}else{req=false;}if(!req){try{req=new ActiveXObject("MSXML.XMLHTTP");}catch(olderMS){try{req=new ActiveXObject("Microsoft.XMLHTTP");}catch(e){}}}return req;}function setTasClick(collection){var total=collection.length,temp=null,i=0;for(i=0;i<total;i++){if(collection[i].tagName=="IMG"&&collection[i].className.indexOf("tasDefault")==-1){temp=collection[i].parentNode;}else{if(collection[i].tagName=="A"){temp=collection[i];}}if(temp!=null&&temp.tagName=="A"){temp.onclick=function(e){trackTASClick(this);return false;};}}}function trackInsights(){var curr=new Date(),time=curr.valueOf(),trackInfo="?Log=1&Program=EventReporting&Event=IADefaultOffer&Page="+window.location.pathname+window.location.search+"&CB="+time,req=new createRequest(),timer=setTimeout(function(){req.abort();},irequestTimeOut);for(var name in tasInfo.data){data+="&"+name+"="+tasInfo.data[

Chrome Cache Entry: 723

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 724

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 725

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15032)
Category:	downloaded
Size (bytes):	15059
Entropy (8bit):	5.365297825525622
Encrypted:	false
SSDEEP:	384:p40C/wTGLq+MYe2LrExHg3FmPS4KtmAshNnyyRgm:s4nRRxhAmKsryyr
MD5:	7A5EC882B57DF1CFF1EDE91DDAFE202C
SHA1:	BA692DA656E93B474B2C2559409B6CAE1D2A2A76
SHA-256:	052776CE5BB96D76CCED9B9D9D5CC8AB2110E33EABA59F6CD3259642A83FF4D4
SHA-512:	DBEB2EE98BA87B67496D6C79F5AE277BBAE6301FB94CF58F756E49B86C80CDC0A51DF3F51A2FABDDEB9C995FE45ADECB78F9CE13508E16286EC74DADF57BB998
Malicious:	false
Reputation:	low
URL:	https://static.wellsfargo.com/tracking/ytc/ytc.js
Preview:	// ytc.js - 20210709140535.!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=0)}([function(e,t,n){"use strict";function r(){if("undefined"==typ

Chrome Cache Entry: 726

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9865)
Category:	downloaded
Size (bytes):	11509
Entropy (8bit):	5.326399078741156
Encrypted:	false
SSDEEP:	192:fbQnP4gIZ+8NoAWVQsYT3NoAWVQsYavNoAWVQsYsyNoAWVQsY/NFNoAW0QsY/3N1:fUP4BZ+8NoAWVQsYT3NoAWVQsYavNoA4
MD5:	7BAEC42572D3F70DEECDDD05CF3A2E72
SHA1:	858B2585590BF9FAAE20E250F921D1FE9A5F113F
SHA-256:	8EA80288C103C833E611A165CD887306569528FBA4A5FECDF686AC630490E433
SHA-512:	2B5801C6357B3564C855B22EC69310242FB8A43B955C766C64A5ABFBCD9B8DC56FCA8512CA53D2B2437188DC01888FCFD8DFE1A5F71B68E8A451E434DE1A0C73
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/main/utag.397.js?utv=ut4.51.202311011941
Preview:	//tealium universal tag - utag.397 ut4.0.202311022132, Copyright 2023 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<35){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(th

Chrome Cache Entry: 727

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 728

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1071)
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	5.582665356387157
Encrypted:	false
SSDEEP:	96:LHJbRCnP4ReIZB/UmwDWg621N6X7lyJoQnWA:LHJbQnP4gIZ+dDh62+LlyJoQWA
MD5:	599AA08F71E9F81B607B230DCD27AE20
SHA1:	B8F50D44715143A1C6F949096C1A797D85D75C3D
SHA-256:	EE7778BD1BE77A140A7C041341CA49F431414E26B6B472E05BFF2895C96B13C3
SHA-512:	8F1E248B48D40C8EA367C1C69F816F0EF7D61F4FF47FABDEA418F82268DACE00A5D556A2F494129B5C04E30C7D7856BC5C015C4AC1819EDFCFFC152F791747E0
Malicious:	false
Reputation:	low
URL:	https://c1.wfinterface.com/tracking/main/utag.549.js?utv=ut4.51.202402272302
Preview:	//tealium universal tag - utag.549 ut4.0.202402281844, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<35){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(th

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 28, 2024 14:18:40.862210989 CET	49675	443	192.168.2.4	173.222.162.32
Mar 28, 2024 14:18:43.127758980 CET	49678	443	192.168.2.4	104.46.162.224
Mar 28, 2024 14:18:50.472083092 CET	49675	443	192.168.2.4	173.222.162.32
Mar 28, 2024 14:18:52.856838942 CET	49749	443	192.168.2.4	142.251.16.147
Mar 28, 2024 14:18:52.856872082 CET	443	49749	142.251.16.147	192.168.2.4
Mar 28, 2024 14:18:52.856930017 CET	49749	443	192.168.2.4	142.251.16.147
Mar 28, 2024 14:18:52.857620001 CET	49749	443	192.168.2.4	142.251.16.147
Mar 28, 2024 14:18:52.857634068 CET	443	49749	142.251.16.147	192.168.2.4
Mar 28, 2024 14:18:53.070190907 CET	443	49749	142.251.16.147	192.168.2.4
Mar 28, 2024 14:18:53.070801973 CET	49749	443	192.168.2.4	142.251.16.147
Mar 28, 2024 14:18:53.070818901 CET	443	49749	142.251.16.147	192.168.2.4
Mar 28, 2024 14:18:53.071803093 CET	443	49749	142.251.16.147	192.168.2.4
Mar 28, 2024 14:18:53.071857929 CET	49749	443	192.168.2.4	142.251.16.147
Mar 28, 2024 14:18:53.073048115 CET	49749	443	192.168.2.4	142.251.16.147
Mar 28, 2024 14:18:53.073105097 CET	443	49749	142.251.16.147	192.168.2.4
Mar 28, 2024 14:18:53.127588987 CET	49749	443	192.168.2.4	142.251.16.147
Mar 28, 2024 14:18:53.127599955 CET	443	49749	142.251.16.147	192.168.2.4
Mar 28, 2024 14:18:53.179831982 CET	49749	443	192.168.2.4	142.251.16.147
Mar 28, 2024 14:18:53.709353924 CET	49762	443	192.168.2.4	23.221.242.90
Mar 28, 2024 14:18:53.709388018 CET	443	49762	23.221.242.90	192.168.2.4
Mar 28, 2024 14:18:53.709450006 CET	49762	443	192.168.2.4	23.221.242.90
Mar 28, 2024 14:18:53.718704939 CET	49762	443	192.168.2.4	23.221.242.90
Mar 28, 2024 14:18:53.718718052 CET	443	49762	23.221.242.90	192.168.2.4
Mar 28, 2024 14:18:54.090394974 CET	443	49762	23.221.242.90	192.168.2.4
Mar 28, 2024 14:18:54.090465069 CET	49762	443	192.168.2.4	23.221.242.90
Mar 28, 2024 14:18:54.093419075 CET	49762	443	192.168.2.4	23.221.242.90
Mar 28, 2024 14:18:54.093426943 CET	443	49762	23.221.242.90	192.168.2.4
Mar 28, 2024 14:18:54.093666077 CET	443	49762	23.221.242.90	192.168.2.4
Mar 28, 2024 14:18:54.134881020 CET	49762	443	192.168.2.4	23.221.242.90
Mar 28, 2024 14:18:54.180242062 CET	443	49762	23.221.242.90	192.168.2.4
Mar 28, 2024 14:18:54.442508936 CET	443	49762	23.221.242.90	192.168.2.4
Mar 28, 2024 14:18:54.443208933 CET	443	49762	23.221.242.90	192.168.2.4
Mar 28, 2024 14:18:54.443276882 CET	49762	443	192.168.2.4	23.221.242.90
Mar 28, 2024 14:18:54.941641092 CET	49762	443	192.168.2.4	23.221.242.90
Mar 28, 2024 14:18:54.941660881 CET	443	49762	23.221.242.90	192.168.2.4
Mar 28, 2024 14:18:54.941796064 CET	49762	443	192.168.2.4	23.221.242.90
Mar 28, 2024 14:18:54.941802979 CET	443	49762	23.221.242.90	192.168.2.4
Mar 28, 2024 14:18:55.616394043 CET	49766	443	192.168.2.4	23.221.242.90
Mar 28, 2024 14:18:55.616401911 CET	443	49766	23.221.242.90	192.168.2.4
Mar 28, 2024 14:18:55.616507053 CET	49766	443	192.168.2.4	23.221.242.90
Mar 28, 2024 14:18:55.618257046 CET	49766	443	192.168.2.4	23.221.242.90
Mar 28, 2024 14:18:55.618266106 CET	443	49766	23.221.242.90	192.168.2.4
Mar 28, 2024 14:18:55.979551077 CET	443	49766	23.221.242.90	192.168.2.4
Mar 28, 2024 14:18:55.979626894 CET	49766	443	192.168.2.4	23.221.242.90
Mar 28, 2024 14:18:55.986504078 CET	49766	443	192.168.2.4	23.221.242.90
Mar 28, 2024 14:18:55.986507893 CET	443	49766	23.221.242.90	192.168.2.4
Mar 28, 2024 14:18:55.986757994 CET	443	49766	23.221.242.90	192.168.2.4
Mar 28, 2024 14:18:55.989160061 CET	49766	443	192.168.2.4	23.221.242.90
Mar 28, 2024 14:18:56.036242962 CET	443	49766	23.221.242.90	192.168.2.4
Mar 28, 2024 14:18:56.341638088 CET	443	49766	23.221.242.90	192.168.2.4
Mar 28, 2024 14:18:56.341856003 CET	443	49766	23.221.242.90	192.168.2.4
Mar 28, 2024 14:18:56.341907978 CET	49766	443	192.168.2.4	23.221.242.90
Mar 28, 2024 14:18:56.844958067 CET	49766	443	192.168.2.4	23.221.242.90
Mar 28, 2024 14:18:56.844963074 CET	443	49766	23.221.242.90	192.168.2.4
Mar 28, 2024 14:18:56.844981909 CET	49766	443	192.168.2.4	23.221.242.90
Mar 28, 2024 14:18:56.844985962 CET	443	49766	23.221.242.90	192.168.2.4
Mar 28, 2024 14:19:00.562647104 CET	49819	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:00.562676907 CET	443	49819	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:00.562732935 CET	49819	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:00.562993050 CET	49820	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:19:00.563018084 CET	443	49820	52.45.39.174	192.168.2.4
Mar 28, 2024 14:19:00.563066959 CET	49820	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:19:00.563366890 CET	49819	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:00.563381910 CET	443	49819	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:00.563555956 CET	49820	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:19:00.563574076 CET	443	49820	52.45.39.174	192.168.2.4
Mar 28, 2024 14:19:00.780059099 CET	443	49820	52.45.39.174	192.168.2.4
Mar 28, 2024 14:19:00.781047106 CET	49820	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:19:00.781058073 CET	443	49820	52.45.39.174	192.168.2.4
Mar 28, 2024 14:19:00.782115936 CET	443	49820	52.45.39.174	192.168.2.4
Mar 28, 2024 14:19:00.782181978 CET	49820	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:19:00.784529924 CET	49820	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:19:00.784593105 CET	443	49820	52.45.39.174	192.168.2.4
Mar 28, 2024 14:19:00.785044909 CET	49820	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:19:00.785053015 CET	443	49820	52.45.39.174	192.168.2.4
Mar 28, 2024 14:19:00.825655937 CET	49820	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:19:00.856353998 CET	443	49819	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:00.872206926 CET	49819	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:00.872214079 CET	443	49819	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:00.873100996 CET	443	49819	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:00.873153925 CET	49819	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:00.894463062 CET	49819	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:00.894534111 CET	443	49819	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:00.952841997 CET	49819	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:00.952851057 CET	443	49819	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:00.966897011 CET	443	49820	52.45.39.174	192.168.2.4
Mar 28, 2024 14:19:00.966960907 CET	443	49820	52.45.39.174	192.168.2.4
Mar 28, 2024 14:19:00.967026949 CET	49820	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:19:01.148920059 CET	49819	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:01.280667067 CET	49820	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:19:01.280689955 CET	443	49820	52.45.39.174	192.168.2.4
Mar 28, 2024 14:19:01.394571066 CET	49824	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:19:01.394582033 CET	443	49824	52.45.39.174	192.168.2.4
Mar 28, 2024 14:19:01.394746065 CET	49824	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:19:01.397104025 CET	49824	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:19:01.397116899 CET	443	49824	52.45.39.174	192.168.2.4
Mar 28, 2024 14:19:01.431936026 CET	49825	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:01.431961060 CET	443	49825	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:01.432243109 CET	49825	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:01.433166027 CET	49825	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:01.433176041 CET	443	49825	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:01.594434023 CET	443	49824	52.45.39.174	192.168.2.4
Mar 28, 2024 14:19:01.595179081 CET	49824	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:19:01.595202923 CET	443	49824	52.45.39.174	192.168.2.4
Mar 28, 2024 14:19:01.595496893 CET	443	49824	52.45.39.174	192.168.2.4
Mar 28, 2024 14:19:01.609668016 CET	49824	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:19:01.609739065 CET	443	49824	52.45.39.174	192.168.2.4
Mar 28, 2024 14:19:01.609918118 CET	49824	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:19:01.629400015 CET	443	49825	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:01.629789114 CET	49825	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:01.629802942 CET	443	49825	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:01.630852938 CET	443	49825	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:01.630909920 CET	49825	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:01.632539034 CET	49825	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:01.632594109 CET	443	49825	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:01.633224964 CET	49825	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:01.633232117 CET	443	49825	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:01.656241894 CET	443	49824	52.45.39.174	192.168.2.4
Mar 28, 2024 14:19:01.791517019 CET	443	49824	52.45.39.174	192.168.2.4
Mar 28, 2024 14:19:01.791637897 CET	443	49824	52.45.39.174	192.168.2.4
Mar 28, 2024 14:19:01.791800976 CET	49824	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:19:01.792753935 CET	49824	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:19:01.792766094 CET	443	49824	52.45.39.174	192.168.2.4
Mar 28, 2024 14:19:01.814968109 CET	49836	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:19:01.814989090 CET	443	49836	44.195.11.1	192.168.2.4
Mar 28, 2024 14:19:01.815047979 CET	49836	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:19:01.815787077 CET	49836	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:19:01.815800905 CET	443	49836	44.195.11.1	192.168.2.4
Mar 28, 2024 14:19:01.830977917 CET	443	49825	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:01.831032991 CET	443	49825	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:01.831053972 CET	49825	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:01.831078053 CET	49825	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:01.842540026 CET	49825	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:01.842556000 CET	443	49825	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:02.012541056 CET	443	49836	44.195.11.1	192.168.2.4
Mar 28, 2024 14:19:02.012742043 CET	49836	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:19:02.012763977 CET	443	49836	44.195.11.1	192.168.2.4
Mar 28, 2024 14:19:02.013652086 CET	443	49836	44.195.11.1	192.168.2.4
Mar 28, 2024 14:19:02.013710976 CET	49836	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:19:02.013989925 CET	49836	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:19:02.014041901 CET	443	49836	44.195.11.1	192.168.2.4
Mar 28, 2024 14:19:02.014089108 CET	49836	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:19:02.056235075 CET	443	49836	44.195.11.1	192.168.2.4
Mar 28, 2024 14:19:02.105320930 CET	49836	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:19:02.105326891 CET	443	49836	44.195.11.1	192.168.2.4
Mar 28, 2024 14:19:02.205286026 CET	443	49836	44.195.11.1	192.168.2.4
Mar 28, 2024 14:19:02.205341101 CET	49836	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:19:02.205358028 CET	443	49836	44.195.11.1	192.168.2.4
Mar 28, 2024 14:19:02.205424070 CET	443	49836	44.195.11.1	192.168.2.4
Mar 28, 2024 14:19:02.205514908 CET	49836	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:19:02.205857038 CET	49836	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:19:02.205864906 CET	443	49836	44.195.11.1	192.168.2.4
Mar 28, 2024 14:19:02.389475107 CET	49842	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:19:02.389491081 CET	443	49842	44.195.11.1	192.168.2.4
Mar 28, 2024 14:19:02.389626980 CET	49842	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:19:02.390048027 CET	49842	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:19:02.390055895 CET	443	49842	44.195.11.1	192.168.2.4
Mar 28, 2024 14:19:02.492438078 CET	49844	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:02.492460966 CET	443	49844	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:02.492516041 CET	49844	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:02.492930889 CET	49844	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:02.492935896 CET	443	49844	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:02.587713957 CET	443	49842	44.195.11.1	192.168.2.4
Mar 28, 2024 14:19:02.606375933 CET	49842	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:19:02.606384039 CET	443	49842	44.195.11.1	192.168.2.4
Mar 28, 2024 14:19:02.606901884 CET	443	49842	44.195.11.1	192.168.2.4
Mar 28, 2024 14:19:02.607803106 CET	49842	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:19:02.607862949 CET	443	49842	44.195.11.1	192.168.2.4
Mar 28, 2024 14:19:02.608038902 CET	49842	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:19:02.648242950 CET	443	49842	44.195.11.1	192.168.2.4
Mar 28, 2024 14:19:02.702503920 CET	49854	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:02.702512980 CET	443	49854	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:02.702676058 CET	49854	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:02.703013897 CET	49854	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:02.703027010 CET	443	49854	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:02.719469070 CET	443	49844	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:02.719839096 CET	49844	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:02.719849110 CET	443	49844	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:02.720752001 CET	443	49844	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:02.720832109 CET	49844	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:02.721554041 CET	49844	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:02.721606970 CET	443	49844	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:02.721807957 CET	49844	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:02.721815109 CET	443	49844	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:02.782903910 CET	443	49842	44.195.11.1	192.168.2.4
Mar 28, 2024 14:19:02.782957077 CET	443	49842	44.195.11.1	192.168.2.4
Mar 28, 2024 14:19:02.783008099 CET	49842	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:19:02.784395933 CET	49842	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:19:02.784404039 CET	443	49842	44.195.11.1	192.168.2.4
Mar 28, 2024 14:19:02.808125019 CET	49844	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:02.907651901 CET	443	49844	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:02.907702923 CET	443	49844	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:02.907782078 CET	49844	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:02.914714098 CET	443	49854	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:02.923847914 CET	49854	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:02.923865080 CET	443	49854	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:02.924721956 CET	443	49854	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:02.924776077 CET	49854	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:02.926825047 CET	49844	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:02.926846981 CET	443	49844	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:02.929909945 CET	49854	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:02.930028915 CET	443	49854	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:02.930583000 CET	49854	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:02.930591106 CET	443	49854	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:03.050352097 CET	49854	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:03.097070932 CET	443	49749	142.251.16.147	192.168.2.4
Mar 28, 2024 14:19:03.097127914 CET	443	49749	142.251.16.147	192.168.2.4
Mar 28, 2024 14:19:03.097290993 CET	49749	443	192.168.2.4	142.251.16.147
Mar 28, 2024 14:19:03.103759050 CET	443	49854	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:03.103817940 CET	443	49854	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:03.103893042 CET	49854	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:03.108370066 CET	49854	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:03.108382940 CET	443	49854	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:03.390064001 CET	49749	443	192.168.2.4	142.251.16.147
Mar 28, 2024 14:19:03.390079021 CET	443	49749	142.251.16.147	192.168.2.4
Mar 28, 2024 14:19:03.555695057 CET	49868	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:03.555710077 CET	443	49868	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:03.555775881 CET	49868	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:03.555979013 CET	49868	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:03.555988073 CET	443	49868	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:03.752260923 CET	443	49868	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:03.752496004 CET	49868	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:03.752504110 CET	443	49868	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:03.753710032 CET	443	49868	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:03.753778934 CET	49868	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:03.754271984 CET	49868	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:03.754326105 CET	443	49868	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:03.754877090 CET	49868	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:03.754883051 CET	443	49868	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:03.860888004 CET	49868	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:03.939745903 CET	443	49868	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:03.939793110 CET	443	49868	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:03.940082073 CET	49868	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:03.946337938 CET	49868	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:03.946350098 CET	443	49868	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:05.894479990 CET	49886	443	192.168.2.4	63.140.39.130
Mar 28, 2024 14:19:05.894517899 CET	443	49886	63.140.39.130	192.168.2.4
Mar 28, 2024 14:19:05.894630909 CET	49886	443	192.168.2.4	63.140.39.130
Mar 28, 2024 14:19:05.894896030 CET	49886	443	192.168.2.4	63.140.39.130
Mar 28, 2024 14:19:05.894910097 CET	443	49886	63.140.39.130	192.168.2.4
Mar 28, 2024 14:19:06.026937008 CET	49887	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:06.026954889 CET	443	49887	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:06.027031898 CET	49887	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:06.027575016 CET	49887	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:06.027586937 CET	443	49887	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:06.093722105 CET	443	49886	63.140.39.130	192.168.2.4
Mar 28, 2024 14:19:06.104039907 CET	49886	443	192.168.2.4	63.140.39.130
Mar 28, 2024 14:19:06.104049921 CET	443	49886	63.140.39.130	192.168.2.4
Mar 28, 2024 14:19:06.105432987 CET	443	49886	63.140.39.130	192.168.2.4
Mar 28, 2024 14:19:06.105503082 CET	49886	443	192.168.2.4	63.140.39.130
Mar 28, 2024 14:19:06.107292891 CET	49886	443	192.168.2.4	63.140.39.130
Mar 28, 2024 14:19:06.107481003 CET	443	49886	63.140.39.130	192.168.2.4
Mar 28, 2024 14:19:06.107525110 CET	49886	443	192.168.2.4	63.140.39.130
Mar 28, 2024 14:19:06.152231932 CET	443	49886	63.140.39.130	192.168.2.4
Mar 28, 2024 14:19:06.312236071 CET	443	49886	63.140.39.130	192.168.2.4
Mar 28, 2024 14:19:06.314107895 CET	49886	443	192.168.2.4	63.140.39.130
Mar 28, 2024 14:19:06.323240042 CET	443	49887	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:06.323822021 CET	443	49886	63.140.39.130	192.168.2.4
Mar 28, 2024 14:19:06.325021982 CET	443	49886	63.140.39.130	192.168.2.4
Mar 28, 2024 14:19:06.326112032 CET	49886	443	192.168.2.4	63.140.39.130
Mar 28, 2024 14:19:06.428709984 CET	49887	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:06.428725004 CET	443	49887	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:06.433038950 CET	49886	443	192.168.2.4	63.140.39.130
Mar 28, 2024 14:19:06.433057070 CET	443	49886	63.140.39.130	192.168.2.4
Mar 28, 2024 14:19:06.437544107 CET	443	49887	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:06.437580109 CET	443	49887	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:06.437591076 CET	49887	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:06.447801113 CET	49887	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:06.447885036 CET	443	49887	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:06.456551075 CET	49887	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:06.456558943 CET	443	49887	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:06.553302050 CET	443	49887	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:06.553311110 CET	443	49887	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:06.553349018 CET	49887	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:06.553356886 CET	443	49887	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:06.553431988 CET	443	49887	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:06.553478956 CET	49887	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:06.972716093 CET	49887	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:06.972733974 CET	443	49887	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:07.620543957 CET	49905	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:07.620570898 CET	443	49905	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:07.620723009 CET	49905	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:07.627053022 CET	49905	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:07.627068043 CET	443	49905	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:07.707581043 CET	49819	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:07.752239943 CET	443	49819	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:07.824054956 CET	443	49905	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:07.824368000 CET	49905	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:07.824378967 CET	443	49905	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:07.824680090 CET	443	49905	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:07.825177908 CET	49905	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:07.825227976 CET	443	49905	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:07.825315952 CET	49905	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:07.855381012 CET	443	49819	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:07.855550051 CET	443	49819	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:07.855616093 CET	49819	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:07.855881929 CET	49819	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:07.855895042 CET	443	49819	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:07.872235060 CET	443	49905	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:08.022193909 CET	443	49905	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:08.022249937 CET	443	49905	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:08.022286892 CET	49905	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:08.091018915 CET	49905	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:08.091028929 CET	443	49905	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:08.919152021 CET	49924	443	192.168.2.4	63.140.38.91
Mar 28, 2024 14:19:08.919161081 CET	443	49924	63.140.38.91	192.168.2.4
Mar 28, 2024 14:19:08.919363022 CET	49924	443	192.168.2.4	63.140.38.91
Mar 28, 2024 14:19:08.919756889 CET	49924	443	192.168.2.4	63.140.38.91
Mar 28, 2024 14:19:08.919770956 CET	443	49924	63.140.38.91	192.168.2.4
Mar 28, 2024 14:19:08.933248043 CET	49926	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:08.933255911 CET	443	49926	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:08.933449984 CET	49926	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:08.933672905 CET	49927	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:08.933691025 CET	443	49927	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:08.933866978 CET	49926	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:08.933873892 CET	443	49926	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:08.933928967 CET	49927	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:08.934089899 CET	49927	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:08.934107065 CET	443	49927	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:08.953234911 CET	49928	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:08.953267097 CET	443	49928	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:08.953468084 CET	49928	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:08.953880072 CET	49928	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:08.953892946 CET	443	49928	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:09.116358995 CET	443	49924	63.140.38.91	192.168.2.4
Mar 28, 2024 14:19:09.116637945 CET	49924	443	192.168.2.4	63.140.38.91
Mar 28, 2024 14:19:09.116655111 CET	443	49924	63.140.38.91	192.168.2.4
Mar 28, 2024 14:19:09.117626905 CET	443	49924	63.140.38.91	192.168.2.4
Mar 28, 2024 14:19:09.117680073 CET	49924	443	192.168.2.4	63.140.38.91
Mar 28, 2024 14:19:09.118158102 CET	49924	443	192.168.2.4	63.140.38.91
Mar 28, 2024 14:19:09.118220091 CET	443	49924	63.140.38.91	192.168.2.4
Mar 28, 2024 14:19:09.118298054 CET	49924	443	192.168.2.4	63.140.38.91
Mar 28, 2024 14:19:09.132941961 CET	49930	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:09.132956028 CET	443	49930	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:09.133219004 CET	49930	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:09.133471966 CET	49930	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:09.133486032 CET	443	49930	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:09.155076027 CET	443	49927	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.156428099 CET	443	49926	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.161427975 CET	49926	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.161437988 CET	443	49926	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.161667109 CET	49927	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.161679029 CET	443	49927	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.162537098 CET	443	49926	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.162600994 CET	49926	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.162678003 CET	443	49927	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.162724972 CET	49927	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.164228916 CET	443	49924	63.140.38.91	192.168.2.4
Mar 28, 2024 14:19:09.171907902 CET	49927	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.171983004 CET	443	49927	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.172105074 CET	49927	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.172112942 CET	443	49927	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.172298908 CET	49926	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.172347069 CET	443	49926	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.172497988 CET	49926	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.172503948 CET	443	49926	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.172549009 CET	49926	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.172570944 CET	443	49926	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.179617882 CET	49934	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:09.179631948 CET	443	49934	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:09.179887056 CET	49934	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:09.180567980 CET	49934	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:09.180578947 CET	443	49934	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:09.198206902 CET	49936	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:09.198225975 CET	443	49936	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:09.198276997 CET	49936	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:09.198791981 CET	49936	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:09.198805094 CET	443	49936	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:09.226922989 CET	49937	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:09.226958036 CET	443	49937	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:09.227207899 CET	49937	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:09.227494955 CET	49937	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:09.227510929 CET	443	49937	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:09.228039980 CET	49927	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.243828058 CET	443	49928	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:09.244380951 CET	49928	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:09.244391918 CET	443	49928	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:09.245737076 CET	443	49928	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:09.245790958 CET	49928	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:09.254995108 CET	49928	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:09.255109072 CET	443	49928	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:09.256267071 CET	49928	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:09.256275892 CET	443	49928	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:09.260059118 CET	49924	443	192.168.2.4	63.140.38.91
Mar 28, 2024 14:19:09.260071039 CET	443	49924	63.140.38.91	192.168.2.4
Mar 28, 2024 14:19:09.260101080 CET	49926	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.330646992 CET	443	49930	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:09.351953983 CET	443	49928	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:09.351999044 CET	443	49928	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:09.352039099 CET	49928	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:09.352088928 CET	49928	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:09.357633114 CET	443	49924	63.140.38.91	192.168.2.4
Mar 28, 2024 14:19:09.360025883 CET	49924	443	192.168.2.4	63.140.38.91
Mar 28, 2024 14:19:09.362071991 CET	49924	443	192.168.2.4	63.140.38.91
Mar 28, 2024 14:19:09.370240927 CET	49924	443	192.168.2.4	63.140.38.91
Mar 28, 2024 14:19:09.370245934 CET	443	49924	63.140.38.91	192.168.2.4
Mar 28, 2024 14:19:09.372246027 CET	443	49926	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.373353958 CET	49930	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:09.373363018 CET	443	49930	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:09.373393059 CET	443	49926	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.373456001 CET	49926	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.374238968 CET	443	49934	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:09.374452114 CET	443	49930	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:09.375364065 CET	49934	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:09.375371933 CET	443	49934	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:09.375670910 CET	443	49934	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:09.375730038 CET	49926	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.375740051 CET	443	49926	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.376878977 CET	49930	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:09.376957893 CET	443	49930	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:09.383279085 CET	443	49927	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.383649111 CET	443	49927	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.383706093 CET	49927	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.384186983 CET	49934	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:09.384248972 CET	443	49934	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:09.387471914 CET	49930	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:09.387883902 CET	49927	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.387895107 CET	443	49927	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.388742924 CET	49934	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:09.388850927 CET	49934	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:09.388873100 CET	443	49934	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:09.404748917 CET	49938	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.404776096 CET	443	49938	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.404833078 CET	49938	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.405136108 CET	49938	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.405144930 CET	443	49938	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.410517931 CET	49928	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:09.410530090 CET	443	49928	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:09.428234100 CET	443	49930	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:09.450155973 CET	443	49936	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:09.450423956 CET	49936	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:09.450433969 CET	443	49936	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:09.451456070 CET	443	49936	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:09.451529026 CET	49936	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:09.452676058 CET	49936	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:09.452734947 CET	443	49936	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:09.453208923 CET	49936	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:09.453216076 CET	443	49936	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:09.473802090 CET	49939	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:09.473826885 CET	443	49939	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:09.473915100 CET	49939	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:09.474236012 CET	49939	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:09.474253893 CET	443	49939	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:09.528971910 CET	443	49930	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:09.529038906 CET	443	49930	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:09.529222965 CET	49930	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:09.531775951 CET	443	49937	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:09.538472891 CET	49937	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:09.538496017 CET	443	49937	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:09.539381027 CET	443	49937	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:09.539442062 CET	49937	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:09.539866924 CET	49930	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:09.539875031 CET	443	49930	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:09.541920900 CET	49937	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:09.541980982 CET	443	49937	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:09.543013096 CET	49937	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:09.543024063 CET	443	49937	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:09.561733961 CET	443	49934	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:09.561747074 CET	443	49934	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:09.561796904 CET	443	49934	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:09.561811924 CET	49934	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:09.561840057 CET	49934	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:09.562633038 CET	49934	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:09.562642097 CET	443	49934	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:09.575455904 CET	49936	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:09.601769924 CET	443	49938	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.601980925 CET	49938	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.601998091 CET	443	49938	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.602327108 CET	443	49938	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.602801085 CET	49938	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.602864027 CET	443	49938	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.603102922 CET	49938	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.603137970 CET	49938	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.603172064 CET	443	49938	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.660060883 CET	49937	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:09.666754961 CET	443	49939	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:09.721065044 CET	443	49936	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:09.721564054 CET	443	49936	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:09.721609116 CET	49936	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:09.724037886 CET	49939	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:09.751683950 CET	49939	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:09.751693964 CET	443	49939	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:09.752019882 CET	443	49939	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:09.753308058 CET	49939	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:09.753360033 CET	443	49939	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:09.753524065 CET	49939	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:09.762033939 CET	49936	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:09.762044907 CET	443	49936	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:09.767544985 CET	49944	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:09.767560005 CET	443	49944	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:09.767651081 CET	49944	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:09.767801046 CET	49944	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:09.767812014 CET	443	49944	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:09.800235987 CET	443	49939	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:09.806174994 CET	443	49938	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.806571007 CET	443	49938	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.806627989 CET	49938	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.807399988 CET	49938	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.807414055 CET	443	49938	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.814667940 CET	443	49937	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:09.814744949 CET	443	49937	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:09.814798117 CET	49937	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:09.815989971 CET	49937	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:09.816000938 CET	443	49937	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:09.830332994 CET	49946	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.830349922 CET	443	49946	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.830437899 CET	49946	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.830708027 CET	49946	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.830720901 CET	443	49946	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.833872080 CET	49947	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.833894968 CET	443	49947	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.834059954 CET	49947	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.834352970 CET	49947	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:09.834366083 CET	443	49947	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:09.855664968 CET	443	49939	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:09.855711937 CET	443	49939	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:09.855770111 CET	49939	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:09.856312037 CET	49939	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:09.856319904 CET	443	49939	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:09.856353998 CET	49939	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:09.856372118 CET	49939	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:09.859503984 CET	49948	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:09.859530926 CET	443	49948	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:09.859807014 CET	49948	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:09.859983921 CET	49948	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:09.859999895 CET	443	49948	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:09.902672052 CET	49949	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:09.902686119 CET	443	49949	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:09.902771950 CET	49949	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:09.903646946 CET	49949	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:09.903656006 CET	443	49949	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:09.986706018 CET	443	49944	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:09.987270117 CET	49944	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:09.987276077 CET	443	49944	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:09.987562895 CET	443	49944	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:09.987930059 CET	49944	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:09.987982035 CET	443	49944	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:09.988167048 CET	49944	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:10.026812077 CET	443	49946	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.027497053 CET	49946	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.027508974 CET	443	49946	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.027864933 CET	443	49946	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.028181076 CET	49946	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.028237104 CET	443	49944	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:10.028253078 CET	443	49946	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.028460979 CET	49946	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.030915022 CET	443	49947	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.031131983 CET	49947	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.031150103 CET	443	49947	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.031438112 CET	443	49947	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.031943083 CET	49947	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.032010078 CET	443	49947	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.032133102 CET	49947	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.072235107 CET	443	49947	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.072242022 CET	443	49946	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.125518084 CET	443	49948	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:10.125967979 CET	49948	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:10.125973940 CET	443	49948	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:10.126854897 CET	443	49948	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:10.126907110 CET	49948	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:10.127288103 CET	49948	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:10.127336979 CET	443	49948	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:10.127759933 CET	49948	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:10.127764940 CET	443	49948	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:10.197150946 CET	443	49949	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:10.197365046 CET	49949	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:10.197380066 CET	443	49949	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:10.197674036 CET	443	49949	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:10.198060036 CET	49949	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:10.198112011 CET	443	49949	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:10.198223114 CET	49949	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:10.219058037 CET	49948	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:10.240238905 CET	443	49949	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:10.253340006 CET	443	49944	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:10.253951073 CET	443	49944	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:10.254014969 CET	49944	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:10.259957075 CET	49944	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:10.259963989 CET	443	49944	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:10.273292065 CET	443	49947	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.273514986 CET	443	49947	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.273586988 CET	49947	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.273742914 CET	443	49946	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.273864985 CET	443	49946	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.273905993 CET	49946	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.274184942 CET	49947	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.274198055 CET	443	49947	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.275383949 CET	49946	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.275393963 CET	443	49946	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.293431997 CET	49953	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.293454885 CET	443	49953	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.293603897 CET	49953	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.294019938 CET	443	49949	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:10.294039965 CET	443	49949	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:10.294085026 CET	443	49949	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:10.294096947 CET	49949	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:10.294126034 CET	49949	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:10.294452906 CET	49953	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.294466972 CET	443	49953	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.305179119 CET	49949	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:10.305188894 CET	443	49949	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:10.307895899 CET	49954	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.307919025 CET	443	49954	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.308034897 CET	49954	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.308335066 CET	49954	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.308346033 CET	443	49954	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.430566072 CET	49955	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:10.430591106 CET	443	49955	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:10.430671930 CET	49955	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:10.430861950 CET	49955	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:10.430876017 CET	443	49955	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:10.441921949 CET	49957	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:10.441939116 CET	443	49957	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:10.442032099 CET	49957	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:10.442538023 CET	49957	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:10.442550898 CET	443	49957	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:10.450813055 CET	443	49948	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:10.451432943 CET	443	49948	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:10.451499939 CET	49948	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:10.452883959 CET	49948	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:10.452891111 CET	443	49948	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:10.476506948 CET	49959	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:10.476517916 CET	443	49959	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:10.476572037 CET	49959	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:10.476851940 CET	49959	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:10.476867914 CET	443	49959	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:10.489681959 CET	443	49953	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.489952087 CET	49953	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.489963055 CET	443	49953	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.490262985 CET	443	49953	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.490673065 CET	49953	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.490727901 CET	443	49953	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.490895033 CET	49953	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.490989923 CET	49953	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.491017103 CET	443	49953	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.504548073 CET	443	49954	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.504755020 CET	49954	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.504769087 CET	443	49954	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.505110979 CET	443	49954	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.505532980 CET	49954	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.505590916 CET	443	49954	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.505645990 CET	49954	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.505686998 CET	49954	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.505721092 CET	443	49954	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.509295940 CET	49961	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:10.509308100 CET	443	49961	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:10.509367943 CET	49961	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:10.509857893 CET	49961	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:10.509866953 CET	443	49961	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:10.551980019 CET	49962	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:10.552011013 CET	443	49962	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:10.552103996 CET	49962	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:10.552337885 CET	49962	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:10.552350044 CET	443	49962	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:10.638044119 CET	443	49957	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:10.638907909 CET	49957	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:10.638915062 CET	443	49957	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:10.639509916 CET	443	49957	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:10.639935017 CET	443	49955	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:10.639969110 CET	49957	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:10.640022993 CET	443	49957	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:10.640600920 CET	49957	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:10.640650034 CET	49957	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:10.640662909 CET	443	49957	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:10.640872955 CET	49955	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:10.640882015 CET	443	49955	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:10.641191006 CET	443	49955	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:10.641560078 CET	49955	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:10.641635895 CET	443	49955	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:10.641681910 CET	49955	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:10.684226036 CET	443	49955	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:10.689372063 CET	443	49953	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.689841986 CET	443	49953	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.689896107 CET	49953	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.690510035 CET	49953	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.690522909 CET	443	49953	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.704412937 CET	443	49954	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.705001116 CET	443	49954	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.705049992 CET	49954	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.705303907 CET	49954	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:10.705321074 CET	443	49954	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:10.738221884 CET	443	49959	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:10.738435984 CET	49959	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:10.738445997 CET	443	49959	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:10.738739014 CET	443	49959	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:10.739262104 CET	49959	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:10.739314079 CET	443	49959	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:10.739578962 CET	49959	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:10.750552893 CET	49967	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:10.750566959 CET	443	49967	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:10.750626087 CET	49967	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:10.751013041 CET	49967	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:10.751023054 CET	443	49967	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:10.760026932 CET	49955	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:10.779608965 CET	443	49961	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:10.779906988 CET	49961	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:10.779917955 CET	443	49961	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:10.780214071 CET	443	49961	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:10.780232906 CET	443	49959	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:10.780287027 CET	49961	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:10.780822992 CET	443	49961	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:10.780875921 CET	49961	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:10.781879902 CET	49961	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:10.781919956 CET	443	49961	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:10.782015085 CET	49961	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:10.815150976 CET	49970	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:10.815176010 CET	443	49970	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:10.815277100 CET	49970	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:10.815629005 CET	49970	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:10.815653086 CET	443	49970	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:10.824644089 CET	443	49957	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:10.824656963 CET	443	49957	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:10.824706078 CET	443	49957	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:10.824714899 CET	49957	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:10.824754953 CET	49957	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:10.825861931 CET	49957	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:10.825867891 CET	443	49957	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:10.828236103 CET	443	49961	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:10.834635019 CET	49972	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:10.834659100 CET	443	49972	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:10.834722042 CET	49972	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:10.835232019 CET	49972	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:10.835246086 CET	443	49972	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:10.845987082 CET	49974	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:10.845998049 CET	443	49974	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:10.846071005 CET	49974	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:10.846223116 CET	49974	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:10.846230984 CET	443	49974	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:10.878439903 CET	49976	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:10.878463984 CET	443	49976	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:10.878514051 CET	49976	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:10.878709078 CET	49976	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:10.878716946 CET	443	49976	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:10.889520884 CET	49977	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:10.889530897 CET	443	49977	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:10.889678001 CET	49978	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:10.889687061 CET	443	49978	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:10.889697075 CET	49977	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:10.889731884 CET	49978	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:10.889869928 CET	49979	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:10.889885902 CET	443	49979	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:10.889977932 CET	49980	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:10.890007019 CET	49979	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:10.890012026 CET	443	49980	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:10.890052080 CET	49980	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:10.890249968 CET	49981	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:10.890276909 CET	443	49981	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:10.890372992 CET	49981	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:10.890624046 CET	49978	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:10.890635967 CET	443	49978	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:10.890798092 CET	49977	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:10.890808105 CET	443	49977	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:10.891047001 CET	49979	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:10.891056061 CET	443	49979	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:10.891202927 CET	49980	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:10.891216993 CET	443	49980	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:10.891326904 CET	49981	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:10.891339064 CET	443	49981	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:10.912587881 CET	443	49955	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:10.912931919 CET	443	49955	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:10.912983894 CET	49955	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:10.913285017 CET	49955	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:10.913290977 CET	443	49955	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:10.914962053 CET	49982	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:10.914977074 CET	443	49982	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:10.915144920 CET	49982	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:10.915359020 CET	49982	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:10.915369034 CET	443	49982	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:10.919783115 CET	49961	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:10.919789076 CET	443	49961	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:10.925632000 CET	49983	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:10.925647020 CET	443	49983	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:10.925693989 CET	49983	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:10.926172972 CET	49983	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:10.926179886 CET	443	49983	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:10.933556080 CET	49984	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:10.933576107 CET	443	49984	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:10.933620930 CET	49984	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:10.933806896 CET	49984	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:10.933821917 CET	443	49984	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:10.950714111 CET	49987	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:10.950737953 CET	443	49987	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:10.950794935 CET	49987	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:10.951141119 CET	49987	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:10.951153994 CET	443	49987	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.060662031 CET	443	49967	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:11.061157942 CET	443	49970	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.069380999 CET	49970	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.069401979 CET	443	49970	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.069931030 CET	49967	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:11.069947958 CET	443	49967	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:11.070283890 CET	443	49970	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.070286036 CET	443	49967	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:11.070312977 CET	443	49974	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:11.072666883 CET	443	49976	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.073385000 CET	443	49959	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:11.074059010 CET	443	49959	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:11.074104071 CET	49959	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:11.081779957 CET	49961	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:11.087244987 CET	443	49977	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.088279963 CET	49976	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.088289022 CET	443	49976	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.088421106 CET	49974	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:11.088426113 CET	443	49974	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:11.088831902 CET	443	49976	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.088852882 CET	49970	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.088911057 CET	443	49974	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:11.089078903 CET	443	49970	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.089145899 CET	49967	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:11.089350939 CET	443	49967	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:11.089529037 CET	49977	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.089534044 CET	443	49977	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.089801073 CET	49976	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.089931011 CET	443	49976	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.090131998 CET	49974	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:11.090254068 CET	443	49974	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:11.090317965 CET	49970	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.090405941 CET	49967	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:11.090516090 CET	49976	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.090576887 CET	49974	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:11.090673923 CET	443	49977	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.090738058 CET	49977	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.091042995 CET	49977	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.091176987 CET	49977	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.091252089 CET	443	49977	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.111948967 CET	49995	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:11.111955881 CET	443	49995	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:11.112015963 CET	49995	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:11.112984896 CET	49995	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:11.112997055 CET	443	49995	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:11.116931915 CET	49959	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:11.116940975 CET	443	49959	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:11.131643057 CET	443	49978	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.131874084 CET	49978	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.131885052 CET	443	49978	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.133390903 CET	443	49978	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.133475065 CET	49978	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.133833885 CET	49978	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.133946896 CET	49978	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.134021044 CET	443	49978	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.136225939 CET	443	49974	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:11.136225939 CET	443	49970	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.136239052 CET	443	49967	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:11.136241913 CET	443	49976	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.155723095 CET	443	49980	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.156821012 CET	49980	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.156838894 CET	443	49980	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.157129049 CET	443	49981	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.157733917 CET	443	49980	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.157890081 CET	49980	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.161036968 CET	49980	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.161312103 CET	443	49980	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.161458015 CET	49981	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.161473989 CET	443	49981	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.162738085 CET	443	49981	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.162811995 CET	49981	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.163172960 CET	49980	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.163182020 CET	443	49980	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.164211035 CET	49981	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.164309025 CET	443	49981	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.166945934 CET	49981	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.166965961 CET	443	49981	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.167764902 CET	443	49979	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.168776989 CET	49979	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.168786049 CET	443	49979	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.170294046 CET	443	49979	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.170355082 CET	49979	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.170967102 CET	49979	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.171123028 CET	443	49979	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.171241045 CET	443	49961	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:11.171349049 CET	49979	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.171355009 CET	443	49979	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.171720028 CET	443	49961	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:11.171782970 CET	49961	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:11.171953917 CET	49961	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:11.171960115 CET	443	49961	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:11.188421011 CET	443	49962	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:11.188648939 CET	49962	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:11.188674927 CET	443	49962	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:11.190579891 CET	443	49962	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:11.190679073 CET	49962	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:11.192862034 CET	49962	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:11.192998886 CET	443	49962	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:11.193036079 CET	49962	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:11.193082094 CET	49962	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:11.193098068 CET	443	49962	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:11.197371960 CET	443	49970	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.197391987 CET	443	49970	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.197448969 CET	443	49970	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.197449923 CET	49970	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.197489977 CET	49970	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.198678017 CET	49970	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.198697090 CET	443	49970	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.205332994 CET	443	49984	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.205872059 CET	49984	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.205879927 CET	443	49984	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.207040071 CET	443	49984	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.207093000 CET	49984	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.207504034 CET	49984	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.207643032 CET	443	49984	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.207987070 CET	49984	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.207992077 CET	443	49984	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.209876060 CET	443	49972	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:11.211473942 CET	49972	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:11.211479902 CET	443	49972	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:11.211951017 CET	443	49972	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:11.212547064 CET	49972	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:11.212656975 CET	443	49972	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:11.212670088 CET	49972	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:11.212687969 CET	49972	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:11.212691069 CET	443	49972	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:11.223391056 CET	49977	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.223401070 CET	443	49977	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.223434925 CET	49978	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.223438025 CET	49980	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.223440886 CET	443	49978	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.225353003 CET	443	49987	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.225548029 CET	49987	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.225559950 CET	443	49987	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.226782084 CET	443	49987	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.226885080 CET	49987	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.227256060 CET	49987	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.227343082 CET	443	49987	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.227462053 CET	49987	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.227468967 CET	443	49987	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.237788916 CET	443	49982	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:11.238121986 CET	49982	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:11.238131046 CET	443	49982	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:11.238740921 CET	443	49982	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:11.239396095 CET	49982	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:11.239515066 CET	49982	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:11.239521027 CET	443	49982	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:11.239546061 CET	443	49982	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:11.242377996 CET	443	49983	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:11.242714882 CET	49983	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:11.242722988 CET	443	49983	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:11.244250059 CET	443	49983	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:11.244308949 CET	49983	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:11.245481014 CET	49983	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:11.245625973 CET	443	49983	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:11.245702028 CET	49983	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:11.245709896 CET	443	49983	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:11.259912014 CET	443	49974	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:11.259958982 CET	443	49974	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:11.260015965 CET	49974	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:11.260489941 CET	49974	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:11.260499001 CET	443	49974	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:11.262252092 CET	443	49976	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.262269020 CET	443	49976	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.262311935 CET	443	49976	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.262320995 CET	49976	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.262351036 CET	49976	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.263411999 CET	49976	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.263423920 CET	443	49976	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.283627033 CET	49997	443	192.168.2.4	172.253.62.154
Mar 28, 2024 14:19:11.283643007 CET	443	49997	172.253.62.154	192.168.2.4
Mar 28, 2024 14:19:11.283792019 CET	49997	443	192.168.2.4	172.253.62.154
Mar 28, 2024 14:19:11.284109116 CET	49997	443	192.168.2.4	172.253.62.154
Mar 28, 2024 14:19:11.284125090 CET	443	49997	172.253.62.154	192.168.2.4
Mar 28, 2024 14:19:11.311119080 CET	50000	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:11.311147928 CET	443	50000	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:11.311331987 CET	50000	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:11.311563969 CET	50000	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:11.311582088 CET	443	50000	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:11.313189030 CET	50001	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:11.313194990 CET	443	50001	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:11.313246012 CET	50001	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:11.313419104 CET	50001	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:11.313431025 CET	443	50001	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:11.328100920 CET	443	49977	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.328151941 CET	49977	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.329018116 CET	49977	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.329021931 CET	443	49977	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.329643011 CET	50003	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.329663992 CET	443	50003	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.329905033 CET	50003	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.333336115 CET	50003	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.333348989 CET	443	50003	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.346242905 CET	443	49981	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.346597910 CET	443	49967	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:11.346671104 CET	49981	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.347917080 CET	443	49967	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:11.347971916 CET	49967	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:11.353773117 CET	49979	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.353787899 CET	49987	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.353791952 CET	49972	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:11.354511976 CET	443	49978	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.356113911 CET	49978	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.364763021 CET	443	49980	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.364810944 CET	443	49980	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.364864111 CET	49980	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.370687008 CET	49980	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.370704889 CET	443	49980	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.371984959 CET	49978	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.371993065 CET	443	49978	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.372539043 CET	49981	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.372560978 CET	443	49981	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.374368906 CET	49967	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:11.374377966 CET	443	49967	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:11.376013041 CET	50004	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:11.376028061 CET	443	50004	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:11.376125097 CET	50004	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:11.376348972 CET	50004	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:11.376370907 CET	443	50004	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:11.383455038 CET	443	49979	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.383497000 CET	443	49979	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.383721113 CET	49979	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.383882999 CET	49979	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.383888006 CET	443	49979	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.383897066 CET	49979	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.383935928 CET	49962	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:11.383950949 CET	49984	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.383951902 CET	49982	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:11.383981943 CET	49983	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:11.383985043 CET	49979	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.392975092 CET	443	49987	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.392992020 CET	443	49987	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.393002987 CET	443	49987	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.393038034 CET	443	49987	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.393057108 CET	49987	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.393089056 CET	49987	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.395807981 CET	49987	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.395818949 CET	443	49987	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.421983957 CET	443	49995	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:11.422354937 CET	49995	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:11.422362089 CET	443	49995	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:11.422724962 CET	443	49983	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:11.422812939 CET	443	49983	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:11.422861099 CET	49983	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:11.423203945 CET	49983	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:11.423217058 CET	443	49983	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:11.423229933 CET	443	49995	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:11.423304081 CET	49995	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:11.424201012 CET	49995	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:11.424257040 CET	443	49995	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:11.424329042 CET	49995	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:11.424335957 CET	443	49995	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:11.431266069 CET	443	49984	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.431308031 CET	443	49984	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.431346893 CET	49984	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.433347940 CET	49984	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.433358908 CET	443	49984	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.443639994 CET	443	49972	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:11.443710089 CET	443	49972	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:11.443763971 CET	49972	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:11.444367886 CET	49972	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:11.444375038 CET	443	49972	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:11.452306986 CET	50007	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.452336073 CET	443	50007	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.452560902 CET	50007	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.452728987 CET	50007	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.452745914 CET	443	50007	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.453809977 CET	443	49982	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:11.454211950 CET	443	49982	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:11.454283953 CET	49982	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:11.455012083 CET	49982	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:11.455020905 CET	443	49982	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:11.465941906 CET	50008	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:11.465961933 CET	443	50008	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:11.466097116 CET	50008	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:11.466443062 CET	50008	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:11.466454983 CET	443	50008	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:11.491852045 CET	443	49997	172.253.62.154	192.168.2.4
Mar 28, 2024 14:19:11.492311001 CET	49997	443	192.168.2.4	172.253.62.154
Mar 28, 2024 14:19:11.492321014 CET	443	49997	172.253.62.154	192.168.2.4
Mar 28, 2024 14:19:11.493206978 CET	443	49997	172.253.62.154	192.168.2.4
Mar 28, 2024 14:19:11.493261099 CET	49997	443	192.168.2.4	172.253.62.154
Mar 28, 2024 14:19:11.494462967 CET	49997	443	192.168.2.4	172.253.62.154
Mar 28, 2024 14:19:11.494517088 CET	443	49997	172.253.62.154	192.168.2.4
Mar 28, 2024 14:19:11.494628906 CET	49997	443	192.168.2.4	172.253.62.154
Mar 28, 2024 14:19:11.508721113 CET	49995	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:11.523001909 CET	50010	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.523027897 CET	443	50010	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:11.523199081 CET	50010	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.523401976 CET	50010	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.523407936 CET	443	50010	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:11.531060934 CET	50011	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:11.531084061 CET	443	50011	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:11.531173944 CET	50011	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:11.531336069 CET	50011	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:11.531347990 CET	443	50011	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:11.536237001 CET	443	49997	172.253.62.154	192.168.2.4
Mar 28, 2024 14:19:11.554306984 CET	443	49962	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:11.554389000 CET	443	49962	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:11.554563046 CET	49962	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:11.554864883 CET	49962	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:11.554876089 CET	443	49962	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:11.556029081 CET	50013	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:11.556056023 CET	443	50013	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:11.556149960 CET	50013	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:11.556718111 CET	50013	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:11.556731939 CET	443	50013	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:11.596240044 CET	443	50000	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:11.596534967 CET	50000	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:11.596544981 CET	443	50000	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:11.598007917 CET	443	50000	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:11.598064899 CET	50000	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:11.598351002 CET	50000	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:11.598459005 CET	50000	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:11.598464012 CET	443	50000	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:11.598480940 CET	443	50000	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:11.611062050 CET	49997	443	192.168.2.4	172.253.62.154
Mar 28, 2024 14:19:11.611069918 CET	443	49997	172.253.62.154	192.168.2.4
Mar 28, 2024 14:19:11.622198105 CET	443	50003	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.622401953 CET	50003	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.622410059 CET	443	50003	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.622941971 CET	443	50003	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.623604059 CET	50003	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.623730898 CET	50003	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.623769999 CET	443	50003	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.636729956 CET	443	50001	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:11.636953115 CET	50001	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:11.636961937 CET	443	50001	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:11.637567997 CET	443	50001	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:11.637622118 CET	50001	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:11.638644934 CET	443	50001	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:11.638694048 CET	50001	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:11.638825893 CET	50001	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:11.638906002 CET	443	50001	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:11.638933897 CET	50001	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:11.644285917 CET	443	50007	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.644454002 CET	50007	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.644463062 CET	443	50007	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.644742966 CET	443	50007	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.645031929 CET	50007	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.645081043 CET	443	50007	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.645121098 CET	50007	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.648256063 CET	443	49995	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:11.648348093 CET	443	49995	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:11.648401022 CET	49995	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:11.648788929 CET	49995	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:11.648797989 CET	443	49995	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:11.650269032 CET	50015	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.650281906 CET	443	50015	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:11.650490999 CET	50015	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.650667906 CET	50015	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.650671959 CET	443	50015	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:11.657083035 CET	50016	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:11.657109022 CET	443	50016	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:11.657151937 CET	50016	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:11.657485008 CET	50016	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:11.657496929 CET	443	50016	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:11.663476944 CET	443	50004	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:11.663678885 CET	50004	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:11.663686037 CET	443	50004	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:11.663966894 CET	443	50004	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:11.664273024 CET	50004	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:11.664350986 CET	443	50004	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:11.664378881 CET	50004	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:11.684228897 CET	443	50001	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:11.688235998 CET	443	50007	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.711452007 CET	443	49997	172.253.62.154	192.168.2.4
Mar 28, 2024 14:19:11.711534023 CET	49997	443	192.168.2.4	172.253.62.154
Mar 28, 2024 14:19:11.712069035 CET	49997	443	192.168.2.4	172.253.62.154
Mar 28, 2024 14:19:11.712076902 CET	443	49997	172.253.62.154	192.168.2.4
Mar 28, 2024 14:19:11.712234974 CET	443	50004	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:11.718133926 CET	50018	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.718170881 CET	443	50018	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:11.718305111 CET	50018	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.718770981 CET	50018	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.718782902 CET	443	50018	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:11.719088078 CET	50000	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:11.719104052 CET	50004	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:11.719104052 CET	443	50000	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:11.736947060 CET	443	50008	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:11.741902113 CET	443	50010	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:11.742247105 CET	50008	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:11.742254972 CET	443	50008	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:11.742587090 CET	443	50008	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:11.743845940 CET	50008	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:11.743938923 CET	443	50008	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:11.743983030 CET	50010	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.743998051 CET	443	50010	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:11.744107962 CET	50008	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:11.745066881 CET	443	50010	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:11.745130062 CET	50010	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.745578051 CET	50010	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.745655060 CET	443	50010	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:11.745765924 CET	50010	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.745773077 CET	443	50010	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:11.751076937 CET	50001	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:11.751077890 CET	50003	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.751082897 CET	443	50001	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:11.751112938 CET	50007	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.788238049 CET	443	50008	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:11.812083960 CET	50019	443	192.168.2.4	172.253.62.154
Mar 28, 2024 14:19:11.812112093 CET	443	50019	172.253.62.154	192.168.2.4
Mar 28, 2024 14:19:11.812172890 CET	50019	443	192.168.2.4	172.253.62.154
Mar 28, 2024 14:19:11.812376976 CET	50019	443	192.168.2.4	172.253.62.154
Mar 28, 2024 14:19:11.812386990 CET	443	50019	172.253.62.154	192.168.2.4
Mar 28, 2024 14:19:11.821305037 CET	443	50000	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:11.821358919 CET	50000	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:11.823558092 CET	50000	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:11.823570967 CET	443	50000	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:11.826941967 CET	443	50003	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.826982975 CET	443	50003	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.827047110 CET	50003	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.827510118 CET	50003	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:11.827517033 CET	443	50003	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:11.833756924 CET	443	50007	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.833776951 CET	443	50007	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.833786011 CET	443	50007	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.833821058 CET	443	50007	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.833836079 CET	50007	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.833870888 CET	50007	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.835135937 CET	50007	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:11.835141897 CET	443	50007	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:11.842132092 CET	50010	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.856096029 CET	443	50015	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:11.856292963 CET	50015	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.856303930 CET	443	50015	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:11.857367039 CET	443	50015	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:11.857415915 CET	50015	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.857739925 CET	50015	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.857798100 CET	443	50015	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:11.857914925 CET	50015	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.863104105 CET	50001	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:11.900243998 CET	443	50015	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:11.924643993 CET	443	50018	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:11.924839020 CET	50018	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.924854040 CET	443	50018	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:11.925740957 CET	443	50018	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:11.925800085 CET	50018	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.926116943 CET	50018	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.926189899 CET	443	50018	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:11.926233053 CET	50018	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.949647903 CET	50015	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:11.949660063 CET	443	50015	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:11.968240023 CET	443	50018	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:11.980235100 CET	443	50001	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:11.980319977 CET	443	50001	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:11.980365038 CET	50001	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:11.980902910 CET	50001	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:11.980909109 CET	443	50001	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:11.992897987 CET	443	50004	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:11.993592024 CET	443	50004	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:11.993639946 CET	50004	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:11.993721008 CET	50004	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:11.993730068 CET	443	50004	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:11.993751049 CET	50004	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:11.993774891 CET	50004	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:12.002430916 CET	50023	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:12.002444029 CET	443	50023	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:12.002612114 CET	50023	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:12.002787113 CET	50023	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:12.002799034 CET	443	50023	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:12.007565975 CET	443	50010	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:12.007642031 CET	443	50010	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:12.007925987 CET	50010	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:12.008580923 CET	50010	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:12.008590937 CET	443	50010	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:12.030739069 CET	443	50019	172.253.62.154	192.168.2.4
Mar 28, 2024 14:19:12.037952900 CET	50019	443	192.168.2.4	172.253.62.154
Mar 28, 2024 14:19:12.037962914 CET	443	50019	172.253.62.154	192.168.2.4
Mar 28, 2024 14:19:12.039103985 CET	443	50019	172.253.62.154	192.168.2.4
Mar 28, 2024 14:19:12.039166927 CET	50019	443	192.168.2.4	172.253.62.154
Mar 28, 2024 14:19:12.043081045 CET	50019	443	192.168.2.4	172.253.62.154
Mar 28, 2024 14:19:12.043144941 CET	443	50019	172.253.62.154	192.168.2.4
Mar 28, 2024 14:19:12.043338060 CET	50019	443	192.168.2.4	172.253.62.154
Mar 28, 2024 14:19:12.043344021 CET	443	50019	172.253.62.154	192.168.2.4
Mar 28, 2024 14:19:12.055073023 CET	50018	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:12.055085897 CET	443	50018	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:12.088069916 CET	443	50008	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:12.088185072 CET	443	50008	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:12.088237047 CET	50008	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:12.088593960 CET	50008	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:12.088598967 CET	443	50008	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:12.097125053 CET	50015	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:12.097177029 CET	50019	443	192.168.2.4	172.253.62.154
Mar 28, 2024 14:19:12.099251032 CET	50031	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:12.099267006 CET	443	50031	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:12.099383116 CET	50031	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:12.099529982 CET	50031	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:12.099539042 CET	443	50031	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:12.100589037 CET	443	50011	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:12.101645947 CET	50011	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:12.101654053 CET	443	50011	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:12.103287935 CET	443	50011	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:12.103348017 CET	50011	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:12.104532003 CET	50011	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:12.104708910 CET	443	50011	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:12.104729891 CET	50011	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:12.129554033 CET	443	50015	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:12.129605055 CET	443	50015	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:12.129672050 CET	50015	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:12.130263090 CET	50015	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:12.130274057 CET	443	50015	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:12.148916960 CET	443	50018	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:12.149003983 CET	50018	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:12.149389982 CET	50018	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:12.149401903 CET	443	50018	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:12.152241945 CET	443	50011	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:12.165246010 CET	443	50013	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:12.165564060 CET	50013	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:12.165572882 CET	443	50013	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:12.166806936 CET	443	50013	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:12.166891098 CET	50013	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:12.167296886 CET	50013	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:12.167424917 CET	50013	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:12.167429924 CET	443	50013	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:12.167700052 CET	443	50013	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:12.177540064 CET	50034	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.177552938 CET	443	50034	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.177661896 CET	50034	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.177743912 CET	50035	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.177751064 CET	443	50035	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.177831888 CET	50035	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.178045034 CET	50036	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.178066969 CET	443	50036	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.178280115 CET	50036	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.178338051 CET	50034	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.178348064 CET	443	50034	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.178503990 CET	50035	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.178514004 CET	443	50035	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.178641081 CET	50036	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.178653002 CET	443	50036	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.214076996 CET	50011	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:12.214083910 CET	443	50011	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:12.214107990 CET	50013	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:12.214112997 CET	443	50013	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:12.235739946 CET	443	50016	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:12.236354113 CET	50016	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:12.236365080 CET	443	50016	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:12.237498045 CET	443	50016	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:12.237561941 CET	50016	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:12.239048004 CET	50016	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:12.239109039 CET	443	50016	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:12.239243031 CET	50016	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:12.239250898 CET	443	50016	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:12.246786118 CET	443	50023	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:12.246972084 CET	50023	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:12.246984959 CET	443	50023	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:12.247606039 CET	443	50023	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:12.248014927 CET	50023	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:12.248081923 CET	443	50023	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:12.248656988 CET	50023	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:12.255769014 CET	443	50019	172.253.62.154	192.168.2.4
Mar 28, 2024 14:19:12.255959034 CET	443	50019	172.253.62.154	192.168.2.4
Mar 28, 2024 14:19:12.256014109 CET	50019	443	192.168.2.4	172.253.62.154
Mar 28, 2024 14:19:12.257098913 CET	50019	443	192.168.2.4	172.253.62.154
Mar 28, 2024 14:19:12.257107973 CET	443	50019	172.253.62.154	192.168.2.4
Mar 28, 2024 14:19:12.285859108 CET	443	50011	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:12.285904884 CET	50011	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:12.286443949 CET	50011	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:12.286453009 CET	443	50011	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:12.290435076 CET	50038	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:12.290447950 CET	443	50038	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:12.290499926 CET	50038	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:12.290704966 CET	50038	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:12.290715933 CET	443	50038	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:12.296235085 CET	443	50023	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:12.326069117 CET	50013	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:12.347449064 CET	443	50013	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:12.347574949 CET	443	50013	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:12.348119020 CET	50013	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:12.349329948 CET	50013	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:12.349334002 CET	443	50013	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:12.358839035 CET	50040	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:12.358858109 CET	443	50040	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:12.358963013 CET	50040	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:12.359297991 CET	50040	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:12.359311104 CET	443	50040	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:12.377199888 CET	443	50031	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:12.377396107 CET	50031	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:12.377408981 CET	443	50031	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:12.377753019 CET	443	50031	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:12.378077984 CET	50031	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:12.378138065 CET	443	50031	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:12.378184080 CET	50031	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:12.409432888 CET	443	50035	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.409657955 CET	50035	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.409670115 CET	443	50035	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.410556078 CET	443	50035	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.410609007 CET	50035	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.410926104 CET	50035	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.410983086 CET	443	50035	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.411129951 CET	50035	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.411135912 CET	443	50035	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.411413908 CET	443	50034	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.411583900 CET	50034	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.411591053 CET	443	50034	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.412483931 CET	443	50034	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.412544012 CET	50034	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.412904024 CET	50034	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.412955999 CET	443	50034	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.413053989 CET	50034	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.413058996 CET	443	50034	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.418437004 CET	443	50016	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:12.418499947 CET	50016	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:12.418926954 CET	50016	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:12.418935061 CET	443	50016	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:12.420238972 CET	443	50031	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:12.421852112 CET	443	50036	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.422208071 CET	50036	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.422220945 CET	443	50036	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.423089981 CET	443	50036	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.423161983 CET	50036	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.424408913 CET	50036	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.424467087 CET	443	50036	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.424607038 CET	50036	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.424614906 CET	443	50036	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.453103065 CET	50035	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.495132923 CET	80	49723	69.164.0.128	192.168.2.4
Mar 28, 2024 14:19:12.495244026 CET	49723	80	192.168.2.4	69.164.0.128
Mar 28, 2024 14:19:12.495511055 CET	49723	80	192.168.2.4	69.164.0.128
Mar 28, 2024 14:19:12.517100096 CET	50031	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:12.517110109 CET	50036	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.517111063 CET	50034	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.523377895 CET	443	50023	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:12.524092913 CET	443	50023	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:12.524151087 CET	50023	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:12.524336100 CET	50023	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:12.524341106 CET	443	50023	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:12.589554071 CET	80	49723	69.164.0.128	192.168.2.4
Mar 28, 2024 14:19:12.653255939 CET	443	50038	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:12.653847933 CET	50038	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:12.653857946 CET	443	50038	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:12.654196978 CET	443	50038	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:12.654649019 CET	50038	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:12.654706955 CET	443	50038	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:12.654932976 CET	50038	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:12.656735897 CET	443	50036	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.656797886 CET	443	50036	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.656877041 CET	50036	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.657361984 CET	50036	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.657372952 CET	443	50036	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.686762094 CET	443	50035	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.686815023 CET	443	50035	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.686873913 CET	50035	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.687333107 CET	50035	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.687340021 CET	443	50035	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.688004017 CET	443	50034	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.688051939 CET	443	50034	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.688103914 CET	50034	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.688431978 CET	50034	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:12.688437939 CET	443	50034	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:12.696234941 CET	443	50038	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:12.705533981 CET	443	50031	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:12.705920935 CET	443	50031	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:12.706085920 CET	50031	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:12.706764936 CET	50031	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:12.706783056 CET	443	50031	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:12.734508991 CET	443	50040	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:12.734724045 CET	50040	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:12.734734058 CET	443	50040	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:12.735017061 CET	443	50040	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:12.735343933 CET	50040	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:12.735399008 CET	443	50040	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:12.735440969 CET	50040	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:12.780236959 CET	443	50040	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:12.838103056 CET	50040	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:13.012054920 CET	443	50038	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:13.012141943 CET	443	50038	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:13.012191057 CET	50038	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:13.012629986 CET	50038	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:13.012636900 CET	443	50038	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:13.090564013 CET	443	50040	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:13.090671062 CET	443	50040	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:13.090806007 CET	50040	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:13.094186068 CET	50040	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:13.094194889 CET	443	50040	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:13.109592915 CET	50052	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:13.109605074 CET	443	50052	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:13.109747887 CET	50052	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:13.110431910 CET	50052	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:13.110441923 CET	443	50052	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:13.472925901 CET	443	50052	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:13.480721951 CET	50052	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:13.480729103 CET	443	50052	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:13.481112003 CET	443	50052	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:13.484349012 CET	50052	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:13.484409094 CET	443	50052	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:13.486010075 CET	50052	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:13.486098051 CET	50052	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:13.486149073 CET	443	50052	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:13.835364103 CET	443	50052	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:13.835429907 CET	443	50052	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:13.838133097 CET	50052	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:13.839458942 CET	50052	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:13.839469910 CET	443	50052	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:13.844150066 CET	50061	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:13.844166994 CET	443	50061	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:13.844249964 CET	50061	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:13.844866991 CET	50061	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:13.844877958 CET	443	50061	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:14.218007088 CET	443	50061	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:14.218272924 CET	50061	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:14.218281984 CET	443	50061	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:14.218583107 CET	443	50061	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:14.219093084 CET	50061	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:14.219145060 CET	443	50061	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:14.219392061 CET	50061	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:14.264236927 CET	443	50061	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:14.574170113 CET	443	50061	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:14.574280024 CET	443	50061	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:14.574325085 CET	50061	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:14.574856997 CET	50061	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:14.574862957 CET	443	50061	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:15.542292118 CET	50078	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.542323112 CET	443	50078	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.542412043 CET	50078	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.542412043 CET	50079	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.542435884 CET	443	50079	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.542536974 CET	50079	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.542778015 CET	50079	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.542779922 CET	50078	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.542789936 CET	443	50078	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.542789936 CET	443	50079	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.769218922 CET	443	50079	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.770369053 CET	443	50078	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.772859097 CET	50078	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.772877932 CET	443	50078	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.773147106 CET	50079	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.773173094 CET	443	50079	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.773922920 CET	443	50078	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.774030924 CET	50078	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.774069071 CET	443	50079	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.774188042 CET	50079	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.776206017 CET	50079	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.776274920 CET	443	50079	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.777196884 CET	50079	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.777204037 CET	443	50079	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.777313948 CET	50078	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.777389050 CET	443	50078	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.778059959 CET	50078	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.824234962 CET	443	50078	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.827569962 CET	50078	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.827577114 CET	443	50078	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.858002901 CET	50079	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.962233067 CET	443	50078	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.962359905 CET	50078	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.962374926 CET	443	50078	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.962440014 CET	50078	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.962445974 CET	443	50078	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.962486029 CET	443	50078	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.962932110 CET	50078	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.963116884 CET	50078	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.963125944 CET	443	50078	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.965388060 CET	443	50079	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.979629040 CET	443	50079	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.979640007 CET	443	50079	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.979676008 CET	443	50079	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.979687929 CET	443	50079	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.979696035 CET	443	50079	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.979708910 CET	50079	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.979727030 CET	443	50079	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.979753017 CET	443	50079	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.979762077 CET	50079	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.979762077 CET	50079	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.979773045 CET	50079	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.997237921 CET	443	50079	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.997262001 CET	443	50079	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.997289896 CET	443	50079	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.997318029 CET	50079	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.997330904 CET	443	50079	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.997359991 CET	50079	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.999665976 CET	443	50079	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.999736071 CET	443	50079	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:15.999759912 CET	50079	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.999831915 CET	50079	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:15.999991894 CET	50079	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.000004053 CET	443	50079	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.099601030 CET	50081	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:16.099620104 CET	443	50081	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:16.099698067 CET	50081	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:16.103208065 CET	50081	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:16.103220940 CET	443	50081	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:16.104101896 CET	50082	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.104118109 CET	443	50082	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.104919910 CET	50082	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.105107069 CET	50082	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.105117083 CET	443	50082	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.304429054 CET	443	50082	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.304702044 CET	50082	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.304718018 CET	443	50082	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.305738926 CET	443	50082	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.305799961 CET	50082	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.306118965 CET	50082	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.306168079 CET	443	50082	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.306380033 CET	50082	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.306385994 CET	443	50082	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.308001041 CET	443	50081	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:16.308163881 CET	50081	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:16.308187008 CET	443	50081	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:16.309217930 CET	443	50081	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:16.309292078 CET	50081	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:16.310192108 CET	50081	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:16.310260057 CET	443	50081	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:16.310336113 CET	50081	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:16.310343027 CET	443	50081	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:16.426312923 CET	50082	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.426383972 CET	50081	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:16.505068064 CET	443	50082	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.505177021 CET	443	50082	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.505229950 CET	50082	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.505656004 CET	50082	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.505671978 CET	443	50082	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.505681038 CET	50082	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.505718946 CET	50082	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.507500887 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.507525921 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.507590055 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.507807016 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.507819891 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.524635077 CET	443	50081	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:16.524760008 CET	443	50081	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:16.524806976 CET	50081	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:16.524975061 CET	50081	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:16.524986029 CET	443	50081	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:16.526135921 CET	50085	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:16.526154995 CET	443	50085	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:16.526212931 CET	50085	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:16.526408911 CET	50085	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:16.526417971 CET	443	50085	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:16.703638077 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.704561949 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.704576969 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.704885960 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.711168051 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.711227894 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.711714983 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.722884893 CET	443	50085	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:16.752248049 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.768500090 CET	50085	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:16.776223898 CET	50085	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:16.776232958 CET	443	50085	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:16.776676893 CET	443	50085	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:16.778930902 CET	50085	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:16.779005051 CET	443	50085	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:16.780927896 CET	50085	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:16.828233957 CET	443	50085	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:16.908848047 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.908866882 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.908880949 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.908919096 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.908932924 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.908965111 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.908982992 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.924724102 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.924741030 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.924778938 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.924787998 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.924813032 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.924832106 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.982755899 CET	443	50085	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:16.983172894 CET	443	50085	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:16.983217001 CET	50085	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:16.996551037 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.996568918 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.996613979 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.996623039 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:16.996651888 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:16.996674061 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:17.015013933 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:17.015028954 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:17.015065908 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:17.015074968 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:17.015101910 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:17.015110970 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:17.032316923 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:17.032332897 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:17.032393932 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:17.032408953 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:17.032447100 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:17.046647072 CET	50085	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:17.046658993 CET	443	50085	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:17.084718943 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:17.084748983 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:17.084783077 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:17.084794998 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:17.084822893 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:17.084845066 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:17.096591949 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:17.096606970 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:17.096663952 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:17.096673012 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:17.096720934 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:17.108705997 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:17.108748913 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:17.108782053 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:17.108791113 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:17.108839989 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:17.117796898 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:17.117835045 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:17.117851973 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:17.117858887 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:17.117908955 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:17.118777037 CET	50084	443	192.168.2.4	18.160.18.39
Mar 28, 2024 14:19:17.118793964 CET	443	50084	18.160.18.39	192.168.2.4
Mar 28, 2024 14:19:17.145812035 CET	50087	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:17.145833015 CET	443	50087	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:17.145895958 CET	50087	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:17.148206949 CET	50087	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:17.148221970 CET	443	50087	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:17.294070005 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.294091940 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.298134089 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.320002079 CET	50090	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:17.320004940 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.320019960 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.320029974 CET	443	50090	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:17.320087910 CET	50090	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:17.320506096 CET	50090	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:17.320518017 CET	443	50090	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:17.550869942 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.551019907 CET	443	50090	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:17.555402040 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.555414915 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.556885958 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.557034969 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.561583996 CET	50090	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:17.561599016 CET	443	50090	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:17.562725067 CET	443	50090	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:17.562819958 CET	50090	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:17.569200993 CET	50090	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:17.569262981 CET	443	50090	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:17.577147961 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.577224970 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.583138943 CET	50090	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:17.583148956 CET	443	50090	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:17.583400965 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.583406925 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.626091003 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.626091003 CET	50090	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:17.695616961 CET	443	50087	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:17.700664997 CET	50087	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:17.700679064 CET	443	50087	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:17.701093912 CET	443	50087	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:17.701800108 CET	50087	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:17.701800108 CET	50087	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:17.701809883 CET	443	50087	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:17.701854944 CET	443	50087	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:17.701972008 CET	50087	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:17.701992035 CET	443	50087	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:17.726471901 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.740961075 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.740968943 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.740995884 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.741014004 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.741022110 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.741030931 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.741039038 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.741049051 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.741053104 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.741142035 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.752114058 CET	50087	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:17.756836891 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.756855011 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.756913900 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.756922960 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.756952047 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.785753012 CET	443	50090	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:17.785973072 CET	443	50090	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:17.786067963 CET	50090	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:17.790069103 CET	50090	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:17.790085077 CET	443	50090	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:17.809178114 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.829030037 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.829042912 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.829061985 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.829070091 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.829092979 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.829101086 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.829153061 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.829153061 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.847735882 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.847762108 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.847786903 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.847791910 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.847842932 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.847842932 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.865274906 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.865292072 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.865359068 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.865365982 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.865428925 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.916640043 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.916655064 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.916764975 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.916771889 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.916907072 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.929085016 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.929101944 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.929151058 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.929157972 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.929231882 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.939397097 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.939429045 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.939459085 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.939467907 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.939491034 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.939837933 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.949575901 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.949606895 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.949636936 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.949641943 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.949655056 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:17.949668884 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.949738979 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.950007915 CET	50089	443	192.168.2.4	18.160.18.115
Mar 28, 2024 14:19:17.950014114 CET	443	50089	18.160.18.115	192.168.2.4
Mar 28, 2024 14:19:18.061939001 CET	443	50087	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:18.062020063 CET	443	50087	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:18.062177896 CET	50087	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:18.062419891 CET	50087	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:18.062433958 CET	443	50087	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:18.177273989 CET	50093	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:18.177301884 CET	443	50093	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:18.182212114 CET	50093	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:18.182615995 CET	50093	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:18.182631016 CET	443	50093	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:18.541191101 CET	443	50093	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:18.541522026 CET	50093	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:18.541537046 CET	443	50093	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:18.541851044 CET	443	50093	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:18.543467999 CET	50093	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:18.543525934 CET	443	50093	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:18.544128895 CET	50093	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:18.588244915 CET	443	50093	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:18.898363113 CET	443	50093	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:18.898446083 CET	443	50093	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:18.898499966 CET	50093	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:18.901281118 CET	50093	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:18.901294947 CET	443	50093	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:19.391307116 CET	50095	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:19.391336918 CET	443	50095	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:19.391403913 CET	50095	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:19.400104046 CET	50095	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:19.400122881 CET	443	50095	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:19.669287920 CET	443	50095	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:19.669502974 CET	50095	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:19.669523001 CET	443	50095	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:19.669867039 CET	443	50095	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:19.670284986 CET	50095	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:19.670342922 CET	443	50095	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:19.670471907 CET	50095	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:19.712239981 CET	443	50095	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:19.897286892 CET	50098	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:19.897309065 CET	443	50098	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:19.898181915 CET	50095	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:19.898256063 CET	443	50095	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:19.898297071 CET	50098	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:19.898370981 CET	50095	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:19.901904106 CET	50098	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:19.901918888 CET	443	50098	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:20.197098970 CET	443	50098	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:20.319972992 CET	50098	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:20.387386084 CET	50098	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:20.387394905 CET	443	50098	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:20.387877941 CET	443	50098	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:20.402156115 CET	50098	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:20.402245998 CET	443	50098	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:20.417704105 CET	50098	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:20.417823076 CET	50098	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:20.417857885 CET	443	50098	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:20.417973042 CET	50098	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:20.418004990 CET	443	50098	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:20.704875946 CET	443	50098	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:20.704891920 CET	443	50098	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:20.704906940 CET	443	50098	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:20.704941988 CET	50098	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:20.704952002 CET	443	50098	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:20.704962015 CET	443	50098	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:20.704976082 CET	50098	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:20.704996109 CET	50098	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:20.706888914 CET	50098	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:20.706897020 CET	443	50098	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:20.743454933 CET	50112	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:20.743474960 CET	443	50112	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:20.743520021 CET	50112	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:20.744349003 CET	50112	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:20.744359016 CET	443	50112	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:20.965760946 CET	443	50112	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:20.966630936 CET	50112	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:20.966645956 CET	443	50112	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:20.966968060 CET	443	50112	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:20.969584942 CET	50112	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:20.969661951 CET	443	50112	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:20.985908985 CET	50114	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:20.985919952 CET	443	50114	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:20.985975027 CET	50114	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:20.986440897 CET	50112	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:20.987097025 CET	50114	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:20.987109900 CET	443	50114	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:21.028238058 CET	443	50112	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:21.160836935 CET	443	50112	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:21.160886049 CET	443	50112	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:21.160929918 CET	50112	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:21.164098024 CET	50112	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:21.164108992 CET	443	50112	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:21.282140970 CET	443	50114	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:21.282483101 CET	50114	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:21.282491922 CET	443	50114	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:21.283138037 CET	443	50114	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:21.284425974 CET	50114	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:21.284598112 CET	50114	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:21.284598112 CET	50114	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:21.284607887 CET	443	50114	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:21.284650087 CET	443	50114	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:21.337980032 CET	50114	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:21.476675034 CET	443	50114	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:21.476828098 CET	443	50114	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:21.477344990 CET	50114	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:21.477344990 CET	50114	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:21.681715965 CET	50123	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:21.681740999 CET	443	50123	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:21.681832075 CET	50123	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:21.685573101 CET	50123	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:21.685587883 CET	443	50123	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:21.689234972 CET	50124	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:21.689248085 CET	443	50124	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:21.689399958 CET	50124	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:21.689614058 CET	50124	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:21.689625978 CET	443	50124	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:21.707817078 CET	50127	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:21.707832098 CET	443	50127	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:21.708173990 CET	50127	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:21.708633900 CET	50127	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:21.708643913 CET	443	50127	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:21.719316959 CET	50130	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:21.719333887 CET	443	50130	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:21.719770908 CET	50130	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:21.719986916 CET	50130	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:21.719999075 CET	443	50130	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:21.726979017 CET	50131	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:21.726985931 CET	443	50131	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:21.727113008 CET	50131	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:21.738081932 CET	50131	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:21.738091946 CET	443	50131	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:21.785558939 CET	50114	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:21.785566092 CET	443	50114	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:21.900053978 CET	443	50127	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:21.902997017 CET	50127	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:21.903012991 CET	443	50127	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:21.903295994 CET	443	50127	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:21.903968096 CET	50127	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:21.904026031 CET	443	50127	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:21.904169083 CET	50127	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:21.918909073 CET	443	50130	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:21.933865070 CET	443	50131	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:21.948237896 CET	443	50127	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:21.959573030 CET	50136	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:21.959603071 CET	443	50136	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:21.959877968 CET	50136	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:21.960175991 CET	50136	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:21.960187912 CET	443	50136	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:21.967103004 CET	50131	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:21.967109919 CET	443	50131	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:21.967485905 CET	443	50131	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:21.967515945 CET	50130	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:21.967523098 CET	443	50130	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:21.967864037 CET	443	50130	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:21.968708038 CET	50130	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:21.968774080 CET	443	50130	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:21.969907999 CET	50131	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:21.969968081 CET	443	50131	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:21.972187996 CET	50130	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:21.972351074 CET	50131	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:21.977344990 CET	443	50123	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:21.978076935 CET	50123	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:21.978086948 CET	443	50123	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:21.978359938 CET	443	50123	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:21.980534077 CET	50123	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:21.980592966 CET	443	50123	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:21.980743885 CET	50123	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:21.980863094 CET	50123	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:21.980889082 CET	443	50123	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:21.981055021 CET	50123	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:21.981082916 CET	443	50123	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:22.016242027 CET	443	50130	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:22.020242929 CET	443	50131	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:22.091391087 CET	443	50127	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:22.091408968 CET	443	50127	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:22.091458082 CET	443	50127	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:22.091739893 CET	50127	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:22.116539001 CET	443	50130	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:22.116585016 CET	443	50130	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:22.116856098 CET	50130	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:22.124221087 CET	443	50131	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:22.124239922 CET	443	50131	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:22.124284029 CET	443	50131	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:22.124313116 CET	50131	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:22.124413967 CET	50131	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:22.151115894 CET	50130	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:22.151135921 CET	443	50130	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:22.166862965 CET	443	50136	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:22.234421968 CET	443	50124	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:22.266773939 CET	443	50123	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:22.266788960 CET	443	50123	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:22.266841888 CET	443	50123	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:22.266859055 CET	50123	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:22.266892910 CET	50123	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:22.278181076 CET	50124	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:22.306925058 CET	50124	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:22.306931019 CET	443	50124	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:22.307262897 CET	443	50124	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:22.307601929 CET	50136	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:22.307612896 CET	443	50136	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:22.307972908 CET	443	50136	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:22.308936119 CET	50124	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:22.308999062 CET	443	50124	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:22.309822083 CET	50136	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:22.309864998 CET	50123	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:22.309875965 CET	443	50123	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:22.309886932 CET	443	50136	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:22.311359882 CET	50124	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:22.311393976 CET	50124	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:22.311413050 CET	443	50124	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:22.311471939 CET	50136	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:22.319478035 CET	50127	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:22.319483042 CET	443	50127	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:22.319725037 CET	50131	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:22.319735050 CET	443	50131	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:22.354605913 CET	50141	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:22.354628086 CET	443	50141	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:22.354779959 CET	50141	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:22.355679989 CET	50141	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:22.355691910 CET	443	50141	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:22.356234074 CET	443	50136	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:22.496865988 CET	50143	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:22.496901989 CET	443	50143	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:22.496999025 CET	50143	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:22.498517990 CET	50143	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:22.498528004 CET	443	50143	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:22.541619062 CET	443	50136	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:22.541676998 CET	443	50136	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:22.541747093 CET	50136	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:22.548934937 CET	50136	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:22.548954010 CET	443	50136	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:22.573199034 CET	50144	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:22.573218107 CET	443	50144	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:22.573318958 CET	50144	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:22.573862076 CET	50144	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:22.573874950 CET	443	50144	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:22.654022932 CET	443	50141	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:22.675376892 CET	50141	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:22.675385952 CET	443	50141	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:22.675753117 CET	443	50141	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:22.676345110 CET	443	50124	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:22.676412106 CET	443	50124	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:22.676575899 CET	50124	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:22.678925037 CET	50141	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:22.678991079 CET	443	50141	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:22.679409027 CET	50124	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:22.679421902 CET	443	50124	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:22.680707932 CET	50141	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:22.680977106 CET	50141	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:22.681005955 CET	443	50141	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:22.691570044 CET	443	50143	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:22.691925049 CET	50143	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:22.691934109 CET	443	50143	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:22.692311049 CET	443	50143	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:22.694566965 CET	50143	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:22.694677114 CET	443	50143	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:22.694804907 CET	50143	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:22.736242056 CET	443	50143	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:22.781229019 CET	50150	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:19:22.781248093 CET	443	50150	142.250.31.156	192.168.2.4
Mar 28, 2024 14:19:22.781503916 CET	50150	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:19:22.781878948 CET	50150	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:19:22.781891108 CET	443	50150	142.250.31.156	192.168.2.4
Mar 28, 2024 14:19:22.802129984 CET	443	50144	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:22.830878973 CET	50144	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:22.830885887 CET	443	50144	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:22.831188917 CET	443	50144	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:22.831787109 CET	50144	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:22.831849098 CET	443	50144	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:22.832504034 CET	50144	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:22.871303082 CET	443	50141	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:22.871402025 CET	443	50141	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:22.871455908 CET	50141	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:22.876234055 CET	443	50144	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:22.881369114 CET	443	50143	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:22.881406069 CET	443	50143	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:22.881480932 CET	50143	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:22.881486893 CET	443	50143	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:22.881522894 CET	50143	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:22.897777081 CET	50141	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:22.897797108 CET	443	50141	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:22.903508902 CET	50143	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:22.903522968 CET	443	50143	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:22.975898981 CET	50152	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:22.975912094 CET	443	50152	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:22.976174116 CET	50152	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:22.976341963 CET	50152	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:22.976351023 CET	443	50152	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:23.005810022 CET	443	50150	142.250.31.156	192.168.2.4
Mar 28, 2024 14:19:23.015633106 CET	443	50144	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:23.015697002 CET	443	50144	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:23.015765905 CET	50144	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:23.057303905 CET	50150	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:19:23.074567080 CET	50150	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:19:23.074573040 CET	443	50150	142.250.31.156	192.168.2.4
Mar 28, 2024 14:19:23.074928045 CET	50144	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:23.074934959 CET	443	50144	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:23.075675011 CET	443	50150	142.250.31.156	192.168.2.4
Mar 28, 2024 14:19:23.075686932 CET	443	50150	142.250.31.156	192.168.2.4
Mar 28, 2024 14:19:23.075742006 CET	50150	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:19:23.078821898 CET	50150	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:19:23.078887939 CET	443	50150	142.250.31.156	192.168.2.4
Mar 28, 2024 14:19:23.079188108 CET	50150	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:19:23.079194069 CET	443	50150	142.250.31.156	192.168.2.4
Mar 28, 2024 14:19:23.121206999 CET	50150	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:19:23.179933071 CET	50155	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:23.179961920 CET	443	50155	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:23.180061102 CET	50155	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:23.180288076 CET	50155	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:23.180296898 CET	443	50155	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:23.222188950 CET	443	50150	142.250.31.156	192.168.2.4
Mar 28, 2024 14:19:23.222275019 CET	443	50150	142.250.31.156	192.168.2.4
Mar 28, 2024 14:19:23.222312927 CET	50150	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:19:23.226058960 CET	50150	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:19:23.226069927 CET	443	50150	142.250.31.156	192.168.2.4
Mar 28, 2024 14:19:23.267548084 CET	443	50152	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:23.273138046 CET	50152	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:23.273150921 CET	443	50152	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:23.273505926 CET	443	50152	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:23.273993015 CET	50152	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:23.274054050 CET	443	50152	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:23.274276018 CET	50152	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:23.316236973 CET	443	50152	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:23.370311975 CET	443	50152	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:23.370341063 CET	443	50152	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:23.370395899 CET	50152	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:23.370404959 CET	443	50152	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:23.370448112 CET	50152	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:23.385881901 CET	50152	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:23.385891914 CET	443	50152	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:23.386918068 CET	443	50155	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:23.387147903 CET	50155	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:23.387162924 CET	443	50155	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:23.387514114 CET	443	50155	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:23.387806892 CET	50155	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:23.387866974 CET	443	50155	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:23.387959957 CET	50155	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:23.428236008 CET	443	50155	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:23.653258085 CET	443	50155	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:23.654278994 CET	443	50155	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:23.654392004 CET	50155	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:23.654756069 CET	50155	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:23.654777050 CET	443	50155	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:23.656933069 CET	50159	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:23.656963110 CET	443	50159	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:23.657021046 CET	50159	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:23.657305002 CET	50159	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:23.657321930 CET	443	50159	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:23.668755054 CET	50161	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:23.668775082 CET	443	50161	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:23.668829918 CET	50161	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:23.668989897 CET	50161	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:23.669003010 CET	443	50161	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:23.686909914 CET	50163	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:23.686919928 CET	443	50163	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:23.686975956 CET	50163	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:23.687148094 CET	50163	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:23.687160015 CET	443	50163	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:23.691730976 CET	50164	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:23.691752911 CET	443	50164	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:23.691808939 CET	50164	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:23.691981077 CET	50164	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:23.691991091 CET	443	50164	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:23.698576927 CET	50165	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:23.698589087 CET	443	50165	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:23.698731899 CET	50165	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:23.698992968 CET	50165	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:23.699003935 CET	443	50165	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:23.707751036 CET	50168	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:23.707760096 CET	443	50168	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:23.707815886 CET	50168	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:23.707981110 CET	50168	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:23.707992077 CET	443	50168	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:23.778100967 CET	50170	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:19:23.778115034 CET	443	50170	172.253.122.113	192.168.2.4
Mar 28, 2024 14:19:23.778177023 CET	50170	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:19:23.778381109 CET	50170	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:19:23.778388977 CET	443	50170	172.253.122.113	192.168.2.4
Mar 28, 2024 14:19:23.862051010 CET	443	50159	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:23.862660885 CET	50159	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:23.862668991 CET	443	50159	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:23.862974882 CET	443	50159	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:23.863936901 CET	50159	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:23.864010096 CET	443	50159	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:23.864253044 CET	50159	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:23.879571915 CET	443	50163	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:23.880073071 CET	50163	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:23.880086899 CET	443	50163	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:23.880498886 CET	443	50163	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:23.881308079 CET	50163	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:23.881400108 CET	443	50163	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:23.881428003 CET	50163	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:23.899688005 CET	443	50168	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:23.899880886 CET	50168	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:23.899887085 CET	443	50168	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:23.900167942 CET	443	50168	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:23.900459051 CET	50168	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:23.900512934 CET	443	50168	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:23.900577068 CET	50168	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:23.904623985 CET	443	50165	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:23.904861927 CET	50165	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:23.904867887 CET	443	50165	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:23.905143023 CET	443	50165	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:23.905529022 CET	50165	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:23.905581951 CET	443	50165	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:23.905741930 CET	50165	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:23.912235975 CET	443	50159	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:23.924238920 CET	443	50163	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:23.934189081 CET	50163	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:23.944231033 CET	443	50168	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:23.952227116 CET	443	50165	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:23.952791929 CET	443	50164	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:23.952975035 CET	50164	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:23.952995062 CET	443	50164	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:23.953284025 CET	443	50164	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:23.953666925 CET	50164	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:23.953723907 CET	443	50164	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:23.953780890 CET	50164	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:23.984675884 CET	443	50170	172.253.122.113	192.168.2.4
Mar 28, 2024 14:19:23.984864950 CET	50170	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:19:23.984873056 CET	443	50170	172.253.122.113	192.168.2.4
Mar 28, 2024 14:19:23.985233068 CET	443	50170	172.253.122.113	192.168.2.4
Mar 28, 2024 14:19:23.985295057 CET	50170	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:19:23.985944986 CET	443	50170	172.253.122.113	192.168.2.4
Mar 28, 2024 14:19:23.985992908 CET	50170	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:19:23.987082005 CET	50170	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:19:23.987142086 CET	443	50170	172.253.122.113	192.168.2.4
Mar 28, 2024 14:19:23.987365961 CET	50170	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:19:23.987371922 CET	443	50170	172.253.122.113	192.168.2.4
Mar 28, 2024 14:19:24.000237942 CET	443	50164	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:24.031223059 CET	443	50161	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:24.031553030 CET	50161	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:24.031564951 CET	443	50161	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:24.031960011 CET	443	50161	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:24.032355070 CET	50161	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:24.032465935 CET	50161	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:24.032582998 CET	443	50161	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:24.069170952 CET	443	50163	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:24.069195032 CET	443	50163	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:24.069202900 CET	443	50163	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:24.069243908 CET	50163	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:24.069255114 CET	443	50163	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:24.069268942 CET	443	50163	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:24.069319010 CET	50163	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:24.070987940 CET	50163	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:24.070997953 CET	443	50163	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:24.089632988 CET	443	50168	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:24.089651108 CET	443	50168	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:24.089700937 CET	443	50168	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:24.089704990 CET	50168	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:24.089736938 CET	50168	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:24.091413021 CET	50168	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:24.091424942 CET	443	50168	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:24.126197100 CET	50170	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:19:24.126198053 CET	50161	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:24.138315916 CET	443	50159	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:24.138948917 CET	443	50159	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:24.139017105 CET	50159	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:24.139377117 CET	50159	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:24.139389038 CET	443	50159	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:24.141345024 CET	443	50165	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:24.141393900 CET	443	50165	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:24.141438961 CET	50165	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:24.150253057 CET	50165	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:24.150259972 CET	443	50165	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:24.203807116 CET	443	50170	172.253.122.113	192.168.2.4
Mar 28, 2024 14:19:24.203972101 CET	443	50170	172.253.122.113	192.168.2.4
Mar 28, 2024 14:19:24.204039097 CET	50170	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:19:24.273736000 CET	443	50164	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:24.273789883 CET	443	50164	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:24.273849010 CET	50164	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:24.275144100 CET	50170	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:19:24.275157928 CET	443	50170	172.253.122.113	192.168.2.4
Mar 28, 2024 14:19:24.290064096 CET	50164	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:24.290070057 CET	443	50164	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:24.318645000 CET	50182	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:24.318664074 CET	443	50182	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:24.322061062 CET	50183	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:24.322078943 CET	443	50183	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:24.322113991 CET	50182	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:24.322227955 CET	50183	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:24.322871923 CET	50182	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:24.322886944 CET	443	50182	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:24.323080063 CET	50183	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:24.323090076 CET	443	50183	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:24.383232117 CET	443	50161	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:24.383332014 CET	443	50161	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:24.383395910 CET	50161	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:24.383985996 CET	50161	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:24.383996010 CET	443	50161	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:24.415450096 CET	50184	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:19:24.415469885 CET	443	50184	172.253.63.139	192.168.2.4
Mar 28, 2024 14:19:24.415878057 CET	50184	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:19:24.415913105 CET	50184	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:19:24.415919065 CET	443	50184	172.253.63.139	192.168.2.4
Mar 28, 2024 14:19:24.494609118 CET	50187	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:24.494623899 CET	443	50187	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:24.494810104 CET	50187	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:24.494880915 CET	50187	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:24.494889975 CET	443	50187	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:24.589843988 CET	50188	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:19:24.589854002 CET	443	50188	69.147.92.11	192.168.2.4
Mar 28, 2024 14:19:24.590125084 CET	50188	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:19:24.590125084 CET	50188	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:19:24.590147018 CET	443	50188	69.147.92.11	192.168.2.4
Mar 28, 2024 14:19:24.605695009 CET	443	50182	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:24.607791901 CET	443	50183	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:24.612068892 CET	50183	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:24.612085104 CET	443	50183	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:24.612106085 CET	50182	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:24.612114906 CET	443	50182	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:24.612488985 CET	443	50183	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:24.612509966 CET	443	50182	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:24.614672899 CET	50182	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:24.614742994 CET	443	50182	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:24.615398884 CET	50182	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:24.615400076 CET	50183	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:24.615463972 CET	443	50183	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:24.615495920 CET	50183	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:24.620265961 CET	443	50184	172.253.63.139	192.168.2.4
Mar 28, 2024 14:19:24.624450922 CET	50184	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:19:24.624458075 CET	443	50184	172.253.63.139	192.168.2.4
Mar 28, 2024 14:19:24.624954939 CET	443	50184	172.253.63.139	192.168.2.4
Mar 28, 2024 14:19:24.625046968 CET	50184	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:19:24.625622034 CET	443	50184	172.253.63.139	192.168.2.4
Mar 28, 2024 14:19:24.625704050 CET	50184	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:19:24.628732920 CET	50184	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:19:24.628783941 CET	443	50184	172.253.63.139	192.168.2.4
Mar 28, 2024 14:19:24.630120993 CET	50184	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:19:24.630126953 CET	443	50184	172.253.63.139	192.168.2.4
Mar 28, 2024 14:19:24.656239033 CET	443	50183	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:24.660229921 CET	443	50182	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:24.680707932 CET	50184	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:19:24.691447973 CET	443	50187	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:24.691664934 CET	50187	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:24.691674948 CET	443	50187	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:24.691992044 CET	443	50187	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:24.692332029 CET	50187	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:24.692389011 CET	443	50187	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:24.692482948 CET	50187	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:24.726409912 CET	50183	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:24.736238956 CET	443	50187	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:24.789711952 CET	443	50188	69.147.92.11	192.168.2.4
Mar 28, 2024 14:19:24.789932966 CET	50188	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:19:24.789942980 CET	443	50188	69.147.92.11	192.168.2.4
Mar 28, 2024 14:19:24.790316105 CET	443	50188	69.147.92.11	192.168.2.4
Mar 28, 2024 14:19:24.790383101 CET	50188	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:19:24.791086912 CET	443	50188	69.147.92.11	192.168.2.4
Mar 28, 2024 14:19:24.791193962 CET	50188	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:19:24.792521000 CET	50188	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:19:24.792521000 CET	50188	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:19:24.792534113 CET	443	50188	69.147.92.11	192.168.2.4
Mar 28, 2024 14:19:24.792599916 CET	443	50188	69.147.92.11	192.168.2.4
Mar 28, 2024 14:19:24.837343931 CET	443	50184	172.253.63.139	192.168.2.4
Mar 28, 2024 14:19:24.837568045 CET	443	50184	172.253.63.139	192.168.2.4
Mar 28, 2024 14:19:24.837733030 CET	50184	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:19:24.840173006 CET	50184	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:19:24.840178013 CET	443	50184	172.253.63.139	192.168.2.4
Mar 28, 2024 14:19:24.927668095 CET	50188	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:19:24.927674055 CET	443	50188	69.147.92.11	192.168.2.4
Mar 28, 2024 14:19:24.929321051 CET	443	50182	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:24.929862022 CET	443	50182	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:24.936080933 CET	50182	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:24.936645985 CET	443	50187	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:24.937241077 CET	443	50187	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:24.937532902 CET	50187	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:24.948065996 CET	50187	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:24.948075056 CET	443	50187	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:24.951448917 CET	50182	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:24.951459885 CET	443	50182	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:24.954493999 CET	50200	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:24.954509020 CET	443	50200	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:24.954639912 CET	50200	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:24.954881907 CET	50200	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:24.954890966 CET	443	50200	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:24.955473900 CET	443	50183	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:24.955888033 CET	443	50183	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:24.955990076 CET	50183	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:24.957119942 CET	50201	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:24.957119942 CET	50202	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:24.957129955 CET	443	50201	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:24.957142115 CET	443	50202	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:24.957206964 CET	50202	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:24.957221031 CET	50201	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:24.957381964 CET	50183	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:24.957387924 CET	443	50183	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:24.958009958 CET	50201	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:24.958010912 CET	50202	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:24.958022118 CET	443	50202	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:24.958023071 CET	443	50201	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:24.964361906 CET	50203	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:24.964376926 CET	443	50203	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:24.964500904 CET	50203	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:24.967200041 CET	50203	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:24.967200041 CET	50204	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:24.967216969 CET	443	50203	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:24.967223883 CET	443	50204	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:24.967288017 CET	50204	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:24.967535019 CET	50204	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:24.967545986 CET	443	50204	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:24.973352909 CET	443	50188	69.147.92.11	192.168.2.4
Mar 28, 2024 14:19:24.973478079 CET	50188	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:19:24.976247072 CET	50188	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:19:24.976253033 CET	443	50188	69.147.92.11	192.168.2.4
Mar 28, 2024 14:19:25.076589108 CET	50205	443	192.168.2.4	69.147.92.12
Mar 28, 2024 14:19:25.076606989 CET	443	50205	69.147.92.12	192.168.2.4
Mar 28, 2024 14:19:25.076704025 CET	50205	443	192.168.2.4	69.147.92.12
Mar 28, 2024 14:19:25.077363968 CET	50205	443	192.168.2.4	69.147.92.12
Mar 28, 2024 14:19:25.077375889 CET	443	50205	69.147.92.12	192.168.2.4
Mar 28, 2024 14:19:25.172419071 CET	443	50204	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:25.172674894 CET	50204	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:25.172683954 CET	443	50204	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:25.173041105 CET	443	50204	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:25.174329042 CET	50204	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:25.174393892 CET	443	50204	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:25.174834967 CET	50204	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:25.174834967 CET	50204	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:25.174864054 CET	443	50204	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:25.187396049 CET	443	50200	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:25.187781096 CET	50200	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:25.187793016 CET	443	50200	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:25.188076973 CET	443	50200	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:25.192785978 CET	50200	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:25.192785978 CET	50200	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:25.192833900 CET	443	50200	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:25.215719938 CET	443	50201	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:25.215918064 CET	50201	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:25.215924978 CET	443	50201	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:25.216254950 CET	443	50201	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:25.216546059 CET	50201	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:25.216639042 CET	443	50201	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:25.216757059 CET	50201	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:25.221111059 CET	443	50202	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:25.221362114 CET	50204	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:25.224925041 CET	50202	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:25.224932909 CET	443	50202	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:25.225291014 CET	443	50202	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:25.227242947 CET	50202	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:25.227307081 CET	443	50202	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:25.227524042 CET	50202	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:25.237394094 CET	50200	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:25.260236025 CET	443	50201	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:25.268237114 CET	443	50202	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:25.270416975 CET	443	50205	69.147.92.12	192.168.2.4
Mar 28, 2024 14:19:25.270656109 CET	50205	443	192.168.2.4	69.147.92.12
Mar 28, 2024 14:19:25.270663977 CET	443	50205	69.147.92.12	192.168.2.4
Mar 28, 2024 14:19:25.270983934 CET	443	50205	69.147.92.12	192.168.2.4
Mar 28, 2024 14:19:25.271038055 CET	50205	443	192.168.2.4	69.147.92.12
Mar 28, 2024 14:19:25.271601915 CET	443	50205	69.147.92.12	192.168.2.4
Mar 28, 2024 14:19:25.271671057 CET	50205	443	192.168.2.4	69.147.92.12
Mar 28, 2024 14:19:25.271831989 CET	50205	443	192.168.2.4	69.147.92.12
Mar 28, 2024 14:19:25.271894932 CET	443	50205	69.147.92.12	192.168.2.4
Mar 28, 2024 14:19:25.272046089 CET	50205	443	192.168.2.4	69.147.92.12
Mar 28, 2024 14:19:25.272053957 CET	443	50205	69.147.92.12	192.168.2.4
Mar 28, 2024 14:19:25.275058985 CET	443	50203	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:25.275259972 CET	50203	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:25.275271893 CET	443	50203	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:25.276204109 CET	443	50203	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:25.276521921 CET	50203	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:25.276591063 CET	443	50203	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:25.276633978 CET	50203	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:25.320242882 CET	443	50203	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:25.374206066 CET	443	50204	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:25.374474049 CET	443	50204	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:25.374524117 CET	50204	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:25.375020027 CET	50204	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:25.375024080 CET	443	50204	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:25.385387897 CET	50210	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:25.385397911 CET	443	50210	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:25.385489941 CET	50210	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:25.385809898 CET	50210	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:25.385822058 CET	443	50210	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:25.406661987 CET	50205	443	192.168.2.4	69.147.92.12
Mar 28, 2024 14:19:25.406661987 CET	50203	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:25.421103001 CET	443	50200	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:25.421150923 CET	443	50200	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:25.421206951 CET	50200	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:25.421658993 CET	50200	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:25.421665907 CET	443	50200	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:25.446332932 CET	443	50201	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:25.446432114 CET	443	50201	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:25.446481943 CET	50201	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:25.446755886 CET	50201	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:25.446760893 CET	443	50201	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:25.448297024 CET	50213	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:25.448304892 CET	443	50213	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:25.448473930 CET	50213	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:25.448667049 CET	50213	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:25.448681116 CET	443	50213	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:25.470957041 CET	443	50205	69.147.92.12	192.168.2.4
Mar 28, 2024 14:19:25.471008062 CET	443	50205	69.147.92.12	192.168.2.4
Mar 28, 2024 14:19:25.471168041 CET	50205	443	192.168.2.4	69.147.92.12
Mar 28, 2024 14:19:25.475348949 CET	50205	443	192.168.2.4	69.147.92.12
Mar 28, 2024 14:19:25.475359917 CET	443	50205	69.147.92.12	192.168.2.4
Mar 28, 2024 14:19:25.504755020 CET	443	50202	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:25.505319118 CET	443	50202	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:25.505381107 CET	50202	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:25.505623102 CET	50202	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:25.505633116 CET	443	50202	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:25.586261988 CET	443	50210	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:25.588107109 CET	50210	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:25.588116884 CET	443	50210	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:25.588506937 CET	443	50210	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:25.589092970 CET	50210	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:25.589158058 CET	443	50210	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:25.589395046 CET	50210	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:25.636234999 CET	443	50210	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:25.659874916 CET	443	50213	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:25.660181046 CET	50213	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:25.660204887 CET	443	50213	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:25.660583019 CET	443	50213	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:25.663772106 CET	50213	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:25.663853884 CET	443	50213	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:25.664535999 CET	50213	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:25.668495893 CET	443	50203	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:25.668567896 CET	443	50203	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:25.668615103 CET	50203	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:25.675102949 CET	50203	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:25.675108910 CET	443	50203	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:25.708245993 CET	443	50213	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:25.824814081 CET	443	50210	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:25.824875116 CET	443	50210	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:25.825074911 CET	50210	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:25.825083017 CET	443	50210	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:25.825090885 CET	50210	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:25.825134039 CET	50210	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:25.954204082 CET	443	50213	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:25.954278946 CET	443	50213	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:25.954354048 CET	50213	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:25.965027094 CET	50213	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:25.965034008 CET	443	50213	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:25.973390102 CET	50219	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:25.973398924 CET	443	50219	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:25.973577023 CET	50219	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:25.973777056 CET	50219	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:25.973792076 CET	443	50219	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:26.182718992 CET	443	50219	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:26.184561014 CET	50219	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:26.184570074 CET	443	50219	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:26.185070992 CET	443	50219	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:26.185484886 CET	50219	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:26.185549974 CET	443	50219	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:26.185643911 CET	50219	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:26.232233047 CET	443	50219	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:26.323071003 CET	50219	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:26.440593958 CET	443	50219	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:26.440671921 CET	443	50219	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:26.441656113 CET	50219	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:26.441828966 CET	50219	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:26.441837072 CET	443	50219	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:26.540133953 CET	50224	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:26.540163994 CET	443	50224	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:26.540679932 CET	50224	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:26.541018963 CET	50224	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:26.541029930 CET	443	50224	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:26.735990047 CET	443	50224	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:26.740828991 CET	50224	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:26.740845919 CET	443	50224	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:26.741137981 CET	443	50224	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:26.742877007 CET	50224	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:26.742943048 CET	443	50224	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:26.745702982 CET	50224	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:26.774785995 CET	80	49724	69.164.0.128	192.168.2.4
Mar 28, 2024 14:19:26.774890900 CET	49724	80	192.168.2.4	69.164.0.128
Mar 28, 2024 14:19:26.788239002 CET	443	50224	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:26.790344000 CET	49724	80	192.168.2.4	69.164.0.128
Mar 28, 2024 14:19:26.850045919 CET	50229	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:26.850065947 CET	443	50229	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:26.850307941 CET	50229	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:26.850775003 CET	50229	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:26.850785017 CET	443	50229	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:26.885404110 CET	80	49724	69.164.0.128	192.168.2.4
Mar 28, 2024 14:19:26.955488920 CET	443	50224	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:26.955529928 CET	443	50224	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:26.955632925 CET	50224	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:26.955874920 CET	50224	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:26.955893040 CET	443	50224	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:26.958678961 CET	50230	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:26.958695889 CET	443	50230	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:26.958798885 CET	50230	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:26.959992886 CET	50230	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:26.960005045 CET	443	50230	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:26.998739958 CET	50231	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:26.998764038 CET	443	50231	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:26.998852968 CET	50231	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:26.999155045 CET	50231	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:26.999166012 CET	443	50231	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:27.005480051 CET	50232	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:19:27.005490065 CET	443	50232	142.250.31.156	192.168.2.4
Mar 28, 2024 14:19:27.005553007 CET	50232	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:19:27.005872965 CET	50232	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:19:27.005880117 CET	443	50232	142.250.31.156	192.168.2.4
Mar 28, 2024 14:19:27.052234888 CET	50233	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:27.052269936 CET	443	50233	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:27.052356005 CET	50233	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:27.052663088 CET	50233	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:27.052675009 CET	443	50233	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:27.119213104 CET	443	50229	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:27.119445086 CET	50229	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:27.119452000 CET	443	50229	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:27.120407104 CET	443	50229	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:27.120474100 CET	50229	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:27.121035099 CET	50229	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:27.121085882 CET	443	50229	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:27.160733938 CET	443	50230	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:27.160937071 CET	50230	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:27.160959005 CET	443	50230	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:27.161263943 CET	443	50230	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:27.161679983 CET	50230	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:27.161731005 CET	443	50230	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:27.161953926 CET	50230	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:27.203593969 CET	50229	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:27.203599930 CET	443	50229	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:27.204235077 CET	443	50230	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:27.211733103 CET	443	50231	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:27.212323904 CET	50231	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:27.212335110 CET	443	50231	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:27.212899923 CET	443	50231	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:27.213198900 CET	50231	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:27.213321924 CET	50231	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:27.213326931 CET	443	50231	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:27.213335991 CET	443	50231	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:27.214924097 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.214942932 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.214998960 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.215389013 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.215401888 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.221127033 CET	443	50232	142.250.31.156	192.168.2.4
Mar 28, 2024 14:19:27.221345901 CET	50232	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:19:27.221354961 CET	443	50232	142.250.31.156	192.168.2.4
Mar 28, 2024 14:19:27.221692085 CET	443	50232	142.250.31.156	192.168.2.4
Mar 28, 2024 14:19:27.221996069 CET	50232	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:19:27.222064018 CET	443	50232	142.250.31.156	192.168.2.4
Mar 28, 2024 14:19:27.222176075 CET	50232	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:19:27.248527050 CET	443	50233	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:27.248884916 CET	50233	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:27.248899937 CET	443	50233	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:27.249345064 CET	443	50233	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:27.249639988 CET	50233	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:27.249697924 CET	443	50233	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:27.249867916 CET	50233	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:27.266586065 CET	50231	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:27.268235922 CET	443	50232	142.250.31.156	192.168.2.4
Mar 28, 2024 14:19:27.296228886 CET	443	50233	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:27.325782061 CET	50229	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:27.391736031 CET	443	50230	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:27.391916990 CET	443	50230	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:27.391968966 CET	50230	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:27.392968893 CET	50230	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:27.392976046 CET	443	50230	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:27.398700953 CET	50238	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:27.398735046 CET	443	50238	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:27.398794889 CET	50238	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:27.401427031 CET	50238	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:27.401441097 CET	443	50238	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:27.424209118 CET	443	50231	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:27.424283981 CET	443	50231	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:27.424457073 CET	50231	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:27.425563097 CET	50231	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:27.425574064 CET	443	50231	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:27.429941893 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.430140972 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.430149078 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.430996895 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.431073904 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.432686090 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.432744026 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.432951927 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.432959080 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.439486027 CET	443	50233	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:27.439517975 CET	443	50233	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:27.439555883 CET	50233	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:27.439559937 CET	443	50233	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:27.439596891 CET	50233	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:27.443985939 CET	443	50232	142.250.31.156	192.168.2.4
Mar 28, 2024 14:19:27.444235086 CET	443	50232	142.250.31.156	192.168.2.4
Mar 28, 2024 14:19:27.444278002 CET	50232	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:19:27.445276022 CET	50233	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:27.445286989 CET	443	50233	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:27.445810080 CET	50232	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:19:27.445816994 CET	443	50232	142.250.31.156	192.168.2.4
Mar 28, 2024 14:19:27.462014914 CET	50239	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:19:27.462030888 CET	443	50239	172.253.122.113	192.168.2.4
Mar 28, 2024 14:19:27.462204933 CET	50239	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:19:27.462481022 CET	50239	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:19:27.462493896 CET	443	50239	172.253.122.113	192.168.2.4
Mar 28, 2024 14:19:27.484241962 CET	50240	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:27.484253883 CET	443	50240	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:27.484312057 CET	50240	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:27.484879017 CET	50240	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:27.484889984 CET	443	50240	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:27.485776901 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.551445007 CET	50244	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:27.551453114 CET	443	50244	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:27.551511049 CET	50244	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:27.551887035 CET	50244	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:27.551896095 CET	443	50244	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:27.554977894 CET	50245	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:27.554990053 CET	443	50245	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:27.555043936 CET	50245	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:27.555208921 CET	50245	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:27.555219889 CET	443	50245	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:27.595974922 CET	443	50238	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:27.599281073 CET	50238	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:27.599292994 CET	443	50238	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:27.599595070 CET	443	50238	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:27.599970102 CET	50238	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:27.600024939 CET	443	50238	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:27.600120068 CET	50238	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:27.614433050 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.614531994 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.614562035 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.614609003 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.614624023 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.614655018 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.614660025 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.614664078 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.614695072 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.616420031 CET	50246	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.616432905 CET	443	50246	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.616529942 CET	50246	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.616878986 CET	50246	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.616890907 CET	443	50246	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.617654085 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.620834112 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.620877028 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.620881081 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.620887995 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.620925903 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.624017954 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.627202034 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.627254963 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.627260923 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.630433083 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.630472898 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.630479097 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.633574963 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.633620024 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.633625984 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.636733055 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.636787891 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.636794090 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.639957905 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.640007973 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.640012980 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.640239000 CET	443	50238	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:27.646363020 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.646403074 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.646413088 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.649507046 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.649549961 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.649554968 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.652806044 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.656092882 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.656100035 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.670885086 CET	443	50239	172.253.122.113	192.168.2.4
Mar 28, 2024 14:19:27.671084881 CET	50239	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:19:27.671093941 CET	443	50239	172.253.122.113	192.168.2.4
Mar 28, 2024 14:19:27.671468973 CET	443	50239	172.253.122.113	192.168.2.4
Mar 28, 2024 14:19:27.671792984 CET	50239	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:19:27.671849966 CET	443	50239	172.253.122.113	192.168.2.4
Mar 28, 2024 14:19:27.671909094 CET	50239	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:19:27.682833910 CET	443	50240	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:27.683027029 CET	50240	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:27.683037043 CET	443	50240	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:27.683475971 CET	443	50240	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:27.683768988 CET	50240	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:27.683829069 CET	443	50240	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:27.683891058 CET	50240	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:27.707771063 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.710330009 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.712073088 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.712101936 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.712122917 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.712136030 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.712151051 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.712176085 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.712203026 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.712243080 CET	443	50239	172.253.122.113	192.168.2.4
Mar 28, 2024 14:19:27.712341070 CET	50237	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.712351084 CET	443	50237	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.723783016 CET	50239	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:19:27.728239059 CET	443	50240	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:27.739775896 CET	50240	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:27.772249937 CET	443	50245	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:27.772439957 CET	50245	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:27.772447109 CET	443	50245	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:27.773119926 CET	443	50245	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:27.773456097 CET	50245	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:27.773576975 CET	443	50245	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:27.773580074 CET	50245	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:27.779444933 CET	443	50244	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:27.779613972 CET	50244	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:27.779619932 CET	443	50244	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:27.779954910 CET	443	50244	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:27.780271053 CET	50244	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:27.780328989 CET	443	50244	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:27.780406952 CET	50244	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:27.812100887 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.812119961 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.812170982 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.812386036 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.812395096 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.815609932 CET	50249	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:27.815638065 CET	443	50249	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:27.815800905 CET	50249	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:27.815846920 CET	50250	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:27.815854073 CET	443	50250	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:27.816026926 CET	50250	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:27.816056967 CET	50249	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:27.816067934 CET	443	50249	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:27.816195011 CET	50250	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:27.816205025 CET	443	50250	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:27.816235065 CET	443	50245	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:27.819777966 CET	50245	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:27.824234009 CET	443	50244	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:27.840353966 CET	443	50238	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:27.840648890 CET	443	50238	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:27.840699911 CET	50238	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:27.840851068 CET	50238	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:27.840857029 CET	443	50238	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:27.840866089 CET	50238	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:27.840894938 CET	50238	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:27.851164103 CET	443	50246	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.851375103 CET	50246	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.851385117 CET	443	50246	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.851829052 CET	443	50246	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.852428913 CET	50246	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.852503061 CET	443	50246	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.852554083 CET	50246	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:27.899928093 CET	443	50239	172.253.122.113	192.168.2.4
Mar 28, 2024 14:19:27.900008917 CET	443	50239	172.253.122.113	192.168.2.4
Mar 28, 2024 14:19:27.900054932 CET	50239	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:19:27.900243044 CET	443	50246	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:27.901628017 CET	50239	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:19:27.901633978 CET	443	50239	172.253.122.113	192.168.2.4
Mar 28, 2024 14:19:27.905689001 CET	50252	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:19:27.905699968 CET	443	50252	172.253.63.139	192.168.2.4
Mar 28, 2024 14:19:27.905776024 CET	50252	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:19:27.906146049 CET	50252	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:19:27.906157970 CET	443	50252	172.253.63.139	192.168.2.4
Mar 28, 2024 14:19:27.922296047 CET	443	50240	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:27.922367096 CET	443	50240	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:27.922429085 CET	50240	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:27.931844950 CET	50240	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:27.931854963 CET	443	50240	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:27.935153008 CET	50254	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:27.935162067 CET	443	50254	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:27.935333014 CET	50254	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:27.935635090 CET	50254	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:27.935643911 CET	443	50254	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:27.939502001 CET	443	50245	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:27.939521074 CET	443	50245	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:27.939563036 CET	443	50245	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:27.939574003 CET	50245	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:27.939609051 CET	50245	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:27.943156004 CET	50255	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:27.943181038 CET	443	50255	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:27.943248987 CET	50255	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:27.943972111 CET	50255	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:27.943989038 CET	443	50255	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:27.944859982 CET	50245	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:27.944869041 CET	443	50245	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:27.964267015 CET	443	50244	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:27.964332104 CET	443	50244	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:27.964384079 CET	50244	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:27.965908051 CET	50244	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:27.965912104 CET	443	50244	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:27.976047993 CET	50258	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:27.976064920 CET	443	50258	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:27.976120949 CET	50258	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:27.976367950 CET	50258	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:27.976381063 CET	443	50258	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:28.004424095 CET	443	50246	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.004738092 CET	50246	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.005021095 CET	50246	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.005027056 CET	443	50246	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.027868032 CET	50259	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.027888060 CET	443	50259	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.027941942 CET	50259	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.028126001 CET	50259	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.028137922 CET	443	50259	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.028603077 CET	50260	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.028614998 CET	443	50260	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.028697014 CET	50260	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.028852940 CET	50260	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.028865099 CET	443	50260	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.039164066 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.039449930 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.039459944 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.040323973 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.040381908 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.040669918 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.040723085 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.040880919 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.040888071 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.058438063 CET	443	50249	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.058644056 CET	50249	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.058656931 CET	443	50249	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.059715986 CET	443	50249	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.059772968 CET	50249	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.059926033 CET	443	50250	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.060432911 CET	50250	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.060442924 CET	443	50250	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.060851097 CET	50249	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.060906887 CET	443	50249	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.060996056 CET	50249	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.061028957 CET	50249	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.061037064 CET	443	50249	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.061352015 CET	443	50250	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.061423063 CET	50250	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.061716080 CET	50250	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.061769962 CET	443	50250	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.062026024 CET	50250	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.062035084 CET	443	50250	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.102107048 CET	50249	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.102216005 CET	50250	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.126580000 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.138602972 CET	443	50252	172.253.63.139	192.168.2.4
Mar 28, 2024 14:19:28.138834953 CET	50252	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:19:28.138843060 CET	443	50252	172.253.63.139	192.168.2.4
Mar 28, 2024 14:19:28.139302969 CET	443	50252	172.253.63.139	192.168.2.4
Mar 28, 2024 14:19:28.139743090 CET	50252	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:19:28.139799118 CET	443	50252	172.253.63.139	192.168.2.4
Mar 28, 2024 14:19:28.140115023 CET	50252	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:19:28.146622896 CET	443	50255	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:28.146840096 CET	50255	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:28.146852016 CET	443	50255	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:28.147260904 CET	443	50255	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:28.147876978 CET	50255	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:28.148020983 CET	50255	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:28.148025036 CET	443	50255	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:28.148049116 CET	443	50255	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:28.148093939 CET	50255	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:28.148107052 CET	443	50255	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:28.152487993 CET	443	50254	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:28.159488916 CET	50254	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:28.159496069 CET	443	50254	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:28.159872055 CET	443	50254	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:28.161839008 CET	50254	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:28.161904097 CET	443	50254	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:28.162451982 CET	50254	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:28.172283888 CET	443	50258	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:28.172930956 CET	50258	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:28.172952890 CET	443	50258	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:28.173280954 CET	443	50258	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:28.174463034 CET	50258	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:28.174523115 CET	443	50258	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:28.176913023 CET	50258	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:28.180247068 CET	443	50252	172.253.63.139	192.168.2.4
Mar 28, 2024 14:19:28.204247952 CET	443	50254	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:28.224239111 CET	443	50258	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:28.229500055 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.229959965 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.230005026 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.230011940 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.230061054 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.230115891 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.230123043 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.230843067 CET	50262	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.230849981 CET	443	50262	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.231019020 CET	50262	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.231332064 CET	50262	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.231343985 CET	443	50262	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.232784033 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.232825994 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.232832909 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.235997915 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.236042976 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.236047029 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.236056089 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.236105919 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.239109993 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.242352009 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.242439032 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.242444992 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.245484114 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.245534897 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.245541096 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.248709917 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.248755932 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.248761892 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.251885891 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.252065897 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.252078056 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.255029917 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.255110979 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.255117893 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.261269093 CET	443	50259	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.261336088 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.261370897 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.261413097 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.261414051 CET	443	50260	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.261425018 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.261462927 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.261718988 CET	50260	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.261725903 CET	443	50260	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.261845112 CET	50259	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.261857986 CET	443	50259	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.262810946 CET	443	50259	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.262865067 CET	50259	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.262937069 CET	443	50260	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.262985945 CET	50260	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.263571024 CET	50259	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.263628006 CET	443	50259	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.263931036 CET	50255	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:28.264030933 CET	50260	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.264106035 CET	443	50260	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.264240026 CET	50259	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.264249086 CET	443	50259	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.264364004 CET	50260	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.264372110 CET	443	50260	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.264631987 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.264792919 CET	443	50249	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.264842987 CET	443	50249	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.264897108 CET	50249	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.265736103 CET	50249	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.265748978 CET	443	50249	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.267671108 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.267721891 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.267729044 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.273905039 CET	443	50250	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.273966074 CET	443	50250	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.274019957 CET	50250	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.274827957 CET	50250	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.274842024 CET	443	50250	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.317892075 CET	50259	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.323909044 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.323956966 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.323966026 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.325402975 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.325458050 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.325460911 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.325529099 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.325737000 CET	50248	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.325742960 CET	443	50248	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.347359896 CET	443	50255	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:28.347440004 CET	443	50255	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:28.347487926 CET	50255	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:28.348119020 CET	50255	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:28.348126888 CET	443	50255	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:28.351557970 CET	50264	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:28.351571083 CET	443	50264	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:28.351619005 CET	50264	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:28.351957083 CET	50264	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:28.351968050 CET	443	50264	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:28.365783930 CET	443	50252	172.253.63.139	192.168.2.4
Mar 28, 2024 14:19:28.365897894 CET	443	50252	172.253.63.139	192.168.2.4
Mar 28, 2024 14:19:28.365946054 CET	50252	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:19:28.368669033 CET	50252	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:19:28.368680000 CET	443	50252	172.253.63.139	192.168.2.4
Mar 28, 2024 14:19:28.374363899 CET	443	50254	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:28.374427080 CET	443	50254	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:28.374490976 CET	50254	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:28.374919891 CET	50254	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:28.374922991 CET	443	50254	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:28.376246929 CET	50265	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:28.376266956 CET	443	50265	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:28.376312971 CET	50265	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:28.376532078 CET	50265	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:28.376542091 CET	443	50265	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:28.389626980 CET	50268	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.389633894 CET	443	50268	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.389764071 CET	50269	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.389776945 CET	443	50269	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.389791012 CET	50268	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.389816999 CET	50269	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.390136957 CET	50268	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.390146971 CET	443	50268	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.390291929 CET	50269	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.390302896 CET	443	50269	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.399254084 CET	50260	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.409910917 CET	443	50258	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:28.409971952 CET	443	50258	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:28.410017967 CET	50258	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:28.410263062 CET	50258	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:28.410269022 CET	443	50258	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:28.446094990 CET	443	50262	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.446403980 CET	50262	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.446415901 CET	443	50262	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.446691036 CET	443	50262	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.447014093 CET	50262	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.447063923 CET	443	50262	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.447221041 CET	50262	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.449476004 CET	443	50259	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.449520111 CET	443	50259	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.449635029 CET	50259	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.449919939 CET	50259	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.449927092 CET	443	50259	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.449949026 CET	50259	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.449965954 CET	50259	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.452621937 CET	50272	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.452642918 CET	443	50272	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.452701092 CET	50272	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.452881098 CET	50272	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.452889919 CET	443	50272	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.461817980 CET	443	50260	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.461895943 CET	443	50260	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.461971998 CET	50260	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.462280989 CET	50260	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.462286949 CET	443	50260	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.462299109 CET	50260	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.462383986 CET	50260	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.465286970 CET	50273	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.465306997 CET	443	50273	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.465363026 CET	50273	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.465590000 CET	50273	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.465601921 CET	443	50273	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.492230892 CET	443	50262	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.496241093 CET	50274	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:28.496254921 CET	443	50274	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:28.496323109 CET	50274	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:28.496609926 CET	50274	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:28.496620893 CET	443	50274	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:28.549710035 CET	443	50264	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:28.549909115 CET	50264	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:28.549923897 CET	443	50264	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:28.550246954 CET	443	50264	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:28.550544977 CET	50264	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:28.550632000 CET	443	50264	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:28.550710917 CET	50264	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:28.596242905 CET	443	50264	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:28.621381044 CET	443	50265	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:28.621524096 CET	443	50262	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.621562004 CET	443	50262	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.621644020 CET	50262	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.622900963 CET	50265	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:28.622915983 CET	443	50265	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:28.623282909 CET	443	50265	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:28.625252962 CET	50265	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:28.625330925 CET	443	50265	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:28.625652075 CET	50265	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:28.626019001 CET	50262	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:28.626024008 CET	443	50262	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:28.633603096 CET	443	50269	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.634401083 CET	443	50268	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.644207954 CET	50268	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.644215107 CET	443	50268	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.644627094 CET	50269	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.644634962 CET	443	50269	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.645150900 CET	443	50268	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.645215988 CET	50268	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.645534992 CET	443	50269	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.645595074 CET	50269	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.646414995 CET	50269	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.646466970 CET	443	50269	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.647190094 CET	50268	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.647243977 CET	443	50268	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.647367001 CET	50269	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.647372007 CET	443	50269	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.647675037 CET	50268	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.647682905 CET	443	50268	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.663482904 CET	443	50272	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.665855885 CET	50272	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.665863991 CET	443	50272	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.666893005 CET	443	50272	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.666946888 CET	50272	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.667262077 CET	50272	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.667320967 CET	443	50272	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.667392015 CET	50272	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.667418003 CET	443	50272	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.672241926 CET	443	50265	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:28.673494101 CET	443	50273	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.673702955 CET	50273	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.673722982 CET	443	50273	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.674638987 CET	443	50273	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.674698114 CET	50273	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.675091028 CET	50273	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.675144911 CET	443	50273	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.675301075 CET	50273	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.675308943 CET	443	50273	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.698517084 CET	50269	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.729510069 CET	50273	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.729511023 CET	50268	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.729661942 CET	50272	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.729669094 CET	443	50272	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.785974979 CET	443	50264	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:28.786050081 CET	443	50264	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:28.786171913 CET	50264	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:28.786385059 CET	50264	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:28.786391973 CET	443	50264	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:28.786480904 CET	50264	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:28.786524057 CET	50264	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:28.845700026 CET	443	50269	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.845777988 CET	443	50269	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.845932961 CET	50269	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.856762886 CET	443	50268	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.856839895 CET	443	50268	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.856892109 CET	50268	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.859951019 CET	50269	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.859956980 CET	443	50269	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.867634058 CET	50268	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.867640018 CET	443	50268	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.871126890 CET	443	50265	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:28.871210098 CET	443	50265	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:28.871273994 CET	50265	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:28.871828079 CET	50265	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:28.871843100 CET	443	50265	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:28.880743980 CET	443	50272	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.880789042 CET	50272	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.881581068 CET	50272	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.881597042 CET	443	50272	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.885320902 CET	443	50273	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.885373116 CET	443	50273	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:28.885601044 CET	50273	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.886457920 CET	50273	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:28.886464119 CET	443	50273	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:29.015243053 CET	50282	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:29.015259027 CET	443	50282	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:29.015444994 CET	50282	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:29.015656948 CET	50282	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:29.015670061 CET	443	50282	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:29.046752930 CET	443	50274	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:29.046953917 CET	50274	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:29.046963930 CET	443	50274	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:29.047329903 CET	443	50274	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:29.047627926 CET	50274	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:29.047683954 CET	443	50274	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:29.047729969 CET	50274	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:29.047765017 CET	50274	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:29.047806025 CET	443	50274	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:29.239398956 CET	443	50282	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:29.240844965 CET	50282	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:29.240854025 CET	443	50282	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:29.241244078 CET	443	50282	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:29.241763115 CET	50282	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:29.241843939 CET	443	50282	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:29.241904020 CET	50282	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:29.284240961 CET	443	50282	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:29.284629107 CET	50282	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:29.411565065 CET	443	50274	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:29.411643028 CET	443	50274	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:29.411695957 CET	50274	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:29.412281036 CET	50274	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:29.412296057 CET	443	50274	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:29.417370081 CET	50285	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:29.417392015 CET	443	50285	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:29.417557955 CET	50285	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:29.417808056 CET	50285	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:29.417819977 CET	443	50285	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:29.518439054 CET	443	50282	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:29.518526077 CET	443	50282	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:29.518600941 CET	50282	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:29.519548893 CET	50282	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:29.519555092 CET	443	50282	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:29.804195881 CET	443	50285	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:29.804435968 CET	50285	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:29.804445028 CET	443	50285	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:29.805035114 CET	443	50285	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:29.805440903 CET	50285	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:29.805500984 CET	443	50285	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:29.805556059 CET	50285	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:29.848234892 CET	443	50285	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:30.129475117 CET	50297	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:30.129512072 CET	443	50297	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:30.129602909 CET	50297	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:30.129908085 CET	50297	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:30.129920959 CET	443	50297	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:30.132755041 CET	443	50285	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:30.132863998 CET	443	50285	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:30.132917881 CET	50285	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:30.133502007 CET	50285	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:30.133508921 CET	443	50285	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:30.673655033 CET	443	50297	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:30.673955917 CET	50297	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:30.673978090 CET	443	50297	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:30.674272060 CET	443	50297	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:30.674870014 CET	50297	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:30.674925089 CET	443	50297	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:30.675164938 CET	50297	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:30.675189972 CET	50297	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:30.675198078 CET	443	50297	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:31.082391977 CET	443	50297	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:31.082535028 CET	443	50297	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:31.082581997 CET	50297	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:31.083497047 CET	50297	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:31.083512068 CET	443	50297	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:31.375097036 CET	50300	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:31.375117064 CET	443	50300	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:31.375303984 CET	50300	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:31.375941992 CET	50300	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:31.375953913 CET	443	50300	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:31.734235048 CET	443	50300	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:31.737797022 CET	50300	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:31.737807035 CET	443	50300	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:31.738142014 CET	443	50300	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:31.740658998 CET	50300	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:31.740708113 CET	443	50300	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:31.742858887 CET	50300	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:31.784240961 CET	443	50300	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:32.090702057 CET	443	50300	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:32.090774059 CET	443	50300	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:32.090842962 CET	50300	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:32.163913012 CET	50300	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:32.163922071 CET	443	50300	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:33.268759012 CET	50310	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:33.268771887 CET	443	50310	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:33.268867970 CET	50310	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:33.269633055 CET	50310	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:33.269644976 CET	443	50310	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:33.415050030 CET	50229	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:33.460243940 CET	443	50229	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:33.473000050 CET	443	50310	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:33.473254919 CET	50310	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:33.473263025 CET	443	50310	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:33.473634958 CET	443	50310	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:33.474113941 CET	50310	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:33.474174976 CET	443	50310	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:33.474250078 CET	50310	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:33.520230055 CET	443	50310	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:33.562711000 CET	443	50229	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:33.562777042 CET	443	50229	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:33.563014984 CET	50229	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:33.569473982 CET	50229	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:33.569482088 CET	443	50229	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:33.669341087 CET	443	50310	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:33.669418097 CET	443	50310	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:33.669471025 CET	50310	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:33.670228958 CET	50310	443	192.168.2.4	44.213.253.195
Mar 28, 2024 14:19:33.670233965 CET	443	50310	44.213.253.195	192.168.2.4
Mar 28, 2024 14:19:33.764799118 CET	50317	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:33.764817953 CET	443	50317	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:33.764877081 CET	50317	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:33.765136003 CET	50317	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:33.765151024 CET	443	50317	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:33.786407948 CET	50322	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:33.786416054 CET	443	50322	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:33.786480904 CET	50322	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:33.786832094 CET	50322	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:33.786842108 CET	443	50322	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:33.955851078 CET	50323	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:33.955873013 CET	443	50323	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:33.956026077 CET	50323	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:33.956387997 CET	50323	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:33.956402063 CET	443	50323	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:33.960503101 CET	50325	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:33.960520029 CET	443	50325	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:33.960659981 CET	50325	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:33.961438894 CET	50325	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:33.961448908 CET	443	50325	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:33.984605074 CET	443	50322	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:33.984942913 CET	50322	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:33.984951019 CET	443	50322	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:33.985260963 CET	443	50322	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:33.985543013 CET	50322	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:33.985598087 CET	443	50322	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:33.985966921 CET	50322	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:34.032243967 CET	443	50322	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:34.032964945 CET	443	50317	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:34.077320099 CET	50317	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:34.077331066 CET	443	50317	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:34.077748060 CET	443	50317	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:34.078913927 CET	50317	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:34.078975916 CET	443	50317	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:34.079045057 CET	50317	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:34.124242067 CET	443	50317	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:34.150038004 CET	443	50323	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.150294065 CET	50323	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:34.150305033 CET	443	50323	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.150665998 CET	443	50323	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.152607918 CET	50323	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:34.152674913 CET	443	50323	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.153712988 CET	50323	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:34.153825998 CET	50323	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:34.153853893 CET	443	50323	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.157012939 CET	443	50325	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.157183886 CET	50325	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:34.157191038 CET	443	50325	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.157514095 CET	443	50325	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.161017895 CET	50325	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:34.161076069 CET	443	50325	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.161139965 CET	50325	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:34.161189079 CET	50325	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:34.161209106 CET	443	50325	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.182518959 CET	443	50322	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:34.182578087 CET	443	50322	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:34.182691097 CET	50322	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:34.188424110 CET	50322	443	192.168.2.4	3.208.238.164
Mar 28, 2024 14:19:34.188431978 CET	443	50322	3.208.238.164	192.168.2.4
Mar 28, 2024 14:19:34.316843987 CET	443	50317	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:34.316920042 CET	443	50317	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:34.316962004 CET	50317	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:34.318064928 CET	50317	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:34.318073034 CET	443	50317	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:34.341857910 CET	443	50323	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.341950893 CET	443	50323	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.342000008 CET	50323	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:34.342885017 CET	50323	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:34.342891932 CET	443	50323	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.355043888 CET	443	50325	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.355119944 CET	443	50325	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.355226994 CET	50325	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:34.356194973 CET	50325	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:34.356201887 CET	443	50325	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.403830051 CET	50331	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:34.403850079 CET	443	50331	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.403938055 CET	50331	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:34.404787064 CET	50331	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:34.404800892 CET	443	50331	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.410505056 CET	50333	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:34.410526037 CET	443	50333	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.410577059 CET	50333	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:34.410902977 CET	50334	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:34.410917997 CET	443	50334	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.411025047 CET	50334	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:34.411242008 CET	50333	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:34.411258936 CET	443	50333	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.411501884 CET	50334	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:34.411510944 CET	443	50334	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.628294945 CET	443	50334	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.628567934 CET	50334	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:34.628575087 CET	443	50334	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.629329920 CET	443	50334	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.630059958 CET	50334	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:34.630243063 CET	443	50334	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.630553007 CET	50334	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:34.638767004 CET	443	50333	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.639930010 CET	50333	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:34.639936924 CET	443	50333	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.640291929 CET	443	50333	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.640849113 CET	50333	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:34.640922070 CET	443	50333	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.641367912 CET	50333	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:34.676249027 CET	443	50334	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.688242912 CET	443	50333	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.697253942 CET	443	50331	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.707417011 CET	50331	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:34.707432032 CET	443	50331	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.707818985 CET	443	50331	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.709192991 CET	50331	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:34.709258080 CET	443	50331	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.709407091 CET	50331	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:34.709459066 CET	50331	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:34.709481001 CET	443	50331	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.805917025 CET	443	50334	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.805938959 CET	443	50334	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.805984974 CET	50334	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:34.805994034 CET	443	50334	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.806006908 CET	443	50334	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.806056023 CET	50334	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:34.806430101 CET	443	50333	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.806449890 CET	443	50333	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.806504011 CET	50333	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:34.806504011 CET	443	50333	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.806560993 CET	50333	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:34.822801113 CET	50334	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:34.822808981 CET	443	50334	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.824400902 CET	50333	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:34.824409962 CET	443	50333	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.899724007 CET	443	50331	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.899810076 CET	443	50331	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.899857998 CET	50331	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:34.903614044 CET	50331	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:34.903621912 CET	443	50331	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:34.935482025 CET	50347	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:34.935508013 CET	443	50347	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:34.935616970 CET	50347	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:34.936239958 CET	50347	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:34.936254025 CET	443	50347	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:35.127651930 CET	443	50347	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:35.147919893 CET	50347	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:35.147926092 CET	443	50347	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:35.148271084 CET	443	50347	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:35.154159069 CET	50347	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:35.154215097 CET	443	50347	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:35.157154083 CET	50347	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:35.204236984 CET	443	50347	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:35.411349058 CET	443	50347	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:35.411365032 CET	443	50347	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:35.411421061 CET	443	50347	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:35.411432028 CET	50347	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:35.411462069 CET	50347	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:35.415848017 CET	50347	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:35.415853977 CET	443	50347	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:37.150629044 CET	50377	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:37.150646925 CET	443	50377	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:37.150779009 CET	50377	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:37.152174950 CET	50377	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:37.152188063 CET	443	50377	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:37.444988012 CET	443	50377	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:37.445174932 CET	50377	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:37.445183992 CET	443	50377	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:37.445538998 CET	443	50377	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:37.445931911 CET	50377	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:37.445997000 CET	443	50377	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:37.446079016 CET	50377	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:37.488249063 CET	443	50377	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:37.542480946 CET	443	50377	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:37.542504072 CET	443	50377	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:37.542553902 CET	50377	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:37.542563915 CET	443	50377	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:37.542577982 CET	443	50377	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:37.542612076 CET	50377	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:37.543750048 CET	50377	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:37.543756008 CET	443	50377	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:37.692315102 CET	50389	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:37.692329884 CET	443	50389	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:37.692374945 CET	50389	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:37.692748070 CET	50389	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:37.692758083 CET	443	50389	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:37.696347952 CET	50390	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:37.696355104 CET	443	50390	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:37.696403980 CET	50390	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:37.696651936 CET	50390	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:37.696660042 CET	443	50390	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:37.737222910 CET	50391	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:37.737262011 CET	443	50391	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:37.737319946 CET	50391	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:37.737783909 CET	50391	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:37.737796068 CET	443	50391	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:37.924336910 CET	443	50389	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:37.924545050 CET	443	50390	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:37.933093071 CET	443	50391	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:38.114721060 CET	50391	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:38.130711079 CET	50389	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:38.130711079 CET	50390	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:38.292351961 CET	50389	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:38.292368889 CET	443	50389	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:38.292695045 CET	443	50389	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:38.292721987 CET	50390	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:38.292732000 CET	443	50390	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:38.293087959 CET	443	50390	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:38.295062065 CET	50391	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:38.295079947 CET	443	50391	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:38.295423985 CET	443	50391	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:38.299415112 CET	50391	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:38.299487114 CET	443	50391	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:38.419743061 CET	50391	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:38.530211926 CET	50389	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:38.530328989 CET	443	50389	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:38.531373978 CET	50390	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:38.531487942 CET	443	50390	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:38.536847115 CET	50391	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:38.538208008 CET	50389	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:38.538404942 CET	50390	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:38.538495064 CET	50390	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:38.538542986 CET	443	50390	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:38.580236912 CET	443	50389	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:38.580252886 CET	443	50391	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:38.728619099 CET	443	50390	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:38.728646040 CET	443	50390	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:38.728653908 CET	443	50390	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:38.728732109 CET	443	50390	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:38.728754997 CET	50390	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:38.731926918 CET	443	50391	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:38.732017994 CET	50390	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:38.732477903 CET	443	50391	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:38.740195036 CET	50391	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:38.741596937 CET	443	50389	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:38.741797924 CET	443	50389	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:38.742089033 CET	50389	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:38.756829023 CET	50389	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:38.756848097 CET	443	50389	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:38.757375956 CET	50391	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:38.757385969 CET	443	50391	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:38.760054111 CET	50390	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:38.760059118 CET	443	50390	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:39.576944113 CET	50398	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:39.576970100 CET	443	50398	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:39.577023983 CET	50398	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:39.665625095 CET	50398	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:39.665637970 CET	443	50398	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:39.677330971 CET	50400	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:39.677349091 CET	443	50400	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:39.677395105 CET	50400	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:39.678950071 CET	50400	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:39.678962946 CET	443	50400	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:39.684850931 CET	50401	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:39.684878111 CET	443	50401	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:39.684931040 CET	50401	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:39.691749096 CET	50402	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:39.691756010 CET	443	50402	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:39.691808939 CET	50402	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:39.693077087 CET	50401	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:39.693089962 CET	443	50401	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:39.693317890 CET	50402	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:39.693330050 CET	443	50402	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:39.862967014 CET	443	50398	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:39.912682056 CET	443	50401	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:39.947491884 CET	50398	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:39.947501898 CET	443	50398	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:39.947824001 CET	50401	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:39.947834969 CET	443	50401	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:39.947849035 CET	443	50398	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:39.948236942 CET	443	50401	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:39.955306053 CET	50398	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:39.955380917 CET	443	50398	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:39.956290007 CET	50401	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:39.956362009 CET	443	50401	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:39.958065987 CET	50398	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:39.958107948 CET	50398	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:39.958129883 CET	443	50398	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:39.958395958 CET	50401	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:39.958425999 CET	50401	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:39.958467960 CET	443	50401	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:39.973284006 CET	443	50400	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:39.977874041 CET	50400	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:39.977881908 CET	443	50400	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:39.978219986 CET	443	50400	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:39.978955984 CET	50400	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:39.979017973 CET	443	50400	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:39.991911888 CET	50400	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:39.991957903 CET	50400	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:39.991990089 CET	443	50400	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:39.992043972 CET	50400	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:39.992050886 CET	443	50400	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:40.005980015 CET	443	50402	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:40.107640982 CET	443	50398	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:40.108359098 CET	443	50398	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:40.108411074 CET	50398	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:40.158946991 CET	443	50401	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:40.163052082 CET	443	50401	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:40.163116932 CET	50401	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:40.176317930 CET	50402	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:40.176326990 CET	443	50402	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:40.176817894 CET	443	50402	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:40.178256035 CET	50401	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:40.178265095 CET	443	50401	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:40.178761959 CET	50398	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:19:40.178774118 CET	443	50398	63.140.39.65	192.168.2.4
Mar 28, 2024 14:19:40.181798935 CET	50402	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:40.181874037 CET	443	50402	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:40.184787035 CET	443	50400	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:40.184854984 CET	443	50400	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:40.184902906 CET	50400	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:40.187100887 CET	50402	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:40.188251019 CET	50400	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:40.188261032 CET	443	50400	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:40.228235006 CET	443	50402	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:40.422652006 CET	443	50402	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:40.422677994 CET	443	50402	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:40.422686100 CET	443	50402	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:40.422760963 CET	50402	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:40.422765017 CET	443	50402	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:40.426085949 CET	50402	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:40.897645950 CET	50404	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:40.897680044 CET	443	50404	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:40.897948980 CET	50404	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:40.908039093 CET	50404	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:40.908057928 CET	443	50404	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:40.915632963 CET	50402	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:40.915649891 CET	443	50402	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:41.175725937 CET	443	50404	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:41.176024914 CET	50404	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:41.176048994 CET	443	50404	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:41.176363945 CET	443	50404	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:41.177006960 CET	50404	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:41.177064896 CET	443	50404	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:41.321705103 CET	50404	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:42.785887003 CET	50415	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:42.785907030 CET	443	50415	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:42.786014080 CET	50415	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:42.786312103 CET	50415	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:42.786322117 CET	443	50415	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:42.907845974 CET	50420	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:42.907869101 CET	443	50420	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:42.908062935 CET	50420	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:42.908489943 CET	50420	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:42.908503056 CET	443	50420	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:42.923124075 CET	50423	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:42.923135996 CET	443	50423	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:42.923192024 CET	50423	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:42.923561096 CET	50423	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:42.923569918 CET	443	50423	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:43.030838013 CET	50424	443	192.168.2.4	142.250.31.148
Mar 28, 2024 14:19:43.030846119 CET	443	50424	142.250.31.148	192.168.2.4
Mar 28, 2024 14:19:43.030905008 CET	50424	443	192.168.2.4	142.250.31.148
Mar 28, 2024 14:19:43.031397104 CET	50425	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:43.031414032 CET	443	50425	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:43.031594992 CET	50424	443	192.168.2.4	142.250.31.148
Mar 28, 2024 14:19:43.031605005 CET	443	50424	142.250.31.148	192.168.2.4
Mar 28, 2024 14:19:43.031610012 CET	50425	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:43.031944036 CET	50425	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:43.031954050 CET	443	50425	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:43.040033102 CET	50426	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:43.040046930 CET	443	50426	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.040110111 CET	50426	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:43.040309906 CET	50426	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:43.040316105 CET	443	50426	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.050543070 CET	50429	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:43.050563097 CET	443	50429	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:43.050657988 CET	50429	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:43.051609993 CET	50429	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:43.051620960 CET	443	50429	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:43.058718920 CET	50431	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:43.058742046 CET	443	50431	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:43.058809996 CET	50431	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:43.058984995 CET	50431	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:43.058998108 CET	443	50431	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:43.060376883 CET	50432	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:43.060385942 CET	443	50432	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.060455084 CET	50432	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:43.060643911 CET	50432	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:43.060652018 CET	443	50432	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.078715086 CET	443	50415	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:43.078944921 CET	50415	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:43.078958988 CET	443	50415	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:43.079246998 CET	443	50415	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:43.079538107 CET	50415	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:43.079596043 CET	443	50415	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:43.079684019 CET	50415	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:43.080105066 CET	50415	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:43.080132961 CET	443	50415	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:43.129997015 CET	443	50420	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:43.130506992 CET	50420	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:43.130512953 CET	443	50420	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:43.130873919 CET	443	50420	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:43.131211042 CET	50420	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:43.131285906 CET	443	50420	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:43.131534100 CET	50420	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:43.176234961 CET	443	50420	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:43.233154058 CET	443	50426	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.233336926 CET	50426	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:43.233354092 CET	443	50426	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.233694077 CET	443	50426	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.233979940 CET	50426	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:43.234041929 CET	443	50426	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.234087944 CET	50426	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:43.244484901 CET	443	50424	142.250.31.148	192.168.2.4
Mar 28, 2024 14:19:43.244817972 CET	50424	443	192.168.2.4	142.250.31.148
Mar 28, 2024 14:19:43.244823933 CET	443	50424	142.250.31.148	192.168.2.4
Mar 28, 2024 14:19:43.245677948 CET	443	50424	142.250.31.148	192.168.2.4
Mar 28, 2024 14:19:43.245739937 CET	50424	443	192.168.2.4	142.250.31.148
Mar 28, 2024 14:19:43.246695995 CET	50424	443	192.168.2.4	142.250.31.148
Mar 28, 2024 14:19:43.246745110 CET	443	50424	142.250.31.148	192.168.2.4
Mar 28, 2024 14:19:43.246912003 CET	50424	443	192.168.2.4	142.250.31.148
Mar 28, 2024 14:19:43.246917009 CET	443	50424	142.250.31.148	192.168.2.4
Mar 28, 2024 14:19:43.249465942 CET	443	50429	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:43.249658108 CET	50429	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:43.249670029 CET	443	50429	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:43.249996901 CET	443	50429	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:43.250384092 CET	50429	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:43.250421047 CET	50429	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:43.250467062 CET	443	50429	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:43.269912004 CET	443	50415	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:43.269973993 CET	443	50415	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:43.270042896 CET	50415	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:43.271155119 CET	50415	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:43.271166086 CET	443	50415	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:43.276269913 CET	443	50426	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.294611931 CET	443	50432	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.295002937 CET	50432	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:43.295012951 CET	443	50432	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.295636892 CET	443	50432	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.295962095 CET	50432	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:43.296045065 CET	443	50432	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.296073914 CET	50432	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:43.315718889 CET	50426	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:43.315860987 CET	50429	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:43.318779945 CET	443	50420	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:43.318840981 CET	443	50420	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:43.318880081 CET	50420	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:43.319160938 CET	50420	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:43.319168091 CET	443	50420	31.13.66.35	192.168.2.4
Mar 28, 2024 14:19:43.319175005 CET	50420	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:43.319221973 CET	50420	443	192.168.2.4	31.13.66.35
Mar 28, 2024 14:19:43.327739954 CET	443	50425	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:43.328263044 CET	50434	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:43.328280926 CET	443	50434	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:43.328408957 CET	50434	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:43.328409910 CET	50425	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:43.328422070 CET	443	50425	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:43.328843117 CET	50434	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:43.328857899 CET	443	50434	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:43.329082966 CET	443	50425	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:43.329395056 CET	50425	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:43.329503059 CET	443	50425	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:43.329504013 CET	50425	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:43.331698895 CET	50424	443	192.168.2.4	142.250.31.148
Mar 28, 2024 14:19:43.332937956 CET	443	50431	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:43.333245039 CET	50431	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:43.333252907 CET	443	50431	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:43.333832026 CET	443	50431	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:43.334146023 CET	50431	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:43.334229946 CET	443	50431	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:43.334311008 CET	50431	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:43.340234041 CET	443	50432	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.372239113 CET	443	50425	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:43.380233049 CET	443	50431	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:43.427716970 CET	50425	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:43.429105043 CET	443	50426	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.429126024 CET	443	50426	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.429132938 CET	443	50426	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.429182053 CET	50426	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:43.429197073 CET	443	50426	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.429208994 CET	443	50426	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.429259062 CET	50426	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:43.431094885 CET	50426	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:43.431102991 CET	443	50426	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.452845097 CET	443	50432	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.452894926 CET	443	50432	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.452909946 CET	50432	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:43.452956915 CET	50432	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:43.454200983 CET	50432	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:43.454209089 CET	443	50432	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:43.489375114 CET	443	50429	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:43.489444971 CET	443	50429	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:43.489552021 CET	50429	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:43.489939928 CET	50429	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:43.489943981 CET	443	50429	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:43.503884077 CET	443	50423	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:43.504087925 CET	443	50431	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:43.504132986 CET	443	50431	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:43.504133940 CET	50423	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:43.504151106 CET	443	50423	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:43.504173994 CET	50431	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:43.504467010 CET	50431	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:43.504476070 CET	443	50431	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:43.504636049 CET	443	50423	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:43.505206108 CET	50423	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:43.505268097 CET	443	50423	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:43.505580902 CET	50423	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:43.519351959 CET	443	50424	142.250.31.148	192.168.2.4
Mar 28, 2024 14:19:43.519953012 CET	443	50424	142.250.31.148	192.168.2.4
Mar 28, 2024 14:19:43.520008087 CET	50424	443	192.168.2.4	142.250.31.148
Mar 28, 2024 14:19:43.520323038 CET	50424	443	192.168.2.4	142.250.31.148
Mar 28, 2024 14:19:43.520332098 CET	443	50424	142.250.31.148	192.168.2.4
Mar 28, 2024 14:19:43.522324085 CET	50436	443	192.168.2.4	142.250.31.148
Mar 28, 2024 14:19:43.522350073 CET	443	50436	142.250.31.148	192.168.2.4
Mar 28, 2024 14:19:43.522409916 CET	50436	443	192.168.2.4	142.250.31.148
Mar 28, 2024 14:19:43.522614956 CET	50436	443	192.168.2.4	142.250.31.148
Mar 28, 2024 14:19:43.522620916 CET	443	50436	142.250.31.148	192.168.2.4
Mar 28, 2024 14:19:43.544547081 CET	443	50425	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:43.544751883 CET	443	50425	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:43.544809103 CET	50425	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:43.546006918 CET	50425	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:43.546014071 CET	443	50425	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:43.548155069 CET	50437	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:43.548167944 CET	443	50437	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:43.548638105 CET	50437	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:43.549027920 CET	50437	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:43.549036026 CET	443	50437	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:43.552228928 CET	443	50423	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:43.597794056 CET	50438	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:43.597816944 CET	443	50438	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:43.597906113 CET	50438	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:43.598309994 CET	50438	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:43.598319054 CET	443	50438	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:43.675538063 CET	443	50434	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:43.675780058 CET	50434	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:43.675801992 CET	443	50434	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:43.676167011 CET	443	50434	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:43.676501036 CET	50434	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:43.676568031 CET	443	50434	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:43.676707983 CET	50434	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:43.676732063 CET	50434	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:43.676742077 CET	443	50434	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:43.731523037 CET	443	50436	142.250.31.148	192.168.2.4
Mar 28, 2024 14:19:43.731781006 CET	50436	443	192.168.2.4	142.250.31.148
Mar 28, 2024 14:19:43.731795073 CET	443	50436	142.250.31.148	192.168.2.4
Mar 28, 2024 14:19:43.732130051 CET	443	50436	142.250.31.148	192.168.2.4
Mar 28, 2024 14:19:43.732433081 CET	50436	443	192.168.2.4	142.250.31.148
Mar 28, 2024 14:19:43.732494116 CET	443	50436	142.250.31.148	192.168.2.4
Mar 28, 2024 14:19:43.732686043 CET	50436	443	192.168.2.4	142.250.31.148
Mar 28, 2024 14:19:43.759026051 CET	443	50437	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:43.759294987 CET	50437	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:43.759300947 CET	443	50437	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:43.759653091 CET	443	50437	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:43.761118889 CET	50437	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:43.761188984 CET	443	50437	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:43.762521982 CET	50437	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:43.780241966 CET	443	50436	142.250.31.148	192.168.2.4
Mar 28, 2024 14:19:43.804235935 CET	443	50437	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:43.859675884 CET	443	50438	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:43.867187977 CET	443	50434	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:43.867212057 CET	443	50434	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:43.867273092 CET	50434	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:43.867284060 CET	443	50434	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:43.867295027 CET	443	50434	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:43.867333889 CET	50434	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:43.905270100 CET	443	50423	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:43.905359030 CET	443	50423	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:43.905622959 CET	50423	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:43.915673971 CET	50423	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:43.915693998 CET	443	50423	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:43.918101072 CET	50438	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:43.918113947 CET	443	50438	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:43.918450117 CET	443	50438	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:43.919900894 CET	50438	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:43.919960022 CET	443	50438	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:43.920236111 CET	50434	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:43.920245886 CET	443	50434	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:43.921561956 CET	50438	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:43.968238115 CET	443	50438	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:44.003478050 CET	443	50436	142.250.31.148	192.168.2.4
Mar 28, 2024 14:19:44.003616095 CET	50436	443	192.168.2.4	142.250.31.148
Mar 28, 2024 14:19:44.003633976 CET	443	50436	142.250.31.148	192.168.2.4
Mar 28, 2024 14:19:44.004317999 CET	50436	443	192.168.2.4	142.250.31.148
Mar 28, 2024 14:19:44.004355907 CET	443	50436	142.250.31.148	192.168.2.4
Mar 28, 2024 14:19:44.004399061 CET	50436	443	192.168.2.4	142.250.31.148
Mar 28, 2024 14:19:44.006114006 CET	50442	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:44.006144047 CET	443	50442	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:44.006310940 CET	50442	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:44.006499052 CET	50442	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:44.006510973 CET	443	50442	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:44.029126883 CET	443	50437	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:44.029710054 CET	443	50437	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:44.029768944 CET	50437	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:44.042977095 CET	50437	443	192.168.2.4	172.253.63.149
Mar 28, 2024 14:19:44.042983055 CET	443	50437	172.253.63.149	192.168.2.4
Mar 28, 2024 14:19:44.051789999 CET	50443	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:44.051820040 CET	443	50443	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:44.051876068 CET	50443	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:44.053596020 CET	50443	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:44.053611994 CET	443	50443	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:44.179037094 CET	443	50438	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:44.179644108 CET	443	50438	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:44.179697037 CET	50438	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:44.209069967 CET	50438	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:44.209084988 CET	443	50438	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:44.268814087 CET	443	50442	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:44.269298077 CET	50442	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:44.269316912 CET	443	50442	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:44.269685984 CET	443	50442	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:44.270308971 CET	50442	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:44.270380020 CET	443	50442	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:44.270435095 CET	50442	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:44.285984039 CET	50445	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:44.286003113 CET	443	50445	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:44.286051989 CET	50445	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:44.286488056 CET	50445	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:44.286499023 CET	443	50445	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:44.312238932 CET	443	50442	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:44.326706886 CET	443	50443	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:44.327045918 CET	50443	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:44.327060938 CET	443	50443	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:44.327413082 CET	443	50443	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:44.327898026 CET	50443	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:44.327960968 CET	443	50443	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:44.328233957 CET	50443	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:44.372240067 CET	443	50443	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:44.396476030 CET	50442	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:44.553112984 CET	50449	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:19:44.553123951 CET	443	50449	69.147.92.11	192.168.2.4
Mar 28, 2024 14:19:44.553339005 CET	50449	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:19:44.553869009 CET	50449	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:19:44.553879976 CET	443	50449	69.147.92.11	192.168.2.4
Mar 28, 2024 14:19:44.580945015 CET	443	50445	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:44.581326008 CET	50445	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:44.581341028 CET	443	50445	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:44.581688881 CET	443	50445	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:44.582218885 CET	50445	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:44.582273960 CET	443	50445	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:44.582557917 CET	50445	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:44.628230095 CET	443	50445	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:44.643120050 CET	443	50442	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:44.643454075 CET	443	50442	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:44.643508911 CET	50442	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:44.645319939 CET	50442	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:44.645332098 CET	443	50442	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:44.679266930 CET	443	50443	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:44.679536104 CET	443	50443	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:44.679584980 CET	50443	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:44.679730892 CET	50443	443	192.168.2.4	142.251.163.155
Mar 28, 2024 14:19:44.679748058 CET	443	50443	142.251.163.155	192.168.2.4
Mar 28, 2024 14:19:44.745075941 CET	50450	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:44.745091915 CET	443	50450	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:44.745160103 CET	50450	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:44.745372057 CET	50450	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:44.745383978 CET	443	50450	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:44.758342981 CET	443	50449	69.147.92.11	192.168.2.4
Mar 28, 2024 14:19:44.758600950 CET	50449	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:19:44.758614063 CET	443	50449	69.147.92.11	192.168.2.4
Mar 28, 2024 14:19:44.759052992 CET	443	50449	69.147.92.11	192.168.2.4
Mar 28, 2024 14:19:44.759455919 CET	50449	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:19:44.759509087 CET	443	50449	69.147.92.11	192.168.2.4
Mar 28, 2024 14:19:44.759587049 CET	50449	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:19:44.770229101 CET	50452	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:44.770240068 CET	443	50452	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:44.770500898 CET	50452	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:44.770704031 CET	50452	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:44.770715952 CET	443	50452	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:44.800235033 CET	443	50449	69.147.92.11	192.168.2.4
Mar 28, 2024 14:19:44.821154118 CET	443	50445	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:44.821171045 CET	443	50445	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:44.821237087 CET	50445	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:44.821248055 CET	443	50445	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:44.821258068 CET	443	50445	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:44.821302891 CET	50445	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:44.846393108 CET	50445	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:44.846404076 CET	443	50445	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:44.934640884 CET	443	50449	69.147.92.11	192.168.2.4
Mar 28, 2024 14:19:44.934704065 CET	443	50449	69.147.92.11	192.168.2.4
Mar 28, 2024 14:19:44.934762955 CET	50449	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:19:44.936088085 CET	50449	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:19:44.936094046 CET	443	50449	69.147.92.11	192.168.2.4
Mar 28, 2024 14:19:44.938128948 CET	50457	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:44.938144922 CET	443	50457	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:44.938262939 CET	50457	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:44.938452959 CET	50457	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:44.938461065 CET	443	50457	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:44.940094948 CET	50458	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:44.940114975 CET	443	50458	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:44.940170050 CET	50458	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:44.940325975 CET	50458	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:44.940336943 CET	443	50458	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:44.942029953 CET	50459	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:44.942039013 CET	443	50459	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:44.942106009 CET	50459	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:44.942264080 CET	50459	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:44.942275047 CET	443	50459	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:44.945899010 CET	50461	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:44.945909023 CET	443	50461	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:44.946053982 CET	50461	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:44.946278095 CET	50461	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:44.946286917 CET	443	50461	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:44.987121105 CET	443	50452	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:44.987363100 CET	50452	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:44.987374067 CET	443	50452	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:44.987698078 CET	443	50452	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:44.987974882 CET	50452	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:44.988039970 CET	443	50452	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:44.988082886 CET	50452	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:45.012427092 CET	50464	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.012434959 CET	443	50464	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.012492895 CET	50464	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.012866974 CET	50464	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.012878895 CET	443	50464	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.013281107 CET	50465	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.013298035 CET	443	50465	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.013381004 CET	50465	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.014003992 CET	50465	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.014015913 CET	443	50465	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.019560099 CET	443	50450	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:45.019742012 CET	50450	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:45.019750118 CET	443	50450	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:45.020061970 CET	443	50450	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:45.020375013 CET	50450	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:45.020437956 CET	443	50450	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:45.020544052 CET	50450	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:45.032231092 CET	443	50452	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:45.064232111 CET	443	50450	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:45.069571018 CET	50466	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.069581032 CET	443	50466	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.069711924 CET	50466	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.070291996 CET	50466	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.070303917 CET	443	50466	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.117707014 CET	50452	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:45.156413078 CET	443	50458	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:45.161159992 CET	443	50457	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:45.162333965 CET	443	50459	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.162652016 CET	443	50461	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.185681105 CET	50461	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.185702085 CET	443	50461	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.185817003 CET	50459	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.185843945 CET	443	50459	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.185980082 CET	50457	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:45.185992956 CET	443	50457	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:45.186043024 CET	443	50461	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.186108112 CET	50458	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:45.186115026 CET	443	50458	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:45.186225891 CET	443	50459	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.186444998 CET	443	50458	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:45.187220097 CET	50461	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.187283993 CET	443	50461	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.187506914 CET	50459	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.187585115 CET	443	50459	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.187771082 CET	50458	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:45.187830925 CET	443	50458	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:45.187971115 CET	50461	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.188051939 CET	50459	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.188112020 CET	50458	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:45.188638926 CET	443	50457	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:45.189235926 CET	50457	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:45.189311981 CET	443	50457	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:45.189747095 CET	50457	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:45.221570969 CET	443	50452	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:45.221766949 CET	443	50452	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:45.221813917 CET	50452	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:45.228240967 CET	443	50459	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.228245020 CET	443	50461	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.232232094 CET	443	50458	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:45.236238003 CET	443	50457	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:45.290242910 CET	50452	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:45.290258884 CET	443	50452	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:45.319084883 CET	50469	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:45.319109917 CET	443	50469	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:45.319205999 CET	50469	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:45.319644928 CET	50469	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:45.319653988 CET	443	50469	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:45.324435949 CET	443	50459	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.324460030 CET	443	50459	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.324506998 CET	443	50459	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.324517965 CET	50459	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.324557066 CET	50459	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.326987028 CET	50459	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.326998949 CET	443	50459	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.327641964 CET	443	50461	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.327661991 CET	443	50461	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.327712059 CET	443	50461	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.327722073 CET	50461	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.327753067 CET	50461	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.329977036 CET	50461	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.329986095 CET	443	50461	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.353384018 CET	443	50450	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:45.354021072 CET	443	50450	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:45.354073048 CET	50450	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:45.373122931 CET	443	50458	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:45.373179913 CET	443	50458	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:45.373228073 CET	50458	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:45.373754978 CET	50458	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:45.373764992 CET	443	50458	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:45.377815008 CET	443	50457	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:45.377861977 CET	443	50457	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:45.377916098 CET	50457	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:45.378515959 CET	50457	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:19:45.378525972 CET	443	50457	63.140.38.132	192.168.2.4
Mar 28, 2024 14:19:45.390629053 CET	50450	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:45.390646935 CET	443	50450	142.251.111.148	192.168.2.4
Mar 28, 2024 14:19:45.390659094 CET	50450	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:45.390706062 CET	50450	443	192.168.2.4	142.251.111.148
Mar 28, 2024 14:19:45.555457115 CET	443	50464	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.555705070 CET	50464	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.555720091 CET	443	50464	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.556000948 CET	443	50464	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.556309938 CET	50464	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.556364059 CET	443	50464	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.556469917 CET	50464	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.558401108 CET	50471	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.558444023 CET	443	50471	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.558562994 CET	50471	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.558912039 CET	50471	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.558926105 CET	443	50471	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.559045076 CET	443	50465	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.559294939 CET	50465	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.559303045 CET	443	50465	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.559947968 CET	443	50465	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.560300112 CET	50465	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.560405970 CET	50465	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.560410023 CET	443	50465	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.560452938 CET	443	50465	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.561520100 CET	50472	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:45.561536074 CET	443	50472	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:45.561640024 CET	50472	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:45.561986923 CET	50472	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:45.562000036 CET	443	50472	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:45.576837063 CET	443	50469	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:45.577109098 CET	50469	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:45.577116013 CET	443	50469	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:45.577455044 CET	443	50469	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:45.579188108 CET	50469	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:45.579246998 CET	443	50469	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:45.579370022 CET	50469	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:45.586719990 CET	50475	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:45.586728096 CET	443	50475	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:45.586776972 CET	50475	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:45.586988926 CET	50475	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:45.586996078 CET	443	50475	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:45.587622881 CET	50476	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.587658882 CET	443	50476	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.587776899 CET	50476	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.587941885 CET	50476	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.587956905 CET	443	50476	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.600234985 CET	443	50464	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.616570950 CET	443	50466	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.620302916 CET	443	50469	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:45.621531963 CET	50466	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.621540070 CET	443	50466	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.621898890 CET	443	50466	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.622452974 CET	50466	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.622515917 CET	443	50466	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.622735023 CET	50466	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.622823954 CET	50466	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.622853041 CET	443	50466	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.627708912 CET	50465	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.627723932 CET	50469	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:45.709644079 CET	50479	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:45.709655046 CET	443	50479	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:45.709865093 CET	50479	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:45.710102081 CET	50479	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:45.710113049 CET	443	50479	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:45.736686945 CET	443	50464	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.736763954 CET	443	50464	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.736814022 CET	50464	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.737449884 CET	50464	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.737453938 CET	443	50464	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.741077900 CET	443	50465	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.741180897 CET	443	50465	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.741348982 CET	50465	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.741981983 CET	50465	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.741991043 CET	443	50465	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.751472950 CET	443	50471	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.752044916 CET	50471	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.752057076 CET	443	50471	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.752420902 CET	443	50471	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.752809048 CET	50471	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.752873898 CET	443	50471	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.752954006 CET	50471	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.754587889 CET	443	50472	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:45.754971981 CET	50472	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:45.754977942 CET	443	50472	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:45.755264997 CET	443	50472	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:45.757448912 CET	50472	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:45.757513046 CET	443	50472	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:45.757644892 CET	50472	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:45.764131069 CET	50481	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.764146090 CET	443	50481	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.764306068 CET	50481	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.764580965 CET	50481	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.764594078 CET	443	50481	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.796241045 CET	443	50471	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.800242901 CET	443	50472	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:45.807252884 CET	443	50476	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.807735920 CET	50476	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.807745934 CET	443	50476	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.808032036 CET	443	50476	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.808362961 CET	50476	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.808423042 CET	443	50476	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.808582067 CET	50476	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.852442026 CET	443	50469	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:45.852523088 CET	443	50469	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:45.852585077 CET	50469	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:45.856242895 CET	443	50476	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.874898911 CET	50469	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:45.874914885 CET	443	50469	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:45.881309032 CET	50486	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:45.881315947 CET	443	50486	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:45.881400108 CET	50486	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:45.881706953 CET	50486	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:45.881715059 CET	443	50486	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:45.942975044 CET	443	50471	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.942995071 CET	443	50471	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.943046093 CET	50471	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.943057060 CET	443	50471	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.943068027 CET	443	50471	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.943105936 CET	50471	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.945557117 CET	443	50472	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:45.945705891 CET	443	50472	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:45.945805073 CET	50472	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:45.945858002 CET	50471	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.945868969 CET	443	50471	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.961685896 CET	443	50481	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.961994886 CET	50481	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.962002993 CET	443	50481	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.962310076 CET	443	50481	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.962682009 CET	50481	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.962732077 CET	443	50481	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.962804079 CET	50481	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.966365099 CET	443	50475	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:45.966550112 CET	50475	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:45.966557980 CET	443	50475	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:45.966829062 CET	443	50475	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:45.967397928 CET	50475	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:45.967453003 CET	443	50475	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:45.967716932 CET	50475	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:45.981435061 CET	443	50466	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.981545925 CET	443	50466	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.981591940 CET	50466	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.981869936 CET	50466	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:45.981874943 CET	443	50466	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:45.984661102 CET	443	50479	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:45.984848022 CET	50479	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:45.984854937 CET	443	50479	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:45.985160112 CET	443	50479	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:45.985579967 CET	50479	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:45.985642910 CET	443	50479	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:45.985977888 CET	50479	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:45.997884035 CET	443	50476	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.997900963 CET	443	50476	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.997939110 CET	443	50476	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:45.997946024 CET	50476	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:45.997992992 CET	50476	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:46.006917000 CET	50472	443	192.168.2.4	157.240.229.35
Mar 28, 2024 14:19:46.006936073 CET	443	50472	157.240.229.35	192.168.2.4
Mar 28, 2024 14:19:46.008232117 CET	443	50475	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.008235931 CET	443	50481	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:46.009639025 CET	50476	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:46.009664059 CET	443	50476	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:46.032239914 CET	443	50479	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:46.099092960 CET	50491	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.099112034 CET	443	50491	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.099162102 CET	50491	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.101470947 CET	50491	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.101483107 CET	443	50491	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.102777004 CET	50492	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.102807045 CET	443	50492	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.102890015 CET	50492	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.103720903 CET	50492	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.103733063 CET	443	50492	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.117942095 CET	443	50486	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:46.118731022 CET	50486	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:46.118742943 CET	443	50486	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:46.119317055 CET	443	50486	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:46.136902094 CET	50486	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:46.137120962 CET	443	50486	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:46.138581038 CET	50486	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:46.152129889 CET	443	50481	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:46.152163982 CET	443	50481	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:46.152215004 CET	443	50481	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:46.152257919 CET	50481	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:46.152277946 CET	50481	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:46.184238911 CET	443	50486	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:46.193094015 CET	50481	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:46.193105936 CET	443	50481	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:46.325787067 CET	443	50475	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.325864077 CET	443	50475	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.325901031 CET	50475	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.333439112 CET	50475	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.333447933 CET	443	50475	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.362768888 CET	50493	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:46.362790108 CET	443	50493	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:46.362960100 CET	50493	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:46.363154888 CET	50493	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:46.363171101 CET	443	50493	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:46.366919994 CET	50495	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.366936922 CET	443	50495	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.366981983 CET	50495	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.367539883 CET	50495	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.367547989 CET	443	50495	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.373749018 CET	443	50479	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:46.374134064 CET	443	50479	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:46.374212980 CET	50479	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:46.380331039 CET	50479	443	192.168.2.4	142.251.167.157
Mar 28, 2024 14:19:46.380337954 CET	443	50479	142.251.167.157	192.168.2.4
Mar 28, 2024 14:19:46.401976109 CET	443	50486	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:46.402600050 CET	443	50486	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:46.402650118 CET	50486	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:46.405833006 CET	50486	443	192.168.2.4	142.251.16.148
Mar 28, 2024 14:19:46.405839920 CET	443	50486	142.251.16.148	192.168.2.4
Mar 28, 2024 14:19:46.464339018 CET	443	50492	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.464510918 CET	50492	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.464528084 CET	443	50492	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.465126991 CET	443	50491	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.465188980 CET	443	50492	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.465343952 CET	50491	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.465351105 CET	443	50491	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.465630054 CET	443	50491	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.465868950 CET	50492	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.465950966 CET	443	50492	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.466093063 CET	50492	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.466537952 CET	50491	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.466590881 CET	443	50491	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.466730118 CET	50491	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.508239031 CET	443	50492	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.512233973 CET	443	50491	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.571398973 CET	443	50493	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:46.572932959 CET	50493	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:46.572946072 CET	443	50493	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:46.573266029 CET	443	50493	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:46.574652910 CET	50493	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:46.574728012 CET	443	50493	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:46.574780941 CET	50493	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:46.620234966 CET	443	50493	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:46.729487896 CET	443	50495	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.729959965 CET	50495	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.729969025 CET	443	50495	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.730989933 CET	443	50495	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.731043100 CET	50495	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.731599092 CET	50495	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.731664896 CET	443	50495	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.732120037 CET	50495	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.732127905 CET	443	50495	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.820698977 CET	443	50492	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.820852041 CET	443	50492	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.820899010 CET	50492	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.821317911 CET	50492	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.821326971 CET	443	50492	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.823709965 CET	50495	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.826924086 CET	443	50491	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.827002048 CET	443	50491	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.827181101 CET	50491	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.829514980 CET	50491	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:46.829524040 CET	443	50491	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:46.839359045 CET	443	50493	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:46.839802027 CET	443	50493	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:46.840282917 CET	50493	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:46.867111921 CET	50493	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:46.867120981 CET	443	50493	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:47.083118916 CET	443	50495	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:47.083261013 CET	443	50495	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:47.083327055 CET	50495	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:47.083897114 CET	50495	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:47.083911896 CET	443	50495	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:47.561379910 CET	50503	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:47.561403036 CET	443	50503	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:47.561467886 CET	50503	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:47.561767101 CET	50503	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:47.561779022 CET	443	50503	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:47.767174959 CET	443	50503	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:47.767371893 CET	50503	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:47.767385006 CET	443	50503	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:47.767674923 CET	443	50503	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:47.767987013 CET	50503	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:47.768052101 CET	443	50503	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:47.768109083 CET	50503	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:47.808234930 CET	443	50503	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:47.993597984 CET	443	50503	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:47.993657112 CET	443	50503	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:47.993725061 CET	50503	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:48.000669956 CET	50503	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:19:48.000679970 CET	443	50503	142.251.16.157	192.168.2.4
Mar 28, 2024 14:19:48.002739906 CET	50505	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:48.002753973 CET	443	50505	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:48.002883911 CET	50505	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:48.003103018 CET	50505	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:48.003114939 CET	443	50505	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:48.094204903 CET	50507	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:48.094227076 CET	443	50507	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:48.094281912 CET	50507	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:48.094711065 CET	50507	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:48.094731092 CET	443	50507	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:48.226655960 CET	443	50505	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:48.233513117 CET	50505	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:48.233524084 CET	443	50505	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:48.233835936 CET	443	50505	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:48.234126091 CET	50505	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:48.234178066 CET	443	50505	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:48.234344959 CET	50505	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:48.276233912 CET	443	50505	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:48.393012047 CET	443	50507	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:48.393549919 CET	50507	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:48.393563032 CET	443	50507	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:48.393861055 CET	443	50507	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:48.415107012 CET	50507	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:48.415107012 CET	50507	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:48.415129900 CET	443	50507	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:48.415194035 CET	50507	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:48.415195942 CET	443	50507	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:48.415251970 CET	443	50507	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:48.508965015 CET	443	50505	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:48.509037971 CET	443	50505	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:48.509185076 CET	50505	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:48.510770082 CET	50505	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:19:48.510780096 CET	443	50505	172.253.62.105	192.168.2.4
Mar 28, 2024 14:19:48.521723986 CET	50507	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:48.591084003 CET	50513	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:48.591089964 CET	443	50513	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:48.591226101 CET	50513	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:48.591906071 CET	50513	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:48.591926098 CET	443	50513	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:48.598232031 CET	50515	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:48.598241091 CET	443	50515	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:48.598309994 CET	50515	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:48.600081921 CET	50515	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:48.600091934 CET	443	50515	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:48.605633020 CET	443	50507	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:48.605652094 CET	443	50507	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:48.605678082 CET	443	50507	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:48.605726957 CET	50507	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:48.605739117 CET	443	50507	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:48.605747938 CET	443	50507	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:48.605761051 CET	50507	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:48.605918884 CET	50507	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:48.608076096 CET	50507	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:48.608084917 CET	443	50507	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:48.616050959 CET	50516	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:48.616075993 CET	443	50516	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:48.620311975 CET	50516	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:48.620515108 CET	50516	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:48.620532990 CET	443	50516	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:48.807975054 CET	443	50515	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:48.808382988 CET	50515	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:48.808396101 CET	443	50515	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:48.808698893 CET	443	50515	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:48.847280025 CET	50515	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:48.847364902 CET	443	50515	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:48.847518921 CET	443	50516	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:48.849571943 CET	50516	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:48.849586010 CET	443	50516	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:48.849745989 CET	50515	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:48.850174904 CET	443	50516	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:48.850640059 CET	50516	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:48.850712061 CET	443	50516	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:48.850796938 CET	50516	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:48.892239094 CET	443	50516	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:48.892241001 CET	443	50515	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:48.922039986 CET	50516	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:48.946373940 CET	443	50513	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:48.946605921 CET	50513	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:48.946616888 CET	443	50513	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:48.946943998 CET	443	50513	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:48.950306892 CET	50513	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:48.950392008 CET	443	50513	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:48.953244925 CET	50513	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:48.996234894 CET	443	50513	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:49.037868023 CET	443	50516	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:49.037884951 CET	443	50516	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:49.037906885 CET	443	50516	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:49.037975073 CET	443	50516	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:49.037981987 CET	50516	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:49.037981987 CET	50516	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:49.038041115 CET	50516	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:49.042032003 CET	50516	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:49.042054892 CET	443	50516	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:49.048912048 CET	443	50513	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:49.048938990 CET	443	50513	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:49.048991919 CET	443	50513	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:49.049010992 CET	50513	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:49.049113035 CET	50513	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:49.053550005 CET	50513	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:49.053565979 CET	443	50513	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:49.062829018 CET	443	50515	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:49.062896013 CET	443	50515	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:49.063019991 CET	50515	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:49.075020075 CET	50515	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:19:49.075031042 CET	443	50515	172.253.115.104	192.168.2.4
Mar 28, 2024 14:19:49.132054090 CET	50519	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:49.132082939 CET	443	50519	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:49.136250019 CET	50519	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:49.137954950 CET	50519	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:49.137967110 CET	443	50519	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:49.157707930 CET	50520	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:49.157727003 CET	443	50520	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:49.160135984 CET	50520	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:49.164980888 CET	50520	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:49.164994955 CET	443	50520	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:49.330018997 CET	443	50519	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:49.330275059 CET	50519	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:49.330295086 CET	443	50519	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:49.330662012 CET	443	50519	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:49.330998898 CET	50519	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:49.331057072 CET	443	50519	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:49.331326008 CET	50519	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:49.350073099 CET	50521	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:49.350086927 CET	443	50521	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:49.350142002 CET	50521	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:49.350445032 CET	50521	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:49.350456953 CET	443	50521	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:49.372260094 CET	443	50519	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:49.519233942 CET	443	50519	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:49.519268036 CET	443	50519	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:49.519330978 CET	443	50519	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:49.519356012 CET	50519	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:49.519373894 CET	50519	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:49.521116018 CET	50519	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:49.521128893 CET	443	50519	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:49.542242050 CET	443	50521	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:49.542464018 CET	50521	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:49.542470932 CET	443	50521	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:49.542804003 CET	443	50521	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:49.543170929 CET	50521	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:49.543235064 CET	443	50521	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:49.543329954 CET	50521	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:49.543405056 CET	50521	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:49.543431997 CET	443	50521	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:49.543543100 CET	50521	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:49.543579102 CET	443	50521	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:49.705216885 CET	443	50520	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:49.705420017 CET	50520	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:49.705430031 CET	443	50520	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:49.705771923 CET	443	50520	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:49.706069946 CET	50520	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:49.706129074 CET	443	50520	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:49.706223965 CET	50520	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:49.748236895 CET	443	50520	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:49.828282118 CET	443	50521	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:49.828361988 CET	443	50521	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:49.828406096 CET	50521	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:49.829071999 CET	50521	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:49.829082966 CET	443	50521	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:49.833080053 CET	50526	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:49.833096981 CET	443	50526	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:49.833154917 CET	50526	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:49.833321095 CET	50526	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:49.833331108 CET	443	50526	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:49.837125063 CET	50527	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:49.837152004 CET	443	50527	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:49.837199926 CET	50527	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:49.837445021 CET	50527	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:49.837459087 CET	443	50527	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:50.025492907 CET	443	50526	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:50.025727987 CET	50526	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:50.025738955 CET	443	50526	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:50.026057005 CET	443	50526	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:50.026365042 CET	50526	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:50.026428938 CET	443	50526	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:50.026490927 CET	50526	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:50.068236113 CET	443	50526	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:50.104840994 CET	443	50520	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:50.104912043 CET	443	50520	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:50.104950905 CET	50520	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:50.105262041 CET	50520	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:50.105268955 CET	443	50520	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:50.107966900 CET	50530	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:50.107978106 CET	443	50530	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:50.108042002 CET	50530	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:50.108299017 CET	50530	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:50.108310938 CET	443	50530	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:50.126668930 CET	443	50527	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:50.126852036 CET	50527	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:50.126862049 CET	443	50527	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:50.127151966 CET	443	50527	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:50.127511024 CET	50527	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:50.127561092 CET	443	50527	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:50.127720118 CET	50527	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:50.127759933 CET	50527	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:50.127780914 CET	443	50527	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:50.168175936 CET	50531	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:50.168190002 CET	443	50531	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:50.168247938 CET	50531	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:50.168407917 CET	50531	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:50.168420076 CET	443	50531	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:50.215111017 CET	443	50526	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:50.215128899 CET	443	50526	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:50.215178013 CET	50526	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:50.215186119 CET	443	50526	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:50.215193987 CET	443	50526	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:50.215234041 CET	50526	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:50.217406988 CET	50526	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:50.217416048 CET	443	50526	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:50.318135023 CET	443	50527	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:50.318212032 CET	443	50527	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:50.318371058 CET	50527	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:50.319447041 CET	50527	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:50.319458008 CET	443	50527	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:50.333142996 CET	50532	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:50.333168983 CET	443	50532	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:50.333332062 CET	50532	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:50.333720922 CET	50532	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:50.333736897 CET	443	50532	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:50.361809969 CET	443	50531	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:50.363013029 CET	50531	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:50.363034964 CET	443	50531	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:50.363393068 CET	443	50531	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:50.364023924 CET	50531	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:50.364084959 CET	443	50531	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:50.364906073 CET	50531	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:50.408241034 CET	443	50531	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:50.470380068 CET	443	50530	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:50.471942902 CET	50530	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:50.471960068 CET	443	50530	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:50.472301960 CET	443	50530	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:50.475538969 CET	50530	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:50.475609064 CET	443	50530	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:50.479286909 CET	50530	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:50.524235010 CET	443	50530	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:50.525774002 CET	443	50532	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:50.537199974 CET	50532	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:50.537210941 CET	443	50532	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:50.537625074 CET	443	50532	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:50.550221920 CET	443	50531	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:50.550295115 CET	443	50531	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:50.550354004 CET	50531	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:50.573149920 CET	50532	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:50.573149920 CET	50532	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:50.573162079 CET	443	50532	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:50.573226929 CET	443	50532	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:50.574466944 CET	50531	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:50.574479103 CET	443	50531	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:50.621723890 CET	50532	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:50.631997108 CET	50533	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:50.632033110 CET	443	50533	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:50.636482000 CET	50533	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:50.636964083 CET	50533	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:50.636971951 CET	443	50533	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:50.660197020 CET	50534	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:50.660221100 CET	443	50534	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:50.664247990 CET	50534	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:50.664412975 CET	50534	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:50.664429903 CET	443	50534	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:50.679883957 CET	50537	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:50.679910898 CET	443	50537	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:50.680103064 CET	50537	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:50.680756092 CET	50537	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:50.680771112 CET	443	50537	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:50.721278906 CET	443	50532	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:50.721304893 CET	443	50532	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:50.721324921 CET	443	50532	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:50.721363068 CET	443	50532	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:50.721385956 CET	50532	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:50.721498966 CET	50532	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:50.752052069 CET	50532	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:50.752060890 CET	443	50532	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:50.833264112 CET	443	50530	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:50.833372116 CET	443	50530	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:50.833530903 CET	50530	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:50.836390018 CET	50530	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:50.836395025 CET	443	50530	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:50.845191002 CET	443	50533	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:50.845613003 CET	50533	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:50.845626116 CET	443	50533	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:50.845997095 CET	443	50533	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:50.847186089 CET	50533	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:50.847186089 CET	50533	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:50.847199917 CET	443	50533	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:50.847218037 CET	50533	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:50.847234011 CET	443	50533	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:50.847276926 CET	443	50533	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:50.873209953 CET	443	50534	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:50.873526096 CET	50534	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:50.873542070 CET	443	50534	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:50.873902082 CET	443	50534	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:50.878930092 CET	50534	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:50.879004002 CET	443	50534	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:50.879245043 CET	50534	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:50.879270077 CET	443	50534	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:50.892705917 CET	50533	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:50.898710012 CET	443	50537	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:50.902182102 CET	50537	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:50.902194023 CET	443	50537	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:50.902533054 CET	443	50537	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:50.904633999 CET	50537	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:50.904700041 CET	443	50537	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:50.904889107 CET	50537	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:50.952238083 CET	443	50537	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:51.055672884 CET	443	50533	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.055840015 CET	443	50533	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.056184053 CET	50533	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:51.057279110 CET	50533	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:51.057302952 CET	443	50533	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.087868929 CET	443	50534	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.087924957 CET	443	50534	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.088087082 CET	50534	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:51.088181019 CET	443	50537	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:51.088254929 CET	443	50537	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:51.088586092 CET	50537	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:51.088918924 CET	50537	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:19:51.088924885 CET	443	50537	146.75.29.230	192.168.2.4
Mar 28, 2024 14:19:51.092089891 CET	50534	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:51.092108011 CET	443	50534	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.104079962 CET	50541	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:51.104110956 CET	443	50541	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:51.108428955 CET	50541	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:51.108782053 CET	50541	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:51.108793020 CET	443	50541	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:51.111100912 CET	50543	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:51.111108065 CET	443	50543	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.112162113 CET	50543	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:51.114727020 CET	50543	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:51.114727974 CET	50544	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:51.114736080 CET	443	50543	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.114754915 CET	443	50544	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.116199970 CET	50544	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:51.116489887 CET	50544	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:51.116503954 CET	443	50544	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.140111923 CET	50546	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:51.140119076 CET	443	50546	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:51.140252113 CET	50546	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:51.140477896 CET	50546	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:51.140490055 CET	443	50546	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:51.337346077 CET	443	50543	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.337975979 CET	50543	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:51.337990999 CET	443	50543	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.338340044 CET	443	50543	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.339325905 CET	50543	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:51.339394093 CET	443	50543	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.339824915 CET	50543	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:51.343380928 CET	443	50544	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.343585014 CET	50544	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:51.343602896 CET	443	50544	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.344029903 CET	443	50544	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.344372988 CET	50544	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:51.344438076 CET	443	50544	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.344667912 CET	50544	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:51.344697952 CET	443	50544	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.384242058 CET	443	50543	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.430521011 CET	443	50546	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:51.430711031 CET	50546	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:51.430720091 CET	443	50546	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:51.431061029 CET	443	50546	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:51.431411028 CET	50546	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:51.431478977 CET	443	50546	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:51.431546926 CET	50546	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:51.472243071 CET	443	50546	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:51.551301003 CET	443	50543	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.551465034 CET	443	50543	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.551508904 CET	50543	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:51.551991940 CET	50543	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:51.552005053 CET	443	50543	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.554685116 CET	443	50544	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.554761887 CET	443	50544	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.554810047 CET	50544	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:51.555147886 CET	50544	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:51.555162907 CET	443	50544	35.241.45.82	192.168.2.4
Mar 28, 2024 14:19:51.555174112 CET	50544	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:51.555207968 CET	50544	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:19:51.660521030 CET	443	50541	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:51.660799026 CET	50541	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:51.660811901 CET	443	50541	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:51.661164999 CET	443	50541	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:51.661585093 CET	50541	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:51.661647081 CET	443	50541	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:51.661788940 CET	50541	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:51.661855936 CET	50541	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:51.661900997 CET	443	50541	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:51.671708107 CET	443	50546	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:51.671725988 CET	443	50546	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:51.671776056 CET	50546	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:51.671785116 CET	443	50546	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:51.671809912 CET	443	50546	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:51.671861887 CET	50546	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:51.672688961 CET	50546	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:51.672697067 CET	443	50546	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:51.809462070 CET	50548	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:51.809494019 CET	443	50548	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:51.809544086 CET	50548	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:51.810250998 CET	50548	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:51.810261965 CET	443	50548	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:52.001733065 CET	443	50548	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:52.002532005 CET	50548	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:52.002549887 CET	443	50548	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:52.002862930 CET	443	50548	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:52.005358934 CET	50548	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:52.005417109 CET	443	50548	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:52.006020069 CET	50548	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:52.022878885 CET	443	50541	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:52.022949934 CET	443	50541	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:52.023001909 CET	50541	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:52.023288012 CET	50541	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:52.023302078 CET	443	50541	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:52.043900967 CET	50551	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:52.043920994 CET	443	50551	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:52.043968916 CET	50551	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:52.044862986 CET	50551	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:52.044873953 CET	443	50551	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:52.052226067 CET	443	50548	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:52.191198111 CET	443	50548	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:52.191217899 CET	443	50548	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:52.191274881 CET	443	50548	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:52.191281080 CET	50548	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:52.191330910 CET	50548	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:52.209698915 CET	50548	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:52.209717035 CET	443	50548	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:52.403386116 CET	443	50551	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:52.403714895 CET	50551	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:52.403728008 CET	443	50551	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:52.404052019 CET	443	50551	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:52.404793024 CET	50551	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:52.404853106 CET	443	50551	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:52.405031919 CET	50551	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:52.448236942 CET	443	50551	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:52.760091066 CET	443	50551	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:52.760196924 CET	443	50551	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:52.760335922 CET	50551	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:52.776016951 CET	50551	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:52.776036024 CET	443	50551	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:52.790054083 CET	50552	443	192.168.2.4	142.251.16.147
Mar 28, 2024 14:19:52.790081978 CET	443	50552	142.251.16.147	192.168.2.4
Mar 28, 2024 14:19:52.794327974 CET	50552	443	192.168.2.4	142.251.16.147
Mar 28, 2024 14:19:52.798052073 CET	50552	443	192.168.2.4	142.251.16.147
Mar 28, 2024 14:19:52.798065901 CET	443	50552	142.251.16.147	192.168.2.4
Mar 28, 2024 14:19:53.008868933 CET	443	50552	142.251.16.147	192.168.2.4
Mar 28, 2024 14:19:53.009246111 CET	50552	443	192.168.2.4	142.251.16.147
Mar 28, 2024 14:19:53.009258986 CET	443	50552	142.251.16.147	192.168.2.4
Mar 28, 2024 14:19:53.009577036 CET	443	50552	142.251.16.147	192.168.2.4
Mar 28, 2024 14:19:53.009984016 CET	50552	443	192.168.2.4	142.251.16.147
Mar 28, 2024 14:19:53.010040045 CET	443	50552	142.251.16.147	192.168.2.4
Mar 28, 2024 14:19:53.067776918 CET	50552	443	192.168.2.4	142.251.16.147
Mar 28, 2024 14:19:57.380465984 CET	50587	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:57.380498886 CET	443	50587	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:57.380764961 CET	50587	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:57.380959988 CET	50587	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:57.380973101 CET	443	50587	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:57.672450066 CET	50598	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:57.672458887 CET	443	50598	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:57.672514915 CET	50598	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:57.673435926 CET	50598	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:57.673448086 CET	443	50598	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:57.924249887 CET	443	50587	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:57.924449921 CET	50587	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:57.924462080 CET	443	50587	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:57.924747944 CET	443	50587	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:57.925113916 CET	50587	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:57.925172091 CET	443	50587	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:57.925245047 CET	50587	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:57.972233057 CET	443	50587	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:58.014834881 CET	443	50598	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:58.015048027 CET	50598	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:58.015064001 CET	443	50598	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:58.015391111 CET	443	50598	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:58.015674114 CET	50598	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:58.015734911 CET	443	50598	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:58.015794992 CET	50598	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:58.015794992 CET	50598	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:58.015821934 CET	443	50598	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:58.072880030 CET	50587	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:58.082225084 CET	50598	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:58.112433910 CET	50404	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:58.160233021 CET	443	50404	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:58.206476927 CET	443	50598	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:58.206552982 CET	443	50598	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:58.206624985 CET	50598	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:58.207340956 CET	50598	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:58.207350016 CET	443	50598	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:58.231848001 CET	50605	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:58.231862068 CET	443	50605	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:58.231969118 CET	50605	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:58.232319117 CET	50605	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:58.232331038 CET	443	50605	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:58.263251066 CET	443	50404	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:58.263353109 CET	443	50404	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:58.263572931 CET	50404	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:58.263639927 CET	50404	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:58.263648987 CET	443	50404	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:58.266263962 CET	50606	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:58.266273022 CET	443	50606	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:58.266331911 CET	50606	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:58.266499996 CET	50606	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:58.266511917 CET	443	50606	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:58.326601028 CET	443	50587	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:58.326659918 CET	443	50587	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:58.326796055 CET	50587	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:58.330041885 CET	50587	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:19:58.330054998 CET	443	50587	35.163.101.91	192.168.2.4
Mar 28, 2024 14:19:58.332540989 CET	50607	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:58.332549095 CET	443	50607	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:58.332698107 CET	50607	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:58.332849979 CET	50607	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:58.332859993 CET	443	50607	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:58.425221920 CET	443	50605	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:58.425446033 CET	50605	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:58.425460100 CET	443	50605	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:58.425890923 CET	443	50605	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:58.426386118 CET	50605	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:58.426451921 CET	443	50605	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:58.426714897 CET	50605	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:58.472234964 CET	443	50605	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:58.541094065 CET	443	50606	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:58.541333914 CET	50606	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:58.541347027 CET	443	50606	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:58.541627884 CET	443	50606	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:58.542802095 CET	50606	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:58.542855024 CET	443	50606	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:58.543035030 CET	50606	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:58.582874060 CET	50605	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:58.584233999 CET	443	50606	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:58.615009069 CET	443	50605	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:58.615029097 CET	443	50605	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:58.615036011 CET	443	50605	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:58.615102053 CET	443	50605	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:58.615115881 CET	50605	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:58.615165949 CET	50605	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:58.616404057 CET	50605	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:58.616411924 CET	443	50605	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:58.669779062 CET	50614	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:58.669794083 CET	443	50614	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:58.669961929 CET	50614	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:58.670701981 CET	50614	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:58.670713902 CET	443	50614	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:58.695231915 CET	443	50607	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:58.695517063 CET	50607	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:58.695523977 CET	443	50607	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:58.695842028 CET	443	50607	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:58.698524952 CET	50607	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:58.698584080 CET	443	50607	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:58.707412004 CET	50607	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:58.752232075 CET	443	50607	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:58.827235937 CET	443	50606	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:58.827294111 CET	443	50606	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:58.828176022 CET	50606	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:58.828485012 CET	50606	443	192.168.2.4	34.107.165.188
Mar 28, 2024 14:19:58.828494072 CET	443	50606	34.107.165.188	192.168.2.4
Mar 28, 2024 14:19:58.872227907 CET	443	50614	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:58.872509956 CET	50614	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:58.872525930 CET	443	50614	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:58.872814894 CET	443	50614	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:58.873294115 CET	50614	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:58.873294115 CET	50614	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:58.873344898 CET	443	50614	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:58.982042074 CET	50614	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:59.051074982 CET	443	50607	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:59.051168919 CET	443	50607	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:59.056767941 CET	50607	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:59.061301947 CET	50607	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:19:59.061316013 CET	443	50607	34.211.102.35	192.168.2.4
Mar 28, 2024 14:19:59.109328985 CET	443	50614	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:59.109630108 CET	443	50614	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:59.109812021 CET	50614	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:59.117784977 CET	50614	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:59.117793083 CET	443	50614	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:59.135842085 CET	50618	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:59.135864973 CET	443	50618	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:59.136019945 CET	50618	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:59.141321898 CET	50618	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:59.141333103 CET	443	50618	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:59.329173088 CET	50622	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:59.329185009 CET	443	50622	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:59.329334021 CET	50622	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:59.329704046 CET	50622	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:59.329715014 CET	443	50622	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:59.339047909 CET	443	50618	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:59.339251995 CET	50618	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:59.339262009 CET	443	50618	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:59.339629889 CET	443	50618	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:59.340282917 CET	50618	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:59.340344906 CET	443	50618	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:59.340439081 CET	50618	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:59.384238005 CET	443	50618	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:59.476876020 CET	50618	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:59.572125912 CET	443	50618	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:59.572427034 CET	443	50618	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:59.572485924 CET	50618	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:59.573240042 CET	50618	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:59.573249102 CET	443	50618	13.32.208.32	192.168.2.4
Mar 28, 2024 14:19:59.573257923 CET	50618	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:59.573285103 CET	50618	443	192.168.2.4	13.32.208.32
Mar 28, 2024 14:19:59.584392071 CET	50627	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:59.584408045 CET	443	50627	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:59.584494114 CET	50627	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:59.584693909 CET	50627	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:59.584706068 CET	443	50627	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:59.620058060 CET	443	50622	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:59.620433092 CET	50622	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:59.620439053 CET	443	50622	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:59.620708942 CET	443	50622	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:59.621263027 CET	50622	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:59.621316910 CET	443	50622	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:59.621397018 CET	50622	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:59.621433973 CET	50622	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:59.621448994 CET	443	50622	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:59.685173988 CET	50630	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:59.685187101 CET	443	50630	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:59.685249090 CET	50630	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:59.685623884 CET	50630	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:59.685635090 CET	443	50630	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:59.781936884 CET	443	50627	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:59.782208920 CET	50627	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:59.782222033 CET	443	50627	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:59.782565117 CET	443	50627	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:59.784311056 CET	50627	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:59.784378052 CET	443	50627	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:59.784531116 CET	50627	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:19:59.818418980 CET	443	50622	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:59.818437099 CET	443	50622	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:59.818483114 CET	443	50622	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:59.818486929 CET	50622	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:59.818526983 CET	50622	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:59.819489956 CET	50622	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:59.819498062 CET	443	50622	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:59.825656891 CET	50635	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:59.825685978 CET	443	50635	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:59.825789928 CET	50635	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:59.825969934 CET	50635	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:19:59.825987101 CET	443	50635	34.194.24.182	192.168.2.4
Mar 28, 2024 14:19:59.828233957 CET	443	50627	13.32.208.16	192.168.2.4
Mar 28, 2024 14:19:59.833076954 CET	50636	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:59.833085060 CET	443	50636	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:59.833137989 CET	50636	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:59.833364010 CET	50636	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:59.833373070 CET	443	50636	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:59.877434015 CET	443	50630	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:59.877923965 CET	50630	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:59.877933979 CET	443	50630	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:59.878226995 CET	443	50630	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:59.878544092 CET	50630	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:59.878597021 CET	443	50630	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:59.878671885 CET	50630	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:59.878737926 CET	50630	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:59.878767967 CET	443	50630	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:59.878860950 CET	50630	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:59.878890038 CET	443	50630	44.213.50.195	192.168.2.4
Mar 28, 2024 14:19:59.878935099 CET	50630	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:19:59.920243025 CET	443	50630	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:00.006596088 CET	443	50627	13.32.208.16	192.168.2.4
Mar 28, 2024 14:20:00.006808043 CET	443	50627	13.32.208.16	192.168.2.4
Mar 28, 2024 14:20:00.006880999 CET	50627	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:20:00.007392883 CET	50627	443	192.168.2.4	13.32.208.16
Mar 28, 2024 14:20:00.007426023 CET	443	50627	13.32.208.16	192.168.2.4
Mar 28, 2024 14:20:00.017596006 CET	443	50635	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.017805099 CET	50635	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.017816067 CET	443	50635	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.018111944 CET	443	50635	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.018394947 CET	50635	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.018452883 CET	443	50635	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.018556118 CET	50635	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.064243078 CET	443	50635	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.122726917 CET	443	50636	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:00.122956991 CET	50636	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:20:00.122963905 CET	443	50636	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:00.123244047 CET	443	50636	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:00.123557091 CET	50636	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:20:00.123609066 CET	443	50636	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:00.123696089 CET	50636	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:20:00.123796940 CET	50636	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:20:00.123823881 CET	443	50636	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:00.164009094 CET	443	50630	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:00.164026976 CET	443	50630	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:00.164083958 CET	50630	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:20:00.164093018 CET	443	50630	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:00.164108038 CET	443	50630	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:00.164144039 CET	50630	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:20:00.165208101 CET	50630	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:20:00.165214062 CET	443	50630	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:00.167999983 CET	50644	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.168011904 CET	443	50644	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.168082952 CET	50644	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.168312073 CET	50644	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.168323040 CET	443	50644	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.207398891 CET	443	50635	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.207425117 CET	443	50635	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.207469940 CET	443	50635	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.207475901 CET	50635	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.207504988 CET	50635	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.208941936 CET	50635	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.208955050 CET	443	50635	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.306144953 CET	50646	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:20:00.306164980 CET	443	50646	142.250.31.156	192.168.2.4
Mar 28, 2024 14:20:00.306377888 CET	50646	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:20:00.308103085 CET	50646	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:20:00.308116913 CET	443	50646	142.250.31.156	192.168.2.4
Mar 28, 2024 14:20:00.321317911 CET	443	50636	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:00.321372032 CET	443	50636	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:00.321424961 CET	50636	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:20:00.322421074 CET	50636	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:20:00.322429895 CET	443	50636	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:00.329206944 CET	50647	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.329219103 CET	443	50647	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.329349995 CET	50647	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.329541922 CET	50647	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.329555988 CET	443	50647	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.362390995 CET	443	50644	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.364145994 CET	50644	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.364156008 CET	443	50644	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.364542961 CET	443	50644	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.365528107 CET	50644	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.365609884 CET	443	50644	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.365925074 CET	50644	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.374851942 CET	50649	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:20:00.374891043 CET	443	50649	52.45.39.174	192.168.2.4
Mar 28, 2024 14:20:00.375087023 CET	50649	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:20:00.375452042 CET	50649	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:20:00.375474930 CET	443	50649	52.45.39.174	192.168.2.4
Mar 28, 2024 14:20:00.412237883 CET	443	50644	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.516983032 CET	443	50646	142.250.31.156	192.168.2.4
Mar 28, 2024 14:20:00.518043041 CET	50646	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:20:00.518052101 CET	443	50646	142.250.31.156	192.168.2.4
Mar 28, 2024 14:20:00.518395901 CET	443	50646	142.250.31.156	192.168.2.4
Mar 28, 2024 14:20:00.519085884 CET	50646	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:20:00.519149065 CET	443	50646	142.250.31.156	192.168.2.4
Mar 28, 2024 14:20:00.519468069 CET	50646	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:20:00.527352095 CET	443	50647	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.527664900 CET	50647	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.527673960 CET	443	50647	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.527992010 CET	443	50647	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.528460979 CET	50647	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.528460979 CET	50647	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.528475046 CET	443	50647	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.528523922 CET	443	50647	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.558033943 CET	443	50644	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.558075905 CET	443	50644	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.558147907 CET	443	50644	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.558300972 CET	50644	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.558490038 CET	50644	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.560134888 CET	50644	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.560144901 CET	443	50644	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.560240030 CET	443	50646	142.250.31.156	192.168.2.4
Mar 28, 2024 14:20:00.578099012 CET	443	50649	52.45.39.174	192.168.2.4
Mar 28, 2024 14:20:00.582345009 CET	50649	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:20:00.582364082 CET	443	50649	52.45.39.174	192.168.2.4
Mar 28, 2024 14:20:00.582654953 CET	443	50649	52.45.39.174	192.168.2.4
Mar 28, 2024 14:20:00.586380959 CET	50649	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:20:00.586446047 CET	443	50649	52.45.39.174	192.168.2.4
Mar 28, 2024 14:20:00.586566925 CET	50649	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:20:00.632246971 CET	443	50649	52.45.39.174	192.168.2.4
Mar 28, 2024 14:20:00.640866041 CET	50647	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.717802048 CET	443	50647	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.717823982 CET	443	50647	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.717829943 CET	443	50647	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.717901945 CET	443	50647	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.717986107 CET	50647	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.717986107 CET	50647	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.735824108 CET	50647	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:00.735831976 CET	443	50647	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:00.738843918 CET	443	50646	142.250.31.156	192.168.2.4
Mar 28, 2024 14:20:00.738955021 CET	443	50646	142.250.31.156	192.168.2.4
Mar 28, 2024 14:20:00.742106915 CET	50646	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:20:00.750296116 CET	50650	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:20:00.750315905 CET	443	50650	142.251.16.157	192.168.2.4
Mar 28, 2024 14:20:00.750505924 CET	50646	443	192.168.2.4	142.250.31.156
Mar 28, 2024 14:20:00.750511885 CET	443	50646	142.250.31.156	192.168.2.4
Mar 28, 2024 14:20:00.750540018 CET	50650	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:20:00.753151894 CET	50650	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:20:00.753154039 CET	50651	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:20:00.753164053 CET	443	50650	142.251.16.157	192.168.2.4
Mar 28, 2024 14:20:00.753165960 CET	443	50651	172.253.122.113	192.168.2.4
Mar 28, 2024 14:20:00.754132986 CET	50651	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:20:00.755814075 CET	50651	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:20:00.755827904 CET	443	50651	172.253.122.113	192.168.2.4
Mar 28, 2024 14:20:00.766275883 CET	50652	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:20:00.766283989 CET	443	50652	63.140.39.65	192.168.2.4
Mar 28, 2024 14:20:00.770086050 CET	443	50649	52.45.39.174	192.168.2.4
Mar 28, 2024 14:20:00.770102978 CET	443	50649	52.45.39.174	192.168.2.4
Mar 28, 2024 14:20:00.770117044 CET	50652	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:20:00.770169020 CET	443	50649	52.45.39.174	192.168.2.4
Mar 28, 2024 14:20:00.770195961 CET	50649	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:20:00.770334959 CET	50649	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:20:00.770620108 CET	50652	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:20:00.770634890 CET	443	50652	63.140.39.65	192.168.2.4
Mar 28, 2024 14:20:00.771481991 CET	50649	443	192.168.2.4	52.45.39.174
Mar 28, 2024 14:20:00.771505117 CET	443	50649	52.45.39.174	192.168.2.4
Mar 28, 2024 14:20:00.809396982 CET	50656	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:20:00.809403896 CET	443	50656	44.195.11.1	192.168.2.4
Mar 28, 2024 14:20:00.809489965 CET	50656	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:20:00.809967041 CET	50656	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:20:00.809978008 CET	443	50656	44.195.11.1	192.168.2.4
Mar 28, 2024 14:20:00.880670071 CET	50657	443	192.168.2.4	23.23.167.174
Mar 28, 2024 14:20:00.880702019 CET	443	50657	23.23.167.174	192.168.2.4
Mar 28, 2024 14:20:00.880898952 CET	50657	443	192.168.2.4	23.23.167.174
Mar 28, 2024 14:20:00.880976915 CET	50657	443	192.168.2.4	23.23.167.174
Mar 28, 2024 14:20:00.880987883 CET	443	50657	23.23.167.174	192.168.2.4
Mar 28, 2024 14:20:00.899137020 CET	50659	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:20:00.899147034 CET	443	50659	69.147.92.11	192.168.2.4
Mar 28, 2024 14:20:00.899230957 CET	50659	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:20:00.899509907 CET	50659	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:20:00.899519920 CET	443	50659	69.147.92.11	192.168.2.4
Mar 28, 2024 14:20:00.959716082 CET	443	50650	142.251.16.157	192.168.2.4
Mar 28, 2024 14:20:00.959920883 CET	50650	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:20:00.959938049 CET	443	50650	142.251.16.157	192.168.2.4
Mar 28, 2024 14:20:00.960304976 CET	443	50650	142.251.16.157	192.168.2.4
Mar 28, 2024 14:20:00.960652113 CET	50650	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:20:00.960726023 CET	443	50650	142.251.16.157	192.168.2.4
Mar 28, 2024 14:20:00.960727930 CET	50650	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:20:00.963179111 CET	443	50651	172.253.122.113	192.168.2.4
Mar 28, 2024 14:20:00.963452101 CET	50651	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:20:00.963460922 CET	443	50651	172.253.122.113	192.168.2.4
Mar 28, 2024 14:20:00.963870049 CET	443	50651	172.253.122.113	192.168.2.4
Mar 28, 2024 14:20:00.964432955 CET	50651	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:20:00.964432955 CET	50651	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:20:00.964448929 CET	443	50651	172.253.122.113	192.168.2.4
Mar 28, 2024 14:20:00.964504004 CET	443	50651	172.253.122.113	192.168.2.4
Mar 28, 2024 14:20:00.967650890 CET	443	50652	63.140.39.65	192.168.2.4
Mar 28, 2024 14:20:00.967936993 CET	50652	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:20:00.967947006 CET	443	50652	63.140.39.65	192.168.2.4
Mar 28, 2024 14:20:00.968281031 CET	443	50652	63.140.39.65	192.168.2.4
Mar 28, 2024 14:20:00.968682051 CET	50652	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:20:00.968682051 CET	50652	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:20:00.968699932 CET	443	50652	63.140.39.65	192.168.2.4
Mar 28, 2024 14:20:00.968753099 CET	443	50652	63.140.39.65	192.168.2.4
Mar 28, 2024 14:20:01.008229017 CET	443	50650	142.251.16.157	192.168.2.4
Mar 28, 2024 14:20:01.027368069 CET	443	50656	44.195.11.1	192.168.2.4
Mar 28, 2024 14:20:01.027580976 CET	50656	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:20:01.027586937 CET	443	50656	44.195.11.1	192.168.2.4
Mar 28, 2024 14:20:01.027870893 CET	443	50656	44.195.11.1	192.168.2.4
Mar 28, 2024 14:20:01.028316021 CET	50656	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:20:01.028367996 CET	443	50656	44.195.11.1	192.168.2.4
Mar 28, 2024 14:20:01.030041933 CET	50656	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:20:01.075447083 CET	50652	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:20:01.076004028 CET	50650	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:20:01.076040030 CET	50651	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:20:01.076236010 CET	443	50656	44.195.11.1	192.168.2.4
Mar 28, 2024 14:20:01.084203005 CET	443	50657	23.23.167.174	192.168.2.4
Mar 28, 2024 14:20:01.084506989 CET	50657	443	192.168.2.4	23.23.167.174
Mar 28, 2024 14:20:01.084517002 CET	443	50657	23.23.167.174	192.168.2.4
Mar 28, 2024 14:20:01.085639000 CET	443	50657	23.23.167.174	192.168.2.4
Mar 28, 2024 14:20:01.085731983 CET	50657	443	192.168.2.4	23.23.167.174
Mar 28, 2024 14:20:01.086005926 CET	50657	443	192.168.2.4	23.23.167.174
Mar 28, 2024 14:20:01.086081982 CET	443	50657	23.23.167.174	192.168.2.4
Mar 28, 2024 14:20:01.086129904 CET	50657	443	192.168.2.4	23.23.167.174
Mar 28, 2024 14:20:01.092761993 CET	443	50650	142.251.16.157	192.168.2.4
Mar 28, 2024 14:20:01.092829943 CET	443	50650	142.251.16.157	192.168.2.4
Mar 28, 2024 14:20:01.094041109 CET	50650	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:20:01.094055891 CET	443	50650	142.251.16.157	192.168.2.4
Mar 28, 2024 14:20:01.094089985 CET	50650	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:20:01.094331980 CET	50650	443	192.168.2.4	142.251.16.157
Mar 28, 2024 14:20:01.094773054 CET	50660	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:20:01.094786882 CET	443	50660	172.253.62.105	192.168.2.4
Mar 28, 2024 14:20:01.094926119 CET	50660	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:20:01.095112085 CET	50660	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:20:01.095119953 CET	443	50660	172.253.62.105	192.168.2.4
Mar 28, 2024 14:20:01.099920034 CET	443	50659	69.147.92.11	192.168.2.4
Mar 28, 2024 14:20:01.100131989 CET	50659	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:20:01.100143909 CET	443	50659	69.147.92.11	192.168.2.4
Mar 28, 2024 14:20:01.100694895 CET	443	50659	69.147.92.11	192.168.2.4
Mar 28, 2024 14:20:01.101083040 CET	50659	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:20:01.101083040 CET	50659	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:20:01.101140022 CET	443	50659	69.147.92.11	192.168.2.4
Mar 28, 2024 14:20:01.132231951 CET	443	50657	23.23.167.174	192.168.2.4
Mar 28, 2024 14:20:01.182616949 CET	50657	443	192.168.2.4	23.23.167.174
Mar 28, 2024 14:20:01.182619095 CET	50659	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:20:01.182625055 CET	443	50657	23.23.167.174	192.168.2.4
Mar 28, 2024 14:20:01.216353893 CET	443	50652	63.140.39.65	192.168.2.4
Mar 28, 2024 14:20:01.216948032 CET	443	50652	63.140.39.65	192.168.2.4
Mar 28, 2024 14:20:01.217356920 CET	50652	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:20:01.217618942 CET	50652	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:20:01.217631102 CET	443	50652	63.140.39.65	192.168.2.4
Mar 28, 2024 14:20:01.222659111 CET	443	50656	44.195.11.1	192.168.2.4
Mar 28, 2024 14:20:01.222680092 CET	443	50656	44.195.11.1	192.168.2.4
Mar 28, 2024 14:20:01.222726107 CET	443	50656	44.195.11.1	192.168.2.4
Mar 28, 2024 14:20:01.222747087 CET	50656	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:20:01.222858906 CET	50656	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:20:01.226038933 CET	50656	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:20:01.226048946 CET	443	50656	44.195.11.1	192.168.2.4
Mar 28, 2024 14:20:01.228179932 CET	50661	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:20:01.228194952 CET	443	50661	63.140.39.65	192.168.2.4
Mar 28, 2024 14:20:01.230293989 CET	50661	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:20:01.230293989 CET	50661	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:20:01.230314970 CET	443	50661	63.140.39.65	192.168.2.4
Mar 28, 2024 14:20:01.234217882 CET	50662	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:20:01.234237909 CET	443	50662	63.140.38.132	192.168.2.4
Mar 28, 2024 14:20:01.234366894 CET	50662	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:20:01.234508991 CET	50662	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:20:01.234519958 CET	443	50662	63.140.38.132	192.168.2.4
Mar 28, 2024 14:20:01.261302948 CET	443	50651	172.253.122.113	192.168.2.4
Mar 28, 2024 14:20:01.261380911 CET	443	50651	172.253.122.113	192.168.2.4
Mar 28, 2024 14:20:01.261533976 CET	50651	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:20:01.261818886 CET	50651	443	192.168.2.4	172.253.122.113
Mar 28, 2024 14:20:01.261822939 CET	443	50651	172.253.122.113	192.168.2.4
Mar 28, 2024 14:20:01.263525963 CET	50663	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:20:01.263551950 CET	443	50663	172.253.63.139	192.168.2.4
Mar 28, 2024 14:20:01.263650894 CET	50663	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:20:01.266052961 CET	50663	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:20:01.266062021 CET	443	50663	172.253.63.139	192.168.2.4
Mar 28, 2024 14:20:01.274318933 CET	443	50657	23.23.167.174	192.168.2.4
Mar 28, 2024 14:20:01.274328947 CET	443	50657	23.23.167.174	192.168.2.4
Mar 28, 2024 14:20:01.274350882 CET	443	50657	23.23.167.174	192.168.2.4
Mar 28, 2024 14:20:01.274377108 CET	50657	443	192.168.2.4	23.23.167.174
Mar 28, 2024 14:20:01.274384975 CET	443	50657	23.23.167.174	192.168.2.4
Mar 28, 2024 14:20:01.274394989 CET	443	50657	23.23.167.174	192.168.2.4
Mar 28, 2024 14:20:01.274409056 CET	50657	443	192.168.2.4	23.23.167.174
Mar 28, 2024 14:20:01.274454117 CET	50657	443	192.168.2.4	23.23.167.174
Mar 28, 2024 14:20:01.277784109 CET	50657	443	192.168.2.4	23.23.167.174
Mar 28, 2024 14:20:01.277805090 CET	443	50657	23.23.167.174	192.168.2.4
Mar 28, 2024 14:20:01.286847115 CET	443	50659	69.147.92.11	192.168.2.4
Mar 28, 2024 14:20:01.286957026 CET	443	50659	69.147.92.11	192.168.2.4
Mar 28, 2024 14:20:01.287005901 CET	50659	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:20:01.296734095 CET	50659	443	192.168.2.4	69.147.92.11
Mar 28, 2024 14:20:01.296739101 CET	443	50659	69.147.92.11	192.168.2.4
Mar 28, 2024 14:20:01.306207895 CET	443	50660	172.253.62.105	192.168.2.4
Mar 28, 2024 14:20:01.320091963 CET	50660	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:20:01.320103884 CET	443	50660	172.253.62.105	192.168.2.4
Mar 28, 2024 14:20:01.320400000 CET	443	50660	172.253.62.105	192.168.2.4
Mar 28, 2024 14:20:01.337647915 CET	50660	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:20:01.337706089 CET	443	50660	172.253.62.105	192.168.2.4
Mar 28, 2024 14:20:01.337832928 CET	50660	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:20:01.380242109 CET	443	50660	172.253.62.105	192.168.2.4
Mar 28, 2024 14:20:01.393232107 CET	50664	443	192.168.2.4	44.219.57.96
Mar 28, 2024 14:20:01.393250942 CET	443	50664	44.219.57.96	192.168.2.4
Mar 28, 2024 14:20:01.393345118 CET	50664	443	192.168.2.4	44.219.57.96
Mar 28, 2024 14:20:01.393769979 CET	50664	443	192.168.2.4	44.219.57.96
Mar 28, 2024 14:20:01.393781900 CET	443	50664	44.219.57.96	192.168.2.4
Mar 28, 2024 14:20:01.426042080 CET	443	50661	63.140.39.65	192.168.2.4
Mar 28, 2024 14:20:01.426456928 CET	50661	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:20:01.426466942 CET	443	50661	63.140.39.65	192.168.2.4
Mar 28, 2024 14:20:01.426794052 CET	443	50661	63.140.39.65	192.168.2.4
Mar 28, 2024 14:20:01.427879095 CET	50661	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:20:01.427942038 CET	443	50661	63.140.39.65	192.168.2.4
Mar 28, 2024 14:20:01.428067923 CET	50661	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:20:01.428067923 CET	50661	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:20:01.428101063 CET	443	50661	63.140.39.65	192.168.2.4
Mar 28, 2024 14:20:01.430039883 CET	443	50662	63.140.38.132	192.168.2.4
Mar 28, 2024 14:20:01.430422068 CET	50662	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:20:01.430433989 CET	443	50662	63.140.38.132	192.168.2.4
Mar 28, 2024 14:20:01.430718899 CET	443	50662	63.140.38.132	192.168.2.4
Mar 28, 2024 14:20:01.431063890 CET	50662	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:20:01.431119919 CET	443	50662	63.140.38.132	192.168.2.4
Mar 28, 2024 14:20:01.431215048 CET	50662	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:20:01.473526955 CET	443	50663	172.253.63.139	192.168.2.4
Mar 28, 2024 14:20:01.473808050 CET	50663	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:20:01.473819971 CET	443	50663	172.253.63.139	192.168.2.4
Mar 28, 2024 14:20:01.474216938 CET	443	50663	172.253.63.139	192.168.2.4
Mar 28, 2024 14:20:01.474558115 CET	50663	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:20:01.474606037 CET	443	50663	172.253.63.139	192.168.2.4
Mar 28, 2024 14:20:01.474781990 CET	50663	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:20:01.476228952 CET	443	50662	63.140.38.132	192.168.2.4
Mar 28, 2024 14:20:01.516236067 CET	443	50663	172.253.63.139	192.168.2.4
Mar 28, 2024 14:20:01.530483007 CET	50665	443	192.168.2.4	18.165.98.81
Mar 28, 2024 14:20:01.530508995 CET	443	50665	18.165.98.81	192.168.2.4
Mar 28, 2024 14:20:01.530706882 CET	50665	443	192.168.2.4	18.165.98.81
Mar 28, 2024 14:20:01.530905008 CET	50665	443	192.168.2.4	18.165.98.81
Mar 28, 2024 14:20:01.530916929 CET	443	50665	18.165.98.81	192.168.2.4
Mar 28, 2024 14:20:01.567416906 CET	443	50660	172.253.62.105	192.168.2.4
Mar 28, 2024 14:20:01.567498922 CET	443	50660	172.253.62.105	192.168.2.4
Mar 28, 2024 14:20:01.567578077 CET	50660	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:20:01.568490028 CET	50660	443	192.168.2.4	172.253.62.105
Mar 28, 2024 14:20:01.568501949 CET	443	50660	172.253.62.105	192.168.2.4
Mar 28, 2024 14:20:01.573955059 CET	50666	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:20:01.573968887 CET	443	50666	172.253.115.104	192.168.2.4
Mar 28, 2024 14:20:01.574117899 CET	50666	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:20:01.574367046 CET	50666	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:20:01.574378967 CET	443	50666	172.253.115.104	192.168.2.4
Mar 28, 2024 14:20:01.595441103 CET	443	50664	44.219.57.96	192.168.2.4
Mar 28, 2024 14:20:01.595671892 CET	50664	443	192.168.2.4	44.219.57.96
Mar 28, 2024 14:20:01.595686913 CET	443	50664	44.219.57.96	192.168.2.4
Mar 28, 2024 14:20:01.596055984 CET	443	50664	44.219.57.96	192.168.2.4
Mar 28, 2024 14:20:01.596353054 CET	50664	443	192.168.2.4	44.219.57.96
Mar 28, 2024 14:20:01.596415043 CET	443	50664	44.219.57.96	192.168.2.4
Mar 28, 2024 14:20:01.596465111 CET	50664	443	192.168.2.4	44.219.57.96
Mar 28, 2024 14:20:01.626432896 CET	443	50661	63.140.39.65	192.168.2.4
Mar 28, 2024 14:20:01.626960039 CET	443	50661	63.140.39.65	192.168.2.4
Mar 28, 2024 14:20:01.627134085 CET	50661	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:20:01.627363920 CET	50661	443	192.168.2.4	63.140.39.65
Mar 28, 2024 14:20:01.627371073 CET	443	50661	63.140.39.65	192.168.2.4
Mar 28, 2024 14:20:01.631443977 CET	50667	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:20:01.631455898 CET	443	50667	63.140.38.132	192.168.2.4
Mar 28, 2024 14:20:01.631506920 CET	50667	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:20:01.631817102 CET	50667	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:20:01.631829977 CET	443	50667	63.140.38.132	192.168.2.4
Mar 28, 2024 14:20:01.636364937 CET	50668	443	192.168.2.4	35.244.154.8
Mar 28, 2024 14:20:01.636387110 CET	443	50668	35.244.154.8	192.168.2.4
Mar 28, 2024 14:20:01.636462927 CET	50668	443	192.168.2.4	35.244.154.8
Mar 28, 2024 14:20:01.636656046 CET	50668	443	192.168.2.4	35.244.154.8
Mar 28, 2024 14:20:01.636666059 CET	443	50668	35.244.154.8	192.168.2.4
Mar 28, 2024 14:20:01.644233942 CET	443	50664	44.219.57.96	192.168.2.4
Mar 28, 2024 14:20:01.668333054 CET	443	50662	63.140.38.132	192.168.2.4
Mar 28, 2024 14:20:01.668379068 CET	443	50662	63.140.38.132	192.168.2.4
Mar 28, 2024 14:20:01.668462992 CET	50662	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:20:01.668638945 CET	50662	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:20:01.668649912 CET	443	50662	63.140.38.132	192.168.2.4
Mar 28, 2024 14:20:01.668661118 CET	50662	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:20:01.668688059 CET	50662	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:20:01.696069956 CET	443	50663	172.253.63.139	192.168.2.4
Mar 28, 2024 14:20:01.696139097 CET	443	50663	172.253.63.139	192.168.2.4
Mar 28, 2024 14:20:01.696620941 CET	50663	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:20:01.722203970 CET	50663	443	192.168.2.4	172.253.63.139
Mar 28, 2024 14:20:01.722222090 CET	443	50663	172.253.63.139	192.168.2.4
Mar 28, 2024 14:20:01.738301039 CET	443	50665	18.165.98.81	192.168.2.4
Mar 28, 2024 14:20:01.738502979 CET	50665	443	192.168.2.4	18.165.98.81
Mar 28, 2024 14:20:01.738521099 CET	443	50665	18.165.98.81	192.168.2.4
Mar 28, 2024 14:20:01.739506006 CET	443	50665	18.165.98.81	192.168.2.4
Mar 28, 2024 14:20:01.739557981 CET	50665	443	192.168.2.4	18.165.98.81
Mar 28, 2024 14:20:01.740509033 CET	50665	443	192.168.2.4	18.165.98.81
Mar 28, 2024 14:20:01.740566015 CET	443	50665	18.165.98.81	192.168.2.4
Mar 28, 2024 14:20:01.740669012 CET	50665	443	192.168.2.4	18.165.98.81
Mar 28, 2024 14:20:01.740677118 CET	443	50665	18.165.98.81	192.168.2.4
Mar 28, 2024 14:20:01.779136896 CET	443	50666	172.253.115.104	192.168.2.4
Mar 28, 2024 14:20:01.779527903 CET	50666	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:20:01.779539108 CET	443	50666	172.253.115.104	192.168.2.4
Mar 28, 2024 14:20:01.779838085 CET	443	50666	172.253.115.104	192.168.2.4
Mar 28, 2024 14:20:01.780167103 CET	50666	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:20:01.780226946 CET	443	50666	172.253.115.104	192.168.2.4
Mar 28, 2024 14:20:01.780317068 CET	50666	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:20:01.789998055 CET	443	50664	44.219.57.96	192.168.2.4
Mar 28, 2024 14:20:01.790066957 CET	443	50664	44.219.57.96	192.168.2.4
Mar 28, 2024 14:20:01.790118933 CET	50664	443	192.168.2.4	44.219.57.96
Mar 28, 2024 14:20:01.790618896 CET	50664	443	192.168.2.4	44.219.57.96
Mar 28, 2024 14:20:01.790627003 CET	443	50664	44.219.57.96	192.168.2.4
Mar 28, 2024 14:20:01.790955067 CET	50665	443	192.168.2.4	18.165.98.81
Mar 28, 2024 14:20:01.794588089 CET	50672	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:20:01.794614077 CET	443	50672	44.195.11.1	192.168.2.4
Mar 28, 2024 14:20:01.794754028 CET	50672	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:20:01.795104980 CET	50672	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:20:01.795118093 CET	443	50672	44.195.11.1	192.168.2.4
Mar 28, 2024 14:20:01.824233055 CET	443	50666	172.253.115.104	192.168.2.4
Mar 28, 2024 14:20:01.827754021 CET	443	50667	63.140.38.132	192.168.2.4
Mar 28, 2024 14:20:01.827980042 CET	50667	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:20:01.827987909 CET	443	50667	63.140.38.132	192.168.2.4
Mar 28, 2024 14:20:01.828320026 CET	443	50667	63.140.38.132	192.168.2.4
Mar 28, 2024 14:20:01.828641891 CET	50667	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:20:01.828706026 CET	443	50667	63.140.38.132	192.168.2.4
Mar 28, 2024 14:20:01.828771114 CET	50667	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:20:01.842897892 CET	443	50668	35.244.154.8	192.168.2.4
Mar 28, 2024 14:20:01.843102932 CET	50668	443	192.168.2.4	35.244.154.8
Mar 28, 2024 14:20:01.843116999 CET	443	50668	35.244.154.8	192.168.2.4
Mar 28, 2024 14:20:01.844151020 CET	443	50668	35.244.154.8	192.168.2.4
Mar 28, 2024 14:20:01.844229937 CET	50668	443	192.168.2.4	35.244.154.8
Mar 28, 2024 14:20:01.845619917 CET	50668	443	192.168.2.4	35.244.154.8
Mar 28, 2024 14:20:01.845671892 CET	443	50668	35.244.154.8	192.168.2.4
Mar 28, 2024 14:20:01.845964909 CET	50668	443	192.168.2.4	35.244.154.8
Mar 28, 2024 14:20:01.845969915 CET	443	50668	35.244.154.8	192.168.2.4
Mar 28, 2024 14:20:01.876235008 CET	443	50667	63.140.38.132	192.168.2.4
Mar 28, 2024 14:20:01.876550913 CET	50673	443	192.168.2.4	172.253.63.154
Mar 28, 2024 14:20:01.876564980 CET	443	50673	172.253.63.154	192.168.2.4
Mar 28, 2024 14:20:01.876616001 CET	50673	443	192.168.2.4	172.253.63.154
Mar 28, 2024 14:20:01.877006054 CET	50673	443	192.168.2.4	172.253.63.154
Mar 28, 2024 14:20:01.877017975 CET	443	50673	172.253.63.154	192.168.2.4
Mar 28, 2024 14:20:01.886956930 CET	50668	443	192.168.2.4	35.244.154.8
Mar 28, 2024 14:20:01.905133963 CET	50675	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:20:01.905162096 CET	443	50675	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:01.905236006 CET	50675	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:20:01.905653000 CET	50675	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:20:01.905666113 CET	443	50675	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:01.920253038 CET	443	50665	18.165.98.81	192.168.2.4
Mar 28, 2024 14:20:01.920389891 CET	443	50665	18.165.98.81	192.168.2.4
Mar 28, 2024 14:20:01.920449972 CET	50665	443	192.168.2.4	18.165.98.81
Mar 28, 2024 14:20:01.927650928 CET	50665	443	192.168.2.4	18.165.98.81
Mar 28, 2024 14:20:01.927666903 CET	443	50665	18.165.98.81	192.168.2.4
Mar 28, 2024 14:20:02.000287056 CET	443	50672	44.195.11.1	192.168.2.4
Mar 28, 2024 14:20:02.000504017 CET	50672	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:20:02.000516891 CET	443	50672	44.195.11.1	192.168.2.4
Mar 28, 2024 14:20:02.000905037 CET	443	50672	44.195.11.1	192.168.2.4
Mar 28, 2024 14:20:02.001241922 CET	50672	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:20:02.001306057 CET	443	50672	44.195.11.1	192.168.2.4
Mar 28, 2024 14:20:02.001394987 CET	50672	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:20:02.025469065 CET	50678	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.025501966 CET	443	50678	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.025644064 CET	50678	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.025824070 CET	50678	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.025836945 CET	443	50678	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.044230938 CET	443	50672	44.195.11.1	192.168.2.4
Mar 28, 2024 14:20:02.056421041 CET	443	50666	172.253.115.104	192.168.2.4
Mar 28, 2024 14:20:02.056489944 CET	443	50666	172.253.115.104	192.168.2.4
Mar 28, 2024 14:20:02.056755066 CET	50666	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:20:02.056822062 CET	50666	443	192.168.2.4	172.253.115.104
Mar 28, 2024 14:20:02.056832075 CET	443	50666	172.253.115.104	192.168.2.4
Mar 28, 2024 14:20:02.061889887 CET	443	50667	63.140.38.132	192.168.2.4
Mar 28, 2024 14:20:02.061954021 CET	443	50667	63.140.38.132	192.168.2.4
Mar 28, 2024 14:20:02.062079906 CET	50667	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:20:02.062963009 CET	50667	443	192.168.2.4	63.140.38.132
Mar 28, 2024 14:20:02.062967062 CET	443	50667	63.140.38.132	192.168.2.4
Mar 28, 2024 14:20:02.075895071 CET	443	50668	35.244.154.8	192.168.2.4
Mar 28, 2024 14:20:02.075969934 CET	443	50668	35.244.154.8	192.168.2.4
Mar 28, 2024 14:20:02.076025009 CET	50668	443	192.168.2.4	35.244.154.8
Mar 28, 2024 14:20:02.095200062 CET	50668	443	192.168.2.4	35.244.154.8
Mar 28, 2024 14:20:02.095217943 CET	443	50668	35.244.154.8	192.168.2.4
Mar 28, 2024 14:20:02.095247984 CET	50668	443	192.168.2.4	35.244.154.8
Mar 28, 2024 14:20:02.095268011 CET	50668	443	192.168.2.4	35.244.154.8
Mar 28, 2024 14:20:02.095901012 CET	50679	443	192.168.2.4	35.244.154.8
Mar 28, 2024 14:20:02.095916033 CET	443	50679	35.244.154.8	192.168.2.4
Mar 28, 2024 14:20:02.096060038 CET	50679	443	192.168.2.4	35.244.154.8
Mar 28, 2024 14:20:02.096321106 CET	50679	443	192.168.2.4	35.244.154.8
Mar 28, 2024 14:20:02.096333027 CET	443	50679	35.244.154.8	192.168.2.4
Mar 28, 2024 14:20:02.133145094 CET	443	50673	172.253.63.154	192.168.2.4
Mar 28, 2024 14:20:02.133347988 CET	50673	443	192.168.2.4	172.253.63.154
Mar 28, 2024 14:20:02.133363962 CET	443	50673	172.253.63.154	192.168.2.4
Mar 28, 2024 14:20:02.134390116 CET	443	50673	172.253.63.154	192.168.2.4
Mar 28, 2024 14:20:02.134449005 CET	50673	443	192.168.2.4	172.253.63.154
Mar 28, 2024 14:20:02.134800911 CET	50673	443	192.168.2.4	172.253.63.154
Mar 28, 2024 14:20:02.134860992 CET	443	50673	172.253.63.154	192.168.2.4
Mar 28, 2024 14:20:02.134973049 CET	50673	443	192.168.2.4	172.253.63.154
Mar 28, 2024 14:20:02.134980917 CET	443	50673	172.253.63.154	192.168.2.4
Mar 28, 2024 14:20:02.153131962 CET	50681	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.153151035 CET	443	50681	34.200.65.202	192.168.2.4
Mar 28, 2024 14:20:02.153244972 CET	50681	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.153419018 CET	50681	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.153429031 CET	443	50681	34.200.65.202	192.168.2.4
Mar 28, 2024 14:20:02.176978111 CET	50673	443	192.168.2.4	172.253.63.154
Mar 28, 2024 14:20:02.196139097 CET	443	50672	44.195.11.1	192.168.2.4
Mar 28, 2024 14:20:02.196213961 CET	443	50672	44.195.11.1	192.168.2.4
Mar 28, 2024 14:20:02.196264982 CET	50672	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:20:02.196618080 CET	50672	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:20:02.196628094 CET	443	50672	44.195.11.1	192.168.2.4
Mar 28, 2024 14:20:02.196635008 CET	50672	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:20:02.196664095 CET	50672	443	192.168.2.4	44.195.11.1
Mar 28, 2024 14:20:02.211848974 CET	443	50675	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:02.212084055 CET	50675	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:20:02.212100029 CET	443	50675	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:02.212379932 CET	443	50675	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:02.212753057 CET	50675	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:20:02.212814093 CET	443	50675	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:02.212932110 CET	50675	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:20:02.221630096 CET	443	50678	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.221817970 CET	50678	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.221828938 CET	443	50678	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.222687960 CET	443	50678	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.222748041 CET	50678	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.223054886 CET	50678	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.223109961 CET	443	50678	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.223159075 CET	50678	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.256246090 CET	443	50675	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:02.264240026 CET	443	50678	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.280491114 CET	50678	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.280497074 CET	443	50678	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.310570955 CET	443	50675	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:02.310592890 CET	443	50675	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:02.310640097 CET	443	50675	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:02.310646057 CET	50675	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:20:02.310682058 CET	50675	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:20:02.312762976 CET	50675	443	192.168.2.4	44.213.50.195
Mar 28, 2024 14:20:02.312771082 CET	443	50675	44.213.50.195	192.168.2.4
Mar 28, 2024 14:20:02.317416906 CET	50683	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:02.317433119 CET	443	50683	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:02.317622900 CET	50683	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:02.317845106 CET	50683	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:02.317857027 CET	443	50683	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:02.329632044 CET	443	50673	172.253.63.154	192.168.2.4
Mar 28, 2024 14:20:02.329708099 CET	443	50673	172.253.63.154	192.168.2.4
Mar 28, 2024 14:20:02.329756975 CET	50673	443	192.168.2.4	172.253.63.154
Mar 28, 2024 14:20:02.329993963 CET	50673	443	192.168.2.4	172.253.63.154
Mar 28, 2024 14:20:02.330003023 CET	443	50673	172.253.63.154	192.168.2.4
Mar 28, 2024 14:20:02.330025911 CET	50673	443	192.168.2.4	172.253.63.154
Mar 28, 2024 14:20:02.330044985 CET	50673	443	192.168.2.4	172.253.63.154
Mar 28, 2024 14:20:02.331209898 CET	50684	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.331218958 CET	443	50684	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.331334114 CET	50684	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.331507921 CET	50684	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.331521988 CET	443	50684	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.339624882 CET	443	50679	35.244.154.8	192.168.2.4
Mar 28, 2024 14:20:02.339854956 CET	50679	443	192.168.2.4	35.244.154.8
Mar 28, 2024 14:20:02.339862108 CET	443	50679	35.244.154.8	192.168.2.4
Mar 28, 2024 14:20:02.340137959 CET	443	50679	35.244.154.8	192.168.2.4
Mar 28, 2024 14:20:02.340408087 CET	50679	443	192.168.2.4	35.244.154.8
Mar 28, 2024 14:20:02.340466976 CET	443	50679	35.244.154.8	192.168.2.4
Mar 28, 2024 14:20:02.340496063 CET	50679	443	192.168.2.4	35.244.154.8
Mar 28, 2024 14:20:02.353296995 CET	443	50681	34.200.65.202	192.168.2.4
Mar 28, 2024 14:20:02.353466034 CET	50681	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.353480101 CET	443	50681	34.200.65.202	192.168.2.4
Mar 28, 2024 14:20:02.354518890 CET	443	50681	34.200.65.202	192.168.2.4
Mar 28, 2024 14:20:02.354577065 CET	50681	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.354587078 CET	443	50681	34.200.65.202	192.168.2.4
Mar 28, 2024 14:20:02.354628086 CET	50681	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.355540037 CET	50681	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.355597019 CET	443	50681	34.200.65.202	192.168.2.4
Mar 28, 2024 14:20:02.355674028 CET	50681	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.380291939 CET	50678	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.383146048 CET	50679	443	192.168.2.4	35.244.154.8
Mar 28, 2024 14:20:02.383152962 CET	443	50679	35.244.154.8	192.168.2.4
Mar 28, 2024 14:20:02.392791986 CET	50685	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.392810106 CET	443	50685	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.392864943 CET	50685	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.393043995 CET	50685	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.393049955 CET	443	50685	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.398602009 CET	50681	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.398607969 CET	443	50681	34.200.65.202	192.168.2.4
Mar 28, 2024 14:20:02.414994001 CET	443	50678	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.415050983 CET	443	50678	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.415299892 CET	50678	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.416913033 CET	50678	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.416924953 CET	443	50678	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.446775913 CET	50681	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.510107994 CET	443	50683	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:02.510312080 CET	50683	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:02.510319948 CET	443	50683	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:02.510710955 CET	443	50683	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:02.511055946 CET	50683	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:02.511112928 CET	443	50683	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:02.511172056 CET	50683	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:02.528974056 CET	443	50684	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.529231071 CET	50684	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.529239893 CET	443	50684	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.529530048 CET	443	50684	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.529953957 CET	50684	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.530015945 CET	443	50684	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.530126095 CET	50684	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.534687996 CET	50687	443	192.168.2.4	34.206.4.244
Mar 28, 2024 14:20:02.534708023 CET	443	50687	34.206.4.244	192.168.2.4
Mar 28, 2024 14:20:02.534862041 CET	50687	443	192.168.2.4	34.206.4.244
Mar 28, 2024 14:20:02.535043001 CET	50687	443	192.168.2.4	34.206.4.244
Mar 28, 2024 14:20:02.535048008 CET	443	50687	34.206.4.244	192.168.2.4
Mar 28, 2024 14:20:02.537154913 CET	443	50681	34.200.65.202	192.168.2.4
Mar 28, 2024 14:20:02.537237883 CET	443	50681	34.200.65.202	192.168.2.4
Mar 28, 2024 14:20:02.537287951 CET	50681	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.539592981 CET	50681	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.539601088 CET	443	50681	34.200.65.202	192.168.2.4
Mar 28, 2024 14:20:02.539622068 CET	50681	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.539650917 CET	50681	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.550090075 CET	50689	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.550103903 CET	443	50689	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.550405025 CET	50689	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.550661087 CET	50689	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.550669909 CET	443	50689	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.555552959 CET	50683	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:02.555567026 CET	443	50683	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:02.571679115 CET	50684	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.571685076 CET	443	50684	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.576812029 CET	443	50679	35.244.154.8	192.168.2.4
Mar 28, 2024 14:20:02.576950073 CET	443	50679	35.244.154.8	192.168.2.4
Mar 28, 2024 14:20:02.576997042 CET	50679	443	192.168.2.4	35.244.154.8
Mar 28, 2024 14:20:02.591295958 CET	443	50685	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.591480970 CET	50685	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.591499090 CET	443	50685	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.591821909 CET	443	50685	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.592154026 CET	50685	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.592211962 CET	443	50685	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.592266083 CET	50685	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.599016905 CET	50679	443	192.168.2.4	35.244.154.8
Mar 28, 2024 14:20:02.599023104 CET	443	50679	35.244.154.8	192.168.2.4
Mar 28, 2024 14:20:02.599903107 CET	50691	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.599915981 CET	443	50691	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.599972010 CET	50691	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.600408077 CET	50691	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.600418091 CET	443	50691	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.639081001 CET	50693	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.639097929 CET	443	50693	34.200.65.202	192.168.2.4
Mar 28, 2024 14:20:02.639151096 CET	50693	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.639347076 CET	50693	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.639358997 CET	443	50693	34.200.65.202	192.168.2.4
Mar 28, 2024 14:20:02.640235901 CET	443	50685	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.643063068 CET	50685	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.701127052 CET	443	50683	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:02.701149940 CET	443	50683	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:02.701206923 CET	50683	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:02.701215029 CET	443	50683	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:02.701225042 CET	443	50683	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:02.701261044 CET	50683	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:02.703905106 CET	50683	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:02.703912973 CET	443	50683	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:02.719703913 CET	443	50684	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.719753027 CET	443	50684	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.719818115 CET	50684	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.727243900 CET	50684	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.727257967 CET	443	50684	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.733483076 CET	443	50687	34.206.4.244	192.168.2.4
Mar 28, 2024 14:20:02.748404026 CET	50687	443	192.168.2.4	34.206.4.244
Mar 28, 2024 14:20:02.748425961 CET	443	50687	34.206.4.244	192.168.2.4
Mar 28, 2024 14:20:02.748842001 CET	443	50687	34.206.4.244	192.168.2.4
Mar 28, 2024 14:20:02.749130011 CET	50687	443	192.168.2.4	34.206.4.244
Mar 28, 2024 14:20:02.749202013 CET	443	50687	34.206.4.244	192.168.2.4
Mar 28, 2024 14:20:02.749252081 CET	50687	443	192.168.2.4	34.206.4.244
Mar 28, 2024 14:20:02.751430988 CET	443	50689	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.751789093 CET	50689	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.751796961 CET	443	50689	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.752135992 CET	443	50689	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.752605915 CET	50689	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.752669096 CET	443	50689	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.752726078 CET	50689	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.759968042 CET	50695	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.759985924 CET	443	50695	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.760093927 CET	50695	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.760287046 CET	50695	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.760302067 CET	443	50695	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.783849955 CET	443	50685	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.783912897 CET	443	50685	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.784032106 CET	50685	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.785063982 CET	50685	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.785073996 CET	443	50685	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.789743900 CET	50696	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.789758921 CET	443	50696	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.789839983 CET	50696	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.790064096 CET	50696	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.790074110 CET	443	50696	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.796235085 CET	443	50687	34.206.4.244	192.168.2.4
Mar 28, 2024 14:20:02.796400070 CET	443	50691	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.796631098 CET	50691	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.796638012 CET	443	50691	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.796932936 CET	443	50691	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.797272921 CET	50691	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.797324896 CET	443	50691	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.797431946 CET	50691	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.800237894 CET	443	50689	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.828965902 CET	50699	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:20:02.828977108 CET	443	50699	146.75.29.230	192.168.2.4
Mar 28, 2024 14:20:02.829055071 CET	50699	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:20:02.829370975 CET	50699	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:20:02.829381943 CET	443	50699	146.75.29.230	192.168.2.4
Mar 28, 2024 14:20:02.833924055 CET	443	50693	34.200.65.202	192.168.2.4
Mar 28, 2024 14:20:02.834115028 CET	50693	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.834121943 CET	443	50693	34.200.65.202	192.168.2.4
Mar 28, 2024 14:20:02.834974051 CET	443	50693	34.200.65.202	192.168.2.4
Mar 28, 2024 14:20:02.835030079 CET	50693	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.835037947 CET	443	50693	34.200.65.202	192.168.2.4
Mar 28, 2024 14:20:02.835081100 CET	50693	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.836232901 CET	50693	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.836285114 CET	443	50693	34.200.65.202	192.168.2.4
Mar 28, 2024 14:20:02.836390018 CET	50693	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.836395025 CET	443	50693	34.200.65.202	192.168.2.4
Mar 28, 2024 14:20:02.840238094 CET	443	50691	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.891608953 CET	50693	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:02.930402040 CET	443	50687	34.206.4.244	192.168.2.4
Mar 28, 2024 14:20:02.930418015 CET	443	50687	34.206.4.244	192.168.2.4
Mar 28, 2024 14:20:02.930463076 CET	50687	443	192.168.2.4	34.206.4.244
Mar 28, 2024 14:20:02.930483103 CET	443	50687	34.206.4.244	192.168.2.4
Mar 28, 2024 14:20:02.930494070 CET	443	50687	34.206.4.244	192.168.2.4
Mar 28, 2024 14:20:02.930531025 CET	50687	443	192.168.2.4	34.206.4.244
Mar 28, 2024 14:20:02.931612968 CET	50687	443	192.168.2.4	34.206.4.244
Mar 28, 2024 14:20:02.931622028 CET	443	50687	34.206.4.244	192.168.2.4
Mar 28, 2024 14:20:02.944251060 CET	443	50689	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.944308996 CET	443	50689	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.944350004 CET	50689	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.945395947 CET	50689	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.945404053 CET	443	50689	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.961930037 CET	443	50695	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.963504076 CET	50695	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.963510036 CET	443	50695	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.963912964 CET	443	50695	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.964840889 CET	50695	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.964903116 CET	443	50695	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.965333939 CET	50695	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.987876892 CET	443	50696	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.988065958 CET	443	50691	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.988082886 CET	50696	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.988094091 CET	443	50696	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.988120079 CET	443	50691	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.988183975 CET	50691	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.988401890 CET	443	50696	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.989037991 CET	50691	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:02.989044905 CET	443	50691	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:02.989571095 CET	50696	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.989622116 CET	443	50696	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.990130901 CET	50696	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.993360996 CET	50702	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.993375063 CET	443	50702	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:02.993422985 CET	50702	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.993601084 CET	50702	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:02.993612051 CET	443	50702	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.008223057 CET	443	50695	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.024444103 CET	443	50552	142.251.16.147	192.168.2.4
Mar 28, 2024 14:20:03.024512053 CET	443	50552	142.251.16.147	192.168.2.4
Mar 28, 2024 14:20:03.024635077 CET	50552	443	192.168.2.4	142.251.16.147
Mar 28, 2024 14:20:03.027076006 CET	443	50693	34.200.65.202	192.168.2.4
Mar 28, 2024 14:20:03.027123928 CET	443	50693	34.200.65.202	192.168.2.4
Mar 28, 2024 14:20:03.027225018 CET	50693	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:03.028107882 CET	50693	443	192.168.2.4	34.200.65.202
Mar 28, 2024 14:20:03.028112888 CET	443	50693	34.200.65.202	192.168.2.4
Mar 28, 2024 14:20:03.029927015 CET	443	50699	146.75.29.230	192.168.2.4
Mar 28, 2024 14:20:03.030211926 CET	50699	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:20:03.030220032 CET	443	50699	146.75.29.230	192.168.2.4
Mar 28, 2024 14:20:03.030498028 CET	443	50699	146.75.29.230	192.168.2.4
Mar 28, 2024 14:20:03.030745029 CET	50552	443	192.168.2.4	142.251.16.147
Mar 28, 2024 14:20:03.030756950 CET	443	50552	142.251.16.147	192.168.2.4
Mar 28, 2024 14:20:03.031416893 CET	50704	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:03.031426907 CET	443	50704	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:03.031507969 CET	50704	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:03.031604052 CET	50699	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:20:03.031660080 CET	443	50699	146.75.29.230	192.168.2.4
Mar 28, 2024 14:20:03.031908989 CET	50699	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:20:03.032238007 CET	443	50696	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.032258987 CET	50704	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:03.032269955 CET	443	50704	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:03.039072037 CET	50705	443	192.168.2.4	3.221.137.72
Mar 28, 2024 14:20:03.039098024 CET	443	50705	3.221.137.72	192.168.2.4
Mar 28, 2024 14:20:03.039226055 CET	50705	443	192.168.2.4	3.221.137.72
Mar 28, 2024 14:20:03.039643049 CET	50705	443	192.168.2.4	3.221.137.72
Mar 28, 2024 14:20:03.039653063 CET	443	50705	3.221.137.72	192.168.2.4
Mar 28, 2024 14:20:03.076241016 CET	443	50699	146.75.29.230	192.168.2.4
Mar 28, 2024 14:20:03.150563955 CET	50706	443	192.168.2.4	151.101.65.44
Mar 28, 2024 14:20:03.150589943 CET	443	50706	151.101.65.44	192.168.2.4
Mar 28, 2024 14:20:03.150644064 CET	50706	443	192.168.2.4	151.101.65.44
Mar 28, 2024 14:20:03.150861979 CET	50706	443	192.168.2.4	151.101.65.44
Mar 28, 2024 14:20:03.150873899 CET	443	50706	151.101.65.44	192.168.2.4
Mar 28, 2024 14:20:03.158135891 CET	443	50695	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.158207893 CET	443	50695	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.158262968 CET	50695	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:03.160494089 CET	50695	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:03.160501957 CET	443	50695	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.181169987 CET	443	50696	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.181225061 CET	443	50696	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.181277990 CET	50696	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:03.181926012 CET	50696	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:03.181935072 CET	443	50696	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.191359043 CET	443	50702	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.192408085 CET	50702	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:03.192415953 CET	443	50702	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.192724943 CET	443	50702	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.193275928 CET	50702	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:03.193336010 CET	443	50702	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.193392038 CET	50702	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:03.218904018 CET	443	50699	146.75.29.230	192.168.2.4
Mar 28, 2024 14:20:03.218956947 CET	443	50699	146.75.29.230	192.168.2.4
Mar 28, 2024 14:20:03.219156027 CET	50699	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:20:03.219249010 CET	50699	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:20:03.219254017 CET	443	50699	146.75.29.230	192.168.2.4
Mar 28, 2024 14:20:03.219264984 CET	50699	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:20:03.219296932 CET	50699	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:20:03.226811886 CET	50707	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:03.226823092 CET	443	50707	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:03.226938009 CET	50707	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:03.227580070 CET	50708	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:03.227592945 CET	443	50708	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:03.227757931 CET	50707	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:03.227768898 CET	443	50707	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:03.227780104 CET	50708	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:03.228239059 CET	50708	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:03.228247881 CET	443	50708	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:03.232469082 CET	50709	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:20:03.232487917 CET	443	50709	146.75.29.230	192.168.2.4
Mar 28, 2024 14:20:03.232551098 CET	50709	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:20:03.232760906 CET	50709	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:20:03.232769012 CET	443	50709	146.75.29.230	192.168.2.4
Mar 28, 2024 14:20:03.234955072 CET	50711	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.234965086 CET	443	50711	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.235016108 CET	50711	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.235290051 CET	50702	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:03.235296965 CET	443	50702	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.235407114 CET	50711	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.235419989 CET	443	50711	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.245672941 CET	50712	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.245686054 CET	443	50712	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.245784998 CET	50712	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.246089935 CET	50712	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.246104002 CET	443	50712	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.311091900 CET	443	50704	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:03.311330080 CET	50704	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:03.311336994 CET	443	50704	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:03.312261105 CET	443	50704	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:03.312623978 CET	50704	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:03.312745094 CET	50704	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:03.312750101 CET	443	50704	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:03.312799931 CET	443	50704	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:03.315850973 CET	443	50705	3.221.137.72	192.168.2.4
Mar 28, 2024 14:20:03.316071987 CET	50705	443	192.168.2.4	3.221.137.72
Mar 28, 2024 14:20:03.316092014 CET	443	50705	3.221.137.72	192.168.2.4
Mar 28, 2024 14:20:03.317039013 CET	443	50705	3.221.137.72	192.168.2.4
Mar 28, 2024 14:20:03.317430019 CET	50705	443	192.168.2.4	3.221.137.72
Mar 28, 2024 14:20:03.317430019 CET	50705	443	192.168.2.4	3.221.137.72
Mar 28, 2024 14:20:03.317442894 CET	443	50705	3.221.137.72	192.168.2.4
Mar 28, 2024 14:20:03.317569971 CET	443	50705	3.221.137.72	192.168.2.4
Mar 28, 2024 14:20:03.356391907 CET	443	50706	151.101.65.44	192.168.2.4
Mar 28, 2024 14:20:03.356573105 CET	50706	443	192.168.2.4	151.101.65.44
Mar 28, 2024 14:20:03.356589079 CET	443	50706	151.101.65.44	192.168.2.4
Mar 28, 2024 14:20:03.357456923 CET	443	50706	151.101.65.44	192.168.2.4
Mar 28, 2024 14:20:03.357620955 CET	50706	443	192.168.2.4	151.101.65.44
Mar 28, 2024 14:20:03.358493090 CET	50706	443	192.168.2.4	151.101.65.44
Mar 28, 2024 14:20:03.358555079 CET	443	50706	151.101.65.44	192.168.2.4
Mar 28, 2024 14:20:03.358658075 CET	50706	443	192.168.2.4	151.101.65.44
Mar 28, 2024 14:20:03.358675003 CET	443	50706	151.101.65.44	192.168.2.4
Mar 28, 2024 14:20:03.360840082 CET	50705	443	192.168.2.4	3.221.137.72
Mar 28, 2024 14:20:03.384099960 CET	443	50702	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.384147882 CET	443	50702	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.384561062 CET	50702	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:03.387454987 CET	50702	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:03.387460947 CET	443	50702	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.407907009 CET	50706	443	192.168.2.4	151.101.65.44
Mar 28, 2024 14:20:03.432908058 CET	50704	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:03.433303118 CET	443	50704	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:03.433348894 CET	443	50704	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:03.434281111 CET	50704	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:03.434572935 CET	50704	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:03.434586048 CET	443	50704	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:03.436968088 CET	50713	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:03.436989069 CET	443	50713	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.437197924 CET	50713	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:03.437323093 CET	50713	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:03.437341928 CET	443	50713	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.465442896 CET	443	50705	3.221.137.72	192.168.2.4
Mar 28, 2024 14:20:03.465513945 CET	443	50705	3.221.137.72	192.168.2.4
Mar 28, 2024 14:20:03.465857029 CET	50705	443	192.168.2.4	3.221.137.72
Mar 28, 2024 14:20:03.467255116 CET	50705	443	192.168.2.4	3.221.137.72
Mar 28, 2024 14:20:03.467267990 CET	443	50705	3.221.137.72	192.168.2.4
Mar 28, 2024 14:20:03.493627071 CET	443	50709	146.75.29.230	192.168.2.4
Mar 28, 2024 14:20:03.493827105 CET	50709	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:20:03.493838072 CET	443	50709	146.75.29.230	192.168.2.4
Mar 28, 2024 14:20:03.494138956 CET	443	50709	146.75.29.230	192.168.2.4
Mar 28, 2024 14:20:03.494661093 CET	50709	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:20:03.494704962 CET	443	50709	146.75.29.230	192.168.2.4
Mar 28, 2024 14:20:03.494862080 CET	50709	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:20:03.511321068 CET	443	50711	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.511574984 CET	50711	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.511588097 CET	443	50711	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.511871099 CET	443	50711	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.512355089 CET	50711	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.512355089 CET	50711	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.512367010 CET	443	50711	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.512403011 CET	50711	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.512433052 CET	443	50711	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.525180101 CET	443	50712	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.525383949 CET	50712	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.525392056 CET	443	50712	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.525715113 CET	443	50712	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.526060104 CET	50712	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.526114941 CET	443	50712	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.526124954 CET	50712	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.526149035 CET	443	50712	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.540234089 CET	443	50709	146.75.29.230	192.168.2.4
Mar 28, 2024 14:20:03.551079035 CET	443	50706	151.101.65.44	192.168.2.4
Mar 28, 2024 14:20:03.551233053 CET	443	50706	151.101.65.44	192.168.2.4
Mar 28, 2024 14:20:03.551491022 CET	50706	443	192.168.2.4	151.101.65.44
Mar 28, 2024 14:20:03.554069996 CET	50706	443	192.168.2.4	151.101.65.44
Mar 28, 2024 14:20:03.554080963 CET	443	50706	151.101.65.44	192.168.2.4
Mar 28, 2024 14:20:03.565056086 CET	50711	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.595602989 CET	50712	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.637716055 CET	443	50713	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.637922049 CET	50713	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:03.637931108 CET	443	50713	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.638215065 CET	443	50713	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.638541937 CET	50713	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:03.638592005 CET	443	50713	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.638693094 CET	50713	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:03.652039051 CET	50715	443	192.168.2.4	151.101.1.44
Mar 28, 2024 14:20:03.652065992 CET	443	50715	151.101.1.44	192.168.2.4
Mar 28, 2024 14:20:03.652220964 CET	50715	443	192.168.2.4	151.101.1.44
Mar 28, 2024 14:20:03.652364016 CET	50715	443	192.168.2.4	151.101.1.44
Mar 28, 2024 14:20:03.652379036 CET	443	50715	151.101.1.44	192.168.2.4
Mar 28, 2024 14:20:03.680238008 CET	443	50713	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.685506105 CET	443	50709	146.75.29.230	192.168.2.4
Mar 28, 2024 14:20:03.685549974 CET	443	50709	146.75.29.230	192.168.2.4
Mar 28, 2024 14:20:03.685626984 CET	50709	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:20:03.686038971 CET	50709	443	192.168.2.4	146.75.29.230
Mar 28, 2024 14:20:03.686048031 CET	443	50709	146.75.29.230	192.168.2.4
Mar 28, 2024 14:20:03.720822096 CET	443	50711	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.720915079 CET	443	50711	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.721729994 CET	50711	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.721963882 CET	50711	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.721970081 CET	443	50711	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.725291014 CET	50716	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.725298882 CET	443	50716	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.725538015 CET	50716	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.725702047 CET	50716	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.725713015 CET	443	50716	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.736450911 CET	443	50712	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.736520052 CET	443	50712	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.738035917 CET	50712	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.738044024 CET	443	50712	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.738121033 CET	50712	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.738121033 CET	50712	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.739805937 CET	50717	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.739829063 CET	443	50717	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.740076065 CET	50717	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.740076065 CET	50717	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.740098953 CET	443	50717	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.799729109 CET	443	50707	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:03.800074100 CET	50707	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:03.800085068 CET	443	50707	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:03.800456047 CET	443	50707	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:03.800782919 CET	50707	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:03.800843000 CET	443	50707	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:03.800899982 CET	50707	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:03.814348936 CET	443	50708	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:03.814608097 CET	50708	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:03.814621925 CET	443	50708	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:03.814982891 CET	443	50708	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:03.815280914 CET	50708	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:03.815334082 CET	443	50708	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:03.815382957 CET	50708	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:03.841367006 CET	443	50713	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.841413975 CET	443	50713	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.842122078 CET	50713	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:03.842230082 CET	50713	443	192.168.2.4	52.206.37.105
Mar 28, 2024 14:20:03.842236996 CET	443	50713	52.206.37.105	192.168.2.4
Mar 28, 2024 14:20:03.846040010 CET	50707	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:03.846045971 CET	443	50707	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:03.846126080 CET	443	50715	151.101.1.44	192.168.2.4
Mar 28, 2024 14:20:03.850404024 CET	50715	443	192.168.2.4	151.101.1.44
Mar 28, 2024 14:20:03.850421906 CET	443	50715	151.101.1.44	192.168.2.4
Mar 28, 2024 14:20:03.851521015 CET	443	50715	151.101.1.44	192.168.2.4
Mar 28, 2024 14:20:03.851774931 CET	50715	443	192.168.2.4	151.101.1.44
Mar 28, 2024 14:20:03.852112055 CET	50715	443	192.168.2.4	151.101.1.44
Mar 28, 2024 14:20:03.852113008 CET	50715	443	192.168.2.4	151.101.1.44
Mar 28, 2024 14:20:03.852175951 CET	443	50715	151.101.1.44	192.168.2.4
Mar 28, 2024 14:20:03.854976892 CET	50718	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:03.854993105 CET	443	50718	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:03.855393887 CET	50718	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:03.855393887 CET	50718	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:03.855420113 CET	443	50718	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:03.860238075 CET	443	50708	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:03.893964052 CET	50715	443	192.168.2.4	151.101.1.44
Mar 28, 2024 14:20:03.893970966 CET	443	50715	151.101.1.44	192.168.2.4
Mar 28, 2024 14:20:03.938153982 CET	443	50716	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.938868999 CET	50716	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.938875914 CET	443	50716	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.939162970 CET	443	50716	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.939224005 CET	50715	443	192.168.2.4	151.101.1.44
Mar 28, 2024 14:20:03.939918995 CET	50716	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.939980030 CET	443	50716	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.940080881 CET	50716	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.943274021 CET	50708	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:03.949309111 CET	443	50717	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.949520111 CET	50717	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.949532032 CET	443	50717	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.949861050 CET	443	50717	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.950299025 CET	50717	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.950299025 CET	50717	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:03.950329065 CET	443	50717	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.950371027 CET	443	50717	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.980053902 CET	443	50707	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:03.980168104 CET	443	50707	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:03.980235100 CET	443	50716	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:03.980263948 CET	50707	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:03.980655909 CET	50707	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:03.980664015 CET	443	50707	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:03.984265089 CET	50719	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:03.984291077 CET	443	50719	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:03.984687090 CET	50719	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:03.984687090 CET	50719	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:03.984713078 CET	443	50719	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:03.996598959 CET	443	50708	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:03.996695042 CET	443	50708	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:03.997159004 CET	50708	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:03.997445107 CET	50708	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:03.997457981 CET	443	50708	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:03.999806881 CET	50721	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:03.999815941 CET	443	50721	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:03.999910116 CET	50721	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:04.002042055 CET	50721	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:04.002052069 CET	443	50721	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.042057991 CET	443	50715	151.101.1.44	192.168.2.4
Mar 28, 2024 14:20:04.042190075 CET	443	50715	151.101.1.44	192.168.2.4
Mar 28, 2024 14:20:04.043030977 CET	50715	443	192.168.2.4	151.101.1.44
Mar 28, 2024 14:20:04.043160915 CET	50715	443	192.168.2.4	151.101.1.44
Mar 28, 2024 14:20:04.043169975 CET	443	50715	151.101.1.44	192.168.2.4
Mar 28, 2024 14:20:04.082966089 CET	50717	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:04.152929068 CET	50723	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:04.152945042 CET	443	50723	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:04.153104067 CET	50723	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:04.153316975 CET	50723	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:04.153326988 CET	443	50723	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:04.158776999 CET	443	50716	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:04.158869982 CET	443	50716	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:04.158986092 CET	443	50717	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:04.159053087 CET	443	50717	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:04.159116030 CET	50716	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:04.159127951 CET	50717	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:04.159581900 CET	50716	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:04.159589052 CET	443	50716	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:04.160900116 CET	50717	443	192.168.2.4	35.241.45.82
Mar 28, 2024 14:20:04.160911083 CET	443	50717	35.241.45.82	192.168.2.4
Mar 28, 2024 14:20:04.217278004 CET	443	50718	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:04.217487097 CET	50718	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:04.217494965 CET	443	50718	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:04.217792034 CET	443	50718	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:04.218220949 CET	50718	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:04.218220949 CET	50718	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:04.218231916 CET	443	50718	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:04.218270063 CET	50718	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:04.218292952 CET	443	50718	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:04.218323946 CET	50718	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:04.218363047 CET	443	50718	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:04.267142057 CET	50718	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:04.349189997 CET	443	50719	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.349477053 CET	50719	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:04.349500895 CET	443	50719	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.350071907 CET	443	50719	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.350426912 CET	50719	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:04.350483894 CET	443	50719	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.350646973 CET	50719	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:04.363960981 CET	443	50721	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.364151001 CET	50721	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:04.364160061 CET	443	50721	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.364542961 CET	443	50721	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.364830017 CET	50721	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:04.364886999 CET	443	50721	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.365067005 CET	50721	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:04.396229029 CET	443	50719	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.408231974 CET	443	50721	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.451400042 CET	443	50723	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:04.451756001 CET	50723	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:04.451764107 CET	443	50723	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:04.452840090 CET	443	50723	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:04.452897072 CET	50723	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:04.453898907 CET	50723	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:04.453984022 CET	443	50723	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:04.454227924 CET	50723	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:04.454233885 CET	443	50723	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:04.509459972 CET	50723	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:04.552431107 CET	443	50723	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:04.552591085 CET	443	50723	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:04.552706957 CET	50723	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:04.579091072 CET	443	50718	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:04.579173088 CET	443	50718	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:04.579288006 CET	50718	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:04.600330114 CET	50718	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:04.600346088 CET	443	50718	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:04.610706091 CET	50723	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:04.610723972 CET	443	50723	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:04.611411095 CET	50724	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:04.611429930 CET	443	50724	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:04.611742020 CET	50724	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:04.611932993 CET	50724	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:04.611947060 CET	443	50724	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:04.614622116 CET	50725	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:04.614660025 CET	443	50725	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.614732981 CET	50725	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:04.614918947 CET	50725	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:04.614933968 CET	443	50725	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.705177069 CET	443	50719	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.705275059 CET	443	50719	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.705862045 CET	50719	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:04.716964960 CET	50719	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:04.716972113 CET	443	50719	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.722579002 CET	443	50721	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.722671032 CET	443	50721	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.722727060 CET	50721	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:04.723284006 CET	50721	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:04.723294973 CET	443	50721	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.804090977 CET	443	50724	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:04.804272890 CET	50724	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:04.804279089 CET	443	50724	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:04.804569006 CET	443	50724	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:04.804861069 CET	50724	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:04.804915905 CET	443	50724	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:04.805030107 CET	50724	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:04.848252058 CET	443	50724	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:04.974893093 CET	443	50725	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.975271940 CET	50725	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:04.975280046 CET	443	50725	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.975645065 CET	443	50725	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.976125002 CET	50725	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:04.976191044 CET	443	50725	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:04.976339102 CET	50725	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:05.020237923 CET	443	50725	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:05.054456949 CET	443	50724	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:05.054610014 CET	443	50724	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:05.054662943 CET	50724	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:05.056454897 CET	50724	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:05.056459904 CET	443	50724	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:05.056469917 CET	50724	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:05.056514025 CET	50724	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:05.057435989 CET	50727	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:05.057471037 CET	443	50727	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:05.057538033 CET	50727	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:05.057818890 CET	50727	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:05.057832956 CET	443	50727	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:05.060779095 CET	50728	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:05.060786963 CET	443	50728	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:05.060859919 CET	50728	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:05.061610937 CET	50728	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:05.061620951 CET	443	50728	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:05.257633924 CET	443	50727	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:05.258183002 CET	50727	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:05.258198023 CET	443	50727	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:05.258543015 CET	443	50727	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:05.258846998 CET	50727	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:05.258912086 CET	443	50727	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:05.259046078 CET	50727	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:05.304238081 CET	443	50727	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:05.333579063 CET	443	50725	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:05.333699942 CET	443	50725	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:05.334068060 CET	50725	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:05.334722042 CET	50725	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:05.334733009 CET	443	50725	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:05.451702118 CET	443	50727	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:05.451764107 CET	443	50727	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:05.451809883 CET	50727	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:05.453327894 CET	50727	443	192.168.2.4	18.235.137.175
Mar 28, 2024 14:20:05.453342915 CET	443	50727	18.235.137.175	192.168.2.4
Mar 28, 2024 14:20:05.454226017 CET	50731	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:05.454247952 CET	443	50731	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:05.454327106 CET	50731	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:05.454524994 CET	50731	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:05.454535961 CET	443	50731	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:05.601175070 CET	443	50728	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:05.611536026 CET	50728	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:05.611550093 CET	443	50728	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:05.612011909 CET	443	50728	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:05.612730026 CET	50728	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:05.612802982 CET	443	50728	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:05.621794939 CET	50728	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:05.621824980 CET	50728	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:05.621871948 CET	443	50728	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:05.646784067 CET	443	50731	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:05.647046089 CET	50731	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:05.647056103 CET	443	50731	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:05.647346973 CET	443	50731	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:05.647610903 CET	50731	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:05.647666931 CET	443	50731	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:05.647926092 CET	50731	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:05.688237906 CET	443	50731	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:05.897788048 CET	443	50731	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:05.897880077 CET	443	50731	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:05.897943974 CET	50731	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:05.898607969 CET	50731	443	192.168.2.4	52.46.155.104
Mar 28, 2024 14:20:05.898622990 CET	443	50731	52.46.155.104	192.168.2.4
Mar 28, 2024 14:20:05.979157925 CET	443	50728	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:05.979254961 CET	443	50728	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:05.979314089 CET	50728	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:05.979592085 CET	50728	443	192.168.2.4	35.163.101.91
Mar 28, 2024 14:20:05.979613066 CET	443	50728	35.163.101.91	192.168.2.4
Mar 28, 2024 14:20:05.983081102 CET	50736	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:05.983102083 CET	443	50736	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:05.983159065 CET	50736	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:05.983392954 CET	50736	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:05.983401060 CET	443	50736	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:06.015763998 CET	50737	443	192.168.2.4	209.54.182.161
Mar 28, 2024 14:20:06.015794039 CET	443	50737	209.54.182.161	192.168.2.4
Mar 28, 2024 14:20:06.015847921 CET	50737	443	192.168.2.4	209.54.182.161
Mar 28, 2024 14:20:06.016055107 CET	50737	443	192.168.2.4	209.54.182.161
Mar 28, 2024 14:20:06.016067028 CET	443	50737	209.54.182.161	192.168.2.4
Mar 28, 2024 14:20:06.308795929 CET	443	50737	209.54.182.161	192.168.2.4
Mar 28, 2024 14:20:06.309010983 CET	50737	443	192.168.2.4	209.54.182.161
Mar 28, 2024 14:20:06.309020042 CET	443	50737	209.54.182.161	192.168.2.4
Mar 28, 2024 14:20:06.310029984 CET	443	50737	209.54.182.161	192.168.2.4
Mar 28, 2024 14:20:06.310134888 CET	50737	443	192.168.2.4	209.54.182.161
Mar 28, 2024 14:20:06.310461044 CET	50737	443	192.168.2.4	209.54.182.161
Mar 28, 2024 14:20:06.310519934 CET	443	50737	209.54.182.161	192.168.2.4
Mar 28, 2024 14:20:06.310621977 CET	50737	443	192.168.2.4	209.54.182.161
Mar 28, 2024 14:20:06.310627937 CET	443	50737	209.54.182.161	192.168.2.4
Mar 28, 2024 14:20:06.344894886 CET	443	50736	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:06.345207930 CET	50736	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:06.345220089 CET	443	50736	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:06.345554113 CET	443	50736	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:06.346040010 CET	50736	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:06.346090078 CET	443	50736	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:06.346142054 CET	50736	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:06.361478090 CET	50737	443	192.168.2.4	209.54.182.161
Mar 28, 2024 14:20:06.388242006 CET	443	50736	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:06.392263889 CET	50736	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:06.413647890 CET	443	50737	209.54.182.161	192.168.2.4
Mar 28, 2024 14:20:06.413707018 CET	443	50737	209.54.182.161	192.168.2.4
Mar 28, 2024 14:20:06.414551973 CET	50737	443	192.168.2.4	209.54.182.161
Mar 28, 2024 14:20:06.414947987 CET	50737	443	192.168.2.4	209.54.182.161
Mar 28, 2024 14:20:06.414954901 CET	443	50737	209.54.182.161	192.168.2.4
Mar 28, 2024 14:20:06.704183102 CET	443	50736	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:06.704318047 CET	443	50736	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:06.704651117 CET	50736	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:06.704874992 CET	50736	443	192.168.2.4	34.211.102.35
Mar 28, 2024 14:20:06.704883099 CET	443	50736	34.211.102.35	192.168.2.4
Mar 28, 2024 14:20:08.166445017 CET	50742	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:08.166477919 CET	443	50742	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:08.166713953 CET	50742	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:08.167396069 CET	50742	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:08.167408943 CET	443	50742	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:08.360407114 CET	443	50742	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:08.360655069 CET	50742	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:08.360676050 CET	443	50742	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:08.360996008 CET	443	50742	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:08.361366987 CET	50742	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:08.361438990 CET	443	50742	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:08.361524105 CET	50742	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:08.404239893 CET	443	50742	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:08.550431013 CET	443	50742	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:08.550448895 CET	443	50742	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:08.550518036 CET	443	50742	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:08.550534010 CET	50742	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:08.550565958 CET	50742	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:08.551139116 CET	50742	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:08.551152945 CET	443	50742	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:08.562246084 CET	50743	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:08.562272072 CET	443	50743	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:08.562345028 CET	50743	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:08.562551975 CET	50743	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:08.562565088 CET	443	50743	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:08.855518103 CET	443	50743	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:08.855765104 CET	50743	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:08.855781078 CET	443	50743	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:08.856117010 CET	443	50743	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:08.856501102 CET	50743	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:08.856575966 CET	443	50743	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:08.856652975 CET	50743	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:08.904241085 CET	443	50743	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:08.953023911 CET	443	50743	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:08.953046083 CET	443	50743	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:08.953089952 CET	443	50743	34.194.24.182	192.168.2.4
Mar 28, 2024 14:20:08.953094959 CET	50743	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:08.953129053 CET	50743	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:08.954350948 CET	50743	443	192.168.2.4	34.194.24.182
Mar 28, 2024 14:20:08.954355955 CET	443	50743	34.194.24.182	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 28, 2024 14:18:48.488719940 CET	53	63716	1.1.1.1	192.168.2.4
Mar 28, 2024 14:18:48.497836113 CET	53	55020	1.1.1.1	192.168.2.4
Mar 28, 2024 14:18:49.102375984 CET	53	63972	1.1.1.1	192.168.2.4
Mar 28, 2024 14:18:50.310512066 CET	56790	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:18:50.310720921 CET	64194	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:18:51.832652092 CET	55836	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:18:51.833086967 CET	50257	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:18:51.835129023 CET	56739	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:18:51.835752010 CET	55105	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:18:51.836556911 CET	61801	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:18:51.837239981 CET	65296	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:18:51.934710026 CET	55169	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:18:51.935259104 CET	50657	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:18:52.748356104 CET	55999	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:18:52.749150038 CET	58279	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:18:52.767160892 CET	58527	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:18:52.767554045 CET	58051	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:18:52.843441963 CET	53	55999	1.1.1.1	192.168.2.4
Mar 28, 2024 14:18:52.843645096 CET	53	58279	1.1.1.1	192.168.2.4
Mar 28, 2024 14:18:53.893559933 CET	65532	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:18:53.893748999 CET	50006	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:18:56.261307001 CET	53	63201	1.1.1.1	192.168.2.4
Mar 28, 2024 14:18:57.453438997 CET	59192	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:18:57.453775883 CET	62280	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:00.465833902 CET	64355	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:00.465984106 CET	58068	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:00.466991901 CET	59860	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:00.467135906 CET	59419	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:00.561022043 CET	53	58068	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:00.561595917 CET	53	59419	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:00.561645985 CET	53	59860	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:00.561722994 CET	53	64355	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:01.309411049 CET	59512	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:01.309716940 CET	64816	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:01.407270908 CET	53	59512	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:01.429958105 CET	53	64816	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:01.714818954 CET	59517	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:01.715095997 CET	56275	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:01.813636065 CET	53	56275	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:01.813738108 CET	53	59517	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:02.394582033 CET	55757	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:02.395226955 CET	64242	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:02.490734100 CET	53	55757	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:02.492028952 CET	53	64242	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:02.605988026 CET	49360	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:02.606147051 CET	57221	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:02.701006889 CET	53	57221	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:02.701256990 CET	53	49360	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:03.460186958 CET	58095	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:03.460649967 CET	65500	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:03.555094957 CET	53	58095	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:03.555210114 CET	53	65500	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:05.750291109 CET	61779	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:05.750547886 CET	51948	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:05.846426010 CET	53	51948	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:05.846607924 CET	53	61779	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:05.928849936 CET	54389	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:05.928996086 CET	59322	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:05.929482937 CET	57776	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:05.929626942 CET	53511	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:05.929995060 CET	50978	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:05.930136919 CET	54950	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:06.025139093 CET	53	54389	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:06.026402950 CET	53	59322	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:06.527699947 CET	53	64890	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:08.821604013 CET	58620	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:08.821738005 CET	59285	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:08.836766005 CET	65425	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:08.837075949 CET	64970	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:08.856117010 CET	59022	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:08.856368065 CET	54430	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:08.885706902 CET	50380	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:08.886131048 CET	53629	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:08.916758060 CET	53	59285	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:08.917423964 CET	53	58620	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:08.932514906 CET	53	64970	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:08.932863951 CET	53	65425	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:08.952259064 CET	53	59022	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:08.952550888 CET	53	54430	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:09.091502905 CET	61135	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:09.091638088 CET	62083	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:09.131031990 CET	59752	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:09.131172895 CET	65120	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:09.187840939 CET	53	61135	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:09.196177959 CET	53	62083	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:09.226414919 CET	53	59752	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:09.226454973 CET	53	65120	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:09.758220911 CET	65519	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:09.758543015 CET	52507	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:09.858875990 CET	53	52507	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:09.859014034 CET	53	65519	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:10.413367987 CET	54020	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:10.413628101 CET	63631	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:10.448698997 CET	50202	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:10.448849916 CET	62969	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:10.508627892 CET	53	54020	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:10.508857012 CET	53	63631	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:10.544315100 CET	53	62969	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:10.545381069 CET	53	50202	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:10.613459110 CET	53	61660	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:10.792860031 CET	59976	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:10.793046951 CET	53446	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:10.829590082 CET	56170	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:10.829725027 CET	62770	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:10.887691021 CET	53	59976	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:10.888106108 CET	53	53446	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:10.924906015 CET	53	56170	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:10.925198078 CET	53	62770	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:11.186832905 CET	59859	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:11.186971903 CET	55241	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:11.213373899 CET	51830	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:11.213581085 CET	51588	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:11.217725992 CET	62377	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:11.217967033 CET	55413	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:11.281488895 CET	53	59859	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:11.282648087 CET	53	55241	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:11.306211948 CET	53	52053	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:11.309314966 CET	53	51588	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:11.310250998 CET	53	51830	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:11.312361956 CET	53	62377	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:11.312500954 CET	53	55413	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:11.425966024 CET	55437	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:11.426285982 CET	54291	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:11.521498919 CET	53	54291	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:11.521981955 CET	53	55437	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:11.558685064 CET	50647	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:11.558819056 CET	65189	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:11.653979063 CET	53	65189	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:11.654319048 CET	53	50647	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:11.715823889 CET	61906	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:11.715991974 CET	59294	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:11.811113119 CET	53	61906	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:11.811611891 CET	53	59294	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:12.078671932 CET	54078	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:12.078828096 CET	55688	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:12.173361063 CET	53	55688	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:12.177028894 CET	53	54078	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:13.693670034 CET	138	138	192.168.2.4	192.168.2.255
Mar 28, 2024 14:19:15.430278063 CET	61109	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:15.430278063 CET	63949	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:15.526463985 CET	53	63949	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:15.541909933 CET	53	61109	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:15.967413902 CET	49952	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:15.968692064 CET	62473	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:16.067859888 CET	53	62473	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:16.080224037 CET	53	49952	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:17.177378893 CET	61902	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:17.178052902 CET	53864	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:17.183079958 CET	62061	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:17.183500051 CET	60288	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:17.277367115 CET	53	61902	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:17.279629946 CET	53	60288	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:17.279668093 CET	53	62061	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:17.288280010 CET	53	53864	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:19.390782118 CET	55987	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:19.391050100 CET	63900	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:20.691194057 CET	65492	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:20.691807032 CET	58965	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:20.788201094 CET	53	58965	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:21.773230076 CET	56572	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:21.775346994 CET	62168	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:21.871562004 CET	53	62168	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:22.587616920 CET	63914	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:22.588031054 CET	58452	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:22.684338093 CET	64437	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:22.684580088 CET	59445	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:22.779028893 CET	53	64437	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:22.780452013 CET	53	59445	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:23.673487902 CET	57124	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:23.673665047 CET	53618	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:23.768300056 CET	53	57124	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:23.777756929 CET	53	53618	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:24.317279100 CET	62033	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:24.317636967 CET	52231	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:24.413301945 CET	53	62033	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:24.414941072 CET	53	52231	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:24.482306957 CET	52564	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:24.482436895 CET	57157	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:24.578032017 CET	53	52564	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:24.578171968 CET	53	57157	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:24.840835094 CET	59104	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:24.841130018 CET	53493	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:24.937500000 CET	53	53493	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:24.938327074 CET	53	59104	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:24.976526976 CET	61033	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:24.976787090 CET	49210	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:25.072777033 CET	53	61033	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:25.073668957 CET	53	49210	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:25.486253977 CET	53	59446	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:25.904490948 CET	54694	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:25.904701948 CET	51918	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:27.104569912 CET	60661	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:27.104748011 CET	64463	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:27.112349033 CET	52236	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:27.112762928 CET	63971	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:27.212194920 CET	53	52236	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:27.214353085 CET	53	63971	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:27.715548992 CET	55318	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:27.715702057 CET	56194	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:27.719841003 CET	61337	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:27.719971895 CET	59524	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:27.811491966 CET	53	55318	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:27.811702013 CET	53	56194	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:27.815051079 CET	53	59524	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:27.815082073 CET	53	61337	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:28.200387955 CET	59545	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:28.200683117 CET	63688	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:28.293747902 CET	63383	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:28.293900013 CET	51579	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:28.388705969 CET	53	63383	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:28.389115095 CET	53	51579	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:35.155484915 CET	55824	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:35.156038046 CET	49216	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:35.158217907 CET	63458	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:35.158483982 CET	53844	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:42.930458069 CET	53722	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:42.930840015 CET	62892	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:43.025655985 CET	53	62892	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:43.025954008 CET	53	53722	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:43.044281006 CET	56595	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:43.044423103 CET	52712	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:46.435126066 CET	53	54163	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:48.177328110 CET	53	50510	1.1.1.1	192.168.2.4
Mar 28, 2024 14:19:50.723167896 CET	54153	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:50.723169088 CET	55286	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:53.420942068 CET	52121	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:53.421780109 CET	61435	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:53.423090935 CET	57574	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:53.423826933 CET	53325	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:53.425549984 CET	60448	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:53.426168919 CET	61536	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:53.539690971 CET	54821	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:53.540165901 CET	53105	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:53.544964075 CET	60160	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:53.545593023 CET	55838	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:54.015985012 CET	52948	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:54.016396999 CET	64809	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:54.340805054 CET	64779	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:54.341175079 CET	61099	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:59.574925900 CET	62367	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:19:59.575193882 CET	62142	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:00.783782005 CET	59934	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:00.783782005 CET	55484	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:00.784984112 CET	59408	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:00.786042929 CET	54222	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:00.879451036 CET	53	59934	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:00.880199909 CET	53	55484	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:00.881449938 CET	53	54222	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:01.296082973 CET	49684	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:01.296297073 CET	61144	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:01.391868114 CET	53	49684	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:01.392452002 CET	53	61144	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:01.433948994 CET	64256	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:01.434149027 CET	59265	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:01.529934883 CET	53	64256	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:01.530154943 CET	53	59265	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:01.540128946 CET	56488	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:01.540265083 CET	63414	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:01.635818958 CET	53	56488	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:01.636010885 CET	53	63414	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:01.777527094 CET	56957	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:01.777693033 CET	61453	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:01.872513056 CET	53	56957	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:01.872792959 CET	53	61453	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:01.928755999 CET	50984	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:01.929213047 CET	55294	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:02.023583889 CET	53	50984	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:02.024971962 CET	53	55294	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:02.056236982 CET	62109	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:02.056452036 CET	53459	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:02.151454926 CET	53	62109	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:02.152566910 CET	53	53459	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:02.437825918 CET	64113	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:02.437974930 CET	50623	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:02.451050997 CET	61718	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:02.451216936 CET	56836	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:02.533821106 CET	53	50623	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:02.534224987 CET	53	64113	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:02.540190935 CET	49852	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:02.540381908 CET	57529	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:02.546053886 CET	53	61718	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:02.549525976 CET	53	56836	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:02.635678053 CET	53	49852	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:02.638607025 CET	53	57529	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:02.935725927 CET	50031	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:02.935935974 CET	62000	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:03.032263041 CET	53	50031	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:03.037921906 CET	53	62000	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:03.054267883 CET	53697	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:03.054419994 CET	49966	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:03.149827957 CET	53	53697	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:03.149977922 CET	53	49966	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:03.554758072 CET	56236	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:03.555133104 CET	57308	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:03.650752068 CET	53	56236	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:03.651043892 CET	53	57308	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:04.056037903 CET	59524	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:04.056313992 CET	59878	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:04.151226044 CET	53	59524	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:04.151504040 CET	53	59878	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:05.919030905 CET	55936	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:05.919162035 CET	60282	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:06.014173031 CET	53	60282	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:06.015367031 CET	53	55936	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:08.063128948 CET	60753	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:08.063128948 CET	56404	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:08.065196991 CET	54638	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:08.065196991 CET	57840	53	192.168.2.4	1.1.1.1
Mar 28, 2024 14:20:08.161035061 CET	53	54638	1.1.1.1	192.168.2.4
Mar 28, 2024 14:20:08.163794041 CET	53	57840	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 28, 2024 14:18:50.310512066 CET	192.168.2.4	1.1.1.1	0x4738	Standard query (0)	www.wellsfargo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:18:50.310720921 CET	192.168.2.4	1.1.1.1	0x2705	Standard query (0)	www.wellsfargo.com	65	IN (0x0001)	false
Mar 28, 2024 14:18:51.832652092 CET	192.168.2.4	1.1.1.1	0x68c9	Standard query (0)	static.wellsfargo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:18:51.833086967 CET	192.168.2.4	1.1.1.1	0x2545	Standard query (0)	static.wellsfargo.com	65	IN (0x0001)	false
Mar 28, 2024 14:18:51.835129023 CET	192.168.2.4	1.1.1.1	0x4046	Standard query (0)	connect.secure.wellsfargo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:18:51.835752010 CET	192.168.2.4	1.1.1.1	0xb881	Standard query (0)	connect.secure.wellsfargo.com	65	IN (0x0001)	false
Mar 28, 2024 14:18:51.836556911 CET	192.168.2.4	1.1.1.1	0x271d	Standard query (0)	www17.wellsfargomedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:18:51.837239981 CET	192.168.2.4	1.1.1.1	0x13e2	Standard query (0)	www17.wellsfargomedia.com	65	IN (0x0001)	false
Mar 28, 2024 14:18:51.934710026 CET	192.168.2.4	1.1.1.1	0x2102	Standard query (0)	c1.wfinterface.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:18:51.935259104 CET	192.168.2.4	1.1.1.1	0x5144	Standard query (0)	c1.wfinterface.com	65	IN (0x0001)	false
Mar 28, 2024 14:18:52.748356104 CET	192.168.2.4	1.1.1.1	0x229f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:18:52.749150038 CET	192.168.2.4	1.1.1.1	0x963c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 28, 2024 14:18:52.767160892 CET	192.168.2.4	1.1.1.1	0x6d19	Standard query (0)	www17.wellsfargomedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:18:52.767554045 CET	192.168.2.4	1.1.1.1	0x3352	Standard query (0)	www17.wellsfargomedia.com	65	IN (0x0001)	false
Mar 28, 2024 14:18:53.893559933 CET	192.168.2.4	1.1.1.1	0xd8d1	Standard query (0)	www.wellsfargo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:18:53.893748999 CET	192.168.2.4	1.1.1.1	0xbd95	Standard query (0)	www.wellsfargo.com	65	IN (0x0001)	false
Mar 28, 2024 14:18:57.453438997 CET	192.168.2.4	1.1.1.1	0xf06	Standard query (0)	ort.wellsfargo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:18:57.453775883 CET	192.168.2.4	1.1.1.1	0xe286	Standard query (0)	ort.wellsfargo.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:00.465833902 CET	192.168.2.4	1.1.1.1	0xac57	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:00.465984106 CET	192.168.2.4	1.1.1.1	0x6426	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Mar 28, 2024 14:19:00.466991901 CET	192.168.2.4	1.1.1.1	0x8fde	Standard query (0)	api.rlcdn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:00.467135906 CET	192.168.2.4	1.1.1.1	0x4975	Standard query (0)	api.rlcdn.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:01.309411049 CET	192.168.2.4	1.1.1.1	0x727a	Standard query (0)	wellsfargobankna.demdex.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:01.309716940 CET	192.168.2.4	1.1.1.1	0x166d	Standard query (0)	wellsfargobankna.demdex.net	65	IN (0x0001)	false
Mar 28, 2024 14:19:01.714818954 CET	192.168.2.4	1.1.1.1	0x67e0	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:01.715095997 CET	192.168.2.4	1.1.1.1	0xfbc	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Mar 28, 2024 14:19:02.394582033 CET	192.168.2.4	1.1.1.1	0x877f	Standard query (0)	wellsfargobankna.demdex.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:02.395226955 CET	192.168.2.4	1.1.1.1	0x445d	Standard query (0)	wellsfargobankna.demdex.net	65	IN (0x0001)	false
Mar 28, 2024 14:19:02.605988026 CET	192.168.2.4	1.1.1.1	0x7d19	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:02.606147051 CET	192.168.2.4	1.1.1.1	0x3216	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:03.460186958 CET	192.168.2.4	1.1.1.1	0xb69e	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:03.460649967 CET	192.168.2.4	1.1.1.1	0x1bd4	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:05.750291109 CET	192.168.2.4	1.1.1.1	0xa62f	Standard query (0)	adobedc.demdex.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:05.750547886 CET	192.168.2.4	1.1.1.1	0x2038	Standard query (0)	adobedc.demdex.net	65	IN (0x0001)	false
Mar 28, 2024 14:19:05.928849936 CET	192.168.2.4	1.1.1.1	0x78ad	Standard query (0)	gbxreport-prod.wf.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:05.928996086 CET	192.168.2.4	1.1.1.1	0x2934	Standard query (0)	gbxreport-prod.wf.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:05.929482937 CET	192.168.2.4	1.1.1.1	0xee25	Standard query (0)	rubicon.wellsfargo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:05.929626942 CET	192.168.2.4	1.1.1.1	0x75c9	Standard query (0)	rubicon.wellsfargo.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:05.929995060 CET	192.168.2.4	1.1.1.1	0x2b40	Standard query (0)	connect.secure.wellsfargo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:05.930136919 CET	192.168.2.4	1.1.1.1	0x8636	Standard query (0)	connect.secure.wellsfargo.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:08.821604013 CET	192.168.2.4	1.1.1.1	0xeb61	Standard query (0)	adobedc.demdex.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.821738005 CET	192.168.2.4	1.1.1.1	0x8d16	Standard query (0)	adobedc.demdex.net	65	IN (0x0001)	false
Mar 28, 2024 14:19:08.836766005 CET	192.168.2.4	1.1.1.1	0x58d1	Standard query (0)	edge.adobedc.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.837075949 CET	192.168.2.4	1.1.1.1	0xf648	Standard query (0)	edge.adobedc.net	65	IN (0x0001)	false
Mar 28, 2024 14:19:08.856117010 CET	192.168.2.4	1.1.1.1	0xb6bb	Standard query (0)	gbxreport-prod.wf.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.856368065 CET	192.168.2.4	1.1.1.1	0x9d40	Standard query (0)	gbxreport-prod.wf.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:08.885706902 CET	192.168.2.4	1.1.1.1	0x4a8e	Standard query (0)	rubicon.wellsfargo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.886131048 CET	192.168.2.4	1.1.1.1	0x4564	Standard query (0)	rubicon.wellsfargo.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:09.091502905 CET	192.168.2.4	1.1.1.1	0x3c7b	Standard query (0)	2549153.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:09.091638088 CET	192.168.2.4	1.1.1.1	0x8cd2	Standard query (0)	2549153.fls.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 14:19:09.131031990 CET	192.168.2.4	1.1.1.1	0x4fda	Standard query (0)	api.rlcdn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:09.131172895 CET	192.168.2.4	1.1.1.1	0xde9b	Standard query (0)	api.rlcdn.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:09.758220911 CET	192.168.2.4	1.1.1.1	0x61a2	Standard query (0)	2549153.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:09.758543015 CET	192.168.2.4	1.1.1.1	0x5c8f	Standard query (0)	2549153.fls.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 14:19:10.413367987 CET	192.168.2.4	1.1.1.1	0x662e	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.413628101 CET	192.168.2.4	1.1.1.1	0xa4b6	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:10.448698997 CET	192.168.2.4	1.1.1.1	0x8242	Standard query (0)	pdx-col.eum-appdynamics.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.448849916 CET	192.168.2.4	1.1.1.1	0xd950	Standard query (0)	pdx-col.eum-appdynamics.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:10.792860031 CET	192.168.2.4	1.1.1.1	0xab45	Standard query (0)	edge.adobedc.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.793046951 CET	192.168.2.4	1.1.1.1	0xa6e9	Standard query (0)	edge.adobedc.net	65	IN (0x0001)	false
Mar 28, 2024 14:19:10.829590082 CET	192.168.2.4	1.1.1.1	0xc083	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.829725027 CET	192.168.2.4	1.1.1.1	0x8ca6	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 14:19:11.186832905 CET	192.168.2.4	1.1.1.1	0xa8f5	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.186971903 CET	192.168.2.4	1.1.1.1	0xa3a6	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 14:19:11.213373899 CET	192.168.2.4	1.1.1.1	0xd084	Standard query (0)	2549153.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.213581085 CET	192.168.2.4	1.1.1.1	0xb9e5	Standard query (0)	2549153.fls.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 14:19:11.217725992 CET	192.168.2.4	1.1.1.1	0x257d	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.217967033 CET	192.168.2.4	1.1.1.1	0x74af	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:11.425966024 CET	192.168.2.4	1.1.1.1	0x87d3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.426285982 CET	192.168.2.4	1.1.1.1	0xda03	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:11.558685064 CET	192.168.2.4	1.1.1.1	0x89e2	Standard query (0)	pdx-col.eum-appdynamics.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.558819056 CET	192.168.2.4	1.1.1.1	0x1a4d	Standard query (0)	pdx-col.eum-appdynamics.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:11.715823889 CET	192.168.2.4	1.1.1.1	0x804d	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.715991974 CET	192.168.2.4	1.1.1.1	0xe781	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 14:19:12.078671932 CET	192.168.2.4	1.1.1.1	0x3269	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:12.078828096 CET	192.168.2.4	1.1.1.1	0x7233	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:15.430278063 CET	192.168.2.4	1.1.1.1	0x1454	Standard query (0)	cdn.schemaapp.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:15.430278063 CET	192.168.2.4	1.1.1.1	0x8ea	Standard query (0)	cdn.schemaapp.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:15.967413902 CET	192.168.2.4	1.1.1.1	0xd6b3	Standard query (0)	data.schemaapp.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:15.968692064 CET	192.168.2.4	1.1.1.1	0x4938	Standard query (0)	data.schemaapp.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:17.177378893 CET	192.168.2.4	1.1.1.1	0x94f6	Standard query (0)	data.schemaapp.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:17.178052902 CET	192.168.2.4	1.1.1.1	0x7d05	Standard query (0)	data.schemaapp.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:17.183079958 CET	192.168.2.4	1.1.1.1	0x49a5	Standard query (0)	cdn.schemaapp.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:17.183500051 CET	192.168.2.4	1.1.1.1	0xa57d	Standard query (0)	cdn.schemaapp.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:19.390782118 CET	192.168.2.4	1.1.1.1	0x24b2	Standard query (0)	tag-wellsfargo.digital.nuance.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:19.391050100 CET	192.168.2.4	1.1.1.1	0x1d89	Standard query (0)	tag-wellsfargo.digital.nuance.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:20.691194057 CET	192.168.2.4	1.1.1.1	0xc01f	Standard query (0)	rtd-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:20.691807032 CET	192.168.2.4	1.1.1.1	0xe20e	Standard query (0)	rtd-tm.everesttech.net	65	IN (0x0001)	false
Mar 28, 2024 14:19:21.773230076 CET	192.168.2.4	1.1.1.1	0x2f4f	Standard query (0)	rtd-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:21.775346994 CET	192.168.2.4	1.1.1.1	0x9f68	Standard query (0)	rtd-tm.everesttech.net	65	IN (0x0001)	false
Mar 28, 2024 14:19:22.587616920 CET	192.168.2.4	1.1.1.1	0x7faa	Standard query (0)	media-wf1.digital.nuance.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:22.588031054 CET	192.168.2.4	1.1.1.1	0x5a2	Standard query (0)	media-wf1.digital.nuance.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:22.684338093 CET	192.168.2.4	1.1.1.1	0x19af	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:22.684580088 CET	192.168.2.4	1.1.1.1	0x1139	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 14:19:23.673487902 CET	192.168.2.4	1.1.1.1	0x18c8	Standard query (0)	fcmatch.google.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:23.673665047 CET	192.168.2.4	1.1.1.1	0xc24a	Standard query (0)	fcmatch.google.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:24.317279100 CET	192.168.2.4	1.1.1.1	0x16a4	Standard query (0)	fcmatch.youtube.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:24.317636967 CET	192.168.2.4	1.1.1.1	0xd694	Standard query (0)	fcmatch.youtube.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:24.482306957 CET	192.168.2.4	1.1.1.1	0xbc2d	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:24.482436895 CET	192.168.2.4	1.1.1.1	0x55ce	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:24.840835094 CET	192.168.2.4	1.1.1.1	0x24df	Standard query (0)	fcmatch.youtube.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:24.841130018 CET	192.168.2.4	1.1.1.1	0xbbd6	Standard query (0)	fcmatch.youtube.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:24.976526976 CET	192.168.2.4	1.1.1.1	0x4198	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:24.976787090 CET	192.168.2.4	1.1.1.1	0x9701	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:25.904490948 CET	192.168.2.4	1.1.1.1	0xf1a4	Standard query (0)	media-wf1.digital.nuance.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:25.904701948 CET	192.168.2.4	1.1.1.1	0x36eb	Standard query (0)	media-wf1.digital.nuance.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:27.104569912 CET	192.168.2.4	1.1.1.1	0x138e	Standard query (0)	wellsfargo.digital.nuance.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:27.104748011 CET	192.168.2.4	1.1.1.1	0xd41	Standard query (0)	wellsfargo.digital.nuance.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:27.112349033 CET	192.168.2.4	1.1.1.1	0x6bf1	Standard query (0)	resources.digital-cloud-prem.medallia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:27.112762928 CET	192.168.2.4	1.1.1.1	0xc7c7	Standard query (0)	resources.digital-cloud-prem.medallia.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:27.715548992 CET	192.168.2.4	1.1.1.1	0xd6ef	Standard query (0)	resources.digital-cloud-prem.medallia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:27.715702057 CET	192.168.2.4	1.1.1.1	0x83ce	Standard query (0)	resources.digital-cloud-prem.medallia.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:27.719841003 CET	192.168.2.4	1.1.1.1	0x48f0	Standard query (0)	udc-neb.kampyle.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:27.719971895 CET	192.168.2.4	1.1.1.1	0x68ec	Standard query (0)	udc-neb.kampyle.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:28.200387955 CET	192.168.2.4	1.1.1.1	0x137	Standard query (0)	wellsfargo.digital.nuance.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:28.200683117 CET	192.168.2.4	1.1.1.1	0x19c6	Standard query (0)	wellsfargo.digital.nuance.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:28.293747902 CET	192.168.2.4	1.1.1.1	0xf755	Standard query (0)	udc-neb.kampyle.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:28.293900013 CET	192.168.2.4	1.1.1.1	0x38d4	Standard query (0)	udc-neb.kampyle.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:35.155484915 CET	192.168.2.4	1.1.1.1	0x8549	Standard query (0)	www10.wellsfargomedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:35.156038046 CET	192.168.2.4	1.1.1.1	0xa92	Standard query (0)	www10.wellsfargomedia.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:35.158217907 CET	192.168.2.4	1.1.1.1	0xb491	Standard query (0)	www15.wellsfargomedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:35.158483982 CET	192.168.2.4	1.1.1.1	0xe444	Standard query (0)	www15.wellsfargomedia.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:42.930458069 CET	192.168.2.4	1.1.1.1	0x9abc	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:42.930840015 CET	192.168.2.4	1.1.1.1	0x9c4a	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 14:19:43.044281006 CET	192.168.2.4	1.1.1.1	0x4405	Standard query (0)	www10.wellsfargomedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:43.044423103 CET	192.168.2.4	1.1.1.1	0xfd45	Standard query (0)	www10.wellsfargomedia.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:50.723167896 CET	192.168.2.4	1.1.1.1	0xff49	Standard query (0)	www.wellsfargo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:50.723169088 CET	192.168.2.4	1.1.1.1	0xe59c	Standard query (0)	www.wellsfargo.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:53.420942068 CET	192.168.2.4	1.1.1.1	0x6bf1	Standard query (0)	www17.wellsfargomedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:53.421780109 CET	192.168.2.4	1.1.1.1	0xe358	Standard query (0)	www17.wellsfargomedia.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:53.423090935 CET	192.168.2.4	1.1.1.1	0x64c2	Standard query (0)	connect.secure.wellsfargo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:53.423826933 CET	192.168.2.4	1.1.1.1	0xc3b1	Standard query (0)	connect.secure.wellsfargo.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:53.425549984 CET	192.168.2.4	1.1.1.1	0x33e1	Standard query (0)	static.wellsfargo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:53.426168919 CET	192.168.2.4	1.1.1.1	0x3deb	Standard query (0)	static.wellsfargo.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:53.539690971 CET	192.168.2.4	1.1.1.1	0x3d43	Standard query (0)	service.maxymiser.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:53.540165901 CET	192.168.2.4	1.1.1.1	0x2487	Standard query (0)	service.maxymiser.net	65	IN (0x0001)	false
Mar 28, 2024 14:19:53.544964075 CET	192.168.2.4	1.1.1.1	0x7f84	Standard query (0)	c1.wfinterface.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:53.545593023 CET	192.168.2.4	1.1.1.1	0xc40c	Standard query (0)	c1.wfinterface.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:54.015985012 CET	192.168.2.4	1.1.1.1	0xa1b	Standard query (0)	www17.wellsfargomedia.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:54.016396999 CET	192.168.2.4	1.1.1.1	0x28bb	Standard query (0)	www17.wellsfargomedia.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:54.340805054 CET	192.168.2.4	1.1.1.1	0x939c	Standard query (0)	www.wellsfargo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:54.341175079 CET	192.168.2.4	1.1.1.1	0x8ee7	Standard query (0)	www.wellsfargo.com	65	IN (0x0001)	false
Mar 28, 2024 14:19:59.574925900 CET	192.168.2.4	1.1.1.1	0xb14a	Standard query (0)	ort.wellsfargo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:59.575193882 CET	192.168.2.4	1.1.1.1	0xb4ab	Standard query (0)	ort.wellsfargo.com	65	IN (0x0001)	false
Mar 28, 2024 14:20:00.783782005 CET	192.168.2.4	1.1.1.1	0x45e7	Standard query (0)	wellsfargobankna.demdex.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:00.783782005 CET	192.168.2.4	1.1.1.1	0xf2b9	Standard query (0)	wellsfargobankna.demdex.net	65	IN (0x0001)	false
Mar 28, 2024 14:20:00.784984112 CET	192.168.2.4	1.1.1.1	0x5f93	Standard query (0)	cm.everesttech.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:00.786042929 CET	192.168.2.4	1.1.1.1	0xe5ea	Standard query (0)	cm.everesttech.net	65	IN (0x0001)	false
Mar 28, 2024 14:20:01.296082973 CET	192.168.2.4	1.1.1.1	0x4952	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:01.296297073 CET	192.168.2.4	1.1.1.1	0x94f1	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Mar 28, 2024 14:20:01.433948994 CET	192.168.2.4	1.1.1.1	0xb6f7	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:01.434149027 CET	192.168.2.4	1.1.1.1	0xc6d2	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Mar 28, 2024 14:20:01.540128946 CET	192.168.2.4	1.1.1.1	0xe34	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:01.540265083 CET	192.168.2.4	1.1.1.1	0x64e9	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Mar 28, 2024 14:20:01.777527094 CET	192.168.2.4	1.1.1.1	0x4a2e	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:01.777693033 CET	192.168.2.4	1.1.1.1	0x7d2a	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Mar 28, 2024 14:20:01.928755999 CET	192.168.2.4	1.1.1.1	0xca40	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:01.929213047 CET	192.168.2.4	1.1.1.1	0xb89f	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Mar 28, 2024 14:20:02.056236982 CET	192.168.2.4	1.1.1.1	0x1a29	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.056452036 CET	192.168.2.4	1.1.1.1	0xd04a	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
Mar 28, 2024 14:20:02.437825918 CET	192.168.2.4	1.1.1.1	0x1c08	Standard query (0)	wellsfargobankna.demdex.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.437974930 CET	192.168.2.4	1.1.1.1	0xe099	Standard query (0)	wellsfargobankna.demdex.net	65	IN (0x0001)	false
Mar 28, 2024 14:20:02.451050997 CET	192.168.2.4	1.1.1.1	0x78b9	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.451216936 CET	192.168.2.4	1.1.1.1	0xfa2b	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Mar 28, 2024 14:20:02.540190935 CET	192.168.2.4	1.1.1.1	0xcc6b	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.540381908 CET	192.168.2.4	1.1.1.1	0xd1d2	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Mar 28, 2024 14:20:02.935725927 CET	192.168.2.4	1.1.1.1	0x3176	Standard query (0)	wellsfargobankna.demdex.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.935935974 CET	192.168.2.4	1.1.1.1	0xc01f	Standard query (0)	wellsfargobankna.demdex.net	65	IN (0x0001)	false
Mar 28, 2024 14:20:03.054267883 CET	192.168.2.4	1.1.1.1	0xea87	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:03.054419994 CET	192.168.2.4	1.1.1.1	0xb795	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Mar 28, 2024 14:20:03.554758072 CET	192.168.2.4	1.1.1.1	0xd642	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:03.555133104 CET	192.168.2.4	1.1.1.1	0x4e9	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Mar 28, 2024 14:20:04.056037903 CET	192.168.2.4	1.1.1.1	0x1969	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:04.056313992 CET	192.168.2.4	1.1.1.1	0x35aa	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 14:20:05.919030905 CET	192.168.2.4	1.1.1.1	0x7387	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:05.919162035 CET	192.168.2.4	1.1.1.1	0xb38f	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Mar 28, 2024 14:20:08.063128948 CET	192.168.2.4	1.1.1.1	0x6ae3	Standard query (0)	rubicon.wellsfargo.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:08.063128948 CET	192.168.2.4	1.1.1.1	0xa1c	Standard query (0)	rubicon.wellsfargo.com	65	IN (0x0001)	false
Mar 28, 2024 14:20:08.065196991 CET	192.168.2.4	1.1.1.1	0xc8c7	Standard query (0)	gbxreport-prod.wf.com	65	IN (0x0001)	false
Mar 28, 2024 14:20:08.065196991 CET	192.168.2.4	1.1.1.1	0xc054	Standard query (0)	gbxreport-prod.wf.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 28, 2024 14:18:50.406105042 CET	1.1.1.1	192.168.2.4	0x2705	No error (0)	www.wellsfargo.com	www.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:18:50.407509089 CET	1.1.1.1	192.168.2.4	0x4738	No error (0)	www.wellsfargo.com	www.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:18:51.928540945 CET	1.1.1.1	192.168.2.4	0x2545	No error (0)	static.wellsfargo.com	static.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:18:51.928560972 CET	1.1.1.1	192.168.2.4	0x68c9	No error (0)	static.wellsfargo.com	static.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:18:51.930793047 CET	1.1.1.1	192.168.2.4	0xb881	No error (0)	connect.secure.wellsfargo.com	connect.secure.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:18:51.931397915 CET	1.1.1.1	192.168.2.4	0x4046	No error (0)	connect.secure.wellsfargo.com	connect.secure.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:18:51.933892012 CET	1.1.1.1	192.168.2.4	0x13e2	No error (0)	www17.wellsfargomedia.com	www17.wellsfargomedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:18:51.934123993 CET	1.1.1.1	192.168.2.4	0x271d	No error (0)	www17.wellsfargomedia.com	www17.wellsfargomedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:18:52.031009912 CET	1.1.1.1	192.168.2.4	0x2102	No error (0)	c1.wfinterface.com	c1.wfinterface.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:18:52.031830072 CET	1.1.1.1	192.168.2.4	0x5144	No error (0)	c1.wfinterface.com	c1.wfinterface.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:18:52.843441963 CET	1.1.1.1	192.168.2.4	0x229f	No error (0)	www.google.com		142.251.16.147	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:18:52.843441963 CET	1.1.1.1	192.168.2.4	0x229f	No error (0)	www.google.com		142.251.16.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:18:52.843441963 CET	1.1.1.1	192.168.2.4	0x229f	No error (0)	www.google.com		142.251.16.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:18:52.843441963 CET	1.1.1.1	192.168.2.4	0x229f	No error (0)	www.google.com		142.251.16.106	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:18:52.843441963 CET	1.1.1.1	192.168.2.4	0x229f	No error (0)	www.google.com		142.251.16.99	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:18:52.843441963 CET	1.1.1.1	192.168.2.4	0x229f	No error (0)	www.google.com		142.251.16.104	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:18:52.843645096 CET	1.1.1.1	192.168.2.4	0x963c	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 28, 2024 14:18:52.863822937 CET	1.1.1.1	192.168.2.4	0x3352	No error (0)	www17.wellsfargomedia.com	www17.wellsfargomedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:18:52.865009069 CET	1.1.1.1	192.168.2.4	0x6d19	No error (0)	www17.wellsfargomedia.com	www17.wellsfargomedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:18:53.990741014 CET	1.1.1.1	192.168.2.4	0xd8d1	No error (0)	www.wellsfargo.com	www.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:18:53.990755081 CET	1.1.1.1	192.168.2.4	0xbd95	No error (0)	www.wellsfargo.com	www.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:18:57.549223900 CET	1.1.1.1	192.168.2.4	0xf06	No error (0)	ort.wellsfargo.com	ort.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:18:57.549441099 CET	1.1.1.1	192.168.2.4	0xe286	No error (0)	ort.wellsfargo.com	ort.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:00.561022043 CET	1.1.1.1	192.168.2.4	0x6426	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:00.561022043 CET	1.1.1.1	192.168.2.4	0x6426	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:00.561022043 CET	1.1.1.1	192.168.2.4	0x6426	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:00.561645985 CET	1.1.1.1	192.168.2.4	0x8fde	No error (0)	api.rlcdn.com		34.107.165.188	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:00.561722994 CET	1.1.1.1	192.168.2.4	0xac57	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:00.561722994 CET	1.1.1.1	192.168.2.4	0xac57	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:00.561722994 CET	1.1.1.1	192.168.2.4	0xac57	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:00.561722994 CET	1.1.1.1	192.168.2.4	0xac57	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.45.39.174	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:00.561722994 CET	1.1.1.1	192.168.2.4	0xac57	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.211.205.42	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:00.561722994 CET	1.1.1.1	192.168.2.4	0xac57	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.227.131.206	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:00.561722994 CET	1.1.1.1	192.168.2.4	0xac57	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		23.20.84.82	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:00.561722994 CET	1.1.1.1	192.168.2.4	0xac57	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.209.36.126	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:00.561722994 CET	1.1.1.1	192.168.2.4	0xac57	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.85.179.91	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:00.561722994 CET	1.1.1.1	192.168.2.4	0xac57	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.213.145.49	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:00.561722994 CET	1.1.1.1	192.168.2.4	0xac57	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.221.137.72	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:01.407270908 CET	1.1.1.1	192.168.2.4	0x727a	No error (0)	wellsfargobankna.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:01.407270908 CET	1.1.1.1	192.168.2.4	0x727a	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:01.407270908 CET	1.1.1.1	192.168.2.4	0x727a	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:01.407270908 CET	1.1.1.1	192.168.2.4	0x727a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.213.253.195	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:01.407270908 CET	1.1.1.1	192.168.2.4	0x727a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.167.155.45	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:01.407270908 CET	1.1.1.1	192.168.2.4	0x727a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.87.157.151	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:01.407270908 CET	1.1.1.1	192.168.2.4	0x727a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.224.64.60	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:01.407270908 CET	1.1.1.1	192.168.2.4	0x727a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		23.20.84.82	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:01.407270908 CET	1.1.1.1	192.168.2.4	0x727a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.212.0.191	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:01.407270908 CET	1.1.1.1	192.168.2.4	0x727a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.165.109.237	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:01.407270908 CET	1.1.1.1	192.168.2.4	0x727a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.233.26.246	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:01.429958105 CET	1.1.1.1	192.168.2.4	0x166d	No error (0)	wellsfargobankna.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:01.429958105 CET	1.1.1.1	192.168.2.4	0x166d	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:01.429958105 CET	1.1.1.1	192.168.2.4	0x166d	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:01.813636065 CET	1.1.1.1	192.168.2.4	0xfbc	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:01.813636065 CET	1.1.1.1	192.168.2.4	0xfbc	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:01.813636065 CET	1.1.1.1	192.168.2.4	0xfbc	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:01.813738108 CET	1.1.1.1	192.168.2.4	0x67e0	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:01.813738108 CET	1.1.1.1	192.168.2.4	0x67e0	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:01.813738108 CET	1.1.1.1	192.168.2.4	0x67e0	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:01.813738108 CET	1.1.1.1	192.168.2.4	0x67e0	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.195.11.1	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:01.813738108 CET	1.1.1.1	192.168.2.4	0x67e0	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.223.253.145	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:01.813738108 CET	1.1.1.1	192.168.2.4	0x67e0	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.214.164.33	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:01.813738108 CET	1.1.1.1	192.168.2.4	0x67e0	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.235.137.175	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:01.813738108 CET	1.1.1.1	192.168.2.4	0x67e0	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		23.23.167.174	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:01.813738108 CET	1.1.1.1	192.168.2.4	0x67e0	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.167.155.45	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:01.813738108 CET	1.1.1.1	192.168.2.4	0x67e0	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.226.123.198	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:01.813738108 CET	1.1.1.1	192.168.2.4	0x67e0	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.238.61.171	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:02.490734100 CET	1.1.1.1	192.168.2.4	0x877f	No error (0)	wellsfargobankna.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:02.490734100 CET	1.1.1.1	192.168.2.4	0x877f	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:02.490734100 CET	1.1.1.1	192.168.2.4	0x877f	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:02.490734100 CET	1.1.1.1	192.168.2.4	0x877f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.208.238.164	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:02.490734100 CET	1.1.1.1	192.168.2.4	0x877f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.204.28.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:02.490734100 CET	1.1.1.1	192.168.2.4	0x877f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.230.138.132	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:02.490734100 CET	1.1.1.1	192.168.2.4	0x877f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.209.36.126	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:02.490734100 CET	1.1.1.1	192.168.2.4	0x877f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.204.18.67	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:02.490734100 CET	1.1.1.1	192.168.2.4	0x877f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.212.0.191	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:02.490734100 CET	1.1.1.1	192.168.2.4	0x877f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.238.61.171	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:02.490734100 CET	1.1.1.1	192.168.2.4	0x877f	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		23.23.167.174	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:02.492028952 CET	1.1.1.1	192.168.2.4	0x445d	No error (0)	wellsfargobankna.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:02.492028952 CET	1.1.1.1	192.168.2.4	0x445d	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:02.492028952 CET	1.1.1.1	192.168.2.4	0x445d	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:02.701006889 CET	1.1.1.1	192.168.2.4	0x3216	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:02.701256990 CET	1.1.1.1	192.168.2.4	0x7d19	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:02.701256990 CET	1.1.1.1	192.168.2.4	0x7d19	No error (0)	star-mini.c10r.facebook.com		31.13.66.35	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:03.555094957 CET	1.1.1.1	192.168.2.4	0xb69e	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:03.555094957 CET	1.1.1.1	192.168.2.4	0xb69e	No error (0)	star-mini.c10r.facebook.com		157.240.229.35	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:03.555210114 CET	1.1.1.1	192.168.2.4	0x1bd4	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:05.455563068 CET	1.1.1.1	192.168.2.4	0x35d8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:05.455563068 CET	1.1.1.1	192.168.2.4	0x35d8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:05.846426010 CET	1.1.1.1	192.168.2.4	0x2038	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:05.846607924 CET	1.1.1.1	192.168.2.4	0xa62f	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:05.846607924 CET	1.1.1.1	192.168.2.4	0xa62f	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.130	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:05.846607924 CET	1.1.1.1	192.168.2.4	0xa62f	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.93	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:05.846607924 CET	1.1.1.1	192.168.2.4	0xa62f	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.248	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:05.846607924 CET	1.1.1.1	192.168.2.4	0xa62f	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.38.210	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:05.846607924 CET	1.1.1.1	192.168.2.4	0xa62f	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.9	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:05.846607924 CET	1.1.1.1	192.168.2.4	0xa62f	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.38.189	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:05.846607924 CET	1.1.1.1	192.168.2.4	0xa62f	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.38.111	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:05.846607924 CET	1.1.1.1	192.168.2.4	0xa62f	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.72	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:05.846607924 CET	1.1.1.1	192.168.2.4	0xa62f	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.38.91	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:05.846607924 CET	1.1.1.1	192.168.2.4	0xa62f	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.38.138	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:06.025139093 CET	1.1.1.1	192.168.2.4	0x78ad	No error (0)	gbxreport-prod.wf.com	report.wf-prod.gbqofs.io		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:06.025139093 CET	1.1.1.1	192.168.2.4	0x78ad	No error (0)	report.wf-prod.gbqofs.io	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:06.025139093 CET	1.1.1.1	192.168.2.4	0x78ad	No error (0)	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		44.213.50.195	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:06.025139093 CET	1.1.1.1	192.168.2.4	0x78ad	No error (0)	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		3.229.79.226	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:06.025139093 CET	1.1.1.1	192.168.2.4	0x78ad	No error (0)	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		35.170.205.2	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:06.025139093 CET	1.1.1.1	192.168.2.4	0x78ad	No error (0)	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		3.211.152.148	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:06.025139093 CET	1.1.1.1	192.168.2.4	0x78ad	No error (0)	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		34.194.24.182	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:06.025139093 CET	1.1.1.1	192.168.2.4	0x78ad	No error (0)	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		44.193.232.180	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:06.025445938 CET	1.1.1.1	192.168.2.4	0x75c9	No error (0)	rubicon.wellsfargo.com	rubicon.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:06.025810003 CET	1.1.1.1	192.168.2.4	0x8636	No error (0)	connect.secure.wellsfargo.com	connect.secure.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:06.026402950 CET	1.1.1.1	192.168.2.4	0x2934	No error (0)	gbxreport-prod.wf.com	report.wf-prod.gbqofs.io		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:06.026402950 CET	1.1.1.1	192.168.2.4	0x2934	No error (0)	report.wf-prod.gbqofs.io	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:06.026479006 CET	1.1.1.1	192.168.2.4	0x2b40	No error (0)	connect.secure.wellsfargo.com	connect.secure.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:06.026607037 CET	1.1.1.1	192.168.2.4	0xee25	No error (0)	rubicon.wellsfargo.com	rubicon.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:08.916758060 CET	1.1.1.1	192.168.2.4	0x8d16	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:08.917423964 CET	1.1.1.1	192.168.2.4	0xeb61	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:08.917423964 CET	1.1.1.1	192.168.2.4	0xeb61	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.38.91	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.917423964 CET	1.1.1.1	192.168.2.4	0xeb61	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.38.132	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.917423964 CET	1.1.1.1	192.168.2.4	0xeb61	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.38.112	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.917423964 CET	1.1.1.1	192.168.2.4	0xeb61	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.38.236	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.917423964 CET	1.1.1.1	192.168.2.4	0xeb61	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.82	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.917423964 CET	1.1.1.1	192.168.2.4	0xeb61	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.65	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.917423964 CET	1.1.1.1	192.168.2.4	0xeb61	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.38.217	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.917423964 CET	1.1.1.1	192.168.2.4	0xeb61	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.150	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.917423964 CET	1.1.1.1	192.168.2.4	0xeb61	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.93	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.917423964 CET	1.1.1.1	192.168.2.4	0xeb61	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.39.9	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.932514906 CET	1.1.1.1	192.168.2.4	0xf648	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:08.932863951 CET	1.1.1.1	192.168.2.4	0x58d1	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:08.932863951 CET	1.1.1.1	192.168.2.4	0x58d1	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.39.65	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.932863951 CET	1.1.1.1	192.168.2.4	0x58d1	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.39.117	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.932863951 CET	1.1.1.1	192.168.2.4	0x58d1	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.38.236	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.932863951 CET	1.1.1.1	192.168.2.4	0x58d1	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.39.22	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.932863951 CET	1.1.1.1	192.168.2.4	0x58d1	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.39.15	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.932863951 CET	1.1.1.1	192.168.2.4	0x58d1	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.39.9	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.932863951 CET	1.1.1.1	192.168.2.4	0x58d1	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.38.138	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.932863951 CET	1.1.1.1	192.168.2.4	0x58d1	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.38.55	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.932863951 CET	1.1.1.1	192.168.2.4	0x58d1	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.38.189	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.932863951 CET	1.1.1.1	192.168.2.4	0x58d1	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.38.132	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.952259064 CET	1.1.1.1	192.168.2.4	0xb6bb	No error (0)	gbxreport-prod.wf.com	report.wf-prod.gbqofs.io		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:08.952259064 CET	1.1.1.1	192.168.2.4	0xb6bb	No error (0)	report.wf-prod.gbqofs.io	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:08.952259064 CET	1.1.1.1	192.168.2.4	0xb6bb	No error (0)	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		34.194.24.182	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.952259064 CET	1.1.1.1	192.168.2.4	0xb6bb	No error (0)	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		35.170.205.2	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.952259064 CET	1.1.1.1	192.168.2.4	0xb6bb	No error (0)	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		3.211.152.148	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.952259064 CET	1.1.1.1	192.168.2.4	0xb6bb	No error (0)	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		44.213.50.195	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.952259064 CET	1.1.1.1	192.168.2.4	0xb6bb	No error (0)	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		44.193.232.180	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.952259064 CET	1.1.1.1	192.168.2.4	0xb6bb	No error (0)	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		3.229.79.226	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:08.952550888 CET	1.1.1.1	192.168.2.4	0x9d40	No error (0)	gbxreport-prod.wf.com	report.wf-prod.gbqofs.io		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:08.952550888 CET	1.1.1.1	192.168.2.4	0x9d40	No error (0)	report.wf-prod.gbqofs.io	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:08.982665062 CET	1.1.1.1	192.168.2.4	0x4a8e	No error (0)	rubicon.wellsfargo.com	rubicon.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:08.982712030 CET	1.1.1.1	192.168.2.4	0x4564	No error (0)	rubicon.wellsfargo.com	rubicon.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:09.187840939 CET	1.1.1.1	192.168.2.4	0x3c7b	No error (0)	2549153.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:09.187840939 CET	1.1.1.1	192.168.2.4	0x3c7b	No error (0)	dart.l.doubleclick.net		172.253.63.149	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:09.187840939 CET	1.1.1.1	192.168.2.4	0x3c7b	No error (0)	dart.l.doubleclick.net		172.253.63.148	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:09.196177959 CET	1.1.1.1	192.168.2.4	0x8cd2	No error (0)	2549153.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:09.226414919 CET	1.1.1.1	192.168.2.4	0x4fda	No error (0)	api.rlcdn.com		34.107.165.188	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:09.858875990 CET	1.1.1.1	192.168.2.4	0x5c8f	No error (0)	2549153.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:09.859014034 CET	1.1.1.1	192.168.2.4	0x61a2	No error (0)	2549153.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:09.859014034 CET	1.1.1.1	192.168.2.4	0x61a2	No error (0)	dart.l.doubleclick.net		142.251.111.148	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:09.859014034 CET	1.1.1.1	192.168.2.4	0x61a2	No error (0)	dart.l.doubleclick.net		142.251.111.149	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.508627892 CET	1.1.1.1	192.168.2.4	0x662e	No error (0)	adservice.google.com		142.251.163.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.508627892 CET	1.1.1.1	192.168.2.4	0x662e	No error (0)	adservice.google.com		142.251.163.154	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.508857012 CET	1.1.1.1	192.168.2.4	0xa4b6	No error (0)	adservice.google.com			65	IN (0x0001)	false
Mar 28, 2024 14:19:10.544315100 CET	1.1.1.1	192.168.2.4	0xd950	No error (0)	pdx-col.eum-appdynamics.com	col.eum-appdynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:10.545381069 CET	1.1.1.1	192.168.2.4	0x8242	No error (0)	pdx-col.eum-appdynamics.com	col.eum-appdynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:10.545381069 CET	1.1.1.1	192.168.2.4	0x8242	No error (0)	col.eum-appdynamics.com		35.163.101.91	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.545381069 CET	1.1.1.1	192.168.2.4	0x8242	No error (0)	col.eum-appdynamics.com		54.187.200.128	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.545381069 CET	1.1.1.1	192.168.2.4	0x8242	No error (0)	col.eum-appdynamics.com		34.211.102.35	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.545381069 CET	1.1.1.1	192.168.2.4	0x8242	No error (0)	col.eum-appdynamics.com		44.224.211.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.545381069 CET	1.1.1.1	192.168.2.4	0x8242	No error (0)	col.eum-appdynamics.com		54.148.65.130	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.545381069 CET	1.1.1.1	192.168.2.4	0x8242	No error (0)	col.eum-appdynamics.com		35.167.85.242	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.545381069 CET	1.1.1.1	192.168.2.4	0x8242	No error (0)	col.eum-appdynamics.com		52.34.49.236	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.545381069 CET	1.1.1.1	192.168.2.4	0x8242	No error (0)	col.eum-appdynamics.com		52.34.249.102	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.887691021 CET	1.1.1.1	192.168.2.4	0xab45	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:10.887691021 CET	1.1.1.1	192.168.2.4	0xab45	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.38.132	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.887691021 CET	1.1.1.1	192.168.2.4	0xab45	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.38.55	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.887691021 CET	1.1.1.1	192.168.2.4	0xab45	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.39.35	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.887691021 CET	1.1.1.1	192.168.2.4	0xab45	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.39.130	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.887691021 CET	1.1.1.1	192.168.2.4	0xab45	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.38.112	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.887691021 CET	1.1.1.1	192.168.2.4	0xab45	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.38.91	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.887691021 CET	1.1.1.1	192.168.2.4	0xab45	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.39.9	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.887691021 CET	1.1.1.1	192.168.2.4	0xab45	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.38.217	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.887691021 CET	1.1.1.1	192.168.2.4	0xab45	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.39.15	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.887691021 CET	1.1.1.1	192.168.2.4	0xab45	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.38.236	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.888106108 CET	1.1.1.1	192.168.2.4	0xa6e9	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:10.924906015 CET	1.1.1.1	192.168.2.4	0xc083	No error (0)	googleads.g.doubleclick.net		142.251.16.157	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.924906015 CET	1.1.1.1	192.168.2.4	0xc083	No error (0)	googleads.g.doubleclick.net		142.251.16.156	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:10.925198078 CET	1.1.1.1	192.168.2.4	0x8ca6	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Mar 28, 2024 14:19:11.281488895 CET	1.1.1.1	192.168.2.4	0xa8f5	No error (0)	stats.g.doubleclick.net		172.253.62.154	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.281488895 CET	1.1.1.1	192.168.2.4	0xa8f5	No error (0)	stats.g.doubleclick.net		172.253.62.157	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.309314966 CET	1.1.1.1	192.168.2.4	0xb9e5	No error (0)	2549153.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:11.310250998 CET	1.1.1.1	192.168.2.4	0xd084	No error (0)	2549153.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:11.310250998 CET	1.1.1.1	192.168.2.4	0xd084	No error (0)	dart.l.doubleclick.net		142.251.16.148	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.310250998 CET	1.1.1.1	192.168.2.4	0xd084	No error (0)	dart.l.doubleclick.net		142.251.16.149	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.312361956 CET	1.1.1.1	192.168.2.4	0x257d	No error (0)	adservice.google.com		142.251.167.157	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.312361956 CET	1.1.1.1	192.168.2.4	0x257d	No error (0)	adservice.google.com		142.251.167.156	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.312361956 CET	1.1.1.1	192.168.2.4	0x257d	No error (0)	adservice.google.com		142.251.167.154	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.312361956 CET	1.1.1.1	192.168.2.4	0x257d	No error (0)	adservice.google.com		142.251.167.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.312500954 CET	1.1.1.1	192.168.2.4	0x74af	No error (0)	adservice.google.com			65	IN (0x0001)	false
Mar 28, 2024 14:19:11.521498919 CET	1.1.1.1	192.168.2.4	0xda03	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 28, 2024 14:19:11.521981955 CET	1.1.1.1	192.168.2.4	0x87d3	No error (0)	www.google.com		172.253.62.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.521981955 CET	1.1.1.1	192.168.2.4	0x87d3	No error (0)	www.google.com		172.253.62.106	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.521981955 CET	1.1.1.1	192.168.2.4	0x87d3	No error (0)	www.google.com		172.253.62.104	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.521981955 CET	1.1.1.1	192.168.2.4	0x87d3	No error (0)	www.google.com		172.253.62.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.521981955 CET	1.1.1.1	192.168.2.4	0x87d3	No error (0)	www.google.com		172.253.62.147	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.521981955 CET	1.1.1.1	192.168.2.4	0x87d3	No error (0)	www.google.com		172.253.62.99	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.653979063 CET	1.1.1.1	192.168.2.4	0x1a4d	No error (0)	pdx-col.eum-appdynamics.com	col.eum-appdynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:11.654319048 CET	1.1.1.1	192.168.2.4	0x89e2	No error (0)	pdx-col.eum-appdynamics.com	col.eum-appdynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:11.654319048 CET	1.1.1.1	192.168.2.4	0x89e2	No error (0)	col.eum-appdynamics.com		34.211.102.35	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.654319048 CET	1.1.1.1	192.168.2.4	0x89e2	No error (0)	col.eum-appdynamics.com		54.244.129.42	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.654319048 CET	1.1.1.1	192.168.2.4	0x89e2	No error (0)	col.eum-appdynamics.com		52.36.31.4	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.654319048 CET	1.1.1.1	192.168.2.4	0x89e2	No error (0)	col.eum-appdynamics.com		44.224.211.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.654319048 CET	1.1.1.1	192.168.2.4	0x89e2	No error (0)	col.eum-appdynamics.com		35.80.208.41	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.654319048 CET	1.1.1.1	192.168.2.4	0x89e2	No error (0)	col.eum-appdynamics.com		44.237.75.201	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.654319048 CET	1.1.1.1	192.168.2.4	0x89e2	No error (0)	col.eum-appdynamics.com		52.34.249.102	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.654319048 CET	1.1.1.1	192.168.2.4	0x89e2	No error (0)	col.eum-appdynamics.com		52.34.49.236	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.811113119 CET	1.1.1.1	192.168.2.4	0x804d	No error (0)	stats.g.doubleclick.net		172.253.62.154	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:11.811113119 CET	1.1.1.1	192.168.2.4	0x804d	No error (0)	stats.g.doubleclick.net		172.253.62.157	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:12.173361063 CET	1.1.1.1	192.168.2.4	0x7233	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 28, 2024 14:19:12.177028894 CET	1.1.1.1	192.168.2.4	0x3269	No error (0)	www.google.com		172.253.115.104	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:12.177028894 CET	1.1.1.1	192.168.2.4	0x3269	No error (0)	www.google.com		172.253.115.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:12.177028894 CET	1.1.1.1	192.168.2.4	0x3269	No error (0)	www.google.com		172.253.115.99	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:12.177028894 CET	1.1.1.1	192.168.2.4	0x3269	No error (0)	www.google.com		172.253.115.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:12.177028894 CET	1.1.1.1	192.168.2.4	0x3269	No error (0)	www.google.com		172.253.115.147	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:12.177028894 CET	1.1.1.1	192.168.2.4	0x3269	No error (0)	www.google.com		172.253.115.106	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:15.526463985 CET	1.1.1.1	192.168.2.4	0x8ea	No error (0)	cdn.schemaapp.com	d3nidttaq34fka.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:15.541909933 CET	1.1.1.1	192.168.2.4	0x1454	No error (0)	cdn.schemaapp.com	d3nidttaq34fka.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:15.541909933 CET	1.1.1.1	192.168.2.4	0x1454	No error (0)	d3nidttaq34fka.cloudfront.net		18.160.18.39	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:15.541909933 CET	1.1.1.1	192.168.2.4	0x1454	No error (0)	d3nidttaq34fka.cloudfront.net		18.160.18.117	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:15.541909933 CET	1.1.1.1	192.168.2.4	0x1454	No error (0)	d3nidttaq34fka.cloudfront.net		18.160.18.128	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:15.541909933 CET	1.1.1.1	192.168.2.4	0x1454	No error (0)	d3nidttaq34fka.cloudfront.net		18.160.18.115	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:16.067859888 CET	1.1.1.1	192.168.2.4	0x4938	No error (0)	data.schemaapp.com	d2unjxrejkh6j9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:16.080224037 CET	1.1.1.1	192.168.2.4	0xd6b3	No error (0)	data.schemaapp.com	d2unjxrejkh6j9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:16.080224037 CET	1.1.1.1	192.168.2.4	0xd6b3	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.32.208.32	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:16.080224037 CET	1.1.1.1	192.168.2.4	0xd6b3	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.32.208.16	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:16.080224037 CET	1.1.1.1	192.168.2.4	0xd6b3	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.32.208.64	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:16.080224037 CET	1.1.1.1	192.168.2.4	0xd6b3	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.32.208.95	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:17.277367115 CET	1.1.1.1	192.168.2.4	0x94f6	No error (0)	data.schemaapp.com	d2unjxrejkh6j9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:17.277367115 CET	1.1.1.1	192.168.2.4	0x94f6	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.32.208.16	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:17.277367115 CET	1.1.1.1	192.168.2.4	0x94f6	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.32.208.95	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:17.277367115 CET	1.1.1.1	192.168.2.4	0x94f6	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.32.208.64	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:17.277367115 CET	1.1.1.1	192.168.2.4	0x94f6	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.32.208.32	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:17.279629946 CET	1.1.1.1	192.168.2.4	0xa57d	No error (0)	cdn.schemaapp.com	d3nidttaq34fka.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:17.279668093 CET	1.1.1.1	192.168.2.4	0x49a5	No error (0)	cdn.schemaapp.com	d3nidttaq34fka.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:17.279668093 CET	1.1.1.1	192.168.2.4	0x49a5	No error (0)	d3nidttaq34fka.cloudfront.net		18.160.18.115	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:17.279668093 CET	1.1.1.1	192.168.2.4	0x49a5	No error (0)	d3nidttaq34fka.cloudfront.net		18.160.18.117	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:17.279668093 CET	1.1.1.1	192.168.2.4	0x49a5	No error (0)	d3nidttaq34fka.cloudfront.net		18.160.18.39	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:17.279668093 CET	1.1.1.1	192.168.2.4	0x49a5	No error (0)	d3nidttaq34fka.cloudfront.net		18.160.18.128	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:17.288280010 CET	1.1.1.1	192.168.2.4	0x7d05	No error (0)	data.schemaapp.com	d2unjxrejkh6j9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:19.486908913 CET	1.1.1.1	192.168.2.4	0x1d89	No error (0)	tag-wellsfargo.digital.nuance.com	wellsfargo.digital.nuance.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:19.486908913 CET	1.1.1.1	192.168.2.4	0x1d89	No error (0)	wellsfargo.digital.nuance.com	ts-wf1.digital.nuance.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:19.486908913 CET	1.1.1.1	192.168.2.4	0x1d89	No error (0)	ts-wf1.digital.nuance.com	ts-dnc-wf1.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:19.496606112 CET	1.1.1.1	192.168.2.4	0x24b2	No error (0)	tag-wellsfargo.digital.nuance.com	wellsfargo.digital.nuance.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:19.496606112 CET	1.1.1.1	192.168.2.4	0x24b2	No error (0)	wellsfargo.digital.nuance.com	ts-wf1.digital.nuance.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:19.496606112 CET	1.1.1.1	192.168.2.4	0x24b2	No error (0)	ts-wf1.digital.nuance.com	ts-dnc-wf1.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:20.785671949 CET	1.1.1.1	192.168.2.4	0xc01f	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:20.785671949 CET	1.1.1.1	192.168.2.4	0xc01f	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:20.788201094 CET	1.1.1.1	192.168.2.4	0xe20e	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:20.788201094 CET	1.1.1.1	192.168.2.4	0xe20e	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:20.944134951 CET	1.1.1.1	192.168.2.4	0xe892	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:20.944134951 CET	1.1.1.1	192.168.2.4	0xe892	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:21.870132923 CET	1.1.1.1	192.168.2.4	0x2f4f	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:21.870132923 CET	1.1.1.1	192.168.2.4	0x2f4f	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:21.871562004 CET	1.1.1.1	192.168.2.4	0x9f68	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:21.871562004 CET	1.1.1.1	192.168.2.4	0x9f68	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:22.686798096 CET	1.1.1.1	192.168.2.4	0x5a2	No error (0)	media-wf1.digital.nuance.com	ts-wf1.digital.nuance.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:22.686798096 CET	1.1.1.1	192.168.2.4	0x5a2	No error (0)	ts-wf1.digital.nuance.com	ts-dnc-wf1.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:22.693000078 CET	1.1.1.1	192.168.2.4	0x7faa	No error (0)	media-wf1.digital.nuance.com	ts-wf1.digital.nuance.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:22.693000078 CET	1.1.1.1	192.168.2.4	0x7faa	No error (0)	ts-wf1.digital.nuance.com	ts-dnc-wf1.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:22.779028893 CET	1.1.1.1	192.168.2.4	0x19af	No error (0)	cm.g.doubleclick.net		142.250.31.156	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:22.779028893 CET	1.1.1.1	192.168.2.4	0x19af	No error (0)	cm.g.doubleclick.net		142.250.31.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:23.768300056 CET	1.1.1.1	192.168.2.4	0x18c8	No error (0)	fcmatch.google.com		172.253.122.113	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:23.768300056 CET	1.1.1.1	192.168.2.4	0x18c8	No error (0)	fcmatch.google.com		172.253.122.138	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:23.768300056 CET	1.1.1.1	192.168.2.4	0x18c8	No error (0)	fcmatch.google.com		172.253.122.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:23.768300056 CET	1.1.1.1	192.168.2.4	0x18c8	No error (0)	fcmatch.google.com		172.253.122.102	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:23.768300056 CET	1.1.1.1	192.168.2.4	0x18c8	No error (0)	fcmatch.google.com		172.253.122.100	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:23.768300056 CET	1.1.1.1	192.168.2.4	0x18c8	No error (0)	fcmatch.google.com		172.253.122.139	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:24.413301945 CET	1.1.1.1	192.168.2.4	0x16a4	No error (0)	fcmatch.youtube.com		172.253.63.139	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:24.413301945 CET	1.1.1.1	192.168.2.4	0x16a4	No error (0)	fcmatch.youtube.com		172.253.63.100	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:24.413301945 CET	1.1.1.1	192.168.2.4	0x16a4	No error (0)	fcmatch.youtube.com		172.253.63.113	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:24.413301945 CET	1.1.1.1	192.168.2.4	0x16a4	No error (0)	fcmatch.youtube.com		172.253.63.138	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:24.413301945 CET	1.1.1.1	192.168.2.4	0x16a4	No error (0)	fcmatch.youtube.com		172.253.63.102	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:24.413301945 CET	1.1.1.1	192.168.2.4	0x16a4	No error (0)	fcmatch.youtube.com		172.253.63.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:24.578032017 CET	1.1.1.1	192.168.2.4	0xbc2d	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:24.578032017 CET	1.1.1.1	192.168.2.4	0xbc2d	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:24.578032017 CET	1.1.1.1	192.168.2.4	0xbc2d	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:24.578171968 CET	1.1.1.1	192.168.2.4	0x55ce	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:24.938327074 CET	1.1.1.1	192.168.2.4	0x24df	No error (0)	fcmatch.youtube.com		142.251.16.100	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:24.938327074 CET	1.1.1.1	192.168.2.4	0x24df	No error (0)	fcmatch.youtube.com		142.251.16.139	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:24.938327074 CET	1.1.1.1	192.168.2.4	0x24df	No error (0)	fcmatch.youtube.com		142.251.16.101	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:24.938327074 CET	1.1.1.1	192.168.2.4	0x24df	No error (0)	fcmatch.youtube.com		142.251.16.138	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:24.938327074 CET	1.1.1.1	192.168.2.4	0x24df	No error (0)	fcmatch.youtube.com		142.251.16.113	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:24.938327074 CET	1.1.1.1	192.168.2.4	0x24df	No error (0)	fcmatch.youtube.com		142.251.16.102	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:25.072777033 CET	1.1.1.1	192.168.2.4	0x4198	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:25.072777033 CET	1.1.1.1	192.168.2.4	0x4198	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.12	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:25.072777033 CET	1.1.1.1	192.168.2.4	0x4198	No error (0)	edge.gycpi.b.yahoodns.net		69.147.92.11	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:25.073668957 CET	1.1.1.1	192.168.2.4	0x9701	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:26.002101898 CET	1.1.1.1	192.168.2.4	0x36eb	No error (0)	media-wf1.digital.nuance.com	ts-wf1.digital.nuance.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:26.002101898 CET	1.1.1.1	192.168.2.4	0x36eb	No error (0)	ts-wf1.digital.nuance.com	ts-dnc-wf1.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:26.009102106 CET	1.1.1.1	192.168.2.4	0xf1a4	No error (0)	media-wf1.digital.nuance.com	ts-wf1.digital.nuance.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:26.009102106 CET	1.1.1.1	192.168.2.4	0xf1a4	No error (0)	ts-wf1.digital.nuance.com	ts-dnc-wf1.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:27.205032110 CET	1.1.1.1	192.168.2.4	0xd41	No error (0)	wellsfargo.digital.nuance.com	ts-wf1.digital.nuance.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:27.205032110 CET	1.1.1.1	192.168.2.4	0xd41	No error (0)	ts-wf1.digital.nuance.com	ts-dnc-wf1.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:27.211419106 CET	1.1.1.1	192.168.2.4	0x138e	No error (0)	wellsfargo.digital.nuance.com	ts-wf1.digital.nuance.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:27.211419106 CET	1.1.1.1	192.168.2.4	0x138e	No error (0)	ts-wf1.digital.nuance.com	ts-dnc-wf1.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:27.212194920 CET	1.1.1.1	192.168.2.4	0x6bf1	No error (0)	resources.digital-cloud-prem.medallia.com	medallia2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:27.212194920 CET	1.1.1.1	192.168.2.4	0x6bf1	No error (0)	medallia2.map.fastly.net		146.75.29.230	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:27.214353085 CET	1.1.1.1	192.168.2.4	0xc7c7	No error (0)	resources.digital-cloud-prem.medallia.com	medallia2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:27.811491966 CET	1.1.1.1	192.168.2.4	0xd6ef	No error (0)	resources.digital-cloud-prem.medallia.com	medallia2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:27.811491966 CET	1.1.1.1	192.168.2.4	0xd6ef	No error (0)	medallia2.map.fastly.net		146.75.29.230	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:27.811702013 CET	1.1.1.1	192.168.2.4	0x83ce	No error (0)	resources.digital-cloud-prem.medallia.com	medallia2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:27.815051079 CET	1.1.1.1	192.168.2.4	0x68ec	No error (0)	udc-neb.kampyle.com	cooladata.kampyle.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:27.815082073 CET	1.1.1.1	192.168.2.4	0x48f0	No error (0)	udc-neb.kampyle.com	cooladata.kampyle.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:27.815082073 CET	1.1.1.1	192.168.2.4	0x48f0	No error (0)	cooladata.kampyle.com		35.241.45.82	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:28.297560930 CET	1.1.1.1	192.168.2.4	0x137	No error (0)	wellsfargo.digital.nuance.com	ts-wf1.digital.nuance.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:28.297560930 CET	1.1.1.1	192.168.2.4	0x137	No error (0)	ts-wf1.digital.nuance.com	ts-dnc-wf1.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:28.307038069 CET	1.1.1.1	192.168.2.4	0x19c6	No error (0)	wellsfargo.digital.nuance.com	ts-wf1.digital.nuance.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:28.307038069 CET	1.1.1.1	192.168.2.4	0x19c6	No error (0)	ts-wf1.digital.nuance.com	ts-dnc-wf1.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:28.388705969 CET	1.1.1.1	192.168.2.4	0xf755	No error (0)	udc-neb.kampyle.com	cooladata.kampyle.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:28.388705969 CET	1.1.1.1	192.168.2.4	0xf755	No error (0)	cooladata.kampyle.com		35.241.45.82	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:28.389115095 CET	1.1.1.1	192.168.2.4	0x38d4	No error (0)	udc-neb.kampyle.com	cooladata.kampyle.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:35.251044989 CET	1.1.1.1	192.168.2.4	0xa92	No error (0)	www10.wellsfargomedia.com	www10.wellsfargomedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:35.254323959 CET	1.1.1.1	192.168.2.4	0xe444	No error (0)	www15.wellsfargomedia.com	www15.wellsfargomedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:35.255249977 CET	1.1.1.1	192.168.2.4	0x8549	No error (0)	www10.wellsfargomedia.com	www10.wellsfargomedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:35.259098053 CET	1.1.1.1	192.168.2.4	0xb491	No error (0)	www15.wellsfargomedia.com	www15.wellsfargomedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:38.638899088 CET	1.1.1.1	192.168.2.4	0x9444	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:38.638899088 CET	1.1.1.1	192.168.2.4	0x9444	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:43.025655985 CET	1.1.1.1	192.168.2.4	0x9c4a	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Mar 28, 2024 14:19:43.025954008 CET	1.1.1.1	192.168.2.4	0x9abc	No error (0)	ad.doubleclick.net		142.250.31.148	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:43.025954008 CET	1.1.1.1	192.168.2.4	0x9abc	No error (0)	ad.doubleclick.net		142.250.31.149	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:43.139796019 CET	1.1.1.1	192.168.2.4	0xfd45	No error (0)	www10.wellsfargomedia.com	www10.wellsfargomedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:43.140095949 CET	1.1.1.1	192.168.2.4	0x4405	No error (0)	www10.wellsfargomedia.com	www10.wellsfargomedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:50.819504023 CET	1.1.1.1	192.168.2.4	0xe59c	No error (0)	www.wellsfargo.com	www.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:50.820729971 CET	1.1.1.1	192.168.2.4	0xff49	No error (0)	www.wellsfargo.com	www.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:53.519962072 CET	1.1.1.1	192.168.2.4	0xe358	No error (0)	www17.wellsfargomedia.com	www17.wellsfargomedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:53.520700932 CET	1.1.1.1	192.168.2.4	0x6bf1	No error (0)	www17.wellsfargomedia.com	www17.wellsfargomedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:53.521137953 CET	1.1.1.1	192.168.2.4	0x64c2	No error (0)	connect.secure.wellsfargo.com	connect.secure.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:53.522530079 CET	1.1.1.1	192.168.2.4	0x3deb	No error (0)	static.wellsfargo.com	static.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:53.524128914 CET	1.1.1.1	192.168.2.4	0x33e1	No error (0)	static.wellsfargo.com	static.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:53.539284945 CET	1.1.1.1	192.168.2.4	0xc3b1	No error (0)	connect.secure.wellsfargo.com	connect.secure.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:53.635871887 CET	1.1.1.1	192.168.2.4	0x2487	No error (0)	service.maxymiser.net	service.maxymiser.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:53.637480021 CET	1.1.1.1	192.168.2.4	0x3d43	No error (0)	service.maxymiser.net	service.maxymiser.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:53.641757011 CET	1.1.1.1	192.168.2.4	0xc40c	No error (0)	c1.wfinterface.com	c1.wfinterface.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:53.642498970 CET	1.1.1.1	192.168.2.4	0x7f84	No error (0)	c1.wfinterface.com	c1.wfinterface.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:54.111885071 CET	1.1.1.1	192.168.2.4	0x28bb	No error (0)	www17.wellsfargomedia.com	www17.wellsfargomedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:54.112112045 CET	1.1.1.1	192.168.2.4	0xa1b	No error (0)	www17.wellsfargomedia.com	www17.wellsfargomedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:54.438550949 CET	1.1.1.1	192.168.2.4	0x8ee7	No error (0)	www.wellsfargo.com	www.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:54.440432072 CET	1.1.1.1	192.168.2.4	0x939c	No error (0)	www.wellsfargo.com	www.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:58.982002020 CET	1.1.1.1	192.168.2.4	0x826b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:58.982002020 CET	1.1.1.1	192.168.2.4	0x826b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:19:59.671200991 CET	1.1.1.1	192.168.2.4	0xb14a	No error (0)	ort.wellsfargo.com	ort.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:19:59.675095081 CET	1.1.1.1	192.168.2.4	0xb4ab	No error (0)	ort.wellsfargo.com	ort.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:00.879451036 CET	1.1.1.1	192.168.2.4	0x45e7	No error (0)	wellsfargobankna.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:00.879451036 CET	1.1.1.1	192.168.2.4	0x45e7	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:00.879451036 CET	1.1.1.1	192.168.2.4	0x45e7	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:00.879451036 CET	1.1.1.1	192.168.2.4	0x45e7	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		23.23.167.174	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:00.879451036 CET	1.1.1.1	192.168.2.4	0x45e7	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.213.253.195	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:00.879451036 CET	1.1.1.1	192.168.2.4	0x45e7	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.20.162.91	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:00.879451036 CET	1.1.1.1	192.168.2.4	0x45e7	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.221.144.86	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:00.879451036 CET	1.1.1.1	192.168.2.4	0x45e7	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		174.129.176.90	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:00.879451036 CET	1.1.1.1	192.168.2.4	0x45e7	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.215.140.156	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:00.879451036 CET	1.1.1.1	192.168.2.4	0x45e7	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.238.61.171	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:00.879451036 CET	1.1.1.1	192.168.2.4	0x45e7	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.205.236.190	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:00.879877090 CET	1.1.1.1	192.168.2.4	0x5f93	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:00.880199909 CET	1.1.1.1	192.168.2.4	0xf2b9	No error (0)	wellsfargobankna.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:00.880199909 CET	1.1.1.1	192.168.2.4	0xf2b9	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:00.880199909 CET	1.1.1.1	192.168.2.4	0xf2b9	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:00.881449938 CET	1.1.1.1	192.168.2.4	0xe5ea	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:01.391868114 CET	1.1.1.1	192.168.2.4	0x4952	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:01.391868114 CET	1.1.1.1	192.168.2.4	0x4952	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:01.391868114 CET	1.1.1.1	192.168.2.4	0x4952	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:01.391868114 CET	1.1.1.1	192.168.2.4	0x4952	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.219.57.96	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:01.391868114 CET	1.1.1.1	192.168.2.4	0x4952	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.73.237.231	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:01.391868114 CET	1.1.1.1	192.168.2.4	0x4952	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.213.145.49	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:01.391868114 CET	1.1.1.1	192.168.2.4	0x4952	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.192.13.192	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:01.391868114 CET	1.1.1.1	192.168.2.4	0x4952	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.225.115.99	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:01.391868114 CET	1.1.1.1	192.168.2.4	0x4952	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.194.137.112	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:01.391868114 CET	1.1.1.1	192.168.2.4	0x4952	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.215.140.156	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:01.391868114 CET	1.1.1.1	192.168.2.4	0x4952	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.2.228.88	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:01.392452002 CET	1.1.1.1	192.168.2.4	0x94f1	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:01.392452002 CET	1.1.1.1	192.168.2.4	0x94f1	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:01.392452002 CET	1.1.1.1	192.168.2.4	0x94f1	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:01.529934883 CET	1.1.1.1	192.168.2.4	0xb6f7	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:01.529934883 CET	1.1.1.1	192.168.2.4	0xb6f7	No error (0)	d20qwf0wrdtevy.cloudfront.net		18.165.98.81	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:01.529934883 CET	1.1.1.1	192.168.2.4	0xb6f7	No error (0)	d20qwf0wrdtevy.cloudfront.net		18.165.98.20	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:01.529934883 CET	1.1.1.1	192.168.2.4	0xb6f7	No error (0)	d20qwf0wrdtevy.cloudfront.net		18.165.98.58	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:01.529934883 CET	1.1.1.1	192.168.2.4	0xb6f7	No error (0)	d20qwf0wrdtevy.cloudfront.net		18.165.98.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:01.530154943 CET	1.1.1.1	192.168.2.4	0xc6d2	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:01.635818958 CET	1.1.1.1	192.168.2.4	0xe34	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:01.872513056 CET	1.1.1.1	192.168.2.4	0x4a2e	No error (0)	cm.g.doubleclick.net		172.253.63.154	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:01.872513056 CET	1.1.1.1	192.168.2.4	0x4a2e	No error (0)	cm.g.doubleclick.net		172.253.63.155	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.023583889 CET	1.1.1.1	192.168.2.4	0xca40	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.023583889 CET	1.1.1.1	192.168.2.4	0xca40	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.023583889 CET	1.1.1.1	192.168.2.4	0xca40	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.023583889 CET	1.1.1.1	192.168.2.4	0xca40	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.235.137.175	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.023583889 CET	1.1.1.1	192.168.2.4	0xca40	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.214.164.33	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.023583889 CET	1.1.1.1	192.168.2.4	0xca40	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.227.87.201	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.023583889 CET	1.1.1.1	192.168.2.4	0xca40	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.194.137.112	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.023583889 CET	1.1.1.1	192.168.2.4	0xca40	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.204.18.67	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.023583889 CET	1.1.1.1	192.168.2.4	0xca40	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.206.37.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.023583889 CET	1.1.1.1	192.168.2.4	0xca40	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.211.205.42	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.023583889 CET	1.1.1.1	192.168.2.4	0xca40	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.215.140.156	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.024971962 CET	1.1.1.1	192.168.2.4	0xb89f	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.024971962 CET	1.1.1.1	192.168.2.4	0xb89f	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.024971962 CET	1.1.1.1	192.168.2.4	0xb89f	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.151454926 CET	1.1.1.1	192.168.2.4	0x1a29	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.151454926 CET	1.1.1.1	192.168.2.4	0x1a29	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.151454926 CET	1.1.1.1	192.168.2.4	0x1a29	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.151454926 CET	1.1.1.1	192.168.2.4	0x1a29	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.151454926 CET	1.1.1.1	192.168.2.4	0x1a29	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.152566910 CET	1.1.1.1	192.168.2.4	0xd04a	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.152566910 CET	1.1.1.1	192.168.2.4	0xd04a	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.152566910 CET	1.1.1.1	192.168.2.4	0xd04a	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.533821106 CET	1.1.1.1	192.168.2.4	0xe099	No error (0)	wellsfargobankna.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.533821106 CET	1.1.1.1	192.168.2.4	0xe099	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.533821106 CET	1.1.1.1	192.168.2.4	0xe099	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.534224987 CET	1.1.1.1	192.168.2.4	0x1c08	No error (0)	wellsfargobankna.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.534224987 CET	1.1.1.1	192.168.2.4	0x1c08	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.534224987 CET	1.1.1.1	192.168.2.4	0x1c08	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.534224987 CET	1.1.1.1	192.168.2.4	0x1c08	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.206.4.244	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.534224987 CET	1.1.1.1	192.168.2.4	0x1c08	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.205.236.190	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.534224987 CET	1.1.1.1	192.168.2.4	0x1c08	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.227.131.206	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.534224987 CET	1.1.1.1	192.168.2.4	0x1c08	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.207.73.86	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.534224987 CET	1.1.1.1	192.168.2.4	0x1c08	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		107.20.35.222	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.534224987 CET	1.1.1.1	192.168.2.4	0x1c08	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.194.137.112	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.534224987 CET	1.1.1.1	192.168.2.4	0x1c08	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		23.20.84.82	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.534224987 CET	1.1.1.1	192.168.2.4	0x1c08	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.199.33.116	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.546053886 CET	1.1.1.1	192.168.2.4	0x78b9	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.546053886 CET	1.1.1.1	192.168.2.4	0x78b9	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.546053886 CET	1.1.1.1	192.168.2.4	0x78b9	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.546053886 CET	1.1.1.1	192.168.2.4	0x78b9	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.206.37.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.546053886 CET	1.1.1.1	192.168.2.4	0x78b9	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.195.6.246	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.546053886 CET	1.1.1.1	192.168.2.4	0x78b9	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.211.205.42	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.546053886 CET	1.1.1.1	192.168.2.4	0x78b9	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.235.137.175	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.546053886 CET	1.1.1.1	192.168.2.4	0x78b9	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.198.48.92	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.546053886 CET	1.1.1.1	192.168.2.4	0x78b9	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.229.92.187	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.546053886 CET	1.1.1.1	192.168.2.4	0x78b9	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.233.26.246	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.546053886 CET	1.1.1.1	192.168.2.4	0x78b9	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.234.129.59	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.549525976 CET	1.1.1.1	192.168.2.4	0xfa2b	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.549525976 CET	1.1.1.1	192.168.2.4	0xfa2b	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.549525976 CET	1.1.1.1	192.168.2.4	0xfa2b	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.635678053 CET	1.1.1.1	192.168.2.4	0xcc6b	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.635678053 CET	1.1.1.1	192.168.2.4	0xcc6b	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.635678053 CET	1.1.1.1	192.168.2.4	0xcc6b	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.635678053 CET	1.1.1.1	192.168.2.4	0xcc6b	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.635678053 CET	1.1.1.1	192.168.2.4	0xcc6b	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:02.638607025 CET	1.1.1.1	192.168.2.4	0xd1d2	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.638607025 CET	1.1.1.1	192.168.2.4	0xd1d2	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:02.638607025 CET	1.1.1.1	192.168.2.4	0xd1d2	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:03.032263041 CET	1.1.1.1	192.168.2.4	0x3176	No error (0)	wellsfargobankna.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:03.032263041 CET	1.1.1.1	192.168.2.4	0x3176	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:03.032263041 CET	1.1.1.1	192.168.2.4	0x3176	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:03.032263041 CET	1.1.1.1	192.168.2.4	0x3176	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.221.137.72	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:03.032263041 CET	1.1.1.1	192.168.2.4	0x3176	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.201.103.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:03.032263041 CET	1.1.1.1	192.168.2.4	0x3176	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.227.87.201	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:03.032263041 CET	1.1.1.1	192.168.2.4	0x3176	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.208.238.164	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:03.032263041 CET	1.1.1.1	192.168.2.4	0x3176	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.206.4.244	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:03.032263041 CET	1.1.1.1	192.168.2.4	0x3176	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.90.95.196	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:03.032263041 CET	1.1.1.1	192.168.2.4	0x3176	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.225.5.152	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:03.032263041 CET	1.1.1.1	192.168.2.4	0x3176	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.206.166.116	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:03.037921906 CET	1.1.1.1	192.168.2.4	0xc01f	No error (0)	wellsfargobankna.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:03.037921906 CET	1.1.1.1	192.168.2.4	0xc01f	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:03.037921906 CET	1.1.1.1	192.168.2.4	0xc01f	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:03.149827957 CET	1.1.1.1	192.168.2.4	0xea87	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:03.149827957 CET	1.1.1.1	192.168.2.4	0xea87	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:03.149827957 CET	1.1.1.1	192.168.2.4	0xea87	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:03.149827957 CET	1.1.1.1	192.168.2.4	0xea87	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:03.149827957 CET	1.1.1.1	192.168.2.4	0xea87	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:03.149977922 CET	1.1.1.1	192.168.2.4	0xb795	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:03.650752068 CET	1.1.1.1	192.168.2.4	0xd642	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:03.650752068 CET	1.1.1.1	192.168.2.4	0xd642	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:03.650752068 CET	1.1.1.1	192.168.2.4	0xd642	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:03.650752068 CET	1.1.1.1	192.168.2.4	0xd642	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:03.650752068 CET	1.1.1.1	192.168.2.4	0xd642	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:03.651043892 CET	1.1.1.1	192.168.2.4	0x4e9	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:04.151226044 CET	1.1.1.1	192.168.2.4	0x1969	No error (0)	s.amazon-adsystem.com		52.46.155.104	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:06.015367031 CET	1.1.1.1	192.168.2.4	0x7387	No error (0)	s.amazon-adsystem.com		209.54.182.161	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:08.158761024 CET	1.1.1.1	192.168.2.4	0xa1c	No error (0)	rubicon.wellsfargo.com	rubicon.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:08.160212994 CET	1.1.1.1	192.168.2.4	0x6ae3	No error (0)	rubicon.wellsfargo.com	rubicon.wellsfargo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:08.161035061 CET	1.1.1.1	192.168.2.4	0xc8c7	No error (0)	gbxreport-prod.wf.com	report.wf-prod.gbqofs.io		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:08.161035061 CET	1.1.1.1	192.168.2.4	0xc8c7	No error (0)	report.wf-prod.gbqofs.io	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:08.163794041 CET	1.1.1.1	192.168.2.4	0xc054	No error (0)	gbxreport-prod.wf.com	report.wf-prod.gbqofs.io		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:08.163794041 CET	1.1.1.1	192.168.2.4	0xc054	No error (0)	report.wf-prod.gbqofs.io	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 14:20:08.163794041 CET	1.1.1.1	192.168.2.4	0xc054	No error (0)	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		34.194.24.182	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:08.163794041 CET	1.1.1.1	192.168.2.4	0xc054	No error (0)	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		44.213.50.195	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:08.163794041 CET	1.1.1.1	192.168.2.4	0xc054	No error (0)	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		3.229.79.226	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:08.163794041 CET	1.1.1.1	192.168.2.4	0xc054	No error (0)	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		35.170.205.2	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:08.163794041 CET	1.1.1.1	192.168.2.4	0xc054	No error (0)	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		3.211.152.148	A (IP address)	IN (0x0001)	false
Mar 28, 2024 14:20:08.163794041 CET	1.1.1.1	192.168.2.4	0xc054	No error (0)	wf-prod-reports-961680909.us-east-1.elb.amazonaws.com		44.193.232.180	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

https:

dpm.demdex.net

wellsfargobankna.demdex.net

www.facebook.com

adobedc.demdex.net

gbxreport-prod.wf.com

api.rlcdn.com

edge.adobedc.net

2549153.fls.doubleclick.net

pdx-col.eum-appdynamics.com

googleads.g.doubleclick.net

stats.g.doubleclick.net

www.google.com

cdn.schemaapp.com

data.schemaapp.com

cm.g.doubleclick.net

fcmatch.google.com

fcmatch.youtube.com

s.yimg.com

resources.digital-cloud-prem.medallia.com

udc-neb.kampyle.com

ad.doubleclick.net

adservice.google.com

aa.agkn.com

idsync.rlcdn.com

cms.analytics.yahoo.com

ups.analytics.yahoo.com

trc.taboola.com

s.amazon-adsystem.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49762	23.221.242.90	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:18:54 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-28 13:18:54 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=236675 Date: Thu, 28 Mar 2024 13:18:54 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49766	23.221.242.90	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:18:55 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-28 13:18:56 UTC	774	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-CID: 7 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 8BFC17DD061B46CAAD2B2AEB7B19C3D8 Ref B: CH1AA2040901011 Ref C: 2023-07-21T06:04:00Z X-MSEdge-Ref: Ref A: 1421F39FA7224BE199CC2F2C3DD24574 Ref B: CHI30EDGE0415 Ref C: 2023-07-21T06:04:00Z Content-Type: application/octet-stream X-Azure-Ref: 0DMGnYgAAAACXaXykPZuVRq4aV6pCkeO8U0pDRURHRTAzMTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=236653 Date: Thu, 28 Mar 2024 13:18:56 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-28 13:18:56 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49820	52.45.39.174	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:00 UTC	739	OUT	GET /id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=1&d_coop_unsafe=1&ts=1711631938573 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:00 UTC	821	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:00 GMT Content-Type: application/json;charset=utf-8 Content-Length: 960 Connection: close X-TID: Bq7ejloVTKg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.wellsfargo.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-va6-1-v057-00c8a6470.edge-va6.demdex.com 2 ms set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:00 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-28 13:19:00 UTC	960	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 32 31 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 61 61 2e 61 67 6b 6e 2e Data Ascii: {"d_mid":"33918683021254472264168527825999287273","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"21","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//aa.agkn.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49824	52.45.39.174	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:01 UTC	957	OUT	GET /id?d_visid_ver=5.2.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=1&d_mid=33918683021254472264168527825999287273&d_coop_unsafe=1&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=wfacookieidsync%011120240328061851126288949%011&ts=1711631940641 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378
2024-03-28 13:19:01 UTC	821	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:01 GMT Content-Type: application/json;charset=utf-8 Content-Length: 960 Connection: close X-TID: K7vnyXDwTi0= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.wellsfargo.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-va6-1-v057-0419d5867.edge-va6.demdex.com 2 ms set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:01 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-28 13:19:01 UTC	960	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 32 31 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 61 61 2e 61 67 6b 6e 2e Data Ascii: {"d_mid":"33918683021254472264168527825999287273","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"21","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//aa.agkn.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49825	44.213.253.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:01 UTC	724	OUT	POST /event?d_dil_ver=9.5&_ts=1711631938588 HTTP/1.1 Host: wellsfargobankna.demdex.net Connection: keep-alive Content-Length: 429 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378
2024-03-28 13:19:01 UTC	429	OUT	Data Raw: 64 5f 6d 69 64 3d 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 26 64 5f 6e 73 69 64 3d 31 26 64 5f 63 6f 6f 70 5f 75 6e 73 61 66 65 3d 31 26 64 5f 63 69 64 5f 69 63 3d 77 66 61 63 6f 6f 6b 69 65 69 64 73 79 6e 63 25 30 31 31 31 32 30 32 34 30 33 32 38 30 36 31 38 35 31 31 32 36 32 38 38 39 34 39 25 30 31 31 26 64 5f 6c 64 3d 5f 74 73 25 33 44 31 37 31 31 36 33 31 39 33 38 35 38 38 26 64 5f 72 74 62 64 3d 6a 73 6f 6e 26 64 5f 6a 73 6f 6e 76 3d 31 26 64 5f 64 73 74 3d 31 26 63 5f 61 70 70 5f 69 64 3d 57 57 57 26 63 5f 77 66 61 63 6f 6f 6b 69 65 3d 31 31 32 30 32 34 30 33 32 38 30 36 31 38 35 31 31 32 36 32 38 38 39 34 39 26 63 5f 70 61 67 65 5f 74 79 70 65 3d 42 52 4f 57 53 45 52 26 63 5f Data Ascii: d_mid=33918683021254472264168527825999287273&d_nsid=1&d_coop_unsafe=1&d_cid_ic=wfacookieidsync%011120240328061851126288949%011&d_ld=_ts%3D1711631938588&d_rtbd=json&d_jsonv=1&d_dst=1&c_app_id=WWW&c_wfacookie=1120240328061851126288949&c_page_type=BROWSER&c_
2024-03-28 13:19:01 UTC	822	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:01 GMT Content-Type: application/json;charset=utf-8 Content-Length: 1165 Connection: close X-TID: sAr8vEo4QPw= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.wellsfargo.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-va6-1-v057-039993f65.edge-va6.demdex.com 8 ms set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:01 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-28 13:19:01 UTC	1165	IN	Data Raw: 7b 22 73 74 75 66 66 22 3a 5b 7b 22 63 6e 22 3a 22 69 61 2d 70 72 6f 64 22 2c 22 63 76 22 3a 22 69 64 3d 31 33 35 35 37 38 31 38 2c 32 32 30 33 33 39 30 32 2c 32 32 32 38 32 38 31 38 2c 32 33 38 36 33 33 32 33 2c 32 34 34 39 34 33 37 36 2c 32 34 35 34 34 32 30 30 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 2e 6e 6f 64 6f 6d 61 69 6e 2e 63 6f 6d 22 7d 2c 7b 22 63 6e 22 3a 22 69 61 2d 70 72 65 70 72 6f 64 22 2c 22 63 76 22 3a 22 69 64 3d 39 32 35 35 30 37 37 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 2e 6e 6f 64 6f 6d 61 69 6e 2e 63 6f 6d 22 7d 2c 7b 22 63 6e 22 3a 22 74 6e 6c 2d 70 72 6f 64 22 2c 22 63 76 22 3a 22 69 64 3d 39 32 35 35 30 37 37 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 2e 6e 6f 64 6f 6d 61 69 6e 2e 63 6f 6d Data Ascii: {"stuff":[{"cn":"ia-prod","cv":"id=13557818,22033902,22282818,23863323,24494376,24544200","ttl":30,"dmn":".nodomain.com"},{"cn":"ia-preprod","cv":"id=9255077","ttl":30,"dmn":".nodomain.com"},{"cn":"tnl-prod","cv":"id=9255077","ttl":30,"dmn":".nodomain.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49836	44.195.11.1	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:02 UTC	535	OUT	GET /id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=1&d_coop_unsafe=1&ts=1711631938573 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378
2024-03-28 13:19:02 UTC	710	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:02 GMT Content-Type: application/json;charset=utf-8 Content-Length: 960 Connection: close X-TID: 7ghUjguLRyI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-1-v057-0a94deb74.edge-va6.demdex.com 2 ms set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:02 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-28 13:19:02 UTC	960	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 32 31 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 61 61 2e 61 67 6b 6e 2e Data Ascii: {"d_mid":"33918683021254472264168527825999287273","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"21","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//aa.agkn.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49842	44.195.11.1	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:02 UTC	698	OUT	GET /id?d_visid_ver=5.2.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=1&d_mid=33918683021254472264168527825999287273&d_coop_unsafe=1&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=wfacookieidsync%011120240328061851126288949%011&ts=1711631940641 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378
2024-03-28 13:19:02 UTC	710	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:02 GMT Content-Type: application/json;charset=utf-8 Content-Length: 960 Connection: close X-TID: s+LAAusRT4c= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-1-v057-099d9c583.edge-va6.demdex.com 5 ms set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:02 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-28 13:19:02 UTC	960	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 32 31 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 61 61 2e 61 67 6b 6e 2e Data Ascii: {"d_mid":"33918683021254472264168527825999287273","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"21","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//aa.agkn.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49844	3.208.238.164	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:02 UTC	443	OUT	GET /event?d_dil_ver=9.5&_ts=1711631938588 HTTP/1.1 Host: wellsfargobankna.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378
2024-03-28 13:19:02 UTC	916	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:02 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: JV62RdlDRgc= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v057-0187a13c2.edge-va6.demdex.com 13 ms set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:02 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: wellsfargobankna=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:02 GMT; Path=/; Domain=.wellsfargobankna.demdex.net; Secure; SameSite=None
2024-03-28 13:19:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49854	31.13.66.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:02 UTC	765	OUT	GET /tr?id=1578146899100389&ev=ALL_ALL_PAGE_WFHomepage&cd[currency]=USD&cd[value]=0.00&cd[Product]=&cd[Subproduct]=&cd[PageID]=&cd[customer_status]=n&cd[customer_type]=&dpo=LDU&dpoco=0&dpost=0 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:03 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3407, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 28 Mar 2024 13:19:03 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49868	157.240.229.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:03 UTC	527	OUT	GET /tr?id=1578146899100389&ev=ALL_ALL_PAGE_WFHomepage&cd[currency]=USD&cd[value]=0.00&cd[Product]=&cd[Subproduct]=&cd[PageID]=&cd[customer_status]=n&cd[customer_type]=&dpo=LDU&dpoco=0&dpost=0 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:03 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 28 Mar 2024 13:19:03 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49886	63.140.39.130	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:06 UTC	811	OUT	POST /ee/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=da61659a-abde-48a3-9419-2c57a11180c1 HTTP/1.1 Host: adobedc.demdex.net Connection: keep-alive Content-Length: 189 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378
2024-03-28 13:19:06 UTC	189	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 7b 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 66 65 74 63 68 22 3a 5b 22 45 43 49 44 22 5d 7d 7d 2c 22 78 64 6d 22 3a 7b 22 69 64 65 6e 74 69 74 79 4d 61 70 22 3a 7b 22 45 43 49 44 22 3a 5b 7b 22 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 7d 5d 7d 7d 2c 22 6d 65 74 61 22 3a 7b 22 73 74 61 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 22 2c 22 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 7d 7d Data Ascii: {"query":{"identity":{"fetch":["ECID"]}},"xdm":{"identityMap":{"ECID":[{"id":"33918683021254472264168527825999287273"}]}},"meta":{"state":{"domain":"wellsfargo.com","cookiesEnabled":true}}}
2024-03-28 13:19:06 UTC	783	IN	HTTP/1.1 200 OK x-request-id: da61659a-abde-48a3-9419-2c57a11180c1 vary: Origin access-control-allow-origin: https://www.wellsfargo.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Thu, 28 Mar 2024 13:19:06 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Domain=demdex.net; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-03-28 13:19:06 UTC	732	IN	Data Raw: 32 64 35 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 64 61 36 31 36 35 39 61 2d 61 62 64 65 2d 34 38 61 33 2d 39 34 31 39 2d 32 63 35 37 61 31 31 31 38 30 63 31 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 34 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 2d5{"requestId":"da61659a-abde-48a3-9419-2c57a11180c1","handle":[{"payload":[{"id":"33918683021254472264168527825999287273","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"34","ttlSeconds":1800},{"scope":"AA
2024-03-28 13:19:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49887	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:06 UTC	731	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:06 UTC	1035	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:06 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=u4QNUHNh+jyNu8TIFBT3QA5Dr3exK+TQt3MHZUf1EPLBYZtSzM+L6okkoOgL/hHDws/ZLlrT5QZKM+38OhSYqglMZDWzJ5L1Pg2I5oBiVZiOinoH/bF+wVkMfzG4/pOEaTDL8Zwvvkc5kk/qs+LAKJAqXj1o2dT0XOIZli4LzDis; Expires=Thu, 04 Apr 2024 13:19:06 GMT; Path=/ Set-Cookie: AWSALBTGCORS=u4QNUHNh+jyNu8TIFBT3QA5Dr3exK+TQt3MHZUf1EPLBYZtSzM+L6okkoOgL/hHDws/ZLlrT5QZKM+38OhSYqglMZDWzJ5L1Pg2I5oBiVZiOinoH/bF+wVkMfzG4/pOEaTDL8Zwvvkc5kk/qs+LAKJAqXj1o2dT0XOIZli4LzDis; Expires=Thu, 04 Apr 2024 13:19:06 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:06 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49819	34.107.165.188	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:07 UTC	572	OUT	GET /api/identity/idl?pid=1317 HTTP/1.1 Host: api.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:07 UTC	517	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: https://www.wellsfargo.com Cache-Control: no-cache, no-store Timing-Allow-Origin: * Date: Thu, 28 Mar 2024 13:19:07 GMT Content-Length: 10 Content-Type: text/plain; charset=utf-8 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:07 UTC	10	IN	Data Raw: 7b 22 69 64 6c 22 3a 22 22 7d Data Ascii: {"idl":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49905	44.213.253.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:07 UTC	781	OUT	POST /event?d_dil_ver=9.5&_ts=1711631946944 HTTP/1.1 Host: wellsfargobankna.demdex.net Connection: keep-alive Content-Length: 426 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; wellsfargobankna=33955380241426191774167127150413392378
2024-03-28 13:19:07 UTC	426	OUT	Data Raw: 64 5f 6d 69 64 3d 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 26 64 5f 6e 73 69 64 3d 31 26 64 5f 63 6f 6f 70 5f 75 6e 73 61 66 65 3d 31 26 64 5f 63 69 64 5f 69 63 3d 77 66 61 63 6f 6f 6b 69 65 69 64 73 79 6e 63 25 30 31 31 31 32 30 32 34 30 33 32 38 30 36 31 38 35 31 31 32 36 32 38 38 39 34 39 25 30 31 31 26 64 5f 6c 64 3d 5f 74 73 25 33 44 31 37 31 31 36 33 31 39 34 36 39 34 34 26 64 5f 72 74 62 64 3d 6a 73 6f 6e 26 64 5f 6a 73 6f 6e 76 3d 31 26 64 5f 64 73 74 3d 31 26 63 5f 61 70 70 5f 69 64 3d 57 57 57 26 63 5f 77 66 61 63 6f 6f 6b 69 65 3d 31 31 32 30 32 34 30 33 32 38 30 36 31 38 35 31 31 32 36 32 38 38 39 34 39 26 63 5f 70 61 67 65 5f 74 79 70 65 3d 42 52 4f 57 53 45 52 26 63 5f Data Ascii: d_mid=33918683021254472264168527825999287273&d_nsid=1&d_coop_unsafe=1&d_cid_ic=wfacookieidsync%011120240328061851126288949%011&d_ld=_ts%3D1711631946944&d_rtbd=json&d_jsonv=1&d_dst=1&c_app_id=WWW&c_wfacookie=1120240328061851126288949&c_page_type=BROWSER&c_
2024-03-28 13:19:08 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:07 GMT Content-Type: application/json;charset=utf-8 Content-Length: 1174 Connection: close X-TID: ZQ6/ho7ASOk= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.wellsfargo.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-va6-1-v057-0c3aeed41.edge-va6.demdex.com 8 ms set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:07 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: wellsfargobankna=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:07 GMT; Path=/; Domain=.wellsfargobankna.demdex.net; Secure; SameSite=None
2024-03-28 13:19:08 UTC	1174	IN	Data Raw: 7b 22 73 74 75 66 66 22 3a 5b 7b 22 63 6e 22 3a 22 69 61 2d 70 72 6f 64 22 2c 22 63 76 22 3a 22 69 64 3d 31 33 35 35 37 38 31 38 2c 32 32 30 33 33 39 30 32 2c 32 32 32 38 32 38 31 38 2c 32 33 35 30 38 31 38 32 2c 32 33 38 36 33 33 32 33 2c 32 34 34 39 34 33 37 36 2c 32 34 35 34 34 32 30 30 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 2e 6e 6f 64 6f 6d 61 69 6e 2e 63 6f 6d 22 7d 2c 7b 22 63 6e 22 3a 22 69 61 2d 70 72 65 70 72 6f 64 22 2c 22 63 76 22 3a 22 69 64 3d 39 32 35 35 30 37 37 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 2e 6e 6f 64 6f 6d 61 69 6e 2e 63 6f 6d 22 7d 2c 7b 22 63 6e 22 3a 22 74 6e 6c 2d 70 72 6f 64 22 2c 22 63 76 22 3a 22 69 64 3d 39 32 35 35 30 37 37 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 2e 6e 6f 64 Data Ascii: {"stuff":[{"cn":"ia-prod","cv":"id=13557818,22033902,22282818,23508182,23863323,24494376,24544200","ttl":30,"dmn":".nodomain.com"},{"cn":"ia-preprod","cv":"id=9255077","ttl":30,"dmn":".nodomain.com"},{"cn":"tnl-prod","cv":"id=9255077","ttl":30,"dmn":".nod

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49924	63.140.38.91	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:09 UTC	512	OUT	GET /ee/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=da61659a-abde-48a3-9419-2c57a11180c1 HTTP/1.1 Host: adobedc.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378
2024-03-28 13:19:09 UTC	418	IN	HTTP/1.1 404 Not Found x-request-id: da61659a-abde-48a3-9419-2c57a11180c1 vary: Origin date: Thu, 28 Mar 2024 13:19:08 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49927	63.140.39.65	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:09 UTC	758	OUT	POST /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=5afea92c-2d16-47bb-bad5-3f8c2691ab16 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 352 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:09 UTC	352	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 7b 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 66 65 74 63 68 22 3a 5b 22 45 43 49 44 22 5d 7d 7d 2c 22 6d 65 74 61 22 3a 7b 22 73 74 61 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 22 2c 22 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 6b 6e 64 63 74 72 5f 31 42 41 41 31 35 46 33 35 34 46 37 33 31 45 36 30 41 34 43 39 38 41 34 5f 41 64 6f 62 65 4f 72 67 5f 69 64 65 6e 74 69 74 79 22 2c 22 76 61 6c 75 65 22 3a 22 43 69 59 7a 4d 7a 6b 78 4f 44 59 34 4d 7a 41 79 4d 54 49 31 4e 44 51 33 4d 6a 49 32 4e 44 45 32 4f 44 55 79 4e 7a 67 79 4e 54 6b 35 4f 54 49 34 4e 7a 49 33 4d 31 49 51 43 4b 4b 6b 32 36 6e 6f 4d 52 67 42 4b 67 Data Ascii: {"query":{"identity":{"fetch":["ECID"]}},"meta":{"state":{"domain":"wellsfargo.com","cookiesEnabled":true,"entries":[{"key":"kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity","value":"CiYzMzkxODY4MzAyMTI1NDQ3MjI2NDE2ODUyNzgyNTk5OTI4NzI3M1IQCKKk26noMRgBKg
2024-03-28 13:19:09 UTC	635	IN	HTTP/1.1 200 OK x-request-id: 5afea92c-2d16-47bb-bad5-3f8c2691ab16 vary: Origin access-control-allow-origin: https://www.wellsfargo.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Thu, 28 Mar 2024 13:19:08 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-03-28 13:19:09 UTC	527	IN	Data Raw: 32 30 38 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 35 61 66 65 61 39 32 63 2d 32 64 31 36 2d 34 37 62 62 2d 62 61 64 35 2d 33 66 38 63 32 36 39 31 61 62 31 36 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 34 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 208{"requestId":"5afea92c-2d16-47bb-bad5-3f8c2691ab16","handle":[{"payload":[{"id":"33918683021254472264168527825999287273","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"34","ttlSeconds":1800},{"scope":"AA
2024-03-28 13:19:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49926	63.140.39.65	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:09 UTC	751	OUT	POST /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=f134fe53-5091-456a-be12-2dea853e8e15 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 3432 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:09 UTC	3432	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 71 75 65 72 79 22 3a 7b 22 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 3a 7b 22 73 63 68 65 6d 61 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 64 65 66 61 75 6c 74 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 68 74 6d 6c 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 6a 73 6f 6e 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c Data Ascii: {"events":[{"query":{"personalization":{"schemas":["https://ns.adobe.com/personalization/default-content-item","https://ns.adobe.com/personalization/html-content-item","https://ns.adobe.com/personalization/json-content-item","https://ns.adobe.com/personal
2024-03-28 13:19:09 UTC	635	IN	HTTP/1.1 200 OK x-request-id: f134fe53-5091-456a-be12-2dea853e8e15 vary: Origin access-control-allow-origin: https://www.wellsfargo.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Thu, 28 Mar 2024 13:19:08 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-03-28 13:19:09 UTC	527	IN	Data Raw: 32 30 38 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 66 31 33 34 66 65 35 33 2d 35 30 39 31 2d 34 35 36 61 2d 62 65 31 32 2d 32 64 65 61 38 35 33 65 38 65 31 35 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 34 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 208{"requestId":"f134fe53-5091-456a-be12-2dea853e8e15","handle":[{"payload":[{"id":"33918683021254472264168527825999287273","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"34","ttlSeconds":1800},{"scope":"AA
2024-03-28 13:19:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49928	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:09 UTC	830	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=u4QNUHNh+jyNu8TIFBT3QA5Dr3exK+TQt3MHZUf1EPLBYZtSzM+L6okkoOgL/hHDws/ZLlrT5QZKM+38OhSYqglMZDWzJ5L1Pg2I5oBiVZiOinoH/bF+wVkMfzG4/pOEaTDL8Zwvvkc5kk/qs+LAKJAqXj1o2dT0XOIZli4LzDis
2024-03-28 13:19:09 UTC	924	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:09 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=2+craBM2NpGCqcUbcDHLWPK+sG+yERLLGemAr0XIShbTBoWTEijRwz35pUj+/UNc4JTlKa/+SR0oMqJVnq42l6hffJv3LGAiMcB+WND/2J/CUnCf2Sx97Yoy8XJJd0uKVvSqSYXgQcwxzrZCcyCJIFV9QDVLNfwnBPAT2DOxM46G; Expires=Thu, 04 Apr 2024 13:19:09 GMT; Path=/ Set-Cookie: AWSALBTGCORS=2+craBM2NpGCqcUbcDHLWPK+sG+yERLLGemAr0XIShbTBoWTEijRwz35pUj+/UNc4JTlKa/+SR0oMqJVnq42l6hffJv3LGAiMcB+WND/2J/CUnCf2Sx97Yoy8XJJd0uKVvSqSYXgQcwxzrZCcyCJIFV9QDVLNfwnBPAT2DOxM46G; Expires=Thu, 04 Apr 2024 13:19:09 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:09 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49930	3.208.238.164	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:09 UTC	500	OUT	GET /event?d_dil_ver=9.5&_ts=1711631946944 HTTP/1.1 Host: wellsfargobankna.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; wellsfargobankna=33955380241426191774167127150413392378
2024-03-28 13:19:09 UTC	915	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:09 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: +JZhVcDVQ5w= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v057-006db7a3b.edge-va6.demdex.com 9 ms set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:09 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: wellsfargobankna=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:09 GMT; Path=/; Domain=.wellsfargobankna.demdex.net; Secure; SameSite=None
2024-03-28 13:19:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49934	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:09 UTC	1171	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=2c4120a6-8cbe-4983-b2ed-45670688b5d0&sn=1&cfg&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 3178 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=u4QNUHNh+jyNu8TIFBT3QA5Dr3exK+TQt3MHZUf1EPLBYZtSzM+L6okkoOgL/hHDws/ZLlrT5QZKM+38OhSYqglMZDWzJ5L1Pg2I5oBiVZiOinoH/bF+wVkMfzG4/pOEaTDL8Zwvvkc5kk/qs+LAKJAqXj1o2dT0XOIZli4LzDis
2024-03-28 13:19:09 UTC	3178	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 26 73 6e 3d 31 26 70 3d 32 63 34 31 32 30 61 36 2d 38 63 62 65 2d 34 39 38 33 2d 62 32 65 64 2d 34 35 36 37 30 36 38 38 62 35 64 30 26 73 65 67 3d 25 32 46 26 73 70 3d 26 65 3d 6c 75 62 39 67 74 33 70 7e 32 7e 2d 7e 4e 75 5f 70 76 32 77 38 73 2a 73 5f 31 32 38 30 78 39 30 37 2a 73 63 5f 31 32 38 30 78 31 30 32 34 7e 76 6e 2e 32 5f 56 32 56 73 62 48 4d 67 52 6d 46 79 5a 32 38 67 51 6d 46 75 61 79 42 38 49 45 5a 70 62 6d 46 75 59 32 6c 68 62 43 42 54 5a 58 4a 32 61 57 4e 6c 63 79 41 6d 49 45 39 75 62 47 6c 75 5a 53 42 43 59 57 35 72 61 57 35 6e 2a 77 69 6e 64 6f 77 44 65 70 74 68 2e 30 5f 30 2a 68 69 73 74 6f 72 79 4c 65 6e 2e 30 5f 31 Data Ascii: v=2&r=https%3A%2F%2Fwww.wellsfargo.com%2F&sn=1&p=2c4120a6-8cbe-4983-b2ed-45670688b5d0&seg=%2F&sp=&e=lub9gt3p~2~-~Nu_pv2w8ss_1280x907sc_1280x1024~vn.2_V2VsbHMgRmFyZ28gQmFuayB8IEZpbmFuY2lhbCBTZXJ2aWNlcyAmIE9ubGluZSBCYW5raW5nwindowDepth.0_0historyLen.0_1
2024-03-28 13:19:09 UTC	873	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:09 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=YHbe1QUbihmucrQUO4JHIhcvVKBYP9uvN93z7Jh2hmdz1OBH+ibtv/Hg4A878ll+XjPj6vVKpdnbbUDar8zMkVyiU6WPgPPOl6idk5rQ6HlWVxQSXP58X2Q+H0EKsHmmHsxqYWZ0akz09MH6AF3bzfQwuFgRCjkpkxGO3g8nR4HI; Expires=Thu, 04 Apr 2024 13:19:09 GMT; Path=/ Set-Cookie: AWSALBTGCORS=YHbe1QUbihmucrQUO4JHIhcvVKBYP9uvN93z7Jh2hmdz1OBH+ibtv/Hg4A878ll+XjPj6vVKpdnbbUDar8zMkVyiU6WPgPPOl6idk5rQ6HlWVxQSXP58X2Q+H0EKsHmmHsxqYWZ0akz09MH6AF3bzfQwuFgRCjkpkxGO3g8nR4HI; Expires=Thu, 04 Apr 2024 13:19:09 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:09 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49936	172.253.63.149	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:09 UTC	1006	OUT	GET /activityi;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? HTTP/1.1 Host: 2549153.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:09 UTC	974	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://2549153.fls.doubleclick.net/activityi;dc_pre=CIDN4PKFl4UDFaYKdgYd4tUFzw;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49937	34.107.165.188	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:09 UTC	362	OUT	GET /api/identity/idl?pid=1317 HTTP/1.1 Host: api.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:09 UTC	460	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Cache-Control: no-cache, no-store Timing-Allow-Origin: * Date: Thu, 28 Mar 2024 13:19:09 GMT Content-Length: 10 Content-Type: text/plain; charset=utf-8 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:09 UTC	10	IN	Data Raw: 7b 22 69 64 6c 22 3a 22 22 7d Data Ascii: {"idl":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49938	63.140.39.65	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:09 UTC	751	OUT	POST /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=900cd0b2-1c9d-47f7-a525-63111b62e5d0 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 3667 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:09 UTC	3667	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 78 64 6d 22 3a 7b 22 77 65 62 22 3a 7b 22 77 65 62 50 61 67 65 44 65 74 61 69 6c 73 22 3a 7b 22 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 22 7d 2c 22 77 65 62 52 65 66 65 72 72 65 72 22 3a 7b 22 55 52 4c 22 3a 22 22 7d 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 73 63 72 65 65 6e 48 65 69 67 68 74 22 3a 31 30 32 34 2c 22 73 63 72 65 65 6e 57 69 64 74 68 22 3a 31 32 38 30 2c 22 73 63 72 65 65 6e 4f 72 69 65 6e 74 61 74 69 6f 6e 22 3a 22 6c 61 6e 64 73 63 61 70 65 22 7d 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 7b 22 74 79 70 65 22 3a 22 62 72 6f 77 73 65 72 22 2c 22 62 72 6f 77 73 65 72 44 65 74 61 69 6c 73 22 3a 7b 22 76 69 65 77 70 6f 72 74 57 69 64 74 68 22 3a Data Ascii: {"events":[{"xdm":{"web":{"webPageDetails":{"URL":"https://www.wellsfargo.com/"},"webReferrer":{"URL":""}},"device":{"screenHeight":1024,"screenWidth":1280,"screenOrientation":"landscape"},"environment":{"type":"browser","browserDetails":{"viewportWidth":
2024-03-28 13:19:09 UTC	635	IN	HTTP/1.1 200 OK x-request-id: 900cd0b2-1c9d-47f7-a525-63111b62e5d0 vary: Origin access-control-allow-origin: https://www.wellsfargo.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Thu, 28 Mar 2024 13:19:09 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-03-28 13:19:09 UTC	527	IN	Data Raw: 32 30 38 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 39 30 30 63 64 30 62 32 2d 31 63 39 64 2d 34 37 66 37 2d 61 35 32 35 2d 36 33 31 31 31 62 36 32 65 35 64 30 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 34 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 208{"requestId":"900cd0b2-1c9d-47f7-a525-63111b62e5d0","handle":[{"payload":[{"id":"33918683021254472264168527825999287273","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"34","ttlSeconds":1800},{"scope":"AA
2024-03-28 13:19:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49939	31.13.66.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:09 UTC	765	OUT	GET /tr?id=1578146899100389&ev=ALL_ALL_PAGE_WFHomepage&cd[currency]=USD&cd[value]=0.00&cd[Product]=&cd[Subproduct]=&cd[PageID]=&cd[customer_status]=n&cd[customer_type]=&dpo=LDU&dpoco=0&dpost=0 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:09 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3406, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 28 Mar 2024 13:19:09 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49944	172.253.63.149	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:09 UTC	1040	OUT	GET /activityi;dc_pre=CIDN4PKFl4UDFaYKdgYd4tUFzw;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? HTTP/1.1 Host: 2549153.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:10 UTC	812	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:10 GMT Expires: Thu, 28 Mar 2024 13:19:10 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 28-Mar-2024 13:34:10 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-28 13:19:10 UTC	440	IN	Data Raw: 31 64 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 49 44 4e 34 50 4b 46 6c 34 55 44 46 61 Data Ascii: 1d4<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CIDN4PKFl4UDFa
2024-03-28 13:19:10 UTC	35	IN	Data Raw: 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 22 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: ellsfargo.com%2F"/></body></html>
2024-03-28 13:19:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49946	63.140.39.65	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:10 UTC	758	OUT	POST /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=f2e33ec7-add7-4d65-bbc5-35397cba5374 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 352 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:10 UTC	352	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 7b 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 66 65 74 63 68 22 3a 5b 22 45 43 49 44 22 5d 7d 7d 2c 22 6d 65 74 61 22 3a 7b 22 73 74 61 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 22 2c 22 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 6b 6e 64 63 74 72 5f 31 42 41 41 31 35 46 33 35 34 46 37 33 31 45 36 30 41 34 43 39 38 41 34 5f 41 64 6f 62 65 4f 72 67 5f 69 64 65 6e 74 69 74 79 22 2c 22 76 61 6c 75 65 22 3a 22 43 69 59 7a 4d 7a 6b 78 4f 44 59 34 4d 7a 41 79 4d 54 49 31 4e 44 51 33 4d 6a 49 32 4e 44 45 32 4f 44 55 79 4e 7a 67 79 4e 54 6b 35 4f 54 49 34 4e 7a 49 33 4d 31 49 51 43 4b 4b 6b 32 36 6e 6f 4d 52 67 42 4b 67 Data Ascii: {"query":{"identity":{"fetch":["ECID"]}},"meta":{"state":{"domain":"wellsfargo.com","cookiesEnabled":true,"entries":[{"key":"kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity","value":"CiYzMzkxODY4MzAyMTI1NDQ3MjI2NDE2ODUyNzgyNTk5OTI4NzI3M1IQCKKk26noMRgBKg
2024-03-28 13:19:10 UTC	635	IN	HTTP/1.1 200 OK x-request-id: f2e33ec7-add7-4d65-bbc5-35397cba5374 vary: Origin access-control-allow-origin: https://www.wellsfargo.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Thu, 28 Mar 2024 13:19:09 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-03-28 13:19:10 UTC	532	IN	Data Raw: 32 30 38 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 66 32 65 33 33 65 63 37 2d 61 64 64 37 2d 34 64 36 35 2d 62 62 63 35 2d 33 35 33 39 37 63 62 61 35 33 37 34 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 34 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 208{"requestId":"f2e33ec7-add7-4d65-bbc5-35397cba5374","handle":[{"payload":[{"id":"33918683021254472264168527825999287273","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"34","ttlSeconds":1800},{"scope":"AA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49947	63.140.39.65	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:10 UTC	758	OUT	POST /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=317314e2-8dae-44f3-9162-d4a17bf67080 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 352 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:10 UTC	352	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 7b 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 66 65 74 63 68 22 3a 5b 22 45 43 49 44 22 5d 7d 7d 2c 22 6d 65 74 61 22 3a 7b 22 73 74 61 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 22 2c 22 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 6b 6e 64 63 74 72 5f 31 42 41 41 31 35 46 33 35 34 46 37 33 31 45 36 30 41 34 43 39 38 41 34 5f 41 64 6f 62 65 4f 72 67 5f 69 64 65 6e 74 69 74 79 22 2c 22 76 61 6c 75 65 22 3a 22 43 69 59 7a 4d 7a 6b 78 4f 44 59 34 4d 7a 41 79 4d 54 49 31 4e 44 51 33 4d 6a 49 32 4e 44 45 32 4f 44 55 79 4e 7a 67 79 4e 54 6b 35 4f 54 49 34 4e 7a 49 33 4d 31 49 51 43 4b 4b 6b 32 36 6e 6f 4d 52 67 42 4b 67 Data Ascii: {"query":{"identity":{"fetch":["ECID"]}},"meta":{"state":{"domain":"wellsfargo.com","cookiesEnabled":true,"entries":[{"key":"kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity","value":"CiYzMzkxODY4MzAyMTI1NDQ3MjI2NDE2ODUyNzgyNTk5OTI4NzI3M1IQCKKk26noMRgBKg
2024-03-28 13:19:10 UTC	635	IN	HTTP/1.1 200 OK x-request-id: 317314e2-8dae-44f3-9162-d4a17bf67080 vary: Origin access-control-allow-origin: https://www.wellsfargo.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Thu, 28 Mar 2024 13:19:09 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-03-28 13:19:10 UTC	527	IN	Data Raw: 32 30 38 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 33 31 37 33 31 34 65 32 2d 38 64 61 65 2d 34 34 66 33 2d 39 31 36 32 2d 64 34 61 31 37 62 66 36 37 30 38 30 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 34 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 208{"requestId":"317314e2-8dae-44f3-9162-d4a17bf67080","handle":[{"payload":[{"id":"33918683021254472264168527825999287273","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"34","ttlSeconds":1800},{"scope":"AA
2024-03-28 13:19:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49948	142.251.111.148	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:10 UTC	925	OUT	GET /activityi;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? HTTP/1.1 Host: 2549153.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:10 UTC	996	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://2549153.fls.doubleclick.net/activityi;dc_pre=CJeLjfOFl4UDFd0VdgYdAnwNgA;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49949	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:10 UTC	1040	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=YHbe1QUbihmucrQUO4JHIhcvVKBYP9uvN93z7Jh2hmdz1OBH+ibtv/Hg4A878ll+XjPj6vVKpdnbbUDar8zMkVyiU6WPgPPOl6idk5rQ6HlWVxQSXP58X2Q+H0EKsHmmHsxqYWZ0akz09MH6AF3bzfQwuFgRCjkpkxGO3g8nR4HI
2024-03-28 13:19:10 UTC	1035	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:10 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=WtKY4zlHlqFjN7rysBcOeV/yyvkeg122+ahi6KwZXrAH9N2dSW1d9U4AOAOLb+hkwaAa9PrYyhO0AhE484Tfth3Rwss3zcu8MuaOMNsNHjiIYAHratWJ8GSPbcCc1e5zKeMSZl8s6h+5YiIDNurcxWofoZQNh/lOScfbtycUDuzf; Expires=Thu, 04 Apr 2024 13:19:10 GMT; Path=/ Set-Cookie: AWSALBTGCORS=WtKY4zlHlqFjN7rysBcOeV/yyvkeg122+ahi6KwZXrAH9N2dSW1d9U4AOAOLb+hkwaAa9PrYyhO0AhE484Tfth3Rwss3zcu8MuaOMNsNHjiIYAHratWJ8GSPbcCc1e5zKeMSZl8s6h+5YiIDNurcxWofoZQNh/lOScfbtycUDuzf; Expires=Thu, 04 Apr 2024 13:19:10 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:10 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49953	63.140.39.65	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:10 UTC	751	OUT	POST /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=8acba3f7-0ecc-4bd9-9f1e-c9ed2fbea068 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 4373 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:10 UTC	4373	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 71 75 65 72 79 22 3a 7b 22 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 3a 7b 22 73 63 68 65 6d 61 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 64 65 66 61 75 6c 74 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 68 74 6d 6c 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 6a 73 6f 6e 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c Data Ascii: {"events":[{"query":{"personalization":{"schemas":["https://ns.adobe.com/personalization/default-content-item","https://ns.adobe.com/personalization/html-content-item","https://ns.adobe.com/personalization/json-content-item","https://ns.adobe.com/personal
2024-03-28 13:19:10 UTC	635	IN	HTTP/1.1 200 OK x-request-id: 8acba3f7-0ecc-4bd9-9f1e-c9ed2fbea068 vary: Origin access-control-allow-origin: https://www.wellsfargo.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Thu, 28 Mar 2024 13:19:10 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-03-28 13:19:10 UTC	527	IN	Data Raw: 32 30 38 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 38 61 63 62 61 33 66 37 2d 30 65 63 63 2d 34 62 64 39 2d 39 66 31 65 2d 63 39 65 64 32 66 62 65 61 30 36 38 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 34 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 208{"requestId":"8acba3f7-0ecc-4bd9-9f1e-c9ed2fbea068","handle":[{"payload":[{"id":"33918683021254472264168527825999287273","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"34","ttlSeconds":1800},{"scope":"AA
2024-03-28 13:19:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49954	63.140.39.65	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:10 UTC	751	OUT	POST /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=70366921-0956-4540-aa73-5cb5ec2194d8 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 3798 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:10 UTC	3798	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 71 75 65 72 79 22 3a 7b 22 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 3a 7b 22 73 63 68 65 6d 61 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 64 65 66 61 75 6c 74 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 68 74 6d 6c 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 6a 73 6f 6e 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c Data Ascii: {"events":[{"query":{"personalization":{"schemas":["https://ns.adobe.com/personalization/default-content-item","https://ns.adobe.com/personalization/html-content-item","https://ns.adobe.com/personalization/json-content-item","https://ns.adobe.com/personal
2024-03-28 13:19:10 UTC	635	IN	HTTP/1.1 200 OK x-request-id: 70366921-0956-4540-aa73-5cb5ec2194d8 vary: Origin access-control-allow-origin: https://www.wellsfargo.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Thu, 28 Mar 2024 13:19:10 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-03-28 13:19:10 UTC	527	IN	Data Raw: 32 30 38 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 37 30 33 36 36 39 32 31 2d 30 39 35 36 2d 34 35 34 30 2d 61 61 37 33 2d 35 63 62 35 65 63 32 31 39 34 64 38 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 34 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 208{"requestId":"70366921-0956-4540-aa73-5cb5ec2194d8","handle":[{"payload":[{"id":"33918683021254472264168527825999287273","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"34","ttlSeconds":1800},{"scope":"AA
2024-03-28 13:19:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49957	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:10 UTC	1171	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=6440b9bb-94c9-403c-a3ca-18f1176e2355&sn=1&cfg&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 3193 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=WtKY4zlHlqFjN7rysBcOeV/yyvkeg122+ahi6KwZXrAH9N2dSW1d9U4AOAOLb+hkwaAa9PrYyhO0AhE484Tfth3Rwss3zcu8MuaOMNsNHjiIYAHratWJ8GSPbcCc1e5zKeMSZl8s6h+5YiIDNurcxWofoZQNh/lOScfbtycUDuzf
2024-03-28 13:19:10 UTC	3193	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 26 73 6e 3d 31 26 70 3d 36 34 34 30 62 39 62 62 2d 39 34 63 39 2d 34 30 33 63 2d 61 33 63 61 2d 31 38 66 31 31 37 36 65 32 33 35 35 26 73 65 67 3d 25 32 46 26 73 70 3d 26 65 3d 6c 75 62 39 67 77 69 68 7e 32 7e 2d 7e 4e 75 5f 70 76 32 77 38 73 2a 68 5f 63 32 74 70 63 41 25 33 44 25 33 44 2a 73 5f 31 32 38 30 78 39 30 37 2a 73 63 5f 31 32 38 30 78 31 30 32 34 7e 76 6e 2e 32 5f 56 32 56 73 62 48 4d 67 52 6d 46 79 5a 32 38 67 51 6d 46 75 61 79 42 38 49 45 5a 70 62 6d 46 75 59 32 6c 68 62 43 42 54 5a 58 4a 32 61 57 4e 6c 63 79 41 6d 49 45 39 75 62 47 6c 75 5a 53 42 43 59 57 35 72 61 57 35 6e 2a 77 69 6e 64 6f 77 44 65 70 74 68 2e 30 5f 30 Data Ascii: v=2&r=https%3A%2F%2Fwww.wellsfargo.com%2F&sn=1&p=6440b9bb-94c9-403c-a3ca-18f1176e2355&seg=%2F&sp=&e=lub9gwih~2~-~Nu_pv2w8sh_c2tpcA%3D%3Ds_1280x907sc_1280x1024~vn.2_V2VsbHMgRmFyZ28gQmFuayB8IEZpbmFuY2lhbCBTZXJ2aWNlcyAmIE9ubGluZSBCYW5raW5nwindowDepth.0_0
2024-03-28 13:19:10 UTC	873	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:10 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=AMI00pYZBUblZN/9Bmi01p9YmJm1D86di5Z+/tSUvQrT+Do6gGLWzNb3mOfrnPZy1F7wNiB8iXbsuPsRF0FsxlM49Tlvar0qAFXr062Qb8Pjp8LyUCCKxVGwPzwplpy0UJsBy3SdMnv5SW+lNMtkB404Hc/qsMPMYA5leo16EQaE; Expires=Thu, 04 Apr 2024 13:19:10 GMT; Path=/ Set-Cookie: AWSALBTGCORS=AMI00pYZBUblZN/9Bmi01p9YmJm1D86di5Z+/tSUvQrT+Do6gGLWzNb3mOfrnPZy1F7wNiB8iXbsuPsRF0FsxlM49Tlvar0qAFXr062Qb8Pjp8LyUCCKxVGwPzwplpy0UJsBy3SdMnv5SW+lNMtkB404Hc/qsMPMYA5leo16EQaE; Expires=Thu, 04 Apr 2024 13:19:10 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:10 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49955	172.253.63.149	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:10 UTC	1089	OUT	GET /activityi;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? HTTP/1.1 Host: 2549153.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-28 13:19:10 UTC	1017	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://2549153.fls.doubleclick.net/activityi;dc_pre=CLmiqfOFl4UDFXYQdgYdkywNxA;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49959	142.251.111.148	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:10 UTC	999	OUT	GET /activityi;dc_pre=CJeLjfOFl4UDFd0VdgYdAnwNgA;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? HTTP/1.1 Host: 2549153.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-28 13:19:11 UTC	984	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:10 GMT Expires: Thu, 28 Mar 2024 13:19:10 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUmzR0RneqXpgK8jsl51yer659bGIN36iFghAMYuq2FOXzc75hwX8SIWlTs2360; expires=Sat, 28-Mar-2026 13:19:10 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-28 13:19:11 UTC	268	IN	Data Raw: 31 65 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4a 65 4c 6a 66 4f 46 6c 34 55 44 46 64 Data Ascii: 1ea<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CJeLjfOFl4UDFd
2024-03-28 13:19:11 UTC	229	IN	Data Raw: 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 32 35 34 39 31 35 33 3b 74 79 70 65 3d 61 6c 6c 76 34 30 3b 63 61 74 3d 61 6c 6c 5f 61 30 30 3b 6f 72 64 3d 32 35 37 39 39 35 37 36 37 39 38 34 37 3b 67 74 6d 3d 32 6f 64 38 67 30 3b 61 75 69 64 64 63 3d 2a 3b 75 31 3d 31 31 32 30 32 34 30 33 32 38 30 36 31 38 35 31 31 32 36 32 38 38 39 34 39 3b 75 35 3d 6e 3b 75 38 3d 57 57 57 3b 75 31 31 3d 50 52 4f 44 55 43 54 49 4f 4e 3b 75 32 33 3d 44 45 53 4b 54 4f 50 3b 70 73 3d 31 3b 7e 6f 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 22 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=*;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F"/></body></html>
2024-03-28 13:19:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49961	142.251.163.155	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:10 UTC	1062	OUT	GET /ddm/fls/z/dc_pre=CIDN4PKFl4UDFaYKdgYd4tUFzw;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:11 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49970	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	1091	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=2c4120a6-8cbe-4983-b2ed-45670688b5d0&sn=1&cfg&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTG=2+craBM2NpGCqcUbcDHLWPK+sG+yERLLGemAr0XIShbTBoWTEijRwz35pUj+/UNc4JTlKa/+SR0oMqJVnq42l6hffJv3LGAiMcB+WND/2J/CUnCf2Sx97Yoy8XJJd0uKVvSqSYXgQcwxzrZCcyCJIFV9QDVLNfwnBPAT2DOxM46G; ROUTEID=.cligate1; AWSALBTGCORS=WtKY4zlHlqFjN7rysBcOeV/yyvkeg122+ahi6KwZXrAH9N2dSW1d9U4AOAOLb+hkwaAa9PrYyhO0AhE484Tfth3Rwss3zcu8MuaOMNsNHjiIYAHratWJ8GSPbcCc1e5zKeMSZl8s6h+5YiIDNurcxWofoZQNh/lOScfbtycUDuzf
2024-03-28 13:19:11 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:11 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=sIx1uyocsJktH2HWD2M4WULimd8wPyJiuYDMxTzl7KzY763ZN4m3oGeJM2Iqr1d+Jq090lnhT4eJ+n6VQqdJKd9esc0Kfy67QRbg/uX5B0nria6OKslJwETm+bgzNVXGZ9Gr/UjjhNFsZeZNJgvqow0WmX4G+2omuuuYtxcldNNA; Expires=Thu, 04 Apr 2024 13:19:11 GMT; Path=/ Set-Cookie: AWSALBTGCORS=sIx1uyocsJktH2HWD2M4WULimd8wPyJiuYDMxTzl7KzY763ZN4m3oGeJM2Iqr1d+Jq090lnhT4eJ+n6VQqdJKd9esc0Kfy67QRbg/uX5B0nria6OKslJwETm+bgzNVXGZ9Gr/UjjhNFsZeZNJgvqow0WmX4G+2omuuuYtxcldNNA; Expires=Thu, 04 Apr 2024 13:19:11 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:11 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49976	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	1032	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTG=2+craBM2NpGCqcUbcDHLWPK+sG+yERLLGemAr0XIShbTBoWTEijRwz35pUj+/UNc4JTlKa/+SR0oMqJVnq42l6hffJv3LGAiMcB+WND/2J/CUnCf2Sx97Yoy8XJJd0uKVvSqSYXgQcwxzrZCcyCJIFV9QDVLNfwnBPAT2DOxM46G; ROUTEID=.cligate1; AWSALBTGCORS=AMI00pYZBUblZN/9Bmi01p9YmJm1D86di5Z+/tSUvQrT+Do6gGLWzNb3mOfrnPZy1F7wNiB8iXbsuPsRF0FsxlM49Tlvar0qAFXr062Qb8Pjp8LyUCCKxVGwPzwplpy0UJsBy3SdMnv5SW+lNMtkB404Hc/qsMPMYA5leo16EQaE
2024-03-28 13:19:11 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:11 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=afM7Hb03tmAYGn+UC9e4C4ANx+APNYJOQD4RjwV/bfCI1U8ohM0Qj952WhrWM6FZe7WywtT80GtV1JgoFBzM6bBp8fyk1g6/QR135lne1/D7qdBExwGjX1bP1P7LyIjBLTgXqfNyLSepylmCb2OEj+udVj3xOzvlrJu1QJzt3aPm; Expires=Thu, 04 Apr 2024 13:19:11 GMT; Path=/ Set-Cookie: AWSALBTGCORS=afM7Hb03tmAYGn+UC9e4C4ANx+APNYJOQD4RjwV/bfCI1U8ohM0Qj952WhrWM6FZe7WywtT80GtV1JgoFBzM6bBp8fyk1g6/QR135lne1/D7qdBExwGjX1bP1P7LyIjBLTgXqfNyLSepylmCb2OEj+udVj3xOzvlrJu1QJzt3aPm; Expires=Thu, 04 Apr 2024 13:19:11 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:11 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49974	157.240.229.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	527	OUT	GET /tr?id=1578146899100389&ev=ALL_ALL_PAGE_WFHomepage&cd[currency]=USD&cd[value]=0.00&cd[Product]=&cd[Subproduct]=&cd[PageID]=&cd[customer_status]=n&cd[customer_type]=&dpo=LDU&dpoco=0&dpost=0 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:11 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3406, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 28 Mar 2024 13:19:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49967	142.251.111.148	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	1008	OUT	GET /activityi;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? HTTP/1.1 Host: 2549153.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-28 13:19:11 UTC	1039	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://2549153.fls.doubleclick.net/activityi;dc_pre=CJqRxPOFl4UDFUc1dgYdYJsNTA;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49977	63.140.38.132	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	451	OUT	GET /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=f134fe53-5091-456a-be12-2dea853e8e15 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:11 UTC	418	IN	HTTP/1.1 404 Not Found x-request-id: f134fe53-5091-456a-be12-2dea853e8e15 vary: Origin date: Thu, 28 Mar 2024 13:19:10 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49978	63.140.38.132	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	459	OUT	GET /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=5afea92c-2d16-47bb-bad5-3f8c2691ab16 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:11 UTC	418	IN	HTTP/1.1 404 Not Found x-request-id: 5afea92c-2d16-47bb-bad5-3f8c2691ab16 vary: Origin date: Thu, 28 Mar 2024 13:19:10 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49980	63.140.38.132	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	451	OUT	GET /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=900cd0b2-1c9d-47f7-a525-63111b62e5d0 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:11 UTC	418	IN	HTTP/1.1 404 Not Found x-request-id: 900cd0b2-1c9d-47f7-a525-63111b62e5d0 vary: Origin date: Thu, 28 Mar 2024 13:19:10 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49981	63.140.38.132	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	459	OUT	GET /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=317314e2-8dae-44f3-9162-d4a17bf67080 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:11 UTC	418	IN	HTTP/1.1 404 Not Found x-request-id: 317314e2-8dae-44f3-9162-d4a17bf67080 vary: Origin date: Thu, 28 Mar 2024 13:19:10 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49979	63.140.38.132	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	459	OUT	GET /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=f2e33ec7-add7-4d65-bbc5-35397cba5374 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:11 UTC	418	IN	HTTP/1.1 404 Not Found x-request-id: f2e33ec7-add7-4d65-bbc5-35397cba5374 vary: Origin date: Thu, 28 Mar 2024 13:19:11 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49962	35.163.101.91	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	663	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive Content-Length: 12670 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:11 UTC	12670	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 33 2e 37 2e 31 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 30 22 2c 22 65 74 22 3a 30 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 22 2c 22 74 73 22 3a 31 37 31 31 36 33 31 39 32 39 36 33 37 2c 22 75 64 22 3a 7b 22 43 75 73 74 6f 6d 65 72 53 65 67 6d 65 6e 74 22 3a 22 54 50 42 22 7d 2c 22 6d 63 22 3a 7b 22 50 4c 54 22 3a 31 35 32 30 37 2c 22 46 42 54 22 3a 32 36 39 31 2c 22 46 45 54 22 3a 31 32 35 31 36 2c 22 44 52 54 22 3a 31 32 34 33 38 2c 22 50 52 54 22 3a 37 38 2c 22 44 4f 4d 22 3a 31 35 31 32 39 2c 22 74 73 22 3a 31 37 31 31 36 33 31 39 32 39 36 33 37 2c 22 50 4c 43 22 3a 31 7d 2c 22 6d 78 22 3a 7b 22 50 4c 54 22 3a 38 37 39 35 2c 22 46 42 54 22 3a 31 34 39 36 2c 22 53 43 54 Data Ascii: {"vr":"4.3.7.1","dt":"R","rg":"0","es":[{"eg":"0","et":0,"eu":"0://1/","ts":1711631929637,"ud":{"CustomerSegment":"TPB"},"mc":{"PLT":15207,"FBT":2691,"FET":12516,"DRT":12438,"PRT":78,"DOM":15129,"ts":1711631929637,"PLC":1},"mx":{"PLT":8795,"FBT":1496,"SCT
2024-03-28 13:19:11 UTC	1216	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:11 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:27\|g:3f867703-6b38-4ae4-91c4-0aef9c299f7f; Path=/; Expires=Thu, 28-Mar-2024 13:19:41 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:27\|g:3f867703-6b38-4ae4-91c4-0aef9c299f7f\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:19:41 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:19:41 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:27\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:19:41 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:27\|i:559461\|e:2; Path=/; Expires=Thu, 28-Mar-2024 13:19:41 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:27\|i:559461\|e:2\|t:1711631951286; Path=/; Expires=Thu, 28-Mar-2024 13:19:41 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49984	63.140.38.132	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	451	OUT	GET /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=8acba3f7-0ecc-4bd9-9f1e-c9ed2fbea068 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:11 UTC	418	IN	HTTP/1.1 404 Not Found x-request-id: 8acba3f7-0ecc-4bd9-9f1e-c9ed2fbea068 vary: Origin date: Thu, 28 Mar 2024 13:19:10 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49972	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	1179	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=6440b9bb-94c9-403c-a3ca-18f1176e2355&sn=2&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 416 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=AMI00pYZBUblZN/9Bmi01p9YmJm1D86di5Z+/tSUvQrT+Do6gGLWzNb3mOfrnPZy1F7wNiB8iXbsuPsRF0FsxlM49Tlvar0qAFXr062Qb8Pjp8LyUCCKxVGwPzwplpy0UJsBy3SdMnv5SW+lNMtkB404Hc/qsMPMYA5leo16EQaE
2024-03-28 13:19:11 UTC	416	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 26 73 6e 3d 32 26 70 3d 36 34 34 30 62 39 62 62 2d 39 34 63 39 2d 34 30 33 63 2d 61 33 63 61 2d 31 38 66 31 31 37 36 65 32 33 35 35 26 73 65 67 3d 25 32 33 73 6b 69 70 26 73 70 3d 25 32 33 73 6b 69 70 26 65 3d 6c 75 62 39 67 77 6a 62 7e 31 30 32 7e 2d 7e 4e 74 5f 68 61 73 68 2a 63 5f 49 33 4e 72 61 58 41 25 33 44 2a 68 5f 6c 6f 61 64 2a 6c 5f 4c 77 25 33 44 25 33 44 2a 6c 64 5f 31 30 2a 6c 6c 5f 32 64 34 7e 65 76 65 6e 74 49 64 2e 30 5f 33 7e 2d 7e 2d 7e 2d 7e 7e 6c 75 62 39 67 77 6a 77 7e 32 37 7e 2d 2a 30 28 30 29 2a 4d 41 49 4e 2a 30 28 33 29 2a 30 28 31 29 7e 2d 7e 63 6f 2e 33 5f 5a 48 42 66 62 44 63 25 33 44 2a 73 65 6c 65 63 74 Data Ascii: v=2&r=https%3A%2F%2Fwww.wellsfargo.com%2F&sn=2&p=6440b9bb-94c9-403c-a3ca-18f1176e2355&seg=%23skip&sp=%23skip&e=lub9gwjb~102~-~Nt_hashc_I3NraXA%3Dh_loadl_Lw%3D%3Dld_10ll_2d4~eventId.0_3~-~-~-~~lub9gwjw~27~-0(0)MAIN0(3)0(1)~-~co.3_ZHBfbDc%3Dselect
2024-03-28 13:19:11 UTC	815	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:11 GMT Content-Type: application/json Content-Length: 270 Connection: close Set-Cookie: AWSALBTG=IrLpZ6muAXj+6QxA21qqt5qwYK+npptdL7BOv67jLJqieOCepZmv26elFwK0JO5V0EDZ/3BqHZ2iuZU2Ebto5W4jJQbJvb63ftw9jGSfEjc+lO9/KY66xnE8uzCpxyqJZGwKM+jefEr/AJt4wIx+5PZkNhRszaQ/Xk8Fqe6zWjT8; Expires=Thu, 04 Apr 2024 13:19:11 GMT; Path=/ Set-Cookie: AWSALBTGCORS=IrLpZ6muAXj+6QxA21qqt5qwYK+npptdL7BOv67jLJqieOCepZmv26elFwK0JO5V0EDZ/3BqHZ2iuZU2Ebto5W4jJQbJvb63ftw9jGSfEjc+lO9/KY66xnE8uzCpxyqJZGwKM+jefEr/AJt4wIx+5PZkNhRszaQ/Xk8Fqe6zWjT8; Expires=Thu, 04 Apr 2024 13:19:11 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:11 UTC	270	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 6e 75 6c 6c 2c 22 75 73 61 67 65 22 3a 7b 22 73 65 73 73 69 6f 6e 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 61 70 69 43 61 6c 6c 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 63 75 73 74 6f 6d 53 65 72 76 65 72 43 61 6c 6c 73 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 64 61 74 61 4c 69 6d 69 74 22 3a 20 34 31 39 34 33 30 34 7d 2c 22 62 6c 6f 63 6b 52 65 63 Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":null,"usage":{"sessionQuotaBreach":false, "apiCallQuotaBreach":false, "customServerCallsBreach":false, "dataLimit": 4194304},"blockRec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49987	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	1091	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=6440b9bb-94c9-403c-a3ca-18f1176e2355&sn=1&cfg&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTG=2+craBM2NpGCqcUbcDHLWPK+sG+yERLLGemAr0XIShbTBoWTEijRwz35pUj+/UNc4JTlKa/+SR0oMqJVnq42l6hffJv3LGAiMcB+WND/2J/CUnCf2Sx97Yoy8XJJd0uKVvSqSYXgQcwxzrZCcyCJIFV9QDVLNfwnBPAT2DOxM46G; ROUTEID=.cligate1; AWSALBTGCORS=AMI00pYZBUblZN/9Bmi01p9YmJm1D86di5Z+/tSUvQrT+Do6gGLWzNb3mOfrnPZy1F7wNiB8iXbsuPsRF0FsxlM49Tlvar0qAFXr062Qb8Pjp8LyUCCKxVGwPzwplpy0UJsBy3SdMnv5SW+lNMtkB404Hc/qsMPMYA5leo16EQaE
2024-03-28 13:19:11 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:11 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=nwJqqH9Ar9RMzhM+CVdB5MVlivpFTLyOqvF2z2H3vRNDGuqNdT2JV7yQoeopyp1D0f6+7J92L+Ds4yNXbVW+l++RkgRlskErU4mRLbTVg8khY08gXp1HbGTrFZHP9VsuPc12ysIOc3HM/FvqzTt417j51KgYNWyWfLZsdwqX6ZUQ; Expires=Thu, 04 Apr 2024 13:19:11 GMT; Path=/ Set-Cookie: AWSALBTGCORS=nwJqqH9Ar9RMzhM+CVdB5MVlivpFTLyOqvF2z2H3vRNDGuqNdT2JV7yQoeopyp1D0f6+7J92L+Ds4yNXbVW+l++RkgRlskErU4mRLbTVg8khY08gXp1HbGTrFZHP9VsuPc12ysIOc3HM/FvqzTt417j51KgYNWyWfLZsdwqX6ZUQ; Expires=Thu, 04 Apr 2024 13:19:11 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:11 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49982	172.253.63.149	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	1123	OUT	GET /activityi;dc_pre=CLmiqfOFl4UDFXYQdgYdkywNxA;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? HTTP/1.1 Host: 2549153.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-28 13:19:11 UTC	984	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:11 GMT Expires: Thu, 28 Mar 2024 13:19:11 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUmO6rEdnwC9jHkq7PA82ih0pJTdxhqaS3elKHZONXOPdt0eqN_mxpba92lC4oI; expires=Sat, 28-Mar-2026 13:19:11 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-28 13:19:11 UTC	268	IN	Data Raw: 31 66 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4c 6d 69 71 66 4f 46 6c 34 55 44 46 58 Data Ascii: 1ff<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CLmiqfOFl4UDFX
2024-03-28 13:19:11 UTC	250	IN	Data Raw: 73 72 63 3d 32 35 34 39 31 35 33 3b 74 79 70 65 3d 61 6c 6c 76 34 30 3b 63 61 74 3d 61 6c 6c 5f 61 30 30 3b 6f 72 64 3d 34 38 32 31 37 32 35 35 31 30 34 33 36 3b 67 74 6d 3d 32 6f 64 38 67 30 3b 61 75 69 64 64 63 3d 2a 3b 75 31 3d 31 31 32 30 32 34 30 33 32 38 30 36 31 38 35 31 31 32 36 32 38 38 39 34 39 3b 75 35 3d 6e 3b 75 38 3d 57 57 57 3b 75 31 31 3d 50 52 4f 44 55 43 54 49 4f 4e 3b 75 31 38 3d 33 33 39 35 35 33 38 30 32 34 31 34 32 36 31 39 31 37 37 34 31 36 37 31 32 37 31 35 30 34 31 33 33 39 32 33 37 38 3b 75 32 33 3d 44 45 53 4b 54 4f 50 3b 70 73 3d 31 3b 7e 6f 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 22 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=*;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F"/></body></html>
2024-03-28 13:19:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49983	142.251.16.157	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	1156	OUT	GET /pagead/viewthroughconversion/984436569/?random=1711631950119&cv=9&fst=1711631950119&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&hn=www.google.com&async=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-28 13:19:11 UTC	1415	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/984436569/?random=1711631950119&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&async=1&is_vtc=1&cid=CAQSKQB7FLtqwzXszmaXi0QUEjOcY3Wmdb1eUOmwgNG_8BJ2ZvlgCks6MA78&random=1285347098&resp=GooglemKTybQhCsO Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUlAMvjjjK25bbehBi6wBRl9Mr5suNbpjUhiGaDshhF1LvlFgSx2qYF52K3l; expires=Sat, 28-Mar-2026 13:19:11 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49995	142.251.16.157	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	1156	OUT	GET /pagead/viewthroughconversion/984436569/?random=1711631950134&cv=9&fst=1711631950134&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&hn=www.google.com&async=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-28 13:19:11 UTC	1415	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/984436569/?random=1711631950134&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&async=1&is_vtc=1&cid=CAQSKQB7FLtqM5DLuAhk7bpblogvOuSpfhIyx29EWpc_8gvuaFbCRK6Erxyt&random=2498095841&resp=GooglemKTybQhCsO Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf; expires=Sat, 28-Mar-2026 13:19:11 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49997	172.253.62.154	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	951	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j92&tid=UA-107148943-1&cid=1511061535.1711631950&jid=329816228&gjid=1416060457&_gid=1102582973.1711631950&_u=4GBACUAKBAAAAC~&z=1774189394 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.wellsfargo.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmzR0RneqXpgK8jsl51yer659bGIN36iFghAMYuq2FOXzc75hwX8SIWlTs2360
2024-03-28 13:19:11 UTC	596	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.wellsfargo.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 28 Mar 2024 13:19:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:11 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	50000	142.251.16.148	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	802	OUT	GET /activityi;dc_pre=CJeLjfOFl4UDFd0VdgYdAnwNgA;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? HTTP/1.1 Host: 2549153.fls.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmzR0RneqXpgK8jsl51yer659bGIN36iFghAMYuq2FOXzc75hwX8SIWlTs2360
2024-03-28 13:19:11 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:11 GMT Expires: Thu, 28 Mar 2024 13:19:11 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-28 13:19:11 UTC	497	IN	Data Raw: 31 65 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4a 65 4c 6a 66 4f 46 6c 34 55 44 46 64 Data Ascii: 1ea<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CJeLjfOFl4UDFd
2024-03-28 13:19:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	50003	63.140.38.132	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	451	OUT	GET /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=70366921-0956-4540-aa73-5cb5ec2194d8 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:11 UTC	418	IN	HTTP/1.1 404 Not Found x-request-id: 70366921-0956-4540-aa73-5cb5ec2194d8 vary: Origin date: Thu, 28 Mar 2024 13:19:10 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	50001	142.251.167.157	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	862	OUT	GET /ddm/fls/z/dc_pre=CIDN4PKFl4UDFaYKdgYd4tUFzw;src=2549153;type=allv40;cat=all_a00;ord=2579957679847;gtm=2od8g0;auiddc=;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:11 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	50007	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	1100	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=6440b9bb-94c9-403c-a3ca-18f1176e2355&sn=2&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=nwJqqH9Ar9RMzhM+CVdB5MVlivpFTLyOqvF2z2H3vRNDGuqNdT2JV7yQoeopyp1D0f6+7J92L+Ds4yNXbVW+l++RkgRlskErU4mRLbTVg8khY08gXp1HbGTrFZHP9VsuPc12ysIOc3HM/FvqzTt417j51KgYNWyWfLZsdwqX6ZUQ; AWSALBTGCORS=IrLpZ6muAXj+6QxA21qqt5qwYK+npptdL7BOv67jLJqieOCepZmv26elFwK0JO5V0EDZ/3BqHZ2iuZU2Ebto5W4jJQbJvb63ftw9jGSfEjc+lO9/KY66xnE8uzCpxyqJZGwKM+jefEr/AJt4wIx+5PZkNhRszaQ/Xk8Fqe6zWjT8
2024-03-28 13:19:11 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:11 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=ZjWKT+8Fkk3op7T5ER8g2Roa8xMrJeHfrA97tpr8/drhe/bX0sB+JIObmlyBPvygTYR1UcOWirwivU5GZ8rl8WXW4W+LKBA1KycNXx3MdIAwfdYIF4IhSexXV2CRGj12TuthSAsRQx9zwJaX0YZql13AX27SeLuGUkigKNJ11zME; Expires=Thu, 04 Apr 2024 13:19:11 GMT; Path=/ Set-Cookie: AWSALBTGCORS=ZjWKT+8Fkk3op7T5ER8g2Roa8xMrJeHfrA97tpr8/drhe/bX0sB+JIObmlyBPvygTYR1UcOWirwivU5GZ8rl8WXW4W+LKBA1KycNXx3MdIAwfdYIF4IhSexXV2CRGj12TuthSAsRQx9zwJaX0YZql13AX27SeLuGUkigKNJ11zME; Expires=Thu, 04 Apr 2024 13:19:11 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:11 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	50004	142.251.111.148	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	1083	OUT	GET /activityi;dc_pre=CJqRxPOFl4UDFUc1dgYdYJsNTA;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? HTTP/1.1 Host: 2549153.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmzR0RneqXpgK8jsl51yer659bGIN36iFghAMYuq2FOXzc75hwX8SIWlTs2360
2024-03-28 13:19:11 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:11 GMT Expires: Thu, 28 Mar 2024 13:19:11 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-28 13:19:11 UTC	540	IN	Data Raw: 32 31 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4a 71 52 78 50 4f 46 6c 34 55 44 46 55 Data Ascii: 215<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CJqRxPOFl4UDFU
2024-03-28 13:19:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	50008	142.251.163.155	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	1105	OUT	GET /ddm/fls/z/dc_pre=CLmiqfOFl4UDFXYQdgYdkywNxA;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:12 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	50010	172.253.62.105	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	1352	OUT	GET /pagead/1p-user-list/984436569/?random=1711631950119&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&async=1&is_vtc=1&cid=CAQSKQB7FLtqwzXszmaXi0QUEjOcY3Wmdb1eUOmwgNG_8BJ2ZvlgCks6MA78&random=1285347098&resp=GooglemKTybQhCsO HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:12 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	50015	172.253.62.105	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	1352	OUT	GET /pagead/1p-user-list/984436569/?random=1711631950134&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&async=1&is_vtc=1&cid=CAQSKQB7FLtqM5DLuAhk7bpblogvOuSpfhIyx29EWpc_8gvuaFbCRK6Erxyt&random=2498095841&resp=GooglemKTybQhCsO HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:12 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	50018	172.253.62.105	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:11 UTC	1005	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j92&tid=UA-107148943-1&cid=1511061535.1711631950&jid=329816228&_u=4GBACUAKBAAAAC~&z=1637724088 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:12 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	50019	172.253.62.154	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:12 UTC	692	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j92&tid=UA-107148943-1&cid=1511061535.1711631950&jid=329816228&gjid=1416060457&_gid=1102582973.1711631950&_u=4GBACUAKBAAAAC~&z=1774189394 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
2024-03-28 13:19:12 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 28 Mar 2024 13:19:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:12 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	50011	35.163.101.91	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:12 UTC	670	OUT	GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M50 HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:12 UTC	507	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:12 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 expires: 0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:12 UTC	32	IN	Data Raw: 31 61 0d 0a 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b 0d 0a Data Ascii: 1aGIF89a,;
2024-03-28 13:19:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	50013	35.163.101.91	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:12 UTC	670	OUT	GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M51 HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:12 UTC	507	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:12 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 expires: 0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:12 UTC	32	IN	Data Raw: 31 61 0d 0a 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b 0d 0a Data Ascii: 1aGIF89a,;
2024-03-28 13:19:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	50016	34.211.102.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:12 UTC	403	OUT	GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:12 UTC	1211	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:12 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:cf73cecd-03b7-4433-bd6d-aa614a05eb2e; Path=/; Expires=Thu, 28-Mar-2024 13:19:42 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:0\|g:cf73cecd-03b7-4433-bd6d-aa614a05eb2e\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:19:42 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:19:42 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:19:42 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2; Path=/; Expires=Thu, 28-Mar-2024 13:19:42 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631952330; Path=/; Expires=Thu, 28-Mar-2024 13:19:42 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	50023	142.251.16.148	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:12 UTC	842	OUT	GET /activityi;dc_pre=CJqRxPOFl4UDFUc1dgYdYJsNTA;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F? HTTP/1.1 Host: 2549153.fls.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
2024-03-28 13:19:12 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:12 GMT Expires: Thu, 28 Mar 2024 13:19:12 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-28 13:19:12 UTC	540	IN	Data Raw: 32 31 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4a 71 52 78 50 4f 46 6c 34 55 44 46 55 Data Ascii: 215<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CJqRxPOFl4UDFU
2024-03-28 13:19:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	50031	142.251.167.157	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:12 UTC	905	OUT	GET /ddm/fls/z/dc_pre=CLmiqfOFl4UDFXYQdgYdkywNxA;src=2549153;type=allv40;cat=all_a00;ord=4821725510436;gtm=2od8g0;auiddc=;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:12 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	50035	172.253.115.104	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:12 UTC	1114	OUT	GET /pagead/1p-user-list/984436569/?random=1711631950119&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&async=1&is_vtc=1&cid=CAQSKQB7FLtqwzXszmaXi0QUEjOcY3Wmdb1eUOmwgNG_8BJ2ZvlgCks6MA78&random=1285347098&resp=GooglemKTybQhCsO HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:12 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	50034	172.253.115.104	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:12 UTC	1114	OUT	GET /pagead/1p-user-list/984436569/?random=1711631950134&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Financial%20Services%20%26%20Online%20Banking&async=1&is_vtc=1&cid=CAQSKQB7FLtqM5DLuAhk7bpblogvOuSpfhIyx29EWpc_8gvuaFbCRK6Erxyt&random=2498095841&resp=GooglemKTybQhCsO HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:12 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	50036	172.253.115.104	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:12 UTC	767	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j92&tid=UA-107148943-1&cid=1511061535.1711631950&jid=329816228&_u=4GBACUAKBAAAAC~&z=1637724088 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:12 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	50038	34.211.102.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:12 UTC	432	OUT	GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M50 HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:13 UTC	507	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:12 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 expires: 0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:13 UTC	32	IN	Data Raw: 31 61 0d 0a 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b 0d 0a Data Ascii: 1aGIF89a,;
2024-03-28 13:19:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	50040	34.211.102.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:12 UTC	432	OUT	GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZF&msg=Assert%20fail%3A%20M51 HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:13 UTC	507	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:13 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 expires: 0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:13 UTC	32	IN	Data Raw: 31 61 0d 0a 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b 0d 0a Data Ascii: 1aGIF89a,;
2024-03-28 13:19:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	50052	35.163.101.91	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:13 UTC	663	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive Content-Length: 10347 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:13 UTC	10347	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 33 2e 37 2e 31 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 30 22 2c 22 65 74 22 3a 30 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 23 32 22 2c 22 74 73 22 3a 31 37 31 31 36 33 31 39 34 32 32 30 37 2c 22 75 64 22 3a 7b 22 43 75 73 74 6f 6d 65 72 53 65 67 6d 65 6e 74 22 3a 22 54 50 42 22 7d 2c 22 6d 63 22 3a 7b 22 50 4c 54 22 3a 37 30 38 30 2c 22 46 42 54 22 3a 31 34 34 32 2c 22 46 45 54 22 3a 35 36 33 38 2c 22 44 52 54 22 3a 35 35 34 30 2c 22 50 52 54 22 3a 39 38 2c 22 44 4f 4d 22 3a 36 39 38 32 2c 22 74 73 22 3a 31 37 31 31 36 33 31 39 34 32 32 30 37 2c 22 50 4c 43 22 3a 31 7d 2c 22 6d 78 22 3a 7b 22 50 4c 54 22 3a 34 34 38 31 2c 22 46 42 54 22 3a 39 35 35 2c 22 53 43 54 22 3a 34 Data Ascii: {"vr":"4.3.7.1","dt":"R","rg":"0","es":[{"eg":"0","et":0,"eu":"0://1/#2","ts":1711631942207,"ud":{"CustomerSegment":"TPB"},"mc":{"PLT":7080,"FBT":1442,"FET":5638,"DRT":5540,"PRT":98,"DOM":6982,"ts":1711631942207,"PLC":1},"mx":{"PLT":4481,"FBT":955,"SCT":4
2024-03-28 13:19:13 UTC	1216	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:13 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:27\|g:838ce467-dc91-42c8-a96c-af36bf162938; Path=/; Expires=Thu, 28-Mar-2024 13:19:43 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:27\|g:838ce467-dc91-42c8-a96c-af36bf162938\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:19:43 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:19:43 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:27\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:19:43 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:27\|i:559461\|e:2; Path=/; Expires=Thu, 28-Mar-2024 13:19:43 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:27\|i:559461\|e:2\|t:1711631953579; Path=/; Expires=Thu, 28-Mar-2024 13:19:43 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	50061	34.211.102.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:14 UTC	575	OUT	GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:cf73cecd-03b7-4433-bd6d-aa614a05eb2e\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; SameSite=None; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631952330
2024-03-28 13:19:14 UTC	1500	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:14 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:cf73cecd-03b7-4433-bd6d-aa614a05eb2e\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631952330; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:655094f0-114a-41e4-b1a4-241f3f5a24f9; Path=/; Expires=Thu, 28-Mar-2024 13:19:44 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:655094f0-114a-41e4-b1a4-241f3f5a24f9\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:19:44 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:19:44 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:19:44 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2; Path=/; Expires=Thu, 28-Mar-2024 13:19:44 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631954486; Path=/; Expires=Thu, 28-Mar-2024 13:19:44 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	50079	18.160.18.39	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:15 UTC	542	OUT	GET /javascript/highlight.js HTTP/1.1 Host: cdn.schemaapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:15 UTC	845	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 35581 Connection: close Date: Wed, 27 Mar 2024 16:33:51 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 14 Mar 2024 20:27:41 GMT ETag: "d85ccacb0eb9d3218e83a08541b6a977" x-amz-server-side-encryption: AES256 x-amz-version-id: 0tcK.ie.qP5ajH8WGBajK5rwpEAt33gW Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 bd5ab138e49a090fd3089313c9c8105c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: yWq6QzORHDkRt_-pC_HSuggiFnvZbtU7ZPgacEw3BV2Jos3Cw0eoNg== Age: 74725 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin
2024-03-28 13:19:15 UTC	16384	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 34 31 37 3a 28 74 2c 69 2c 65 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 74 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 69 2e 65 6e 64 70 6f 69 6e 74 73 3d 69 2e 69 3d 76 6f 69 64 20 30 3b 63 6f 6e 73 74 20 73 3d 65 28 37 33 34 29 2c 6e 3d 65 28 39 38 33 29 2c 6f 3d 65 28 31 33 31 29 2c 72 3d 65 28 38 34 36 29 2c 68 3d 65 28 39 38 39 29 2c 75 3d 65 28 38 34 34 29 2c 63 3d 65 28 32 30 29 2c 6c 3d 65 28 31 31 36 29 2c 61 3d 65 28 36 37 35 29 2c 64 3d 7b 6f 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 2f 6d 61 72 6b 75 70 2f 6d 61 72 6b 75 70 3f 75 72 6c 3d 22 2c 68 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 Data Ascii: (()=>{"use strict";var t={417:(t,i,e)=>{Object.defineProperty(i,"t",{value:!0}),i.endpoints=i.i=void 0;const s=e(734),n=e(983),o=e(131),r=e(846),h=e(989),u=e(844),c=e(20),l=e(116),a=e(675),d={o:"https://api.schemaapp.com/markup/markup?url=",h:"https://api
2024-03-28 13:19:15 UTC	16384	IN	Data Raw: 20 73 3d 74 68 69 73 26 26 74 68 69 73 2e 46 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 73 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 65 7c 7c 28 65 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 74 72 79 7b 75 28 73 2e 6e 65 78 74 28 74 29 29 7d 63 61 74 63 68 28 74 29 7b 6f 28 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 28 74 29 7b 74 72 79 7b 75 28 73 2e 74 68 72 6f 77 28 74 29 29 7d 63 61 74 63 68 28 74 29 7b 6f 28 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 76 61 72 20 69 3b 74 2e 64 6f 6e 65 3f 6e 28 74 2e 76 61 6c 75 65 29 3a 28 69 3d 74 2e 76 61 6c 75 65 2c 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 69 3a 6e 65 77 20 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 Data Ascii: s=this&&this.Ft\|\|function(t,i,e,s){return new(e\|\|(e=Promise))((function(n,o){function r(t){try{u(s.next(t))}catch(t){o(t)}}function h(t){try{u(s.throw(t))}catch(t){o(t)}}function u(t){var i;t.done?n(t.value):(i=t.value,i instanceof e?i:new e((function(t)
2024-03-28 13:19:15 UTC	2813	IN	Data Raw: 22 22 2c 6e 3d 21 31 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 69 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 63 6f 6e 73 74 20 72 3d 69 5b 73 5d 3b 69 66 28 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 72 29 29 7b 65 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 2c 22 73 72 63 73 65 74 22 3d 3d 3d 72 26 26 28 65 3d 6f 28 65 29 29 2c 6e 3d 21 30 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 6e 3f 65 2e 73 74 61 72 74 73 57 69 74 68 28 22 68 74 74 70 22 29 3f 65 3a 73 28 65 29 3a 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 63 6f 6e 73 74 20 69 3d 74 2e 73 70 6c 69 74 28 22 2c 22 29 3b 72 65 74 75 72 6e 20 69 2e 6c 65 6e 67 74 68 3e 30 3f 69 5b 30 5d 2e 73 70 6c 69 74 28 22 20 22 29 5b 30 5d 3a 22 22 7d 66 75 6e Data Ascii: "",n=!1;for(let s=0;s<i.length;s++){const r=i[s];if(t.hasAttribute(r)){e=t.getAttribute(r),"srcset"===r&&(e=o(e)),n=!0;break}}return n?e.startsWith("http")?e:s(e):t.textContent}function o(t){const i=t.split(",");return i.length>0?i[0].split(" ")[0]:""}fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	50078	18.160.18.39	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:15 UTC	552	OUT	GET /javascript/schemaFunctions.min.js HTTP/1.1 Host: cdn.schemaapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:15 UTC	876	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2299 Connection: close Date: Tue, 26 Mar 2024 03:19:14 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 09 Mar 2023 18:49:16 GMT ETag: "bd244e1b891b02e1257dc6fb99604eb6" x-amz-server-side-encryption: AES256 Cache-Control: max-age=699840 x-amz-version-id: Uq_qZjonf.c8Pi6.s8cxmD9OQPC.1qpa Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 19ce5400ce3c3ceb334a546c0524d848.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: ue2vKDPszCstDjvvqQmUb7U-IMIt70884VkRRpEc2or9v7Fw_WutdQ== Age: 208802 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin
2024-03-28 13:19:15 UTC	2299	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 73 63 68 65 6d 61 4c 6f 61 64 28 68 2c 67 2c 66 2c 62 2c 64 29 7b 77 69 6e 64 6f 77 2e 73 63 68 65 6d 61 5f 68 69 67 68 6c 69 67 68 74 65 72 3d 77 69 6e 64 6f 77 2e 73 63 68 65 6d 61 5f 68 69 67 68 6c 69 67 68 74 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 77 69 6e 64 6f 77 2e 73 63 68 65 6d 61 5f 68 69 67 68 6c 69 67 68 74 65 72 3a 7b 61 63 63 6f 75 6e 74 49 64 3a 68 2c 6b 65 79 3a 67 2c 73 74 72 69 70 55 72 6c 73 3a 66 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 74 72 75 65 3a 66 2c 74 65 73 74 4d 6f 64 65 3a 62 2c 66 65 74 63 68 46 72 6f 6d 48 69 67 68 6c 69 67 68 74 4a 73 43 61 63 68 65 3a 64 2c 6f 75 74 70 75 74 3a 74 72 75 65 7d 3b 63 6f 6e 73 74 20 6b 3d 6e 65 77 20 53 65 74 28 5b 22 42 72 6f 74 68 65 72 22 2c 22 4b 61 70 6c Data Ascii: function schemaLoad(h,g,f,b,d){window.schema_highlighter=window.schema_highlighter!==undefined?window.schema_highlighter:{accountId:h,key:g,stripUrls:f===undefined?true:f,testMode:b,fetchFromHighlightJsCache:d,output:true};const k=new Set(["Brother","Kapl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	50082	18.160.18.39	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:16 UTC	583	OUT	OPTIONS /highlighter/prod/WellsFargo/v2/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20 HTTP/1.1 Host: cdn.schemaapp.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-account-id,x-api-key Origin: https://www.wellsfargo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:16 UTC	801	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Date: Thu, 28 Mar 2024 13:19:17 GMT Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 b467a4a34e9f37bba6d2f0aba8257b5e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: oUEPPwVmBYoM5hQ6up_tY0YJMefixWFlLjUTkKxM17784klDmfMJxg== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Max-Age: 14400 Access-Control-Allow-Headers: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	50081	13.32.208.32	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:16 UTC	563	OUT	OPTIONS /WellsFargo/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20vbG9jYXRvci8 HTTP/1.1 Host: data.schemaapp.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-api-key Origin: https://www.wellsfargo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:16 UTC	643	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Date: Thu, 28 Mar 2024 13:19:17 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Headers: x-api-key Access-Control-Expose-Headers: x-amz-meta-source Access-Control-Max-Age: 3000 Server: AmazonS3 Strict-Transport-Security: max-age=31536000; includeSubDomains; Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 aabff76d9515c67bc2758117b3e68446.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C1 X-Amz-Cf-Id: u9EEp04rmsJY2-_VrgOEc_kP3_GFY_KIDV3ZNWbKvK5yHHe2zICKsg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	50084	18.160.18.39	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:16 UTC	692	OUT	GET /highlighter/prod/WellsFargo/v2/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20 HTTP/1.1 Host: cdn.schemaapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json x-account-id: WellsFargo sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-api-key: XPJKP-GI7DG-FVNWZ-45W51 sec-ch-ua-platform: "Windows" Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:16 UTC	1147	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 139179 Connection: close Date: Wed, 27 Mar 2024 16:33:51 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 18 Mar 2024 20:38:57 GMT ETag: "fc3ce21754826979e4923d0ea0d93032" x-amz-server-side-encryption: AES256 x-amz-meta-url: https://www.wellsfargo.com Cache-Control: max-age=699840 x-amz-meta-source: SchemaApp x-amz-meta-templateid: x-amz-meta-companyid: http://schemaapp.com/resources/Company/WellsFargo x-amz-version-id: 9Lm8oVLLgs49cN.RJtjiTeEm5kLnrdkT Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 383ad280f1e2a4497aecb7ee8d8e9144.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: ILBHdYYIVETQKh-n4_ORpS2NGXUmRIkdgyUhq9uRH6bt33vB7v4Obw== Age: 74726 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-amz-meta-source,x-amz-meta-accountid,x-amz-meta-url
2024-03-28 13:19:16 UTC	15237	IN	Data Raw: 7b 22 61 63 63 6f 75 6e 74 49 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 64 62 5c 2f 57 65 6c 6c 73 46 61 72 67 6f 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 22 2c 22 74 65 6d 70 6c 61 74 65 73 22 3a 5b 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 72 65 73 6f 75 72 63 65 73 5c 2f 43 6f 6d 70 61 6e 79 5c 2f 57 65 6c 6c 73 46 61 72 67 6f 5c 2f 54 65 6d 70 6c 61 74 65 32 30 32 33 30 32 32 33 32 30 35 30 35 32 22 2c 22 75 70 64 61 74 65 64 22 3a 22 32 30 32 33 2d 31 31 2d 30 38 54 32 30 3a 30 37 3a 34 37 2e 36 36 32 5a 22 2c 22 40 74 79 70 65 22 3a 22 48 69 67 68 6c 69 67 68 74 54 65 6d 70 6c 61 74 65 Data Ascii: {"accountId":"http:\/\/schemaapp.com\/db\/WellsFargo","url":"https:\/\/www.wellsfargo.com","templates":[{"@id":"http:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/Template20230223205052","updated":"2023-11-08T20:07:47.662Z","@type":"HighlightTemplate
2024-03-28 13:19:16 UTC	16384	IN	Data Raw: 73 69 73 74 2d 72 65 66 65 72 65 6e 63 65 5c 2f 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 5c 2f 6d 6f 72 74 67 61 67 65 5c 2f 6d 61 6e 61 67 65 2d 61 63 63 6f 75 6e 74 5c 2f 65 71 75 69 74 79 2d 61 63 63 6f 75 6e 74 2d 62 61 73 69 63 73 5c 2f 73 74 61 74 65 6d 65 6e 74 2d 74 6f 75 72 5c 2f 61 63 63 6f 75 6e 74 2d 69 6e 66 6f 72 6d 61 74 69 6f 6e 5c 2f 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 5c 2f 6d 6f 72 74 67 61 67 65 5c 2f 6d 61 6e 61 67 65 2d 61 63 63 6f 75 6e 74 5c 2f 66 65 65 73 5c 2f 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 5c 2f 6d 6f 72 74 67 61 67 65 5c 2f 6d 61 6e 61 67 65 2d 61 63 63 6f 75 Data Ascii: sist-reference\/","https:\/\/www.wellsfargo.com\/mortgage\/manage-account\/equity-account-basics\/statement-tour\/account-information\/","https:\/\/www.wellsfargo.com\/mortgage\/manage-account\/fees\/","https:\/\/www.wellsfargo.com\/mortgage\/manage-accou
2024-03-28 13:19:16 UTC	16384	IN	Data Raw: 61 72 67 6f 5c 2f 48 69 67 68 6c 69 67 68 74 2d 32 30 32 32 31 31 31 38 32 30 31 34 35 37 37 39 39 2d 33 30 31 39 33 22 2c 22 78 50 61 74 68 22 3a 22 6d 61 6e 75 61 6c 22 2c 22 76 61 6c 75 65 22 3a 22 5c 2f 5c 2f 73 65 63 74 69 6f 6e 5b 40 63 6c 61 73 73 3d 5c 22 63 6f 6e 74 65 6e 74 2d 62 6f 64 79 5c 22 5d 5c 2f 66 6f 72 6d 22 2c 22 70 72 6f 70 65 72 74 79 50 61 74 68 22 3a 5b 22 6d 61 69 6e 45 6e 74 69 74 79 22 2c 22 57 65 62 50 61 67 65 45 6c 65 6d 65 6e 74 22 2c 22 78 70 61 74 68 22 5d 2c 22 40 74 79 70 65 22 3a 22 54 61 67 44 65 66 69 6e 65 64 22 7d 2c 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 72 65 73 6f 75 72 63 65 73 5c 2f 43 6f 6d 70 61 6e 79 5c 2f 57 65 6c 6c 73 46 61 72 67 6f 5c 2f 48 69 67 Data Ascii: argo\/Highlight-20221118201457799-30193","xPath":"manual","value":"\/\/section[@class=\"content-body\"]\/form","propertyPath":["mainEntity","WebPageElement","xpath"],"@type":"TagDefined"},{"@id":"http:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/Hig
2024-03-28 13:19:17 UTC	16384	IN	Data Raw: 48 69 67 68 6c 69 67 68 74 22 3a 5b 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 72 65 73 6f 75 72 63 65 73 5c 2f 43 6f 6d 70 61 6e 79 5c 2f 57 65 6c 6c 73 46 61 72 67 6f 5c 2f 48 69 67 68 6c 69 67 68 74 2d 32 30 32 32 30 31 31 32 31 35 35 35 35 36 36 38 36 2d 33 30 30 30 37 22 2c 22 78 50 61 74 68 22 3a 22 28 20 5c 2f 5c 2f 68 31 5b 31 5d 20 29 22 2c 22 70 72 6f 70 65 72 74 79 50 61 74 68 22 3a 5b 22 6c 6f 61 6e 54 79 70 65 22 5d 2c 22 40 74 79 70 65 22 3a 22 54 61 67 58 50 61 74 68 44 65 66 69 6e 65 64 22 7d 2c 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 72 65 73 6f 75 72 63 65 73 5c 2f 43 6f 6d 70 61 6e 79 5c 2f 57 65 6c 6c 73 46 61 72 67 6f 5c 2f 48 Data Ascii: Highlight":[{"@id":"http:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/Highlight-20220112155556686-30007","xPath":"( \/\/h1[1] )","propertyPath":["loanType"],"@type":"TagXPathDefined"},{"@id":"http:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/H
2024-03-28 13:19:17 UTC	16384	IN	Data Raw: 74 2d 6c 6f 6e 67 2d 74 65 72 6d 2d 70 6c 61 6e 6e 69 6e 67 5c 2f 66 69 6e 61 6e 63 69 61 6c 2d 70 6c 61 6e 5c 2f 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 5c 2f 66 69 6e 61 6e 63 69 61 6c 2d 65 64 75 63 61 74 69 6f 6e 5c 2f 62 61 73 69 63 2d 66 69 6e 61 6e 63 65 73 5c 2f 62 75 69 6c 64 2d 74 68 65 2d 66 75 74 75 72 65 5c 2f 73 68 6f 72 74 2d 6c 6f 6e 67 2d 74 65 72 6d 2d 70 6c 61 6e 6e 69 6e 67 5c 2f 66 69 6e 61 6e 63 69 61 6c 2d 70 6c 61 6e 2d 61 64 6a 75 73 74 6d 65 6e 74 73 5c 2f 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 5c 2f 66 69 6e 61 6e 63 69 61 6c 2d 65 64 75 63 61 74 69 6f 6e 5c 2f 62 61 73 69 63 2d 66 69 6e 61 6e 63 65 73 5c 2f 66 69 6e 61 6e Data Ascii: t-long-term-planning\/financial-plan\/","https:\/\/www.wellsfargo.com\/financial-education\/basic-finances\/build-the-future\/short-long-term-planning\/financial-plan-adjustments\/","https:\/\/www.wellsfargo.com\/financial-education\/basic-finances\/finan
2024-03-28 13:19:17 UTC	16384	IN	Data Raw: 68 22 3a 5b 22 6d 65 6e 74 69 6f 6e 73 22 2c 22 57 65 62 50 61 67 65 22 5d 2c 22 78 50 61 74 68 22 3a 22 28 5c 2f 5c 2f 64 69 76 5b 63 6f 6e 74 61 69 6e 73 28 40 63 6c 61 73 73 2c 20 5c 22 63 36 30 6d 2d 69 5c 22 29 5d 29 22 7d 2c 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 72 65 73 6f 75 72 63 65 73 5c 2f 43 6f 6d 70 61 6e 79 5c 2f 57 65 6c 6c 73 46 61 72 67 6f 5c 2f 48 69 67 68 6c 69 67 68 74 2d 32 30 32 33 30 34 30 35 32 31 31 32 30 39 32 36 31 2d 33 31 33 39 22 2c 22 78 50 61 74 68 22 3a 22 73 74 6f 72 65 64 22 2c 22 76 61 6c 75 65 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 6e 74 65 72 6e 61 6c 2e 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 5c 2f 23 53 68 61 72 65 64 44 61 74 61 49 74 65 6d Data Ascii: h":["mentions","WebPage"],"xPath":"(\/\/div[contains(@class, \"c60m-i\")])"},{"@id":"http:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/Highlight-20230405211209261-3139","xPath":"stored","value":"https:\/\/internal.www.wellsfargo.com\/#SharedDataItem
2024-03-28 13:19:17 UTC	16384	IN	Data Raw: 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 72 65 73 6f 75 72 63 65 73 5c 2f 61 64 6d 69 6e 5c 2f 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 5f 70 72 65 50 52 4f 44 4f 6e 6c 69 6e 65 42 61 6e 6b 69 6e 67 5c 2f 48 69 67 68 6c 69 67 68 74 2d 32 30 32 33 31 31 32 37 32 31 34 39 31 34 36 35 38 2d 32 39 35 33 39 22 2c 22 78 50 61 74 68 22 3a 22 6d 61 6e 75 61 6c 22 2c 22 76 61 6c 75 65 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 77 69 6b 69 64 61 74 61 2e 6f 72 67 5c 2f 77 69 6b 69 5c 2f 51 31 38 38 35 30 36 22 2c 22 70 72 6f 70 65 72 74 79 50 61 74 68 22 3a 5b 22 61 62 6f 75 74 22 2c 22 54 68 69 6e 67 22 2c 22 73 61 6d 65 41 73 22 5d 2c 22 40 74 79 70 65 22 3a 22 54 61 67 44 65 66 69 6e 65 64 22 7d 2c 7b 22 40 69 64 22 3a 22 68 74 74 Data Ascii: ttp:\/\/schemaapp.com\/resources\/admin\/Organization_prePRODOnlineBanking\/Highlight-20231127214914658-29539","xPath":"manual","value":"https:\/\/www.wikidata.org\/wiki\/Q188506","propertyPath":["about","Thing","sameAs"],"@type":"TagDefined"},{"@id":"htt
2024-03-28 13:19:17 UTC	16044	IN	Data Raw: 40 73 72 63 20 29 22 7d 2c 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 72 65 73 6f 75 72 63 65 73 5c 2f 43 6f 6d 70 61 6e 79 5c 2f 57 65 6c 6c 73 46 61 72 67 6f 5c 2f 48 69 67 68 6c 69 67 68 74 2d 32 30 32 33 31 31 32 39 32 30 32 32 35 35 31 35 31 2d 35 34 35 32 22 2c 22 40 74 79 70 65 22 3a 22 54 61 67 44 65 66 69 6e 65 64 22 2c 22 70 72 6f 70 65 72 74 79 50 61 74 68 22 3a 5b 22 69 6d 61 67 65 22 2c 22 49 6d 61 67 65 4f 62 6a 65 63 74 22 2c 22 63 72 65 61 74 6f 72 22 2c 22 42 61 6e 6b 4f 72 43 72 65 64 69 74 55 6e 69 6f 6e 22 2c 22 6e 61 6d 65 22 5d 2c 22 76 61 6c 75 65 22 3a 22 57 65 6c 6c 73 20 46 61 72 67 6f 22 7d 2c 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 Data Ascii: @src )"},{"@id":"http:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/Highlight-20231129202255151-5452","@type":"TagDefined","propertyPath":["image","ImageObject","creator","BankOrCreditUnion","name"],"value":"Wells Fargo"},{"@id":"http:\/\/schemaapp.c
2024-03-28 13:19:17 UTC	9594	IN	Data Raw: 32 39 22 2c 22 40 74 79 70 65 22 3a 22 54 61 67 4c 69 73 74 22 2c 22 68 61 73 54 65 6d 70 6c 61 74 65 22 3a 5b 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 72 65 73 6f 75 72 63 65 73 5c 2f 43 6f 6d 70 61 6e 79 5c 2f 57 65 6c 6c 73 46 61 72 67 6f 5c 2f 48 69 67 68 6c 69 67 68 74 2d 32 30 32 34 30 33 31 33 31 36 33 36 30 38 38 32 39 5c 2f 54 65 6d 70 6c 61 74 65 22 2c 22 40 74 79 70 65 22 3a 22 48 69 67 68 6c 69 67 68 74 54 65 6d 70 6c 61 74 65 22 2c 22 63 61 74 65 67 6f 72 69 7a 65 64 42 79 22 3a 5b 22 54 61 67 4c 69 73 74 22 5d 2c 22 68 61 73 48 69 67 68 6c 69 67 68 74 22 3a 5b 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 72 65 73 6f 75 72 63 65 73 5c 2f Data Ascii: 29","@type":"TagList","hasTemplate":[{"@id":"http:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/Highlight-20240313163608829\/Template","@type":"HighlightTemplate","categorizedBy":["TagList"],"hasHighlight":[{"@id":"http:\/\/schemaapp.com\/resources\/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	50085	13.32.208.32	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:16 UTC	646	OUT	GET /WellsFargo/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20vbG9jYXRvci8 HTTP/1.1 Host: data.schemaapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-api-key: XPJKP-GI7DG-FVNWZ-45W51 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:16 UTC	665	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: x-amz-meta-source Access-Control-Max-Age: 3000 Date: Thu, 28 Mar 2024 13:19:16 GMT Server: AmazonS3 Strict-Transport-Security: max-age=31536000; includeSubDomains; Cache-Control: max-age=14400 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Error from cloudfront Via: 1.1 7304a96518f6c4657eabe5542a78c41a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C1 X-Amz-Cf-Id: _cn38WrPfM9sFqG2aB3w-GVIy80mBDdagMtIIW4q4GcPmUS41sdu_A==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	50090	13.32.208.16	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:17 UTC	400	OUT	GET /WellsFargo/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20vbG9jYXRvci8 HTTP/1.1 Host: data.schemaapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:17 UTC	525	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 0 Connection: close Date: Thu, 28 Mar 2024 13:19:16 GMT Server: AmazonS3 access-control-expose-headers: x-amz-meta-source, x-amz-meta-accountid, x-amz-meta-url Strict-Transport-Security: max-age=31536000; includeSubDomains; Cache-Control: max-age=14400 X-Cache: Error from cloudfront Via: 1.1 4e3880ea97e52abcc2c96cf65b515f10.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C1 X-Amz-Cf-Id: Wqno2oMoEzZdXmxvPi5iOwtBkrOXdVjqxqxAxD79B6neYvvn-Y_Yhg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	50089	18.160.18.115	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:17 UTC	407	OUT	GET /highlighter/prod/WellsFargo/v2/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20 HTTP/1.1 Host: cdn.schemaapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:17 UTC	1043	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 139179 Connection: close Date: Wed, 27 Mar 2024 16:33:51 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 18 Mar 2024 20:38:57 GMT ETag: "fc3ce21754826979e4923d0ea0d93032" x-amz-server-side-encryption: AES256 x-amz-meta-url: https://www.wellsfargo.com Cache-Control: max-age=699840 x-amz-meta-source: SchemaApp x-amz-meta-templateid: x-amz-meta-companyid: http://schemaapp.com/resources/Company/WellsFargo x-amz-version-id: 9Lm8oVLLgs49cN.RJtjiTeEm5kLnrdkT Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3f8050fbf1460156d177f2d3d6a03332.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: fAO1JH6idXl7xKcK7oeXh6BYNEuuriobGwRsUsJ8mX_FOquKq4oY-Q== Age: 74727 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin
2024-03-28 13:19:17 UTC	16384	IN	Data Raw: 7b 22 61 63 63 6f 75 6e 74 49 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 64 62 5c 2f 57 65 6c 6c 73 46 61 72 67 6f 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 22 2c 22 74 65 6d 70 6c 61 74 65 73 22 3a 5b 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 72 65 73 6f 75 72 63 65 73 5c 2f 43 6f 6d 70 61 6e 79 5c 2f 57 65 6c 6c 73 46 61 72 67 6f 5c 2f 54 65 6d 70 6c 61 74 65 32 30 32 33 30 32 32 33 32 30 35 30 35 32 22 2c 22 75 70 64 61 74 65 64 22 3a 22 32 30 32 33 2d 31 31 2d 30 38 54 32 30 3a 30 37 3a 34 37 2e 36 36 32 5a 22 2c 22 40 74 79 70 65 22 3a 22 48 69 67 68 6c 69 67 68 74 54 65 6d 70 6c 61 74 65 Data Ascii: {"accountId":"http:\/\/schemaapp.com\/db\/WellsFargo","url":"https:\/\/www.wellsfargo.com","templates":[{"@id":"http:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/Template20230223205052","updated":"2023-11-08T20:07:47.662Z","@type":"HighlightTemplate
2024-03-28 13:19:17 UTC	16384	IN	Data Raw: 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 72 65 73 6f 75 72 63 65 73 5c 2f 43 6f 6d 70 61 6e 79 5c 2f 57 65 6c 6c 73 46 61 72 67 6f 5c 2f 48 69 67 68 6c 69 67 68 74 2d 32 30 32 34 30 31 31 39 31 35 33 34 32 32 34 33 39 22 2c 22 40 74 79 70 65 22 3a 22 54 61 67 4c 69 73 74 22 2c 22 68 61 73 54 65 6d 70 6c 61 74 65 22 3a 5b 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 72 65 73 6f 75 72 63 65 73 5c 2f 43 6f 6d 70 61 6e 79 5c 2f 57 65 6c 6c 73 46 61 72 67 6f 5c 2f 48 69 67 68 6c 69 67 68 74 2d 32 30 32 34 30 31 31 39 31 35 33 34 32 32 34 33 39 5c 2f 54 65 6d 70 6c 61 74 65 22 2c 22 40 74 79 70 65 22 3a 22 48 69 67 68 6c 69 67 68 74 54 65 6d 70 6c 61 74 65 22 2c 22 63 61 74 65 67 6f Data Ascii: ttp:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/Highlight-20240119153422439","@type":"TagList","hasTemplate":[{"@id":"http:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/Highlight-20240119153422439\/Template","@type":"HighlightTemplate","catego
2024-03-28 13:19:17 UTC	16384	IN	Data Raw: 39 36 31 38 22 2c 22 78 50 61 74 68 22 3a 22 28 20 5c 2f 5c 2f 73 65 63 74 69 6f 6e 5b 40 63 6c 61 73 73 3d 5c 22 63 6f 6e 74 65 6e 74 2d 62 6f 64 79 5c 22 5d 5c 2f 70 20 29 22 2c 22 70 72 6f 70 65 72 74 79 50 61 74 68 22 3a 5b 22 64 69 73 61 6d 62 69 67 75 61 74 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 22 5d 2c 22 40 74 79 70 65 22 3a 22 54 61 67 58 50 61 74 68 44 65 66 69 6e 65 64 22 7d 2c 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 72 65 73 6f 75 72 63 65 73 5c 2f 43 6f 6d 70 61 6e 79 5c 2f 57 65 6c 6c 73 46 61 72 67 6f 5c 2f 48 69 67 68 6c 69 67 68 74 2d 32 30 32 32 31 31 31 38 32 30 31 38 30 32 32 35 36 2d 33 30 31 39 32 22 2c 22 78 50 61 74 68 22 3a 22 6d 61 6e 75 61 6c 22 2c 22 76 61 6c 75 65 22 Data Ascii: 9618","xPath":"( \/\/section[@class=\"content-body\"]\/p )","propertyPath":["disambiguatingDescription"],"@type":"TagXPathDefined"},{"@id":"http:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/Highlight-20221118201802256-30192","xPath":"manual","value"
2024-03-28 13:19:17 UTC	16384	IN	Data Raw: 6f 5c 2f 48 69 67 68 6c 69 67 68 74 2d 32 30 32 32 30 31 31 32 31 35 35 39 33 32 35 34 35 2d 37 31 30 33 22 2c 22 78 50 61 74 68 22 3a 22 73 74 6f 72 65 64 22 2c 22 76 61 6c 75 65 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 6e 74 65 72 6e 61 6c 2e 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 5c 2f 23 53 68 61 72 65 64 44 61 74 61 49 74 65 6d 22 2c 22 70 72 6f 70 65 72 74 79 50 61 74 68 22 3a 5b 22 62 72 6f 6b 65 72 22 5d 2c 22 40 74 79 70 65 22 3a 22 54 61 67 53 74 6f 72 65 64 52 65 73 6f 75 72 63 65 22 7d 2c 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 72 65 73 6f 75 72 63 65 73 5c 2f 43 6f 6d 70 61 6e 79 5c 2f 57 65 6c 6c 73 46 61 72 67 6f 5c 2f 48 69 67 68 6c 69 67 68 74 2d 32 30 32 32 30 31 32 Data Ascii: o\/Highlight-20220112155932545-7103","xPath":"stored","value":"https:\/\/internal.www.wellsfargo.com\/#SharedDataItem","propertyPath":["broker"],"@type":"TagStoredResource"},{"@id":"http:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/Highlight-2022012
2024-03-28 13:19:17 UTC	16384	IN	Data Raw: 6e 63 69 61 6c 2d 65 64 75 63 61 74 69 6f 6e 5c 2f 62 61 73 69 63 2d 66 69 6e 61 6e 63 65 73 5c 2f 6d 61 6e 61 67 65 2d 6d 6f 6e 65 79 5c 2f 63 61 73 68 66 6c 6f 77 2d 73 61 76 69 6e 67 73 5c 2f 70 61 79 2d 79 6f 75 72 73 65 6c 66 2d 66 69 72 73 74 5c 2f 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 5c 2f 66 69 6e 61 6e 63 69 61 6c 2d 65 64 75 63 61 74 69 6f 6e 5c 2f 62 61 73 69 63 2d 66 69 6e 61 6e 63 65 73 5c 2f 6d 61 6e 61 67 65 2d 6d 6f 6e 65 79 5c 2f 63 61 73 68 66 6c 6f 77 2d 73 61 76 69 6e 67 73 5c 2f 74 72 61 63 6b 2d 73 70 65 6e 64 69 6e 67 5c 2f 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 5c 2f 66 69 6e 61 6e 63 69 61 6c 2d 65 64 75 63 61 74 69 6f 6e Data Ascii: ncial-education\/basic-finances\/manage-money\/cashflow-savings\/pay-yourself-first\/","https:\/\/www.wellsfargo.com\/financial-education\/basic-finances\/manage-money\/cashflow-savings\/track-spending\/","https:\/\/www.wellsfargo.com\/financial-education
2024-03-28 13:19:17 UTC	16384	IN	Data Raw: 74 68 22 3a 5b 22 73 70 65 63 69 61 6c 74 79 22 5d 2c 22 40 74 79 70 65 22 3a 22 54 61 67 44 65 66 69 6e 65 64 22 7d 5d 2c 22 70 61 74 74 65 72 6e 73 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 50 61 67 65 43 6f 6c 6c 65 63 74 69 6f 6e 22 2c 22 6d 65 6d 62 65 72 73 22 3a 5b 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 5c 2f 65 73 5c 2f 6d 6f 72 74 67 61 67 65 5c 2f 6d 61 6e 61 67 65 2d 61 63 63 6f 75 6e 74 5c 2f 22 2c 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 5c 2f 6d 6f 72 74 67 61 67 65 5c 2f 6d 61 6e 61 67 65 2d 61 63 63 6f 75 6e 74 5c 2f 22 5d 7d 5d 7d 2c 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 72 65 73 6f 75 72 63 Data Ascii: th":["specialty"],"@type":"TagDefined"}],"patterns":[{"@type":"PageCollection","members":["https:\/\/www.wellsfargo.com\/es\/mortgage\/manage-account\/","https:\/\/www.wellsfargo.com\/mortgage\/manage-account\/"]}]},{"@id":"http:\/\/schemaapp.com\/resourc
2024-03-28 13:19:17 UTC	16384	IN	Data Raw: 54 61 67 58 50 61 74 68 22 2c 22 70 72 6f 70 65 72 74 79 50 61 74 68 22 3a 5b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 5d 2c 22 78 50 61 74 68 22 3a 22 28 20 5c 2f 70 5b 32 5d 5c 2f 74 65 78 74 28 29 20 29 22 7d 2c 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 72 65 73 6f 75 72 63 65 73 5c 2f 43 6f 6d 70 61 6e 79 5c 2f 57 65 6c 6c 73 46 61 72 67 6f 5c 2f 48 69 67 68 6c 69 67 68 74 2d 32 30 32 34 30 32 32 36 31 38 35 32 35 31 37 37 30 2d 32 30 30 39 32 22 2c 22 40 74 79 70 65 22 3a 22 54 61 67 58 50 61 74 68 22 2c 22 70 72 6f 70 65 72 74 79 50 61 74 68 22 3a 5b 22 6e 61 6d 65 22 5d 2c 22 78 50 61 74 68 22 3a 22 28 20 5c 2f 68 32 5c 2f 74 65 78 74 28 29 20 29 22 7d 2c 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c Data Ascii: TagXPath","propertyPath":["description"],"xPath":"( \/p[2]\/text() )"},{"@id":"http:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/Highlight-20240226185251770-20092","@type":"TagXPath","propertyPath":["name"],"xPath":"( \/h2\/text() )"},{"@id":"http:\
2024-03-28 13:19:17 UTC	13232	IN	Data Raw: 6d 61 67 65 22 2c 22 49 6d 61 67 65 4f 62 6a 65 63 74 22 2c 22 63 6f 6e 74 65 6e 74 55 72 6c 22 5d 2c 22 40 74 79 70 65 22 3a 22 54 61 67 58 50 61 74 68 44 65 66 69 6e 65 64 22 7d 2c 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 72 65 73 6f 75 72 63 65 73 5c 2f 43 6f 6d 70 61 6e 79 5c 2f 57 65 6c 6c 73 46 61 72 67 6f 5c 2f 48 69 67 68 6c 69 67 68 74 2d 32 30 32 33 31 31 32 38 32 31 31 35 33 34 36 37 32 2d 35 34 33 34 22 2c 22 78 50 61 74 68 22 3a 22 28 28 20 5c 2f 5c 2f 68 31 20 29 5b 31 5d 29 22 2c 22 70 72 6f 70 65 72 74 79 50 61 74 68 22 3a 5b 22 6e 61 6d 65 22 5d 2c 22 40 74 79 70 65 22 3a 22 54 61 67 58 50 61 74 68 44 65 66 69 6e 65 64 22 7d 2c 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 Data Ascii: mage","ImageObject","contentUrl"],"@type":"TagXPathDefined"},{"@id":"http:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/Highlight-20231128211534672-5434","xPath":"(( \/\/h1 )[1])","propertyPath":["name"],"@type":"TagXPathDefined"},{"@id":"http:\/\/sc
2024-03-28 13:19:17 UTC	11259	IN	Data Raw: 32 33 34 32 36 31 35 2d 32 32 31 32 33 22 2c 22 76 61 6c 75 65 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 6e 74 65 72 6e 61 6c 2e 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 5c 2f 23 53 68 61 72 65 64 44 61 74 61 49 74 65 6d 22 2c 22 70 72 6f 70 65 72 74 79 50 61 74 68 22 3a 5b 22 70 75 62 6c 69 73 68 65 72 22 5d 2c 22 40 74 79 70 65 22 3a 22 54 61 67 53 74 6f 72 65 64 52 65 73 6f 75 72 63 65 22 2c 22 78 50 61 74 68 22 3a 22 73 74 6f 72 65 64 22 7d 2c 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 72 65 73 6f 75 72 63 65 73 5c 2f 43 6f 6d 70 61 6e 79 5c 2f 57 65 6c 6c 73 46 61 72 67 6f 5c 2f 48 69 67 68 6c 69 67 68 74 2d 32 30 32 32 31 32 31 39 31 38 32 33 32 35 31 36 36 2d 39 34 34 32 22 2c 22 78 Data Ascii: 2342615-22123","value":"https:\/\/internal.www.wellsfargo.com\/#SharedDataItem","propertyPath":["publisher"],"@type":"TagStoredResource","xPath":"stored"},{"@id":"http:\/\/schemaapp.com\/resources\/Company\/WellsFargo\/Highlight-20221219182325166-9442","x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	50087	35.163.101.91	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:17 UTC	662	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive Content-Length: 1669 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:17 UTC	1669	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 33 2e 37 2e 31 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 3f 34 22 2c 22 74 73 22 3a 31 37 31 31 36 33 31 39 34 39 38 34 39 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 35 2f 22 2c 22 61 74 22 3a 30 2c 22 70 70 22 3a 33 2c 22 6d 78 22 3a 7b 22 50 4c 43 22 3a 31 2c 22 46 42 54 22 3a 36 31 38 2c 22 44 44 54 22 3a 38 2c 22 44 50 54 22 3a 35 35 2c 22 50 4c 54 22 3a 36 38 31 2c 22 41 52 45 22 3a 30 7d 2c 22 6d 64 22 3a 22 50 4f 53 54 22 2c 22 78 73 22 3a 32 30 30 2c 22 73 69 22 3a 31 7d 2c 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 3f 34 Data Ascii: {"vr":"4.3.7.1","dt":"R","rg":"0","es":[{"eg":"1","et":2,"eu":"0://1/2/3?4","ts":1711631949849,"mg":"0","au":"0://5/","at":0,"pp":3,"mx":{"PLC":1,"FBT":618,"DDT":8,"DPT":55,"PLT":681,"ARE":0},"md":"POST","xs":200,"si":1},{"eg":"1","et":2,"eu":"0://1/2/3?4
2024-03-28 13:19:18 UTC	1216	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:27\|g:1aad0588-7f6a-4d89-b6d1-a65d12eec9b5; Path=/; Expires=Thu, 28-Mar-2024 13:19:47 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:27\|g:1aad0588-7f6a-4d89-b6d1-a65d12eec9b5\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:19:47 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:19:47 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:27\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:19:47 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:27\|i:559461\|e:2; Path=/; Expires=Thu, 28-Mar-2024 13:19:47 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:27\|i:559461\|e:2\|t:1711631957974; Path=/; Expires=Thu, 28-Mar-2024 13:19:47 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	50093	34.211.102.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:18 UTC	575	OUT	GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:655094f0-114a-41e4-b1a4-241f3f5a24f9\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631954486
2024-03-28 13:19:18 UTC	1500	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:18 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:655094f0-114a-41e4-b1a4-241f3f5a24f9\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631954486; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:d9807aaa-c012-41fc-ad58-c5c96987ab65; Path=/; Expires=Thu, 28-Mar-2024 13:19:48 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:d9807aaa-c012-41fc-ad58-c5c96987ab65\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:19:48 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:19:48 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:19:48 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2; Path=/; Expires=Thu, 28-Mar-2024 13:19:48 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631958811; Path=/; Expires=Thu, 28-Mar-2024 13:19:48 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	50095	34.107.165.188	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:19 UTC	572	OUT	GET /api/identity/idl?pid=1317 HTTP/1.1 Host: api.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	50098	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:20 UTC	1181	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=2c4120a6-8cbe-4983-b2ed-45670688b5d0&sn=2&cfg=201c2b80&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 36467 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=ZjWKT+8Fkk3op7T5ER8g2Roa8xMrJeHfrA97tpr8/drhe/bX0sB+JIObmlyBPvygTYR1UcOWirwivU5GZ8rl8WXW4W+LKBA1KycNXx3MdIAwfdYIF4IhSexXV2CRGj12TuthSAsRQx9zwJaX0YZql13AX27SeLuGUkigKNJ11zME
2024-03-28 13:19:20 UTC	16384	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 26 73 6e 3d 32 26 70 3d 32 63 34 31 32 30 61 36 2d 38 63 62 65 2d 34 39 38 33 2d 62 32 65 64 2d 34 35 36 37 30 36 38 38 62 35 64 30 26 73 65 67 3d 25 32 46 26 73 70 3d 26 70 73 73 6e 3d 30 26 65 3d 6c 75 62 39 67 74 33 70 7e 39 31 7e 2d 7e 4e 73 6e 5f 30 2a 72 5f 2a 63 5f 59 6d 31 66 63 33 6f 39 4f 55 4d 78 4e 44 5a 45 4d 45 4d 32 4f 55 55 31 4f 55 59 79 4d 7a 4d 7a 4f 54 4a 43 52 45 5a 47 4d 45 59 30 52 6b 55 77 4f 44 64 25 32 42 57 55 46 42 55 55 31 33 4f 44 42 47 4c 79 39 4f 4d 56 67 72 54 30 46 52 51 55 46 55 63 47 73 79 61 46 4a 6b 63 56 42 42 63 55 74 43 52 69 38 34 59 31 49 79 57 45 56 30 4e 46 45 76 53 47 4a 4e 59 31 6b 76 65 Data Ascii: v=2&r=https%3A%2F%2Fwww.wellsfargo.com%2F&sn=2&p=2c4120a6-8cbe-4983-b2ed-45670688b5d0&seg=%2F&sp=&pssn=0&e=lub9gt3p~91~-~Nsn_0r_c_Ym1fc3o9OUMxNDZEMEM2OUU1OUYyMzMzOTJCREZGMEY0RkUwODd%2BWUFBUU13ODBGLy9OMVgrT0FRQUFUcGsyaFJkcVBBcUtCRi84Y1IyWEV0NFEvSGJNY1kve
2024-03-28 13:19:20 UTC	16384	OUT	Data Raw: 65 35 55 7a 6e 4d 58 73 49 4d 33 4a 45 31 5a 25 32 42 6f 54 70 58 39 6e 46 33 6c 57 47 56 53 73 58 55 50 5a 6d 39 56 49 71 53 74 4a 25 32 42 58 41 43 31 69 42 39 77 73 79 6d 68 55 46 4d 42 74 34 6a 4f 48 45 48 64 6d 25 32 46 31 4c 71 65 67 65 32 7a 6e 43 54 78 47 70 38 49 49 34 51 44 31 51 76 71 4b 51 25 32 42 4d 45 4e 52 25 32 42 36 4a 47 39 57 44 55 62 47 32 54 35 4e 59 62 79 71 47 47 30 75 45 6c 59 4e 73 73 66 44 44 45 79 64 6d 62 53 66 44 58 25 32 42 66 4d 49 49 71 32 4e 37 4f 66 55 74 45 7a 39 69 4e 6c 56 4c 75 64 4a 51 36 4f 74 75 43 42 6a 41 79 48 33 74 32 53 25 32 42 46 46 6e 46 30 64 46 33 35 76 64 54 36 6d 34 66 37 58 54 38 57 56 43 73 44 35 6d 68 38 54 67 56 35 71 5a 25 32 46 42 44 6a 38 48 4b 33 78 77 56 78 73 48 70 66 75 69 77 38 72 34 47 63 Data Ascii: e5UznMXsIM3JE1Z%2BoTpX9nF3lWGVSsXUPZm9VIqStJ%2BXAC1iB9wsymhUFMBt4jOHEHdm%2F1Lqege2znCTxGp8II4QD1QvqKQ%2BMENR%2B6JG9WDUbG2T5NYbyqGG0uElYNssfDDEydmbSfDX%2BfMIIq2N7OfUtEz9iNlVLudJQ6OtuCBjAyH3t2S%2BFFnF0dF35vdT6m4f7XT8WVCsD5mh8TgV5qZ%2FBDj8HK3xwVxsHpfuiw8r4Gc
2024-03-28 13:19:20 UTC	3699	OUT	Data Raw: 46 4a 6d 31 4a 61 56 71 76 58 64 73 7a 70 5a 6d 50 53 57 6d 5a 6d 58 6d 72 58 63 76 63 4a 52 36 46 31 6f 77 25 32 42 75 32 62 75 6d 64 5a 71 30 32 4d 25 32 42 31 4b 34 6c 52 72 53 74 39 69 77 78 42 4e 4d 64 45 78 35 36 79 36 78 65 57 37 5a 6e 51 72 4d 65 6b 39 41 53 32 38 42 57 57 35 62 59 74 78 35 6e 79 36 52 65 59 6f 69 31 41 35 6e 6c 6b 6d 64 42 33 6d 7a 56 6b 76 6b 67 63 69 5a 56 61 36 71 53 70 6d 59 6f 70 74 4b 57 54 58 64 59 6b 44 51 74 58 6d 75 54 4b 35 56 6c 76 4d 4f 6a 54 70 5a 25 32 46 42 4b 67 6b 48 53 45 74 43 51 76 4d 34 7a 77 6d 72 45 6f 64 30 36 52 6d 47 58 35 59 49 6a 57 61 75 4d 55 58 41 50 34 7a 71 6a 4c 6d 74 78 61 46 35 42 57 6d 49 30 71 62 30 4c 77 6e 64 72 6c 77 46 6f 79 6f 6c 67 74 6e 43 66 61 4e 37 51 4b 32 65 4f 51 77 30 61 73 6a Data Ascii: FJm1JaVqvXdszpZmPSWmZmXmrXcvcJR6F1ow%2Bu2bumdZq02M%2B1K4lRrSt9iwxBNMdEx56y6xeW7ZnQrMek9AS28BWW5bYtx5ny6ReYoi1A5nlkmdB3mzVkvkgciZVa6qSpmYoptKWTXdYkDQtXmuTK5VlvMOjTpZ%2FBKgkHSEtCQvM4zwmrEod06RmGX5YIjWauMUXAP4zqjLmtxaF5BWmI0qb0LwndrlwFoyolgtnCfaN7QK2eOQw0asj
2024-03-28 13:19:20 UTC	873	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:20 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=owZcuabHtzAvQX9A7lYYTz4yY2oi04B7/pBJtxKDXQI28SS0vY0DqcF3jd/A5VMbHEaMsQblvp/4stK6QOF1fLa8iiQD3DkS3hSOH5DJyX/RHHcKcq3P2xOgmQG99iIrj4DxxsO3qGSWKcd1yotQjlO/yPnBBbrDtJpY6RwgpyaD; Expires=Thu, 04 Apr 2024 13:19:20 GMT; Path=/ Set-Cookie: AWSALBTGCORS=owZcuabHtzAvQX9A7lYYTz4yY2oi04B7/pBJtxKDXQI28SS0vY0DqcF3jd/A5VMbHEaMsQblvp/4stK6QOF1fLa8iiQD3DkS3hSOH5DJyX/RHHcKcq3P2xOgmQG99iIrj4DxxsO3qGSWKcd1yotQjlO/yPnBBbrDtJpY6RwgpyaD; Expires=Thu, 04 Apr 2024 13:19:20 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:20 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	50112	44.213.253.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:20 UTC	955	OUT	GET /event?c_app_id=WWW&c_page_type=BROWSER&c_page_id=locator&c_customer_type=&c_customer_status=n&c_product_code=&c_subproduct_code=&c_offer_id=&c_event_type=load&c_referrer=&d_cid=113287%011120240328061851126288949&c_sub_channel=&c_vendor_code=&c_offertype= HTTP/1.1 Host: wellsfargobankna.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; wellsfargobankna=33955380241426191774167127150413392378
2024-03-28 13:19:21 UTC	915	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:21 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: jca8zqyiR6Q= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v057-04ab25312.edge-va6.demdex.com 5 ms set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:21 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: wellsfargobankna=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:21 GMT; Path=/; Domain=.wellsfargobankna.demdex.net; Secure; SameSite=None
2024-03-28 13:19:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	50114	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:21 UTC	1180	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=2c4120a6-8cbe-4983-b2ed-45670688b5d0&sn=3&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 7208 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=owZcuabHtzAvQX9A7lYYTz4yY2oi04B7/pBJtxKDXQI28SS0vY0DqcF3jd/A5VMbHEaMsQblvp/4stK6QOF1fLa8iiQD3DkS3hSOH5DJyX/RHHcKcq3P2xOgmQG99iIrj4DxxsO3qGSWKcd1yotQjlO/yPnBBbrDtJpY6RwgpyaD
2024-03-28 13:19:21 UTC	7208	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 26 73 6e 3d 33 26 70 3d 32 63 34 31 32 30 61 36 2d 38 63 62 65 2d 34 39 38 33 2d 62 32 65 64 2d 34 35 36 37 30 36 38 38 62 35 64 30 26 73 65 67 3d 25 32 46 26 73 70 3d 26 70 73 73 6e 3d 30 26 65 3d 6c 75 62 39 67 76 7a 6c 7e 33 37 7e 2d 7e 45 51 30 78 54 52 45 56 43 56 55 63 36 49 45 56 79 63 6d 39 79 4f 69 42 7a 62 6d 46 77 63 32 68 76 64 43 42 33 59 58 4d 67 64 47 46 72 5a 57 34 67 64 32 68 70 62 47 55 67 5a 47 39 6a 64 57 31 6c 62 6e 51 67 64 32 46 7a 49 47 68 70 5a 47 52 6c 62 69 41 25 33 44 7e 65 76 65 6e 74 49 64 2e 30 5f 35 7e 2d 7e 2d 7e 2d 7e 7e 6c 75 62 39 67 76 7a 6d 7e 33 34 7e 2d 7e 4e 59 58 42 77 58 32 6c 6b 5f 56 31 64 Data Ascii: v=2&r=https%3A%2F%2Fwww.wellsfargo.com%2F&sn=3&p=2c4120a6-8cbe-4983-b2ed-45670688b5d0&seg=%2F&sp=&pssn=0&e=lub9gvzl~37~-~EQ0xTREVCVUc6IEVycm9yOiBzbmFwc2hvdCB3YXMgdGFrZW4gd2hpbGUgZG9jdW1lbnQgd2FzIGhpZGRlbiA%3D~eventId.0_5~-~-~-~~lub9gvzm~34~-~NYXBwX2lk_V1d
2024-03-28 13:19:21 UTC	815	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:21 GMT Content-Type: application/json Content-Length: 270 Connection: close Set-Cookie: AWSALBTG=ryqEN0/ykBuFSjdJEwecY/JrIo8XBk2qWAhr+acfgxo4vXDm28wo7Y45EUV4jnk7ZMfsDzxKMFu+QekCzN2ZT3a+cWou/Hq1xmvoDJR9I7/0AWdfO3D9coEZzKamveGyDzb7vPgLHXUOqlK2HAOp9nB8SVHh5vTjQjtG3DLGUsPy; Expires=Thu, 04 Apr 2024 13:19:21 GMT; Path=/ Set-Cookie: AWSALBTGCORS=ryqEN0/ykBuFSjdJEwecY/JrIo8XBk2qWAhr+acfgxo4vXDm28wo7Y45EUV4jnk7ZMfsDzxKMFu+QekCzN2ZT3a+cWou/Hq1xmvoDJR9I7/0AWdfO3D9coEZzKamveGyDzb7vPgLHXUOqlK2HAOp9nB8SVHh5vTjQjtG3DLGUsPy; Expires=Thu, 04 Apr 2024 13:19:21 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:21 UTC	270	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 6e 75 6c 6c 2c 22 75 73 61 67 65 22 3a 7b 22 73 65 73 73 69 6f 6e 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 61 70 69 43 61 6c 6c 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 63 75 73 74 6f 6d 53 65 72 76 65 72 43 61 6c 6c 73 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 64 61 74 61 4c 69 6d 69 74 22 3a 20 34 31 39 34 33 30 34 7d 2c 22 62 6c 6f 63 6b 52 65 63 Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":null,"usage":{"sessionQuotaBreach":false, "apiCallQuotaBreach":false, "customServerCallsBreach":false, "dataLimit": 4194304},"blockRec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	50127	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:21 UTC	1100	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=2c4120a6-8cbe-4983-b2ed-45670688b5d0&sn=2&cfg=201c2b80&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=ZjWKT+8Fkk3op7T5ER8g2Roa8xMrJeHfrA97tpr8/drhe/bX0sB+JIObmlyBPvygTYR1UcOWirwivU5GZ8rl8WXW4W+LKBA1KycNXx3MdIAwfdYIF4IhSexXV2CRGj12TuthSAsRQx9zwJaX0YZql13AX27SeLuGUkigKNJ11zME; AWSALBTGCORS=ryqEN0/ykBuFSjdJEwecY/JrIo8XBk2qWAhr+acfgxo4vXDm28wo7Y45EUV4jnk7ZMfsDzxKMFu+QekCzN2ZT3a+cWou/Hq1xmvoDJR9I7/0AWdfO3D9coEZzKamveGyDzb7vPgLHXUOqlK2HAOp9nB8SVHh5vTjQjtG3DLGUsPy
2024-03-28 13:19:22 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:22 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=ZDNtaWp9BYNuxAVk3EDoW+gqhTAaSvrV4688xndEHoCe/HLRpH1Ym3723s7k92m+uhwH2R2uolWe3Cqiaw/GgBF+/VvWImQJyiGMAmNf1zDvbQAo/99lc+MYtmq+ay/azWBfnmjPB69Ivlu9tnGS/vN3eYrywkuP7tdJipdOCZ3R; Expires=Thu, 04 Apr 2024 13:19:22 GMT; Path=/ Set-Cookie: AWSALBTGCORS=ZDNtaWp9BYNuxAVk3EDoW+gqhTAaSvrV4688xndEHoCe/HLRpH1Ym3723s7k92m+uhwH2R2uolWe3Cqiaw/GgBF+/VvWImQJyiGMAmNf1zDvbQAo/99lc+MYtmq+ay/azWBfnmjPB69Ivlu9tnGS/vN3eYrywkuP7tdJipdOCZ3R; Expires=Thu, 04 Apr 2024 13:19:22 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:22 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	50130	3.208.238.164	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:21 UTC	717	OUT	GET /event?c_app_id=WWW&c_page_type=BROWSER&c_page_id=locator&c_customer_type=&c_customer_status=n&c_product_code=&c_subproduct_code=&c_offer_id=&c_event_type=load&c_referrer=&d_cid=113287%011120240328061851126288949&c_sub_channel=&c_vendor_code=&c_offertype= HTTP/1.1 Host: wellsfargobankna.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; wellsfargobankna=33955380241426191774167127150413392378
2024-03-28 13:19:22 UTC	915	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:22 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: FfwIZZuXQV8= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v057-0ac719c3e.edge-va6.demdex.com 6 ms set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:22 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: wellsfargobankna=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:22 GMT; Path=/; Domain=.wellsfargobankna.demdex.net; Secure; SameSite=None
2024-03-28 13:19:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	50131	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:21 UTC	1100	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=2c4120a6-8cbe-4983-b2ed-45670688b5d0&sn=3&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=ZjWKT+8Fkk3op7T5ER8g2Roa8xMrJeHfrA97tpr8/drhe/bX0sB+JIObmlyBPvygTYR1UcOWirwivU5GZ8rl8WXW4W+LKBA1KycNXx3MdIAwfdYIF4IhSexXV2CRGj12TuthSAsRQx9zwJaX0YZql13AX27SeLuGUkigKNJ11zME; AWSALBTGCORS=ryqEN0/ykBuFSjdJEwecY/JrIo8XBk2qWAhr+acfgxo4vXDm28wo7Y45EUV4jnk7ZMfsDzxKMFu+QekCzN2ZT3a+cWou/Hq1xmvoDJR9I7/0AWdfO3D9coEZzKamveGyDzb7vPgLHXUOqlK2HAOp9nB8SVHh5vTjQjtG3DLGUsPy
2024-03-28 13:19:22 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:22 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=rQ48TzPw8I/cejpkjSRoWjOMAQCc4h6Ht8zXHZp4ySU09lHKynfDJMs0smsJY8yGin0Vb5kem7P24HSa3zGEfJpufCdz+pSUv9EvCHmeeeehhvTXnqxK1G1mzuJIecUflW4Wg8YuUM7M1p67suZh/q05VAObTKwikrqT261YSuiu; Expires=Thu, 04 Apr 2024 13:19:22 GMT; Path=/ Set-Cookie: AWSALBTGCORS=rQ48TzPw8I/cejpkjSRoWjOMAQCc4h6Ht8zXHZp4ySU09lHKynfDJMs0smsJY8yGin0Vb5kem7P24HSa3zGEfJpufCdz+pSUv9EvCHmeeeehhvTXnqxK1G1mzuJIecUflW4Wg8YuUM7M1p67suZh/q05VAObTKwikrqT261YSuiu; Expires=Thu, 04 Apr 2024 13:19:22 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:22 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	50123	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:21 UTC	1181	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=6440b9bb-94c9-403c-a3ca-18f1176e2355&sn=3&cfg=201c2b80&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 36426 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=ryqEN0/ykBuFSjdJEwecY/JrIo8XBk2qWAhr+acfgxo4vXDm28wo7Y45EUV4jnk7ZMfsDzxKMFu+QekCzN2ZT3a+cWou/Hq1xmvoDJR9I7/0AWdfO3D9coEZzKamveGyDzb7vPgLHXUOqlK2HAOp9nB8SVHh5vTjQjtG3DLGUsPy
2024-03-28 13:19:21 UTC	16384	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 26 73 6e 3d 33 26 70 3d 36 34 34 30 62 39 62 62 2d 39 34 63 39 2d 34 30 33 63 2d 61 33 63 61 2d 31 38 66 31 31 37 36 65 32 33 35 35 26 73 65 67 3d 25 32 33 73 6b 69 70 26 73 70 3d 25 32 33 73 6b 69 70 26 70 73 73 6e 3d 30 26 65 3d 6c 75 62 39 67 77 69 68 7e 39 31 7e 2d 7e 4e 73 6e 5f 30 2a 72 5f 2a 63 5f 59 6d 31 66 63 33 6f 39 4f 55 4d 78 4e 44 5a 45 4d 45 4d 32 4f 55 55 31 4f 55 59 79 4d 7a 4d 7a 4f 54 4a 43 52 45 5a 47 4d 45 59 30 52 6b 55 77 4f 44 64 25 32 42 57 55 46 42 55 55 31 33 4f 44 42 47 4c 79 39 4f 4d 56 67 72 54 30 46 52 51 55 46 55 63 47 73 79 61 46 4a 6b 63 56 42 42 63 55 74 43 52 69 38 34 59 31 49 79 57 45 56 30 4e 46 Data Ascii: v=2&r=https%3A%2F%2Fwww.wellsfargo.com%2F&sn=3&p=6440b9bb-94c9-403c-a3ca-18f1176e2355&seg=%23skip&sp=%23skip&pssn=0&e=lub9gwih~91~-~Nsn_0r_c_Ym1fc3o9OUMxNDZEMEM2OUU1OUYyMzMzOTJCREZGMEY0RkUwODd%2BWUFBUU13ODBGLy9OMVgrT0FRQUFUcGsyaFJkcVBBcUtCRi84Y1IyWEV0NF
2024-03-28 13:19:21 UTC	16384	OUT	Data Raw: 6d 4e 79 70 6e 4f 63 75 59 51 64 76 53 4a 61 79 39 41 6e 54 76 37 4b 4c 76 61 73 4b 71 30 34 75 6f 4f 7a 4e 36 71 58 55 6c 4b 54 44 75 41 42 71 45 54 25 32 46 67 5a 6c 4e 43 6f 61 59 43 62 68 47 39 4f 59 4b 36 4e 25 32 46 75 58 55 74 4d 39 64 6e 4f 45 48 79 4e 53 34 77 56 78 67 48 71 67 59 6b 55 68 38 59 4d 62 6a 74 78 54 4e 36 6f 48 6f 32 4a 74 6e 79 61 78 77 56 51 4d 4e 35 59 49 4b 77 66 5a 59 75 6d 48 4a 30 37 4d 32 6b 36 47 76 39 36 5a 51 52 52 74 62 32 59 25 32 46 70 61 5a 6e 48 45 62 4b 71 48 5a 37 6c 7a 6f 34 32 6f 49 48 4d 6a 49 63 65 6e 63 72 34 6b 65 39 58 52 77 56 66 57 39 32 50 36 58 6d 25 32 46 74 56 4e 78 78 63 70 77 66 71 59 48 52 4b 44 58 32 6c 6d 38 6b 4f 4d 77 79 76 63 48 70 66 45 77 65 70 39 32 62 4c 77 76 41 5a 79 66 6b 6a 48 52 30 56 Data Ascii: mNypnOcuYQdvSJay9AnTv7KLvasKq04uoOzN6qXUlKTDuABqET%2FgZlNCoaYCbhG9OYK6N%2FuXUtM9dnOEHyNS4wVxgHqgYkUh8YMbjtxTN6oHo2JtnyaxwVQMN5YIKwfZYumHJ07M2k6Gv96ZQRRtb2Y%2FpaZnHEbKqHZ7lzo42oIHMjIcencr4ke9XRwVfW92P6Xm%2FtVNxxcpwfqYHRKDX2lm8kOMwyvcHpfEwep92bLwvAZyfkjHR0V
2024-03-28 13:19:21 UTC	3658	OUT	Data Raw: 4e 32 7a 64 6f 7a 72 54 57 6d 78 33 79 6f 58 55 75 4e 61 46 76 74 57 57 6f 49 70 6a 73 6d 50 50 53 57 57 59 4f 32 62 4d 25 32 42 45 5a 6a 30 6d 6f 61 57 32 67 61 32 32 4c 4c 56 76 50 63 36 57 53 55 50 45 45 48 6d 38 41 35 6b 56 6b 6d 64 4a 33 75 7a 55 6b 76 6b 67 63 71 5a 56 61 25 32 42 71 53 70 6d 59 6f 70 74 4b 56 54 5a 66 50 69 51 39 7a 35 37 55 32 68 56 4a 5a 78 6a 73 38 36 6d 54 35 52 34 42 4b 30 68 48 53 6b 72 44 45 50 4d 34 54 77 71 72 55 4d 55 31 71 6e 75 47 48 4a 56 4b 6a 69 56 74 38 41 65 41 25 32 46 70 79 70 6a 66 6d 74 52 53 45 34 77 48 56 48 57 68 4f 59 39 73 61 75 46 73 78 52 5a 47 6c 63 4c 5a 77 6e 32 6a 65 30 43 74 6e 6a 6b 4d 4e 57 72 49 30 6f 53 7a 4d 31 65 47 6f 4b 70 48 38 71 64 63 56 58 73 6a 6f 53 33 66 53 59 57 73 5a 54 76 44 68 45 Data Ascii: N2zdozrTWmx3yoXUuNaFvtWWoIpjsmPPSWWYO2bM%2BEZj0moaW2ga22LLVvPc6WSUPEEHm8A5kVkmdJ3uzUkvkgcqZVa%2BqSpmYoptKVTZfPiQ9z57U2hVJZxjs86mT5R4BK0hHSkrDEPM4TwqrUMU1qnuGHJVKjiVt8AeA%2FpypjfmtRSE4wHVHWhOY9sauFsxRZGlcLZwn2je0CtnjkMNWrI0oSzM1eGoKpH8qdcVXsjoS3fSYWsZTvDhE
2024-03-28 13:19:22 UTC	873	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:22 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=Huq7sUbRQpm0ETxeuEBc003wWL7NwNlsLfJJr/taEFoyPLvwx5g4fuBy/M/drc49z4be8SHO7biwjwSBU0SrntK3gK9UXZ7KnLH0wXxCctlEZga4G1liYkSrz6FCeGAV4d2MKUzijjtqb67YpdBWe+oArTzbDV96IUBkysAxbljC; Expires=Thu, 04 Apr 2024 13:19:22 GMT; Path=/ Set-Cookie: AWSALBTGCORS=Huq7sUbRQpm0ETxeuEBc003wWL7NwNlsLfJJr/taEFoyPLvwx5g4fuBy/M/drc49z4be8SHO7biwjwSBU0SrntK3gK9UXZ7KnLH0wXxCctlEZga4G1liYkSrz6FCeGAV4d2MKUzijjtqb67YpdBWe+oArTzbDV96IUBkysAxbljC; Expires=Thu, 04 Apr 2024 13:19:22 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:22 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	50124	35.163.101.91	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:22 UTC	662	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive Content-Length: 6707 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:22 UTC	6707	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 33 2e 37 2e 31 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 30 22 2c 22 65 74 22 3a 30 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 22 2c 22 74 73 22 3a 31 37 31 31 36 33 31 39 35 30 34 30 35 2c 22 75 64 22 3a 7b 22 43 75 73 74 6f 6d 65 72 53 65 67 6d 65 6e 74 22 3a 22 54 50 42 22 7d 2c 22 6d 63 22 3a 7b 22 50 4c 54 22 3a 39 35 34 31 2c 22 46 42 54 22 3a 31 30 30 35 2c 22 46 45 54 22 3a 38 35 33 36 2c 22 44 52 54 22 3a 38 35 33 34 2c 22 50 52 54 22 3a 32 2c 22 44 4f 4d 22 3a 39 35 33 39 2c 22 74 73 22 3a 31 37 31 31 36 33 31 39 35 30 34 30 34 2c 22 50 4c 43 22 3a 31 7d 2c 22 6d 78 22 3a 7b 22 50 4c 54 22 3a 38 32 31 31 2c 22 46 42 54 22 3a 39 37 34 2c 22 53 43 54 22 3a 35 36 Data Ascii: {"vr":"4.3.7.1","dt":"R","rg":"0","es":[{"eg":"0","et":0,"eu":"0://1/2/","ts":1711631950405,"ud":{"CustomerSegment":"TPB"},"mc":{"PLT":9541,"FBT":1005,"FET":8536,"DRT":8534,"PRT":2,"DOM":9539,"ts":1711631950404,"PLC":1},"mx":{"PLT":8211,"FBT":974,"SCT":56
2024-03-28 13:19:22 UTC	1216	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:22 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:27\|g:8e64f3dd-bf36-4f47-a725-92adf0dbee18; Path=/; Expires=Thu, 28-Mar-2024 13:19:52 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:27\|g:8e64f3dd-bf36-4f47-a725-92adf0dbee18\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:19:52 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:19:52 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:27\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:19:52 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:27\|i:559461\|e:2; Path=/; Expires=Thu, 28-Mar-2024 13:19:52 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:27\|i:559461\|e:2\|t:1711631962585; Path=/; Expires=Thu, 28-Mar-2024 13:19:52 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	50136	142.251.16.157	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:22 UTC	1052	OUT	GET /pagead/viewthroughconversion/984436569/?label=N133CNyD82gQ2Z611QM&guid=ON&script=0&ct_cookie_present=false&random=927088412&sscte=1&crd=COG9sQIIucGxAgiXwbECIgEBQAE&pscrd=CJuR3quMpaT6QCITCN2xx_iFl4UDFXyKdwEdC9EK5jICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI6G2h0dHBzOi8vd3d3LndlbGxzZmFyZ28uY29tLw HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
2024-03-28 13:19:22 UTC	988	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/984436569/?label=N133CNyD82gQ2Z611QM&guid=ON&script=0&ct_cookie_present=false&random=927088412&sscte=1&crd=COG9sQIIucGxAgiXwbECIgEBQAE&pscrd=CJuR3quMpaT6QCITCN2xx_iFl4UDFXyKdwEdC9EK5jICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI6G2h0dHBzOi8vd3d3LndlbGxzZmFyZ28uY29tLw&is_vtc=1&cid=CAQSKQB7FLtqp_2qh1HgAbcX-xWI9UcuLryhv9bdVGexJxB2NaPj49XgyynX&random=562625253 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	50141	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:22 UTC	1180	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=6440b9bb-94c9-403c-a3ca-18f1176e2355&sn=4&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 8397 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=rQ48TzPw8I/cejpkjSRoWjOMAQCc4h6Ht8zXHZp4ySU09lHKynfDJMs0smsJY8yGin0Vb5kem7P24HSa3zGEfJpufCdz+pSUv9EvCHmeeeehhvTXnqxK1G1mzuJIecUflW4Wg8YuUM7M1p67suZh/q05VAObTKwikrqT261YSuiu
2024-03-28 13:19:22 UTC	8397	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 26 73 6e 3d 34 26 70 3d 36 34 34 30 62 39 62 62 2d 39 34 63 39 2d 34 30 33 63 2d 61 33 63 61 2d 31 38 66 31 31 37 36 65 32 33 35 35 26 73 65 67 3d 25 32 33 73 6b 69 70 26 73 70 3d 25 32 33 73 6b 69 70 26 70 73 73 6e 3d 30 26 65 3d 6c 75 62 39 67 77 79 6e 7e 33 34 7e 2d 7e 4e 59 58 42 77 58 32 6c 6b 5f 56 31 64 58 2a 62 58 42 31 61 57 51 25 33 44 5f 4d 54 45 79 4d 44 49 30 4d 44 4d 79 4f 44 41 32 4d 54 67 31 4d 54 45 79 4e 6a 49 34 4f 44 6b 30 4f 51 25 33 44 25 33 44 2a 64 57 35 70 63 58 56 6c 58 32 6c 6b 5f 4d 6a 41 79 4e 44 41 7a 4d 6a 67 77 4e 6a 45 35 4d 44 4d 25 33 44 2a 63 47 46 6e 5a 56 39 30 65 58 42 6c 5f 51 6c 4a 50 56 31 4e Data Ascii: v=2&r=https%3A%2F%2Fwww.wellsfargo.com%2F&sn=4&p=6440b9bb-94c9-403c-a3ca-18f1176e2355&seg=%23skip&sp=%23skip&pssn=0&e=lub9gwyn~34~-~NYXBwX2lk_V1dXbXB1aWQ%3D_MTEyMDI0MDMyODA2MTg1MTEyNjI4ODk0OQ%3D%3DdW5pcXVlX2lk_MjAyNDAzMjgwNjE5MDM%3D*cGFnZV90eXBl_QlJPV1N
2024-03-28 13:19:22 UTC	815	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:22 GMT Content-Type: application/json Content-Length: 270 Connection: close Set-Cookie: AWSALBTG=TjnviOpe5eX3Mc+u66snOUpdHikOAavhfgPepHdjVA9c7llYF5vrATAf3NqwgKS52LfkGbLE1NhLo7uaTRde2UZ2pH1tUWmvCDTt2dCnqTtWdU4ql7+Abf3P7xF+/tv8x5/7yOJcJyIrWc1ZxMi2/aPj/MhRVFRgcIcMiYvJuWZg; Expires=Thu, 04 Apr 2024 13:19:22 GMT; Path=/ Set-Cookie: AWSALBTGCORS=TjnviOpe5eX3Mc+u66snOUpdHikOAavhfgPepHdjVA9c7llYF5vrATAf3NqwgKS52LfkGbLE1NhLo7uaTRde2UZ2pH1tUWmvCDTt2dCnqTtWdU4ql7+Abf3P7xF+/tv8x5/7yOJcJyIrWc1ZxMi2/aPj/MhRVFRgcIcMiYvJuWZg; Expires=Thu, 04 Apr 2024 13:19:22 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:22 UTC	270	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 6e 75 6c 6c 2c 22 75 73 61 67 65 22 3a 7b 22 73 65 73 73 69 6f 6e 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 61 70 69 43 61 6c 6c 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 63 75 73 74 6f 6d 53 65 72 76 65 72 43 61 6c 6c 73 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 64 61 74 61 4c 69 6d 69 74 22 3a 20 34 31 39 34 33 30 34 7d 2c 22 62 6c 6f 63 6b 52 65 63 Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":null,"usage":{"sessionQuotaBreach":false, "apiCallQuotaBreach":false, "customServerCallsBreach":false, "dataLimit": 4194304},"blockRec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	50143	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:22 UTC	1100	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=6440b9bb-94c9-403c-a3ca-18f1176e2355&sn=3&cfg=201c2b80&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=rQ48TzPw8I/cejpkjSRoWjOMAQCc4h6Ht8zXHZp4ySU09lHKynfDJMs0smsJY8yGin0Vb5kem7P24HSa3zGEfJpufCdz+pSUv9EvCHmeeeehhvTXnqxK1G1mzuJIecUflW4Wg8YuUM7M1p67suZh/q05VAObTKwikrqT261YSuiu; AWSALBTGCORS=rQ48TzPw8I/cejpkjSRoWjOMAQCc4h6Ht8zXHZp4ySU09lHKynfDJMs0smsJY8yGin0Vb5kem7P24HSa3zGEfJpufCdz+pSUv9EvCHmeeeehhvTXnqxK1G1mzuJIecUflW4Wg8YuUM7M1p67suZh/q05VAObTKwikrqT261YSuiu
2024-03-28 13:19:22 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:22 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=8AhmFclZYBbKjWXIesK9LxhC1ASo9bBnT6c2B6XjcyK8Q01Tx+XDtWgvA2mjDcWITgVFoeo9zTF6W7xIXArThxCdBhkfq0+WZ2NLn0tg24/iUDTizFsuKhoY3kmdbjh/yS95XsbW2Pevh7Bp51bJeASbigCN3s2JkIKmeb37Je2W; Expires=Thu, 04 Apr 2024 13:19:22 GMT; Path=/ Set-Cookie: AWSALBTGCORS=8AhmFclZYBbKjWXIesK9LxhC1ASo9bBnT6c2B6XjcyK8Q01Tx+XDtWgvA2mjDcWITgVFoeo9zTF6W7xIXArThxCdBhkfq0+WZ2NLn0tg24/iUDTizFsuKhoY3kmdbjh/yS95XsbW2Pevh7Bp51bJeASbigCN3s2JkIKmeb37Je2W; Expires=Thu, 04 Apr 2024 13:19:22 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:22 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	50144	172.253.62.105	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:22 UTC	1233	OUT	GET /pagead/1p-conversion/984436569/?label=N133CNyD82gQ2Z611QM&guid=ON&script=0&ct_cookie_present=false&random=927088412&sscte=1&crd=COG9sQIIucGxAgiXwbECIgEBQAE&pscrd=CJuR3quMpaT6QCITCN2xx_iFl4UDFXyKdwEdC9EK5jICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI6G2h0dHBzOi8vd3d3LndlbGxzZmFyZ28uY29tLw&is_vtc=1&cid=CAQSKQB7FLtqp_2qh1HgAbcX-xWI9UcuLryhv9bdVGexJxB2NaPj49XgyynX&random=562625253 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:23 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	50150	142.250.31.156	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:23 UTC	851	OUT	GET /pixel?google_nid=wellsfargo_adh&google_hm=MTUxMTA2MTUzNS4xNzExNjMxOTUw&_rnd=0.7952115751210573 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
2024-03-28 13:19:23 UTC	566	IN	HTTP/1.1 302 Found Location: https://fcmatch.google.com/pixel?google_gm=AMnCDooB--uE3qqwM60W-aFIvHRoCOUhU6Ul6HroemNjvvKfJVwxfqQOG2V4li17-b9TX64bRRCx9kEPSj-5RJKKu2ZKwmFKSFf6TCRlcnlLlDJOmPbZ5BU Date: Thu, 28 Mar 2024 13:19:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 359 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:23 UTC	359	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 66 63 6d 61 74 63 68 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 67 6d 3d 41 4d 6e 43 44 6f 6f 42 2d 2d 75 45 33 71 71 77 4d 36 30 57 2d 61 46 49 76 48 52 6f 43 4f 55 68 55 36 55 6c 36 48 72 6f 65 6d 4e 6a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://fcmatch.google.com/pixel?google_gm=AMnCDooB--uE3qqwM60W-aFIvHRoCOUhU6Ul6HroemNj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	50152	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:23 UTC	1040	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=8AhmFclZYBbKjWXIesK9LxhC1ASo9bBnT6c2B6XjcyK8Q01Tx+XDtWgvA2mjDcWITgVFoeo9zTF6W7xIXArThxCdBhkfq0+WZ2NLn0tg24/iUDTizFsuKhoY3kmdbjh/yS95XsbW2Pevh7Bp51bJeASbigCN3s2JkIKmeb37Je2W
2024-03-28 13:19:23 UTC	1035	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:23 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=tdk3VzhzFOKtIgimMSPbyViI/cV0XTHQFN2ETwYhvERMVm3NmVtSWV0CQMQPM/hlbqmTD2yJRk3Y7Gya98XZrIskKLObq0mDx4d/kUkhlfdM7KR8XdaGly+qfTp07V1c/qfi3iXbV4+OAe//F+m9YJNxNgyH3+hnaTEAmql7pho2; Expires=Thu, 04 Apr 2024 13:19:23 GMT; Path=/ Set-Cookie: AWSALBTGCORS=tdk3VzhzFOKtIgimMSPbyViI/cV0XTHQFN2ETwYhvERMVm3NmVtSWV0CQMQPM/hlbqmTD2yJRk3Y7Gya98XZrIskKLObq0mDx4d/kUkhlfdM7KR8XdaGly+qfTp07V1c/qfi3iXbV4+OAe//F+m9YJNxNgyH3+hnaTEAmql7pho2; Expires=Thu, 04 Apr 2024 13:19:23 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:23 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	50155	172.253.63.149	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:23 UTC	1168	OUT	GET /activityi;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F? HTTP/1.1 Host: 2549153.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
2024-03-28 13:19:23 UTC	1058	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://2549153.fls.doubleclick.net/activityi;dc_pre=CK6Ts_mFl4UDFREVdgYd2PIHKw;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	50159	172.253.63.149	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:23 UTC	1202	OUT	GET /activityi;dc_pre=CK6Ts_mFl4UDFREVdgYd2PIHKw;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F? HTTP/1.1 Host: 2549153.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
2024-03-28 13:19:24 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:24 GMT Expires: Thu, 28 Mar 2024 13:19:24 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-28 13:19:24 UTC	559	IN	Data Raw: 32 32 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4b 36 54 73 5f 6d 46 6c 34 55 44 46 52 Data Ascii: 228<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CK6Ts_mFl4UDFR
2024-03-28 13:19:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	50163	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:23 UTC	1100	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=6440b9bb-94c9-403c-a3ca-18f1176e2355&sn=4&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=8AhmFclZYBbKjWXIesK9LxhC1ASo9bBnT6c2B6XjcyK8Q01Tx+XDtWgvA2mjDcWITgVFoeo9zTF6W7xIXArThxCdBhkfq0+WZ2NLn0tg24/iUDTizFsuKhoY3kmdbjh/yS95XsbW2Pevh7Bp51bJeASbigCN3s2JkIKmeb37Je2W; AWSALBTGCORS=tdk3VzhzFOKtIgimMSPbyViI/cV0XTHQFN2ETwYhvERMVm3NmVtSWV0CQMQPM/hlbqmTD2yJRk3Y7Gya98XZrIskKLObq0mDx4d/kUkhlfdM7KR8XdaGly+qfTp07V1c/qfi3iXbV4+OAe//F+m9YJNxNgyH3+hnaTEAmql7pho2
2024-03-28 13:19:24 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:24 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=+SAqzLKks7RZ5P9d6e6ElVaWvcarbw9xAwA9HKQpC4YKiWbc1Yrf0rkLEbMmZG7Y5Z1Q9wMiwLt4w9oz5C8WYfMZ/aUVFdIFSTfDblQ9qDHAS41PIppCE0af1TqvZrHm8lFrph41y7scVM5nRnFPkKx0+USOwIzSZUSTQRV+cmXD; Expires=Thu, 04 Apr 2024 13:19:24 GMT; Path=/ Set-Cookie: AWSALBTGCORS=+SAqzLKks7RZ5P9d6e6ElVaWvcarbw9xAwA9HKQpC4YKiWbc1Yrf0rkLEbMmZG7Y5Z1Q9wMiwLt4w9oz5C8WYfMZ/aUVFdIFSTfDblQ9qDHAS41PIppCE0af1TqvZrHm8lFrph41y7scVM5nRnFPkKx0+USOwIzSZUSTQRV+cmXD; Expires=Thu, 04 Apr 2024 13:19:24 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:24 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	50168	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:23 UTC	1032	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=8AhmFclZYBbKjWXIesK9LxhC1ASo9bBnT6c2B6XjcyK8Q01Tx+XDtWgvA2mjDcWITgVFoeo9zTF6W7xIXArThxCdBhkfq0+WZ2NLn0tg24/iUDTizFsuKhoY3kmdbjh/yS95XsbW2Pevh7Bp51bJeASbigCN3s2JkIKmeb37Je2W; AWSALBTGCORS=tdk3VzhzFOKtIgimMSPbyViI/cV0XTHQFN2ETwYhvERMVm3NmVtSWV0CQMQPM/hlbqmTD2yJRk3Y7Gya98XZrIskKLObq0mDx4d/kUkhlfdM7KR8XdaGly+qfTp07V1c/qfi3iXbV4+OAe//F+m9YJNxNgyH3+hnaTEAmql7pho2
2024-03-28 13:19:24 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:24 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=+4boTYi90yEn3KkYfEbYRcjnylQ/A9NermyVlD6n31NuzkFzgbxcqS2jm6xQzZPL6FWQIOJRF6VlLqteR0isEyKdCwB277R8Hg8m2PDdt8FQqBjWPd0IKd6uUz78NsxKGHntKLTXbQY+cRlSiTM3+BowUpmeHMaB6T3/5lZKGXpy; Expires=Thu, 04 Apr 2024 13:19:24 GMT; Path=/ Set-Cookie: AWSALBTGCORS=+4boTYi90yEn3KkYfEbYRcjnylQ/A9NermyVlD6n31NuzkFzgbxcqS2jm6xQzZPL6FWQIOJRF6VlLqteR0isEyKdCwB277R8Hg8m2PDdt8FQqBjWPd0IKd6uUz78NsxKGHntKLTXbQY+cRlSiTM3+BowUpmeHMaB6T3/5lZKGXpy; Expires=Thu, 04 Apr 2024 13:19:24 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:24 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	50165	172.253.115.104	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:23 UTC	995	OUT	GET /pagead/1p-conversion/984436569/?label=N133CNyD82gQ2Z611QM&guid=ON&script=0&ct_cookie_present=false&random=927088412&sscte=1&crd=COG9sQIIucGxAgiXwbECIgEBQAE&pscrd=CJuR3quMpaT6QCITCN2xx_iFl4UDFXyKdwEdC9EK5jICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI6G2h0dHBzOi8vd3d3LndlbGxzZmFyZ28uY29tLw&is_vtc=1&cid=CAQSKQB7FLtqp_2qh1HgAbcX-xWI9UcuLryhv9bdVGexJxB2NaPj49XgyynX&random=562625253 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:24 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	50164	142.251.111.148	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:23 UTC	1087	OUT	GET /activityi;register_conversion=1;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F? HTTP/1.1 Host: 2549153.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
2024-03-28 13:19:24 UTC	1080	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://2549153.fls.doubleclick.net/activityi;dc_pre=CNKJ2fmFl4UDFfUy-QAdsh4LIQ;register_conversion=1;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	50170	172.253.122.113	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:23 UTC	1001	OUT	GET /pixel?google_gm=AMnCDooB--uE3qqwM60W-aFIvHRoCOUhU6Ul6HroemNjvvKfJVwxfqQOG2V4li17-b9TX64bRRCx9kEPSj-5RJKKu2ZKwmFKSFf6TCRlcnlLlDJOmPbZ5BU HTTP/1.1 Host: fcmatch.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:24 UTC	596	IN	HTTP/1.1 302 Found Location: https://fcmatch.youtube.com/pixel?google_gm=AMnCDooB--uE3qqwM60W-aFIvHRoCOUhU6Ul6HroemNjvvKfJVwxfqQOG2V4li17-b9TX64bRRCx9kEPSj-5RJKKu2ZKwmFKSFf6TCRlcnlLlDJOmPbZ5BU Date: Thu, 28 Mar 2024 13:19:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 360 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:24 UTC	360	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 66 63 6d 61 74 63 68 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 67 6d 3d 41 4d 6e 43 44 6f 6f 42 2d 2d 75 45 33 71 71 77 4d 36 30 57 2d 61 46 49 76 48 52 6f 43 4f 55 68 55 36 55 6c 36 48 72 6f 65 6d 4e Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://fcmatch.youtube.com/pixel?google_gm=AMnCDooB--uE3qqwM60W-aFIvHRoCOUhU6Ul6HroemN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	50161	34.211.102.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:24 UTC	575	OUT	GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:d9807aaa-c012-41fc-ad58-c5c96987ab65\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631958811
2024-03-28 13:19:24 UTC	1500	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:24 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:d9807aaa-c012-41fc-ad58-c5c96987ab65\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631958811; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:adb40a58-c631-4a90-a3cf-16274e4ce69c; Path=/; Expires=Thu, 28-Mar-2024 13:19:54 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:adb40a58-c631-4a90-a3cf-16274e4ce69c\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:19:54 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:19:54 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:19:54 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2; Path=/; Expires=Thu, 28-Mar-2024 13:19:54 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631964295; Path=/; Expires=Thu, 28-Mar-2024 13:19:54 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	50182	142.251.111.148	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:24 UTC	1121	OUT	GET /activityi;dc_pre=CNKJ2fmFl4UDFfUy-QAdsh4LIQ;register_conversion=1;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F? HTTP/1.1 Host: 2549153.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
2024-03-28 13:19:24 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:24 GMT Expires: Thu, 28 Mar 2024 13:19:24 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-28 13:19:24 UTC	581	IN	Data Raw: 32 33 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4e 4b 4a 32 66 6d 46 6c 34 55 44 46 66 Data Ascii: 23e<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CNKJ2fmFl4UDFf
2024-03-28 13:19:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	50183	142.251.163.155	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:24 UTC	1146	OUT	GET /ddm/fls/z/dc_pre=CK6Ts_mFl4UDFREVdgYd2PIHKw;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:24 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	50184	172.253.63.139	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:24 UTC	813	OUT	GET /pixel?google_gm=AMnCDooB--uE3qqwM60W-aFIvHRoCOUhU6Ul6HroemNjvvKfJVwxfqQOG2V4li17-b9TX64bRRCx9kEPSj-5RJKKu2ZKwmFKSFf6TCRlcnlLlDJOmPbZ5BU HTTP/1.1 Host: fcmatch.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:24 UTC	403	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 28 Mar 2024 13:19:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:24 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	50187	63.140.39.65	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:24 UTC	758	OUT	POST /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=c40b8a92-02fa-456b-ae31-ce3345e2ea42 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 352 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:24 UTC	352	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 7b 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 66 65 74 63 68 22 3a 5b 22 45 43 49 44 22 5d 7d 7d 2c 22 6d 65 74 61 22 3a 7b 22 73 74 61 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 22 2c 22 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 6b 6e 64 63 74 72 5f 31 42 41 41 31 35 46 33 35 34 46 37 33 31 45 36 30 41 34 43 39 38 41 34 5f 41 64 6f 62 65 4f 72 67 5f 69 64 65 6e 74 69 74 79 22 2c 22 76 61 6c 75 65 22 3a 22 43 69 59 7a 4d 7a 6b 78 4f 44 59 34 4d 7a 41 79 4d 54 49 31 4e 44 51 33 4d 6a 49 32 4e 44 45 32 4f 44 55 79 4e 7a 67 79 4e 54 6b 35 4f 54 49 34 4e 7a 49 33 4d 31 49 51 43 4b 4b 6b 32 36 6e 6f 4d 52 67 42 4b 67 Data Ascii: {"query":{"identity":{"fetch":["ECID"]}},"meta":{"state":{"domain":"wellsfargo.com","cookiesEnabled":true,"entries":[{"key":"kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity","value":"CiYzMzkxODY4MzAyMTI1NDQ3MjI2NDE2ODUyNzgyNTk5OTI4NzI3M1IQCKKk26noMRgBKg
2024-03-28 13:19:24 UTC	635	IN	HTTP/1.1 200 OK x-request-id: c40b8a92-02fa-456b-ae31-ce3345e2ea42 vary: Origin access-control-allow-origin: https://www.wellsfargo.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Thu, 28 Mar 2024 13:19:24 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-03-28 13:19:24 UTC	527	IN	Data Raw: 32 30 38 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 63 34 30 62 38 61 39 32 2d 30 32 66 61 2d 34 35 36 62 2d 61 65 33 31 2d 63 65 33 33 34 35 65 32 65 61 34 32 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 34 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 208{"requestId":"c40b8a92-02fa-456b-ae31-ce3345e2ea42","handle":[{"payload":[{"id":"33918683021254472264168527825999287273","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"34","ttlSeconds":1800},{"scope":"AA
2024-03-28 13:19:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	50188	69.147.92.11	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:24 UTC	559	OUT	GET /wi/config/.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:24 UTC	768	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-amz-request-id: NWPCGF4R5JCC20W9 x-amz-id-2: IBzqtrF+CF6ugccsRawfiWX/YcrGEV+iAxQuvGFvY2DbaQrIXfR0cPVMRmcBbmSKbV1UuQSg7NU= Content-Type: application/json Date: Thu, 28 Mar 2024 12:51:52 GMT Server: ATS Referrer-Policy: no-referrer-when-downgrade Cache-Control: public,max-age=3600 Content-Length: 2 Age: 1652 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-28 13:19:24 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	50204	63.140.39.65	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:25 UTC	751	OUT	POST /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=2aba2bf0-2f1f-4c0d-856d-97df1acdd718 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 4287 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:25 UTC	4287	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 71 75 65 72 79 22 3a 7b 22 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 3a 7b 22 73 63 68 65 6d 61 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 64 65 66 61 75 6c 74 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 68 74 6d 6c 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 6a 73 6f 6e 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c Data Ascii: {"events":[{"query":{"personalization":{"schemas":["https://ns.adobe.com/personalization/default-content-item","https://ns.adobe.com/personalization/html-content-item","https://ns.adobe.com/personalization/json-content-item","https://ns.adobe.com/personal
2024-03-28 13:19:25 UTC	635	IN	HTTP/1.1 200 OK x-request-id: 2aba2bf0-2f1f-4c0d-856d-97df1acdd718 vary: Origin access-control-allow-origin: https://www.wellsfargo.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Thu, 28 Mar 2024 13:19:25 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-03-28 13:19:25 UTC	527	IN	Data Raw: 32 30 38 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 32 61 62 61 32 62 66 30 2d 32 66 31 66 2d 34 63 30 64 2d 38 35 36 64 2d 39 37 64 66 31 61 63 64 64 37 31 38 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 34 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 208{"requestId":"2aba2bf0-2f1f-4c0d-856d-97df1acdd718","handle":[{"payload":[{"id":"33918683021254472264168527825999287273","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"34","ttlSeconds":1800},{"scope":"AA
2024-03-28 13:19:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	50200	63.140.38.132	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:25 UTC	459	OUT	GET /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=c40b8a92-02fa-456b-ae31-ce3345e2ea42 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:25 UTC	418	IN	HTTP/1.1 404 Not Found x-request-id: c40b8a92-02fa-456b-ae31-ce3345e2ea42 vary: Origin date: Thu, 28 Mar 2024 13:19:24 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	50201	142.251.16.157	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:25 UTC	1225	OUT	GET /pagead/viewthroughconversion/984436569/?random=1711631963095&cv=9&fst=1711631963095&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F&ref=null&tiba=ATM%20and%20Bank%20Locations%20-%20Find%20Wells%20Fargo%20Bank%20and%20ATM%20Locations&hn=www.google.com&async=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
2024-03-28 13:19:25 UTC	1138	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/984436569/?random=1711631963095&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F&ref=null&tiba=ATM%20and%20Bank%20Locations%20-%20Find%20Wells%20Fargo%20Bank%20and%20ATM%20Locations&async=1&is_vtc=1&cid=CAQSKQB7FLtq9dorHPZrAhU_zAc-Mdz_9Wyb2P8MCvCMkamBp_7erbHNCtHB&random=3949320223&resp=GooglemKTybQhCsO Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	50202	142.251.16.148	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:25 UTC	883	OUT	GET /activityi;dc_pre=CNKJ2fmFl4UDFfUy-QAdsh4LIQ;register_conversion=1;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F? HTTP/1.1 Host: 2549153.fls.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
2024-03-28 13:19:25 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:25 GMT Expires: Thu, 28 Mar 2024 13:19:25 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-28 13:19:25 UTC	581	IN	Data Raw: 32 33 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4e 4b 4a 32 66 6d 46 6c 34 55 44 46 66 Data Ascii: 23e<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CNKJ2fmFl4UDFf
2024-03-28 13:19:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	50205	69.147.92.12	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:25 UTC	349	OUT	GET /wi/config/.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:25 UTC	598	IN	HTTP/1.1 200 OK x-amz-request-id: 65K2GRQF36FZDB46 x-amz-id-2: vsp2RnX5u7VQCA3DJJShYYGc82JaghUDYVCOWQ58gBSNAcNY5UPsBMQCvPhvs7IUhiAM/NnjPv4= Content-Type: application/json Date: Thu, 28 Mar 2024 13:19:25 GMT Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Cache-Control: public,max-age=3600 Age: 0 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-28 13:19:25 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	50203	142.251.167.157	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:25 UTC	946	OUT	GET /ddm/fls/z/dc_pre=CK6Ts_mFl4UDFREVdgYd2PIHKw;src=2549153;type=allv40;cat=all_a0;ord=6132377373158;gtm=2od8g0;auiddc=;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:25 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	50210	63.140.38.132	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:25 UTC	451	OUT	GET /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=2aba2bf0-2f1f-4c0d-856d-97df1acdd718 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:25 UTC	418	IN	HTTP/1.1 404 Not Found x-request-id: 2aba2bf0-2f1f-4c0d-856d-97df1acdd718 vary: Origin date: Thu, 28 Mar 2024 13:19:25 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	50213	172.253.62.105	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:25 UTC	1383	OUT	GET /pagead/1p-user-list/984436569/?random=1711631963095&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F&ref=null&tiba=ATM%20and%20Bank%20Locations%20-%20Find%20Wells%20Fargo%20Bank%20and%20ATM%20Locations&async=1&is_vtc=1&cid=CAQSKQB7FLtq9dorHPZrAhU_zAc-Mdz_9Wyb2P8MCvCMkamBp_7erbHNCtHB&random=3949320223&resp=GooglemKTybQhCsO HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:25 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	50219	172.253.115.104	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:26 UTC	1145	OUT	GET /pagead/1p-user-list/984436569/?random=1711631963095&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F&ref=null&tiba=ATM%20and%20Bank%20Locations%20-%20Find%20Wells%20Fargo%20Bank%20and%20ATM%20Locations&async=1&is_vtc=1&cid=CAQSKQB7FLtq9dorHPZrAhU_zAc-Mdz_9Wyb2P8MCvCMkamBp_7erbHNCtHB&random=3949320223&resp=GooglemKTybQhCsO HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:26 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	50224	13.32.208.32	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:26 UTC	560	OUT	OPTIONS /WellsFargo/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20vYWJvdXQv HTTP/1.1 Host: data.schemaapp.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-api-key Origin: https://www.wellsfargo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:26 UTC	643	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Date: Thu, 28 Mar 2024 13:19:27 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Headers: x-api-key Access-Control-Expose-Headers: x-amz-meta-source Access-Control-Max-Age: 3000 Server: AmazonS3 Strict-Transport-Security: max-age=31536000; includeSubDomains; Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 8d6d65c40f49b96d1f700720137be26a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C1 X-Amz-Cf-Id: KMLAmX0oC8Csp5W9kQPbdi1VCvwLbmov9hEE0m-Hc4gYYLoXsbLEIQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	50230	13.32.208.32	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:27 UTC	643	OUT	GET /WellsFargo/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20vYWJvdXQv HTTP/1.1 Host: data.schemaapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-api-key: XPJKP-GI7DG-FVNWZ-45W51 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:27 UTC	665	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: x-amz-meta-source Access-Control-Max-Age: 3000 Date: Thu, 28 Mar 2024 13:19:27 GMT Server: AmazonS3 Strict-Transport-Security: max-age=31536000; includeSubDomains; Cache-Control: max-age=14400 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Error from cloudfront Via: 1.1 8d6d65c40f49b96d1f700720137be26a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C1 X-Amz-Cf-Id: a68grAGqFcd2WMUsgf04OgVgYlcntiuRvtxHA4cIfVHaITnKnnUchA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	50231	44.213.253.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:27 UTC	953	OUT	GET /event?c_app_id=WWW&c_page_type=BROWSER&c_page_id=about&c_customer_type=&c_customer_status=n&c_product_code=&c_subproduct_code=&c_offer_id=&c_event_type=load&c_referrer=&d_cid=113287%011120240328061851126288949&c_sub_channel=&c_vendor_code=&c_offertype= HTTP/1.1 Host: wellsfargobankna.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; wellsfargobankna=33955380241426191774167127150413392378
2024-03-28 13:19:27 UTC	916	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:27 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: eyVyin+vSw4= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v057-0c5a96f83.edge-va6.demdex.com 22 ms set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:27 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: wellsfargobankna=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:27 GMT; Path=/; Domain=.wellsfargobankna.demdex.net; Secure; SameSite=None
2024-03-28 13:19:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	50232	142.250.31.156	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:27 UTC	851	OUT	GET /pixel?google_nid=wellsfargo_adh&google_hm=MTUxMTA2MTUzNS4xNzExNjMxOTUw&_rnd=0.2042591020981015 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
2024-03-28 13:19:27 UTC	566	IN	HTTP/1.1 302 Found Location: https://fcmatch.google.com/pixel?google_gm=AMnCDoqLmwev_v-dJR_RIm72duWb2y5tEqtm9i_436YxdwOxcVKacGuMPfkTZpOD_GyNbJGCvB4JpMmyKKgrCnYTxDxmc2WCHepVzjCY_rGduhqxSXWQvxA Date: Thu, 28 Mar 2024 13:19:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 359 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:27 UTC	359	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 66 63 6d 61 74 63 68 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 67 6d 3d 41 4d 6e 43 44 6f 71 4c 6d 77 65 76 5f 76 2d 64 4a 52 5f 52 49 6d 37 32 64 75 57 62 32 79 35 74 45 71 74 6d 39 69 5f 34 33 36 59 78 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://fcmatch.google.com/pixel?google_gm=AMnCDoqLmwev_v-dJR_RIm72duWb2y5tEqtm9i_436Yx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	50233	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:27 UTC	1040	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=+4boTYi90yEn3KkYfEbYRcjnylQ/A9NermyVlD6n31NuzkFzgbxcqS2jm6xQzZPL6FWQIOJRF6VlLqteR0isEyKdCwB277R8Hg8m2PDdt8FQqBjWPd0IKd6uUz78NsxKGHntKLTXbQY+cRlSiTM3+BowUpmeHMaB6T3/5lZKGXpy
2024-03-28 13:19:27 UTC	1035	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:27 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=LE7ypjLm6rLk3Rk4AAKEx4oj6a2gOu+wCtKtrT51LVqxztMKshc7DBoR3tSdEOysrF5L0jy0dPwWXMyIGOAA6rohZW8nT1ij121fdWLp/V3MG0FVIeLVS3RM/p9sO28KdVWEwhRO8KS4OOkLEE9BkL7wXbY/cJEJoln65Eep4Jny; Expires=Thu, 04 Apr 2024 13:19:27 GMT; Path=/ Set-Cookie: AWSALBTGCORS=LE7ypjLm6rLk3Rk4AAKEx4oj6a2gOu+wCtKtrT51LVqxztMKshc7DBoR3tSdEOysrF5L0jy0dPwWXMyIGOAA6rohZW8nT1ij121fdWLp/V3MG0FVIeLVS3RM/p9sO28KdVWEwhRO8KS4OOkLEE9BkL7wXbY/cJEJoln65Eep4Jny; Expires=Thu, 04 Apr 2024 13:19:27 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:27 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	50237	146.75.29.230	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:27 UTC	613	OUT	GET /wdcusprem/57907/onsite/onsiteData.json HTTP/1.1 Host: resources.digital-cloud-prem.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:27 UTC	754	IN	HTTP/1.1 200 OK Connection: close Content-Length: 40702 x-amz-id-2: az4so6EPRCgLdv6Jk4+RT/Pzt+z2fLw6x74xZAh3NN+pMyN5j2Kds01CG5HO/TvFaGe2dlaKga8= x-amz-request-id: 37QJYA2SM82YW2D2 Last-Modified: Wed, 27 Mar 2024 18:29:51 GMT ETag: "f911470fe0e560afcc355e2b7c2d14e0" x-amz-server-side-encryption: AES256 x-amz-version-id: ix_fLLitnc.RHcWy1daejYWk1SJmMgCk Content-Type: application/json Server: AmazonS3 Access-Control-Allow-Origin: * Cache-Control: max-age=0,must-revalidate Accept-Ranges: bytes Date: Thu, 28 Mar 2024 13:19:27 GMT Via: 1.1 varnish Age: 25373 X-Served-By: cache-iad-kiad7000094-IAD X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1711631968.564992,VS0,VE1 Vary: Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-03-28 13:19:27 UTC	1378	IN	Data Raw: 7b 0a 20 20 22 73 62 74 53 65 72 76 65 72 44 6f 6d 61 69 6e 22 20 3a 20 22 68 74 74 70 73 3a 2f 2f 75 62 74 2d 6c 62 2e 64 69 67 69 74 61 6c 2d 63 6c 6f 75 64 2d 70 72 65 6d 2e 6d 65 64 61 6c 6c 69 61 2e 63 6f 6d 22 2c 0a 20 20 22 73 62 74 45 6e 76 50 72 65 66 69 78 22 20 3a 20 22 77 64 63 75 73 70 72 65 6d 5f 22 2c 0a 20 20 22 65 6e 64 55 73 65 72 49 64 65 6e 74 69 66 69 65 72 22 20 3a 20 7b 20 7d 2c 0a 20 20 22 66 6f 72 6d 4e 6f 64 65 73 22 20 3a 20 5b 20 7b 0a 20 20 20 20 22 66 6f 72 6d 49 64 22 20 3a 20 22 34 34 33 35 22 2c 0a 20 20 20 20 22 69 73 43 75 73 74 6f 6d 48 74 6d 6c 45 6e 61 62 6c 65 64 22 20 3a 20 22 66 61 6c 73 65 22 2c 0a 20 20 20 20 22 75 72 6c 56 65 72 73 69 6f 6e 22 20 3a 20 22 56 32 22 2c 0a 20 20 20 20 22 66 6f 72 6d 48 74 6d 6c 55 Data Ascii: { "sbtServerDomain" : "https://ubt-lb.digital-cloud-prem.medallia.com", "sbtEnvPrefix" : "wdcusprem_", "endUserIdentifier" : { }, "formNodes" : [ { "formId" : "4435", "isCustomHtmlEnabled" : "false", "urlVersion" : "V2", "formHtmlU
2024-03-28 13:19:27 UTC	1378	IN	Data Raw: 6f 6e 22 20 3a 20 22 72 69 67 68 74 22 2c 0a 20 20 20 20 20 20 22 63 6f 72 6e 65 72 4d 61 72 67 69 6e 22 20 3a 20 22 30 2e 30 22 2c 0a 20 20 20 20 20 20 22 76 65 72 74 69 63 61 6c 4f 66 66 73 65 74 22 20 3a 20 22 30 2e 30 22 2c 0a 20 20 20 20 20 20 22 7a 49 6e 64 65 78 22 20 3a 20 22 22 2c 0a 20 20 20 20 20 20 22 62 61 63 6b 67 72 6f 75 6e 64 48 6f 76 65 72 43 6f 6c 6f 72 22 20 3a 20 22 23 36 66 35 64 64 34 22 2c 0a 20 20 20 20 20 20 22 74 65 78 74 48 6f 76 65 72 43 6f 6c 6f 72 22 20 3a 20 22 23 66 66 66 66 66 66 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 76 65 72 73 69 6f 6e 65 64 52 65 73 6f 75 72 63 65 73 55 72 6c 22 20 3a 20 22 2f 2a 2a 2a 2a 4f 4e 50 52 45 4d 5f 55 52 4c 5f 50 52 45 46 49 58 2a 2a 2a 2a 2f 2f 6c 69 76 65 41 70 70 2f 31 2e 31 35 2e 33 Data Ascii: on" : "right", "cornerMargin" : "0.0", "verticalOffset" : "0.0", "zIndex" : "", "backgroundHoverColor" : "#6f5dd4", "textHoverColor" : "#ffffff" }, "versionedResourcesUrl" : "/**ONPREM_URL_PREFIX**//liveApp/1.15.3
2024-03-28 13:19:27 UTC	1378	IN	Data Raw: 6e 74 69 66 69 65 72 5c 22 3a 5c 22 66 61 6c 73 65 5c 22 7d 2c 20 7b 5c 22 69 64 5c 22 3a 5c 22 35 35 34 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 57 46 41 20 43 6f 6f 6b 69 65 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 54 65 78 74 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 75 74 61 67 5f 64 61 74 61 2e 6d 70 75 69 64 5c 22 2c 5c 22 69 73 5f 69 64 65 6e 74 69 66 69 65 72 5c 22 3a 5c 22 66 61 6c 73 65 5c 22 7d 2c 20 7b 5c 22 69 64 5c 22 3a 5c 22 35 36 33 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 50 61 67 65 20 49 44 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 54 65 78 74 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c 5c 22 Data Ascii: ntifier\":\"false\"}, {\"id\":\"554\",\"unique_name\":\"WFA Cookie\",\"type\":\"Text\",\"source\":\"Var\",\"source_name\":\"utag_data.mpuid\",\"is_identifier\":\"false\"}, {\"id\":\"563\",\"unique_name\":\"Page ID\",\"type\":\"Text\",\"source\":\"Var\",\"
2024-03-28 13:19:27 UTC	1378	IN	Data Raw: 72 69 67 69 6e 5c 22 3a 5c 22 63 75 73 74 6f 6d 50 61 72 61 6d 5c 22 7d 5d 7d 5d 7d 22 2c 0a 20 20 20 20 20 20 22 64 65 76 69 63 65 74 79 70 65 73 22 20 3a 20 5b 20 22 64 65 73 6b 74 6f 70 22 2c 20 22 6d 6f 62 69 6c 65 22 2c 20 22 74 61 62 6c 65 74 22 20 5d 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 75 72 6c 52 75 6c 65 73 22 20 3a 20 7b 0a 20 20 20 20 20 20 22 65 78 63 6c 75 73 69 6f 6e 55 72 6c 22 20 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 72 75 6c 65 22 20 3a 20 22 22 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 22 69 6e 63 6c 75 73 69 6f 6e 55 72 6c 22 20 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 72 75 6c 65 22 20 3a 20 22 68 74 74 70 73 3a 2f 2f 77 65 6c 6c 73 6f 66 66 69 63 65 2e 63 65 6f 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 70 6f 72 74 61 6c Data Ascii: rigin\":\"customParam\"}]}]}", "devicetypes" : [ "desktop", "mobile", "tablet" ] }, "urlRules" : { "exclusionUrl" : { "rule" : "" }, "inclusionUrl" : { "rule" : "https://wellsoffice.ceo.wellsfargo.com/portal
2024-03-28 13:19:27 UTC	1378	IN	Data Raw: 20 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 65 6e 22 20 3a 20 22 46 65 65 64 62 61 63 6b 22 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 22 74 79 70 65 22 20 3a 20 22 76 65 72 74 69 63 61 6c 22 2c 0a 20 20 20 20 20 20 22 74 65 78 74 22 20 3a 20 22 46 65 65 64 62 61 63 6b 22 2c 0a 20 20 20 20 20 20 22 74 65 78 74 43 6f 6c 6f 72 22 20 3a 20 22 23 66 66 66 66 66 66 22 2c 0a 20 20 20 20 20 20 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 20 3a 20 22 23 36 66 35 64 64 34 22 2c 0a 20 20 20 20 20 20 22 62 75 74 74 6f 6e 55 72 6c 22 20 3a 20 22 22 2c 0a 20 20 20 20 20 20 22 70 6f 73 69 74 69 6f 6e 22 20 3a 20 22 72 69 67 68 74 22 2c 0a 20 20 20 20 20 20 22 63 6f 72 6e 65 72 4d 61 72 67 69 6e 22 20 3a 20 22 30 2e 30 22 2c 0a 20 20 20 20 20 20 22 76 65 72 74 Data Ascii: : { "en" : "Feedback" }, "type" : "vertical", "text" : "Feedback", "textColor" : "#ffffff", "backgroundColor" : "#6f5dd4", "buttonUrl" : "", "position" : "right", "cornerMargin" : "0.0", "vert
2024-03-28 13:19:27 UTC	1378	IN	Data Raw: 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 75 74 61 67 5f 64 61 74 61 2e 61 70 70 5f 69 64 5c 22 2c 5c 22 69 73 5f 69 64 65 6e 74 69 66 69 65 72 5c 22 3a 5c 22 66 61 6c 73 65 5c 22 7d 2c 20 7b 5c 22 69 64 5c 22 3a 5c 22 35 35 33 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 53 65 67 6d 65 6e 74 20 49 44 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 54 65 78 74 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 75 74 61 67 5f 64 61 74 61 2e 63 75 73 74 6f 6d 65 72 5f 74 79 70 65 5c 22 2c 5c 22 69 73 5f 69 64 65 6e 74 69 66 69 65 72 5c 22 3a 5c 22 66 61 6c 73 65 5c 22 7d 2c 20 7b 5c 22 69 64 5c 22 3a 5c 22 35 35 34 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 Data Ascii: urce_name\":\"utag_data.app_id\",\"is_identifier\":\"false\"}, {\"id\":\"553\",\"unique_name\":\"Segment ID\",\"type\":\"Text\",\"source\":\"Var\",\"source_name\":\"utag_data.customer_type\",\"is_identifier\":\"false\"}, {\"id\":\"554\",\"unique_name\":\"
2024-03-28 13:19:27 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 22 72 75 6c 65 22 20 3a 20 22 22 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 22 69 6e 63 6c 75 73 69 6f 6e 55 72 6c 22 20 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 72 75 6c 65 22 20 3a 20 22 68 74 74 70 73 3a 2f 2f 77 65 6c 6c 73 6f 66 66 69 63 65 73 69 74 2e 63 65 6f 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 70 6f 72 74 61 6c 2f 73 69 67 6e 6f 6e 2f 69 6e 64 65 78 2e 6a 73 70 3b 68 74 74 70 73 3a 2f 2f 77 65 6c 6c 73 6f 66 66 69 63 65 73 69 74 2e 63 65 6f 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 63 65 6f 73 69 67 6e 6f 6e 2f 6c 6f 67 69 6e 2e 68 74 6d 6c 3b 68 74 74 70 73 3a 2f 2f 77 65 6c 6c 73 6f 66 66 69 63 65 75 61 74 2e 63 65 6f 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 70 6f 72 74 61 6c 2f 73 69 67 6e 6f 6e Data Ascii: "rule" : "" }, "inclusionUrl" : { "rule" : "https://wellsofficesit.ceo.wellsfargo.com/portal/signon/index.jsp;https://wellsofficesit.ceo.wellsfargo.com/ceosignon/login.html;https://wellsofficeuat.ceo.wellsfargo.com/portal/signon
2024-03-28 13:19:27 UTC	1378	IN	Data Raw: 20 20 20 22 61 76 61 69 6c 61 62 6c 65 4c 61 6e 67 75 61 67 65 73 22 20 3a 20 5b 20 22 65 6e 22 20 5d 2c 0a 20 20 20 20 22 74 72 69 67 67 65 72 41 76 61 69 6c 61 62 6c 65 4c 61 6e 67 75 61 67 65 73 22 20 3a 20 5b 20 22 65 6e 22 20 5d 2c 0a 20 20 20 20 22 62 75 74 74 6f 6e 44 61 74 61 22 20 3a 20 7b 0a 20 20 20 20 20 20 22 74 65 78 74 4c 6f 63 61 6c 69 7a 61 74 69 6f 6e 22 20 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 65 6e 22 20 3a 20 22 46 65 65 64 62 61 63 6b 22 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 22 74 79 70 65 22 20 3a 20 22 76 65 72 74 69 63 61 6c 22 2c 0a 20 20 20 20 20 20 22 74 65 78 74 22 20 3a 20 22 46 65 65 64 62 61 63 6b 22 2c 0a 20 20 20 20 20 20 22 74 65 78 74 43 6f 6c 6f 72 22 20 3a 20 22 23 66 66 66 66 66 66 22 2c 0a 20 20 20 20 20 Data Ascii: "availableLanguages" : [ "en" ], "triggerAvailableLanguages" : [ "en" ], "buttonData" : { "textLocalization" : { "en" : "Feedback" }, "type" : "vertical", "text" : "Feedback", "textColor" : "#ffffff",
2024-03-28 13:19:27 UTC	1378	IN	Data Raw: 74 69 66 69 65 72 5c 22 3a 5c 22 66 61 6c 73 65 5c 22 7d 2c 20 7b 5c 22 69 64 5c 22 3a 5c 22 36 30 30 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 41 70 70 20 56 65 72 73 69 6f 6e 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 54 65 78 74 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 55 52 4c 5c 22 2c 5c 22 73 6f 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 61 70 70 76 65 72 73 69 6f 6e 5c 22 2c 5c 22 69 73 5f 69 64 65 6e 74 69 66 69 65 72 5c 22 3a 5c 22 66 61 6c 73 65 5c 22 7d 2c 20 7b 5c 22 69 64 5c 22 3a 5c 22 36 30 31 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 41 70 70 6c 69 63 61 74 69 6f 6e 20 49 64 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 54 65 78 74 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c Data Ascii: tifier\":\"false\"}, {\"id\":\"600\",\"unique_name\":\"App Version\",\"type\":\"Text\",\"source\":\"URL\",\"source_name\":\"appversion\",\"is_identifier\":\"false\"}, {\"id\":\"601\",\"unique_name\":\"Application Id\",\"type\":\"Text\",\"source\":\"Var\",
2024-03-28 13:19:27 UTC	1378	IN	Data Raw: 47 72 6f 75 70 5c 22 2c 5c 22 63 6f 6e 6a 75 6e 63 74 69 6f 6e 5c 22 3a 5c 22 4f 52 5c 22 2c 5c 22 63 68 69 6c 64 72 65 6e 43 72 69 74 65 72 69 61 73 5c 22 3a 5b 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 63 72 69 74 65 72 69 61 5c 22 2c 5c 22 76 61 6c 75 65 5c 22 3a 5c 22 76 61 6e 74 61 67 65 2d 68 6f 6d 65 5c 22 2c 5c 22 66 6f 72 6d 49 64 5c 22 3a 34 33 37 33 2c 5c 22 66 69 65 6c 64 49 64 5c 22 3a 35 36 33 2c 5c 22 66 6f 72 6d 4e 61 6d 65 5c 22 3a 5c 22 54 45 53 54 20 2d 20 56 61 6e 74 61 67 65 20 2d 20 41 75 74 68 65 6e 74 69 63 61 74 65 64 20 2d 20 48 6f 6d 65 5c 22 2c 5c 22 75 6e 69 71 75 65 49 64 5c 22 3a 5c 22 63 75 73 74 6f 6d 50 61 72 61 6d 35 36 33 5c 22 2c 5c 22 63 6f 6e 64 69 74 69 6f 6e 5c 22 3a 5c 22 65 71 75 61 6c 73 5c 22 2c 5c 22 66 69 65 6c 64 Data Ascii: Group\",\"conjunction\":\"OR\",\"childrenCriterias\":[{\"type\":\"criteria\",\"value\":\"vantage-home\",\"formId\":4373,\"fieldId\":563,\"formName\":\"TEST - Vantage - Authenticated - Home\",\"uniqueId\":\"customParam563\",\"condition\":\"equals\",\"field

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	50238	13.32.208.16	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:27 UTC	397	OUT	GET /WellsFargo/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20vYWJvdXQv HTTP/1.1 Host: data.schemaapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:27 UTC	525	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 0 Connection: close Date: Thu, 28 Mar 2024 13:19:27 GMT Server: AmazonS3 access-control-expose-headers: x-amz-meta-source, x-amz-meta-accountid, x-amz-meta-url Strict-Transport-Security: max-age=31536000; includeSubDomains; Cache-Control: max-age=14400 X-Cache: Error from cloudfront Via: 1.1 b26814b9dbe71dc1916d211eeeec7ffc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C1 X-Amz-Cf-Id: 8bBrfAzSjzd2sUvORVTcb1OyzuwCiobwBKEoRnXE9AFNnwU6-JqGow==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	50239	172.253.122.113	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:27 UTC	1001	OUT	GET /pixel?google_gm=AMnCDoqLmwev_v-dJR_RIm72duWb2y5tEqtm9i_436YxdwOxcVKacGuMPfkTZpOD_GyNbJGCvB4JpMmyKKgrCnYTxDxmc2WCHepVzjCY_rGduhqxSXWQvxA HTTP/1.1 Host: fcmatch.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:27 UTC	596	IN	HTTP/1.1 302 Found Location: https://fcmatch.youtube.com/pixel?google_gm=AMnCDoqLmwev_v-dJR_RIm72duWb2y5tEqtm9i_436YxdwOxcVKacGuMPfkTZpOD_GyNbJGCvB4JpMmyKKgrCnYTxDxmc2WCHepVzjCY_rGduhqxSXWQvxA Date: Thu, 28 Mar 2024 13:19:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 360 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:27 UTC	360	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 66 63 6d 61 74 63 68 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 67 6d 3d 41 4d 6e 43 44 6f 71 4c 6d 77 65 76 5f 76 2d 64 4a 52 5f 52 49 6d 37 32 64 75 57 62 32 79 35 74 45 71 74 6d 39 69 5f 34 33 36 59 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://fcmatch.youtube.com/pixel?google_gm=AMnCDoqLmwev_v-dJR_RIm72duWb2y5tEqtm9i_436Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	50240	63.140.39.65	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:27 UTC	758	OUT	POST /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=f9ab8551-492e-489e-9017-87923a423d5d HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 352 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:27 UTC	352	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 7b 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 66 65 74 63 68 22 3a 5b 22 45 43 49 44 22 5d 7d 7d 2c 22 6d 65 74 61 22 3a 7b 22 73 74 61 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 22 2c 22 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 6b 6e 64 63 74 72 5f 31 42 41 41 31 35 46 33 35 34 46 37 33 31 45 36 30 41 34 43 39 38 41 34 5f 41 64 6f 62 65 4f 72 67 5f 69 64 65 6e 74 69 74 79 22 2c 22 76 61 6c 75 65 22 3a 22 43 69 59 7a 4d 7a 6b 78 4f 44 59 34 4d 7a 41 79 4d 54 49 31 4e 44 51 33 4d 6a 49 32 4e 44 45 32 4f 44 55 79 4e 7a 67 79 4e 54 6b 35 4f 54 49 34 4e 7a 49 33 4d 31 49 51 43 4b 4b 6b 32 36 6e 6f 4d 52 67 42 4b 67 Data Ascii: {"query":{"identity":{"fetch":["ECID"]}},"meta":{"state":{"domain":"wellsfargo.com","cookiesEnabled":true,"entries":[{"key":"kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity","value":"CiYzMzkxODY4MzAyMTI1NDQ3MjI2NDE2ODUyNzgyNTk5OTI4NzI3M1IQCKKk26noMRgBKg
2024-03-28 13:19:27 UTC	635	IN	HTTP/1.1 200 OK x-request-id: f9ab8551-492e-489e-9017-87923a423d5d vary: Origin access-control-allow-origin: https://www.wellsfargo.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Thu, 28 Mar 2024 13:19:27 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-03-28 13:19:27 UTC	532	IN	Data Raw: 32 30 38 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 66 39 61 62 38 35 35 31 2d 34 39 32 65 2d 34 38 39 65 2d 39 30 31 37 2d 38 37 39 32 33 61 34 32 33 64 35 64 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 34 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 208{"requestId":"f9ab8551-492e-489e-9017-87923a423d5d","handle":[{"payload":[{"id":"33918683021254472264168527825999287273","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"34","ttlSeconds":1800},{"scope":"AA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	50245	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:27 UTC	1032	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=+4boTYi90yEn3KkYfEbYRcjnylQ/A9NermyVlD6n31NuzkFzgbxcqS2jm6xQzZPL6FWQIOJRF6VlLqteR0isEyKdCwB277R8Hg8m2PDdt8FQqBjWPd0IKd6uUz78NsxKGHntKLTXbQY+cRlSiTM3+BowUpmeHMaB6T3/5lZKGXpy; AWSALBTGCORS=LE7ypjLm6rLk3Rk4AAKEx4oj6a2gOu+wCtKtrT51LVqxztMKshc7DBoR3tSdEOysrF5L0jy0dPwWXMyIGOAA6rohZW8nT1ij121fdWLp/V3MG0FVIeLVS3RM/p9sO28KdVWEwhRO8KS4OOkLEE9BkL7wXbY/cJEJoln65Eep4Jny
2024-03-28 13:19:27 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:27 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=0lXMS2tRKzWlkhkor7DnkTgliyyj/q9iF6fK+5gDlKQQ9W4eUb0DACI1KbugyuPTb/5T96staNzWzx9JWS6zrzenmGVd6YGE29xyPLtdHAU+d59kDgxyhYhm74b8X6HE5MKPKIXxYnIJJd6lQ+2DI/sXH3l0pNRJrm/AFAbd/ozQ; Expires=Thu, 04 Apr 2024 13:19:27 GMT; Path=/ Set-Cookie: AWSALBTGCORS=0lXMS2tRKzWlkhkor7DnkTgliyyj/q9iF6fK+5gDlKQQ9W4eUb0DACI1KbugyuPTb/5T96staNzWzx9JWS6zrzenmGVd6YGE29xyPLtdHAU+d59kDgxyhYhm74b8X6HE5MKPKIXxYnIJJd6lQ+2DI/sXH3l0pNRJrm/AFAbd/ozQ; Expires=Thu, 04 Apr 2024 13:19:27 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:27 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	50244	3.208.238.164	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:27 UTC	715	OUT	GET /event?c_app_id=WWW&c_page_type=BROWSER&c_page_id=about&c_customer_type=&c_customer_status=n&c_product_code=&c_subproduct_code=&c_offer_id=&c_event_type=load&c_referrer=&d_cid=113287%011120240328061851126288949&c_sub_channel=&c_vendor_code=&c_offertype= HTTP/1.1 Host: wellsfargobankna.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; wellsfargobankna=33955380241426191774167127150413392378
2024-03-28 13:19:27 UTC	915	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:27 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: AwjSOJqfSI0= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v057-001237da7.edge-va6.demdex.com 6 ms set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:27 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: wellsfargobankna=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:27 GMT; Path=/; Domain=.wellsfargobankna.demdex.net; Secure; SameSite=None
2024-03-28 13:19:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	50246	146.75.29.230	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:27 UTC	714	OUT	GET /wdcusprem/57907/onsite/onsiteData.json HTTP/1.1 Host: resources.digital-cloud-prem.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "f911470fe0e560afcc355e2b7c2d14e0" If-Modified-Since: Wed, 27 Mar 2024 18:29:51 GMT
2024-03-28 13:19:28 UTC	375	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 28 Mar 2024 13:19:27 GMT Via: 1.1 varnish Cache-Control: max-age=0,must-revalidate ETag: "f911470fe0e560afcc355e2b7c2d14e0" Age: 25374 X-Served-By: cache-iad-kiad7000053-IAD X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1711631968.953230,VS0,VE1 Vary: Accept-Encoding Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	50248	146.75.29.230	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:28 UTC	403	OUT	GET /wdcusprem/57907/onsite/onsiteData.json HTTP/1.1 Host: resources.digital-cloud-prem.medallia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:28 UTC	754	IN	HTTP/1.1 200 OK Connection: close Content-Length: 40702 x-amz-id-2: az4so6EPRCgLdv6Jk4+RT/Pzt+z2fLw6x74xZAh3NN+pMyN5j2Kds01CG5HO/TvFaGe2dlaKga8= x-amz-request-id: 37QJYA2SM82YW2D2 Last-Modified: Wed, 27 Mar 2024 18:29:51 GMT ETag: "f911470fe0e560afcc355e2b7c2d14e0" x-amz-server-side-encryption: AES256 x-amz-version-id: ix_fLLitnc.RHcWy1daejYWk1SJmMgCk Content-Type: application/json Server: AmazonS3 Access-Control-Allow-Origin: * Cache-Control: max-age=0,must-revalidate Accept-Ranges: bytes Date: Thu, 28 Mar 2024 13:19:28 GMT Via: 1.1 varnish Age: 25374 X-Served-By: cache-iad-kiad7000067-IAD X-Cache: HIT X-Cache-Hits: 3 X-Timer: S1711631968.181388,VS0,VE0 Vary: Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-03-28 13:19:28 UTC	1378	IN	Data Raw: 7b 0a 20 20 22 73 62 74 53 65 72 76 65 72 44 6f 6d 61 69 6e 22 20 3a 20 22 68 74 74 70 73 3a 2f 2f 75 62 74 2d 6c 62 2e 64 69 67 69 74 61 6c 2d 63 6c 6f 75 64 2d 70 72 65 6d 2e 6d 65 64 61 6c 6c 69 61 2e 63 6f 6d 22 2c 0a 20 20 22 73 62 74 45 6e 76 50 72 65 66 69 78 22 20 3a 20 22 77 64 63 75 73 70 72 65 6d 5f 22 2c 0a 20 20 22 65 6e 64 55 73 65 72 49 64 65 6e 74 69 66 69 65 72 22 20 3a 20 7b 20 7d 2c 0a 20 20 22 66 6f 72 6d 4e 6f 64 65 73 22 20 3a 20 5b 20 7b 0a 20 20 20 20 22 66 6f 72 6d 49 64 22 20 3a 20 22 34 34 33 35 22 2c 0a 20 20 20 20 22 69 73 43 75 73 74 6f 6d 48 74 6d 6c 45 6e 61 62 6c 65 64 22 20 3a 20 22 66 61 6c 73 65 22 2c 0a 20 20 20 20 22 75 72 6c 56 65 72 73 69 6f 6e 22 20 3a 20 22 56 32 22 2c 0a 20 20 20 20 22 66 6f 72 6d 48 74 6d 6c 55 Data Ascii: { "sbtServerDomain" : "https://ubt-lb.digital-cloud-prem.medallia.com", "sbtEnvPrefix" : "wdcusprem_", "endUserIdentifier" : { }, "formNodes" : [ { "formId" : "4435", "isCustomHtmlEnabled" : "false", "urlVersion" : "V2", "formHtmlU
2024-03-28 13:19:28 UTC	1378	IN	Data Raw: 6f 6e 22 20 3a 20 22 72 69 67 68 74 22 2c 0a 20 20 20 20 20 20 22 63 6f 72 6e 65 72 4d 61 72 67 69 6e 22 20 3a 20 22 30 2e 30 22 2c 0a 20 20 20 20 20 20 22 76 65 72 74 69 63 61 6c 4f 66 66 73 65 74 22 20 3a 20 22 30 2e 30 22 2c 0a 20 20 20 20 20 20 22 7a 49 6e 64 65 78 22 20 3a 20 22 22 2c 0a 20 20 20 20 20 20 22 62 61 63 6b 67 72 6f 75 6e 64 48 6f 76 65 72 43 6f 6c 6f 72 22 20 3a 20 22 23 36 66 35 64 64 34 22 2c 0a 20 20 20 20 20 20 22 74 65 78 74 48 6f 76 65 72 43 6f 6c 6f 72 22 20 3a 20 22 23 66 66 66 66 66 66 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 76 65 72 73 69 6f 6e 65 64 52 65 73 6f 75 72 63 65 73 55 72 6c 22 20 3a 20 22 2f 2a 2a 2a 2a 4f 4e 50 52 45 4d 5f 55 52 4c 5f 50 52 45 46 49 58 2a 2a 2a 2a 2f 2f 6c 69 76 65 41 70 70 2f 31 2e 31 35 2e 33 Data Ascii: on" : "right", "cornerMargin" : "0.0", "verticalOffset" : "0.0", "zIndex" : "", "backgroundHoverColor" : "#6f5dd4", "textHoverColor" : "#ffffff" }, "versionedResourcesUrl" : "/**ONPREM_URL_PREFIX**//liveApp/1.15.3
2024-03-28 13:19:28 UTC	1378	IN	Data Raw: 6e 74 69 66 69 65 72 5c 22 3a 5c 22 66 61 6c 73 65 5c 22 7d 2c 20 7b 5c 22 69 64 5c 22 3a 5c 22 35 35 34 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 57 46 41 20 43 6f 6f 6b 69 65 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 54 65 78 74 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 75 74 61 67 5f 64 61 74 61 2e 6d 70 75 69 64 5c 22 2c 5c 22 69 73 5f 69 64 65 6e 74 69 66 69 65 72 5c 22 3a 5c 22 66 61 6c 73 65 5c 22 7d 2c 20 7b 5c 22 69 64 5c 22 3a 5c 22 35 36 33 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 50 61 67 65 20 49 44 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 54 65 78 74 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c 5c 22 Data Ascii: ntifier\":\"false\"}, {\"id\":\"554\",\"unique_name\":\"WFA Cookie\",\"type\":\"Text\",\"source\":\"Var\",\"source_name\":\"utag_data.mpuid\",\"is_identifier\":\"false\"}, {\"id\":\"563\",\"unique_name\":\"Page ID\",\"type\":\"Text\",\"source\":\"Var\",\"
2024-03-28 13:19:28 UTC	1378	IN	Data Raw: 72 69 67 69 6e 5c 22 3a 5c 22 63 75 73 74 6f 6d 50 61 72 61 6d 5c 22 7d 5d 7d 5d 7d 22 2c 0a 20 20 20 20 20 20 22 64 65 76 69 63 65 74 79 70 65 73 22 20 3a 20 5b 20 22 64 65 73 6b 74 6f 70 22 2c 20 22 6d 6f 62 69 6c 65 22 2c 20 22 74 61 62 6c 65 74 22 20 5d 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 75 72 6c 52 75 6c 65 73 22 20 3a 20 7b 0a 20 20 20 20 20 20 22 65 78 63 6c 75 73 69 6f 6e 55 72 6c 22 20 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 72 75 6c 65 22 20 3a 20 22 22 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 22 69 6e 63 6c 75 73 69 6f 6e 55 72 6c 22 20 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 72 75 6c 65 22 20 3a 20 22 68 74 74 70 73 3a 2f 2f 77 65 6c 6c 73 6f 66 66 69 63 65 2e 63 65 6f 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 70 6f 72 74 61 6c Data Ascii: rigin\":\"customParam\"}]}]}", "devicetypes" : [ "desktop", "mobile", "tablet" ] }, "urlRules" : { "exclusionUrl" : { "rule" : "" }, "inclusionUrl" : { "rule" : "https://wellsoffice.ceo.wellsfargo.com/portal
2024-03-28 13:19:28 UTC	1378	IN	Data Raw: 20 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 65 6e 22 20 3a 20 22 46 65 65 64 62 61 63 6b 22 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 22 74 79 70 65 22 20 3a 20 22 76 65 72 74 69 63 61 6c 22 2c 0a 20 20 20 20 20 20 22 74 65 78 74 22 20 3a 20 22 46 65 65 64 62 61 63 6b 22 2c 0a 20 20 20 20 20 20 22 74 65 78 74 43 6f 6c 6f 72 22 20 3a 20 22 23 66 66 66 66 66 66 22 2c 0a 20 20 20 20 20 20 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 20 3a 20 22 23 36 66 35 64 64 34 22 2c 0a 20 20 20 20 20 20 22 62 75 74 74 6f 6e 55 72 6c 22 20 3a 20 22 22 2c 0a 20 20 20 20 20 20 22 70 6f 73 69 74 69 6f 6e 22 20 3a 20 22 72 69 67 68 74 22 2c 0a 20 20 20 20 20 20 22 63 6f 72 6e 65 72 4d 61 72 67 69 6e 22 20 3a 20 22 30 2e 30 22 2c 0a 20 20 20 20 20 20 22 76 65 72 74 Data Ascii: : { "en" : "Feedback" }, "type" : "vertical", "text" : "Feedback", "textColor" : "#ffffff", "backgroundColor" : "#6f5dd4", "buttonUrl" : "", "position" : "right", "cornerMargin" : "0.0", "vert
2024-03-28 13:19:28 UTC	1378	IN	Data Raw: 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 75 74 61 67 5f 64 61 74 61 2e 61 70 70 5f 69 64 5c 22 2c 5c 22 69 73 5f 69 64 65 6e 74 69 66 69 65 72 5c 22 3a 5c 22 66 61 6c 73 65 5c 22 7d 2c 20 7b 5c 22 69 64 5c 22 3a 5c 22 35 35 33 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 53 65 67 6d 65 6e 74 20 49 44 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 54 65 78 74 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c 5c 22 73 6f 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 75 74 61 67 5f 64 61 74 61 2e 63 75 73 74 6f 6d 65 72 5f 74 79 70 65 5c 22 2c 5c 22 69 73 5f 69 64 65 6e 74 69 66 69 65 72 5c 22 3a 5c 22 66 61 6c 73 65 5c 22 7d 2c 20 7b 5c 22 69 64 5c 22 3a 5c 22 35 35 34 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 Data Ascii: urce_name\":\"utag_data.app_id\",\"is_identifier\":\"false\"}, {\"id\":\"553\",\"unique_name\":\"Segment ID\",\"type\":\"Text\",\"source\":\"Var\",\"source_name\":\"utag_data.customer_type\",\"is_identifier\":\"false\"}, {\"id\":\"554\",\"unique_name\":\"
2024-03-28 13:19:28 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 22 72 75 6c 65 22 20 3a 20 22 22 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 22 69 6e 63 6c 75 73 69 6f 6e 55 72 6c 22 20 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 72 75 6c 65 22 20 3a 20 22 68 74 74 70 73 3a 2f 2f 77 65 6c 6c 73 6f 66 66 69 63 65 73 69 74 2e 63 65 6f 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 70 6f 72 74 61 6c 2f 73 69 67 6e 6f 6e 2f 69 6e 64 65 78 2e 6a 73 70 3b 68 74 74 70 73 3a 2f 2f 77 65 6c 6c 73 6f 66 66 69 63 65 73 69 74 2e 63 65 6f 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 63 65 6f 73 69 67 6e 6f 6e 2f 6c 6f 67 69 6e 2e 68 74 6d 6c 3b 68 74 74 70 73 3a 2f 2f 77 65 6c 6c 73 6f 66 66 69 63 65 75 61 74 2e 63 65 6f 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 70 6f 72 74 61 6c 2f 73 69 67 6e 6f 6e Data Ascii: "rule" : "" }, "inclusionUrl" : { "rule" : "https://wellsofficesit.ceo.wellsfargo.com/portal/signon/index.jsp;https://wellsofficesit.ceo.wellsfargo.com/ceosignon/login.html;https://wellsofficeuat.ceo.wellsfargo.com/portal/signon
2024-03-28 13:19:28 UTC	1378	IN	Data Raw: 20 20 20 22 61 76 61 69 6c 61 62 6c 65 4c 61 6e 67 75 61 67 65 73 22 20 3a 20 5b 20 22 65 6e 22 20 5d 2c 0a 20 20 20 20 22 74 72 69 67 67 65 72 41 76 61 69 6c 61 62 6c 65 4c 61 6e 67 75 61 67 65 73 22 20 3a 20 5b 20 22 65 6e 22 20 5d 2c 0a 20 20 20 20 22 62 75 74 74 6f 6e 44 61 74 61 22 20 3a 20 7b 0a 20 20 20 20 20 20 22 74 65 78 74 4c 6f 63 61 6c 69 7a 61 74 69 6f 6e 22 20 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 65 6e 22 20 3a 20 22 46 65 65 64 62 61 63 6b 22 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 22 74 79 70 65 22 20 3a 20 22 76 65 72 74 69 63 61 6c 22 2c 0a 20 20 20 20 20 20 22 74 65 78 74 22 20 3a 20 22 46 65 65 64 62 61 63 6b 22 2c 0a 20 20 20 20 20 20 22 74 65 78 74 43 6f 6c 6f 72 22 20 3a 20 22 23 66 66 66 66 66 66 22 2c 0a 20 20 20 20 20 Data Ascii: "availableLanguages" : [ "en" ], "triggerAvailableLanguages" : [ "en" ], "buttonData" : { "textLocalization" : { "en" : "Feedback" }, "type" : "vertical", "text" : "Feedback", "textColor" : "#ffffff",
2024-03-28 13:19:28 UTC	1378	IN	Data Raw: 74 69 66 69 65 72 5c 22 3a 5c 22 66 61 6c 73 65 5c 22 7d 2c 20 7b 5c 22 69 64 5c 22 3a 5c 22 36 30 30 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 41 70 70 20 56 65 72 73 69 6f 6e 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 54 65 78 74 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 55 52 4c 5c 22 2c 5c 22 73 6f 75 72 63 65 5f 6e 61 6d 65 5c 22 3a 5c 22 61 70 70 76 65 72 73 69 6f 6e 5c 22 2c 5c 22 69 73 5f 69 64 65 6e 74 69 66 69 65 72 5c 22 3a 5c 22 66 61 6c 73 65 5c 22 7d 2c 20 7b 5c 22 69 64 5c 22 3a 5c 22 36 30 31 5c 22 2c 5c 22 75 6e 69 71 75 65 5f 6e 61 6d 65 5c 22 3a 5c 22 41 70 70 6c 69 63 61 74 69 6f 6e 20 49 64 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 5c 22 54 65 78 74 5c 22 2c 5c 22 73 6f 75 72 63 65 5c 22 3a 5c 22 56 61 72 5c 22 2c Data Ascii: tifier\":\"false\"}, {\"id\":\"600\",\"unique_name\":\"App Version\",\"type\":\"Text\",\"source\":\"URL\",\"source_name\":\"appversion\",\"is_identifier\":\"false\"}, {\"id\":\"601\",\"unique_name\":\"Application Id\",\"type\":\"Text\",\"source\":\"Var\",
2024-03-28 13:19:28 UTC	1378	IN	Data Raw: 47 72 6f 75 70 5c 22 2c 5c 22 63 6f 6e 6a 75 6e 63 74 69 6f 6e 5c 22 3a 5c 22 4f 52 5c 22 2c 5c 22 63 68 69 6c 64 72 65 6e 43 72 69 74 65 72 69 61 73 5c 22 3a 5b 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 63 72 69 74 65 72 69 61 5c 22 2c 5c 22 76 61 6c 75 65 5c 22 3a 5c 22 76 61 6e 74 61 67 65 2d 68 6f 6d 65 5c 22 2c 5c 22 66 6f 72 6d 49 64 5c 22 3a 34 33 37 33 2c 5c 22 66 69 65 6c 64 49 64 5c 22 3a 35 36 33 2c 5c 22 66 6f 72 6d 4e 61 6d 65 5c 22 3a 5c 22 54 45 53 54 20 2d 20 56 61 6e 74 61 67 65 20 2d 20 41 75 74 68 65 6e 74 69 63 61 74 65 64 20 2d 20 48 6f 6d 65 5c 22 2c 5c 22 75 6e 69 71 75 65 49 64 5c 22 3a 5c 22 63 75 73 74 6f 6d 50 61 72 61 6d 35 36 33 5c 22 2c 5c 22 63 6f 6e 64 69 74 69 6f 6e 5c 22 3a 5c 22 65 71 75 61 6c 73 5c 22 2c 5c 22 66 69 65 6c 64 Data Ascii: Group\",\"conjunction\":\"OR\",\"childrenCriterias\":[{\"type\":\"criteria\",\"value\":\"vantage-home\",\"formId\":4373,\"fieldId\":563,\"formName\":\"TEST - Vantage - Authenticated - Home\",\"uniqueId\":\"customParam563\",\"condition\":\"equals\",\"field

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	50249	35.241.45.82	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:28 UTC	666	OUT	POST /v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track HTTP/1.1 Host: udc-neb.kampyle.com Connection: keep-alive Content-Length: 2018 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:28 UTC	2018	OUT	Data Raw: 64 61 74 61 3d 25 37 42 25 32 32 65 76 65 6e 74 73 25 32 32 25 33 41 25 32 30 25 35 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 42 25 32 32 73 65 73 73 69 6f 6e 5f 73 63 72 65 65 6e 5f 73 69 7a 65 25 32 32 25 33 41 25 32 30 25 32 32 31 32 38 30 78 31 30 32 34 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 64 75 61 25 32 32 25 33 41 25 32 30 25 32 32 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 25 32 30 28 57 69 6e 64 6f 77 73 25 32 30 4e 54 25 32 30 31 30 2e 30 25 33 42 25 32 30 57 69 6e 36 34 25 33 42 25 32 30 78 36 34 29 25 32 30 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 25 32 30 28 4b 48 54 4d 4c 25 32 43 25 32 30 6c 69 6b 65 25 32 30 47 65 63 6b 6f 29 25 32 30 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 25 32 30 53 Data Ascii: data=%7B%22events%22%3A%20%5B%0A%20%20%20%20%7B%22session_screen_size%22%3A%20%221280x1024%22%2C%22session_dua%22%3A%20%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20S
2024-03-28 13:19:28 UTC	553	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:28 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.wellsfargo.com Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept Access-Control-Max-Age: 1800 X-ME: prod-instance-gatewayservice-green-5p9s X-Application-Context: application:9090 Content-Type: text/plain;charset=ISO-8859-1 Content-Length: 59 Server: Jetty(9.2.11.v20150529) Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-28 13:19:28 UTC	59	IN	Data Raw: 7b 22 65 76 65 6e 74 73 5f 63 6f 75 6e 74 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 22 35 22 2c 22 72 65 73 75 6c 74 73 22 3a 7b 7d 2c 22 73 74 61 74 75 73 22 3a 74 72 75 65 7d Data Ascii: {"events_count":1,"version":"5","results":{},"status":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	50250	35.241.45.82	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:28 UTC	2286	OUT	GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=eyJldmVudHMiOiBbCiAgICB7InNlc3Npb25fc2NyZWVuX3NpemUiOiAiMTI4MHgxMDI0Iiwic2Vzc2lvbl9kdWEiOiAiTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2Iiwic2Vzc2lvbl9wbGF0Zm9ybSI6ICJXaW4zMiIsInBhZ2VfdGl0bGUiOiAiQVRNIGFuZCBCYW5rIExvY2F0aW9ucyAtIEZpbmQgV2VsbHMgRmFyZ28gQmFuayBhbmQgQVRNIExvY2F0aW9ucyIsInBhZ2VfdXJsIjogImh0dHBzOi8vd3d3LndlbGxzZmFyZ28uY29tL2xvY2F0b3IvIiwidHJhY2tlcl90eXBlIjogImphdmFzY3JpcHQiLCJ0cmFja2VyX3ZlcnNpb24iOiAiMi4yLjIzIiwiZXZlbnRfbmFtZSI6ICJuZWJ1bGFfcGFnZV92aWV3IiwiZXZlbnRfdGltZXN0YW1wX2Vwb2NoIjogIjE3MTE2MzE5NjcwODAiLCJldmVudF90aW1lem9uZV9vZmZzZXQiOiAxLCJ1c2VyX2lkIjogIjE4ZTg1MzcyMGUxYTktMDk3NzFhODk2YmIxNmMtMjYwMzFlNTEtMTQwMDAwLTE4ZTg1MzcyMGUzMmY4IiwiZW52aXJvbWVudCI6ICJkaWdpdGFsLWNsb3VkLXVzLXByZW0iLCJhY2NvdW50SWQiOiA1NzkwNSwidXJsIjogImh0dHBzOi8vd3d3LndlbGxzZmFyZ28uY29tL2xvY2F0b3IvIiwid2Vic2l0ZUlkIjogNTc5MDcsImZvcm1JZCI6IG51bGwsImZvcm1UcmlnZ2VyVHlwZSI6IG51bGwsImthbXB5bGVfZGF0YSI6IHsibWRfaXNTdXJ2ZXlTdWJtaXR0ZWRJblNlc3Npb24iOiAiIiwiTEFTVF9JTlZJVEFUSU9OX1ZJRVciOiAiIiwiREVDTElORURfREFURSI6ICIiLCJrYW1weWxlSW52aXRlUHJlc2VudGVkIjogIiIsImthbXB5bGVfdXNlcmlkIjogIjQzOGQtMGE1Mi1mNDY0LTgxYzUtZTI4ZS1lOTBhLWNmNzktMTM1NSIsImthbXB5bGVVc2VyU2Vzc2lvbiI6ICIxNzExNjMxOTY3MDcyIiwia2FtcHlsZVVzZXJQZXJjZW50aWxlIjogIiIsIlNVQk1JVFRFRF9EQVRFIjogIiJ9LCJjb29raWVfc2l6ZSI6IDMwMDUsImthbXB5bGVfdmVyc2lvbiI6ICIyLjUzLjEiLCJvbnNpdGVfdmVyc2lvbiI6ICIyLjUzLjEiLCJoaXN0b3J5X2xlbmd0aCI6IDEsImV2ZW50X2xvY2FsX3RpbWVzdGFtcCI6IDE3MTE2MzE5NjcwODAsInBvc2l0aW9uIjogbnVsbCwiaXNVc2VySWRlbnRpZmllZCI6IGZhbHNlLCJwYWNrYWdlVmVyc2lvbiI6ICIyLjUzLjRfMjAyMzEyMTkyMjQxMDAifQpdfQ== HTTP/1.1 Host: udc-neb.kampyle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:28 UTC	522	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:28 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept Access-Control-Max-Age: 1800 X-ME: prod-instance-gatewayservice-green-f2pf X-Application-Context: application:9090 Content-Type: image/gif; charset=UTF-8 Content-Length: 0 Server: Jetty(9.2.11.v20150529) Via: 1.1 google Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	50252	172.253.63.139	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:28 UTC	813	OUT	GET /pixel?google_gm=AMnCDoqLmwev_v-dJR_RIm72duWb2y5tEqtm9i_436YxdwOxcVKacGuMPfkTZpOD_GyNbJGCvB4JpMmyKKgrCnYTxDxmc2WCHepVzjCY_rGduhqxSXWQvxA HTTP/1.1 Host: fcmatch.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:28 UTC	403	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 28 Mar 2024 13:19:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:28 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	50255	63.140.39.65	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:28 UTC	751	OUT	POST /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=91ec6c7c-8196-4547-aa93-aae7a0c3b322 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 4281 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:28 UTC	4281	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 71 75 65 72 79 22 3a 7b 22 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 3a 7b 22 73 63 68 65 6d 61 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 64 65 66 61 75 6c 74 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 68 74 6d 6c 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 6a 73 6f 6e 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c Data Ascii: {"events":[{"query":{"personalization":{"schemas":["https://ns.adobe.com/personalization/default-content-item","https://ns.adobe.com/personalization/html-content-item","https://ns.adobe.com/personalization/json-content-item","https://ns.adobe.com/personal
2024-03-28 13:19:28 UTC	635	IN	HTTP/1.1 200 OK x-request-id: 91ec6c7c-8196-4547-aa93-aae7a0c3b322 vary: Origin access-control-allow-origin: https://www.wellsfargo.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Thu, 28 Mar 2024 13:19:28 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-03-28 13:19:28 UTC	532	IN	Data Raw: 32 30 38 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 39 31 65 63 36 63 37 63 2d 38 31 39 36 2d 34 35 34 37 2d 61 61 39 33 2d 61 61 65 37 61 30 63 33 62 33 32 32 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 34 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 208{"requestId":"91ec6c7c-8196-4547-aa93-aae7a0c3b322","handle":[{"payload":[{"id":"33918683021254472264168527825999287273","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"34","ttlSeconds":1800},{"scope":"AA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	50254	142.251.16.157	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:28 UTC	1158	OUT	GET /pagead/viewthroughconversion/984436569/?random=1711631966857&cv=9&fst=1711631966857&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Fabout%2F&ref=null&tiba=About%20Wells%20Fargo&hn=www.google.com&async=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
2024-03-28 13:19:28 UTC	1070	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/984436569/?random=1711631966857&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Fabout%2F&ref=null&tiba=About%20Wells%20Fargo&async=1&is_vtc=1&cid=CAQSKQB7FLtqNwJNbOKCD8RWuHPVFqUby_9A18yf2qsu-oUA0HEXvCmokIXD&random=999063137&resp=GooglemKTybQhCsO Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	50258	63.140.38.132	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:28 UTC	459	OUT	GET /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=f9ab8551-492e-489e-9017-87923a423d5d HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:28 UTC	418	IN	HTTP/1.1 404 Not Found x-request-id: f9ab8551-492e-489e-9017-87923a423d5d vary: Origin date: Thu, 28 Mar 2024 13:19:28 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	50259	35.241.45.82	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:28 UTC	2474	OUT	GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=eyJldmVudHMiOiBbCiAgICB7InNlc3Npb25fc2NyZWVuX3NpemUiOiAiMTI4MHgxMDI0Iiwic2Vzc2lvbl9kdWEiOiAiTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2Iiwic2Vzc2lvbl9wbGF0Zm9ybSI6ICJXaW4zMiIsInBhZ2VfdGl0bGUiOiAiQWJvdXQgV2VsbHMgRmFyZ28iLCJwYWdlX3VybCI6ICJodHRwczovL3d3dy53ZWxsc2ZhcmdvLmNvbS9hYm91dC8iLCJ0cmFja2VyX3R5cGUiOiAiamF2YXNjcmlwdCIsInRyYWNrZXJfdmVyc2lvbiI6ICIyLjIuMjMiLCJldmVudF9uYW1lIjogIm5lYnVsYV9hZnRlcl9odHRwX2dldF9yZXF1ZXN0IiwiZXZlbnRfdGltZXN0YW1wX2Vwb2NoIjogIjE3MTE2MzE5NjczNTQiLCJldmVudF90aW1lem9uZV9vZmZzZXQiOiAxLCJ1c2VyX2lkIjogIjE4ZTg1MzcyMGUxYTktMDk3NzFhODk2YmIxNmMtMjYwMzFlNTEtMTQwMDAwLTE4ZTg1MzcyMGUzMmY4IiwiZW52aXJvbWVudCI6ICJkaWdpdGFsLWNsb3VkLXVzLXByZW0iLCJhY2NvdW50SWQiOiA1NzkwNSwidXJsIjogImh0dHBzOi8vd3d3LndlbGxzZmFyZ28uY29tL2Fib3V0LyIsIndlYnNpdGVJZCI6IDU3OTA3LCJmb3JtSWQiOiBudWxsLCJmb3JtVHJpZ2dlclR5cGUiOiBudWxsLCJrYW1weWxlX2RhdGEiOiB7Im1kX2lzU3VydmV5U3VibWl0dGVkSW5TZXNzaW9uIjogIiIsIkxBU1RfSU5WSVRBVElPTl9WSUVXIjogIiIsIkRFQ0xJTkVEX0RBVEUiOiAiIiwia2FtcHlsZUludml0ZVByZXNlbnRlZCI6ICIiLCJrYW1weWxlX3VzZXJpZCI6ICI0MzhkLTBhNTItZjQ2NC04MWM1LWUyOGUtZTkwYS1jZjc5LTEzNTUiLCJrYW1weWxlVXNlclNlc3Npb24iOiAiMTcxMTYzMTk2NzA3MiIsImthbXB5bGVVc2VyUGVyY2VudGlsZSI6ICIiLCJTVUJNSVRURURfREFURSI6ICIiLCJodHRwUmVxdWVzdERhdGEiOiB7InJlcXVlc3RVcmwiOiAiaHR0cHM6Ly9yZXNvdXJjZXMuZGlnaXRhbC1jbG91ZC1wcmVtLm1lZGFsbGlhLmNvbS93ZGN1c3ByZW0vNTc5MDcvb25zaXRlL29uc2l0ZURhdGEuanNvbiIsImF0dGVtcHROdW1iZXIiOiAwLCJyZXF1ZXN0VG90YWxUaW1lSW5TZWNvbmRzIjogMC40OH19LCJjb29raWVfc2l6ZSI6IDMwMDUsImthbXB5bGVfdmVyc2lvbiI6ICIyLjUzLjEiLCJvbnNpdGVfdmVyc2lvbiI6ICIyLjUzLjEiLCJoaXN0b3J5X2xlbmd0aCI6IDEsImV2ZW50X2xvY2FsX3RpbWVzdGFtcCI6IDE3MTE2MzE5NjczNTQsInBvc2l0aW9uIjogbnVsbCwiaXNVc2VySWRlbnRpZmllZCI6IGZhbHNlLCJwYWNrYWdlVmVyc2lvbiI6ICIyLjUzLjRfMjAyMzEyMTkyMjQxMDAifQpdfQ== HTTP/1.1 Host: udc-neb.kampyle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:28 UTC	522	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:28 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept Access-Control-Max-Age: 1800 X-ME: prod-instance-gatewayservice-green-n5ln X-Application-Context: application:9090 Content-Type: image/gif; charset=UTF-8 Content-Length: 0 Server: Jetty(9.2.11.v20150529) Via: 1.1 google Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	50260	35.241.45.82	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:28 UTC	2218	OUT	GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1 Host: udc-neb.kampyle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:28 UTC	522	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:28 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept Access-Control-Max-Age: 1800 X-ME: prod-instance-gatewayservice-green-gh0l X-Application-Context: application:9090 Content-Type: image/gif; charset=UTF-8 Content-Length: 0 Server: Jetty(9.2.11.v20150529) Via: 1.1 google Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	50262	146.75.29.230	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:28 UTC	504	OUT	GET /wdcusprem/57907/onsite/onsiteData.json HTTP/1.1 Host: resources.digital-cloud-prem.medallia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "f911470fe0e560afcc355e2b7c2d14e0" If-Modified-Since: Wed, 27 Mar 2024 18:29:51 GMT
2024-03-28 13:19:28 UTC	375	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 28 Mar 2024 13:19:28 GMT Via: 1.1 varnish Cache-Control: max-age=0,must-revalidate ETag: "f911470fe0e560afcc355e2b7c2d14e0" Age: 25375 X-Served-By: cache-iad-kiad7000157-IAD X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1711631969.572217,VS0,VE1 Vary: Accept-Encoding Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	50264	63.140.38.132	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:28 UTC	451	OUT	GET /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=91ec6c7c-8196-4547-aa93-aae7a0c3b322 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:28 UTC	418	IN	HTTP/1.1 404 Not Found x-request-id: 91ec6c7c-8196-4547-aa93-aae7a0c3b322 vary: Origin date: Thu, 28 Mar 2024 13:19:27 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	50265	172.253.62.105	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:28 UTC	1315	OUT	GET /pagead/1p-user-list/984436569/?random=1711631966857&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Fabout%2F&ref=null&tiba=About%20Wells%20Fargo&async=1&is_vtc=1&cid=CAQSKQB7FLtqNwJNbOKCD8RWuHPVFqUby_9A18yf2qsu-oUA0HEXvCmokIXD&random=999063137&resp=GooglemKTybQhCsO HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:28 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	50269	35.241.45.82	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:28 UTC	384	OUT	GET /v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track HTTP/1.1 Host: udc-neb.kampyle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:28 UTC	537	IN	HTTP/1.1 400 Bad Request Date: Thu, 28 Mar 2024 13:19:28 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept Access-Control-Max-Age: 1800 X-ME: prod-instance-gatewayservice-green-rbxz X-Application-Context: application:9090 Content-Type: text/plain;charset=ISO-8859-1 Content-Length: 91 Server: Jetty(9.2.11.v20150529) Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-28 13:19:28 UTC	91	IN	Data Raw: 7b 22 72 65 61 73 6f 6e 22 3a 22 49 6e 76 61 6c 69 64 20 61 72 67 75 6d 65 6e 74 73 22 2c 22 65 76 65 6e 74 73 5f 63 6f 75 6e 74 22 3a 22 30 22 2c 22 72 65 73 75 6c 74 73 22 3a 7b 7d 2c 22 76 65 72 73 69 6f 6e 22 3a 22 35 22 2c 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d Data Ascii: {"reason":"Invalid arguments","events_count":"0","results":{},"version":"5","status":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	50268	35.241.45.82	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:28 UTC	2048	OUT	GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=eyJldmVudHMiOiBbCiAgICB7InNlc3Npb25fc2NyZWVuX3NpemUiOiAiMTI4MHgxMDI0Iiwic2Vzc2lvbl9kdWEiOiAiTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2Iiwic2Vzc2lvbl9wbGF0Zm9ybSI6ICJXaW4zMiIsInBhZ2VfdGl0bGUiOiAiQVRNIGFuZCBCYW5rIExvY2F0aW9ucyAtIEZpbmQgV2VsbHMgRmFyZ28gQmFuayBhbmQgQVRNIExvY2F0aW9ucyIsInBhZ2VfdXJsIjogImh0dHBzOi8vd3d3LndlbGxzZmFyZ28uY29tL2xvY2F0b3IvIiwidHJhY2tlcl90eXBlIjogImphdmFzY3JpcHQiLCJ0cmFja2VyX3ZlcnNpb24iOiAiMi4yLjIzIiwiZXZlbnRfbmFtZSI6ICJuZWJ1bGFfcGFnZV92aWV3IiwiZXZlbnRfdGltZXN0YW1wX2Vwb2NoIjogIjE3MTE2MzE5NjcwODAiLCJldmVudF90aW1lem9uZV9vZmZzZXQiOiAxLCJ1c2VyX2lkIjogIjE4ZTg1MzcyMGUxYTktMDk3NzFhODk2YmIxNmMtMjYwMzFlNTEtMTQwMDAwLTE4ZTg1MzcyMGUzMmY4IiwiZW52aXJvbWVudCI6ICJkaWdpdGFsLWNsb3VkLXVzLXByZW0iLCJhY2NvdW50SWQiOiA1NzkwNSwidXJsIjogImh0dHBzOi8vd3d3LndlbGxzZmFyZ28uY29tL2xvY2F0b3IvIiwid2Vic2l0ZUlkIjogNTc5MDcsImZvcm1JZCI6IG51bGwsImZvcm1UcmlnZ2VyVHlwZSI6IG51bGwsImthbXB5bGVfZGF0YSI6IHsibWRfaXNTdXJ2ZXlTdWJtaXR0ZWRJblNlc3Npb24iOiAiIiwiTEFTVF9JTlZJVEFUSU9OX1ZJRVciOiAiIiwiREVDTElORURfREFURSI6ICIiLCJrYW1weWxlSW52aXRlUHJlc2VudGVkIjogIiIsImthbXB5bGVfdXNlcmlkIjogIjQzOGQtMGE1Mi1mNDY0LTgxYzUtZTI4ZS1lOTBhLWNmNzktMTM1NSIsImthbXB5bGVVc2VyU2Vzc2lvbiI6ICIxNzExNjMxOTY3MDcyIiwia2FtcHlsZVVzZXJQZXJjZW50aWxlIjogIiIsIlNVQk1JVFRFRF9EQVRFIjogIiJ9LCJjb29raWVfc2l6ZSI6IDMwMDUsImthbXB5bGVfdmVyc2lvbiI6ICIyLjUzLjEiLCJvbnNpdGVfdmVyc2lvbiI6ICIyLjUzLjEiLCJoaXN0b3J5X2xlbmd0aCI6IDEsImV2ZW50X2xvY2FsX3RpbWVzdGFtcCI6IDE3MTE2MzE5NjcwODAsInBvc2l0aW9uIjogbnVsbCwiaXNVc2VySWRlbnRpZmllZCI6IGZhbHNlLCJwYWNrYWdlVmVyc2lvbiI6ICIyLjUzLjRfMjAyMzEyMTkyMjQxMDAifQpdfQ== HTTP/1.1 Host: udc-neb.kampyle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:28 UTC	522	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:28 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept Access-Control-Max-Age: 1800 X-ME: prod-instance-gatewayservice-green-66z1 X-Application-Context: application:9090 Content-Type: image/gif; charset=UTF-8 Content-Length: 0 Server: Jetty(9.2.11.v20150529) Via: 1.1 google Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	50272	35.241.45.82	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:28 UTC	2236	OUT	GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1 Host: udc-neb.kampyle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:28 UTC	522	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:28 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept Access-Control-Max-Age: 1800 X-ME: prod-instance-gatewayservice-green-gr8c X-Application-Context: application:9090 Content-Type: image/gif; charset=UTF-8 Content-Length: 0 Server: Jetty(9.2.11.v20150529) Via: 1.1 google Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	50273	35.241.45.82	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:28 UTC	1980	OUT	GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1 Host: udc-neb.kampyle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:28 UTC	522	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:28 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept Access-Control-Max-Age: 1800 X-ME: prod-instance-gatewayservice-green-qxkt X-Application-Context: application:9090 Content-Type: image/gif; charset=UTF-8 Content-Length: 0 Server: Jetty(9.2.11.v20150529) Via: 1.1 google Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	50274	35.163.101.91	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:29 UTC	663	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive Content-Length: 10355 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:29 UTC	10355	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 33 2e 37 2e 31 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 2f 34 22 2c 22 74 73 22 3a 31 37 31 31 36 33 31 39 36 36 38 31 36 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 35 2f 36 2f 22 2c 22 61 74 22 3a 30 2c 22 70 70 22 3a 33 2c 22 6d 78 22 3a 7b 22 50 4c 43 22 3a 31 2c 22 46 42 54 22 3a 33 33 2c 22 44 44 54 22 3a 30 2c 22 44 50 54 22 3a 31 2c 22 50 4c 54 22 3a 33 34 2c 22 41 52 45 22 3a 30 7d 2c 22 6d 64 22 3a 22 47 45 54 22 2c 22 78 73 22 3a 32 30 30 2c 22 73 69 22 3a 38 7d 2c 7b 22 65 67 22 3a 22 32 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 37 2f 38 2f 39 2f 31 30 2f Data Ascii: {"vr":"4.3.7.1","dt":"R","rg":"0","es":[{"eg":"1","et":2,"eu":"0://1/2/3/4","ts":1711631966816,"mg":"0","au":"0://5/6/","at":0,"pp":3,"mx":{"PLC":1,"FBT":33,"DDT":0,"DPT":1,"PLT":34,"ARE":0},"md":"GET","xs":200,"si":8},{"eg":"2","et":2,"eu":"0://7/8/9/10/
2024-03-28 13:19:29 UTC	1216	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:29 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:27\|g:7cd2416e-c650-4467-ae5b-e982b873e015; Path=/; Expires=Thu, 28-Mar-2024 13:19:59 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:27\|g:7cd2416e-c650-4467-ae5b-e982b873e015\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:19:59 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:19:59 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:27\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:19:59 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:27\|i:559461\|e:4; Path=/; Expires=Thu, 28-Mar-2024 13:19:59 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:27\|i:559461\|e:4\|t:1711631969141; Path=/; Expires=Thu, 28-Mar-2024 13:19:59 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	50282	172.253.115.104	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:29 UTC	1077	OUT	GET /pagead/1p-user-list/984436569/?random=1711631966857&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Fabout%2F&ref=null&tiba=About%20Wells%20Fargo&async=1&is_vtc=1&cid=CAQSKQB7FLtqNwJNbOKCD8RWuHPVFqUby_9A18yf2qsu-oUA0HEXvCmokIXD&random=999063137&resp=GooglemKTybQhCsO HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:29 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	50285	34.211.102.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:29 UTC	575	OUT	GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:adb40a58-c631-4a90-a3cf-16274e4ce69c\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631964295
2024-03-28 13:19:30 UTC	1500	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:30 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:adb40a58-c631-4a90-a3cf-16274e4ce69c\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631964295; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:cdb8b227-8189-4ee7-98ab-dcfc84050def; Path=/; Expires=Thu, 28-Mar-2024 13:20:00 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:cdb8b227-8189-4ee7-98ab-dcfc84050def\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:20:00 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:20:00 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:20:00 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:4; Path=/; Expires=Thu, 28-Mar-2024 13:20:00 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:4\|t:1711631970045; Path=/; Expires=Thu, 28-Mar-2024 13:20:00 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	50297	35.163.101.91	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:30 UTC	662	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive Content-Length: 1044 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:30 UTC	1044	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 33 2e 37 2e 31 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 2f 34 22 2c 22 74 73 22 3a 31 37 31 31 36 33 31 39 36 33 38 32 33 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 35 2f 36 2f 22 2c 22 61 74 22 3a 30 2c 22 70 70 22 3a 33 2c 22 6d 78 22 3a 7b 22 50 4c 43 22 3a 31 2c 22 46 42 54 22 3a 34 39 35 2c 22 44 44 54 22 3a 31 2c 22 44 50 54 22 3a 31 2c 22 50 4c 54 22 3a 34 39 37 2c 22 41 52 45 22 3a 30 7d 2c 22 6d 64 22 3a 22 47 45 54 22 2c 22 78 73 22 3a 32 30 30 2c 22 73 69 22 3a 37 7d 2c 7b 22 65 67 22 3a 22 32 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 37 2f 38 2f 39 2f 31 Data Ascii: {"vr":"4.3.7.1","dt":"R","rg":"0","es":[{"eg":"1","et":2,"eu":"0://1/2/3/4","ts":1711631963823,"mg":"0","au":"0://5/6/","at":0,"pp":3,"mx":{"PLC":1,"FBT":495,"DDT":1,"DPT":1,"PLT":497,"ARE":0},"md":"GET","xs":200,"si":7},{"eg":"2","et":2,"eu":"0://7/8/9/1
2024-03-28 13:19:31 UTC	1216	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:30 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:27\|g:f3252450-eab9-4873-89ed-85ddaa1f36bf; Path=/; Expires=Thu, 28-Mar-2024 13:20:00 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:27\|g:f3252450-eab9-4873-89ed-85ddaa1f36bf\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:20:00 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:20:00 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:27\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:20:00 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:27\|i:559461\|e:2; Path=/; Expires=Thu, 28-Mar-2024 13:20:00 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:27\|i:559461\|e:2\|t:1711631970992; Path=/; Expires=Thu, 28-Mar-2024 13:20:00 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	50300	34.211.102.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:31 UTC	575	OUT	GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:cdb8b227-8189-4ee7-98ab-dcfc84050def\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:4\|t:1711631970045
2024-03-28 13:19:32 UTC	1500	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:cdb8b227-8189-4ee7-98ab-dcfc84050def\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:4\|t:1711631970045; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:a8df1606-5095-4f73-b978-a2a7710d5b72; Path=/; Expires=Thu, 28-Mar-2024 13:20:02 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:a8df1606-5095-4f73-b978-a2a7710d5b72\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:20:02 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:20:02 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:20:02 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2; Path=/; Expires=Thu, 28-Mar-2024 13:20:02 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631972003; Path=/; Expires=Thu, 28-Mar-2024 13:20:02 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	50229	34.107.165.188	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:33 UTC	572	OUT	GET /api/identity/idl?pid=1317 HTTP/1.1 Host: api.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:33 UTC	517	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: https://www.wellsfargo.com Cache-Control: no-cache, no-store Timing-Allow-Origin: * Date: Thu, 28 Mar 2024 13:19:33 GMT Content-Length: 10 Content-Type: text/plain; charset=utf-8 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:33 UTC	10	IN	Data Raw: 7b 22 69 64 6c 22 3a 22 22 7d Data Ascii: {"idl":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	50310	44.213.253.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:33 UTC	781	OUT	POST /event?d_dil_ver=9.5&_ts=1711631972607 HTTP/1.1 Host: wellsfargobankna.demdex.net Connection: keep-alive Content-Length: 426 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; wellsfargobankna=33955380241426191774167127150413392378
2024-03-28 13:19:33 UTC	426	OUT	Data Raw: 64 5f 6d 69 64 3d 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 26 64 5f 6e 73 69 64 3d 31 26 64 5f 63 6f 6f 70 5f 75 6e 73 61 66 65 3d 31 26 64 5f 63 69 64 5f 69 63 3d 77 66 61 63 6f 6f 6b 69 65 69 64 73 79 6e 63 25 30 31 31 31 32 30 32 34 30 33 32 38 30 36 31 38 35 31 31 32 36 32 38 38 39 34 39 25 30 31 31 26 64 5f 6c 64 3d 5f 74 73 25 33 44 31 37 31 31 36 33 31 39 37 32 36 30 37 26 64 5f 72 74 62 64 3d 6a 73 6f 6e 26 64 5f 6a 73 6f 6e 76 3d 31 26 64 5f 64 73 74 3d 31 26 63 5f 61 70 70 5f 69 64 3d 57 57 57 26 63 5f 77 66 61 63 6f 6f 6b 69 65 3d 31 31 32 30 32 34 30 33 32 38 30 36 31 38 35 31 31 32 36 32 38 38 39 34 39 26 63 5f 70 61 67 65 5f 74 79 70 65 3d 42 52 4f 57 53 45 52 26 63 5f Data Ascii: d_mid=33918683021254472264168527825999287273&d_nsid=1&d_coop_unsafe=1&d_cid_ic=wfacookieidsync%011120240328061851126288949%011&d_ld=_ts%3D1711631972607&d_rtbd=json&d_jsonv=1&d_dst=1&c_app_id=WWW&c_wfacookie=1120240328061851126288949&c_page_type=BROWSER&c_
2024-03-28 13:19:33 UTC	1016	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:33 GMT Content-Type: application/json;charset=utf-8 Content-Length: 1174 Connection: close X-TID: +GfTdufgSqo= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.wellsfargo.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-va6-1-v057-06a645040.edge-va6.demdex.com 4 ms set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:33 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: wellsfargobankna=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:33 GMT; Path=/; Domain=.wellsfargobankna.demdex.net; Secure; SameSite=None
2024-03-28 13:19:33 UTC	1174	IN	Data Raw: 7b 22 73 74 75 66 66 22 3a 5b 7b 22 63 6e 22 3a 22 69 61 2d 70 72 6f 64 22 2c 22 63 76 22 3a 22 69 64 3d 31 33 35 35 37 38 31 38 2c 32 32 30 33 33 39 30 32 2c 32 32 32 38 32 38 31 38 2c 32 33 35 30 38 31 38 32 2c 32 33 38 36 33 33 32 33 2c 32 34 34 39 34 33 37 36 2c 32 34 35 34 34 32 30 30 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 2e 6e 6f 64 6f 6d 61 69 6e 2e 63 6f 6d 22 7d 2c 7b 22 63 6e 22 3a 22 69 61 2d 70 72 65 70 72 6f 64 22 2c 22 63 76 22 3a 22 69 64 3d 39 32 35 35 30 37 37 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 2e 6e 6f 64 6f 6d 61 69 6e 2e 63 6f 6d 22 7d 2c 7b 22 63 6e 22 3a 22 74 6e 6c 2d 70 72 6f 64 22 2c 22 63 76 22 3a 22 69 64 3d 39 32 35 35 30 37 37 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 2e 6e 6f 64 Data Ascii: {"stuff":[{"cn":"ia-prod","cv":"id=13557818,22033902,22282818,23508182,23863323,24494376,24544200","ttl":30,"dmn":".nodomain.com"},{"cn":"ia-preprod","cv":"id=9255077","ttl":30,"dmn":".nodomain.com"},{"cn":"tnl-prod","cv":"id=9255077","ttl":30,"dmn":".nod

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	50322	3.208.238.164	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:33 UTC	500	OUT	GET /event?d_dil_ver=9.5&_ts=1711631972607 HTTP/1.1 Host: wellsfargobankna.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; wellsfargobankna=33955380241426191774167127150413392378
2024-03-28 13:19:34 UTC	915	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:34 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: MbBH/ZPKSLk= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v057-074faadb5.edge-va6.demdex.com 7 ms set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:34 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: wellsfargobankna=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:19:34 GMT; Path=/; Domain=.wellsfargobankna.demdex.net; Secure; SameSite=None
2024-03-28 13:19:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	50317	34.107.165.188	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:34 UTC	362	OUT	GET /api/identity/idl?pid=1317 HTTP/1.1 Host: api.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:34 UTC	460	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Cache-Control: no-cache, no-store Timing-Allow-Origin: * Date: Thu, 28 Mar 2024 13:19:34 GMT Content-Length: 10 Content-Type: text/plain; charset=utf-8 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:34 UTC	10	IN	Data Raw: 7b 22 69 64 6c 22 3a 22 22 7d Data Ascii: {"idl":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	50323	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:34 UTC	1180	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=403a3102-6806-4b08-ba29-c8d2c2b3d153&sn=1&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 3335 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=0lXMS2tRKzWlkhkor7DnkTgliyyj/q9iF6fK+5gDlKQQ9W4eUb0DACI1KbugyuPTb/5T96staNzWzx9JWS6zrzenmGVd6YGE29xyPLtdHAU+d59kDgxyhYhm74b8X6HE5MKPKIXxYnIJJd6lQ+2DI/sXH3l0pNRJrm/AFAbd/ozQ
2024-03-28 13:19:34 UTC	3335	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 6c 6f 63 61 74 6f 72 25 32 46 26 73 6e 3d 31 26 70 3d 34 30 33 61 33 31 30 32 2d 36 38 30 36 2d 34 62 30 38 2d 62 61 32 39 2d 63 38 64 32 63 32 62 33 64 31 35 33 26 73 65 67 3d 25 32 46 6c 6f 63 61 74 6f 72 25 32 46 26 73 70 3d 26 65 3d 6c 75 62 39 68 36 6b 7a 7e 32 7e 2d 7e 4e 75 5f 39 67 67 74 67 35 2a 73 5f 31 32 38 30 78 39 30 37 2a 73 63 5f 31 32 38 30 78 31 30 32 34 7e 76 6e 2e 32 5f 51 56 52 4e 49 47 46 75 5a 43 42 43 59 57 35 72 49 45 78 76 59 32 46 30 61 57 39 75 63 79 41 74 49 45 5a 70 62 6d 51 67 56 32 56 73 62 48 4d 67 52 6d 46 79 5a 32 38 67 51 6d 46 75 61 79 42 68 62 6d 51 67 51 56 52 4e 49 45 78 76 59 32 46 30 61 57 39 Data Ascii: v=2&r=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F&sn=1&p=403a3102-6806-4b08-ba29-c8d2c2b3d153&seg=%2Flocator%2F&sp=&e=lub9h6kz~2~-~Nu_9ggtg5s_1280x907sc_1280x1024~vn.2_QVRNIGFuZCBCYW5rIExvY2F0aW9ucyAtIEZpbmQgV2VsbHMgRmFyZ28gQmFuayBhbmQgQVRNIExvY2F0aW9
2024-03-28 13:19:34 UTC	815	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:34 GMT Content-Type: application/json Content-Length: 270 Connection: close Set-Cookie: AWSALBTG=e8DihRBQ7a0VQ3wDBCNRaqG4OEHhax/fBtPYH3OFirdO53cNRIasIia0GWWqphVXunq1n12B+JysUZ4zca31ApLoh9R67FBMkII6cGNqxHmSEAizCMWOjARqtHoJus5Oip1lKBtYmb+cqdYViia7AyWauvJSDq3OFHM47aYDfUR2; Expires=Thu, 04 Apr 2024 13:19:34 GMT; Path=/ Set-Cookie: AWSALBTGCORS=e8DihRBQ7a0VQ3wDBCNRaqG4OEHhax/fBtPYH3OFirdO53cNRIasIia0GWWqphVXunq1n12B+JysUZ4zca31ApLoh9R67FBMkII6cGNqxHmSEAizCMWOjARqtHoJus5Oip1lKBtYmb+cqdYViia7AyWauvJSDq3OFHM47aYDfUR2; Expires=Thu, 04 Apr 2024 13:19:34 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:34 UTC	270	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 6e 75 6c 6c 2c 22 75 73 61 67 65 22 3a 7b 22 73 65 73 73 69 6f 6e 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 61 70 69 43 61 6c 6c 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 63 75 73 74 6f 6d 53 65 72 76 65 72 43 61 6c 6c 73 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 64 61 74 61 4c 69 6d 69 74 22 3a 20 34 31 39 34 33 30 34 7d 2c 22 62 6c 6f 63 6b 52 65 63 Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":null,"usage":{"sessionQuotaBreach":false, "apiCallQuotaBreach":false, "customServerCallsBreach":false, "dataLimit": 4194304},"blockRec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	50325	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:34 UTC	1181	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=403a3102-6806-4b08-ba29-c8d2c2b3d153&sn=2&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 13799 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=0lXMS2tRKzWlkhkor7DnkTgliyyj/q9iF6fK+5gDlKQQ9W4eUb0DACI1KbugyuPTb/5T96staNzWzx9JWS6zrzenmGVd6YGE29xyPLtdHAU+d59kDgxyhYhm74b8X6HE5MKPKIXxYnIJJd6lQ+2DI/sXH3l0pNRJrm/AFAbd/ozQ
2024-03-28 13:19:34 UTC	13799	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 6c 6f 63 61 74 6f 72 25 32 46 26 73 6e 3d 32 26 70 3d 34 30 33 61 33 31 30 32 2d 36 38 30 36 2d 34 62 30 38 2d 62 61 32 39 2d 63 38 64 32 63 32 62 33 64 31 35 33 26 73 65 67 3d 25 32 46 6c 6f 63 61 74 6f 72 25 32 46 26 73 70 3d 26 70 73 73 6e 3d 30 26 65 3d 6c 75 62 39 68 36 6b 7a 7e 39 31 7e 2d 7e 4e 73 6e 5f 30 2a 72 5f 2a 63 5f 59 6d 31 66 63 33 6f 39 4f 55 4d 78 4e 44 5a 45 4d 45 4d 32 4f 55 55 31 4f 55 59 79 4d 7a 4d 7a 4f 54 4a 43 52 45 5a 47 4d 45 59 30 52 6b 55 77 4f 44 64 25 32 42 57 55 46 42 55 55 31 33 4f 44 42 47 4c 79 39 4f 4d 56 67 72 54 30 46 52 51 55 46 55 63 47 73 79 61 46 4a 6b 63 56 42 42 63 55 74 43 52 69 38 34 59 Data Ascii: v=2&r=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F&sn=2&p=403a3102-6806-4b08-ba29-c8d2c2b3d153&seg=%2Flocator%2F&sp=&pssn=0&e=lub9h6kz~91~-~Nsn_0r_c_Ym1fc3o9OUMxNDZEMEM2OUU1OUYyMzMzOTJCREZGMEY0RkUwODd%2BWUFBUU13ODBGLy9OMVgrT0FRQUFUcGsyaFJkcVBBcUtCRi84Y
2024-03-28 13:19:34 UTC	815	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:34 GMT Content-Type: application/json Content-Length: 270 Connection: close Set-Cookie: AWSALBTG=mejjF97Yjy4e98r2HGWOMlE45r22R2UL0eDQThtYqnjdzVNv3/VWtRfhxI7qfr5h51vuEjLBSiHscjxpPD/NOj8+H4HOibtwnH+YNM2Fy25u3QWcRD0aPCl1xEPfUIyyQtSMQZHoY/Cu9KW02TsHVL4kkBsuc2z4neF0kIh/HVr9; Expires=Thu, 04 Apr 2024 13:19:34 GMT; Path=/ Set-Cookie: AWSALBTGCORS=mejjF97Yjy4e98r2HGWOMlE45r22R2UL0eDQThtYqnjdzVNv3/VWtRfhxI7qfr5h51vuEjLBSiHscjxpPD/NOj8+H4HOibtwnH+YNM2Fy25u3QWcRD0aPCl1xEPfUIyyQtSMQZHoY/Cu9KW02TsHVL4kkBsuc2z4neF0kIh/HVr9; Expires=Thu, 04 Apr 2024 13:19:34 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:34 UTC	270	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 6e 75 6c 6c 2c 22 75 73 61 67 65 22 3a 7b 22 73 65 73 73 69 6f 6e 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 61 70 69 43 61 6c 6c 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 63 75 73 74 6f 6d 53 65 72 76 65 72 43 61 6c 6c 73 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 64 61 74 61 4c 69 6d 69 74 22 3a 20 34 31 39 34 33 30 34 7d 2c 22 62 6c 6f 63 6b 52 65 63 Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":null,"usage":{"sessionQuotaBreach":false, "apiCallQuotaBreach":false, "customServerCallsBreach":false, "dataLimit": 4194304},"blockRec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	50334	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:34 UTC	1100	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=403a3102-6806-4b08-ba29-c8d2c2b3d153&sn=1&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=0lXMS2tRKzWlkhkor7DnkTgliyyj/q9iF6fK+5gDlKQQ9W4eUb0DACI1KbugyuPTb/5T96staNzWzx9JWS6zrzenmGVd6YGE29xyPLtdHAU+d59kDgxyhYhm74b8X6HE5MKPKIXxYnIJJd6lQ+2DI/sXH3l0pNRJrm/AFAbd/ozQ; AWSALBTGCORS=mejjF97Yjy4e98r2HGWOMlE45r22R2UL0eDQThtYqnjdzVNv3/VWtRfhxI7qfr5h51vuEjLBSiHscjxpPD/NOj8+H4HOibtwnH+YNM2Fy25u3QWcRD0aPCl1xEPfUIyyQtSMQZHoY/Cu9KW02TsHVL4kkBsuc2z4neF0kIh/HVr9
2024-03-28 13:19:34 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:34 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=VbR8E8Z2EECPCSfushkWfD/QT3BU0Mat3IbzJDtA6G/N3qyYNx6xKSKlLTQsAWnhAiyON69AE6c4K7C5Sheg9uU8SsO0GIiN3s8EnspmVC/ngW56lPsiPuyxp1wfWnwPfeqb9AquhiF/EvD3krtaSTZ60cCt5wgYq9JEloiuPpRD; Expires=Thu, 04 Apr 2024 13:19:34 GMT; Path=/ Set-Cookie: AWSALBTGCORS=VbR8E8Z2EECPCSfushkWfD/QT3BU0Mat3IbzJDtA6G/N3qyYNx6xKSKlLTQsAWnhAiyON69AE6c4K7C5Sheg9uU8SsO0GIiN3s8EnspmVC/ngW56lPsiPuyxp1wfWnwPfeqb9AquhiF/EvD3krtaSTZ60cCt5wgYq9JEloiuPpRD; Expires=Thu, 04 Apr 2024 13:19:34 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:34 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	50333	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:34 UTC	1100	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=403a3102-6806-4b08-ba29-c8d2c2b3d153&sn=2&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=0lXMS2tRKzWlkhkor7DnkTgliyyj/q9iF6fK+5gDlKQQ9W4eUb0DACI1KbugyuPTb/5T96staNzWzx9JWS6zrzenmGVd6YGE29xyPLtdHAU+d59kDgxyhYhm74b8X6HE5MKPKIXxYnIJJd6lQ+2DI/sXH3l0pNRJrm/AFAbd/ozQ; AWSALBTGCORS=mejjF97Yjy4e98r2HGWOMlE45r22R2UL0eDQThtYqnjdzVNv3/VWtRfhxI7qfr5h51vuEjLBSiHscjxpPD/NOj8+H4HOibtwnH+YNM2Fy25u3QWcRD0aPCl1xEPfUIyyQtSMQZHoY/Cu9KW02TsHVL4kkBsuc2z4neF0kIh/HVr9
2024-03-28 13:19:34 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:34 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=FeShK3t/GqlbJ7Ba9Z9JfseYM6XM/8h8wwTYCJ9+RtdfROGfh2bYqaHrtF/60tTUbyfh4ESQiTECorjMnQm8WwNci8ByzWx/JJff3Ja0SC1yE4eNojsdHPwiJCVDMxjPZqmemvVLni899hlV18sQ/cwZH5ZvWqbx6p7V757RiOgf; Expires=Thu, 04 Apr 2024 13:19:34 GMT; Path=/ Set-Cookie: AWSALBTGCORS=FeShK3t/GqlbJ7Ba9Z9JfseYM6XM/8h8wwTYCJ9+RtdfROGfh2bYqaHrtF/60tTUbyfh4ESQiTECorjMnQm8WwNci8ByzWx/JJff3Ja0SC1yE4eNojsdHPwiJCVDMxjPZqmemvVLni899hlV18sQ/cwZH5ZvWqbx6p7V757RiOgf; Expires=Thu, 04 Apr 2024 13:19:34 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:34 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	50331	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:34 UTC	1180	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=403a3102-6806-4b08-ba29-c8d2c2b3d153&sn=3&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 7720 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=mejjF97Yjy4e98r2HGWOMlE45r22R2UL0eDQThtYqnjdzVNv3/VWtRfhxI7qfr5h51vuEjLBSiHscjxpPD/NOj8+H4HOibtwnH+YNM2Fy25u3QWcRD0aPCl1xEPfUIyyQtSMQZHoY/Cu9KW02TsHVL4kkBsuc2z4neF0kIh/HVr9
2024-03-28 13:19:34 UTC	7720	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 6c 6f 63 61 74 6f 72 25 32 46 26 73 6e 3d 33 26 70 3d 34 30 33 61 33 31 30 32 2d 36 38 30 36 2d 34 62 30 38 2d 62 61 32 39 2d 63 38 64 32 63 32 62 33 64 31 35 33 26 73 65 67 3d 25 32 46 6c 6f 63 61 74 6f 72 25 32 46 26 73 70 3d 26 70 73 73 6e 3d 30 26 65 3d 6c 75 62 39 68 37 35 36 7e 33 37 7e 2d 7e 45 51 30 78 54 52 45 56 43 56 55 63 36 49 45 56 79 63 6d 39 79 4f 69 42 7a 62 6d 46 77 63 32 68 76 64 43 42 33 59 58 4d 67 64 47 46 72 5a 57 34 67 64 32 68 70 62 47 55 67 5a 47 39 6a 64 57 31 6c 62 6e 51 67 64 32 46 7a 49 47 68 70 5a 47 52 6c 62 69 41 25 33 44 7e 65 76 65 6e 74 49 64 2e 30 5f 35 7e 2d 7e 2d 7e 2d 7e 7e 6c 75 62 39 68 37 35 Data Ascii: v=2&r=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F&sn=3&p=403a3102-6806-4b08-ba29-c8d2c2b3d153&seg=%2Flocator%2F&sp=&pssn=0&e=lub9h756~37~-~EQ0xTREVCVUc6IEVycm9yOiBzbmFwc2hvdCB3YXMgdGFrZW4gd2hpbGUgZG9jdW1lbnQgd2FzIGhpZGRlbiA%3D~eventId.0_5~-~-~-~~lub9h75
2024-03-28 13:19:34 UTC	815	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:34 GMT Content-Type: application/json Content-Length: 270 Connection: close Set-Cookie: AWSALBTG=P+BkuOpiK3wPbQwm0HO3IDrlLyV5bJnvMWkZfkL4cGMZUFwSZUpoYiLkMLGBxdlYufz/hijBsR0tS/d47iZdYvI7ASVZ7R1R3pA8uj1K6vgsGsazit9nov/uFwTgD3RL6SbrCPtAV3VAgMyzJTr8vRLunBZO9X6TTRoqA4BQ7Bi/; Expires=Thu, 04 Apr 2024 13:19:34 GMT; Path=/ Set-Cookie: AWSALBTGCORS=P+BkuOpiK3wPbQwm0HO3IDrlLyV5bJnvMWkZfkL4cGMZUFwSZUpoYiLkMLGBxdlYufz/hijBsR0tS/d47iZdYvI7ASVZ7R1R3pA8uj1K6vgsGsazit9nov/uFwTgD3RL6SbrCPtAV3VAgMyzJTr8vRLunBZO9X6TTRoqA4BQ7Bi/; Expires=Thu, 04 Apr 2024 13:19:34 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:34 UTC	270	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 6e 75 6c 6c 2c 22 75 73 61 67 65 22 3a 7b 22 73 65 73 73 69 6f 6e 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 61 70 69 43 61 6c 6c 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 63 75 73 74 6f 6d 53 65 72 76 65 72 43 61 6c 6c 73 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 64 61 74 61 4c 69 6d 69 74 22 3a 20 34 31 39 34 33 30 34 7d 2c 22 62 6c 6f 63 6b 52 65 63 Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":null,"usage":{"sessionQuotaBreach":false, "apiCallQuotaBreach":false, "customServerCallsBreach":false, "dataLimit": 4194304},"blockRec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	50347	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:35 UTC	1100	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=403a3102-6806-4b08-ba29-c8d2c2b3d153&sn=3&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=FeShK3t/GqlbJ7Ba9Z9JfseYM6XM/8h8wwTYCJ9+RtdfROGfh2bYqaHrtF/60tTUbyfh4ESQiTECorjMnQm8WwNci8ByzWx/JJff3Ja0SC1yE4eNojsdHPwiJCVDMxjPZqmemvVLni899hlV18sQ/cwZH5ZvWqbx6p7V757RiOgf; AWSALBTGCORS=P+BkuOpiK3wPbQwm0HO3IDrlLyV5bJnvMWkZfkL4cGMZUFwSZUpoYiLkMLGBxdlYufz/hijBsR0tS/d47iZdYvI7ASVZ7R1R3pA8uj1K6vgsGsazit9nov/uFwTgD3RL6SbrCPtAV3VAgMyzJTr8vRLunBZO9X6TTRoqA4BQ7Bi/
2024-03-28 13:19:35 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:35 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=tL8IdZ7QctA26s6msf+Ct4q6acoDx8QwSguP+Yrv1kSHTfY7Gy8OQcg2CtC31a557WObMJzjE+SKzMu7dTu+9SFsNtsMrcyUl1tmsvbB7Zw6zZbzp9iou6Hlrq2igxlEaUO1SJ3g30EfH54beuC5vNKGlotNS9Q3dBnz8/Zjz91B; Expires=Thu, 04 Apr 2024 13:19:35 GMT; Path=/ Set-Cookie: AWSALBTGCORS=tL8IdZ7QctA26s6msf+Ct4q6acoDx8QwSguP+Yrv1kSHTfY7Gy8OQcg2CtC31a557WObMJzjE+SKzMu7dTu+9SFsNtsMrcyUl1tmsvbB7Zw6zZbzp9iou6Hlrq2igxlEaUO1SJ3g30EfH54beuC5vNKGlotNS9Q3dBnz8/Zjz91B; Expires=Thu, 04 Apr 2024 13:19:35 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:35 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	50377	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:37 UTC	1040	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=tL8IdZ7QctA26s6msf+Ct4q6acoDx8QwSguP+Yrv1kSHTfY7Gy8OQcg2CtC31a557WObMJzjE+SKzMu7dTu+9SFsNtsMrcyUl1tmsvbB7Zw6zZbzp9iou6Hlrq2igxlEaUO1SJ3g30EfH54beuC5vNKGlotNS9Q3dBnz8/Zjz91B
2024-03-28 13:19:37 UTC	1035	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:37 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=K9MjWWttrOO6BXoe9EijGnpZMdojIZuy0g3PcRZCyDWNWId+KuyTbZrMkLUPDXvEbJE9ZgWuIjG1Ak77hjsDny44bG8LDlYxZr6vh5qIY1zN3meSXNYhfhoy8FOY9hZK4eL/Eh9MQGk5Cu5KkIQFbnBwqiu+s3KkxeQePTq250qv; Expires=Thu, 04 Apr 2024 13:19:37 GMT; Path=/ Set-Cookie: AWSALBTGCORS=K9MjWWttrOO6BXoe9EijGnpZMdojIZuy0g3PcRZCyDWNWId+KuyTbZrMkLUPDXvEbJE9ZgWuIjG1Ak77hjsDny44bG8LDlYxZr6vh5qIY1zN3meSXNYhfhoy8FOY9hZK4eL/Eh9MQGk5Cu5KkIQFbnBwqiu+s3KkxeQePTq250qv; Expires=Thu, 04 Apr 2024 13:19:37 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:37 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	50391	63.140.39.65	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:38 UTC	758	OUT	POST /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=097b5d70-c89b-4f9f-a889-04c866fba6b7 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 352 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:38 UTC	352	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 7b 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 66 65 74 63 68 22 3a 5b 22 45 43 49 44 22 5d 7d 7d 2c 22 6d 65 74 61 22 3a 7b 22 73 74 61 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 22 2c 22 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 6b 6e 64 63 74 72 5f 31 42 41 41 31 35 46 33 35 34 46 37 33 31 45 36 30 41 34 43 39 38 41 34 5f 41 64 6f 62 65 4f 72 67 5f 69 64 65 6e 74 69 74 79 22 2c 22 76 61 6c 75 65 22 3a 22 43 69 59 7a 4d 7a 6b 78 4f 44 59 34 4d 7a 41 79 4d 54 49 31 4e 44 51 33 4d 6a 49 32 4e 44 45 32 4f 44 55 79 4e 7a 67 79 4e 54 6b 35 4f 54 49 34 4e 7a 49 33 4d 31 49 51 43 4b 4b 6b 32 36 6e 6f 4d 52 67 42 4b 67 Data Ascii: {"query":{"identity":{"fetch":["ECID"]}},"meta":{"state":{"domain":"wellsfargo.com","cookiesEnabled":true,"entries":[{"key":"kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity","value":"CiYzMzkxODY4MzAyMTI1NDQ3MjI2NDE2ODUyNzgyNTk5OTI4NzI3M1IQCKKk26noMRgBKg
2024-03-28 13:19:38 UTC	635	IN	HTTP/1.1 200 OK x-request-id: 097b5d70-c89b-4f9f-a889-04c866fba6b7 vary: Origin access-control-allow-origin: https://www.wellsfargo.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Thu, 28 Mar 2024 13:19:37 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-03-28 13:19:38 UTC	527	IN	Data Raw: 32 30 38 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 30 39 37 62 35 64 37 30 2d 63 38 39 62 2d 34 66 39 66 2d 61 38 38 39 2d 30 34 63 38 36 36 66 62 61 36 62 37 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 34 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 208{"requestId":"097b5d70-c89b-4f9f-a889-04c866fba6b7","handle":[{"payload":[{"id":"33918683021254472264168527825999287273","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"34","ttlSeconds":1800},{"scope":"AA
2024-03-28 13:19:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	50389	63.140.39.65	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:38 UTC	758	OUT	POST /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=7d57ee8f-2442-4298-8218-7b4c8f4a5dd2 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 352 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:38 UTC	352	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 7b 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 66 65 74 63 68 22 3a 5b 22 45 43 49 44 22 5d 7d 7d 2c 22 6d 65 74 61 22 3a 7b 22 73 74 61 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 22 2c 22 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 6b 6e 64 63 74 72 5f 31 42 41 41 31 35 46 33 35 34 46 37 33 31 45 36 30 41 34 43 39 38 41 34 5f 41 64 6f 62 65 4f 72 67 5f 69 64 65 6e 74 69 74 79 22 2c 22 76 61 6c 75 65 22 3a 22 43 69 59 7a 4d 7a 6b 78 4f 44 59 34 4d 7a 41 79 4d 54 49 31 4e 44 51 33 4d 6a 49 32 4e 44 45 32 4f 44 55 79 4e 7a 67 79 4e 54 6b 35 4f 54 49 34 4e 7a 49 33 4d 31 49 51 43 4b 4b 6b 32 36 6e 6f 4d 52 67 42 4b 67 Data Ascii: {"query":{"identity":{"fetch":["ECID"]}},"meta":{"state":{"domain":"wellsfargo.com","cookiesEnabled":true,"entries":[{"key":"kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity","value":"CiYzMzkxODY4MzAyMTI1NDQ3MjI2NDE2ODUyNzgyNTk5OTI4NzI3M1IQCKKk26noMRgBKg
2024-03-28 13:19:38 UTC	635	IN	HTTP/1.1 200 OK x-request-id: 7d57ee8f-2442-4298-8218-7b4c8f4a5dd2 vary: Origin access-control-allow-origin: https://www.wellsfargo.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Thu, 28 Mar 2024 13:19:37 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-03-28 13:19:38 UTC	527	IN	Data Raw: 32 30 38 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 37 64 35 37 65 65 38 66 2d 32 34 34 32 2d 34 32 39 38 2d 38 32 31 38 2d 37 62 34 63 38 66 34 61 35 64 64 32 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 34 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 208{"requestId":"7d57ee8f-2442-4298-8218-7b4c8f4a5dd2","handle":[{"payload":[{"id":"33918683021254472264168527825999287273","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"34","ttlSeconds":1800},{"scope":"AA
2024-03-28 13:19:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	50390	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:38 UTC	1180	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=9fa406fb-8541-4a53-bdc9-8d711b8258a5&sn=1&cfg=201c2b80&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 5081 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=K9MjWWttrOO6BXoe9EijGnpZMdojIZuy0g3PcRZCyDWNWId+KuyTbZrMkLUPDXvEbJE9ZgWuIjG1Ak77hjsDny44bG8LDlYxZr6vh5qIY1zN3meSXNYhfhoy8FOY9hZK4eL/Eh9MQGk5Cu5KkIQFbnBwqiu+s3KkxeQePTq250qv
2024-03-28 13:19:38 UTC	5081	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 61 62 6f 75 74 25 32 46 26 73 6e 3d 31 26 70 3d 39 66 61 34 30 36 66 62 2d 38 35 34 31 2d 34 61 35 33 2d 62 64 63 39 2d 38 64 37 31 31 62 38 32 35 38 61 35 26 73 65 67 3d 25 32 46 61 62 6f 75 74 25 32 46 26 73 70 3d 26 65 3d 6c 75 62 39 68 39 72 65 7e 32 7e 2d 7e 4e 75 5f 2d 34 73 73 30 37 36 2a 73 5f 31 32 38 30 78 39 30 37 2a 73 63 5f 31 32 38 30 78 31 30 32 34 7e 76 6e 2e 32 5f 51 57 4a 76 64 58 51 67 56 32 56 73 62 48 4d 67 52 6d 46 79 5a 32 38 25 33 44 2a 77 69 6e 64 6f 77 44 65 70 74 68 2e 30 5f 30 2a 68 69 73 74 6f 72 79 4c 65 6e 2e 30 5f 31 2a 64 65 74 65 63 74 6f 72 43 66 67 2e 32 5f 65 79 4a 32 5a 58 49 69 4f 69 49 32 4c 6a Data Ascii: v=2&r=https%3A%2F%2Fwww.wellsfargo.com%2Fabout%2F&sn=1&p=9fa406fb-8541-4a53-bdc9-8d711b8258a5&seg=%2Fabout%2F&sp=&e=lub9h9re~2~-~Nu_-4ss076s_1280x907sc_1280x1024~vn.2_QWJvdXQgV2VsbHMgRmFyZ28%3DwindowDepth.0_0historyLen.0_1*detectorCfg.2_eyJ2ZXIiOiI2Lj
2024-03-28 13:19:38 UTC	873	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:38 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=rs3a9qw2VUs4xCnXiLyIbwEeY39Y12KH/rzuu8phlrJC3qzdtia6TaiqBYME5Di1HCT6+6n9dK0oZzv2D2fF7PaOBXrbQxC8t8k+4ekIXhToQAypod6qz5HQwtERgGXIap8Lqnnpb+9pU0YHjKjPqULXsSuEYATDEpJ2fMst0udA; Expires=Thu, 04 Apr 2024 13:19:38 GMT; Path=/ Set-Cookie: AWSALBTGCORS=rs3a9qw2VUs4xCnXiLyIbwEeY39Y12KH/rzuu8phlrJC3qzdtia6TaiqBYME5Di1HCT6+6n9dK0oZzv2D2fF7PaOBXrbQxC8t8k+4ekIXhToQAypod6qz5HQwtERgGXIap8Lqnnpb+9pU0YHjKjPqULXsSuEYATDEpJ2fMst0udA; Expires=Thu, 04 Apr 2024 13:19:38 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:38 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	50398	63.140.39.65	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:39 UTC	751	OUT	POST /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=82f6936a-61e1-4489-83e1-f802151ff0cd HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 4377 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:39 UTC	4377	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 71 75 65 72 79 22 3a 7b 22 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 3a 7b 22 73 63 68 65 6d 61 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 64 65 66 61 75 6c 74 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 68 74 6d 6c 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 6a 73 6f 6e 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c Data Ascii: {"events":[{"query":{"personalization":{"schemas":["https://ns.adobe.com/personalization/default-content-item","https://ns.adobe.com/personalization/html-content-item","https://ns.adobe.com/personalization/json-content-item","https://ns.adobe.com/personal
2024-03-28 13:19:40 UTC	635	IN	HTTP/1.1 200 OK x-request-id: 82f6936a-61e1-4489-83e1-f802151ff0cd vary: Origin access-control-allow-origin: https://www.wellsfargo.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Thu, 28 Mar 2024 13:19:39 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-03-28 13:19:40 UTC	527	IN	Data Raw: 32 30 38 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 38 32 66 36 39 33 36 61 2d 36 31 65 31 2d 34 34 38 39 2d 38 33 65 31 2d 66 38 30 32 31 35 31 66 66 30 63 64 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 34 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 208{"requestId":"82f6936a-61e1-4489-83e1-f802151ff0cd","handle":[{"payload":[{"id":"33918683021254472264168527825999287273","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"34","ttlSeconds":1800},{"scope":"AA
2024-03-28 13:19:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	50401	63.140.39.65	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:39 UTC	751	OUT	POST /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=f9969528-fe00-4a85-9056-cebe4b4a3f85 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 3802 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:39 UTC	3802	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 71 75 65 72 79 22 3a 7b 22 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 3a 7b 22 73 63 68 65 6d 61 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 64 65 66 61 75 6c 74 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 68 74 6d 6c 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 6a 73 6f 6e 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c Data Ascii: {"events":[{"query":{"personalization":{"schemas":["https://ns.adobe.com/personalization/default-content-item","https://ns.adobe.com/personalization/html-content-item","https://ns.adobe.com/personalization/json-content-item","https://ns.adobe.com/personal
2024-03-28 13:19:40 UTC	635	IN	HTTP/1.1 200 OK x-request-id: f9969528-fe00-4a85-9056-cebe4b4a3f85 vary: Origin access-control-allow-origin: https://www.wellsfargo.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Thu, 28 Mar 2024 13:19:39 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-03-28 13:19:40 UTC	527	IN	Data Raw: 32 30 38 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 66 39 39 36 39 35 32 38 2d 66 65 30 30 2d 34 61 38 35 2d 39 30 35 36 2d 63 65 62 65 34 62 34 61 33 66 38 35 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 34 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 208{"requestId":"f9969528-fe00-4a85-9056-cebe4b4a3f85","handle":[{"payload":[{"id":"33918683021254472264168527825999287273","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"34","ttlSeconds":1800},{"scope":"AA
2024-03-28 13:19:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	50400	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:39 UTC	1181	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=9fa406fb-8541-4a53-bdc9-8d711b8258a5&sn=2&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 18234 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=rs3a9qw2VUs4xCnXiLyIbwEeY39Y12KH/rzuu8phlrJC3qzdtia6TaiqBYME5Di1HCT6+6n9dK0oZzv2D2fF7PaOBXrbQxC8t8k+4ekIXhToQAypod6qz5HQwtERgGXIap8Lqnnpb+9pU0YHjKjPqULXsSuEYATDEpJ2fMst0udA
2024-03-28 13:19:39 UTC	16384	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 61 62 6f 75 74 25 32 46 26 73 6e 3d 32 26 70 3d 39 66 61 34 30 36 66 62 2d 38 35 34 31 2d 34 61 35 33 2d 62 64 63 39 2d 38 64 37 31 31 62 38 32 35 38 61 35 26 73 65 67 3d 25 32 46 61 62 6f 75 74 25 32 46 26 73 70 3d 26 70 73 73 6e 3d 30 26 65 3d 6c 75 62 39 68 39 72 65 7e 39 31 7e 2d 7e 4e 73 6e 5f 30 2a 72 5f 2a 63 5f 59 6d 31 66 63 33 6f 39 4f 55 4d 78 4e 44 5a 45 4d 45 4d 32 4f 55 55 31 4f 55 59 79 4d 7a 4d 7a 4f 54 4a 43 52 45 5a 47 4d 45 59 30 52 6b 55 77 4f 44 64 25 32 42 57 55 46 42 55 55 31 33 4f 44 42 47 4c 79 39 4f 4d 56 67 72 54 30 46 52 51 55 46 55 63 47 73 79 61 46 4a 6b 63 56 42 42 63 55 74 43 52 69 38 34 59 31 49 79 57 Data Ascii: v=2&r=https%3A%2F%2Fwww.wellsfargo.com%2Fabout%2F&sn=2&p=9fa406fb-8541-4a53-bdc9-8d711b8258a5&seg=%2Fabout%2F&sp=&pssn=0&e=lub9h9re~91~-~Nsn_0r_c_Ym1fc3o9OUMxNDZEMEM2OUU1OUYyMzMzOTJCREZGMEY0RkUwODd%2BWUFBUU13ODBGLy9OMVgrT0FRQUFUcGsyaFJkcVBBcUtCRi84Y1IyW
2024-03-28 13:19:39 UTC	1850	OUT	Data Raw: 38 76 6e 41 59 57 65 4c 4e 58 69 46 69 41 6e 4c 6e 55 6b 36 35 25 32 46 25 32 42 5a 65 46 44 69 38 63 73 59 49 54 47 79 55 25 32 46 25 32 46 51 72 44 25 32 42 4c 4f 53 44 58 51 6f 76 4e 46 77 45 50 25 32 46 31 62 6e 44 72 43 43 25 32 46 4d 53 57 39 63 43 33 77 4b 36 52 63 6d 56 43 38 4e 72 65 47 44 74 52 70 41 6e 63 42 63 33 70 42 37 46 67 54 56 6d 57 68 54 44 25 32 42 43 47 65 66 76 6a 54 25 32 46 30 6e 54 41 6b 36 52 63 45 4e 78 7a 25 32 46 77 38 55 62 70 75 45 31 67 51 66 33 7a 74 25 32 46 76 54 76 4c 45 69 48 78 70 49 65 51 46 4d 45 6a 49 55 76 65 59 76 47 70 50 77 31 55 37 78 4d 58 46 32 65 70 4b 31 37 25 32 42 5a 67 73 7a 57 4c 6b 38 64 6f 55 62 71 48 4d 47 4d 56 31 55 6b 30 6d 31 4b 4e 36 4e 53 38 5a 46 25 32 46 53 4a 35 73 47 58 51 51 71 6f 35 47 Data Ascii: 8vnAYWeLNXiFiAnLnUk65%2F%2BZeFDi8csYITGyU%2F%2FQrD%2BLOSDXQovNFwEP%2F1bnDrCC%2FMSW9cC3wK6RcmVC8NreGDtRpAncBc3pB7FgTVmWhTD%2BCGefvjT%2F0nTAk6RcENxz%2Fw8UbpuE1gQf3zt%2FvTvLEiHxpIeQFMEjIUveYvGpPw1U7xMXF2epK17%2BZgszWLk8doUbqHMGMV1Uk0m1KN6NS8ZF%2FSJ5sGXQQqo5G
2024-03-28 13:19:40 UTC	815	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:40 GMT Content-Type: application/json Content-Length: 270 Connection: close Set-Cookie: AWSALBTG=iEECbnkNnG96JSPFYVuM1iH3s+/QngtCV1RAyvZvbE1IAwDHdgAR4ATY+kDV4d8wfQ1Q5BfECKED9EbBcRTEe/ROWnFYAJZAe9bDqsMIwDrvOi7SJUgmmB+OccWWuoszwrYeP1Xv0uJZ5VagbNir4ZU96XyBuBfVSHpUyQD8bmql; Expires=Thu, 04 Apr 2024 13:19:40 GMT; Path=/ Set-Cookie: AWSALBTGCORS=iEECbnkNnG96JSPFYVuM1iH3s+/QngtCV1RAyvZvbE1IAwDHdgAR4ATY+kDV4d8wfQ1Q5BfECKED9EbBcRTEe/ROWnFYAJZAe9bDqsMIwDrvOi7SJUgmmB+OccWWuoszwrYeP1Xv0uJZ5VagbNir4ZU96XyBuBfVSHpUyQD8bmql; Expires=Thu, 04 Apr 2024 13:19:40 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:40 UTC	270	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 6e 75 6c 6c 2c 22 75 73 61 67 65 22 3a 7b 22 73 65 73 73 69 6f 6e 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 61 70 69 43 61 6c 6c 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 63 75 73 74 6f 6d 53 65 72 76 65 72 43 61 6c 6c 73 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 64 61 74 61 4c 69 6d 69 74 22 3a 20 34 31 39 34 33 30 34 7d 2c 22 62 6c 6f 63 6b 52 65 63 Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":null,"usage":{"sessionQuotaBreach":false, "apiCallQuotaBreach":false, "customServerCallsBreach":false, "dataLimit": 4194304},"blockRec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	50402	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:40 UTC	1179	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=2c4120a6-8cbe-4983-b2ed-45670688b5d0&sn=4&cfg=201c2b80&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 189 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=rs3a9qw2VUs4xCnXiLyIbwEeY39Y12KH/rzuu8phlrJC3qzdtia6TaiqBYME5Di1HCT6+6n9dK0oZzv2D2fF7PaOBXrbQxC8t8k+4ekIXhToQAypod6qz5HQwtERgGXIap8Lqnnpb+9pU0YHjKjPqULXsSuEYATDEpJ2fMst0udA
2024-03-28 13:19:40 UTC	189	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 26 73 6e 3d 34 26 70 3d 32 63 34 31 32 30 61 36 2d 38 63 62 65 2d 34 39 38 33 2d 62 32 65 64 2d 34 35 36 37 30 36 38 38 62 35 64 30 26 73 65 67 3d 25 32 46 26 73 70 3d 26 70 73 73 6e 3d 30 26 65 3d 6c 75 62 39 68 63 63 73 7e 32 39 7e 2d 7e 4e 6c 30 5f 36 37 7e 66 74 2e 30 5f 30 2a 73 65 6c 65 63 74 6f 72 41 63 74 69 6f 6e 43 6f 75 6e 74 2e 30 5f 34 2a 65 76 65 6e 74 49 64 2e 30 5f 31 6f 7e 2d 7e 2d 7e 2d 26 64 6f 6d 3d 26 70 61 74 74 72 3d Data Ascii: v=2&r=https%3A%2F%2Fwww.wellsfargo.com%2F&sn=4&p=2c4120a6-8cbe-4983-b2ed-45670688b5d0&seg=%2F&sp=&pssn=0&e=lub9hccs~29~-~Nl0_67~ft.0_0selectorActionCount.0_4eventId.0_1o~-~-~-&dom=&pattr=
2024-03-28 13:19:40 UTC	873	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:40 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=oMQiGFmeeu1pJGGzpN6Dr1Q/OEWe0KYagxd0VjJFH7rl9Vx+Yamiz7nCEaOwngTKE59WSilCwc2VT9rK1VxEZU7NB6R+DJx3WLbxxW6Q7LwzwQcaNuScSJg5oXX8ob0MmPoF45+LsV9a+N/nB14CEuUO5yGM2e8APC8QP9XLA3HD; Expires=Thu, 04 Apr 2024 13:19:40 GMT; Path=/ Set-Cookie: AWSALBTGCORS=oMQiGFmeeu1pJGGzpN6Dr1Q/OEWe0KYagxd0VjJFH7rl9Vx+Yamiz7nCEaOwngTKE59WSilCwc2VT9rK1VxEZU7NB6R+DJx3WLbxxW6Q7LwzwQcaNuScSJg5oXX8ob0MmPoF45+LsV9a+N/nB14CEuUO5yGM2e8APC8QP9XLA3HD; Expires=Thu, 04 Apr 2024 13:19:40 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:40 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	50415	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:43 UTC	1180	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=9fa406fb-8541-4a53-bdc9-8d711b8258a5&sn=3&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 7244 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=oMQiGFmeeu1pJGGzpN6Dr1Q/OEWe0KYagxd0VjJFH7rl9Vx+Yamiz7nCEaOwngTKE59WSilCwc2VT9rK1VxEZU7NB6R+DJx3WLbxxW6Q7LwzwQcaNuScSJg5oXX8ob0MmPoF45+LsV9a+N/nB14CEuUO5yGM2e8APC8QP9XLA3HD
2024-03-28 13:19:43 UTC	7244	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 61 62 6f 75 74 25 32 46 26 73 6e 3d 33 26 70 3d 39 66 61 34 30 36 66 62 2d 38 35 34 31 2d 34 61 35 33 2d 62 64 63 39 2d 38 64 37 31 31 62 38 32 35 38 61 35 26 73 65 67 3d 25 32 46 61 62 6f 75 74 25 32 46 26 73 70 3d 26 70 73 73 6e 3d 30 26 65 3d 6c 75 62 39 68 68 71 77 7e 33 37 7e 2d 7e 45 51 30 78 54 52 45 56 43 56 55 63 36 49 45 56 79 63 6d 39 79 4f 69 42 7a 62 6d 46 77 63 32 68 76 64 43 42 33 59 58 4d 67 64 47 46 72 5a 57 34 67 64 32 68 70 62 47 55 67 5a 47 39 6a 64 57 31 6c 62 6e 51 67 64 32 46 7a 49 47 68 70 5a 47 52 6c 62 69 41 25 33 44 7e 65 76 65 6e 74 49 64 2e 30 5f 33 62 7e 2d 7e 2d 7e 2d 7e 7e 6c 75 62 39 68 68 71 79 7e 33 Data Ascii: v=2&r=https%3A%2F%2Fwww.wellsfargo.com%2Fabout%2F&sn=3&p=9fa406fb-8541-4a53-bdc9-8d711b8258a5&seg=%2Fabout%2F&sp=&pssn=0&e=lub9hhqw~37~-~EQ0xTREVCVUc6IEVycm9yOiBzbmFwc2hvdCB3YXMgdGFrZW4gd2hpbGUgZG9jdW1lbnQgd2FzIGhpZGRlbiA%3D~eventId.0_3b~-~-~-~~lub9hhqy~3
2024-03-28 13:19:43 UTC	815	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:43 GMT Content-Type: application/json Content-Length: 270 Connection: close Set-Cookie: AWSALBTG=WQ5vkCqhEuuiTNxFwyj4H88H4/ia/uHa+/kosMhxqEuaKSrt+j2KmhSm70OLGk/LmlqgUp+0ax/xTTKmXKI1+45wMcRUF/SW5XUsn9NV2mcuKHfNpXDyqoMULOU6HF9xrIqUHRN3QLLoSP02FbMpkAft4s2J0xVHXSWBZOB0rHVq; Expires=Thu, 04 Apr 2024 13:19:43 GMT; Path=/ Set-Cookie: AWSALBTGCORS=WQ5vkCqhEuuiTNxFwyj4H88H4/ia/uHa+/kosMhxqEuaKSrt+j2KmhSm70OLGk/LmlqgUp+0ax/xTTKmXKI1+45wMcRUF/SW5XUsn9NV2mcuKHfNpXDyqoMULOU6HF9xrIqUHRN3QLLoSP02FbMpkAft4s2J0xVHXSWBZOB0rHVq; Expires=Thu, 04 Apr 2024 13:19:43 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:43 UTC	270	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 6e 75 6c 6c 2c 22 75 73 61 67 65 22 3a 7b 22 73 65 73 73 69 6f 6e 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 61 70 69 43 61 6c 6c 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 63 75 73 74 6f 6d 53 65 72 76 65 72 43 61 6c 6c 73 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 64 61 74 61 4c 69 6d 69 74 22 3a 20 34 31 39 34 33 30 34 7d 2c 22 62 6c 6f 63 6b 52 65 63 Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":null,"usage":{"sessionQuotaBreach":false, "apiCallQuotaBreach":false, "customServerCallsBreach":false, "dataLimit": 4194304},"blockRec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	50420	31.13.66.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:43 UTC	811	OUT	GET /tr?id=1578146899100389&ev=CSBB_OLB_Secure_Login_PageView&cd[currency]=USD&cd[value]=0.00&cd[Product]=&cd[Subproduct]=&cd[PageID]=LOGIN&cd[CustomerType]=&cd[CustomerStatus]=n&dpo=LDU&dpoco=0&dpost=0&_rnd=0.06320417006807832 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://connect.secure.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:43 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=93, rtx=0, c=10, mss=1274, tbw=3406, tp=-1, tpl=-1, uplat=1, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 28 Mar 2024 13:19:43 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	50426	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:43 UTC	1032	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=tL8IdZ7QctA26s6msf+Ct4q6acoDx8QwSguP+Yrv1kSHTfY7Gy8OQcg2CtC31a557WObMJzjE+SKzMu7dTu+9SFsNtsMrcyUl1tmsvbB7Zw6zZbzp9iou6Hlrq2igxlEaUO1SJ3g30EfH54beuC5vNKGlotNS9Q3dBnz8/Zjz91B; AWSALBTGCORS=oMQiGFmeeu1pJGGzpN6Dr1Q/OEWe0KYagxd0VjJFH7rl9Vx+Yamiz7nCEaOwngTKE59WSilCwc2VT9rK1VxEZU7NB6R+DJx3WLbxxW6Q7LwzwQcaNuScSJg5oXX8ob0MmPoF45+LsV9a+N/nB14CEuUO5yGM2e8APC8QP9XLA3HD
2024-03-28 13:19:43 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:43 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=6Uect6dGa7ZtIGlNrI9/e4QuIWP644VOPX/zTSVY2ytipGwLgWGrN3BfGPUm4XwIQl1PKXoIJQtBXXXCb+Nhja9oMXxf3jEOTq4D27TD2GwIK5kmxJr+0VwOw2NoSUCwaF1jue0y5ANnDsT5cMWS1+c3rkSHndzDDvdgT07PhDMl; Expires=Thu, 04 Apr 2024 13:19:43 GMT; Path=/ Set-Cookie: AWSALBTGCORS=6Uect6dGa7ZtIGlNrI9/e4QuIWP644VOPX/zTSVY2ytipGwLgWGrN3BfGPUm4XwIQl1PKXoIJQtBXXXCb+Nhja9oMXxf3jEOTq4D27TD2GwIK5kmxJr+0VwOw2NoSUCwaF1jue0y5ANnDsT5cMWS1+c3rkSHndzDDvdgT07PhDMl; Expires=Thu, 04 Apr 2024 13:19:43 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:43 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	50424	142.250.31.148	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:43 UTC	1092	OUT	GET /ddm/activity/src=2549153;type=allv40;cat=all_a012;u1=1120240328061851126288949;u4=LOGIN;u5=n;u8=loginapp;u11=PROD;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ord=7018165804944.119? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://connect.secure.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
2024-03-28 13:19:43 UTC	929	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Location: https://ad.doubleclick.net/ddm/activity/src=2549153;dc_pre=CP-j74KGl4UDFVMRdgYdAY4ITg;type=allv40;cat=all_a012;u1=1120240328061851126288949;u4=LOGIN;u5=n;u8=loginapp;u11=PROD;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ord=7018165804944.119? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	50429	63.140.38.132	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:43 UTC	459	OUT	GET /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=7d57ee8f-2442-4298-8218-7b4c8f4a5dd2 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:43 UTC	418	IN	HTTP/1.1 404 Not Found x-request-id: 7d57ee8f-2442-4298-8218-7b4c8f4a5dd2 vary: Origin date: Thu, 28 Mar 2024 13:19:43 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	50432	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:43 UTC	1100	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=9fa406fb-8541-4a53-bdc9-8d711b8258a5&sn=1&cfg=201c2b80&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=tL8IdZ7QctA26s6msf+Ct4q6acoDx8QwSguP+Yrv1kSHTfY7Gy8OQcg2CtC31a557WObMJzjE+SKzMu7dTu+9SFsNtsMrcyUl1tmsvbB7Zw6zZbzp9iou6Hlrq2igxlEaUO1SJ3g30EfH54beuC5vNKGlotNS9Q3dBnz8/Zjz91B; AWSALBTGCORS=oMQiGFmeeu1pJGGzpN6Dr1Q/OEWe0KYagxd0VjJFH7rl9Vx+Yamiz7nCEaOwngTKE59WSilCwc2VT9rK1VxEZU7NB6R+DJx3WLbxxW6Q7LwzwQcaNuScSJg5oXX8ob0MmPoF45+LsV9a+N/nB14CEuUO5yGM2e8APC8QP9XLA3HD
2024-03-28 13:19:43 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:43 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=24viyQUey6YTZz9SWxEieya961hYXIRGXIBxCPovcIH06JO2IEJ6+4s3XCOv13reAyFgZ2aCidcTELM2fCEy69RcGir1p4HfQlDSi70hCg0ZGlQQ2fb73MH6To5SO6mKVg66uzE4d1W+4SzjZam/xoepGNYWlv8Lqr+UMZSI7ORu; Expires=Thu, 04 Apr 2024 13:19:43 GMT; Path=/ Set-Cookie: AWSALBTGCORS=24viyQUey6YTZz9SWxEieya961hYXIRGXIBxCPovcIH06JO2IEJ6+4s3XCOv13reAyFgZ2aCidcTELM2fCEy69RcGir1p4HfQlDSi70hCg0ZGlQQ2fb73MH6To5SO6mKVg66uzE4d1W+4SzjZam/xoepGNYWlv8Lqr+UMZSI7ORu; Expires=Thu, 04 Apr 2024 13:19:43 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:43 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	50425	172.253.63.149	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:43 UTC	1164	OUT	GET /activityi;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F? HTTP/1.1 Host: 2549153.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
2024-03-28 13:19:43 UTC	1054	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://2549153.fls.doubleclick.net/activityi;dc_pre=CNn08IKGl4UDFSgVdgYdKtkJ0A;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	50431	63.140.38.132	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:43 UTC	459	OUT	GET /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=097b5d70-c89b-4f9f-a889-04c866fba6b7 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:43 UTC	418	IN	HTTP/1.1 404 Not Found x-request-id: 097b5d70-c89b-4f9f-a889-04c866fba6b7 vary: Origin date: Thu, 28 Mar 2024 13:19:43 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	50423	35.163.101.91	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:43 UTC	661	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive Content-Length: 645 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:43 UTC	645	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 33 2e 37 2e 31 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 2f 34 2f 35 3f 36 22 2c 22 74 73 22 3a 31 37 31 31 36 33 31 39 37 33 31 35 39 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 31 2f 37 2f 22 2c 22 61 74 22 3a 30 2c 22 70 70 22 3a 33 2c 22 6d 78 22 3a 7b 22 50 4c 43 22 3a 31 2c 22 46 42 54 22 3a 33 33 37 32 2c 22 44 44 54 22 3a 30 2c 22 44 50 54 22 3a 30 2c 22 50 4c 54 22 3a 33 33 37 32 2c 22 41 52 45 22 3a 30 7d 2c 22 6d 64 22 3a 22 47 45 54 22 2c 22 78 73 22 3a 32 30 30 2c 22 73 69 22 3a 31 33 7d 5d 2c 22 61 69 22 3a 22 38 35 37 39 62 63 32 64 5f 32 30 63 62 5f 33 39 62 61 5f 31 Data Ascii: {"vr":"4.3.7.1","dt":"R","rg":"0","es":[{"eg":"1","et":2,"eu":"0://1/2/3/4/5?6","ts":1711631973159,"mg":"0","au":"0://1/7/","at":0,"pp":3,"mx":{"PLC":1,"FBT":3372,"DDT":0,"DPT":0,"PLT":3372,"ARE":0},"md":"GET","xs":200,"si":13}],"ai":"8579bc2d_20cb_39ba_1
2024-03-28 13:19:43 UTC	1216	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:43 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:27\|g:8843880d-cd3d-4da9-920d-9ddd289e3220; Path=/; Expires=Thu, 28-Mar-2024 13:20:13 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:27\|g:8843880d-cd3d-4da9-920d-9ddd289e3220\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:20:13 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:20:13 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:27\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:20:13 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:27\|i:559461\|e:2; Path=/; Expires=Thu, 28-Mar-2024 13:20:13 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:27\|i:559461\|e:2\|t:1711631983817; Path=/; Expires=Thu, 28-Mar-2024 13:20:13 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	50434	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:43 UTC	1180	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=45f46bb8-25cb-4b71-83f6-d999b86f87f4&sn=1&cfg=201c2b80&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 3221 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=WQ5vkCqhEuuiTNxFwyj4H88H4/ia/uHa+/kosMhxqEuaKSrt+j2KmhSm70OLGk/LmlqgUp+0ax/xTTKmXKI1+45wMcRUF/SW5XUsn9NV2mcuKHfNpXDyqoMULOU6HF9xrIqUHRN3QLLoSP02FbMpkAft4s2J0xVHXSWBZOB0rHVq
2024-03-28 13:19:43 UTC	3221	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 65 73 25 32 46 26 73 6e 3d 31 26 70 3d 34 35 66 34 36 62 62 38 2d 32 35 63 62 2d 34 62 37 31 2d 38 33 66 36 2d 64 39 39 39 62 38 36 66 38 37 66 34 26 73 65 67 3d 25 32 46 65 73 25 32 46 26 73 70 3d 26 65 3d 6c 75 62 39 68 68 6a 32 7e 32 7e 2d 7e 4e 75 5f 6d 6f 6a 6e 64 31 2a 73 5f 31 32 38 30 78 39 30 37 2a 73 63 5f 31 32 38 30 78 31 30 32 34 7e 76 6e 2e 32 5f 56 32 56 73 62 48 4d 67 52 6d 46 79 5a 32 38 67 51 6d 46 75 61 79 42 38 49 46 4e 6c 63 6e 5a 70 59 32 6c 76 63 79 42 47 61 57 35 68 62 6d 4e 70 5a 58 4a 76 63 79 42 35 49 45 4a 68 62 6d 4e 68 49 48 42 76 63 69 42 4a 62 6e 52 6c 63 6d 35 6c 64 41 25 33 44 25 33 44 2a 77 69 6e 64 Data Ascii: v=2&r=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&sn=1&p=45f46bb8-25cb-4b71-83f6-d999b86f87f4&seg=%2Fes%2F&sp=&e=lub9hhj2~2~-~Nu_mojnd1s_1280x907sc_1280x1024~vn.2_V2VsbHMgRmFyZ28gQmFuayB8IFNlcnZpY2lvcyBGaW5hbmNpZXJvcyB5IEJhbmNhIHBvciBJbnRlcm5ldA%3D%3D*wind
2024-03-28 13:19:43 UTC	873	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:43 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=yCW/q4iJeIA3g23llHv3nH1NuKFRUVHiPgtOOOdFw5+eNv+gKevB7g8MzUsZ5XoYiNXPe96VfuV3EJNN+663hM5Zss0LqvPrIJ/C5hWc2DphZa3KzvgOm8+GRXV233Fg+hgSX1USEZ1jeYXjNKYGQVt8PglBFuD5i27ErQIJjame; Expires=Thu, 04 Apr 2024 13:19:43 GMT; Path=/ Set-Cookie: AWSALBTGCORS=yCW/q4iJeIA3g23llHv3nH1NuKFRUVHiPgtOOOdFw5+eNv+gKevB7g8MzUsZ5XoYiNXPe96VfuV3EJNN+663hM5Zss0LqvPrIJ/C5hWc2DphZa3KzvgOm8+GRXV233Fg+hgSX1USEZ1jeYXjNKYGQVt8PglBFuD5i27ErQIJjame; Expires=Thu, 04 Apr 2024 13:19:43 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:43 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	50436	142.250.31.148	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:43 UTC	1126	OUT	GET /ddm/activity/src=2549153;dc_pre=CP-j74KGl4UDFVMRdgYdAY4ITg;type=allv40;cat=all_a012;u1=1120240328061851126288949;u4=LOGIN;u5=n;u8=loginapp;u11=PROD;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ord=7018165804944.119? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://connect.secure.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
2024-03-28 13:19:43 UTC	2513	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"6167772973883700878"}],"aggregatable_trigger_data":[{"filters":{"14":["10294512"]},"key_piece":"0xc8ec2ac939094d13","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xfe68f8457c6c8440","not_filters":{"14":["10294512"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["10294512"]},"key_piece":"0x1d50a1062b2a7c2d","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x8cd2cd9d8ba6edee","not_filters":{"14":["10294512"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"13133049241969220284","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"6167772973883700878","filters":{"14":["10294512"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"6167772973883700878","filters":{"14":["10294512"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"6167772973883700878","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"6167772973883700878","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["2549153"]}} Content-Type: image/png Access-Control-Allow-Origin: * Location: https://adservice.google.com/ddm/fls/z/src=2549153;dc_pre=CP-j74KGl4UDFVMRdgYdAY4ITg;type=allv40;cat=all_a012;u1=1120240328061851126288949;u4=LOGIN;u5=n;u8=loginapp;u11=PROD;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ord=7018165804944.119 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 27-Apr-2024 13:19:43 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	50437	172.253.63.149	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:43 UTC	1198	OUT	GET /activityi;dc_pre=CNn08IKGl4UDFSgVdgYdKtkJ0A;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F? HTTP/1.1 Host: 2549153.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
2024-03-28 13:19:44 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:43 GMT Expires: Thu, 28 Mar 2024 13:19:43 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-28 13:19:44 UTC	555	IN	Data Raw: 32 32 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4e 6e 30 38 49 4b 47 6c 34 55 44 46 53 Data Ascii: 224<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CNn08IKGl4UDFS
2024-03-28 13:19:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	50438	142.251.111.148	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:43 UTC	1083	OUT	GET /activityi;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F? HTTP/1.1 Host: 2549153.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf
2024-03-28 13:19:44 UTC	1076	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://2549153.fls.doubleclick.net/activityi;dc_pre=CJeJmIOGl4UDFeQTdgYdGREMTA;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	50442	142.251.163.155	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:44 UTC	1235	OUT	GET /ddm/fls/z/src=2549153;dc_pre=CP-j74KGl4UDFVMRdgYdAY4ITg;type=allv40;cat=all_a012;u1=1120240328061851126288949;u4=LOGIN;u5=n;u8=loginapp;u11=PROD;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ord=7018165804944.119 HTTP/1.1 Host: adservice.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://connect.secure.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:44 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	50443	142.251.163.155	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:44 UTC	1142	OUT	GET /ddm/fls/z/dc_pre=CNn08IKGl4UDFSgVdgYdKtkJ0A;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:44 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	50445	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:44 UTC	1179	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=403a3102-6806-4b08-ba29-c8d2c2b3d153&sn=4&cfg=201c2b80&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 209 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=yCW/q4iJeIA3g23llHv3nH1NuKFRUVHiPgtOOOdFw5+eNv+gKevB7g8MzUsZ5XoYiNXPe96VfuV3EJNN+663hM5Zss0LqvPrIJ/C5hWc2DphZa3KzvgOm8+GRXV233Fg+hgSX1USEZ1jeYXjNKYGQVt8PglBFuD5i27ErQIJjame
2024-03-28 13:19:44 UTC	209	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 6c 6f 63 61 74 6f 72 25 32 46 26 73 6e 3d 34 26 70 3d 34 30 33 61 33 31 30 32 2d 36 38 30 36 2d 34 62 30 38 2d 62 61 32 39 2d 63 38 64 32 63 32 62 33 64 31 35 33 26 73 65 67 3d 25 32 46 6c 6f 63 61 74 6f 72 25 32 46 26 73 70 3d 26 70 73 73 6e 3d 30 26 65 3d 6c 75 62 39 68 66 33 6e 7e 32 39 7e 2d 7e 4e 68 73 5f 63 33 7e 66 74 2e 30 5f 30 2a 73 65 6c 65 63 74 6f 72 41 63 74 69 6f 6e 43 6f 75 6e 74 2e 30 5f 33 2a 65 76 65 6e 74 49 64 2e 30 5f 31 35 7e 2d 7e 2d 7e 2d 26 64 6f 6d 3d 26 70 61 74 74 72 3d Data Ascii: v=2&r=https%3A%2F%2Fwww.wellsfargo.com%2Flocator%2F&sn=4&p=403a3102-6806-4b08-ba29-c8d2c2b3d153&seg=%2Flocator%2F&sp=&pssn=0&e=lub9hf3n~29~-~Nhs_c3~ft.0_0selectorActionCount.0_3eventId.0_15~-~-~-&dom=&pattr=
2024-03-28 13:19:44 UTC	873	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:44 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=LsfCmqyogN6p6UtsclHvvgD5JXLA3pYqqS3Wdti156uedjEss4rPgU2Om3igFpRY5nLvy4Yv/6jrWorjApqtFdS7ZGWZz+DI5upamT8uR3rkoLjHN2ojB57jLkGiR2xrB6zt4t5bUXIJox9yRkDCWnW2Qe8Yjsy8xJDCVxPe9MOH; Expires=Thu, 04 Apr 2024 13:19:44 GMT; Path=/ Set-Cookie: AWSALBTGCORS=LsfCmqyogN6p6UtsclHvvgD5JXLA3pYqqS3Wdti156uedjEss4rPgU2Om3igFpRY5nLvy4Yv/6jrWorjApqtFdS7ZGWZz+DI5upamT8uR3rkoLjHN2ojB57jLkGiR2xrB6zt4t5bUXIJox9yRkDCWnW2Qe8Yjsy8xJDCVxPe9MOH; Expires=Thu, 04 Apr 2024 13:19:44 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:44 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	50449	69.147.92.11	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:44 UTC	581	OUT	GET /wi/config/.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://connect.secure.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.secure.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:44 UTC	768	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-amz-request-id: XC62C8CESJRVMADV x-amz-id-2: HfCNF8smqJfb+kUiWWERtKWOpTNpCJcn+1kMpekLzfh1teoXl2uaUxAAzTBnsR/yA+zMm01lXqE= Content-Type: application/json Date: Thu, 28 Mar 2024 12:47:47 GMT Server: ATS Referrer-Policy: no-referrer-when-downgrade Cache-Control: public,max-age=3600 Content-Length: 2 Age: 1917 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-28 13:19:44 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	50452	142.251.16.157	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:44 UTC	1218	OUT	GET /pagead/viewthroughconversion/984436569/?random=1711631984110&cv=9&fst=1711631984110&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Servicios%20Financieros%20y%20Banca%20por%20Internet&hn=www.google.com&async=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf; ar_debug=1
2024-03-28 13:19:45 UTC	1119	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/984436569/?random=1711631984110&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Servicios%20Financieros%20y%20Banca%20por%20Internet&async=1&is_vtc=1&cid=CAQSKQB7FLtq8cmscni_Vrr3VC7eBE-4YZJi1Rp-uBv1qnBtlVUWNkR-abHs&random=3080437878&resp=GooglemKTybQhCsO Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	50450	142.251.111.148	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:45 UTC	1129	OUT	GET /activityi;dc_pre=CJeJmIOGl4UDFeQTdgYdGREMTA;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F? HTTP/1.1 Host: 2549153.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf; ar_debug=1
2024-03-28 13:19:45 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:45 GMT Expires: Thu, 28 Mar 2024 13:19:45 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-28 13:19:45 UTC	577	IN	Data Raw: 32 33 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4a 65 4a 6d 49 4f 47 6c 34 55 44 46 65 Data Ascii: 23a<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CJeJmIOGl4UDFe
2024-03-28 13:19:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	50461	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:45 UTC	1100	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=9fa406fb-8541-4a53-bdc9-8d711b8258a5&sn=2&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=24viyQUey6YTZz9SWxEieya961hYXIRGXIBxCPovcIH06JO2IEJ6+4s3XCOv13reAyFgZ2aCidcTELM2fCEy69RcGir1p4HfQlDSi70hCg0ZGlQQ2fb73MH6To5SO6mKVg66uzE4d1W+4SzjZam/xoepGNYWlv8Lqr+UMZSI7ORu; AWSALBTGCORS=LsfCmqyogN6p6UtsclHvvgD5JXLA3pYqqS3Wdti156uedjEss4rPgU2Om3igFpRY5nLvy4Yv/6jrWorjApqtFdS7ZGWZz+DI5upamT8uR3rkoLjHN2ojB57jLkGiR2xrB6zt4t5bUXIJox9yRkDCWnW2Qe8Yjsy8xJDCVxPe9MOH
2024-03-28 13:19:45 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:45 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=RTEYEnNcGjCmxyuIm9NQLJVpcnvByaG6OrYxhJXJeaxf8F5cYiK8jkC6AdjmeIPWZLfskNdw3zvcMWr9upXC0LqrBcpqi2euxMbaaX0h61gn1MKEYzvGLHaf4SqyP32ah/nG82IwYJi+pwWsujW5/ZmZGqfEirPHWatDNLZTXRRj; Expires=Thu, 04 Apr 2024 13:19:45 GMT; Path=/ Set-Cookie: AWSALBTGCORS=RTEYEnNcGjCmxyuIm9NQLJVpcnvByaG6OrYxhJXJeaxf8F5cYiK8jkC6AdjmeIPWZLfskNdw3zvcMWr9upXC0LqrBcpqi2euxMbaaX0h61gn1MKEYzvGLHaf4SqyP32ah/nG82IwYJi+pwWsujW5/ZmZGqfEirPHWatDNLZTXRRj; Expires=Thu, 04 Apr 2024 13:19:45 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:45 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	50459	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:45 UTC	1100	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=2c4120a6-8cbe-4983-b2ed-45670688b5d0&sn=4&cfg=201c2b80&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=24viyQUey6YTZz9SWxEieya961hYXIRGXIBxCPovcIH06JO2IEJ6+4s3XCOv13reAyFgZ2aCidcTELM2fCEy69RcGir1p4HfQlDSi70hCg0ZGlQQ2fb73MH6To5SO6mKVg66uzE4d1W+4SzjZam/xoepGNYWlv8Lqr+UMZSI7ORu; AWSALBTGCORS=LsfCmqyogN6p6UtsclHvvgD5JXLA3pYqqS3Wdti156uedjEss4rPgU2Om3igFpRY5nLvy4Yv/6jrWorjApqtFdS7ZGWZz+DI5upamT8uR3rkoLjHN2ojB57jLkGiR2xrB6zt4t5bUXIJox9yRkDCWnW2Qe8Yjsy8xJDCVxPe9MOH
2024-03-28 13:19:45 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:45 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=dsZmz1jKOYYJwlKR7bvZ5GLh2OuoFhB/2/BbiMok/OgJta2gMx4/2nLwT0DxnERjdDkp2VdlzR/U34MMupnw2OinjrX/V7t5Xqq4YrE0XWMveTGVacYSoou14YuxkhV6ylp+jQ6ADPFbbV2oFwVNCYvXAD5YQE2NoEIyg53fhro0; Expires=Thu, 04 Apr 2024 13:19:45 GMT; Path=/ Set-Cookie: AWSALBTGCORS=dsZmz1jKOYYJwlKR7bvZ5GLh2OuoFhB/2/BbiMok/OgJta2gMx4/2nLwT0DxnERjdDkp2VdlzR/U34MMupnw2OinjrX/V7t5Xqq4YrE0XWMveTGVacYSoou14YuxkhV6ylp+jQ6ADPFbbV2oFwVNCYvXAD5YQE2NoEIyg53fhro0; Expires=Thu, 04 Apr 2024 13:19:45 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:45 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	50458	63.140.38.132	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:45 UTC	451	OUT	GET /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=f9969528-fe00-4a85-9056-cebe4b4a3f85 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:45 UTC	418	IN	HTTP/1.1 404 Not Found x-request-id: f9969528-fe00-4a85-9056-cebe4b4a3f85 vary: Origin date: Thu, 28 Mar 2024 13:19:45 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	50457	63.140.38.132	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:45 UTC	451	OUT	GET /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=82f6936a-61e1-4489-83e1-f802151ff0cd HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:45 UTC	418	IN	HTTP/1.1 404 Not Found x-request-id: 82f6936a-61e1-4489-83e1-f802151ff0cd vary: Origin date: Thu, 28 Mar 2024 13:19:44 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	50464	35.163.101.91	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:45 UTC	681	OUT	GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZD&msg=Assert%20fail%3A%20M50 HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://connect.secure.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:45 UTC	507	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:45 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 expires: 0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:45 UTC	32	IN	Data Raw: 31 61 0d 0a 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b 0d 0a Data Ascii: 1aGIF89a,;
2024-03-28 13:19:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	50465	35.163.101.91	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:45 UTC	681	OUT	GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZD&msg=Assert%20fail%3A%20M51 HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://connect.secure.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:45 UTC	507	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:45 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 expires: 0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:45 UTC	32	IN	Data Raw: 31 61 0d 0a 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b 0d 0a Data Ascii: 1aGIF89a,;
2024-03-28 13:19:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	50469	172.253.62.105	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:45 UTC	1364	OUT	GET /pagead/1p-user-list/984436569/?random=1711631984110&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Servicios%20Financieros%20y%20Banca%20por%20Internet&async=1&is_vtc=1&cid=CAQSKQB7FLtq8cmscni_Vrr3VC7eBE-4YZJi1Rp-uBv1qnBtlVUWNkR-abHs&random=3080437878&resp=GooglemKTybQhCsO HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:45 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	50466	35.163.101.91	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:45 UTC	663	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive Content-Length: 10855 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:45 UTC	10855	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 33 2e 37 2e 31 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 30 22 2c 22 65 74 22 3a 30 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 22 2c 22 74 73 22 3a 31 37 31 31 36 33 31 39 36 38 30 33 33 2c 22 75 64 22 3a 7b 22 43 75 73 74 6f 6d 65 72 53 65 67 6d 65 6e 74 22 3a 22 54 50 42 22 7d 2c 22 6d 63 22 3a 7b 22 50 4c 54 22 3a 38 36 33 34 2c 22 46 42 54 22 3a 31 33 35 31 2c 22 46 45 54 22 3a 37 32 38 33 2c 22 44 52 54 22 3a 37 32 35 38 2c 22 50 52 54 22 3a 32 35 2c 22 44 4f 4d 22 3a 38 36 30 39 2c 22 74 73 22 3a 31 37 31 31 36 33 31 39 36 38 30 33 33 2c 22 50 4c 43 22 3a 31 7d 2c 22 6d 78 22 3a 7b 22 50 4c 54 22 3a 34 32 36 36 2c 22 46 42 54 22 3a 31 30 35 36 2c 22 53 43 54 22 3a Data Ascii: {"vr":"4.3.7.1","dt":"R","rg":"0","es":[{"eg":"0","et":0,"eu":"0://1/2/","ts":1711631968033,"ud":{"CustomerSegment":"TPB"},"mc":{"PLT":8634,"FBT":1351,"FET":7283,"DRT":7258,"PRT":25,"DOM":8609,"ts":1711631968033,"PLC":1},"mx":{"PLT":4266,"FBT":1056,"SCT":
2024-03-28 13:19:45 UTC	1216	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:45 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:27\|g:ff270bc5-4787-45fd-a543-a6136d19382d; Path=/; Expires=Thu, 28-Mar-2024 13:20:15 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:27\|g:ff270bc5-4787-45fd-a543-a6136d19382d\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:20:15 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:20:15 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:27\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:20:15 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:27\|i:559461\|e:2; Path=/; Expires=Thu, 28-Mar-2024 13:20:15 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:27\|i:559461\|e:2\|t:1711631985714; Path=/; Expires=Thu, 28-Mar-2024 13:20:15 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	50471	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:45 UTC	1100	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=9fa406fb-8541-4a53-bdc9-8d711b8258a5&sn=3&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=RTEYEnNcGjCmxyuIm9NQLJVpcnvByaG6OrYxhJXJeaxf8F5cYiK8jkC6AdjmeIPWZLfskNdw3zvcMWr9upXC0LqrBcpqi2euxMbaaX0h61gn1MKEYzvGLHaf4SqyP32ah/nG82IwYJi+pwWsujW5/ZmZGqfEirPHWatDNLZTXRRj; AWSALBTGCORS=RTEYEnNcGjCmxyuIm9NQLJVpcnvByaG6OrYxhJXJeaxf8F5cYiK8jkC6AdjmeIPWZLfskNdw3zvcMWr9upXC0LqrBcpqi2euxMbaaX0h61gn1MKEYzvGLHaf4SqyP32ah/nG82IwYJi+pwWsujW5/ZmZGqfEirPHWatDNLZTXRRj
2024-03-28 13:19:45 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:45 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=yZqdnHssHjBtYxMq3Fq1k5LjWy9rVQJVeQeVOoUcFu6lklL2d7z3+X0VPgEdU7ipX/c2UG38MvDRBYrhzTmJzmFSLclD4VHqM200fdSn+he99iGozXDeqPvY+M+gcxBbzbUhkP+mzNEQxfUtgmmvRyENQ1fDl0TbmT2aFHOPWqz0; Expires=Thu, 04 Apr 2024 13:19:45 GMT; Path=/ Set-Cookie: AWSALBTGCORS=yZqdnHssHjBtYxMq3Fq1k5LjWy9rVQJVeQeVOoUcFu6lklL2d7z3+X0VPgEdU7ipX/c2UG38MvDRBYrhzTmJzmFSLclD4VHqM200fdSn+he99iGozXDeqPvY+M+gcxBbzbUhkP+mzNEQxfUtgmmvRyENQ1fDl0TbmT2aFHOPWqz0; Expires=Thu, 04 Apr 2024 13:19:45 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:45 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	50472	157.240.229.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:45 UTC	562	OUT	GET /tr?id=1578146899100389&ev=CSBB_OLB_Secure_Login_PageView&cd[currency]=USD&cd[value]=0.00&cd[Product]=&cd[Subproduct]=&cd[PageID]=LOGIN&cd[CustomerType]=&cd[CustomerStatus]=n&dpo=LDU&dpoco=0&dpost=0&_rnd=0.06320417006807832 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:45 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1274, tbw=3406, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 28 Mar 2024 13:19:45 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	50476	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:45 UTC	1100	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=45f46bb8-25cb-4b71-83f6-d999b86f87f4&sn=1&cfg=201c2b80&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=RTEYEnNcGjCmxyuIm9NQLJVpcnvByaG6OrYxhJXJeaxf8F5cYiK8jkC6AdjmeIPWZLfskNdw3zvcMWr9upXC0LqrBcpqi2euxMbaaX0h61gn1MKEYzvGLHaf4SqyP32ah/nG82IwYJi+pwWsujW5/ZmZGqfEirPHWatDNLZTXRRj; AWSALBTGCORS=RTEYEnNcGjCmxyuIm9NQLJVpcnvByaG6OrYxhJXJeaxf8F5cYiK8jkC6AdjmeIPWZLfskNdw3zvcMWr9upXC0LqrBcpqi2euxMbaaX0h61gn1MKEYzvGLHaf4SqyP32ah/nG82IwYJi+pwWsujW5/ZmZGqfEirPHWatDNLZTXRRj
2024-03-28 13:19:45 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:45 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=sQ2gjzU0PGbHOKTg3SQmBmHK3vWuarFVrBmAAnmMcpo9pkdeylAqS80mRKaO1MmEc8vJKmxjRtKQ8xaaqp1MMq4kill2FZlITAbydyCTKFirQS4DgGCAxHvcVpTKaP9cGD74qp7ShXmGzywDUGKmNDPK6bdCmBa+IfA6CFTZQIKI; Expires=Thu, 04 Apr 2024 13:19:45 GMT; Path=/ Set-Cookie: AWSALBTGCORS=sQ2gjzU0PGbHOKTg3SQmBmHK3vWuarFVrBmAAnmMcpo9pkdeylAqS80mRKaO1MmEc8vJKmxjRtKQ8xaaqp1MMq4kill2FZlITAbydyCTKFirQS4DgGCAxHvcVpTKaP9cGD74qp7ShXmGzywDUGKmNDPK6bdCmBa+IfA6CFTZQIKI; Expires=Thu, 04 Apr 2024 13:19:45 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:45 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	50481	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:45 UTC	1100	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=403a3102-6806-4b08-ba29-c8d2c2b3d153&sn=4&cfg=201c2b80&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=RTEYEnNcGjCmxyuIm9NQLJVpcnvByaG6OrYxhJXJeaxf8F5cYiK8jkC6AdjmeIPWZLfskNdw3zvcMWr9upXC0LqrBcpqi2euxMbaaX0h61gn1MKEYzvGLHaf4SqyP32ah/nG82IwYJi+pwWsujW5/ZmZGqfEirPHWatDNLZTXRRj; AWSALBTGCORS=RTEYEnNcGjCmxyuIm9NQLJVpcnvByaG6OrYxhJXJeaxf8F5cYiK8jkC6AdjmeIPWZLfskNdw3zvcMWr9upXC0LqrBcpqi2euxMbaaX0h61gn1MKEYzvGLHaf4SqyP32ah/nG82IwYJi+pwWsujW5/ZmZGqfEirPHWatDNLZTXRRj
2024-03-28 13:19:46 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:46 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=uTjHMLaLxfjcAZ6RCPdCEtds2WtakOvISjUTWtC127mTH29h7LpTLZYGCS8EsDNa6jAdGhc2IMVbL6W59cHGcqZnBEYDlsFnaXhgd5ydeomcCfmi6kyMFiP56CDXwmnxCg0d62aEJYC8CjSM56/weC9aWZ6QjMSUljUhAM0bN/sI; Expires=Thu, 04 Apr 2024 13:19:46 GMT; Path=/ Set-Cookie: AWSALBTGCORS=uTjHMLaLxfjcAZ6RCPdCEtds2WtakOvISjUTWtC127mTH29h7LpTLZYGCS8EsDNa6jAdGhc2IMVbL6W59cHGcqZnBEYDlsFnaXhgd5ydeomcCfmi6kyMFiP56CDXwmnxCg0d62aEJYC8CjSM56/weC9aWZ6QjMSUljUhAM0bN/sI; Expires=Thu, 04 Apr 2024 13:19:46 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:46 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	50475	34.211.102.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:45 UTC	575	OUT	GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:a8df1606-5095-4f73-b978-a2a7710d5b72\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631972003
2024-03-28 13:19:46 UTC	1500	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:46 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:a8df1606-5095-4f73-b978-a2a7710d5b72\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631972003; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:5da4e83e-e6d9-4808-82e3-5d09213116f7; Path=/; Expires=Thu, 28-Mar-2024 13:20:16 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:5da4e83e-e6d9-4808-82e3-5d09213116f7\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:20:16 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:20:16 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:20:16 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2; Path=/; Expires=Thu, 28-Mar-2024 13:20:16 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631986238; Path=/; Expires=Thu, 28-Mar-2024 13:20:16 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	50479	142.251.167.157	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:45 UTC	942	OUT	GET /ddm/fls/z/dc_pre=CNn08IKGl4UDFSgVdgYdKtkJ0A;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:46 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:46 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	50486	142.251.16.148	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:46 UTC	891	OUT	GET /activityi;dc_pre=CJeJmIOGl4UDFeQTdgYdGREMTA;register_conversion=1;src=2549153;type=allv40;cat=all_a00;ord=3224774758673;gtm=2od8g0;auiddc=76357132.1711631948;u1=1120240328061851126288949;u5=n;u8=WWW;u11=PRODUCTION;u18=33955380241426191774167127150413392378;u19=GA1.2.1511061535.1711631950;u23=DESKTOP;ps=1;~oref=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F? HTTP/1.1 Host: 2549153.fls.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf; ar_debug=1
2024-03-28 13:19:46 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:46 GMT Expires: Thu, 28 Mar 2024 13:19:46 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-28 13:19:46 UTC	577	IN	Data Raw: 32 33 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4a 65 4a 6d 49 4f 47 6c 34 55 44 46 65 Data Ascii: 23a<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CJeJmIOGl4UDFe
2024-03-28 13:19:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	50492	34.211.102.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:46 UTC	604	OUT	GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZD&msg=Assert%20fail%3A%20M50 HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:a8df1606-5095-4f73-b978-a2a7710d5b72\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631972003
2024-03-28 13:19:46 UTC	507	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:46 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 expires: 0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:46 UTC	32	IN	Data Raw: 31 61 0d 0a 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b 0d 0a Data Ascii: 1aGIF89a,;
2024-03-28 13:19:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	50491	34.211.102.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:46 UTC	604	OUT	GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PZD&msg=Assert%20fail%3A%20M51 HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:a8df1606-5095-4f73-b978-a2a7710d5b72\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631972003
2024-03-28 13:19:46 UTC	507	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:46 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 expires: 0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:46 UTC	32	IN	Data Raw: 31 61 0d 0a 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b 0d 0a Data Ascii: 1aGIF89a,;
2024-03-28 13:19:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	50493	172.253.115.104	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:46 UTC	1126	OUT	GET /pagead/1p-user-list/984436569/?random=1711631984110&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&tiba=Wells%20Fargo%20Bank%20%7C%20Servicios%20Financieros%20y%20Banca%20por%20Internet&async=1&is_vtc=1&cid=CAQSKQB7FLtq8cmscni_Vrr3VC7eBE-4YZJi1Rp-uBv1qnBtlVUWNkR-abHs&random=3080437878&resp=GooglemKTybQhCsO HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:46 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:46 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	50495	34.211.102.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:46 UTC	575	OUT	GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:5da4e83e-e6d9-4808-82e3-5d09213116f7\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631986238
2024-03-28 13:19:47 UTC	1500	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:46 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:5da4e83e-e6d9-4808-82e3-5d09213116f7\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631986238; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:b14d05b9-5eab-4a43-8130-c3727d83728a; Path=/; Expires=Thu, 28-Mar-2024 13:20:16 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:b14d05b9-5eab-4a43-8130-c3727d83728a\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:20:16 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:20:16 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:20:16 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2; Path=/; Expires=Thu, 28-Mar-2024 13:20:16 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631986995; Path=/; Expires=Thu, 28-Mar-2024 13:20:16 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	50503	142.251.16.157	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:47 UTC	1288	OUT	GET /pagead/viewthroughconversion/984436569/?random=1711631986884&cv=9&fst=1711631986884&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent%3Forigin%3Dcob%26LOB%3DCONS&tiba=Inicie%20sesi%C3%B3n%20para%20ver%20sus%20cuentas%20personales%20%7C%20Wells%20Fargo&hn=www.google.com&async=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://connect.secure.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf; ar_debug=1
2024-03-28 13:19:47 UTC	1178	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/984436569/?random=1711631986884&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent%3Forigin%3Dcob%26LOB%3DCONS&tiba=Inicie%20sesi%C3%B3n%20para%20ver%20sus%20cuentas%20personales%20%7C%20Wells%20Fargo&async=1&is_vtc=1&cid=CAQSKQB7FLtq9lany4GR9CtYjT6o-53gwdlTAU-fiNp_pm27b6paBKJ-zMZP&random=3270536526&resp=GooglemKTybQhCsO Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	50505	172.253.62.105	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:48 UTC	1434	OUT	GET /pagead/1p-user-list/984436569/?random=1711631986884&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent%3Forigin%3Dcob%26LOB%3DCONS&tiba=Inicie%20sesi%C3%B3n%20para%20ver%20sus%20cuentas%20personales%20%7C%20Wells%20Fargo&async=1&is_vtc=1&cid=CAQSKQB7FLtq9lany4GR9CtYjT6o-53gwdlTAU-fiNp_pm27b6paBKJ-zMZP&random=3270536526&resp=GooglemKTybQhCsO HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://connect.secure.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:48 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	50507	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:48 UTC	1180	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=9fa406fb-8541-4a53-bdc9-8d711b8258a5&sn=4&cfg=201c2b80&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 1484 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=uTjHMLaLxfjcAZ6RCPdCEtds2WtakOvISjUTWtC127mTH29h7LpTLZYGCS8EsDNa6jAdGhc2IMVbL6W59cHGcqZnBEYDlsFnaXhgd5ydeomcCfmi6kyMFiP56CDXwmnxCg0d62aEJYC8CjSM56/weC9aWZ6QjMSUljUhAM0bN/sI
2024-03-28 13:19:48 UTC	1484	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 61 62 6f 75 74 25 32 46 26 73 6e 3d 34 26 70 3d 39 66 61 34 30 36 66 62 2d 38 35 34 31 2d 34 61 35 33 2d 62 64 63 39 2d 38 64 37 31 31 62 38 32 35 38 61 35 26 73 65 67 3d 25 32 46 61 62 6f 75 74 25 32 46 26 73 70 3d 26 70 73 73 6e 3d 30 26 65 3d 6c 75 62 39 68 6d 36 33 7e 32 39 7e 2d 7e 4e 68 62 5f 63 63 2a 67 71 5f 63 65 7e 66 74 2e 30 5f 39 79 2a 73 65 6c 65 63 74 6f 72 41 63 74 69 6f 6e 43 6f 75 6e 74 2e 30 5f 35 2a 65 76 65 6e 74 49 64 2e 30 5f 34 66 7e 2d 7e 2d 7e 2d 7e 7e 6c 75 62 39 68 6c 78 68 7e 32 32 7e 2d 7e 4e 73 6e 5f 35 2a 6d 5f 47 45 54 2a 75 5f 4c 32 46 7a 63 32 56 30 63 79 39 70 62 57 46 6e 5a 58 4d 76 5a 32 78 76 59 Data Ascii: v=2&r=https%3A%2F%2Fwww.wellsfargo.com%2Fabout%2F&sn=4&p=9fa406fb-8541-4a53-bdc9-8d711b8258a5&seg=%2Fabout%2F&sp=&pssn=0&e=lub9hm63~29~-~Nhb_ccgq_ce~ft.0_9yselectorActionCount.0_5eventId.0_4f~-~-~-~~lub9hlxh~22~-~Nsn_5m_GET*u_L2Fzc2V0cy9pbWFnZXMvZ2xvY
2024-03-28 13:19:48 UTC	873	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:48 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=eLZHPBFb2ABev389ZVSZbJuWhRuBDqugH7G72CrFu1NsI4yZk2oPvzpqGtZq92gUOxkh4t5vhKTpU7Xx0hxAJi1M0t4PeOu2RoHC/XZAq/ZLnxSLFFNoaahTu8gv8qAkscKrdrXF4HXFToMqZEBa4WXFzbcaeJ4Nbkd+KVX3CFAL; Expires=Thu, 04 Apr 2024 13:19:48 GMT; Path=/ Set-Cookie: AWSALBTGCORS=eLZHPBFb2ABev389ZVSZbJuWhRuBDqugH7G72CrFu1NsI4yZk2oPvzpqGtZq92gUOxkh4t5vhKTpU7Xx0hxAJi1M0t4PeOu2RoHC/XZAq/ZLnxSLFFNoaahTu8gv8qAkscKrdrXF4HXFToMqZEBa4WXFzbcaeJ4Nbkd+KVX3CFAL; Expires=Thu, 04 Apr 2024 13:19:48 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:48 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	50515	172.253.115.104	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:48 UTC	1185	OUT	GET /pagead/1p-user-list/984436569/?random=1711631986884&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent%3Forigin%3Dcob%26LOB%3DCONS&tiba=Inicie%20sesi%C3%B3n%20para%20ver%20sus%20cuentas%20personales%20%7C%20Wells%20Fargo&async=1&is_vtc=1&cid=CAQSKQB7FLtq9lany4GR9CtYjT6o-53gwdlTAU-fiNp_pm27b6paBKJ-zMZP&random=3270536526&resp=GooglemKTybQhCsO HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:19:49 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:19:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	50516	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:48 UTC	1100	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=9fa406fb-8541-4a53-bdc9-8d711b8258a5&sn=4&cfg=201c2b80&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=uTjHMLaLxfjcAZ6RCPdCEtds2WtakOvISjUTWtC127mTH29h7LpTLZYGCS8EsDNa6jAdGhc2IMVbL6W59cHGcqZnBEYDlsFnaXhgd5ydeomcCfmi6kyMFiP56CDXwmnxCg0d62aEJYC8CjSM56/weC9aWZ6QjMSUljUhAM0bN/sI; AWSALBTGCORS=eLZHPBFb2ABev389ZVSZbJuWhRuBDqugH7G72CrFu1NsI4yZk2oPvzpqGtZq92gUOxkh4t5vhKTpU7Xx0hxAJi1M0t4PeOu2RoHC/XZAq/ZLnxSLFFNoaahTu8gv8qAkscKrdrXF4HXFToMqZEBa4WXFzbcaeJ4Nbkd+KVX3CFAL
2024-03-28 13:19:49 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:48 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=TnF5e2rMlbmJeFh0q/iOQI4TwDwmf+cUtBRWDB9A8ZctjRW9kcKUVjmFaZJrqDC4JMnaUUiwgEcjZ8RBuMdGriHOBSbjXjkYjXZ+rWAFsDMDRRkxf5SpUoC/bwfXnYgndJXwI2jsqOpXYIq4j9GpG34dV3BZ6p1ioe/O7ZqkR8C2; Expires=Thu, 04 Apr 2024 13:19:48 GMT; Path=/ Set-Cookie: AWSALBTGCORS=TnF5e2rMlbmJeFh0q/iOQI4TwDwmf+cUtBRWDB9A8ZctjRW9kcKUVjmFaZJrqDC4JMnaUUiwgEcjZ8RBuMdGriHOBSbjXjkYjXZ+rWAFsDMDRRkxf5SpUoC/bwfXnYgndJXwI2jsqOpXYIq4j9GpG34dV3BZ6p1ioe/O7ZqkR8C2; Expires=Thu, 04 Apr 2024 13:19:48 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:49 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	50513	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:48 UTC	1062	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://connect.secure.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.secure.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=uTjHMLaLxfjcAZ6RCPdCEtds2WtakOvISjUTWtC127mTH29h7LpTLZYGCS8EsDNa6jAdGhc2IMVbL6W59cHGcqZnBEYDlsFnaXhgd5ydeomcCfmi6kyMFiP56CDXwmnxCg0d62aEJYC8CjSM56/weC9aWZ6QjMSUljUhAM0bN/sI
2024-03-28 13:19:49 UTC	1046	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:49 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=4WPX5g9CiMDGu9PxQQ4C/Gd9eatsWm7QOj34v2hA49IlIctPgqyJuuNAbn4DqHs6jlbZS0sxEgtoz6xTXHAVuNycZFWzIa3VtwUkZOWIVDFHZb45NiDIvxwVTM89CfnsE8RuePxZ97Xu6Ci2F7mdmhR5K5LoDaiva4OUcu0FvRGW; Expires=Thu, 04 Apr 2024 13:19:48 GMT; Path=/ Set-Cookie: AWSALBTGCORS=4WPX5g9CiMDGu9PxQQ4C/Gd9eatsWm7QOj34v2hA49IlIctPgqyJuuNAbn4DqHs6jlbZS0sxEgtoz6xTXHAVuNycZFWzIa3VtwUkZOWIVDFHZb45NiDIvxwVTM89CfnsE8RuePxZ97Xu6Ci2F7mdmhR5K5LoDaiva4OUcu0FvRGW; Expires=Thu, 04 Apr 2024 13:19:48 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://connect.secure.wellsfargo.com vary: origin access-control-allow-credentials: true set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:49 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	50519	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:49 UTC	1032	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=TnF5e2rMlbmJeFh0q/iOQI4TwDwmf+cUtBRWDB9A8ZctjRW9kcKUVjmFaZJrqDC4JMnaUUiwgEcjZ8RBuMdGriHOBSbjXjkYjXZ+rWAFsDMDRRkxf5SpUoC/bwfXnYgndJXwI2jsqOpXYIq4j9GpG34dV3BZ6p1ioe/O7ZqkR8C2; AWSALBTGCORS=4WPX5g9CiMDGu9PxQQ4C/Gd9eatsWm7QOj34v2hA49IlIctPgqyJuuNAbn4DqHs6jlbZS0sxEgtoz6xTXHAVuNycZFWzIa3VtwUkZOWIVDFHZb45NiDIvxwVTM89CfnsE8RuePxZ97Xu6Ci2F7mdmhR5K5LoDaiva4OUcu0FvRGW
2024-03-28 13:19:49 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:49 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=uaQV2bRN6pwy39tpBnciYeNP1bEOL7l624cAHhaoMgIeiqiSvpezKqCqqIGtC44D2R0qSiFX9zo7j5W0Woj51nQf4Jt+t69QS217naXWqnva5hetVFkIYQUzgUeVlAvU48O3+p1MQ4Qma3mMJnoQw5ASuBgfsADNHtFEE8CGv7uT; Expires=Thu, 04 Apr 2024 13:19:49 GMT; Path=/ Set-Cookie: AWSALBTGCORS=uaQV2bRN6pwy39tpBnciYeNP1bEOL7l624cAHhaoMgIeiqiSvpezKqCqqIGtC44D2R0qSiFX9zo7j5W0Woj51nQf4Jt+t69QS217naXWqnva5hetVFkIYQUzgUeVlAvU48O3+p1MQ4Qma3mMJnoQw5ASuBgfsADNHtFEE8CGv7uT; Expires=Thu, 04 Apr 2024 13:19:49 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:49 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	50521	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:49 UTC	1181	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=45f46bb8-25cb-4b71-83f6-d999b86f87f4&sn=2&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 39275 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=4WPX5g9CiMDGu9PxQQ4C/Gd9eatsWm7QOj34v2hA49IlIctPgqyJuuNAbn4DqHs6jlbZS0sxEgtoz6xTXHAVuNycZFWzIa3VtwUkZOWIVDFHZb45NiDIvxwVTM89CfnsE8RuePxZ97Xu6Ci2F7mdmhR5K5LoDaiva4OUcu0FvRGW
2024-03-28 13:19:49 UTC	16384	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 65 73 25 32 46 26 73 6e 3d 32 26 70 3d 34 35 66 34 36 62 62 38 2d 32 35 63 62 2d 34 62 37 31 2d 38 33 66 36 2d 64 39 39 39 62 38 36 66 38 37 66 34 26 73 65 67 3d 25 32 46 65 73 25 32 46 26 73 70 3d 26 70 73 73 6e 3d 30 26 65 3d 6c 75 62 39 68 68 6a 32 7e 39 31 7e 2d 7e 4e 73 6e 5f 30 2a 72 5f 2a 63 5f 59 6d 31 66 63 33 6f 39 4f 55 4d 78 4e 44 5a 45 4d 45 4d 32 4f 55 55 31 4f 55 59 79 4d 7a 4d 7a 4f 54 4a 43 52 45 5a 47 4d 45 59 30 52 6b 55 77 4f 44 64 25 32 42 57 55 46 42 55 55 31 33 4f 44 42 47 4c 79 39 4f 4d 56 67 72 54 30 46 52 51 55 46 55 63 47 73 79 61 46 4a 6b 63 56 42 42 63 55 74 43 52 69 38 34 59 31 49 79 57 45 56 30 4e 46 45 Data Ascii: v=2&r=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&sn=2&p=45f46bb8-25cb-4b71-83f6-d999b86f87f4&seg=%2Fes%2F&sp=&pssn=0&e=lub9hhj2~91~-~Nsn_0r_c_Ym1fc3o9OUMxNDZEMEM2OUU1OUYyMzMzOTJCREZGMEY0RkUwODd%2BWUFBUU13ODBGLy9OMVgrT0FRQUFUcGsyaFJkcVBBcUtCRi84Y1IyWEV0NFE
2024-03-28 13:19:49 UTC	16384	OUT	Data Raw: 49 47 51 64 4f 55 6c 43 77 6b 66 5a 41 6f 65 4b 51 6c 44 50 32 34 43 63 41 4d 34 64 34 6f 30 49 31 4d 63 6a 6b 4d 61 34 47 4a 25 32 46 53 44 4d 25 32 46 79 61 7a 6f 32 58 42 38 71 61 66 79 48 34 55 76 4c 48 42 6e 41 72 4a 65 58 38 43 6b 72 4e 54 54 4a 6d 36 42 4e 4e 6f 32 32 61 47 68 75 54 34 55 61 56 43 75 25 32 46 70 6f 6d 55 72 6d 35 31 42 32 4c 4d 39 71 75 6b 6e 37 4b 53 6a 4f 53 62 77 63 34 67 7a 37 51 66 77 72 43 4b 32 6b 42 25 32 46 32 46 53 64 55 51 64 69 53 25 32 46 33 52 67 4b 52 44 75 34 62 43 55 53 4d 4e 4b 48 33 6a 6a 48 36 48 51 51 55 46 78 6a 7a 49 56 32 75 73 48 41 4b 5a 36 52 47 34 63 74 57 6f 76 4b 53 7a 41 50 59 57 6d 54 71 35 76 68 61 4c 39 62 73 54 6c 70 57 74 70 4f 57 46 63 4d 61 69 6a 58 6f 75 58 73 47 41 6d 6a 43 69 54 44 75 72 73 Data Ascii: IGQdOUlCwkfZAoeKQlDP24CcAM4d4o0I1McjkMa4GJ%2FSDM%2Fyazo2XB8qafyH4UvLHBnArJeX8CkrNTTJm6BNNo22aGhuT4UaVCu%2FpomUrm51B2LM9qukn7KSjOSbwc4gz7QfwrCK2kB%2F2FSdUQdiS%2F3RgKRDu4bCUSMNKH3jjH6HQQUFxjzIV2usHAKZ6RG4ctWovKSzAPYWmTq5vhaL9bsTlpWtpOWFcMaijXouXsGAmjCiTDurs
2024-03-28 13:19:49 UTC	6507	OUT	Data Raw: 32 42 53 31 70 72 54 66 39 48 61 54 6c 6f 72 32 6a 25 32 42 48 30 6c 71 30 61 6c 35 6b 63 46 6f 57 57 47 4d 6e 65 7a 43 45 32 63 7a 52 75 5a 25 32 46 34 6d 63 59 64 45 7a 38 6d 36 33 39 71 34 76 66 53 43 7a 35 53 31 77 75 36 57 63 30 4e 69 4a 39 6c 6a 43 46 25 32 42 6c 6a 57 4f 25 32 42 41 6b 57 78 6b 48 45 7a 31 61 47 45 72 25 32 46 4b 5a 68 54 4e 74 63 25 32 42 44 25 32 42 4e 6c 57 44 25 32 46 47 44 51 35 70 25 32 42 68 73 51 50 70 71 58 25 32 42 69 25 32 46 68 31 45 44 39 45 72 4d 32 49 6e 35 25 32 46 42 4b 54 74 4b 39 43 41 6e 77 63 30 59 49 71 67 4f 4a 49 4c 77 6a 6e 32 6e 52 46 43 64 59 70 72 6f 54 30 34 45 58 77 52 78 51 75 59 52 57 62 5a 54 51 58 30 54 4b 67 68 4c 73 34 64 54 51 58 57 71 79 47 4f 6f 49 4c 79 76 6a 71 47 43 38 4c 34 25 32 42 6c 41 Data Ascii: 2BS1prTf9HaTlor2j%2BH0lq0al5kcFoWWGMnezCE2czRuZ%2F4mcYdEz8m639q4vfSCz5S1wu6Wc0NiJ9ljCF%2BljWO%2BAkWxkHEz1aGEr%2FKZhTNtc%2BD%2BNlWD%2FGDQ5p%2BhsQPpqX%2Bi%2Fh1ED9ErM2In5%2FBKTtK9CAnwc0YIqgOJILwjn2nRFCdYproT04EXwRxQuYRWbZTQX0TKghLs4dTQXWqyGOoILyvjqGC8L4%2BlA
2024-03-28 13:19:49 UTC	815	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:49 GMT Content-Type: application/json Content-Length: 270 Connection: close Set-Cookie: AWSALBTG=AKYdH/RKmPhDsJixdujGjmv6fi0Lnb3qJFGACUQtT2JzBFMUabTQv1Y68v++g1tlfDDQCNjlIbYFfoOWyiSfUFiGnQmZEXvmj6mhrqsvVVzBtSTLl57EOhcD4WbDhv6HON0P2/IsycXnc/B0Rl/GByMjXkjA8821oXT4gik7l9Mn; Expires=Thu, 04 Apr 2024 13:19:49 GMT; Path=/ Set-Cookie: AWSALBTGCORS=AKYdH/RKmPhDsJixdujGjmv6fi0Lnb3qJFGACUQtT2JzBFMUabTQv1Y68v++g1tlfDDQCNjlIbYFfoOWyiSfUFiGnQmZEXvmj6mhrqsvVVzBtSTLl57EOhcD4WbDhv6HON0P2/IsycXnc/B0Rl/GByMjXkjA8821oXT4gik7l9Mn; Expires=Thu, 04 Apr 2024 13:19:49 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:49 UTC	270	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 6e 75 6c 6c 2c 22 75 73 61 67 65 22 3a 7b 22 73 65 73 73 69 6f 6e 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 61 70 69 43 61 6c 6c 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 63 75 73 74 6f 6d 53 65 72 76 65 72 43 61 6c 6c 73 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 64 61 74 61 4c 69 6d 69 74 22 3a 20 34 31 39 34 33 30 34 7d 2c 22 62 6c 6f 63 6b 52 65 63 Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":null,"usage":{"sessionQuotaBreach":false, "apiCallQuotaBreach":false, "customServerCallsBreach":false, "dataLimit": 4194304},"blockRec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	50520	35.163.101.91	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:49 UTC	661	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive Content-Length: 643 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:49 UTC	643	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 33 2e 37 2e 31 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 2f 34 2f 35 3f 36 22 2c 22 74 73 22 3a 31 37 31 31 36 33 31 39 38 32 31 34 39 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 31 2f 37 2f 22 2c 22 61 74 22 3a 30 2c 22 70 70 22 3a 33 2c 22 6d 78 22 3a 7b 22 50 4c 43 22 3a 31 2c 22 46 42 54 22 3a 39 32 30 2c 22 44 44 54 22 3a 30 2c 22 44 50 54 22 3a 30 2c 22 50 4c 54 22 3a 39 32 30 2c 22 41 52 45 22 3a 30 7d 2c 22 6d 64 22 3a 22 47 45 54 22 2c 22 78 73 22 3a 32 30 30 2c 22 73 69 22 3a 31 34 7d 5d 2c 22 61 69 22 3a 22 38 35 37 39 62 63 32 64 5f 32 30 63 62 5f 33 39 62 61 5f 31 64 32 Data Ascii: {"vr":"4.3.7.1","dt":"R","rg":"0","es":[{"eg":"1","et":2,"eu":"0://1/2/3/4/5?6","ts":1711631982149,"mg":"0","au":"0://1/7/","at":0,"pp":3,"mx":{"PLC":1,"FBT":920,"DDT":0,"DPT":0,"PLT":920,"ARE":0},"md":"GET","xs":200,"si":14}],"ai":"8579bc2d_20cb_39ba_1d2
2024-03-28 13:19:50 UTC	1216	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:50 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:27\|g:c72d0ecb-c850-4a74-8629-65a4224829ef; Path=/; Expires=Thu, 28-Mar-2024 13:20:20 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:27\|g:c72d0ecb-c850-4a74-8629-65a4224829ef\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:20:20 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:20:20 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:27\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:20:20 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:27\|i:559461\|e:4; Path=/; Expires=Thu, 28-Mar-2024 13:20:20 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:27\|i:559461\|e:4\|t:1711631990017; Path=/; Expires=Thu, 28-Mar-2024 13:20:20 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	50526	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:50 UTC	1100	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=45f46bb8-25cb-4b71-83f6-d999b86f87f4&sn=2&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=uaQV2bRN6pwy39tpBnciYeNP1bEOL7l624cAHhaoMgIeiqiSvpezKqCqqIGtC44D2R0qSiFX9zo7j5W0Woj51nQf4Jt+t69QS217naXWqnva5hetVFkIYQUzgUeVlAvU48O3+p1MQ4Qma3mMJnoQw5ASuBgfsADNHtFEE8CGv7uT; AWSALBTGCORS=AKYdH/RKmPhDsJixdujGjmv6fi0Lnb3qJFGACUQtT2JzBFMUabTQv1Y68v++g1tlfDDQCNjlIbYFfoOWyiSfUFiGnQmZEXvmj6mhrqsvVVzBtSTLl57EOhcD4WbDhv6HON0P2/IsycXnc/B0Rl/GByMjXkjA8821oXT4gik7l9Mn
2024-03-28 13:19:50 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:50 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=bZQ/tK7tydwGf95VdJbmQZurKeYoR8CoaVIN6qcMA2+uxqJGRy40T9I0vZRKYxHOvTEKkWcLvv3jjY69Rf9280xmcR6DQRXwpUeE68XSdM9G3x4Cy0lfMxirNOLh4eS/czb78h2fCbNaboYLxu47Djs5ewVpeBB+W6JQycISteeP; Expires=Thu, 04 Apr 2024 13:19:50 GMT; Path=/ Set-Cookie: AWSALBTGCORS=bZQ/tK7tydwGf95VdJbmQZurKeYoR8CoaVIN6qcMA2+uxqJGRy40T9I0vZRKYxHOvTEKkWcLvv3jjY69Rf9280xmcR6DQRXwpUeE68XSdM9G3x4Cy0lfMxirNOLh4eS/czb78h2fCbNaboYLxu47Djs5ewVpeBB+W6JQycISteeP; Expires=Thu, 04 Apr 2024 13:19:50 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:50 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50527	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:50 UTC	1180	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=45f46bb8-25cb-4b71-83f6-d999b86f87f4&sn=3&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 9232 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=AKYdH/RKmPhDsJixdujGjmv6fi0Lnb3qJFGACUQtT2JzBFMUabTQv1Y68v++g1tlfDDQCNjlIbYFfoOWyiSfUFiGnQmZEXvmj6mhrqsvVVzBtSTLl57EOhcD4WbDhv6HON0P2/IsycXnc/B0Rl/GByMjXkjA8821oXT4gik7l9Mn
2024-03-28 13:19:50 UTC	9232	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 65 73 25 32 46 26 73 6e 3d 33 26 70 3d 34 35 66 34 36 62 62 38 2d 32 35 63 62 2d 34 62 37 31 2d 38 33 66 36 2d 64 39 39 39 62 38 36 66 38 37 66 34 26 73 65 67 3d 25 32 46 65 73 25 32 46 26 73 70 3d 26 70 73 73 6e 3d 30 26 65 3d 6c 75 62 39 68 6d 63 6c 7e 33 37 7e 2d 7e 45 51 30 78 54 52 45 56 43 56 55 63 36 49 45 56 79 63 6d 39 79 4f 69 42 7a 62 6d 46 77 63 32 68 76 64 43 42 33 59 58 4d 67 64 47 46 72 5a 57 34 67 64 32 68 70 62 47 55 67 5a 47 39 6a 64 57 31 6c 62 6e 51 67 64 32 46 7a 49 47 68 70 5a 47 52 6c 62 69 41 25 33 44 7e 65 76 65 6e 74 49 64 2e 30 5f 35 7e 2d 7e 2d 7e 2d 7e 7e 6c 75 62 39 68 6d 63 6e 7e 33 34 7e 2d 7e 4e 59 58 Data Ascii: v=2&r=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2F&sn=3&p=45f46bb8-25cb-4b71-83f6-d999b86f87f4&seg=%2Fes%2F&sp=&pssn=0&e=lub9hmcl~37~-~EQ0xTREVCVUc6IEVycm9yOiBzbmFwc2hvdCB3YXMgdGFrZW4gd2hpbGUgZG9jdW1lbnQgd2FzIGhpZGRlbiA%3D~eventId.0_5~-~-~-~~lub9hmcn~34~-~NYX
2024-03-28 13:19:50 UTC	815	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:50 GMT Content-Type: application/json Content-Length: 270 Connection: close Set-Cookie: AWSALBTG=1nneZpH7XEp7tcubFMweCig3Zpwyi8Yj0gyDbRMnKI8eAXi+d73HL155+NlJ2v5VKU6jtPx3GfK7ldx8pDkzS1Rup3BIX82/uHyL2c69EaCXQQPv+qW3TZodeiMnRp+Aplt6bvGoVGeLbCDxvXsruyFeJ620qfDSW5TYjRWfGXNg; Expires=Thu, 04 Apr 2024 13:19:50 GMT; Path=/ Set-Cookie: AWSALBTGCORS=1nneZpH7XEp7tcubFMweCig3Zpwyi8Yj0gyDbRMnKI8eAXi+d73HL155+NlJ2v5VKU6jtPx3GfK7ldx8pDkzS1Rup3BIX82/uHyL2c69EaCXQQPv+qW3TZodeiMnRp+Aplt6bvGoVGeLbCDxvXsruyFeJ620qfDSW5TYjRWfGXNg; Expires=Thu, 04 Apr 2024 13:19:50 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:50 UTC	270	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 6e 75 6c 6c 2c 22 75 73 61 67 65 22 3a 7b 22 73 65 73 73 69 6f 6e 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 61 70 69 43 61 6c 6c 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 63 75 73 74 6f 6d 53 65 72 76 65 72 43 61 6c 6c 73 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 64 61 74 61 4c 69 6d 69 74 22 3a 20 34 31 39 34 33 30 34 7d 2c 22 62 6c 6f 63 6b 52 65 63 Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":null,"usage":{"sessionQuotaBreach":false, "apiCallQuotaBreach":false, "customServerCallsBreach":false, "dataLimit": 4194304},"blockRec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50531	146.75.29.230	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:50 UTC	736	OUT	GET /wdcusprem/57907/onsite/onsiteData.json HTTP/1.1 Host: resources.digital-cloud-prem.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://connect.secure.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.secure.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "f911470fe0e560afcc355e2b7c2d14e0" If-Modified-Since: Wed, 27 Mar 2024 18:29:51 GMT
2024-03-28 13:19:50 UTC	375	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 28 Mar 2024 13:19:50 GMT Via: 1.1 varnish Cache-Control: max-age=0,must-revalidate ETag: "f911470fe0e560afcc355e2b7c2d14e0" Age: 25396 X-Served-By: cache-iad-kiad7000164-IAD X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1711631991.501566,VS0,VE1 Vary: Accept-Encoding Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	50530	34.211.102.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:50 UTC	575	OUT	GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:b14d05b9-5eab-4a43-8130-c3727d83728a\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631986995
2024-03-28 13:19:50 UTC	1500	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:50 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:b14d05b9-5eab-4a43-8130-c3727d83728a\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631986995; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:d46a70e9-e7a3-4744-864f-de3922c41ef8; Path=/; Expires=Thu, 28-Mar-2024 13:20:20 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:d46a70e9-e7a3-4744-864f-de3922c41ef8\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:20:20 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:20:20 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:20:20 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:4; Path=/; Expires=Thu, 28-Mar-2024 13:20:20 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:4\|t:1711631990745; Path=/; Expires=Thu, 28-Mar-2024 13:20:20 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	50532	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:50 UTC	1100	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=45f46bb8-25cb-4b71-83f6-d999b86f87f4&sn=3&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=bZQ/tK7tydwGf95VdJbmQZurKeYoR8CoaVIN6qcMA2+uxqJGRy40T9I0vZRKYxHOvTEKkWcLvv3jjY69Rf9280xmcR6DQRXwpUeE68XSdM9G3x4Cy0lfMxirNOLh4eS/czb78h2fCbNaboYLxu47Djs5ewVpeBB+W6JQycISteeP; AWSALBTGCORS=1nneZpH7XEp7tcubFMweCig3Zpwyi8Yj0gyDbRMnKI8eAXi+d73HL155+NlJ2v5VKU6jtPx3GfK7ldx8pDkzS1Rup3BIX82/uHyL2c69EaCXQQPv+qW3TZodeiMnRp+Aplt6bvGoVGeLbCDxvXsruyFeJ620qfDSW5TYjRWfGXNg
2024-03-28 13:19:50 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:50 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=PwmyLZ2gQlUoG9gX17GRxEwUQA75bAuYLKerwEvo/PaAF8D1s15L2tzMIVyWk+VO9AvZdCSDY3oqxtOuaEalVmd0Uzo723e5Qyflcvqiu+wA/8W/6v3ZMWO4mzvfHEGrwZe52lnt58q4SX07ftzq5DScuh9qw2MkoeOijC2n8fiS; Expires=Thu, 04 Apr 2024 13:19:50 GMT; Path=/ Set-Cookie: AWSALBTGCORS=PwmyLZ2gQlUoG9gX17GRxEwUQA75bAuYLKerwEvo/PaAF8D1s15L2tzMIVyWk+VO9AvZdCSDY3oqxtOuaEalVmd0Uzo723e5Qyflcvqiu+wA/8W/6v3ZMWO4mzvfHEGrwZe52lnt58q4SX07ftzq5DScuh9qw2MkoeOijC2n8fiS; Expires=Thu, 04 Apr 2024 13:19:50 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:50 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50533	35.241.45.82	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:50 UTC	688	OUT	POST /v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track HTTP/1.1 Host: udc-neb.kampyle.com Connection: keep-alive Content-Length: 2119 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://connect.secure.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.secure.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:50 UTC	2119	OUT	Data Raw: 64 61 74 61 3d 25 37 42 25 32 32 65 76 65 6e 74 73 25 32 32 25 33 41 25 32 30 25 35 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 42 25 32 32 73 65 73 73 69 6f 6e 5f 73 63 72 65 65 6e 5f 73 69 7a 65 25 32 32 25 33 41 25 32 30 25 32 32 31 32 38 30 78 31 30 32 34 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 64 75 61 25 32 32 25 33 41 25 32 30 25 32 32 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 25 32 30 28 57 69 6e 64 6f 77 73 25 32 30 4e 54 25 32 30 31 30 2e 30 25 33 42 25 32 30 57 69 6e 36 34 25 33 42 25 32 30 78 36 34 29 25 32 30 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 25 32 30 28 4b 48 54 4d 4c 25 32 43 25 32 30 6c 69 6b 65 25 32 30 47 65 63 6b 6f 29 25 32 30 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 25 32 30 53 Data Ascii: data=%7B%22events%22%3A%20%5B%0A%20%20%20%20%7B%22session_screen_size%22%3A%20%221280x1024%22%2C%22session_dua%22%3A%20%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20S
2024-03-28 13:19:51 UTC	564	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:50 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://connect.secure.wellsfargo.com Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept Access-Control-Max-Age: 1800 X-ME: prod-instance-gatewayservice-green-cdnd X-Application-Context: application:9090 Content-Type: text/plain;charset=ISO-8859-1 Content-Length: 59 Server: Jetty(9.2.11.v20150529) Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-28 13:19:51 UTC	59	IN	Data Raw: 7b 22 65 76 65 6e 74 73 5f 63 6f 75 6e 74 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 22 35 22 2c 22 72 65 73 75 6c 74 73 22 3a 7b 7d 2c 22 73 74 61 74 75 73 22 3a 74 72 75 65 7d Data Ascii: {"events_count":1,"version":"5","results":{},"status":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50534	35.241.45.82	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:50 UTC	2401	OUT	GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1 Host: udc-neb.kampyle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://connect.secure.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:51 UTC	522	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:51 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept Access-Control-Max-Age: 1800 X-ME: prod-instance-gatewayservice-green-k919 X-Application-Context: application:9090 Content-Type: image/gif; charset=UTF-8 Content-Length: 0 Server: Jetty(9.2.11.v20150529) Via: 1.1 google Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50537	146.75.29.230	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:50 UTC	504	OUT	GET /wdcusprem/57907/onsite/onsiteData.json HTTP/1.1 Host: resources.digital-cloud-prem.medallia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "f911470fe0e560afcc355e2b7c2d14e0" If-Modified-Since: Wed, 27 Mar 2024 18:29:51 GMT
2024-03-28 13:19:51 UTC	375	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 28 Mar 2024 13:19:51 GMT Via: 1.1 varnish Cache-Control: max-age=0,must-revalidate ETag: "f911470fe0e560afcc355e2b7c2d14e0" Age: 25397 X-Served-By: cache-iad-kiad7000102-IAD X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1711631991.039073,VS0,VE1 Vary: Accept-Encoding Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50543	35.241.45.82	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:51 UTC	384	OUT	GET /v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track HTTP/1.1 Host: udc-neb.kampyle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:51 UTC	537	IN	HTTP/1.1 400 Bad Request Date: Thu, 28 Mar 2024 13:19:51 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept Access-Control-Max-Age: 1800 X-ME: prod-instance-gatewayservice-green-gnns X-Application-Context: application:9090 Content-Type: text/plain;charset=ISO-8859-1 Content-Length: 91 Server: Jetty(9.2.11.v20150529) Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-28 13:19:51 UTC	91	IN	Data Raw: 7b 22 72 65 61 73 6f 6e 22 3a 22 49 6e 76 61 6c 69 64 20 61 72 67 75 6d 65 6e 74 73 22 2c 22 65 76 65 6e 74 73 5f 63 6f 75 6e 74 22 3a 22 30 22 2c 22 72 65 73 75 6c 74 73 22 3a 7b 7d 2c 22 76 65 72 73 69 6f 6e 22 3a 22 35 22 2c 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d Data Ascii: {"reason":"Invalid arguments","events_count":"0","results":{},"version":"5","status":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50544	35.241.45.82	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:51 UTC	2152	OUT	GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=eyJldmVudHMiOiBbCiAgICB7InNlc3Npb25fc2NyZWVuX3NpemUiOiAiMTI4MHgxMDI0Iiwic2Vzc2lvbl9kdWEiOiAiTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2Iiwic2Vzc2lvbl9wbGF0Zm9ybSI6ICJXaW4zMiIsInBhZ2VfdGl0bGUiOiAiSW5pY2llIHNlc2nDs24gcGFyYSB2ZXIgc3VzIGN1ZW50YXMgcGVyc29uYWxlcyB8IFdlbGxzIEZhcmdvIiwicGFnZV91cmwiOiAiaHR0cHM6Ly9jb25uZWN0LnNlY3VyZS53ZWxsc2ZhcmdvLmNvbS9hdXRoL2xvZ2luL3ByZXNlbnQ/b3JpZ2luPWNvYiZMT0I9Q09OUyIsInRyYWNrZXJfdHlwZSI6ICJqYXZhc2NyaXB0IiwidHJhY2tlcl92ZXJzaW9uIjogIjIuMi4yMyIsImV2ZW50X25hbWUiOiAibmVidWxhX3BhZ2VfdmlldyIsImV2ZW50X3RpbWVzdGFtcF9lcG9jaCI6ICIxNzExNjMxOTg5OTgzIiwiZXZlbnRfdGltZXpvbmVfb2Zmc2V0IjogMSwidXNlcl9pZCI6ICIxOGU4NTM3N2IwMTVjZS0wOWE2M2JhODM4NTk5YS0yNjAzMWU1MS0xNDAwMDAtMThlODUzNzdiMDI3NzIiLCJlbnZpcm9tZW50IjogImRpZ2l0YWwtY2xvdWQtdXMtcHJlbSIsImFjY291bnRJZCI6IDU3OTA1LCJ1cmwiOiAiaHR0cHM6Ly9jb25uZWN0LnNlY3VyZS53ZWxsc2ZhcmdvLmNvbS9hdXRoL2xvZ2luL3ByZXNlbnQ/b3JpZ2luPWNvYiZMT0I9Q09OUyIsIndlYnNpdGVJZCI6IDU3OTA3LCJmb3JtSWQiOiBudWxsLCJmb3JtVHJpZ2dlclR5cGUiOiBudWxsLCJrYW1weWxlX2RhdGEiOiB7Im1kX2lzU3VydmV5U3VibWl0dGVkSW5TZXNzaW9uIjogIiIsIkxBU1RfSU5WSVRBVElPTl9WSUVXIjogIiIsIkRFQ0xJTkVEX0RBVEUiOiAiIiwia2FtcHlsZUludml0ZVByZXNlbnRlZCI6ICIiLCJrYW1weWxlX3VzZXJpZCI6ICI1NTgzLWFhNzAtNWFmOS1mMmQ2LWQ0MTYtMGU3MS1jYzNhLTE3OWIiLCJrYW1weWxlVXNlclNlc3Npb24iOiAiMTcxMTYzMTk4OTk3NyIsImthbXB5bGVVc2VyUGVyY2VudGlsZSI6ICIiLCJTVUJNSVRURURfREFURSI6ICIifSwiY29va2llX3NpemUiOiAzMjM1LCJrYW1weWxlX3ZlcnNpb24iOiAiMi41My4xIiwib25zaXRlX3ZlcnNpb24iOiAiMi41My4xIiwiaGlzdG9yeV9sZW5ndGgiOiAxLCJldmVudF9sb2NhbF90aW1lc3RhbXAiOiAxNzExNjMxOTg5OTgzLCJwb3NpdGlvbiI6IG51bGwsImlzVXNlcklkZW50aWZpZWQiOiBmYWxzZSwicGFja2FnZVZlcnNpb24iOiAiMi41My40XzIwMjMxMjE5MjI0MTAwIn0KXX0= HTTP/1.1 Host: udc-neb.kampyle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:51 UTC	522	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:51 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept Access-Control-Max-Age: 1800 X-ME: prod-instance-gatewayservice-green-htdv X-Application-Context: application:9090 Content-Type: image/gif; charset=UTF-8 Content-Length: 0 Server: Jetty(9.2.11.v20150529) Via: 1.1 google Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50546	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:51 UTC	1179	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=6440b9bb-94c9-403c-a3ca-18f1176e2355&sn=5&cfg=201c2b80&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 200 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=PwmyLZ2gQlUoG9gX17GRxEwUQA75bAuYLKerwEvo/PaAF8D1s15L2tzMIVyWk+VO9AvZdCSDY3oqxtOuaEalVmd0Uzo723e5Qyflcvqiu+wA/8W/6v3ZMWO4mzvfHEGrwZe52lnt58q4SX07ftzq5DScuh9qw2MkoeOijC2n8fiS
2024-03-28 13:19:51 UTC	200	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 26 73 6e 3d 35 26 70 3d 36 34 34 30 62 39 62 62 2d 39 34 63 39 2d 34 30 33 63 2d 61 33 63 61 2d 31 38 66 31 31 37 36 65 32 33 35 35 26 73 65 67 3d 25 32 33 73 6b 69 70 26 73 70 3d 25 32 33 73 6b 69 70 26 70 73 73 6e 3d 30 26 65 3d 6c 75 62 39 68 6e 70 6d 7e 32 39 7e 2d 7e 4e 66 61 5f 69 6b 7e 66 74 2e 30 5f 30 2a 73 65 6c 65 63 74 6f 72 41 63 74 69 6f 6e 43 6f 75 6e 74 2e 30 5f 34 2a 65 76 65 6e 74 49 64 2e 30 5f 33 63 7e 2d 7e 2d 7e 2d 26 64 6f 6d 3d 26 70 61 74 74 72 3d Data Ascii: v=2&r=https%3A%2F%2Fwww.wellsfargo.com%2F&sn=5&p=6440b9bb-94c9-403c-a3ca-18f1176e2355&seg=%23skip&sp=%23skip&pssn=0&e=lub9hnpm~29~-~Nfa_ik~ft.0_0selectorActionCount.0_4eventId.0_3c~-~-~-&dom=&pattr=
2024-03-28 13:19:51 UTC	873	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:51 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=NBA3Ex6M3lxKudvTnFT/UTgjjf2oZGck+AmQV7TOkd9JVgaTvRyDa8GscHVdt09Fk74Bnuk8M6SfGpkMtEdaeh7bkVT0xFsf7zNkbJ/hHAq6+W+EOeYLJEpZqlAobMjRluLvYII2xPpv83kw6lcutyJlQZad/f7K/L5nP2WUtkNx; Expires=Thu, 04 Apr 2024 13:19:51 GMT; Path=/ Set-Cookie: AWSALBTGCORS=NBA3Ex6M3lxKudvTnFT/UTgjjf2oZGck+AmQV7TOkd9JVgaTvRyDa8GscHVdt09Fk74Bnuk8M6SfGpkMtEdaeh7bkVT0xFsf7zNkbJ/hHAq6+W+EOeYLJEpZqlAobMjRluLvYII2xPpv83kw6lcutyJlQZad/f7K/L5nP2WUtkNx; Expires=Thu, 04 Apr 2024 13:19:51 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:51 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50541	35.163.101.91	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:51 UTC	685	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZD/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive Content-Length: 13941 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://connect.secure.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.secure.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:51 UTC	13941	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 33 2e 37 2e 31 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 2f 34 3f 35 22 2c 22 74 73 22 3a 31 37 31 31 36 33 31 39 37 39 36 30 38 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 36 2f 37 2f 38 2f 39 3f 31 30 22 2c 22 61 74 22 3a 30 2c 22 70 70 22 3a 31 2c 22 6d 78 22 3a 7b 22 50 4c 43 22 3a 31 2c 22 46 42 54 22 3a 36 33 36 2c 22 44 44 54 22 3a 30 2c 22 44 50 54 22 3a 30 2c 22 50 4c 54 22 3a 36 33 36 2c 22 41 52 45 22 3a 31 7d 2c 22 6d 64 22 3a 22 47 45 54 22 2c 22 61 65 22 3a 5b 30 2c 22 43 61 6e 6e 6f 74 20 6c 6f 61 64 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 2e 20 54 68 Data Ascii: {"vr":"4.3.7.1","dt":"R","rg":"0","es":[{"eg":"1","et":2,"eu":"0://1/2/3/4?5","ts":1711631979608,"mg":"0","au":"0://6/7/8/9?10","at":0,"pp":1,"mx":{"PLC":1,"FBT":636,"DDT":0,"DPT":0,"PLT":636,"ARE":1},"md":"GET","ae":[0,"Cannot load requested resource. Th
2024-03-28 13:19:52 UTC	1218	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:51 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:38\|g:34fc4c5b-19ad-40a3-a2f0-83c9ed57f720; Path=/; Expires=Thu, 28-Mar-2024 13:20:21 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:38\|g:34fc4c5b-19ad-40a3-a2f0-83c9ed57f720\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:20:21 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:20:21 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:38\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:20:21 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:38\|i:559461\|e:10; Path=/; Expires=Thu, 28-Mar-2024 13:20:21 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:38\|i:559461\|e:10\|t:1711631991755; Path=/; Expires=Thu, 28-Mar-2024 13:20:21 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50548	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:52 UTC	1100	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=6440b9bb-94c9-403c-a3ca-18f1176e2355&sn=5&cfg=201c2b80&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=PwmyLZ2gQlUoG9gX17GRxEwUQA75bAuYLKerwEvo/PaAF8D1s15L2tzMIVyWk+VO9AvZdCSDY3oqxtOuaEalVmd0Uzo723e5Qyflcvqiu+wA/8W/6v3ZMWO4mzvfHEGrwZe52lnt58q4SX07ftzq5DScuh9qw2MkoeOijC2n8fiS; AWSALBTGCORS=NBA3Ex6M3lxKudvTnFT/UTgjjf2oZGck+AmQV7TOkd9JVgaTvRyDa8GscHVdt09Fk74Bnuk8M6SfGpkMtEdaeh7bkVT0xFsf7zNkbJ/hHAq6+W+EOeYLJEpZqlAobMjRluLvYII2xPpv83kw6lcutyJlQZad/f7K/L5nP2WUtkNx
2024-03-28 13:19:52 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:52 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=jXXDU0DwO6w9ZjUGmtU7sQkyXSh/KVWiL26rpBBDSeazW5oQU4NIx7ZBW530i2ercos5IDBN0KNKm7IxSc1l3Q5/lgeMTFHV2vq0uGk282trmXYhf2TfHAyA6NpyZ18tCAw1+s4gf4SwcHb7sWRlZ+Z0dA89Vofck3rR/qu2orH1; Expires=Thu, 04 Apr 2024 13:19:52 GMT; Path=/ Set-Cookie: AWSALBTGCORS=jXXDU0DwO6w9ZjUGmtU7sQkyXSh/KVWiL26rpBBDSeazW5oQU4NIx7ZBW530i2ercos5IDBN0KNKm7IxSc1l3Q5/lgeMTFHV2vq0uGk282trmXYhf2TfHAyA6NpyZ18tCAw1+s4gf4SwcHb7sWRlZ+Z0dA89Vofck3rR/qu2orH1; Expires=Thu, 04 Apr 2024 13:19:52 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:52 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50551	34.211.102.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:52 UTC	575	OUT	GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZD/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:d46a70e9-e7a3-4744-864f-de3922c41ef8\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:4\|t:1711631990745
2024-03-28 13:19:52 UTC	1500	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:52 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:d46a70e9-e7a3-4744-864f-de3922c41ef8\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:4\|t:1711631990745; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:a3097cd2-090d-401c-ad0b-1ccb5aeae2cd; Path=/; Expires=Thu, 28-Mar-2024 13:20:22 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:a3097cd2-090d-401c-ad0b-1ccb5aeae2cd\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:20:22 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:20:22 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:20:22 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:7; Path=/; Expires=Thu, 28-Mar-2024 13:20:22 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:7\|t:1711631992672; Path=/; Expires=Thu, 28-Mar-2024 13:20:22 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50587	35.163.101.91	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:57 UTC	661	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive Content-Length: 645 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:57 UTC	645	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 33 2e 37 2e 31 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 2f 34 2f 35 3f 36 22 2c 22 74 73 22 3a 31 37 31 31 36 33 31 39 38 39 33 39 38 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 31 2f 37 2f 22 2c 22 61 74 22 3a 30 2c 22 70 70 22 3a 33 2c 22 6d 78 22 3a 7b 22 50 4c 43 22 3a 31 2c 22 46 42 54 22 3a 31 30 36 32 2c 22 44 44 54 22 3a 30 2c 22 44 50 54 22 3a 30 2c 22 50 4c 54 22 3a 31 30 36 32 2c 22 41 52 45 22 3a 30 7d 2c 22 6d 64 22 3a 22 47 45 54 22 2c 22 78 73 22 3a 32 30 30 2c 22 73 69 22 3a 31 36 7d 5d 2c 22 61 69 22 3a 22 38 35 37 39 62 63 32 64 5f 32 30 63 62 5f 33 39 62 61 5f 31 Data Ascii: {"vr":"4.3.7.1","dt":"R","rg":"0","es":[{"eg":"1","et":2,"eu":"0://1/2/3/4/5?6","ts":1711631989398,"mg":"0","au":"0://1/7/","at":0,"pp":3,"mx":{"PLC":1,"FBT":1062,"DDT":0,"DPT":0,"PLT":1062,"ARE":0},"md":"GET","xs":200,"si":16}],"ai":"8579bc2d_20cb_39ba_1
2024-03-28 13:19:58 UTC	1216	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:58 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:27\|g:4c7ce56d-5076-41c6-9e02-3b26437d984a; Path=/; Expires=Thu, 28-Mar-2024 13:20:28 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:27\|g:4c7ce56d-5076-41c6-9e02-3b26437d984a\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:20:28 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:20:28 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:27\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:20:28 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:27\|i:559461\|e:2; Path=/; Expires=Thu, 28-Mar-2024 13:20:28 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:27\|i:559461\|e:2\|t:1711631998238; Path=/; Expires=Thu, 28-Mar-2024 13:20:28 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50598	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:58 UTC	1180	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=9fa406fb-8541-4a53-bdc9-8d711b8258a5&sn=5&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 1333 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=jXXDU0DwO6w9ZjUGmtU7sQkyXSh/KVWiL26rpBBDSeazW5oQU4NIx7ZBW530i2ercos5IDBN0KNKm7IxSc1l3Q5/lgeMTFHV2vq0uGk282trmXYhf2TfHAyA6NpyZ18tCAw1+s4gf4SwcHb7sWRlZ+Z0dA89Vofck3rR/qu2orH1
2024-03-28 13:19:58 UTC	1333	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 61 62 6f 75 74 25 32 46 26 73 6e 3d 35 26 70 3d 39 66 61 34 30 36 66 62 2d 38 35 34 31 2d 34 61 35 33 2d 62 64 63 39 2d 38 64 37 31 31 62 38 32 35 38 61 35 26 73 65 67 3d 25 32 46 61 62 6f 75 74 25 32 46 26 73 70 3d 26 70 73 73 6e 3d 30 26 65 3d 6c 75 62 39 68 72 69 75 7e 32 32 7e 2d 7e 4e 73 6e 5f 36 2a 6d 5f 47 45 54 2a 75 5f 4c 32 46 7a 63 32 56 30 63 79 39 70 62 57 46 6e 5a 58 4d 76 5a 32 78 76 59 6d 46 73 4c 33 4d 75 5a 32 6c 6d 50 32 78 76 5a 7a 30 78 4a 6e 42 70 5a 44 30 79 4d 6a 49 74 4d 54 51 31 4e 7a 4d 33 4c 54 59 30 4a 6e 42 68 5a 32 56 56 63 6d 77 39 61 48 52 30 63 48 4d 6c 4d 6a 55 7a 51 53 55 79 4e 54 4a 47 4a 54 49 31 Data Ascii: v=2&r=https%3A%2F%2Fwww.wellsfargo.com%2Fabout%2F&sn=5&p=9fa406fb-8541-4a53-bdc9-8d711b8258a5&seg=%2Fabout%2F&sp=&pssn=0&e=lub9hriu~22~-~Nsn_6m_GETu_L2Fzc2V0cy9pbWFnZXMvZ2xvYmFsL3MuZ2lmP2xvZz0xJnBpZD0yMjItMTQ1NzM3LTY0JnBhZ2VVcmw9aHR0cHMlMjUzQSUyNTJGJTI1
2024-03-28 13:19:58 UTC	815	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:58 GMT Content-Type: application/json Content-Length: 270 Connection: close Set-Cookie: AWSALBTG=WVQwzGTPC7fNQ7hJFDRV9t7jRxdtuxQWmvR6E9du/yfALXjNrb8Uj6M4UQlzZaGjnOrv4eNeVrRAIu3mHu4/e5y7VHvSKYuhhbWI4gQ4cP3IkdYv2uHDcnhUcp+CLLAh6ElOCWvhFYwxl51bkwahMLkQqXUAh/IEr/a9sjkvHYer; Expires=Thu, 04 Apr 2024 13:19:58 GMT; Path=/ Set-Cookie: AWSALBTGCORS=WVQwzGTPC7fNQ7hJFDRV9t7jRxdtuxQWmvR6E9du/yfALXjNrb8Uj6M4UQlzZaGjnOrv4eNeVrRAIu3mHu4/e5y7VHvSKYuhhbWI4gQ4cP3IkdYv2uHDcnhUcp+CLLAh6ElOCWvhFYwxl51bkwahMLkQqXUAh/IEr/a9sjkvHYer; Expires=Thu, 04 Apr 2024 13:19:58 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:58 UTC	270	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 6e 75 6c 6c 2c 22 75 73 61 67 65 22 3a 7b 22 73 65 73 73 69 6f 6e 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 61 70 69 43 61 6c 6c 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 63 75 73 74 6f 6d 53 65 72 76 65 72 43 61 6c 6c 73 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 64 61 74 61 4c 69 6d 69 74 22 3a 20 34 31 39 34 33 30 34 7d 2c 22 62 6c 6f 63 6b 52 65 63 Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":null,"usage":{"sessionQuotaBreach":false, "apiCallQuotaBreach":false, "customServerCallsBreach":false, "dataLimit": 4194304},"blockRec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50404	34.107.165.188	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:58 UTC	572	OUT	GET /api/identity/idl?pid=1317 HTTP/1.1 Host: api.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:58 UTC	517	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: https://www.wellsfargo.com Cache-Control: no-cache, no-store Timing-Allow-Origin: * Date: Thu, 28 Mar 2024 13:19:58 GMT Content-Length: 10 Content-Type: text/plain; charset=utf-8 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:58 UTC	10	IN	Data Raw: 7b 22 69 64 6c 22 3a 22 22 7d Data Ascii: {"idl":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50605	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:58 UTC	1100	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=9fa406fb-8541-4a53-bdc9-8d711b8258a5&sn=5&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=jXXDU0DwO6w9ZjUGmtU7sQkyXSh/KVWiL26rpBBDSeazW5oQU4NIx7ZBW530i2ercos5IDBN0KNKm7IxSc1l3Q5/lgeMTFHV2vq0uGk282trmXYhf2TfHAyA6NpyZ18tCAw1+s4gf4SwcHb7sWRlZ+Z0dA89Vofck3rR/qu2orH1; AWSALBTGCORS=WVQwzGTPC7fNQ7hJFDRV9t7jRxdtuxQWmvR6E9du/yfALXjNrb8Uj6M4UQlzZaGjnOrv4eNeVrRAIu3mHu4/e5y7VHvSKYuhhbWI4gQ4cP3IkdYv2uHDcnhUcp+CLLAh6ElOCWvhFYwxl51bkwahMLkQqXUAh/IEr/a9sjkvHYer
2024-03-28 13:19:58 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:58 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=oHmod1rVfccMBs7n4JczAASJWlsheOYD9G9dSpyAqkiJ4ylAfKShv1IJFX4W9Cwn6IWmg+1OhuQP2tsLZYfBwssUL2N817v42Ybph+cbQ1v9ur1/DxFMgUh/yAEs5DdGqqvXk+AWFsV+9jTmaZSIYy/7+Mo4BPvAEgSJuw4LnHTi; Expires=Thu, 04 Apr 2024 13:19:58 GMT; Path=/ Set-Cookie: AWSALBTGCORS=oHmod1rVfccMBs7n4JczAASJWlsheOYD9G9dSpyAqkiJ4ylAfKShv1IJFX4W9Cwn6IWmg+1OhuQP2tsLZYfBwssUL2N817v42Ybph+cbQ1v9ur1/DxFMgUh/yAEs5DdGqqvXk+AWFsV+9jTmaZSIYy/7+Mo4BPvAEgSJuw4LnHTi; Expires=Thu, 04 Apr 2024 13:19:58 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:19:58 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50606	34.107.165.188	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:58 UTC	362	OUT	GET /api/identity/idl?pid=1317 HTTP/1.1 Host: api.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:58 UTC	460	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Cache-Control: no-cache, no-store Timing-Allow-Origin: * Date: Thu, 28 Mar 2024 13:19:58 GMT Content-Length: 10 Content-Type: text/plain; charset=utf-8 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:19:58 UTC	10	IN	Data Raw: 7b 22 69 64 6c 22 3a 22 22 7d Data Ascii: {"idl":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50607	34.211.102.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:58 UTC	575	OUT	GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZF/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:a3097cd2-090d-401c-ad0b-1ccb5aeae2cd\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:7\|t:1711631992672
2024-03-28 13:19:59 UTC	1500	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:58 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:a3097cd2-090d-401c-ad0b-1ccb5aeae2cd\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:7\|t:1711631992672; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:6053aa53-4d25-47eb-a17f-8f18b55ab04f; Path=/; Expires=Thu, 28-Mar-2024 13:20:28 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:6053aa53-4d25-47eb-a17f-8f18b55ab04f\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:20:28 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:20:28 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:20:28 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2; Path=/; Expires=Thu, 28-Mar-2024 13:20:28 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631998963; Path=/; Expires=Thu, 28-Mar-2024 13:20:28 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:19:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50614	13.32.208.32	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:58 UTC	568	OUT	OPTIONS /WellsFargo/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20vZXMvY2hlY2tpbmcv HTTP/1.1 Host: data.schemaapp.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-api-key Origin: https://www.wellsfargo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:59 UTC	643	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Date: Thu, 28 Mar 2024 13:20:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Headers: x-api-key Access-Control-Expose-Headers: x-amz-meta-source Access-Control-Max-Age: 3000 Server: AmazonS3 Strict-Transport-Security: max-age=31536000; includeSubDomains; Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 bc90ecfdcecca714ae795dbc461f470c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C1 X-Amz-Cf-Id: F7AjMiOwVG93TmV6AqLo387XyPxOO8jPzxvtbjeYn-eaEYEU-UkW3Q==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50618	13.32.208.32	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:59 UTC	651	OUT	GET /WellsFargo/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20vZXMvY2hlY2tpbmcv HTTP/1.1 Host: data.schemaapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-api-key: XPJKP-GI7DG-FVNWZ-45W51 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:19:59 UTC	665	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: x-amz-meta-source Access-Control-Max-Age: 3000 Date: Thu, 28 Mar 2024 13:19:59 GMT Server: AmazonS3 Strict-Transport-Security: max-age=31536000; includeSubDomains; Cache-Control: max-age=14400 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Error from cloudfront Via: 1.1 9e18259ccc98f7a9dcd0fe17b60688c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C1 X-Amz-Cf-Id: VPBFqSSwLoblbKd_gIdLCx5QQqafJvciHAWg-0iuPTH0V1Q1nCh1zA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50622	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:59 UTC	1193	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=a77f2f58-57ce-4d1c-8339-460310ea325a&sn=1&cfg&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 4574 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://connect.secure.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.secure.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=oHmod1rVfccMBs7n4JczAASJWlsheOYD9G9dSpyAqkiJ4ylAfKShv1IJFX4W9Cwn6IWmg+1OhuQP2tsLZYfBwssUL2N817v42Ybph+cbQ1v9ur1/DxFMgUh/yAEs5DdGqqvXk+AWFsV+9jTmaZSIYy/7+Mo4BPvAEgSJuw4LnHTi
2024-03-28 13:19:59 UTC	4574	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 61 75 74 68 25 32 46 6c 6f 67 69 6e 25 32 46 70 72 65 73 65 6e 74 25 33 46 6f 72 69 67 69 6e 25 33 44 63 6f 62 25 32 36 4c 4f 42 25 33 44 43 4f 4e 53 26 73 6e 3d 31 26 70 3d 61 37 37 66 32 66 35 38 2d 35 37 63 65 2d 34 64 31 63 2d 38 33 33 39 2d 34 36 30 33 31 30 65 61 33 32 35 61 26 73 65 67 3d 25 32 46 61 75 74 68 25 32 46 6c 6f 67 69 6e 25 32 46 70 72 65 73 65 6e 74 26 73 70 3d 26 65 3d 6c 75 62 39 68 6e 61 6c 7e 32 7e 2d 7e 4e 75 5f 6e 31 71 77 30 7a 2a 73 5f 31 32 38 30 78 39 30 37 2a 73 63 5f 31 32 38 30 78 31 30 32 34 7e 76 6e 2e 32 5f 53 57 35 70 59 32 6c 6c 49 48 4e 6c 63 32 6e 44 73 32 34 67 Data Ascii: v=2&r=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent%3Forigin%3Dcob%26LOB%3DCONS&sn=1&p=a77f2f58-57ce-4d1c-8339-460310ea325a&seg=%2Fauth%2Flogin%2Fpresent&sp=&e=lub9hnal~2~-~Nu_n1qw0zs_1280x907sc_1280x1024~vn.2_SW5pY2llIHNlc2nDs24g
2024-03-28 13:19:59 UTC	884	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:19:59 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=uZyLDb4pIAh65zzVLil/PIgOmZ09P5WNP4G1TT2XhJN7eN1XCGbELyBSFF7QY9UV4OaRLhl9e0PKc6beF4m7CTKAJ7Q/kG42KiE9ugLwJDz+KVwduJo/aOprDxM5QYXrbtCWNd4qYbHzMBbxTT2LmlB0lHBLSsjYDDGahQRYvKpy; Expires=Thu, 04 Apr 2024 13:19:59 GMT; Path=/ Set-Cookie: AWSALBTGCORS=uZyLDb4pIAh65zzVLil/PIgOmZ09P5WNP4G1TT2XhJN7eN1XCGbELyBSFF7QY9UV4OaRLhl9e0PKc6beF4m7CTKAJ7Q/kG42KiE9ugLwJDz+KVwduJo/aOprDxM5QYXrbtCWNd4qYbHzMBbxTT2LmlB0lHBLSsjYDDGahQRYvKpy; Expires=Thu, 04 Apr 2024 13:19:59 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://connect.secure.wellsfargo.com vary: origin access-control-allow-credentials: true set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:19:59 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50627	13.32.208.16	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:59 UTC	405	OUT	GET /WellsFargo/aHR0cHM6Ly93d3cud2VsbHNmYXJnby5jb20vZXMvY2hlY2tpbmcv HTTP/1.1 Host: data.schemaapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:20:00 UTC	525	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 0 Connection: close Date: Thu, 28 Mar 2024 13:19:59 GMT Server: AmazonS3 access-control-expose-headers: x-amz-meta-source, x-amz-meta-accountid, x-amz-meta-url Strict-Transport-Security: max-age=31536000; includeSubDomains; Cache-Control: max-age=14400 X-Cache: Error from cloudfront Via: 1.1 9e18259ccc98f7a9dcd0fe17b60688c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C1 X-Amz-Cf-Id: -K1Yl2QhCkaiwAOcJJkIj_eZ2ehv-qGH_znqd5k3ue0mUrey7nD27g==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50630	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:19:59 UTC	1194	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=a77f2f58-57ce-4d1c-8339-460310ea325a&sn=2&cfg&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 43280 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://connect.secure.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.secure.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=oHmod1rVfccMBs7n4JczAASJWlsheOYD9G9dSpyAqkiJ4ylAfKShv1IJFX4W9Cwn6IWmg+1OhuQP2tsLZYfBwssUL2N817v42Ybph+cbQ1v9ur1/DxFMgUh/yAEs5DdGqqvXk+AWFsV+9jTmaZSIYy/7+Mo4BPvAEgSJuw4LnHTi
2024-03-28 13:19:59 UTC	16384	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 61 75 74 68 25 32 46 6c 6f 67 69 6e 25 32 46 70 72 65 73 65 6e 74 25 33 46 6f 72 69 67 69 6e 25 33 44 63 6f 62 25 32 36 4c 4f 42 25 33 44 43 4f 4e 53 26 73 6e 3d 32 26 70 3d 61 37 37 66 32 66 35 38 2d 35 37 63 65 2d 34 64 31 63 2d 38 33 33 39 2d 34 36 30 33 31 30 65 61 33 32 35 61 26 73 65 67 3d 25 32 46 61 75 74 68 25 32 46 6c 6f 67 69 6e 25 32 46 70 72 65 73 65 6e 74 26 73 70 3d 26 70 73 73 6e 3d 30 26 65 3d 6c 75 62 39 68 6e 61 6c 7e 39 31 7e 2d 7e 4e 73 6e 5f 30 2a 72 5f 2a 63 5f 59 6d 31 66 63 33 6f 39 4f 55 4d 78 4e 44 5a 45 4d 45 4d 32 4f 55 55 31 4f 55 59 79 4d 7a 4d 7a 4f 54 4a 43 52 45 5a 47 Data Ascii: v=2&r=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent%3Forigin%3Dcob%26LOB%3DCONS&sn=2&p=a77f2f58-57ce-4d1c-8339-460310ea325a&seg=%2Fauth%2Flogin%2Fpresent&sp=&pssn=0&e=lub9hnal~91~-~Nsn_0r_c_Ym1fc3o9OUMxNDZEMEM2OUU1OUYyMzMzOTJCREZG
2024-03-28 13:19:59 UTC	16384	OUT	Data Raw: 5a 66 6e 66 25 32 42 70 25 32 42 75 66 42 69 32 32 72 38 47 5a 34 65 50 58 56 38 55 25 32 42 64 34 63 58 54 6b 36 6e 25 32 46 67 31 37 39 61 73 25 32 46 38 30 64 76 37 30 6e 77 71 25 32 46 65 6e 67 6d 37 25 32 42 25 32 42 66 64 73 37 66 77 47 72 75 50 39 4e 6f 66 33 75 38 25 32 42 30 48 65 30 37 6c 36 75 48 35 54 25 32 42 4d 66 75 67 25 32 42 25 32 42 65 76 33 31 35 74 74 6e 66 7a 33 35 62 6e 48 38 67 33 4e 35 25 32 42 76 71 37 68 25 32 42 66 6e 44 37 58 58 41 36 76 34 74 44 68 73 58 63 78 36 54 25 32 42 65 39 56 25 32 46 66 4c 7a 66 66 62 25 32 42 6e 65 74 6d 64 6d 62 44 76 38 6b 58 54 79 56 43 74 39 71 56 7a 76 6a 42 38 25 32 42 25 32 46 48 58 31 7a 58 79 72 73 25 32 46 46 67 73 25 32 46 50 55 48 5a 25 32 42 64 5a 34 64 32 33 33 25 32 46 36 31 64 62 44 Data Ascii: Zfnf%2Bp%2BufBi22r8GZ4ePXV8U%2Bd4cXTk6n%2Fg179as%2F80dv70nwq%2Fengm7%2B%2Bfds7fwGruP9Nof3u8%2B0He07l6uH5T%2BMfug%2B%2Bev315ttnfz35bnH8g3N5%2Bvq7h%2BfnD7XXA6v4tDhsXcx6T%2Be9V%2FfLzffb%2BnetmdmbDv8kXTyVCt9qVzvjB8%2B%2FHX1zXyrs%2FFgs%2FPUHZ%2BdZ4d233%2F61dbD
2024-03-28 13:19:59 UTC	10512	OUT	Data Raw: 34 72 66 31 56 65 30 49 57 43 79 78 5a 6c 57 6a 66 78 34 6b 69 51 4d 72 42 47 59 68 6f 76 44 4d 67 50 48 4a 5a 34 55 48 36 70 64 46 70 6f 31 75 71 6e 68 57 71 31 4b 71 39 45 6a 42 44 36 6d 4f 6a 45 63 67 53 73 68 38 37 74 36 64 4d 54 57 34 38 55 44 74 52 44 34 6f 69 75 52 4b 52 39 33 41 5a 65 66 54 45 36 37 67 35 36 4b 5a 62 35 66 59 64 4d 31 47 35 47 34 6d 6e 6e 62 7a 65 62 42 41 54 45 59 35 37 66 43 67 45 63 48 4a 53 68 4a 45 7a 69 33 50 4b 37 69 4a 4e 52 47 25 32 46 41 35 32 74 76 71 48 42 42 61 25 32 42 77 65 44 34 25 32 42 37 32 4a 34 4a 58 61 36 25 32 46 7a 59 74 51 65 74 6a 38 78 7a 47 69 52 59 54 25 32 46 68 54 65 66 33 78 57 36 25 32 46 32 30 31 75 6c 33 5a 35 75 67 5a 51 38 69 68 36 4d 37 37 71 34 6f 54 6e 42 70 47 6b 41 4f 4c 70 55 51 53 48 34 Data Ascii: 4rf1Ve0IWCyxZlWjfx4kiQMrBGYhovDMgPHJZ4UH6pdFpo1uqnhWq1Kq9EjBD6mOjEcgSsh87t6dMTW48UDtRD4oiuRKR93AZefTE67g56KZb5fYdM1G5G4mnnbzebBATEY57fCgEcHJShJEzi3PK7iJNRG%2FA52tvqHBBa%2BweD4%2B72J4JXa6%2FzYtQetj8xzGiRYT%2FhTef3xW6%2F201ul3Z5ugZQ8ih6M77q4oTnBpGkAOLpUQSH4
2024-03-28 13:20:00 UTC	884	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:00 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=JIErQW5QRrK4/NC/DNObaAguwTh1L/Aiuskn1djyi516hvwz2nDwoZCzuTrbMayncsk9t/UVqY38o1Z3RaZnUBzK+MYhHG47Hs4k+u1DCUdb5+crdgLn3pOzriCqeVYjeMT0y5aLZyOkZz247dUxP2oD+cGxpmJ86Lm4NhQR3Re7; Expires=Thu, 04 Apr 2024 13:19:59 GMT; Path=/ Set-Cookie: AWSALBTGCORS=JIErQW5QRrK4/NC/DNObaAguwTh1L/Aiuskn1djyi516hvwz2nDwoZCzuTrbMayncsk9t/UVqY38o1Z3RaZnUBzK+MYhHG47Hs4k+u1DCUdb5+crdgLn3pOzriCqeVYjeMT0y5aLZyOkZz247dUxP2oD+cGxpmJ86Lm4NhQR3Re7; Expires=Thu, 04 Apr 2024 13:19:59 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://connect.secure.wellsfargo.com vary: origin access-control-allow-credentials: true set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:20:00 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50635	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:00 UTC	1091	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=a77f2f58-57ce-4d1c-8339-460310ea325a&sn=1&cfg&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=oHmod1rVfccMBs7n4JczAASJWlsheOYD9G9dSpyAqkiJ4ylAfKShv1IJFX4W9Cwn6IWmg+1OhuQP2tsLZYfBwssUL2N817v42Ybph+cbQ1v9ur1/DxFMgUh/yAEs5DdGqqvXk+AWFsV+9jTmaZSIYy/7+Mo4BPvAEgSJuw4LnHTi; AWSALBTGCORS=uZyLDb4pIAh65zzVLil/PIgOmZ09P5WNP4G1TT2XhJN7eN1XCGbELyBSFF7QY9UV4OaRLhl9e0PKc6beF4m7CTKAJ7Q/kG42KiE9ugLwJDz+KVwduJo/aOprDxM5QYXrbtCWNd4qYbHzMBbxTT2LmlB0lHBLSsjYDDGahQRYvKpy
2024-03-28 13:20:00 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:00 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=5dw9iknX8DmiJwsLoN7qebn4l1nviRZss/RdUV+VuFIWubnjRDyBO3X/k+P23T0sgbHpirV1ovmxL8hbCgqs2Ve+SLtFI6QcDLPvtPFYgE7uYMFFacDQXmL2sIrkuKQZ7gdjiiN+94/jm0pNw/jhAz4/3HN4+Hw0ADmFMVbObYp+; Expires=Thu, 04 Apr 2024 13:20:00 GMT; Path=/ Set-Cookie: AWSALBTGCORS=5dw9iknX8DmiJwsLoN7qebn4l1nviRZss/RdUV+VuFIWubnjRDyBO3X/k+P23T0sgbHpirV1ovmxL8hbCgqs2Ve+SLtFI6QcDLPvtPFYgE7uYMFFacDQXmL2sIrkuKQZ7gdjiiN+94/jm0pNw/jhAz4/3HN4+Hw0ADmFMVbObYp+; Expires=Thu, 04 Apr 2024 13:20:00 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:20:00 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50636	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:00 UTC	1202	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=a77f2f58-57ce-4d1c-8339-460310ea325a&sn=3&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 7345 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://connect.secure.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.secure.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=uZyLDb4pIAh65zzVLil/PIgOmZ09P5WNP4G1TT2XhJN7eN1XCGbELyBSFF7QY9UV4OaRLhl9e0PKc6beF4m7CTKAJ7Q/kG42KiE9ugLwJDz+KVwduJo/aOprDxM5QYXrbtCWNd4qYbHzMBbxTT2LmlB0lHBLSsjYDDGahQRYvKpy
2024-03-28 13:20:00 UTC	7345	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 61 75 74 68 25 32 46 6c 6f 67 69 6e 25 32 46 70 72 65 73 65 6e 74 25 33 46 6f 72 69 67 69 6e 25 33 44 63 6f 62 25 32 36 4c 4f 42 25 33 44 43 4f 4e 53 26 73 6e 3d 33 26 70 3d 61 37 37 66 32 66 35 38 2d 35 37 63 65 2d 34 64 31 63 2d 38 33 33 39 2d 34 36 30 33 31 30 65 61 33 32 35 61 26 73 65 67 3d 25 32 46 61 75 74 68 25 32 46 6c 6f 67 69 6e 25 32 46 70 72 65 73 65 6e 74 26 73 70 3d 26 70 73 73 6e 3d 30 26 65 3d 6c 75 62 39 68 79 70 39 7e 33 37 7e 2d 7e 45 51 30 78 54 52 45 56 43 56 55 63 36 49 45 56 79 63 6d 39 79 4f 69 42 7a 62 6d 46 77 63 32 68 76 64 43 42 33 59 58 4d 67 64 47 46 72 5a 57 34 67 64 32 Data Ascii: v=2&r=https%3A%2F%2Fconnect.secure.wellsfargo.com%2Fauth%2Flogin%2Fpresent%3Forigin%3Dcob%26LOB%3DCONS&sn=3&p=a77f2f58-57ce-4d1c-8339-460310ea325a&seg=%2Fauth%2Flogin%2Fpresent&sp=&pssn=0&e=lub9hyp9~37~-~EQ0xTREVCVUc6IEVycm9yOiBzbmFwc2hvdCB3YXMgdGFrZW4gd2
2024-03-28 13:20:00 UTC	826	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:00 GMT Content-Type: application/json Content-Length: 270 Connection: close Set-Cookie: AWSALBTG=/ZECdzSbMSa/lpZktC2ecA9htHU/1K/OcYhoQy9G3kP3LF6jVDSyi8MAgs3ETOqntmWHQUiARiqGB8+O/AG39bs+b//3BOF3v5I7acHWEsITE3HlPMjOnATebKZxbzEDsnTMQNzWGbMS3Y1NTbw8nlAVmkIhrTm1ZHoQ8KTmrPqd; Expires=Thu, 04 Apr 2024 13:20:00 GMT; Path=/ Set-Cookie: AWSALBTGCORS=/ZECdzSbMSa/lpZktC2ecA9htHU/1K/OcYhoQy9G3kP3LF6jVDSyi8MAgs3ETOqntmWHQUiARiqGB8+O/AG39bs+b//3BOF3v5I7acHWEsITE3HlPMjOnATebKZxbzEDsnTMQNzWGbMS3Y1NTbw8nlAVmkIhrTm1ZHoQ8KTmrPqd; Expires=Thu, 04 Apr 2024 13:20:00 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://connect.secure.wellsfargo.com vary: origin access-control-allow-credentials: true Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:20:00 UTC	270	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 6e 75 6c 6c 2c 22 75 73 61 67 65 22 3a 7b 22 73 65 73 73 69 6f 6e 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 61 70 69 43 61 6c 6c 51 75 6f 74 61 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 63 75 73 74 6f 6d 53 65 72 76 65 72 43 61 6c 6c 73 42 72 65 61 63 68 22 3a 66 61 6c 73 65 2c 20 22 64 61 74 61 4c 69 6d 69 74 22 3a 20 34 31 39 34 33 30 34 7d 2c 22 62 6c 6f 63 6b 52 65 63 Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":null,"usage":{"sessionQuotaBreach":false, "apiCallQuotaBreach":false, "customServerCallsBreach":false, "dataLimit": 4194304},"blockRec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50644	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:00 UTC	1091	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=a77f2f58-57ce-4d1c-8339-460310ea325a&sn=2&cfg&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=oHmod1rVfccMBs7n4JczAASJWlsheOYD9G9dSpyAqkiJ4ylAfKShv1IJFX4W9Cwn6IWmg+1OhuQP2tsLZYfBwssUL2N817v42Ybph+cbQ1v9ur1/DxFMgUh/yAEs5DdGqqvXk+AWFsV+9jTmaZSIYy/7+Mo4BPvAEgSJuw4LnHTi; AWSALBTGCORS=JIErQW5QRrK4/NC/DNObaAguwTh1L/Aiuskn1djyi516hvwz2nDwoZCzuTrbMayncsk9t/UVqY38o1Z3RaZnUBzK+MYhHG47Hs4k+u1DCUdb5+crdgLn3pOzriCqeVYjeMT0y5aLZyOkZz247dUxP2oD+cGxpmJ86Lm4NhQR3Re7
2024-03-28 13:20:00 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:00 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=Xt1f0hpZVB4ZhrgeCdOu3sEXB4UPoAxcDYvG1toDVYCnJjguA6sqA3g2B9/bZe7gpCgGNuCDzxGzWlIdVuGeB871vdqau6CE2trODUX98EDu6tpztcbgPPzG/B++0Y7W562oVCHoK9Kt5OST+sCTiIR4lSU76mq5Of6YYOXXvtGU; Expires=Thu, 04 Apr 2024 13:20:00 GMT; Path=/ Set-Cookie: AWSALBTGCORS=Xt1f0hpZVB4ZhrgeCdOu3sEXB4UPoAxcDYvG1toDVYCnJjguA6sqA3g2B9/bZe7gpCgGNuCDzxGzWlIdVuGeB871vdqau6CE2trODUX98EDu6tpztcbgPPzG/B++0Y7W562oVCHoK9Kt5OST+sCTiIR4lSU76mq5Of6YYOXXvtGU; Expires=Thu, 04 Apr 2024 13:20:00 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:20:00 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50646	142.250.31.156	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:00 UTC	862	OUT	GET /pixel?google_nid=wellsfargo_adh&google_hm=MTUxMTA2MTUzNS4xNzExNjMxOTUw&_rnd=0.528690021422805 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf; ar_debug=1
2024-03-28 13:20:00 UTC	566	IN	HTTP/1.1 302 Found Location: https://fcmatch.google.com/pixel?google_gm=AMnCDoppDmysQ0EwfuNyQisMDHjame1guHW2IIS6dxbAtlz8vxAtRDbqlIDtd545bq7TMCLXhLhdtkZoEea-6Rnwh-iv5AqzvhNWr7G3wxfANPyDUkwwgNk Date: Thu, 28 Mar 2024 13:20:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 359 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:20:00 UTC	359	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 66 63 6d 61 74 63 68 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 67 6d 3d 41 4d 6e 43 44 6f 70 70 44 6d 79 73 51 30 45 77 66 75 4e 79 51 69 73 4d 44 48 6a 61 6d 65 31 67 75 48 57 32 49 49 53 36 64 78 62 41 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://fcmatch.google.com/pixel?google_gm=AMnCDoppDmysQ0EwfuNyQisMDHjame1guHW2IIS6dxbA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50647	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:00 UTC	1100	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=a77f2f58-57ce-4d1c-8339-460310ea325a&sn=3&cfg=fc5c7ded&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=5dw9iknX8DmiJwsLoN7qebn4l1nviRZss/RdUV+VuFIWubnjRDyBO3X/k+P23T0sgbHpirV1ovmxL8hbCgqs2Ve+SLtFI6QcDLPvtPFYgE7uYMFFacDQXmL2sIrkuKQZ7gdjiiN+94/jm0pNw/jhAz4/3HN4+Hw0ADmFMVbObYp+; AWSALBTGCORS=/ZECdzSbMSa/lpZktC2ecA9htHU/1K/OcYhoQy9G3kP3LF6jVDSyi8MAgs3ETOqntmWHQUiARiqGB8+O/AG39bs+b//3BOF3v5I7acHWEsITE3HlPMjOnATebKZxbzEDsnTMQNzWGbMS3Y1NTbw8nlAVmkIhrTm1ZHoQ8KTmrPqd
2024-03-28 13:20:00 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:00 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=9uw/F0p2GcTqCr9i30d7NihK7jz3x75pXcnhOYZ//v/3/5WySMDMc9zt4oMvjJs8TvURzJ3J+su76c4Luo+ZQd0sa0K3VIlYeenFaqG4/kdyU4yF4oUzEa8gGu3v7aNhzQB9FUZpsMrxFjU+Lfj3SUiY9SopgYlBT491Ugy2jJkW; Expires=Thu, 04 Apr 2024 13:20:00 GMT; Path=/ Set-Cookie: AWSALBTGCORS=9uw/F0p2GcTqCr9i30d7NihK7jz3x75pXcnhOYZ//v/3/5WySMDMc9zt4oMvjJs8TvURzJ3J+su76c4Luo+ZQd0sa0K3VIlYeenFaqG4/kdyU4yF4oUzEa8gGu3v7aNhzQB9FUZpsMrxFjU+Lfj3SUiY9SopgYlBT491Ugy2jJkW; Expires=Thu, 04 Apr 2024 13:20:00 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:20:00 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50649	52.45.39.174	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:00 UTC	900	OUT	GET /id?d_visid_ver=5.2.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=0&d_mid=33918683021254472264168527825999287273&d_coop_unsafe=1&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&ts=1711631999701 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378
2024-03-28 13:20:00 UTC	822	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:00 GMT Content-Type: application/json;charset=utf-8 Content-Length: 1752 Connection: close X-TID: BeaW1bKSQd4= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.wellsfargo.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-va6-2-v057-05a92fd0c.edge-va6.demdex.com 1 ms set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:00 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-28 13:20:00 UTC	1752	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 32 31 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 61 61 2e 61 67 6b 6e 2e Data Ascii: {"d_mid":"33918683021254472264168527825999287273","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"21","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//aa.agkn.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50650	142.251.16.157	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:00 UTC	1271	OUT	GET /pagead/viewthroughconversion/984436569/?random=1711632000084&cv=9&fst=1711632000084&num=1&fmt=3&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&eid=376635470&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2Fchecking%2F&ref=null&tiba=Cuentas%20de%20cheques%3A%20abra%20una%20cuenta%20por%20Internet%20hoy%20mismo%20%7C%20Wells%20Fargo&hn=www.google.com&async=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf; ar_debug=1
2024-03-28 13:20:01 UTC	1171	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:20:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/984436569/?random=1711632000084&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&eid=376635470&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2Fchecking%2F&ref=null&tiba=Cuentas%20de%20cheques%3A%20abra%20una%20cuenta%20por%20Internet%20hoy%20mismo%20%7C%20Wells%20Fargo&async=1&is_vtc=1&cid=CAQSKQB7FLtq9aGoUrlj6bBo2oPEvRqEL3w-tCAkG6FQ7Hc3MjC6klj22g1B&random=680170720&resp=GooglemKTybQhCsO Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:20:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50651	172.253.122.113	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:00 UTC	1001	OUT	GET /pixel?google_gm=AMnCDoppDmysQ0EwfuNyQisMDHjame1guHW2IIS6dxbAtlz8vxAtRDbqlIDtd545bq7TMCLXhLhdtkZoEea-6Rnwh-iv5AqzvhNWr7G3wxfANPyDUkwwgNk HTTP/1.1 Host: fcmatch.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:20:01 UTC	596	IN	HTTP/1.1 302 Found Location: https://fcmatch.youtube.com/pixel?google_gm=AMnCDoppDmysQ0EwfuNyQisMDHjame1guHW2IIS6dxbAtlz8vxAtRDbqlIDtd545bq7TMCLXhLhdtkZoEea-6Rnwh-iv5AqzvhNWr7G3wxfANPyDUkwwgNk Date: Thu, 28 Mar 2024 13:20:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 360 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:20:01 UTC	360	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 66 63 6d 61 74 63 68 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 67 6d 3d 41 4d 6e 43 44 6f 70 70 44 6d 79 73 51 30 45 77 66 75 4e 79 51 69 73 4d 44 48 6a 61 6d 65 31 67 75 48 57 32 49 49 53 36 64 78 62 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://fcmatch.youtube.com/pixel?google_gm=AMnCDoppDmysQ0EwfuNyQisMDHjame1guHW2IIS6dxb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50652	63.140.39.65	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:00 UTC	758	OUT	POST /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=b482a243-3b29-434a-81f1-7ba1202c8c7c HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 352 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:20:00 UTC	352	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 7b 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 66 65 74 63 68 22 3a 5b 22 45 43 49 44 22 5d 7d 7d 2c 22 6d 65 74 61 22 3a 7b 22 73 74 61 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 22 2c 22 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 6b 6e 64 63 74 72 5f 31 42 41 41 31 35 46 33 35 34 46 37 33 31 45 36 30 41 34 43 39 38 41 34 5f 41 64 6f 62 65 4f 72 67 5f 69 64 65 6e 74 69 74 79 22 2c 22 76 61 6c 75 65 22 3a 22 43 69 59 7a 4d 7a 6b 78 4f 44 59 34 4d 7a 41 79 4d 54 49 31 4e 44 51 33 4d 6a 49 32 4e 44 45 32 4f 44 55 79 4e 7a 67 79 4e 54 6b 35 4f 54 49 34 4e 7a 49 33 4d 31 49 51 43 4b 4b 6b 32 36 6e 6f 4d 52 67 42 4b 67 Data Ascii: {"query":{"identity":{"fetch":["ECID"]}},"meta":{"state":{"domain":"wellsfargo.com","cookiesEnabled":true,"entries":[{"key":"kndctr_1BAA15F354F731E60A4C98A4_AdobeOrg_identity","value":"CiYzMzkxODY4MzAyMTI1NDQ3MjI2NDE2ODUyNzgyNTk5OTI4NzI3M1IQCKKk26noMRgBKg
2024-03-28 13:20:01 UTC	635	IN	HTTP/1.1 200 OK x-request-id: b482a243-3b29-434a-81f1-7ba1202c8c7c vary: Origin access-control-allow-origin: https://www.wellsfargo.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Thu, 28 Mar 2024 13:20:00 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-03-28 13:20:01 UTC	527	IN	Data Raw: 32 30 38 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 62 34 38 32 61 32 34 33 2d 33 62 32 39 2d 34 33 34 61 2d 38 31 66 31 2d 37 62 61 31 32 30 32 63 38 63 37 63 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 34 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 208{"requestId":"b482a243-3b29-434a-81f1-7ba1202c8c7c","handle":[{"payload":[{"id":"33918683021254472264168527825999287273","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"34","ttlSeconds":1800},{"scope":"AA
2024-03-28 13:20:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50656	44.195.11.1	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:01 UTC	641	OUT	GET /id?d_visid_ver=5.2.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=1BAA15F354F731E60A4C98A4%40AdobeOrg&d_nsid=0&d_mid=33918683021254472264168527825999287273&d_coop_unsafe=1&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&ts=1711631999701 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378
2024-03-28 13:20:01 UTC	711	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:01 GMT Content-Type: application/json;charset=utf-8 Content-Length: 1752 Connection: close X-TID: ajnlicRdTqg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-2-v057-05be31045.edge-va6.demdex.com 2 ms set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:01 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-28 13:20:01 UTC	1752	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 32 31 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 61 61 2e 61 67 6b 6e 2e Data Ascii: {"d_mid":"33918683021254472264168527825999287273","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"21","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//aa.agkn.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50657	23.23.167.174	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:01 UTC	823	OUT	GET /dest5.html?d_nsid=0 HTTP/1.1 Host: wellsfargobankna.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; wellsfargobankna=33955380241426191774167127150413392378
2024-03-28 13:20:01 UTC	604	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:01 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 6983 Connection: close X-TID: hPD//Y11TWU= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Accept-Ranges: bytes last-modified: Wed, 6 Mar 2024 13:01:13 GMT DCS: dcs-prod-va6-1-v057-0ae94a48d.edge-va6.demdex.com 3 ms
2024-03-28 13:20:01 UTC	6983	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 64 6f 62 65 20 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50659	69.147.92.11	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:01 UTC	559	OUT	GET /wi/config/.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:20:01 UTC	767	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-amz-request-id: 7R72R4ZFFEXYP0CK x-amz-id-2: 0npOnmXkhQ2oIAw44AntdA9KEqOw1er7Vy6eCnxytKvQAqT/8CoazMF9SdElu0e7Njk2RS0b67M= Content-Type: application/json Date: Thu, 28 Mar 2024 13:13:28 GMT Server: ATS Referrer-Policy: no-referrer-when-downgrade Cache-Control: public,max-age=3600 Content-Length: 2 Age: 393 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-28 13:20:01 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50660	172.253.62.105	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:01 UTC	1416	OUT	GET /pagead/1p-user-list/984436569/?random=1711632000084&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&eid=376635470&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2Fchecking%2F&ref=null&tiba=Cuentas%20de%20cheques%3A%20abra%20una%20cuenta%20por%20Internet%20hoy%20mismo%20%7C%20Wells%20Fargo&async=1&is_vtc=1&cid=CAQSKQB7FLtq9aGoUrlj6bBo2oPEvRqEL3w-tCAkG6FQ7Hc3MjC6klj22g1B&random=680170720&resp=GooglemKTybQhCsO HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:20:01 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:20:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:20:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50661	63.140.39.65	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:01 UTC	751	OUT	POST /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=a6d541f2-f16a-487d-a378-34648a735afe HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 4193 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:20:01 UTC	4193	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 71 75 65 72 79 22 3a 7b 22 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 3a 7b 22 73 63 68 65 6d 61 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 64 65 66 61 75 6c 74 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 68 74 6d 6c 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2f 6a 73 6f 6e 2d 63 6f 6e 74 65 6e 74 2d 69 74 65 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c Data Ascii: {"events":[{"query":{"personalization":{"schemas":["https://ns.adobe.com/personalization/default-content-item","https://ns.adobe.com/personalization/html-content-item","https://ns.adobe.com/personalization/json-content-item","https://ns.adobe.com/personal
2024-03-28 13:20:01 UTC	635	IN	HTTP/1.1 200 OK x-request-id: a6d541f2-f16a-487d-a378-34648a735afe vary: Origin access-control-allow-origin: https://www.wellsfargo.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Thu, 28 Mar 2024 13:20:01 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-03-28 13:20:01 UTC	527	IN	Data Raw: 32 30 38 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 61 36 64 35 34 31 66 32 2d 66 31 36 61 2d 34 38 37 64 2d 61 33 37 38 2d 33 34 36 34 38 61 37 33 35 61 66 65 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 34 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 208{"requestId":"a6d541f2-f16a-487d-a378-34648a735afe","handle":[{"payload":[{"id":"33918683021254472264168527825999287273","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"34","ttlSeconds":1800},{"scope":"AA
2024-03-28 13:20:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50662	63.140.38.132	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:01 UTC	459	OUT	GET /ee/va6/v1/identity/acquire?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=b482a243-3b29-434a-81f1-7ba1202c8c7c HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:20:01 UTC	418	IN	HTTP/1.1 404 Not Found x-request-id: b482a243-3b29-434a-81f1-7ba1202c8c7c vary: Origin date: Thu, 28 Mar 2024 13:20:00 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50663	172.253.63.139	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:01 UTC	813	OUT	GET /pixel?google_gm=AMnCDoppDmysQ0EwfuNyQisMDHjame1guHW2IIS6dxbAtlz8vxAtRDbqlIDtd545bq7TMCLXhLhdtkZoEea-6Rnwh-iv5AqzvhNWr7G3wxfANPyDUkwwgNk HTTP/1.1 Host: fcmatch.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:20:01 UTC	403	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 28 Mar 2024 13:20:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:20:01 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50664	44.219.57.96	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:01 UTC	713	OUT	GET /ibs:dpid=411&dpuuid=ZgVuWQAAA9eF_wAm&d_uuid=33955380241426191774167127150413392378 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378
2024-03-28 13:20:01 UTC	695	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:01 GMT Content-Length: 0 Connection: close X-TID: Mvw4XQyRSf0= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v057-06a645040.edge-va6.demdex.com 4 ms set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:01 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50665	18.165.98.81	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:01 UTC	656	OUT	GET /adscores/g.pixel?sid=9211132908&aam=33955380241426191774167127150413392378 HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wellsfargobankna.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:20:01 UTC	897	IN	HTTP/1.1 302 Found Transfer-Encoding: chunked Connection: close Date: Thu, 28 Mar 2024 13:20:01 GMT Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3A9q7Xmiv6JbJk%2Bi0gnU5CYyHzmt611HGN; Path=/; Domain=.agkn.com; Expires=Fri, 28-Mar-2025 13:20:01 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://dpm.demdex.net/ibs:dpid=21&dpuuid=213680604835005188846 X-Cache: Miss from cloudfront Via: 1.1 e71ab653feb8332f51edf19089ecf9fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P4 X-Amz-Cf-Id: tuclzisW5wnaBxalxtCyoyy4WJ3wgjpmQ83YrhBgSaTyllXTdgLbaQ==
2024-03-28 13:20:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50666	172.253.115.104	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:01 UTC	1178	OUT	GET /pagead/1p-user-list/984436569/?random=1711632000084&cv=9&fst=1711630800000&num=1&fmt=3&bg=ffffff&guid=ON&eid=376635470&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&gtm=2oa8g0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.wellsfargo.com%2Fes%2Fchecking%2F&ref=null&tiba=Cuentas%20de%20cheques%3A%20abra%20una%20cuenta%20por%20Internet%20hoy%20mismo%20%7C%20Wells%20Fargo&async=1&is_vtc=1&cid=CAQSKQB7FLtq9aGoUrlj6bBo2oPEvRqEL3w-tCAkG6FQ7Hc3MjC6klj22g1B&random=680170720&resp=GooglemKTybQhCsO HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-28 13:20:02 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 28 Mar 2024 13:20:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:20:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50667	63.140.38.132	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:01 UTC	451	OUT	GET /ee/va6/v1/interact?configId=14f82f5f-3a7a-4f91-ad08-c3ab704b13b4&requestId=a6d541f2-f16a-487d-a378-34648a735afe HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:20:02 UTC	418	IN	HTTP/1.1 404 Not Found x-request-id: a6d541f2-f16a-487d-a378-34648a735afe vary: Origin date: Thu, 28 Mar 2024 13:20:01 GMT x-konductor: N/A x-adobe-edge: VA6;7 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50668	35.244.154.8	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:01 UTC	648	OUT	GET /365868.gif?partner_uid=33955380241426191774167127150413392378 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wellsfargobankna.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:20:02 UTC	736	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://idsync.rlcdn.com/1000.gif?memo=CKyqFhIxCi0IARCYEhomMzM5NTUzODAyNDE0MjYxOTE3NzQxNjcxMjcxNTA0MTMzOTIzNzgQABoNCILdlbAGEgUI6AcQAEIASgA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=HQrpMtAwzAkzrW2kfU9apE/NWjNTVN5fP4Qe7CFCrSk=; Path=/; Domain=rlcdn.com; Expires=Fri, 28 Mar 2025 13:20:02 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Mon, 27 May 2024 13:20:02 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 28 Mar 2024 13:20:02 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50672	44.195.11.1	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:01 UTC	560	OUT	GET /ibs:dpid=411&dpuuid=ZgVuWQAAA9eF_wAm&d_uuid=33955380241426191774167127150413392378 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120
2024-03-28 13:20:02 UTC	695	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:02 GMT Content-Length: 0 Connection: close X-TID: ufPKnEf1ROk= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v057-0b859a053.edge-va6.demdex.com 3 ms set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:02 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50673	172.253.63.154	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:02 UTC	898	OUT	GET /pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=MzM5NTUzODAyNDE0MjYxOTE3NzQxNjcxMjcxNTA0MTMzOTIzNzg= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wellsfargobankna.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9rytSykevrBeToL32gq_NsFMKgT3NrxBbw_LuMGLSIoLpxvQi6G0KdDgf; ar_debug=1
2024-03-28 13:20:02 UTC	675	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://dpm.demdex.net/ibs:dpid=771&dpuuid=CAESEAYXrBaGbqB6HFcPdhpHR7g&google_cver=1?gdpr=0&gdpr_consent= Date: Thu, 28 Mar 2024 13:20:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 314 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-28 13:20:02 UTC	314	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 2f 69 62 73 3a 64 70 69 64 3d 37 37 31 26 61 6d 70 3b 64 70 75 75 69 64 3d 43 41 45 53 45 41 59 58 72 42 61 47 62 71 42 36 48 46 63 50 64 68 70 48 52 37 67 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://dpm.demdex.net/ibs:dpid=771&dpuuid=CAESEAYXrBaGbqB6HFcPdhpHR7g&google_c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50675	44.213.50.195	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:02 UTC	1040	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=9uw/F0p2GcTqCr9i30d7NihK7jz3x75pXcnhOYZ//v/3/5WySMDMc9zt4oMvjJs8TvURzJ3J+su76c4Luo+ZQd0sa0K3VIlYeenFaqG4/kdyU4yF4oUzEa8gGu3v7aNhzQB9FUZpsMrxFjU+Lfj3SUiY9SopgYlBT491Ugy2jJkW
2024-03-28 13:20:02 UTC	1035	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:02 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=9CT8jNK2RQrU81kDqO7dz0Iv54LdFD9HeAZ259YUQ9znSFPunQWI0jcPT/CEH3ece88LZkZL+VuWKxGYSI/UearT0tlKBRUBEdP4cw6DBQqWUTDfdnCKX/bXcj3lgGYq7Yr4NSzR2k8bcDEgW8nM8rjplKXgxpnQV9duzofowW2N; Expires=Thu, 04 Apr 2024 13:20:02 GMT; Path=/ Set-Cookie: AWSALBTGCORS=9CT8jNK2RQrU81kDqO7dz0Iv54LdFD9HeAZ259YUQ9znSFPunQWI0jcPT/CEH3ece88LZkZL+VuWKxGYSI/UearT0tlKBRUBEdP4cw6DBQqWUTDfdnCKX/bXcj3lgGYq7Yr4NSzR2k8bcDEgW8nM8rjplKXgxpnQV9duzofowW2N; Expires=Thu, 04 Apr 2024 13:20:02 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:20:02 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50678	18.235.137.175	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:02 UTC	786	OUT	GET /ibs:dpid=21&dpuuid=213680604835005188846 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wellsfargobankna.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232
2024-03-28 13:20:02 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:02 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: /xVxIgBqQew= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v057-0f9feb6b9.edge-va6.demdex.com 3 ms set-cookie: dpm=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:02 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:02 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-28 13:20:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50679	35.244.154.8	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:02 UTC	771	OUT	GET /1000.gif?memo=CKyqFhIxCi0IARCYEhomMzM5NTUzODAyNDE0MjYxOTE3NzQxNjcxMjcxNTA0MTMzOTIzNzgQABoNCILdlbAGEgUI6AcQAEIASgA HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wellsfargobankna.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=HQrpMtAwzAkzrW2kfU9apE/NWjNTVN5fP4Qe7CFCrSk=; pxrc=CAA=
2024-03-28 13:20:02 UTC	745	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://dpm.demdex.net/ibs:dpid=477&dpuuid=bf3583479cfa2b30b4765233abf108d3347eb75cc59033dc0445efe44ff670a9b0da87c991749652 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=HQrpMtAwzAkzrW2kfU9apE/NWjNTVN5fP4Qe7CFCrSk=; Path=/; Domain=rlcdn.com; Expires=Fri, 28 Mar 2025 13:20:02 GMT; Secure; SameSite=None Set-Cookie: pxrc=CILdlbAGEgUI6AcQABIGCPHrARAA; Path=/; Domain=rlcdn.com; Expires=Mon, 27 May 2024 13:20:02 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 28 Mar 2024 13:20:02 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50681	34.200.65.202	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:02 UTC	685	OUT	GET /cms?partner_id=ADOBE&_hosted_id=33955380241426191774167127150413392378&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wellsfargobankna.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:20:02 UTC	571	IN	HTTP/1.1 302 Redirect Date: Thu, 28 Mar 2024 13:20:02 GMT Connection: close Server: ATS/9.1.10.106 Cache-Control: no-store Location: https://ups.analytics.yahoo.com/ups/58782/cms?partner_id=ADOBE&_hosted_id=33955380241426191774167127150413392378&gdpr=0&gdpr_consent= Content-Type: text/html Content-Language: en Set-Cookie: A3=d=AQABBIJuBWYCEPb8U-CJH60GQy4IhOZlKpkFEgEBAQHABmYPZtxI0iMA_eMAAA&S=AQAAAhyf74IaX1jvls8UIM27QZU; Expires=Fri, 28 Mar 2025 19:20:02 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Content-Length: 415
2024-03-28 13:20:02 UTC	415	IN	Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 77 68 69 74 65 22 20 46 47 43 4f 4c 4f 52 3d 22 62 6c 61 63 6b 22 3e 0a 3c 48 31 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 3c 48 52 3e 0a 0a 3c 46 4f 4e 54 20 46 41 43 45 3d 22 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 22 3e 3c 42 3e 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 2e 20 20 54 68 65 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 20 69 73 20 22 68 Data Ascii: <HTML><HEAD><TITLE>Document Has Moved</TITLE></HEAD><BODY BGCOLOR="white" FGCOLOR="black"><H1>Document Has Moved</H1><HR><FONT FACE="Helvetica,Arial"><B>Description: The document you requested has moved to a new location. The new location is "h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50683	34.194.24.182	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:02 UTC	1032	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d%3A0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pv=2&f_cls_s=true HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=9uw/F0p2GcTqCr9i30d7NihK7jz3x75pXcnhOYZ//v/3/5WySMDMc9zt4oMvjJs8TvURzJ3J+su76c4Luo+ZQd0sa0K3VIlYeenFaqG4/kdyU4yF4oUzEa8gGu3v7aNhzQB9FUZpsMrxFjU+Lfj3SUiY9SopgYlBT491Ugy2jJkW; AWSALBTGCORS=9CT8jNK2RQrU81kDqO7dz0Iv54LdFD9HeAZ259YUQ9znSFPunQWI0jcPT/CEH3ece88LZkZL+VuWKxGYSI/UearT0tlKBRUBEdP4cw6DBQqWUTDfdnCKX/bXcj3lgGYq7Yr4NSzR2k8bcDEgW8nM8rjplKXgxpnQV9duzofowW2N
2024-03-28 13:20:02 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:02 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=s9LxfQIZszJLxGjE80XfDJbQWw8w3k9PNpV1A3+4xqajdOTFYOAO9VLh1TGyJfvOjHfm6iMKIOXa8slB5Hg+lo6kisMCeDrVFQThDm8Z3jky2pmtgP+4rkBB9hir4sF62t1OVU5qWie0COpcNGwdmTXSoYDM3klNg0mdthiK/TKP; Expires=Thu, 04 Apr 2024 13:20:02 GMT; Path=/ Set-Cookie: AWSALBTGCORS=s9LxfQIZszJLxGjE80XfDJbQWw8w3k9PNpV1A3+4xqajdOTFYOAO9VLh1TGyJfvOjHfm6iMKIOXa8slB5Hg+lo6kisMCeDrVFQThDm8Z3jky2pmtgP+4rkBB9hir4sF62t1OVU5qWie0COpcNGwdmTXSoYDM3klNg0mdthiK/TKP; Expires=Thu, 04 Apr 2024 13:20:02 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:20:02 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50684	18.235.137.175	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:02 UTC	850	OUT	GET /ibs:dpid=771&dpuuid=CAESEAYXrBaGbqB6HFcPdhpHR7g&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wellsfargobankna.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399
2024-03-28 13:20:02 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:02 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 7ZgnefBiQDg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v057-0fb543d7e.edge-va6.demdex.com 2 ms set-cookie: dpm=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:02 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:02 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-28 13:20:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50685	18.235.137.175	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:02 UTC	821	OUT	GET /ibs:dpid=1957&dpuuid=375E6F2E0D8F6B9C2CEB7C8E098F6DFE HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wellsfargobankna.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399
2024-03-28 13:20:02 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:02 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: t25A3o3qRzs= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v057-080bb3af7.edge-va6.demdex.com 3 ms set-cookie: dpm=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:02 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:02 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-28 13:20:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50687	34.206.4.244	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:02 UTC	909	OUT	POST /event?d_dil_ver=9.5&_ts=1711632001776 HTTP/1.1 Host: wellsfargobankna.demdex.net Connection: keep-alive Content-Length: 363 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; wellsfargobankna=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399
2024-03-28 13:20:02 UTC	363	OUT	Data Raw: 64 5f 6d 69 64 3d 33 33 39 31 38 36 38 33 30 32 31 32 35 34 34 37 32 32 36 34 31 36 38 35 32 37 38 32 35 39 39 39 32 38 37 32 37 33 26 64 5f 6e 73 69 64 3d 30 26 64 5f 63 6f 6f 70 5f 75 6e 73 61 66 65 3d 31 26 64 5f 63 69 64 5f 69 63 3d 77 66 61 63 6f 6f 6b 69 65 69 64 73 79 6e 63 25 30 31 31 31 32 30 32 34 30 33 32 38 30 36 31 38 35 31 31 32 36 32 38 38 39 34 39 25 30 31 31 26 64 5f 6c 64 3d 5f 74 73 25 33 44 31 37 31 31 36 33 32 30 30 31 37 37 36 26 64 5f 72 74 62 64 3d 6a 73 6f 6e 26 64 5f 6a 73 6f 6e 76 3d 31 26 64 5f 64 73 74 3d 31 26 63 5f 70 61 67 65 5f 69 64 3d 65 73 26 63 5f 61 70 70 5f 69 64 3d 57 57 57 26 63 5f 77 66 61 63 6f 6f 6b 69 65 3d 31 31 32 30 32 34 30 33 32 38 30 36 31 38 35 31 31 32 36 32 38 38 39 34 39 26 63 5f 70 61 67 65 5f 74 79 Data Ascii: d_mid=33918683021254472264168527825999287273&d_nsid=0&d_coop_unsafe=1&d_cid_ic=wfacookieidsync%011120240328061851126288949%011&d_ld=_ts%3D1711632001776&d_rtbd=json&d_jsonv=1&d_dst=1&c_page_id=es&c_app_id=WWW&c_wfacookie=1120240328061851126288949&c_page_ty
2024-03-28 13:20:02 UTC	1017	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:02 GMT Content-Type: application/json;charset=utf-8 Content-Length: 1966 Connection: close X-TID: FaxU6nK/SKU= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.wellsfargo.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-va6-2-v057-0657bcde1.edge-va6.demdex.com 85 ms set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:02 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: wellsfargobankna=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:02 GMT; Path=/; Domain=.wellsfargobankna.demdex.net; Secure; SameSite=None
2024-03-28 13:20:02 UTC	1966	IN	Data Raw: 7b 22 73 74 75 66 66 22 3a 5b 7b 22 63 6e 22 3a 22 69 61 2d 70 72 6f 64 22 2c 22 63 76 22 3a 22 69 64 3d 31 33 35 35 37 38 31 38 2c 32 32 30 33 33 39 30 32 2c 32 32 32 38 32 38 31 38 2c 32 33 35 30 38 31 38 32 2c 32 33 38 36 33 33 32 33 2c 32 34 34 39 34 33 37 36 2c 32 34 35 34 34 32 30 30 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 2e 6e 6f 64 6f 6d 61 69 6e 2e 63 6f 6d 22 7d 2c 7b 22 63 6e 22 3a 22 69 61 2d 70 72 65 70 72 6f 64 22 2c 22 63 76 22 3a 22 69 64 3d 39 32 35 35 30 37 37 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 2e 6e 6f 64 6f 6d 61 69 6e 2e 63 6f 6d 22 7d 2c 7b 22 63 6e 22 3a 22 74 6e 6c 2d 70 72 6f 64 22 2c 22 63 76 22 3a 22 69 64 3d 39 32 35 35 30 37 37 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 2e 6e 6f 64 Data Ascii: {"stuff":[{"cn":"ia-prod","cv":"id=13557818,22033902,22282818,23508182,23863323,24494376,24544200","ttl":30,"dmn":".nodomain.com"},{"cn":"ia-preprod","cv":"id=9255077","ttl":30,"dmn":".nodomain.com"},{"cn":"tnl-prod","cv":"id=9255077","ttl":30,"dmn":".nod

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50689	52.206.37.105	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:02 UTC	605	OUT	GET /ibs:dpid=21&dpuuid=213680604835005188846 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399; dpm=33955380241426191774167127150413392378
2024-03-28 13:20:02 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:02 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: bzavHaUsSIs= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v057-0716127c9.edge-va6.demdex.com 2 ms set-cookie: dpm=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:02 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:02 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-28 13:20:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50691	18.235.137.175	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:02 UTC	912	OUT	GET /ibs:dpid=477&dpuuid=bf3583479cfa2b30b4765233abf108d3347eb75cc59033dc0445efe44ff670a9b0da87c991749652 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wellsfargobankna.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399; dpm=33955380241426191774167127150413392378
2024-03-28 13:20:02 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:02 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: wTJZd48RRTY= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v057-089becee0.edge-va6.demdex.com 2 ms set-cookie: dpm=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:02 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:02 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-28 13:20:02 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50693	34.200.65.202	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:02 UTC	802	OUT	GET /ups/58782/cms?partner_id=ADOBE&_hosted_id=33955380241426191774167127150413392378&gdpr=0&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wellsfargobankna.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIJuBWYCEPb8U-CJH60GQy4IhOZlKpkFEgEBAQHABmYPZtxI0iMA_eMAAA&S=AQAAAhyf74IaX1jvls8UIM27QZU
2024-03-28 13:20:03 UTC	720	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 13:20:02 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=19cu~2hjp;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 28-Mar-2025 13:20:02 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://dpm.demdex.net/ibs:dpid=30646?dpuuid=y-13al3Z5E2pE8CkorAJgl6rqMyZb7QOVtPr4-~A Age: 0 Connection: close Server: ATS/9.1.10.106 Set-Cookie: A3=d=AQABBIJuBWYCEPb8U-CJH60GQy4IhOZlKpkFEgEBAQHABmYPZtxI0iMA_eMAAA&S=AQAAAhyf74IaX1jvls8UIM27QZU; Expires=Fri, 28 Mar 2025 19:20:02 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50695	52.206.37.105	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:02 UTC	647	OUT	GET /ibs:dpid=771&dpuuid=CAESEAYXrBaGbqB6HFcPdhpHR7g&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399; dpm=33955380241426191774167127150413392378
2024-03-28 13:20:03 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:03 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: BEdahSb7Q/o= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v057-087459079.edge-va6.demdex.com 6 ms set-cookie: dpm=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:03 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:03 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-28 13:20:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50696	52.206.37.105	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:02 UTC	618	OUT	GET /ibs:dpid=1957&dpuuid=375E6F2E0D8F6B9C2CEB7C8E098F6DFE HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399; dpm=33955380241426191774167127150413392378
2024-03-28 13:20:03 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:03 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: ppOhE0e5QHE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v057-0112796b1.edge-va6.demdex.com 2 ms set-cookie: dpm=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:03 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:03 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-28 13:20:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50699	146.75.29.230	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:03 UTC	714	OUT	GET /wdcusprem/57907/onsite/onsiteData.json HTTP/1.1 Host: resources.digital-cloud-prem.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "f911470fe0e560afcc355e2b7c2d14e0" If-Modified-Since: Wed, 27 Mar 2024 18:29:51 GMT
2024-03-28 13:20:03 UTC	375	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 28 Mar 2024 13:20:03 GMT Via: 1.1 varnish Cache-Control: max-age=0,must-revalidate ETag: "f911470fe0e560afcc355e2b7c2d14e0" Age: 25409 X-Served-By: cache-iad-kiad7000040-IAD X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1711632003.169954,VS0,VE1 Vary: Accept-Encoding Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50702	52.206.37.105	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:03 UTC	665	OUT	GET /ibs:dpid=477&dpuuid=bf3583479cfa2b30b4765233abf108d3347eb75cc59033dc0445efe44ff670a9b0da87c991749652 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399; dpm=33955380241426191774167127150413392378
2024-03-28 13:20:03 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:03 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: lBqbiF2QTo8= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v057-0588e95e0.edge-va6.demdex.com 2 ms set-cookie: dpm=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:03 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:03 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-28 13:20:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50704	18.235.137.175	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:03 UTC	874	OUT	GET /ibs:dpid=30646?dpuuid=y-13al3Z5E2pE8CkorAJgl6rqMyZb7QOVtPr4-~A HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wellsfargobankna.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399; dpm=33955380241426191774167127150413392378
2024-03-28 13:20:03 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:03 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: gUbelFdjQpQ= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v057-011334510.edge-va6.demdex.com 2 ms set-cookie: dpm=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:03 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:03 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-28 13:20:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50705	3.221.137.72	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:03 UTC	628	OUT	GET /event?d_dil_ver=9.5&_ts=1711632001776 HTTP/1.1 Host: wellsfargobankna.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; wellsfargobankna=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399
2024-03-28 13:20:03 UTC	915	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:03 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: SFGO6cn4QpY= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v057-074dba7d4.edge-va6.demdex.com 8 ms set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:03 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: wellsfargobankna=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:03 GMT; Path=/; Domain=.wellsfargobankna.demdex.net; Secure; SameSite=None
2024-03-28 13:20:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50706	151.101.65.44	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:03 UTC	620	OUT	GET /sg/adobe/1/cm?gdpr=0&gdpr_consent= HTTP/1.1 Host: trc.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wellsfargobankna.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:20:03 UTC	592	IN	HTTP/1.1 200 OK Connection: close Server: nginx Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 8168 Accept-Ranges: bytes Date: Thu, 28 Mar 2024 13:20:03 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-iad-kcgs7200044-IAD X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1711632003.494446,VS0,VE9 X-vcl-time-ms: 9 transfer-encoding: chunked
2024-03-28 13:20:03 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-03-28 13:20:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-03-28 13:20:03 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50709	146.75.29.230	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:03 UTC	504	OUT	GET /wdcusprem/57907/onsite/onsiteData.json HTTP/1.1 Host: resources.digital-cloud-prem.medallia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "f911470fe0e560afcc355e2b7c2d14e0" If-Modified-Since: Wed, 27 Mar 2024 18:29:51 GMT
2024-03-28 13:20:03 UTC	375	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 28 Mar 2024 13:20:03 GMT Via: 1.1 varnish Cache-Control: max-age=0,must-revalidate ETag: "f911470fe0e560afcc355e2b7c2d14e0" Age: 25410 X-Served-By: cache-iad-kiad7000079-IAD X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1711632004.636033,VS0,VE1 Vary: Accept-Encoding Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50711	35.241.45.82	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:03 UTC	666	OUT	POST /v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track HTTP/1.1 Host: udc-neb.kampyle.com Connection: keep-alive Content-Length: 2057 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:20:03 UTC	2057	OUT	Data Raw: 64 61 74 61 3d 25 37 42 25 32 32 65 76 65 6e 74 73 25 32 32 25 33 41 25 32 30 25 35 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 37 42 25 32 32 73 65 73 73 69 6f 6e 5f 73 63 72 65 65 6e 5f 73 69 7a 65 25 32 32 25 33 41 25 32 30 25 32 32 31 32 38 30 78 31 30 32 34 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 64 75 61 25 32 32 25 33 41 25 32 30 25 32 32 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 25 32 30 28 57 69 6e 64 6f 77 73 25 32 30 4e 54 25 32 30 31 30 2e 30 25 33 42 25 32 30 57 69 6e 36 34 25 33 42 25 32 30 78 36 34 29 25 32 30 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 25 32 30 28 4b 48 54 4d 4c 25 32 43 25 32 30 6c 69 6b 65 25 32 30 47 65 63 6b 6f 29 25 32 30 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 25 32 30 53 Data Ascii: data=%7B%22events%22%3A%20%5B%0A%20%20%20%20%7B%22session_screen_size%22%3A%20%221280x1024%22%2C%22session_dua%22%3A%20%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20S
2024-03-28 13:20:03 UTC	553	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:03 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.wellsfargo.com Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept Access-Control-Max-Age: 1800 X-ME: prod-instance-gatewayservice-green-8vvx X-Application-Context: application:9090 Content-Type: text/plain;charset=ISO-8859-1 Content-Length: 59 Server: Jetty(9.2.11.v20150529) Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-28 13:20:03 UTC	59	IN	Data Raw: 7b 22 65 76 65 6e 74 73 5f 63 6f 75 6e 74 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 22 35 22 2c 22 72 65 73 75 6c 74 73 22 3a 7b 7d 2c 22 73 74 61 74 75 73 22 3a 74 72 75 65 7d Data Ascii: {"events_count":1,"version":"5","results":{},"status":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50712	35.241.45.82	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:03 UTC	2306	OUT	GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1 Host: udc-neb.kampyle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:20:03 UTC	522	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:03 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept Access-Control-Max-Age: 1800 X-ME: prod-instance-gatewayservice-green-xfg3 X-Application-Context: application:9090 Content-Type: image/gif; charset=UTF-8 Content-Length: 0 Server: Jetty(9.2.11.v20150529) Via: 1.1 google Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50713	52.206.37.105	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:03 UTC	650	OUT	GET /ibs:dpid=30646?dpuuid=y-13al3Z5E2pE8CkorAJgl6rqMyZb7QOVtPr4-~A HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; dpm=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399\|147592-1-1711632002396
2024-03-28 13:20:03 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:03 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: wtjEKyJKTX8= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v057-0eed33ff5.edge-va6.demdex.com 9 ms set-cookie: dpm=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:03 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:03 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-03-28 13:20:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50707	35.163.101.91	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:03 UTC	670	OUT	GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PYY&msg=Assert%20fail%3A%20M50 HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:20:03 UTC	507	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:03 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 expires: 0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:20:03 UTC	32	IN	Data Raw: 31 61 0d 0a 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b 0d 0a Data Ascii: 1aGIF89a,;
2024-03-28 13:20:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50708	35.163.101.91	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:03 UTC	670	OUT	GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PYY&msg=Assert%20fail%3A%20M51 HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:20:03 UTC	507	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:03 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 expires: 0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:20:03 UTC	32	IN	Data Raw: 31 61 0d 0a 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b 0d 0a Data Ascii: 1aGIF89a,;
2024-03-28 13:20:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50715	151.101.1.44	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:03 UTC	373	OUT	GET /sg/adobe/1/cm?gdpr=0&gdpr_consent= HTTP/1.1 Host: trc.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:20:04 UTC	592	IN	HTTP/1.1 200 OK Connection: close Server: nginx Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 7122 Accept-Ranges: bytes Date: Thu, 28 Mar 2024 13:20:03 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-iad-kiad7000075-IAD X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1711632004.985868,VS0,VE8 X-vcl-time-ms: 8 transfer-encoding: chunked
2024-03-28 13:20:04 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-03-28 13:20:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-03-28 13:20:04 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50716	35.241.45.82	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:03 UTC	384	OUT	GET /v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track HTTP/1.1 Host: udc-neb.kampyle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:20:04 UTC	537	IN	HTTP/1.1 400 Bad Request Date: Thu, 28 Mar 2024 13:20:04 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept Access-Control-Max-Age: 1800 X-ME: prod-instance-gatewayservice-green-s86g X-Application-Context: application:9090 Content-Type: text/plain;charset=ISO-8859-1 Content-Length: 91 Server: Jetty(9.2.11.v20150529) Via: 1.1 google Alt-Svc: clear Connection: close
2024-03-28 13:20:04 UTC	91	IN	Data Raw: 7b 22 72 65 61 73 6f 6e 22 3a 22 49 6e 76 61 6c 69 64 20 61 72 67 75 6d 65 6e 74 73 22 2c 22 65 76 65 6e 74 73 5f 63 6f 75 6e 74 22 3a 22 30 22 2c 22 72 65 73 75 6c 74 73 22 3a 7b 7d 2c 22 76 65 72 73 69 6f 6e 22 3a 22 35 22 2c 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d Data Ascii: {"reason":"Invalid arguments","events_count":"0","results":{},"version":"5","status":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50717	35.241.45.82	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:03 UTC	2068	OUT	GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1 Host: udc-neb.kampyle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:20:04 UTC	522	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:04 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE Access-Control-Allow-Headers: X-Requested-With, Origin, Content-Type, Accept Access-Control-Max-Age: 1800 X-ME: prod-instance-gatewayservice-green-htdv X-Application-Context: application:9090 Content-Type: image/gif; charset=UTF-8 Content-Length: 0 Server: Jetty(9.2.11.v20150529) Via: 1.1 google Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50718	35.163.101.91	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:04 UTC	663	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PYY/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive Content-Length: 16106 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:20:04 UTC	16106	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 33 2e 37 2e 31 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 2f 34 2f 35 22 2c 22 74 73 22 3a 31 37 31 31 36 33 32 30 30 32 31 36 37 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 36 2f 37 2f 38 2f 22 2c 22 61 74 22 3a 30 2c 22 70 70 22 3a 33 2c 22 6d 78 22 3a 7b 22 50 4c 43 22 3a 31 2c 22 46 42 54 22 3a 33 39 38 2c 22 44 44 54 22 3a 30 2c 22 44 50 54 22 3a 31 2c 22 50 4c 54 22 3a 33 39 39 2c 22 41 52 45 22 3a 30 7d 2c 22 6d 64 22 3a 22 47 45 54 22 2c 22 78 73 22 3a 32 30 30 2c 22 73 69 22 3a 31 37 7d 2c 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f Data Ascii: {"vr":"4.3.7.1","dt":"R","rg":"0","es":[{"eg":"1","et":2,"eu":"0://1/2/3/4/5","ts":1711632002167,"mg":"0","au":"0://6/7/8/","at":0,"pp":3,"mx":{"PLC":1,"FBT":398,"DDT":0,"DPT":1,"PLT":399,"ARE":0},"md":"GET","xs":200,"si":17},{"eg":"1","et":2,"eu":"0://1/
2024-03-28 13:20:04 UTC	1216	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:04 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:27\|g:eef28bc0-3961-4d20-bb91-808be21b9b1e; Path=/; Expires=Thu, 28-Mar-2024 13:20:34 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:27\|g:eef28bc0-3961-4d20-bb91-808be21b9b1e\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:20:34 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:20:34 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:27\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:20:34 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:27\|i:559461\|e:5; Path=/; Expires=Thu, 28-Mar-2024 13:20:34 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:27\|i:559461\|e:5\|t:1711632004311; Path=/; Expires=Thu, 28-Mar-2024 13:20:34 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:20:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50719	34.211.102.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:04 UTC	604	OUT	GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PYY&msg=Assert%20fail%3A%20M50 HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:6053aa53-4d25-47eb-a17f-8f18b55ab04f\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631998963
2024-03-28 13:20:04 UTC	507	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:04 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 expires: 0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:20:04 UTC	32	IN	Data Raw: 31 61 0d 0a 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b 0d 0a Data Ascii: 1aGIF89a,;
2024-03-28 13:20:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50721	34.211.102.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:04 UTC	604	OUT	GET /eumcollector/error.gif?version=1&appKey=AD-AAB-ABJ-PYY&msg=Assert%20fail%3A%20M51 HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:6053aa53-4d25-47eb-a17f-8f18b55ab04f\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631998963
2024-03-28 13:20:04 UTC	507	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:04 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 expires: 0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:20:04 UTC	32	IN	Data Raw: 31 61 0d 0a 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b 0d 0a Data Ascii: 1aGIF89a,;
2024-03-28 13:20:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50723	52.46.155.104	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:04 UTC	636	OUT	GET /dcm?pid=5c420d2b-f139-4fee-b0c0-89a7b8ce9433 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wellsfargobankna.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:20:04 UTC	743	IN	HTTP/1.1 302 Found Server: Server Date: Thu, 28 Mar 2024 13:20:04 GMT Content-Length: 0 Connection: close x-amz-rid: 41S1NZ85ETTBZF7FQF2E Set-Cookie: ad-id=A7MgQcTp30bjotxx8RJq0t8\|t; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 13:20:04 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/dcm?pid=5c420d2b-f139-4fee-b0c0-89a7b8ce9433&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50724	52.46.155.104	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:04 UTC	683	OUT	GET /dcm?pid=5c420d2b-f139-4fee-b0c0-89a7b8ce9433&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wellsfargobankna.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A7MgQcTp30bjotxx8RJq0t8\|t
2024-03-28 13:20:05 UTC	954	IN	HTTP/1.1 302 Found Server: Server Date: Thu, 28 Mar 2024 13:20:05 GMT Content-Length: 0 Connection: close x-amz-rid: 60DD36N8316WZZR74JN6 Set-Cookie: ad-id=A7MgQcTp30bjotxx8RJq0t8; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 13:20:04 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 13:20:05 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://dpm.demdex.net/ibs:dpid=139200&dpuuid=ZLVBG9sATvitfmBaiM_67A&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dadobe.com%26id%3D%24%7BDD_UUID%7D Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50725	34.211.102.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:04 UTC	575	OUT	GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PYY/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:6053aa53-4d25-47eb-a17f-8f18b55ab04f\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631998963
2024-03-28 13:20:05 UTC	1500	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:05 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:6053aa53-4d25-47eb-a17f-8f18b55ab04f\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2\|t:1711631998963; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:017c87ea-3e99-46ce-b663-7d19688f8189; Path=/; Expires=Thu, 28-Mar-2024 13:20:35 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:017c87ea-3e99-46ce-b663-7d19688f8189\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:20:35 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:20:35 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:20:35 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:6; Path=/; Expires=Thu, 28-Mar-2024 13:20:35 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:6\|t:1711632005246; Path=/; Expires=Thu, 28-Mar-2024 13:20:35 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:20:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50727	18.235.137.175	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:05 UTC	993	OUT	GET /ibs:dpid=139200&dpuuid=ZLVBG9sATvitfmBaiM_67A&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dadobe.com%26id%3D%24%7BDD_UUID%7D HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wellsfargobankna.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=33955380241426191774167127150413392378; dpm=33955380241426191774167127150413392378; dextp=21-1-1711632000774\|60-1-1711632000882\|477-1-1711632001004\|771-1-1711632001120\|1957-1-1711632001232\|30646-1-1711632001399\|147592-1-1711632002396\|139200-1-1711632003398
2024-03-28 13:20:05 UTC	934	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 13:20:05 GMT Content-Length: 0 Connection: close X-TID: fOkNMpaVSkE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://s.amazon-adsystem.com/ecm3?ex=adobe.com&id=33955380241426191774167127150413392378 DCS: dcs-prod-va6-1-v057-004d3c0cf.edge-va6.demdex.com 4 ms set-cookie: dpm=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:05 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=33955380241426191774167127150413392378; Max-Age=15552000; Expires=Tue, 24 Sep 2024 13:20:05 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50728	35.163.101.91	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:05 UTC	684	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZD/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive Content-Length: 3849 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://connect.secure.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://connect.secure.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 13:20:05 UTC	3849	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 33 2e 37 2e 31 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 2f 34 2f 35 3f 36 22 2c 22 74 73 22 3a 31 37 31 31 36 33 31 39 39 38 36 36 38 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 37 2f 38 2f 39 2f 31 30 3f 31 31 22 2c 22 61 74 22 3a 30 2c 22 70 70 22 3a 33 2c 22 6d 78 22 3a 7b 22 50 4c 43 22 3a 31 2c 22 46 42 54 22 3a 34 39 36 2c 22 44 44 54 22 3a 32 2c 22 44 50 54 22 3a 31 34 2c 22 50 4c 54 22 3a 35 31 32 2c 22 41 52 45 22 3a 30 7d 2c 22 6d 64 22 3a 22 50 4f 53 54 22 2c 22 78 73 22 3a 32 30 30 2c 22 61 6e 22 3a 22 2f 61 75 74 68 2f 6c 6f 67 69 6e 2f 70 72 65 73 65 6e 74 2d 52 65 61 Data Ascii: {"vr":"4.3.7.1","dt":"R","rg":"0","es":[{"eg":"1","et":2,"eu":"0://1/2/3/4/5?6","ts":1711631998668,"mg":"0","au":"0://7/8/9/10?11","at":0,"pp":3,"mx":{"PLC":1,"FBT":496,"DDT":2,"DPT":14,"PLT":512,"ARE":0},"md":"POST","xs":200,"an":"/auth/login/present-Rea
2024-03-28 13:20:05 UTC	1216	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:05 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:38\|g:fe8376f8-9587-4e66-abc6-8b0b69ffb2a0; Path=/; Expires=Thu, 28-Mar-2024 13:20:35 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:38\|g:fe8376f8-9587-4e66-abc6-8b0b69ffb2a0\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:20:35 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:20:35 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:38\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:20:35 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:38\|i:559461\|e:2; Path=/; Expires=Thu, 28-Mar-2024 13:20:35 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:38\|i:559461\|e:2\|t:1711632005891; Path=/; Expires=Thu, 28-Mar-2024 13:20:35 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:20:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50731	52.46.155.104	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:05 UTC	704	OUT	GET /ecm3?ex=adobe.com&id=33955380241426191774167127150413392378 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wellsfargobankna.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A7MgQcTp30bjotxx8RJq0t8; ad-privacy=0
2024-03-28 13:20:05 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 28 Mar 2024 13:20:05 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: N8XVQ3YRVJ61SEF899C6 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-28 13:20:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50737	209.54.182.161	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:06 UTC	457	OUT	GET /ecm3?ex=adobe.com&id=33955380241426191774167127150413392378 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A7MgQcTp30bjotxx8RJq0t8; ad-privacy=0
2024-03-28 13:20:06 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 28 Mar 2024 13:20:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: VZAQGSZ2H5P4YCH0HSY8 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-03-28 13:20:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50736	34.211.102.35	443	1704	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:06 UTC	575	OUT	GET /eumcollector/beacons/browser/v1/AD-AAB-ABJ-PZD/adrum HTTP/1.1 Host: pdx-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:017c87ea-3e99-46ce-b663-7d19688f8189\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:6\|t:1711632005246
2024-03-28 13:20:06 UTC	1502	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:06 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:017c87ea-3e99-46ce-b663-7d19688f8189\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:6\|t:1711632005246; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:b519a43e-016c-4ccf-a638-b5719d9a26c3; Path=/; Expires=Thu, 28-Mar-2024 13:20:36 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:b519a43e-016c-4ccf-a638-b5719d9a26c3\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 28-Mar-2024 13:20:36 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 28-Mar-2024 13:20:36 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:559461; Path=/; Expires=Thu, 28-Mar-2024 13:20:36 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:33; Path=/; Expires=Thu, 28-Mar-2024 13:20:36 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:33\|t:1711632006616; Path=/; Expires=Thu, 28-Mar-2024 13:20:36 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-03-28 13:20:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
305	192.168.2.4	50742	34.194.24.182	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:08 UTC	1179	OUT	POST /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=9fa406fb-8541-4a53-bdc9-8d711b8258a5&sn=6&cfg=201c2b80&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive Content-Length: 205 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.wellsfargo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.wellsfargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; AWSALBTGCORS=s9LxfQIZszJLxGjE80XfDJbQWw8w3k9PNpV1A3+4xqajdOTFYOAO9VLh1TGyJfvOjHfm6iMKIOXa8slB5Hg+lo6kisMCeDrVFQThDm8Z3jky2pmtgP+4rkBB9hir4sF62t1OVU5qWie0COpcNGwdmTXSoYDM3klNg0mdthiK/TKP
2024-03-28 13:20:08 UTC	205	OUT	Data Raw: 76 3d 32 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 25 32 46 61 62 6f 75 74 25 32 46 26 73 6e 3d 36 26 70 3d 39 66 61 34 30 36 66 62 2d 38 35 34 31 2d 34 61 35 33 2d 62 64 63 39 2d 38 64 37 31 31 62 38 32 35 38 61 35 26 73 65 67 3d 25 32 46 61 62 6f 75 74 25 32 46 26 73 70 3d 26 70 73 73 6e 3d 30 26 65 3d 6c 75 62 39 68 78 65 6a 7e 32 39 7e 2d 7e 4e 68 7a 5f 63 61 7e 66 74 2e 30 5f 30 2a 73 65 6c 65 63 74 6f 72 41 63 74 69 6f 6e 43 6f 75 6e 74 2e 30 5f 39 2a 65 76 65 6e 74 49 64 2e 30 5f 34 78 7e 2d 7e 2d 7e 2d 26 64 6f 6d 3d 26 70 61 74 74 72 3d Data Ascii: v=2&r=https%3A%2F%2Fwww.wellsfargo.com%2Fabout%2F&sn=6&p=9fa406fb-8541-4a53-bdc9-8d711b8258a5&seg=%2Fabout%2F&sp=&pssn=0&e=lub9hxej~29~-~Nhz_ca~ft.0_0selectorActionCount.0_9eventId.0_4x~-~-~-&dom=&pattr=
2024-03-28 13:20:08 UTC	873	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:08 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=ePODO1rryhFUxvR+/Aeo3CWm2QBe15pif/ACruKvJbkqr3sgZ0s6yZUkYDiBU6XU9n7CwOwo5tZsQMiQmdIuZ3WRCSN53w+IPiFSlezhSE4dNo0DwGxJY7cLueUILVmA6fy/ZML1m77jbwdd41rzWeP01yyUEEqF+xqWa/G3L/kD; Expires=Thu, 04 Apr 2024 13:20:08 GMT; Path=/ Set-Cookie: AWSALBTGCORS=ePODO1rryhFUxvR+/Aeo3CWm2QBe15pif/ACruKvJbkqr3sgZ0s6yZUkYDiBU6XU9n7CwOwo5tZsQMiQmdIuZ3WRCSN53w+IPiFSlezhSE4dNo0DwGxJY7cLueUILVmA6fy/ZML1m77jbwdd41rzWeP01yyUEEqF+xqWa/G3L/kD; Expires=Thu, 04 Apr 2024 13:20:08 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate access-control-allow-origin: https://www.wellsfargo.com vary: origin access-control-allow-credentials: true set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None Set-Cookie: ROUTEID=.cligate1; path=/
2024-03-28 13:20:08 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Session ID	Source IP	Source Port	Destination IP	Destination Port
306	192.168.2.4	50743	34.194.24.182	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 13:20:08 UTC	1100	OUT	GET /glassbox/reporting/0C458F45-AC71-02CE-34D8-401C8A313B38/cls_report?clsjsv=6.6.118B257&_cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0&_cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d&pid=9fa406fb-8541-4a53-bdc9-8d711b8258a5&sn=6&cfg=201c2b80&pv=2&aid= HTTP/1.1 Host: gbxreport-prod.wf.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cls_cfgver=fc5c7ded; _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; ROUTEID=.cligate1; AWSALBTG=s9LxfQIZszJLxGjE80XfDJbQWw8w3k9PNpV1A3+4xqajdOTFYOAO9VLh1TGyJfvOjHfm6iMKIOXa8slB5Hg+lo6kisMCeDrVFQThDm8Z3jky2pmtgP+4rkBB9hir4sF62t1OVU5qWie0COpcNGwdmTXSoYDM3klNg0mdthiK/TKP; AWSALBTGCORS=ePODO1rryhFUxvR+/Aeo3CWm2QBe15pif/ACruKvJbkqr3sgZ0s6yZUkYDiBU6XU9n7CwOwo5tZsQMiQmdIuZ3WRCSN53w+IPiFSlezhSE4dNo0DwGxJY7cLueUILVmA6fy/ZML1m77jbwdd41rzWeP01yyUEEqF+xqWa/G3L/kD
2024-03-28 13:20:08 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 13:20:08 GMT Content-Type: application/json Content-Length: 4627 Connection: close Set-Cookie: AWSALBTG=tSvk2m7qdbKp00InDMSgPd+SZcMVuRzMwmJYuNPB40vzHiPF1KO5x6gDLKKIjTC7v0/DxdrOeX7WsD0WICf1wtqasrzERdgOqJe18c5zrAcb/ZdFroIjYpB+ooBwdlApkiyL3beFX8p4YM+c+9xhYbHgGDQbPzQD4zojypQfF0IH; Expires=Thu, 04 Apr 2024 13:20:08 GMT; Path=/ Set-Cookie: AWSALBTGCORS=tSvk2m7qdbKp00InDMSgPd+SZcMVuRzMwmJYuNPB40vzHiPF1KO5x6gDLKKIjTC7v0/DxdrOeX7WsD0WICf1wtqasrzERdgOqJe18c5zrAcb/ZdFroIjYpB+ooBwdlApkiyL3beFX8p4YM+c+9xhYbHgGDQbPzQD4zojypQfF0IH; Expires=Thu, 04 Apr 2024 13:20:08 GMT; Path=/; SameSite=None; Secure Server: Glassbox Cligate set-cookie: _cls_cfgver=fc5c7ded; Secure; SameSite=None set-cookie: _cls_v=1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d; Secure; SameSite=None set-cookie: _cls_s=2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0; Secure; SameSite=None
2024-03-28 13:20:08 UTC	4627	IN	Data Raw: 7b 22 70 76 22 3a 32 2c 22 63 6c 73 73 22 3a 22 32 34 36 32 61 61 61 66 2d 39 35 38 66 2d 34 63 62 36 2d 61 33 63 62 2d 65 63 66 39 66 36 61 31 30 61 30 64 3a 30 22 2c 22 63 6c 73 76 22 3a 22 31 62 31 66 37 65 31 66 2d 37 62 65 64 2d 34 62 61 32 2d 62 35 65 65 2d 39 62 65 36 33 63 39 65 35 37 35 64 22 2c 22 63 6c 73 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 22 3a 7b 22 61 70 70 49 64 22 3a 31 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 7b 22 61 74 74 72 69 62 75 74 65 52 75 6c 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 43 41 5f 57 61 6c 6c 65 74 4d 65 73 73 61 67 65 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 6e 65 63 74 2e 73 65 63 75 72 65 2e 77 65 6c 6c 73 66 61 72 67 6f 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 61 6c Data Ascii: {"pv":2,"clss":"2462aaaf-958f-4cb6-a3cb-ecf9f6a10a0d:0","clsv":"1b1f7e1f-7bed-4ba2-b5ee-9be63c9e575d","clse":null,"conf":{"appId":1,"configuration":{"attributeRules":[{"name":"CA_WalletMessage","pageUrl":"https://connect.secure.wellsfargo.com/services/wal

Target ID:	0
Start time:	14:18:44
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	14:18:46
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2024,i,13790965430040798669,7551964596815697510,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	14:18:49
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.wellsfargo.com/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.wellsfargo.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Windows Analysis Report
https://www.wellsfargo.com/