Windows Analysis Report
https://global.americanexpress.com/help?inav=iNUtlContact&extlink=us-em-serv-footer-helpcenter

Overview

General Information

Sample URL: https://global.americanexpress.com/help?inav=iNUtlContact&extlink=us-em-serv-footer-helpcenter
Analysis ID: 1426758
Infos:

Detection

Score: 1
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

HTML body with high number of embedded images detected
Stores files to the Windows start menu directory

Classification

HTML body with high number of embedded images detected
Source: https://global.americanexpress.com/help?inav=iNUtlContact&extlink=us-em-serv-footer-helpcenter HTTP Parser: Total embedded image size: 15606
Source: unknown HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.18:49693 version: TLS 1.2
Source: unknown HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.18:49697 version: TLS 1.2
Source: unknown HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.18:49698 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.18:49705 version: TLS 1.2
Source: unknown TCP traffic detected without corresponding DNS query: 23.79.187.180
Source: unknown TCP traffic detected without corresponding DNS query: 23.76.32.107
Source: unknown TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: global traffic HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=s+M7GxcDtlbET9Y&MD=DFrtxrWu HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=s+M7GxcDtlbET9Y&MD=DFrtxrWu HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /id?d_visid_ver=5.0.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=5C36123F5245AF470A490D45%40AdobeOrg&d_nsid=15&ts=1713274301023 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: https://global.americanexpress.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /id/rd?d_visid_ver=5.0.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=5C36123F5245AF470A490D45%40AdobeOrg&d_nsid=15&ts=1713274301023 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: https://global.americanexpress.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14639981717196152352028843229767243559
Source: global traffic HTTP traffic detected: GET /id?d_visid_ver=5.0.0&d_fieldgroup=A&mcorgid=5C36123F5245AF470A490D45%40AdobeOrg&mid=14483685490011032432048978651132711855&ts=1713274302100 HTTP/1.1Host: omns.americanexpress.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: https://global.americanexpress.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS0114bdae=0144d4a839586b141b989af62e52371e6fc307f9d3a5061f1757c48d9180280c953015a6c6dc95d5b236407f09d657189c894cb579; agent-id=75ae5b53-68cf-4749-8f79-9c43a50fd031; bm_sz=6F6A31595189F7CEAF8A71424DC072A4~YAAQT2gBF03jz8qOAQAA+PQa5xdLqqvmjQo3qql/RSrk+NqgjmVtGRIpJ5fdyCwxL0VXYKaP3pbR9g9uEQWh5UXeVA9Y7V1m7P4NNPA2wKeGfYWBW+KWNGyMZxqUZSy9uAImtIyhIACEkuWppPtqSOdH4vOm1jvnIpZNwdjJ40gWe4OdNk+2mZF9LZGpSPN5W63KHWQIvJ4iH5vJLvoAaS+w4fiJUQj52oL6gxC2RBjBKPwxow2vambX2wX+CPZjRLt4NZMtr+f2bbmARnFCo/v3eRsPyS0JH12rulCjsr5LIQPNrvwt3MBukJtjlim+A82Bo9I2DgrIS9B1+gITDv42IX5px8tCUDTbVR2J6Yk61l/LMCVXt34MUCVLH7mYt71W1ejDyL4Ow4Ls~3293761~4342328; rxVisitor=1713274290937A7R6R3LAF697QOVKMJMDGTMITTEUMT0A; dtLatC=509; dtSa=-; dtCookie=v_4_srv_104_sn_D31AC96E3DF032551F710E6D44416A15_app-3Af32f70c4a19cb7f4_1_ol_0_perc_100000_mul_1_rcs-3Acss_0; _abck=AD827B41E34AB180244EB157C2E73EBF~0~YAAQUGgBFxym8NWOAQAAohcb5wu2ZGB60GcxQTa+6qpnA6FyqN4LrC5qrO0RImU4BIA5aiW5kpMSaiSyndfm39JpVX1S9C5VrOKKlePm9qqeBP9bYW6Iy7qKpBsP3xUYB36lvGG30+nKugXF2BlliLDzfCwaXSu1mXM8QrQC/1pLZU9IMUL+Xd7YLjPlWK7R8OkqushCcrWmU0Z8UNvySw6H36ckn7kVb74EibUOlgNgtg3l8YqVIigkF1WhtKEz6PsqbZ8oa/aADoHU3xYQBLcjAXjQkb8zA7V6/swvOTxG9IFfROLdI5inH5Ekc1pUAyTn1mvUZihn7Z+D5+RQBw6w7sE/nU7wgoFoU8sLmvC19Zmav3geNzaUhXZ5j7rF/R3U84iksSTiDDNRG6kw2MqWYlSBD4zoUiPFl9c7ypAI~-1~-1~-1; rxvt=1713276099040|1713274290940; dtPC=$274290934_630h-vCCRUAIBSCBAUJCNRSUGTAFBDWCRAFKQA-0e0; s_pers=%20s_tslv%3D1713274301817%7C1776346301817%3B; s_sess=%20s_tp%3D1568%3B%20s_ppv%3Dus%25257Coneamex%25257Cser%25257Chelp%252C58%252C58%252C907%3B%20omn_extlink%3Dus-em-serv-footer-helpcenter%3B%20omn_inav%3DiNUtlContact%3B; AMCVS_5C36123F5245AF470A490D45%40AdobeOrg=1; AMCV_5C36123F5245AF470A490D45%40AdobeOrg=870038026%7CMCMID%7C14483685490011032432048978651132711855%7CMCAAMLH-1713879102%7C7%7CMCAAMB-1713879102%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713281502s%7CNONE%7CvVersion%7C5.0.0
Source: global traffic HTTP traffic detected: GET /id/rd?d_visid_ver=5.0.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=5C36123F5245AF470A490D45%40AdobeOrg&d_nsid=15&ts=1713274301023 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14639981717196152352028843229767243559
Source: global traffic HTTP traffic detected: GET /b/ss/amexpressenterpriseprod/1/JS-2.23.0-LDQM/s6959995791769?AQB=1&ndh=1&pf=1&t=16%2F3%2F2024%2015%3A31%3A42%202%20-120&mid=14483685490011032432048978651132711855&aamlh=7&ce=UTF-8&cl=34128000&pageName=us%7Coneamex%7Cser%7Chelp&g=https%3A%2F%2Fglobal.americanexpress.com%2Fhelp%3Finav%3DiNUtlContact%26extlink%3Dus-em-serv-footer-helpcenter%26extlink%3Dus-em-serv-footer-helpcenter%26&c.&visitorCheck=VisitorAPI%20Present&cm.&ssf=1&.cm&omn.&lob=ser&country=us&language=en&extlink=us-em-serv-footer-helpcenter&inav=iNUtlContact&.omn&.c&h.&architecture=x86&bitness=64&platformVersion=10.0.0&.h&cc=USD&server=global.americanexpress.com&v0=extlink%3Dus-em-serv-footer-helpcenter&events=event140%2Cevent45&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&h1=us%7Coneamex%7Cser&c3=en&c4=US&c6=D%3Dv6&v8=iNUtlContact&c10=prospect&c12=D%3Dv12&c14=D%3Dv14&c15=D%3Dv15&c16=D%3Dv16&c19=US%7Coneamex%7Cser&v21=US%3ALegacy%20Non-Search&c24=US%7Coneamex%7Cser&v27=US&c30=US%7Coneamex%7Cser&c31=US&c38=US%7Coneamex%7Cser&c43=New%20Visitor&c44=D%3Dv44&v45=prospect&c46=DLS%20Navigation&c49=Launch-OneAmex%3Av1.4.9-AM%3A2.23.0-VISID%3A5.0.0-DIL%3ANA-SS%3AY-msuite%3Atrue-PD%3A2024-04-03&c50=non-authenticated&c56=oneamex%3Adesktop&v60=1280&v61=landscape&c64=D%3Dv64&c65=D%3Dv65&c67=D%3Dv67&c69=D%3Dv69&v71=us%7Coneamex%7Cser%7Chelp&v72=n%2Fa&v74=us%7Coneamex%7Cser%7Chelp&c75=Launch&v75=14483685490011032432048978651132711855&v94=D%3Dagent-id&v140=UCM%3A%20en-US%7C%20docEle%3A%20en-US%7C&v142=1713274290937A7R6R3LAF697QOVKMJMDGTMITTEUMT0A&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=5C36123F5245AF470A490D45%40AdobeOrg&AQE=1 HTTP/1.1Host: omns.americanexpress.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS0114bdae=0144d4a839586b141b989af62e52371e6fc307f9d3a5061f1757c48d9180280c953015a6c6dc95d5b236407f09d657189c894cb579; agent-id=75ae5b53-68cf-4749-8f79-9c43a50fd031; bm_sz=6F6A31595189F7CEAF8A71424DC072A4~YAAQT2gBF03jz8qOAQAA+PQa5xdLqqvmjQo3qql/RSrk+NqgjmVtGRIpJ5fdyCwxL0VXYKaP3pbR9g9uEQWh5UXeVA9Y7V1m7P4NNPA2wKeGfYWBW+KWNGyMZxqUZSy9uAImtIyhIACEkuWppPtqSOdH4vOm1jvnIpZNwdjJ40gWe4OdNk+2mZF9LZGpSPN5W63KHWQIvJ4iH5vJLvoAaS+w4fiJUQj52oL6gxC2RBjBKPwxow2vambX2wX+CPZjRLt4NZMtr+f2bbmARnFCo/v3eRsPyS0JH12rulCjsr5LIQPNrvwt3MBukJtjlim+A82Bo9I2DgrIS9B1+gITDv42IX5px8tCUDTbVR2J6Yk61l/LMCVXt34MUCVLH7mYt71W1ejDyL4Ow4Ls~3293761~4342328; rxVisitor=1713274290937A7R6R3LAF697QOVKMJMDGTMITTEUMT0A; dtLatC=509; dtSa=-; dtCookie=v_4_srv_104_sn_D31AC96E3DF032551F710E6D44416A15_app-3Af32f70c4a19cb7f4_1_ol_0_perc_100000_mul_1_rcs-3Acss_0; _ab
Source: global traffic HTTP traffic detected: GET /id?d_visid_ver=5.0.0&d_fieldgroup=A&mcorgid=5C36123F5245AF470A490D45%40AdobeOrg&mid=14483685490011032432048978651132711855&ts=1713274302100 HTTP/1.1Host: omns.americanexpress.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS0114bdae=0144d4a839586b141b989af62e52371e6fc307f9d3a5061f1757c48d9180280c953015a6c6dc95d5b236407f09d657189c894cb579; agent-id=75ae5b53-68cf-4749-8f79-9c43a50fd031; bm_sz=6F6A31595189F7CEAF8A71424DC072A4~YAAQT2gBF03jz8qOAQAA+PQa5xdLqqvmjQo3qql/RSrk+NqgjmVtGRIpJ5fdyCwxL0VXYKaP3pbR9g9uEQWh5UXeVA9Y7V1m7P4NNPA2wKeGfYWBW+KWNGyMZxqUZSy9uAImtIyhIACEkuWppPtqSOdH4vOm1jvnIpZNwdjJ40gWe4OdNk+2mZF9LZGpSPN5W63KHWQIvJ4iH5vJLvoAaS+w4fiJUQj52oL6gxC2RBjBKPwxow2vambX2wX+CPZjRLt4NZMtr+f2bbmARnFCo/v3eRsPyS0JH12rulCjsr5LIQPNrvwt3MBukJtjlim+A82Bo9I2DgrIS9B1+gITDv42IX5px8tCUDTbVR2J6Yk61l/LMCVXt34MUCVLH7mYt71W1ejDyL4Ow4Ls~3293761~4342328; rxVisitor=1713274290937A7R6R3LAF697QOVKMJMDGTMITTEUMT0A; dtLatC=509; dtSa=-; dtCookie=v_4_srv_104_sn_D31AC96E3DF032551F710E6D44416A15_app-3Af32f70c4a19cb7f4_1_ol_0_perc_100000_mul_1_rcs-3Acss_0; _abck=AD827B41E34AB180244EB157C2E73EBF~0~YAAQUGgBFxym8NWOAQAAohcb5wu2ZGB60GcxQTa+6qpnA6FyqN4LrC5qrO0RImU4BIA5aiW5kpMSaiSyndfm39JpVX1S9C5VrOKKlePm9qqeBP9bYW6Iy7qKpBsP3xUYB36lvGG30+nKugXF2BlliLDzfCwaXSu1mXM8QrQC/1pLZU9IMUL+Xd7YLjPlWK7R8OkqushCcrWmU0Z8UNvySw6H36ckn7kVb74EibUOlgNgtg3l8YqVIigkF1WhtKEz6PsqbZ8oa/aADoHU3xYQBLcjAXjQkb8zA7V6/swvOTxG9IFfROLdI5inH5Ekc1pUAyTn1mvUZihn7Z+D5+RQBw6w7sE/nU7wgoFoU8sLmvC19Zmav3geNzaUhXZ5j7rF/R3U84iksSTiDDNRG6kw2MqWYlSBD4zoUiPFl9c7ypAI~-1~-1~-1; rxvt=1713276099040|1713274290940; dtPC=$274290934_630h-vCCRUAIBSCBAUJCNRSUGTAFBDWCRAFKQA-0e0; s_pers=%20s_tslv%3D1713274301817%7C1776346301817%3B; s_sess=%20s_tp%3D1568%3B%20s_ppv%3Dus%25257Coneamex%25257Cser%25257Chelp%252C58%252C58%252C907%3B%20omn_extlink%3Dus-em-serv-footer-helpcenter%3B%20omn_inav%3DiNUtlContact%3B; AMCVS_5C36123F5245AF470A490D45%40AdobeOrg=1; s_ecid=MCMID%7C14483685490011032432048978651132711855; AMCV_5C36123F5245AF470A490D45%40AdobeOrg=870038026%7CMCMID%7C14483685490011032432048978651132711855%7CMCAAMLH-1713879102%7C7%7CMCAAMB-1713879102%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713281502s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C5.0.0
Source: global traffic HTTP traffic detected: GET /b/ss/amexpressenterpriseprod/1/JS-2.23.0-LDQM/s6959995791769?AQB=1&ndh=1&pf=1&t=16%2F3%2F2024%2015%3A31%3A42%202%20-120&mid=14483685490011032432048978651132711855&aamlh=7&ce=UTF-8&cl=34128000&pageName=us%7Coneamex%7Cser%7Chelp&g=https%3A%2F%2Fglobal.americanexpress.com%2Fhelp%3Finav%3DiNUtlContact%26extlink%3Dus-em-serv-footer-helpcenter%26extlink%3Dus-em-serv-footer-helpcenter%26&c.&visitorCheck=VisitorAPI%20Present&cm.&ssf=1&.cm&omn.&lob=ser&country=us&language=en&extlink=us-em-serv-footer-helpcenter&inav=iNUtlContact&.omn&.c&h.&architecture=x86&bitness=64&platformVersion=10.0.0&.h&cc=USD&server=global.americanexpress.com&v0=extlink%3Dus-em-serv-footer-helpcenter&events=event140%2Cevent45&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&h1=us%7Coneamex%7Cser&c3=en&c4=US&c6=D%3Dv6&v8=iNUtlContact&c10=prospect&c12=D%3Dv12&c14=D%3Dv14&c15=D%3Dv15&c16=D%3Dv16&c19=US%7Coneamex%7Cser&v21=US%3ALegacy%20Non-Search&c24=US%7Coneamex%7Cser&v27=US&c30=US%7Coneamex%7Cser&c31=US&c38=US%7Coneamex%7Cser&c43=New%20Visitor&c44=D%3Dv44&v45=prospect&c46=DLS%20Navigation&c49=Launch-OneAmex%3Av1.4.9-AM%3A2.23.0-VISID%3A5.0.0-DIL%3ANA-SS%3AY-msuite%3Atrue-PD%3A2024-04-03&c50=non-authenticated&c56=oneamex%3Adesktop&v60=1280&v61=landscape&c64=D%3Dv64&c65=D%3Dv65&c67=D%3Dv67&c69=D%3Dv69&v71=us%7Coneamex%7Cser%7Chelp&v72=n%2Fa&v74=us%7Coneamex%7Cser%7Chelp&c75=Launch&v75=14483685490011032432048978651132711855&v94=D%3Dagent-id&v140=UCM%3A%20en-US%7C%20docEle%3A%20en-US%7C&v142=1713274290937A7R6R3LAF697QOVKMJMDGTMITTEUMT0A&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=5C36123F5245AF470A490D45%40AdobeOrg&AQE=1 HTTP/1.1Host: omns.americanexpress.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS0114bdae=0144d4a839586b141b989af62e52371e6fc307f9d3a5061f1757c48d9180280c953015a6c6dc95d5b236407f09d657189c894cb579; agent-id=75ae5b53-68cf-4749-8f79-9c43a50fd031; bm_sz=6F6A31595189F7CEAF8A71424DC072A4~YAAQT2gBF03jz8qOAQAA+PQa5xdLqqvmjQo3qql/RSrk+NqgjmVtGRIpJ5fdyCwxL0VXYKaP3pbR9g9uEQWh5UXeVA9Y7V1m7P4NNPA2wKeGfYWBW+KWNGyMZxqUZSy9uAImtIyhIACEkuWppPtqSOdH4vOm1jvnIpZNwdjJ40gWe4OdNk+2mZF9LZGpSPN5W63KHWQIvJ4iH5vJLvoAaS+w4fiJUQj52oL6gxC2RBjBKPwxow2vambX2wX+CPZjRLt4NZMtr+f2bbmARnFCo/v3eRsPyS0JH12rulCjsr5LIQPNrvwt3MBukJtjlim+A82Bo9I2DgrIS9B1+gITDv42IX5px8tCUDTbVR2J6Yk61l/LMCVXt34MUCVLH7mYt71W1ejDyL4Ow4Ls~3293761~4342328; rxVisitor=1713274290937A7R6R3LAF697QOVKMJMDGTMITTEUMT0A; dtLatC=509; dtSa=-; dtCookie=v_4_srv_104_sn_D31AC96E3DF032551F710E6D44416A15_app-3Af32f70c4a19cb7f4_1_ol_0_perc_100000_mul_1_rcs-3Acss_0; _abck=AD827B41E34AB180244EB157C2E73EBF~0~YAAQUGgBFxym8NWOAQAAohcb5wu2ZGB60GcxQTa+6qpnA6FyqN4LrC5qrO0RImU4BIA5aiW5kpMSaiSyndfm39JpVX1S9C5VrOKKlePm9qqeBP9bYW6Iy7qKpBsP3xUYB36lvGG30+nKugXF2BlliLDzfCwaXSu1m
Source: global traffic HTTP traffic detected: GET /b/ss/amexpressenterpriseprod/1/JS-2.23.0-LDQM/s67650161295375?AQB=1&ndh=1&pf=1&t=16%2F3%2F2024%2015%3A31%3A42%202%20-120&mid=14483685490011032432048978651132711855&aamlh=7&ce=UTF-8&cl=34128000&pageName=us%7Coneamex%7Cser%7Chelp&g=https%3A%2F%2Fglobal.americanexpress.com%2Fhelp%3Finav%3DiNUtlContact%26extlink%3Dus-em-serv-footer-helpcenter&c.&cm.&ssf=1&.cm&omn.&identifier=axp-myca-route-config&element=credo-rampup&lob=ser&detail=ineligible&.omn&.c&cc=USD&events=event141&c3=en&c4=US&v4=axp-myca-route-config&v5=us%3E%3Eaxp-myca-route-config%3E%3Eimpression%3E%3Ecredo-rampup%3E%3Eineligible&c6=D%3Dv6&c10=prospect&c12=D%3Dv12&c14=D%3Dv14&c15=D%3Dv15&c16=D%3Dv16&c21=axp-myca-route-config&c22=us%3E%3Eaxp-myca-route-config%3E%3Eimpression%3E%3Ecredo-rampup%3E%3Eineligible&v27=US&c44=D%3Dv44&c49=Launch-OneAmex%3Av1.4.9-AM%3A2.23.0-VISID%3A5.0.0-DIL%3ANA-SS%3AY-msuite%3Atrue-PD%3A2024-04-03&c56=oneamex%3Adesktop&c64=D%3Dv64&c65=D%3Dv65&c67=D%3Dv67&c69=D%3Dv69&v74=us%7Coneamex%7Cser%7Chelp&v75=14483685490011032432048978651132711855&pe=lnk_o&pev2=Dynamic%20Page%20Action&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=5C36123F5245AF470A490D45%40AdobeOrg&AQE=1 HTTP/1.1Host: omns.americanexpress.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS0114bdae=0144d4a839586b141b989af62e52371e6fc307f9d3a5061f1757c48d9180280c953015a6c6dc95d5b236407f09d657189c894cb579; agent-id=75ae5b53-68cf-4749-8f79-9c43a50fd031; bm_sz=6F6A31595189F7CEAF8A71424DC072A4~YAAQT2gBF03jz8qOAQAA+PQa5xdLqqvmjQo3qql/RSrk+NqgjmVtGRIpJ5fdyCwxL0VXYKaP3pbR9g9uEQWh5UXeVA9Y7V1m7P4NNPA2wKeGfYWBW+KWNGyMZxqUZSy9uAImtIyhIACEkuWppPtqSOdH4vOm1jvnIpZNwdjJ40gWe4OdNk+2mZF9LZGpSPN5W63KHWQIvJ4iH5vJLvoAaS+w4fiJUQj52oL6gxC2RBjBKPwxow2vambX2wX+CPZjRLt4NZMtr+f2bbmARnFCo/v3eRsPyS0JH12rulCjsr5LIQPNrvwt3MBukJtjlim+A82Bo9I2DgrIS9B1+gITDv42IX5px8tCUDTbVR2J6Yk61l/LMCVXt34MUCVLH7mYt71W1ejDyL4Ow4Ls~3293761~4342328; rxVisitor=1713274290937A7R6R3LAF697QOVKMJMDGTMITTEUMT0A; dtLatC=509; dtSa=-; dtCookie=v_4_srv_104_sn_D31AC96E3DF032551F710E6D44416A15_app-3Af32f70c4a19cb7f4_1_ol_0_perc_100000_mul_1_rcs-3Acss_0; _abck=AD827B41E34AB180244EB157C2E73EBF~0~YAAQUGgBFxym8NWOAQAAohcb5wu2ZGB60GcxQTa+6qpnA6FyqN4LrC5qrO0RImU4BIA5aiW5kpMSaiSyndfm39JpVX1S9C5VrOKKlePm9qqeBP9bYW6Iy7qKpBsP3xUYB36lvGG30+nKugXF2BlliLDzfCwaXSu1mXM8QrQC/1pLZU9IMUL+Xd7YLjPlWK7R8OkqushCcrWmU0Z8UNvySw6H36ckn7kVb74EibUOlgNgtg3l8YqVIigkF1WhtKEz6PsqbZ8oa/aADoHU3xYQBLcjAXjQkb8zA7V6/swvOTxG9IFfROLdI5inH5Ekc1pUAyTn1mvUZihn7Z+D5+RQBw6w7sE/nU7wgoFoU8sLmvC19Zmav3geNzaUhXZ5j7rF/R3U84iksSTiDDNRG6kw2MqWYlSBD4zoUi
Source: global traffic HTTP traffic detected: GET /b/ss/amexpressenterpriseprod/1/JS-2.23.0-LDQM/s67650161295375?AQB=1&ndh=1&pf=1&t=16%2F3%2F2024%2015%3A31%3A42%202%20-120&mid=14483685490011032432048978651132711855&aamlh=7&ce=UTF-8&cl=34128000&pageName=us%7Coneamex%7Cser%7Chelp&g=https%3A%2F%2Fglobal.americanexpress.com%2Fhelp%3Finav%3DiNUtlContact%26extlink%3Dus-em-serv-footer-helpcenter&c.&cm.&ssf=1&.cm&omn.&identifier=axp-myca-route-config&element=credo-rampup&lob=ser&detail=ineligible&.omn&.c&cc=USD&events=event141&c3=en&c4=US&v4=axp-myca-route-config&v5=us%3E%3Eaxp-myca-route-config%3E%3Eimpression%3E%3Ecredo-rampup%3E%3Eineligible&c6=D%3Dv6&c10=prospect&c12=D%3Dv12&c14=D%3Dv14&c15=D%3Dv15&c16=D%3Dv16&c21=axp-myca-route-config&c22=us%3E%3Eaxp-myca-route-config%3E%3Eimpression%3E%3Ecredo-rampup%3E%3Eineligible&v27=US&c44=D%3Dv44&c49=Launch-OneAmex%3Av1.4.9-AM%3A2.23.0-VISID%3A5.0.0-DIL%3ANA-SS%3AY-msuite%3Atrue-PD%3A2024-04-03&c56=oneamex%3Adesktop&c64=D%3Dv64&c65=D%3Dv65&c67=D%3Dv67&c69=D%3Dv69&v74=us%7Coneamex%7Cser%7Chelp&v75=14483685490011032432048978651132711855&pe=lnk_o&pev2=Dynamic%20Page%20Action&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=5C36123F5245AF470A490D45%40AdobeOrg&AQE=1 HTTP/1.1Host: omns.americanexpress.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS0114bdae=0144d4a839586b141b989af62e52371e6fc307f9d3a5061f1757c48d9180280c953015a6c6dc95d5b236407f09d657189c894cb579; agent-id=75ae5b53-68cf-4749-8f79-9c43a50fd031; bm_sz=6F6A31595189F7CEAF8A71424DC072A4~YAAQT2gBF03jz8qOAQAA+PQa5xdLqqvmjQo3qql/RSrk+NqgjmVtGRIpJ5fdyCwxL0VXYKaP3pbR9g9uEQWh5UXeVA9Y7V1m7P4NNPA2wKeGfYWBW+KWNGyMZxqUZSy9uAImtIyhIACEkuWppPtqSOdH4vOm1jvnIpZNwdjJ40gWe4OdNk+2mZF9LZGpSPN5W63KHWQIvJ4iH5vJLvoAaS+w4fiJUQj52oL6gxC2RBjBKPwxow2vambX2wX+CPZjRLt4NZMtr+f2bbmARnFCo/v3eRsPyS0JH12rulCjsr5LIQPNrvwt3MBukJtjlim+A82Bo9I2DgrIS9B1+gITDv42IX5px8tCUDTbVR2J6Yk61l/LMCVXt34MUCVLH7mYt71W1ejDyL4Ow4Ls~3293761~4342328; rxVisitor=1713274290937A7R6R3LAF697QOVKMJMDGTMITTEUMT0A; dtLatC=509; dtSa=-; dtCookie=v_4_srv_104_sn_D31AC96E3DF032551F710E6D44416A15_app-3Af32f70c4a19cb7f4_1_ol_0_perc_100000_mul_1_rcs-3Acss_0; _abck=AD827B41E34AB180244EB157C2E73EBF~0~YAAQUGgBFxym8NWOAQAAohcb5wu2ZGB60GcxQTa+6qpnA6FyqN4LrC5qrO0RImU4BIA5aiW5kpMSaiSyndfm39JpVX1S9C5VrOKKlePm9qqeBP9bYW6Iy7qKpBsP3xUYB36lvGG30+nKugXF2BlliLDzfCwaXSu1mXM8QrQC/1pLZU9IMUL+Xd7YLjPlWK7R8OkqushCcrWmU0Z8UNvySw6H36ckn7kVb74EibUOlgNgtg3l8YqVIigkF1WhtKEz6PsqbZ8oa/aADoHU3xYQBLcjAXjQkb8zA7V6/swvOTxG9IFfROLdI5inH5Ekc1pUAyTn1mvUZihn7Z+D5+RQBw6w7sE/nU7wgoFoU8sLmvC19Zmav3geNzaUhXZ5j7rF/R3U84iksSTiDDNRG6kw2MqWYlSBD4zoUiPFl9c7ypAI~-1~-1~-1; rxvt=1713276099040|1713274290940; dtPC=$274290934_630h-vCCRUAIBSCBAUJCNRSUGTAFBDWCRAFKQA-0e0; AMCVS_5C36123F5245AF470A490D45%40AdobeOrg=1; s_ecid=MCMID%7C144836854900110324320489
Source: global traffic HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiSocsBCIWgzQEI3L3NAQjpxc0BCJHKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /async/ddljson?async=ntp:2 HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiSocsBCIWgzQEI3L3NAQjpxc0BCJHKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRRtTk0GNv7-bAGIjCutrdc__jP0Ewy3i-m2egggo-7ZmryQzEGXexmB4-11OBM3nprFLRWxeudB_gRK98yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiSocsBCIWgzQEI3L3NAQjpxc0BCJHKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-16-13; NID=513=HiYTcYVFE12zfZ5RF4UZiNIh43EgTh3zpY5SDtyZHLD4cR6h-fHb5eXqkaLQaQss9tPU_nAzWqJ-r8tm2nzuwJVuJgSg8m80omXLQLI9kC-mLI67INlpFzc2Xm6nACmdJHvvKlrhu1n0my3amXjvrdO281LsrYSdSQJKKM41sZY
Source: global traffic HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRRtTk0GNv7-bAGIjDiFp97vxk7IW7qwjFYYBhxwkHmojLuIhALKDnO0DQ2z_YXRZ4ybx5vwHqH-UJyuSIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-16-13; NID=513=ggn58Oi5KKSghXHMWIYnjVKSl7PEG1cKs3hmIzSRQ1Tn7Ea15F50Zfg1_H_HHMd7_w5NryrE4_eTvXY49r5G-ejab8dhmje4SCAwDOesgz5bjWCTGZWonX8-SeCEBBb32Xu0tJ7bttTzafiejNdUEbMwb3nwPE4IF65UK62RK3A
Source: global traffic HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/async/ddljson%3Fasync%3Dntp:2&q=EgRRtTk0GNv7-bAGIjAB5ca-1h2npjbKyRJrY0x7oVX9EvE_hx3CS29R-qtGI7R0K5dKFNaff9s5a-f5vCUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-16-13; NID=513=KR6K9V6ZtjZf1vKqUgOCyawpR6eIS5pHtrHBKK9hd2Rn181bbOmhSJTXvOXsy0He6WiQB6xc2uxrxNpsVJc7iR0T1Sq2l-jZJtKYV9vxzkzWvlEx8rLgeFKLa2eT8r9bC8N6WSS2AirqkYi_QNeD-iS3ZnAW1KNqcfFonpYaKoQ
Source: global traffic HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiSocsBCIWgzQEI3L3NAQjpxc0BCJHKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-16-13; NID=513=KR6K9V6ZtjZf1vKqUgOCyawpR6eIS5pHtrHBKK9hd2Rn181bbOmhSJTXvOXsy0He6WiQB6xc2uxrxNpsVJc7iR0T1Sq2l-jZJtKYV9vxzkzWvlEx8rLgeFKLa2eT8r9bC8N6WSS2AirqkYi_QNeD-iS3ZnAW1KNqcfFonpYaKoQ
Source: global traffic HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=7&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiSocsBCIWgzQEI3L3NAQjpxc0BCJHKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-16-13; NID=513=KR6K9V6ZtjZf1vKqUgOCyawpR6eIS5pHtrHBKK9hd2Rn181bbOmhSJTXvOXsy0He6WiQB6xc2uxrxNpsVJc7iR0T1Sq2l-jZJtKYV9vxzkzWvlEx8rLgeFKLa2eT8r9bC8N6WSS2AirqkYi_QNeD-iS3ZnAW1KNqcfFonpYaKoQ
Source: unknown DNS traffic detected: queries for: global.americanexpress.com
Source: chromecache_282.1.dr, chromecache_157.1.dr, chromecache_222.1.dr String found in binary or memory: http://feross.org
Source: chromecache_247.1.dr, chromecache_223.1.dr String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_245.1.dr String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_237.1.dr, chromecache_248.1.dr String found in binary or memory: https://americanexpress.com/en-us/banking/business/checking/accounts/
Source: chromecache_230.1.dr String found in binary or memory: https://assets.adobedtm.com/98caf8fccc463fd7e47088b35e73b27720bb5cc1/satelliteLib-4454a9ef97c1c8cd89
Source: chromecache_230.1.dr String found in binary or memory: https://assets.adobedtm.com/98caf8fccc463fd7e47088b35e73b27720bb5cc1/satelliteLib-bea3c9697c62409967
Source: chromecache_230.1.dr String found in binary or memory: https://assets.adobedtm.com/98caf8fccc463fd7e47088b35e73b27720bb5cc1/satelliteLib-c5299abd23ef05bd6d
Source: chromecache_230.1.dr String found in binary or memory: https://assets.adobedtm.com/98caf8fccc463fd7e47088b35e73b27720bb5cc1/satelliteLib-f424e4c1e880782914
Source: chromecache_230.1.dr String found in binary or memory: https://assets.adobedtm.com/dcb19cbd6cbf/333b39a46679/launch-df6a13efe609-staging.min.js
Source: chromecache_230.1.dr String found in binary or memory: https://assets.adobedtm.com/dcb19cbd6cbf/61650f53735f/launch-77374eae9c9b-staging.min.js
Source: chromecache_230.1.dr String found in binary or memory: https://assets.adobedtm.com/dcb19cbd6cbf/66bfa1f1c370/launch-a84bcfcd9f88-staging.min.js
Source: chromecache_230.1.dr String found in binary or memory: https://assets.adobedtm.com/dcb19cbd6cbf/6ea2f89ca33d/launch-25c1ded7854b-staging.min.js
Source: chromecache_230.1.dr String found in binary or memory: https://assets.adobedtm.com/dcb19cbd6cbf/6ea2f89ca33d/launch-ffeccfbfebd3.min.js
Source: chromecache_230.1.dr String found in binary or memory: https://assets.adobedtm.com/dcb19cbd6cbf/8e98299b4e37/launch-186af9da7404-staging.min.js
Source: chromecache_230.1.dr String found in binary or memory: https://assets.adobedtm.com/dcb19cbd6cbf/8e98299b4e37/launch-f60a62d583bd.min.js
Source: chromecache_230.1.dr String found in binary or memory: https://assets.adobedtm.com/dcb19cbd6cbf/8fe231718838/launch-5a77dcd96b5f-staging.min.js
Source: chromecache_230.1.dr String found in binary or memory: https://cdaas-dev.americanexpress.com/cdaas/api/axpi/omniture/launch/1.4.9/launch-688f678fbf27-stagi
Source: chromecache_163.1.dr String found in binary or memory: https://cdaas-dev.americanexpress.com/one/axp-script-supplier/5.1.5/script-supplier.js
Source: chromecache_282.1.dr, chromecache_157.1.dr, chromecache_222.1.dr String found in binary or memory: https://feross.org/opensource
Source: chromecache_240.1.dr String found in binary or memory: https://github.com/facebook/regenerator/blob/main/LICENSE
Source: chromecache_244.1.dr, chromecache_284.1.dr, chromecache_222.1.dr String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_237.1.dr, chromecache_248.1.dr String found in binary or memory: https://global.americanexpress.com/banking/dashboard
Source: chromecache_237.1.dr, chromecache_248.1.dr String found in binary or memory: https://global.americanexpress.com/card-benefits/view-all?opaqueAccountId=
Source: chromecache_237.1.dr, chromecache_248.1.dr String found in binary or memory: https://global.americanexpress.com/customer/profile
Source: chromecache_237.1.dr, chromecache_248.1.dr String found in binary or memory: https://global.americanexpress.com/dashboard
Source: chromecache_237.1.dr, chromecache_248.1.dr String found in binary or memory: https://global.americanexpress.com/overview
Source: chromecache_258.1.dr, chromecache_151.1.dr String found in binary or memory: https://global.americanexpress.com/payments/pay
Source: chromecache_216.1.dr String found in binary or memory: https://iwmapapi.americanexpress.com/beacon
Source: chromecache_245.1.dr String found in binary or memory: https://lodash.com/
Source: chromecache_245.1.dr String found in binary or memory: https://lodash.com/license
Source: chromecache_245.1.dr String found in binary or memory: https://openjsf.org/
Source: chromecache_230.1.dr String found in binary or memory: https://qwww.aexp-static.com/cdaas/api/axpi/omniture/adobe/launch/intranet/1.4.1/launch-80e343e58fb8
Source: chromecache_230.1.dr String found in binary or memory: https://qwww.aexp-static.com/cdaas/api/axpi/omniture/launch/1.4.9/launch-688f678fbf27-staging.min.js
Source: chromecache_163.1.dr String found in binary or memory: https://qwww.aexp-static.com/cdaas/one/axp-script-supplier/5.1.5/script-supplier.js
Source: chromecache_282.1.dr, chromecache_222.1.dr String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: chromecache_240.1.dr String found in binary or memory: https://ucmapi.americanexpress.com/api/consent/ext/record/
Source: chromecache_240.1.dr String found in binary or memory: https://ucmapi.americanexpress.com/api/consent/management/
Source: chromecache_163.1.dr String found in binary or memory: https://ucmapi.americanexpress.com/api/consent/management/report/error
Source: chromecache_240.1.dr String found in binary or memory: https://ucmapi.americanexpress.com/api/v1/geo_location/check
Source: chromecache_230.1.dr String found in binary or memory: https://www.aexp-static.com/cdaas/api/axpi/omniture/adobe/launch/intranet/1.4.1/launch-355955701c68.
Source: chromecache_275.1.dr String found in binary or memory: https://www.aexp-static.com/cdaas/api/axpi/omniture/launch/1.4.9/dcb19cbd6cbf/b4385da1798a/74e098123
Source: chromecache_230.1.dr, chromecache_287.1.dr String found in binary or memory: https://www.aexp-static.com/cdaas/api/axpi/omniture/launch/1.4.9/launch-b363d6c28b7c.min.js
Source: chromecache_269.1.dr, chromecache_221.1.dr String found in binary or memory: https://www.aexp-static.com/cdaas/dxt-vendor-shared-scripts/adobe-wrapper/1.6.6/adobe-wrapper.js
Source: chromecache_191.1.dr, chromecache_140.1.dr String found in binary or memory: https://www.aexp-static.com/cdaas/one/axp-chat-bootstrap/1.5.1/chatTaggingBootStrap.js
Source: chromecache_196.1.dr, chromecache_289.1.dr String found in binary or memory: https://www.aexp-static.com/cdaas/one/axp-chat-router/1.1.5/chatWrapper.js
Source: chromecache_163.1.dr String found in binary or memory: https://www.aexp-static.com/cdaas/one/axp-script-supplier/5.1.5/script-supplier.js
Source: chromecache_252.1.dr, chromecache_156.1.dr String found in binary or memory: https://www.aexp-static.com/cdaas/one/dxt-script-supplier-helper/1.2.0/dxt-script-supplier-helper.js
Source: chromecache_152.1.dr, chromecache_232.1.dr String found in binary or memory: https://www.aexp-static.com/cdaas/one/one-stream-data-handler/0.1.2/oneStream.js
Source: chromecache_290.1.dr String found in binary or memory: https://www.aexp-static.com/cdaas/one/qualtrics/1.71.0/
Source: chromecache_243.1.dr, chromecache_285.1.dr String found in binary or memory: https://www.aexp-static.com/cdaas/one/qualtrics/1.71.0/qualtricsIntercept.js
Source: chromecache_153.1.dr, chromecache_169.1.dr String found in binary or memory: https://www.aexp-static.com/cdaas/user-consent-management/ucm/v1.13.0/UCM.js
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/be/fr/legal/politique-cookie.html?showoverlay=false
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/be/nl/legal/cookiebeleid.html?showoverlay=false
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/content/dam/amex/us/company/Privacy/California_Privacy_Notice.pdf
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/cz-cz/spolecnost/pravni/centrum-ochrany-osobnich-udaju/o-souborech-c
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/da-dk/selskab/legal/privatlivspolitik/angaende-cookies?showoverlay=f
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/de-at/firma/legal/datenschutz-center/cookie-informationen?showoverla
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/en-ca/company/legal/privacy-centre/about-cookies/?showoverlay=false
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/en-ca/company/legal/privacy-centre/privacy-statement/?showoverlay=fa
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/en-cz/company/legal/privacy-centre/about-cookies/?showoverlay=false
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/en-hu/company/legal/privacy-centre/about-cookies/?showoverlay=false
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/en-pl/company/legal/privacy-centre/about-cookies/?showoverlay=false
Source: chromecache_237.1.dr, chromecache_248.1.dr String found in binary or memory: https://www.americanexpress.com/en-us/banking/personal/savings/dashboard
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/es/legal/informacion-sobre-los-cookies.html?showoverlay=false
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/fi/legal/yksityisyys/cookies/index.html?showoverlay=false
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/fr-ca/societes/legale/centre-de-confidentialite/a-propos-des-cookies
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/fr-ca/societes/legale/centre-de-confidentialite/declaration-de-confi
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/fr/legal/about-cookies.html?showoverlay=false
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/germany/legal/about_cookies.shtml?showoverlay=false
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/hu-hu/ceg/jogi/adatvedelem/a-sutikrol/index.html?showoverlay=false
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/icc/cookies.html?showoverlay=false
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/italy/legal/about_cookies.shtml?showoverlay=false
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/nl/about-cookies.html?showoverlay=false
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/no/legal/personvern/cookies/index.html?showoverlay=false
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/pl-pl/firma/prawny/centrum-prywatnosci/o-ciasteczkach/?showoverlay=f
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/se/legal/sekretess/cookies/index.html?showoverlay=false
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/uk/legal/about-cookies.shtml?showoverlay=false
Source: chromecache_258.1.dr, chromecache_151.1.dr String found in binary or memory: https://www.americanexpress.com/us/credit-cards/
Source: chromecache_258.1.dr, chromecache_151.1.dr String found in binary or memory: https://www.americanexpress.com/us/merchant/merchant-home.html
Source: chromecache_240.1.dr String found in binary or memory: https://www.americanexpress.com/us/privacy-center/
Source: chromecache_258.1.dr, chromecache_151.1.dr String found in binary or memory: https://www.americanexpress.com/us/small-business/
Source: chromecache_141.1.dr, chromecache_233.1.dr String found in binary or memory: https://www.dynatrace.com/company/trust-center/customers/reports/
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49693
Source: unknown Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49683 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.18:49693 version: TLS 1.2
Source: unknown HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.18:49697 version: TLS 1.2
Source: unknown HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.18:49698 version: TLS 1.2
Source: unknown HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.18:49705 version: TLS 1.2
Source: classification engine Classification label: clean1.win@15/230@52/11
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps Jump to behavior
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://global.americanexpress.com/help?inav=iNUtlContact&extlink=us-em-serv-footer-helpcenter
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1776 --field-trial-handle=1948,i,17101978054004084476,12410038309744272020,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1776 --field-trial-handle=1948,i,17101978054004084476,12410038309744272020,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: Google Drive.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Window Recorder Window detected: More than 3 window changes detected
Stores files to the Windows start menu directory
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk Jump to behavior
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 process2 2 Behavior Graph ID: 1426758 URL: https://global.americanexpr... Startdate: 16/04/2024 Architecture: WINDOWS Score: 1 5 chrome.exe 9 2->5         started        dnsIp3 11 192.168.2.18, 138, 443, 49329 unknown unknown 5->11 13 192.168.2.4 unknown unknown 5->13 15 3 other IPs or domains 5->15 8 chrome.exe 5->8         started        process4 dnsIp5 17 commerce.ss-omtrdc.net 192.243.240.8, 443, 49740 OMNITUREUS United States 8->17 19 www.google.com 64.233.177.103, 443, 49704, 49893 GOOGLEUS United States 8->19 21 22 other IPs or domains 8->21
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
63.140.39.72
 unknown United States
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
192.243.240.8
 commerce.ss-omtrdc.net United States
15224 OMNITUREUS false
52.4.85.254
 dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com United States
14618 AMAZON-AESUS false
63.140.38.236
 americanexpress.com.ssl.d2.sc.omtrdc.net United States
4134 CHINANET-BACKBONENo31Jin-rongStreetCN false
3.223.253.145
 unknown United States
14618 AMAZON-AESUS false
239.255.255.250
 unknown Reserved
unknown unknown false
64.233.177.103
 www.google.com United States
15169 GOOGLEUS false

Private

IP
192.168.2.18
192.168.2.4
192.168.2.6
192.168.2.5

Contacted Domains

Name IP Active
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com 52.4.85.254 true
www.google.com 64.233.177.103 true
americanexpress.com.ssl.d2.sc.omtrdc.net 63.140.38.236 true
commerce.ss-omtrdc.net 192.243.240.8 true
sp100500b5.guided.ss-omtrdc.net unknown unknown
graph.americanexpress.com unknown unknown
assets.adobedtm.com unknown unknown
siteintercept.qualtrics.com unknown unknown
dynatracepsg.americanexpress.com unknown unknown
mycaoneslinger.americanexpress.com unknown unknown
iwmapapi.americanexpress.com unknown unknown
inbound.americanexpress.com unknown unknown
apigw.americanexpress.com unknown unknown
omns.americanexpress.com unknown unknown
one-xp.americanexpress.com unknown unknown
functions.americanexpress.com unknown unknown
global.americanexpress.com unknown unknown
dpm.demdex.net unknown unknown
www.aexp-static.com unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=7&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw false
    		high
    https://www.google.com/async/newtab_promos false
      		high
      https://www.google.com/sorry/index?continue=https://www.google.com/async/ddljson%3Fasync%3Dntp:2&q=EgRRtTk0GNv7-bAGIjAB5ca-1h2npjbKyRJrY0x7oVX9EvE_hx3CS29R-qtGI7R0K5dKFNaff9s5a-f5vCUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM false
        		high
        https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRRtTk0GNv7-bAGIjCutrdc__jP0Ewy3i-m2egggo-7ZmryQzEGXexmB4-11OBM3nprFLRWxeudB_gRK98yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM false
          		high
          https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw false
            		high
            https://www.google.com/async/ddljson?async=ntp:2 false
              		high
              https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRRtTk0GNv7-bAGIjDiFp97vxk7IW7qwjFYYBhxwkHmojLuIhALKDnO0DQ2z_YXRZ4ybx5vwHqH-UJyuSIyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM false
                		high
                https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw false
                  		high
                  https://dpm.demdex.net/id?d_visid_ver=5.0.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=5C36123F5245AF470A490D45%40AdobeOrg&d_nsid=15&ts=1713274301023 false
                    		high
                    https://dpm.demdex.net/id/rd?d_visid_ver=5.0.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=5C36123F5245AF470A490D45%40AdobeOrg&d_nsid=15&ts=1713274301023 false
                      		high
                      https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0 false
                        		high